99 lines
2.5 KiB
C++
99 lines
2.5 KiB
C++
|
#ifndef VERIFY_SERVICE_HPP_BR4ISDBH
|
||
|
|
#define VERIFY_SERVICE_HPP_BR4ISDBH
|
||
|
|
|
||
|
|
#include <boost/optional.hpp>
|
||
|
|
#include <vanetza/common/its_aid.hpp>
|
||
|
|
#include <vanetza/security/certificate_validity.hpp>
|
||
|
|
#include <vanetza/security/hashed_id.hpp>
|
||
|
|
#include <vanetza/security/secured_message.hpp>
|
||
|
|
|
||
|
|
namespace vanetza
|
||
|
|
{
|
||
|
|
namespace security
|
||
|
|
{
|
||
|
|
|
||
|
|
/**
|
||
|
|
* SN-VERIFY.confirm report codes
|
||
|
|
*
|
||
|
|
* "Configuration_Problem" is not found in TS 103 723-8 V1.1.1 but indicates a
|
||
|
|
* problem with the verification subsystem itself, e.g. a programming error.
|
||
|
|
*
|
||
|
|
* \see TS 102 723-8 v1.1.1 table 5
|
||
|
|
*/
|
||
|
|
enum class VerificationReport
|
||
|
|
{
|
||
|
|
Success,
|
||
|
|
False_Signature,
|
||
|
|
Invalid_Certificate,
|
||
|
|
Revoked_Certificate,
|
||
|
|
Inconsistent_Chain,
|
||
|
|
Invalid_Timestamp,
|
||
|
|
Duplicate_Message,
|
||
|
|
Invalid_Mobility_Data,
|
||
|
|
Unsigned_Message,
|
||
|
|
Signer_Certificate_Not_Found,
|
||
|
|
Unsupported_Signer_Identifier_Type,
|
||
|
|
Incompatible_Protocol,
|
||
|
|
Configuration_Problem,
|
||
|
|
};
|
||
|
|
|
||
|
|
// mandatory parameters of SN-VERIFY.request (TS 102 723-8 V1.1.1)
|
||
|
|
struct VerifyRequest
|
||
|
|
{
|
||
|
|
VerifyRequest(SecuredMessageView msg) : secured_message(msg) {}
|
||
|
|
SecuredMessageView secured_message; /*< contains security header and payload */
|
||
|
|
};
|
||
|
|
|
||
|
|
// parameters of SN-VERIFY.confirm (TS 102 723-8 V1.1.1)
|
||
|
|
struct VerifyConfirm
|
||
|
|
{
|
||
|
|
VerificationReport report; // mandatory
|
||
|
|
ItsAid its_aid; // mandatory
|
||
|
|
ByteBuffer permissions; // mandatory
|
||
|
|
CertificateValidity certificate_validity; // non-standard extension
|
||
|
|
boost::optional<HashedId8> certificate_id; // optional
|
||
|
|
};
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Equivalent of SN-VERIFY service in TS 102 723-8 V1.1.1
|
||
|
|
*/
|
||
|
|
class VerifyService
|
||
|
|
{
|
||
|
|
public:
|
||
|
|
virtual ~VerifyService() = default;
|
||
|
|
virtual VerifyConfirm verify(const VerifyRequest&) = 0;
|
||
|
|
};
|
||
|
|
|
||
|
|
// forward declaration
|
||
|
|
namespace v3 { class CertificateCache; }
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Get insecure dummy verify service without any checks
|
||
|
|
*/
|
||
|
|
class DummyVerifyService : public VerifyService
|
||
|
|
{
|
||
|
|
public:
|
||
|
|
/**
|
||
|
|
* \param report predefined confirm report result
|
||
|
|
* \param validity predefined certificate validity result
|
||
|
|
*/
|
||
|
|
DummyVerifyService(VerificationReport report, CertificateValidity validity);
|
||
|
|
VerifyConfirm verify(const VerifyRequest&) override;
|
||
|
|
|
||
|
|
/**
|
||
|
|
* \brief register certificate cache for optional permission lookup
|
||
|
|
* \param cache certificate cache
|
||
|
|
*/
|
||
|
|
void use_certificate_cache(v3::CertificateCache* cache);
|
||
|
|
|
||
|
|
private:
|
||
|
|
VerificationReport m_report;
|
||
|
|
CertificateValidity m_validity;
|
||
|
|
v3::CertificateCache* m_cert_cache = nullptr;
|
||
|
|
};
|
||
|
|
|
||
|
|
} // namespace security
|
||
|
|
} // namespace vanetza
|
||
|
|
|
||
|
|
#endif /* VERIFY_SERVICE_HPP_BR4ISDBH */
|