#include "security_db.hh" #include "Params.hh" #include "converter.hh" #include "certificates_loader.hh" #include "EtsiTs103097Codec_Certificate.hh" #include "loggers.hh" security_db::security_db(): _certificates(), _hashed_id8s(), _issuers() { loggers::get_instance().log(">>> security_db::security_db"); } // End of ctor security_db::security_db(const std::string& p_db_path): security_db() { loggers::get_instance().log(">>> security_db::security_db: '%s'", p_db_path.c_str()); load_from_files(p_db_path); dump(); } // End of ctor security_db::~security_db() { clear(); } // End of dtor int security_db::clear() { _certificates.clear(); // Smart pointers will do the job _hashed_id8s.clear(); _issuers.clear(); return 0; } // End of clear method int security_db::get_certificate_id(const OCTETSTRING& p_hashed_id8, std::string& p_certifcate_id) const { loggers::get_instance().log_msg(">>> security_db::get_certificate_id: ", p_hashed_id8); std::vector key(static_cast(p_hashed_id8), p_hashed_id8.lengthof() + static_cast(p_hashed_id8)); std::map, std::string>::const_iterator it = _hashed_id8s.find(key); if (it == _hashed_id8s.cend()) { p_certifcate_id = ""; return -1; } p_certifcate_id = it->second; return 0; } int security_db::get_certificate_id_by_issuer(const OCTETSTRING& p_issuer, std::string& p_certifcate_id) const { loggers::get_instance().log_msg(">>> security_db::get_certificate_id_by_issuer: ", p_issuer); std::vector key(static_cast(p_issuer), p_issuer.lengthof() + static_cast(p_issuer)); std::map, std::string>::const_iterator it = _issuers.find(key); if (it == _issuers.cend()) { p_certifcate_id = ""; return -1; } p_certifcate_id = it->second; return 0; } int security_db::get_certificate(const std::string& p_certificate_id, OCTETSTRING& p_certificate) const { loggers::get_instance().log(">>> security_db::get_certificate: '%s'", p_certificate_id.c_str()); std::map >::const_iterator it = _certificates.find(p_certificate_id); if (it == _certificates.cend()) { loggers::get_instance().warning("security_db::get_certificate: record not found"); return -1; } const std::vector cert = it->second.get()->certificate(); p_certificate = OCTETSTRING(cert.size(), cert.data()); return 0; } int security_db::get_certificate(const std::string& p_certificate_id, IEEE1609dot2::CertificateBase& p_certificate) const { loggers::get_instance().log(">>> security_db::get_certificate: '%s'", p_certificate_id.c_str()); std::map >::const_iterator it = _certificates.find(p_certificate_id); if (it == _certificates.cend()) { loggers::get_instance().warning("security_db::get_certificate: record not found"); return -1; } p_certificate = it->second.get()->decoded_certificate(); return 0; } int security_db::get_issuer(const std::string& p_certificate_id, OCTETSTRING& p_hashed_id_issuer) const { loggers::get_instance().log(">>> security_db::get_issuer: '%s'", p_certificate_id.c_str()); std::map >::const_iterator it = _certificates.find(p_certificate_id); if (it == _certificates.cend()) { loggers::get_instance().warning("security_db::get_certificate: record not found"); return -1; } const std::vector issuer = it->second.get()->issuer(); p_hashed_id_issuer = OCTETSTRING(issuer.size(), issuer.data()); return 0; } int security_db::get_hashed_id(const std::string& p_certificate_id, OCTETSTRING& p_hashed_id) const { loggers::get_instance().log(">>> security_db::get_hashed_id: '%s'", p_certificate_id.c_str()); std::map >::const_iterator it = _certificates.find(p_certificate_id); if (it == _certificates.cend()) { loggers::get_instance().warning("security_db::get_certificate: record not found"); return -1; } const std::vector hashed_id = it->second.get()->hashed_id(); p_hashed_id = OCTETSTRING(hashed_id.size(), hashed_id.data()); return 0; } int security_db::get_private_key(const std::string& p_certificate_id, OCTETSTRING& p_private_key) const { loggers::get_instance().log(">>> security_db::get_private_key: '%s'", p_certificate_id.c_str()); std::map >::const_iterator it = _certificates.find(p_certificate_id); if (it == _certificates.cend()) { loggers::get_instance().warning("security_db::get_certificate: record not found"); return -1; } const std::vector private_key = it->second.get()->private_key(); p_private_key = OCTETSTRING(private_key.size(), private_key.data()); return 0; } int security_db::get_public_keys(const std::string& p_certificate_id, OCTETSTRING& p_public_key_x, OCTETSTRING& p_public_key_y) const { loggers::get_instance().log(">>> security_db::get_public_keys: '%s'", p_certificate_id.c_str()); std::map >::const_iterator it = _certificates.find(p_certificate_id); if (it == _certificates.cend()) { loggers::get_instance().warning("security_db::get_certificate: record not found"); return -1; } const std::vector public_key_x = it->second.get()->public_key_x(); p_public_key_x = OCTETSTRING(public_key_x.size(), public_key_x.data()); const std::vector public_key_y = it->second.get()->public_key_y(); p_public_key_y = OCTETSTRING(public_key_y.size(), public_key_y.data()); return 0; } int security_db::load_from_files(const std::string& p_db_path) { loggers::get_instance().log(">>> security_db::load_from_files: '%s'", p_db_path.c_str()); if (certificates_loader::get_instance().build_path(p_db_path) == -1) { loggers::get_instance().log(">>> security_db::load_from_files: certificates_loader::build_path method failed"); return -1; } if (certificates_loader::get_instance().load_certificates(_certificates, _hashed_id8s, _issuers) == -1) { loggers::get_instance().log(">>> security_db::load_from_files: certificates_loader::load_certificates method failed"); return -1; } return 0; } int security_db::store_certificate(const CHARSTRING& p_cert_id, const OCTETSTRING& p_cert, const OCTETSTRING& p_private_key, const OCTETSTRING& p_public_key_x, const OCTETSTRING& p_public_key_y, const OCTETSTRING& p_hashed_id8, const OCTETSTRING& p_issuer) { loggers::get_instance().log_msg(">>> security_db::store_certificate: ", p_cert_id); std::string key(static_cast(p_cert_id)); std::vector cert(static_cast(p_cert), static_cast(p_cert) + p_cert.lengthof()); std::vector private_key(static_cast(p_private_key), static_cast(p_private_key) + p_private_key.lengthof()); std::vector public_key_x(static_cast(p_public_key_x), static_cast(p_public_key_x) + p_public_key_x.lengthof()); std::vector public_key_y(static_cast(p_public_key_y), static_cast(p_public_key_y) + p_public_key_y.lengthof()); std::vector hashed_id8(static_cast(p_hashed_id8), static_cast(p_hashed_id8) + p_hashed_id8.lengthof()); std::vector issuer(static_cast(p_issuer), static_cast(p_issuer) + p_issuer.lengthof()); EtsiTs103097Codec_Certificate codec; IEEE1609dot2::CertificateBase decoded_certificate; codec.decode(p_cert, decoded_certificate); loggers::get_instance().log_msg("security_db::store_certificate: Decoded certificate: ", decoded_certificate); security_db_record* p = new security_db_record( key, // Certificate id cert, // Certificate decoded_certificate, issuer, // Hashed ID fo the issuer, empty for CA hashed_id8, // Hashed ID private_key, // Private key public_key_x, // Public key X public_key_y // Public key Y ); if (p == nullptr) { return -1; } std::map >::const_iterator i = _certificates.find(key); if (i != _certificates.cend()) { _certificates.erase(i); } std::map, std::string>::const_iterator h = _hashed_id8s.find(hashed_id8); if (h != _hashed_id8s.cend()) { _hashed_id8s.erase(h); } _certificates.insert(std::pair >(key, std::unique_ptr(p))); _hashed_id8s.insert(std::pair, std::string&>(hashed_id8, key)); dump(); if (certificates_loader::get_instance().save_certificate(*p) == -1) { return -1; } return 0; } void security_db::dump() const { loggers::get_instance().log("security_db::dump_certificates: # items = %d", _certificates.size()); for (std::map >::const_iterator it = _certificates.cbegin(); it != _certificates.cend(); ++it) { security_db_record* p = it->second.get(); loggers::get_instance().log("security_db::dump: certificate_id = %s", p->certificate_id().c_str()); loggers::get_instance().log_to_hexa("security_db::dump: certificate = ", p->certificate().data(), p->certificate().size()); loggers::get_instance().log_msg("security_db::dump: decoded certificate = ", p->decoded_certificate()); loggers::get_instance().log_to_hexa("security_db::dump: hashed_id = ", p->hashed_id().data(), p->hashed_id().size()); loggers::get_instance().log_to_hexa("security_db::dump: hashed_id_issuer = ", p->issuer().data(), p->issuer().size()); loggers::get_instance().log_to_hexa("security_db::dump: private_key = ", p->private_key().data(), p->private_key().size()); loggers::get_instance().log_to_hexa("security_db::dump: public_key_x = ", p->public_key_x().data(), p->public_key_x().size()); loggers::get_instance().log_to_hexa("security_db::dump: public_key_y = ", p->public_key_y().data(), p->public_key_y().size()); } // End of 'for' statement for (std::map, std::string>::const_iterator it = _hashed_id8s.cbegin(); it != _hashed_id8s.cend(); ++it) { loggers::get_instance().log("security_db::dump: Hashedid8 idx = %s", it->second.c_str()); } // End of 'for' statement } // End of method dump