OpenDDS::Security::SSL::verify_implementation Class Reference

List of all members.

Public Member Functions
	verify_implementation (EVP_PKEY *pkey)
	~verify_implementation ()
int	operator() (const DDS::OctetSeq &src, const std::vector< const DDS::OctetSeq * > &expected_contents)
Private Attributes
EVP_PKEY *	public_key
EVP_MD_CTX *	md_ctx
EVP_PKEY_CTX *	pkey_ctx

---

Detailed Description

Definition at line 173 of file Certificate.cpp.

---

Constructor & Destructor Documentation

OpenDDS::Security::SSL::verify_implementation::verify_implementation

(

EVP_PKEY *

pkey

)

[inline, explicit]

Definition at line 176 of file Certificate.cpp.

      : public_key(pkey), md_ctx(NULL), pkey_ctx(NULL)
    {
    }

OpenDDS::Security::SSL::verify_implementation::~verify_implementation

(

)

[inline]

Definition at line 180 of file Certificate.cpp.

References EVP_MD_CTX_free, and md_ctx.

{ EVP_MD_CTX_free(md_ctx); }

---

Member Function Documentation

int OpenDDS::Security::SSL::verify_implementation::operator()	(	const DDS::OctetSeq &	src,
		const std::vector< const DDS::OctetSeq * > &	expected_contents
	)			[inline]

Definition at line 182 of file Certificate.cpp.

References EVP_MD_CTX_new, md_ctx, OPENDDS_SSL_LOG_ERR, pkey_ctx, and public_key.

    {
      if (!public_key) return 1;

      int pk_id = 0;
      std::vector<const DDS::OctetSeq*>::const_iterator i, n;

      md_ctx = EVP_MD_CTX_new();
      if (!md_ctx) {
        OPENDDS_SSL_LOG_ERR("EVP_MD_CTX_new failed");
        return 1;
      }

      EVP_MD_CTX_init(md_ctx);

      if (1 != EVP_DigestVerifyInit(md_ctx, &pkey_ctx, EVP_sha256(), NULL,
                                    public_key)) {
        OPENDDS_SSL_LOG_ERR("EVP_DigestVerifyInit failed");
        return 1;
      }

      // Determine which signature type is being verified
      pk_id = EVP_PKEY_id(public_key);

      if (pk_id == EVP_PKEY_RSA) {
        if (1 !=
            EVP_PKEY_CTX_set_rsa_padding(pkey_ctx, RSA_PKCS1_PSS_PADDING)) {
          OPENDDS_SSL_LOG_ERR("EVP_PKEY_CTX_set_rsa_padding failed");
          return 1;
        }

        if (1 != EVP_PKEY_CTX_set_rsa_mgf1_md(pkey_ctx, EVP_sha256())) {
          OPENDDS_SSL_LOG_ERR("EVP_PKEY_CTX_set_rsa_mgf1_md failed");
          return 1;
        }
      }

      n = expected_contents.end();
      for (i = expected_contents.begin(); i != n; ++i) {
        if ((*i)->length() > 0) {
          if (1 != EVP_DigestVerifyUpdate(md_ctx, (*i)->get_buffer(),
                                          (*i)->length())) {
            OPENDDS_SSL_LOG_ERR("EVP_DigestVerifyUpdate failed");
            return 1;
          }
        }
      }

      int err = EVP_DigestVerifyFinal(md_ctx, src.get_buffer(), src.length());
      if (0 == err) {
        return 1;  // Verification failed, but no error occurred

      } else if (1 != err) {
        OPENDDS_SSL_LOG_ERR("EVP_DigestVerifyFinal failed");
        return 1;
      }

      return 0;
    }

---

Member Data Documentation

EVP_MD_CTX* OpenDDS::Security::SSL::verify_implementation::md_ctx [private]

Definition at line 245 of file Certificate.cpp.

Referenced by operator()(), and ~verify_implementation().

EVP_PKEY_CTX* OpenDDS::Security::SSL::verify_implementation::pkey_ctx [private]

Definition at line 246 of file Certificate.cpp.

Referenced by operator()().

EVP_PKEY* OpenDDS::Security::SSL::verify_implementation::public_key [private]

Definition at line 244 of file Certificate.cpp.

Referenced by operator()().

---

The documentation for this class was generated from the following file:

• Certificate.cpp