OpenDDS::Security::LocalAuthCredentialData Class Reference

#include <LocalAuthCredentialData.h>

Inheritance diagram for OpenDDS::Security::LocalAuthCredentialData:

Collaboration diagram for OpenDDS::Security::LocalAuthCredentialData:

Public Types
typedef DCPS::RcHandle< LocalAuthCredentialData >	shared_ptr

Public Member Functions
	LocalAuthCredentialData ()
virtual	~LocalAuthCredentialData ()
bool	load_access_permissions (const DDS::Security::PermissionsCredentialToken &src, DDS::Security::SecurityException &ex)
bool	load_credentials (const DDS::PropertySeq &props, DDS::Security::SecurityException &ex)
const SSL::Certificate &	get_ca_cert () const
const SSL::Certificate &	get_participant_cert () const
const SSL::PrivateKey &	get_participant_private_key () const
const DDS::OctetSeq &	get_access_permissions () const
bool	validate () const
Public Member Functions inherited from OpenDDS::DCPS::RcObject
virtual	~RcObject ()
virtual void	_add_ref ()
virtual void	_remove_ref ()
long	ref_count () const
WeakObject *	_get_weak_object () const

Private Attributes
SSL::Certificate::unique_ptr	ca_cert_
SSL::Certificate::unique_ptr	participant_cert_
SSL::PrivateKey::unique_ptr	participant_pkey_
DDS::OctetSeq	access_permissions_

Additional Inherited Members
Protected Member Functions inherited from OpenDDS::DCPS::RcObject
	RcObject ()

Detailed Description

Definition at line 42 of file LocalAuthCredentialData.h.

Member Typedef Documentation

shared_ptr

typedef DCPS::RcHandle<LocalAuthCredentialData> OpenDDS::Security::LocalAuthCredentialData::shared_ptr

Definition at line 44 of file LocalAuthCredentialData.h.

Constructor & Destructor Documentation

LocalAuthCredentialData()

OpenDDS::Security::LocalAuthCredentialData::LocalAuthCredentialData

(

)

Definition at line 68 of file LocalAuthCredentialData.cpp.

{
}

~LocalAuthCredentialData()

OpenDDS::Security::LocalAuthCredentialData::~LocalAuthCredentialData ( )

virtual

Definition at line 72 of file LocalAuthCredentialData.cpp.

{
}

Member Function Documentation

get_access_permissions()

const DDS::OctetSeq& OpenDDS::Security::LocalAuthCredentialData::get_access_permissions ( ) const

inline

Definition at line 70 of file LocalAuthCredentialData.h.

Referenced by OpenDDS::Security::AuthenticationBuiltInImpl::begin_handshake_reply(), and OpenDDS::Security::AuthenticationBuiltInImpl::begin_handshake_request().

  {
    return access_permissions_;
  }

get_ca_cert()

const SSL::Certificate& OpenDDS::Security::LocalAuthCredentialData::get_ca_cert ( ) const

inline

Definition at line 55 of file LocalAuthCredentialData.h.

Referenced by OpenDDS::Security::AuthenticationBuiltInImpl::begin_handshake_reply(), OpenDDS::Security::AuthenticationBuiltInImpl::get_identity_token(), and OpenDDS::Security::AuthenticationBuiltInImpl::process_handshake_reply().

  {
    return *ca_cert_;
  }

get_participant_cert()

const SSL::Certificate& OpenDDS::Security::LocalAuthCredentialData::get_participant_cert ( ) const

inline

Definition at line 60 of file LocalAuthCredentialData.h.

Referenced by OpenDDS::Security::AuthenticationBuiltInImpl::begin_handshake_reply(), OpenDDS::Security::AuthenticationBuiltInImpl::begin_handshake_request(), and OpenDDS::Security::AuthenticationBuiltInImpl::get_identity_token().

  {
    return *participant_cert_;
  }

get_participant_private_key()

const SSL::PrivateKey& OpenDDS::Security::LocalAuthCredentialData::get_participant_private_key ( ) const

inline

Definition at line 65 of file LocalAuthCredentialData.h.

Referenced by OpenDDS::Security::AuthenticationBuiltInImpl::begin_handshake_reply(), and OpenDDS::Security::AuthenticationBuiltInImpl::process_handshake_reply().

  {
    return *participant_pkey_;
  }

load_access_permissions()

bool OpenDDS::Security::LocalAuthCredentialData::load_access_permissions	(	const DDS::Security::PermissionsCredentialToken &	src,
		DDS::Security::SecurityException &	ex
	)

Definition at line 76 of file LocalAuthCredentialData.cpp.

References OpenDDS::Security::TokenReader::get_property_value(), and OpenDDS::Security::CommonUtilities::set_security_error().

{
  const char* cperm = TokenReader(src).get_property_value("dds.perm.cert");
  if (!cperm) {
    set_security_error(ex, -1, 0,
                       "LocalAuthCredentialData::load_access_permissions: "
                       "no 'dds.perm.cert' property provided");
    return false;
  }

  const size_t len = std::strlen(cperm);
  access_permissions_.length(static_cast<CORBA::ULong>(len + 1));
  std::memcpy(&access_permissions_[0], cperm, len + 1); // copies the NULL

  return true;
}

load_credentials()

bool OpenDDS::Security::LocalAuthCredentialData::load_credentials	(	const DDS::PropertySeq &	props,
		DDS::Security::SecurityException &	ex
	)

Definition at line 94 of file LocalAuthCredentialData.cpp.

References ACE_DEBUG, DDS::Security::Properties::AuthIdentityCA, DDS::Security::Properties::AuthIdentityCertificate, DDS::Security::Properties::AuthPassword, DDS::Security::Properties::AuthPrivateKey, OpenDDS::DCPS::DCPS_debug_level, LM_DEBUG, name, OPENDDS_END_VERSIONED_NAMESPACE_DECL, OpenDDS::Security::CommonUtilities::set_security_error(), and value.

{
  if (DCPS::DCPS_debug_level) {
    ACE_DEBUG((LM_DEBUG, "(%P|%t) LocalAuthCredentialData::load: Number of Properties: %i\n", props.length()));
  }

  std::string pkey_uri, password;
  for (unsigned int i = 0; i < props.length(); ++i) {
    const std::string name = props[i].name.in(), value = props[i].value.in();

    if (DCPS::DCPS_debug_level) {
      ACE_DEBUG((LM_DEBUG, "(%P|%t) LocalAuthCredentialData::load: property %i: %C: %C\n",
                 i, name.c_str(), value.c_str()));
    }

    if (name == DDS::Security::Properties::AuthIdentityCA) {
      ca_cert_.reset(new SSL::Certificate(value));

    } else if (name == DDS::Security::Properties::AuthPrivateKey) {
      pkey_uri = value;

    } else if (name == DDS::Security::Properties::AuthIdentityCertificate) {
      participant_cert_.reset(new SSL::Certificate(value));

    } else if (name == DDS::Security::Properties::AuthPassword) {
      password = value;

    }
  }

  if (!pkey_uri.empty()) {
    participant_pkey_.reset(new SSL::PrivateKey(pkey_uri, password));
  }

  if (!ca_cert_) {
    set_security_error(ex, -1, 0, "LocalAuthCredentialData::load: failed to load CA certificate");
    return false;

  } else if (!participant_cert_) {
    set_security_error(ex, -1, 0, "LocalAuthCredentialData::load: failed to load participant certificate");
    return false;

  } else if (!participant_pkey_) {
    set_security_error(ex, -1, 0, "LocalAuthCredentialData::load: failed to load participant private key");
    return false;
  }

  return true;
}

validate()

bool OpenDDS::Security::LocalAuthCredentialData::validate ( ) const

inline

Definition at line 75 of file LocalAuthCredentialData.h.

References ACE_ERROR, and LM_WARNING.

  {
    if (!participant_cert_) {
      ACE_ERROR((LM_WARNING,
                "(%P|%t) LocalAuthCredentialData::validate(): WARNING: participant_cert_ is null,"
                " some of the security properties might be missing!\n"));
      return false;
    }
    if (!ca_cert_) {
      ACE_ERROR((LM_WARNING,
        "(%P|%t) LocalAuthCredentialData::validate(): WARNING: ca_cert_ is null,"
        " some of the security properties might be missing!\n"));
      return false;
    }
    return X509_V_OK == participant_cert_->validate(*ca_cert_);
  }

Member Data Documentation

access_permissions_

DDS::OctetSeq OpenDDS::Security::LocalAuthCredentialData::access_permissions_

private

Definition at line 97 of file LocalAuthCredentialData.h.

ca_cert_

SSL::Certificate::unique_ptr OpenDDS::Security::LocalAuthCredentialData::ca_cert_

private

Definition at line 94 of file LocalAuthCredentialData.h.

participant_cert_

SSL::Certificate::unique_ptr OpenDDS::Security::LocalAuthCredentialData::participant_cert_

private

Definition at line 95 of file LocalAuthCredentialData.h.

participant_pkey_

SSL::PrivateKey::unique_ptr OpenDDS::Security::LocalAuthCredentialData::participant_pkey_

private

Definition at line 96 of file LocalAuthCredentialData.h.

---

The documentation for this class was generated from the following files:

• LocalAuthCredentialData.h
• LocalAuthCredentialData.cpp