blob: 5c2e28c39509b6298025d0c2f1a7f92b21488585 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
|
/*
(C) 2007 FlexSecure GmbH
2008 Jack Lloyd
*
* Distributed under the terms of the Botan license
*/
#include <botan/cvc_cert.h>
#include <botan/cvc_key.h>
#include <botan/ecdsa.h>
namespace Botan {
ASN1_Car EAC1_1_CVC::get_car() const
{
return m_car;
}
ASN1_Ced EAC1_1_CVC::get_ced() const
{
return m_ced;
}
ASN1_Cex EAC1_1_CVC::get_cex() const
{
return m_cex;
}
u32bit EAC1_1_CVC::get_chat_value() const
{
return m_chat_val;
}
/*
* Decode the TBSCertificate data
*/
void EAC1_1_CVC::force_decode()
{
SecureVector<byte> enc_pk;
SecureVector<byte> enc_chat_val;
u32bit cpi;
BER_Decoder tbs_cert(tbs_bits);
tbs_cert.decode(cpi, ASN1_Tag(41), APPLICATION)
.decode(m_car)
.start_cons(ASN1_Tag(73))
.raw_bytes(enc_pk)
.end_cons()
.decode(m_chr)
.start_cons(ASN1_Tag(76))
.decode(m_chat_oid)
.decode(enc_chat_val, OCTET_STRING, ASN1_Tag(19), APPLICATION)
.end_cons()
.decode(m_ced)
.decode(m_cex)
.verify_end();
if(enc_chat_val.size() != 1)
throw Decoding_Error("CertificateHolderAuthorizationValue was not of length 1");
if(cpi != 0)
throw Decoding_Error("EAC1_1 certificate´s cpi was not 0");
// FIXME: PK algos have no notion of EAC encoder/decoder currently
#if 0
ECDSA_PublicKey tmp_pk;
std::unique_ptr<EAC1_1_CVC_Decoder> dec = tmp_pk.cvc_eac1_1_decoder();
sig_algo = dec->public_key(enc_pk);
m_pk = tmp_pk;
m_chat_val = enc_chat_val[0];
self_signed = false;
if(m_car.iso_8859() == m_chr.iso_8859())
{
self_signed= true;
}
#endif
}
/*
* CVC Certificate Constructor
*/
EAC1_1_CVC::EAC1_1_CVC(std::shared_ptr<DataSource>& in)
{
init(in);
self_signed = false;
do_decode();
}
EAC1_1_CVC::EAC1_1_CVC(const std::string& in)
{
std::shared_ptr<DataSource> stream(new DataSource_Stream(in, true));
init(stream);
self_signed = false;
do_decode();
}
bool EAC1_1_CVC::operator==(EAC1_1_CVC const& rhs) const
{
return (tbs_data() == rhs.tbs_data()
&& get_concat_sig() == rhs.get_concat_sig());
}
}
|