X-Git-Url: https://code.wpia.club/?a=blobdiff_plain;f=src%2Fcrypto%2FsimpleOpensslSigner.cpp;h=b569ef2fa5789544b101d7e8653b3cb76a9d9a54;hb=6121035a7d8ea738bc89c2de8e6602fb1099b0e2;hp=6987d2c4e84085c25c3349f5c334e42e82475dbe;hpb=03ea7aa51a52517a74b5f9ffd925551cc91986fe;p=cassiopeia.git diff --git a/src/crypto/simpleOpensslSigner.cpp b/src/crypto/simpleOpensslSigner.cpp index 6987d2c..b569ef2 100644 --- a/src/crypto/simpleOpensslSigner.cpp +++ b/src/crypto/simpleOpensslSigner.cpp @@ -36,12 +36,12 @@ std::pair, std::string> SimpleOpensslSigner::nextSerial( if( res == "" ) { bn = BN_new(); - if( !bn || !BN_hex2bn( &bn, "1" )) { - throw std::runtime_error("Initing serial failed"); + if( !bn || !BN_hex2bn( &bn, "1" ) ) { + throw std::runtime_error( "Initing serial failed" ); } } else { if( !BN_hex2bn( &bn, res.c_str() ) ) { - throw std::runtime_error("Parsing serial failed."); + throw std::runtime_error( "Parsing serial failed." ); } } @@ -57,7 +57,7 @@ std::pair, std::string> SimpleOpensslSigner::nextSerial( data.get()[len + 3] = profile & 0xFF; // profile id if( !RAND_bytes( data.get() + len + 4, 16 ) || !BN_add_word( serial.get(), 1 ) ) { - throw std::runtime_error("Big number math failed while fetching random data for serial number."); + throw std::runtime_error( "Big number math failed while fetching random data for serial number." ); } std::shared_ptr serStr = std::shared_ptr( @@ -68,12 +68,12 @@ std::pair, std::string> SimpleOpensslSigner::nextSerial( writeFile( ca->path + "/serial", serStr.get() ); - return std::pair, std::string>( std::shared_ptr( BN_bin2bn( data.get(), len + 4 + 16 , 0 ), BN_free ), std::string( serStr.get() ) ); + return std::pair, std::string>( std::shared_ptr( BN_bin2bn( data.get(), len + 4 + 16, 0 ), BN_free ), std::string( serStr.get() ) ); } std::shared_ptr SimpleOpensslSigner::sign( std::shared_ptr cert ) { std::stringstream signlog; - logger::logger_set log_set_sign({logger::log_target(signlog, logger::level::debug)}, logger::auto_register::on); + logger::logger_set log_set_sign( {logger::log_target( signlog, logger::level::debug )}, logger::auto_register::on ); logger::note( "FINE: Profile name is: ", cert->profile ); @@ -84,10 +84,11 @@ std::shared_ptr SimpleOpensslSigner::sign( std::shared_ptrcaKey){ - throw std::runtime_error("Cannot sign certificate with CA " + ca->name + " because it has no private key."); + + if( !ca->caKey ) { + throw std::runtime_error( "Cannot sign certificate with CA " + ca->name + " because it has no private key." ); } logger::note( "FINE: Key for Signing CA is correctly loaded." ); @@ -106,15 +107,15 @@ std::shared_ptr SimpleOpensslSigner::sign( std::shared_ptrcsr_content ); } else { logger::errorf( "ERROR: Unknown type (\"%s\") of certification in request.", cert->csr_type ); - throw std::runtime_error("Error, unknown REQ rype " + cert->csr_type ); //! \fixme: Pointer instead of string, please use proper exception classe)s + throw std::runtime_error( "Error, unknown REQ rype " + cert->csr_type ); //! \fixme: Pointer instead of string, please use proper exception classe)s } int i = req->verify(); if( i < 0 ) { - throw std::runtime_error("Request contains a Signature with problems ... "); + throw std::runtime_error( "Request contains a Signature with problems ... " ); } else if( i == 0 ) { - throw std::runtime_error("Request contains a Signature that does not match ..."); + throw std::runtime_error( "Request contains a Signature that does not match ..." ); } else { logger::note( "FINE: Request contains valid self-signature." ); } @@ -126,10 +127,12 @@ std::shared_ptr SimpleOpensslSigner::sign( std::shared_ptr a : cert->AVAs ) { logger::notef( "INFO: Trying to add RDN: %s: %s", a->name, a->value ); + if( a->value.empty() ) { - logger::notef( "INFO: Removing empty RDN: %s", a->name); + logger::notef( "INFO: Removing empty RDN: %s", a->name ); continue; } + if( a->name == "CN" ) { c.addRDN( NID_commonName, a->value ); } else if( a->name == "EMAIL" ) { @@ -146,7 +149,7 @@ std::shared_ptr SimpleOpensslSigner::sign( std::shared_ptrvalue ); } else { logger::error( "ERROR: Trying to add illegal RDN/AVA type: ", a->name ); - throw std::runtime_error("Unhandled/Illegal AVA type"); + throw std::runtime_error( "Unhandled/Illegal AVA type" ); } } @@ -248,7 +251,7 @@ std::shared_ptr SimpleOpensslSigner::sign( std::shared_ptr, std::string> SimpleOpensslSigner::revoke( std::s std::string date = ""; logger::note( "adding serials" ); + for( std::string serial : serials ) { date = crl->revoke( serial, "" ); }