1 files changed, 152 insertions, 0 deletions
diff --git a/src/lib/x509/certstor.cpp b/src/lib/x509/certstor.cpp
new file mode 100644
index 000000000..24cd84de7
--- /dev/null
+++ b/src/lib/x509/certstor.cpp
@@ -0,0 +1,152 @@
+/*
+* Certificate Store
+* (C) 1999-2010,2013 Jack Lloyd
+*
+* Botan is released under the Simplified BSD License (see license.txt)
+*/
+
+#include <botan/certstor.h>
+#include <botan/internal/filesystem.h>
+
+namespace Botan {
+
+std::shared_ptr<const X509_CRL> Certificate_Store::find_crl_for(const X509_Certificate&) const
+   {
+   return std::shared_ptr<const X509_CRL>();
+   }
+
+void Certificate_Store_In_Memory::add_certificate(const X509_Certificate& cert)
+   {
+   for(size_t i = 0; i != m_certs.size(); ++i)
+      {
+      if(*m_certs[i] == cert)
+         return;
+      }
+
+   m_certs.push_back(std::make_shared<X509_Certificate>(cert));
+   }
+
+std::vector<X509_DN> Certificate_Store_In_Memory::all_subjects() const
+   {
+   std::vector<X509_DN> subjects;
+   for(size_t i = 0; i != m_certs.size(); ++i)
+      subjects.push_back(m_certs[i]->subject_dn());
+   return subjects;
+   }
+
+namespace {
+
+template<typename T>
+std::shared_ptr<const X509_Certificate>
+cert_search(const X509_DN& subject_dn, const std::vector<byte>& key_id,
+            const std::vector<std::shared_ptr<T>>& certs)
+   {
+   for(size_t i = 0; i != certs.size(); ++i)
+      {
+      // Only compare key ids if set in both call and in the cert
+      if(key_id.size())
+         {
+         std::vector<byte> skid = certs[i]->subject_key_id();
+
+         if(skid.size() && skid != key_id) // no match
+            continue;
+         }
+
+      if(certs[i]->subject_dn() == subject_dn)
+         return certs[i];
+      }
+
+   return std::shared_ptr<const X509_Certificate>();
+   }
+
+}
+
+std::shared_ptr<const X509_Certificate>
+Certificate_Store_In_Memory::find_cert(const X509_DN& subject_dn,
+                                       const std::vector<byte>& key_id) const
+   {
+   return cert_search(subject_dn, key_id, m_certs);
+   }
+
+void Certificate_Store_In_Memory::add_crl(const X509_CRL& crl)
+   {
+   X509_DN crl_issuer = crl.issuer_dn();
+
+   for(size_t i = 0; i != m_crls.size(); ++i)
+      {
+      // Found an update of a previously existing one; replace it
+      if(m_crls[i]->issuer_dn() == crl_issuer)
+         {
+         if(m_crls[i]->this_update() <= crl.this_update())
+            m_crls[i] = std::make_shared<X509_CRL>(crl);
+         return;
+         }
+      }
+
+   // Totally new CRL, add to the list
+   m_crls.push_back(std::make_shared<X509_CRL>(crl));
+   }
+
+std::shared_ptr<const X509_CRL> Certificate_Store_In_Memory::find_crl_for(const X509_Certificate& subject) const
+   {
+   const std::vector<byte>& key_id = subject.authority_key_id();
+
+   for(size_t i = 0; i != m_crls.size(); ++i)
+      {
+      // Only compare key ids if set in both call and in the CRL
+      if(key_id.size())
+         {
+         std::vector<byte> akid = m_crls[i]->authority_key_id();
+
+         if(akid.size() && akid != key_id) // no match
+            continue;
+         }
+
+      if(m_crls[i]->issuer_dn() == subject.issuer_dn())
+         return m_crls[i];
+      }
+
+   return std::shared_ptr<const X509_CRL>();
+   }
+
+Certificate_Store_In_Memory::Certificate_Store_In_Memory(const X509_Certificate& cert)
+   {
+   add_certificate(cert);
+   }
+
+#if defined(BOTAN_TARGET_OS_HAS_FILESYSTEM)
+Certificate_Store_In_Memory::Certificate_Store_In_Memory(const std::string& dir)
+   {
+   if(dir.empty())
+      return;
+
+   std::vector<std::string> maybe_certs = get_files_recursive(dir);
+   for(auto&& cert_file : maybe_certs)
+      {
+      try
+         {
+         m_certs.push_back(std::make_shared<X509_Certificate>(cert_file));
+         }
+      catch(std::exception&)
+         {
+         }
+      }
+   }
+#endif
+
+std::shared_ptr<const X509_Certificate>
+Certificate_Store_Overlay::find_cert(const X509_DN& subject_dn,
+                                     const std::vector<byte>& key_id) const
+   {
+   return cert_search(subject_dn, key_id, m_certs);
+   }
+
+std::vector<X509_DN> Certificate_Store_Overlay::all_subjects() const
+   {
+   std::vector<X509_DN> subjects;
+   for(size_t i = 0; i != m_certs.size(); ++i)
+      subjects.push_back(m_certs[i]->subject_dn());
+   return subjects;
+   }
+
+}