X-Git-Url: https://main.carlh.net/gitweb/?a=blobdiff_plain;f=src%2Flib%2Fdcp.cc;h=f3b3b44969cca6aacd9657e22f1465c4f18053d1;hb=89ec77ff82b231445f2c5a4cf50d86e6cd910332;hp=0b80a3737db0e1903cec10d64367b7b23f365669;hpb=1f88a38a2a607c21988a403e76f315444c4be36b;p=dcpomatic.git diff --git a/src/lib/dcp.cc b/src/lib/dcp.cc index 0b80a3737..f3b3b4496 100644 --- a/src/lib/dcp.cc +++ b/src/lib/dcp.cc @@ -36,6 +36,31 @@ using std::list; using std::string; using boost::shared_ptr; +dcp::DecryptedKDM +DCP::decrypted_kdm () const +{ + try { + return dcp::DecryptedKDM (_dcp_content->kdm().get(), Config::instance()->decryption_chain()->key().get()); + } catch (dcp::KDMDecryptionError& e) { + /* Try to flesh out the error a bit */ + string const kdm_subject_name = _dcp_content->kdm()->recipient_x509_subject_name(); + bool on_chain = false; + shared_ptr dc = Config::instance()->decryption_chain(); + BOOST_FOREACH (dcp::Certificate i, dc->root_to_leaf()) { + if (i.subject() == kdm_subject_name) { + on_chain = true; + } + } + if (!on_chain) { + throw KDMError (_("KDM was not made for DCP-o-matic's decryption certificate."), e.what()); + } else if (on_chain && kdm_subject_name != dc->leaf().subject()) { + throw KDMError (_("KDM was made for DCP-o-matic but not for its leaf certificate."), e.what()); + } else { + throw; + } + } +} + /** Find all the CPLs in our directories, cross-add assets and return the CPLs */ list > DCP::cpls () const @@ -63,25 +88,9 @@ DCP::cpls () const } if (_dcp_content->kdm ()) { + dcp::DecryptedKDM k = decrypted_kdm (); BOOST_FOREACH (shared_ptr i, dcps) { - try { - i->add (dcp::DecryptedKDM (_dcp_content->kdm().get(), Config::instance()->decryption_chain()->key().get ())); - } catch (dcp::KDMDecryptionError& e) { - /* Flesh out the error a bit */ - string const kdm_subject_name = _dcp_content->kdm()->recipient_x509_subject_name(); - bool on_chain = false; - shared_ptr dc = Config::instance()->decryption_chain(); - BOOST_FOREACH (dcp::Certificate i, dc->root_to_leaf()) { - if (i.subject() == kdm_subject_name) { - on_chain = true; - } - } - if (!on_chain) { - throw KDMError (_("KDM was not made for DCP-o-matic's decryption certificate."), e.what()); - } else if (on_chain && kdm_subject_name != dc->leaf().subject()) { - throw KDMError (_("KDM was made for DCP-o-matic but not for its leaf certificate."), e.what()); - } - } + i->add (k); } }