LocalAccessCredentialData.cpp

Go to the documentation of this file.

/*
 * Distributed under the OpenDDS License.
 * See: http://www.OpenDDS.org/license.html
 */

#include "LocalAccessCredentialData.h"

#include "dds/DCPS/security/CommonUtilities.h"
#include "dds/DCPS/security/framework/Properties.h"

#include "dds/DCPS/debug.h"

OPENDDS_BEGIN_VERSIONED_NAMESPACE_DECL

namespace OpenDDS {
namespace Security {

LocalAccessCredentialData::LocalAccessCredentialData()
{

}

LocalAccessCredentialData::~LocalAccessCredentialData()
{
}

bool LocalAccessCredentialData::load(const DDS::PropertySeq& props,
                                     DDS::Security::SecurityException& ex)
{
  for (unsigned int i = 0; i < props.length(); ++i) {
    const std::string name(props[i].name);
    const std::string value(props[i].value);

    if (name == DDS::Security::Properties::AccessPermissionsCA) {
      ca_cert_.reset(new SSL::Certificate(value));

    } else if (name == DDS::Security::Properties::AccessGovernance) {
      if (!governance_doc_.load(value, ex)) {
        return false;
      }

    } else if (name == DDS::Security::Properties::AccessPermissions) {
      if (!permissions_doc_.load(value, ex)) {
        return false;
      }
    }
  }

  if (! ca_cert_) {
    CommonUtilities::set_security_error(ex, -1, 0, "LocalAccessCredentialData::load: CA certificate data not provided");
    return false;
  }

  if (governance_doc_.original().length() == 0) {
    CommonUtilities::set_security_error(ex, -1, 0, "LocalAccessCredentialData::load: Governance data not provided");
    return false;
  }

  if (permissions_doc_.original().length() == 0) {
    CommonUtilities::set_security_error(ex, -1, 0, "LocalAccessCredentialData::load: Permissions data not provided");
    return false;
  }

  return true;
}

bool LocalAccessCredentialData::verify(DDS::Security::SecurityException& ex)
{
  if (!governance_doc_.verify(*ca_cert_)) {
    CommonUtilities::set_security_error(ex, -1, 0, "LocalAccessCredentialData::verify: Governance signature not verified");
    return false;
  } else if (DCPS::DCPS_debug_level) {
    ACE_DEBUG((LM_DEBUG, ACE_TEXT("(%P|%t) LocalAccessCredentialData::verify: Governance signature verified\n")));
  }

  if (!permissions_doc_.verify(*ca_cert_)) {
    CommonUtilities::set_security_error(ex, -1, 0, "LocalAccessCredentialData::verify: Permissions signature not verified");
    return false;
  } else if (DCPS::DCPS_debug_level) {
    ACE_DEBUG((LM_DEBUG, ACE_TEXT("(%P|%t) AccessControlBuiltInImpl::validate_local_permissions: Permissions signature verified\n")));
  }

  return true;
}

}
}

OPENDDS_END_VERSIONED_NAMESPACE_DECL