Botan::Certificate_Verify Class Reference

#include <tls_messages.h>

Inheritance diagram for Botan::Certificate_Verify:

Public Member Functions
	Certificate_Verify (const MemoryRegion< byte > &buf)
	Certificate_Verify (RandomNumberGenerator &rng, Record_Writer &, HandshakeHash &, const Private_Key *)
void	send (Record_Writer &, HandshakeHash &) const
Handshake_Type	type () const
bool	verify (const X509_Certificate &, HandshakeHash &)

Detailed Description

Certificate Verify Message

Definition at line 163 of file tls_messages.h.

Constructor & Destructor Documentation

Certificate_Verify() [1/2]

Botan::Certificate_Verify::Certificate_Verify	(	RandomNumberGenerator &	rng,
		Record_Writer &	writer,
		HandshakeHash &	hash,
		const Private_Key *	priv_key )

Create a new Certificate Verify message

Definition at line 21 of file cert_ver.cpp.

   {
   std::string padding = "";
   Signature_Format format = IEEE_1363;
 
   if(priv_key->algo_name() == "RSA")
      padding = "EMSA3(TLS.Digest.0)";
   else if(priv_key->algo_name() == "DSA")
      {
      padding = "EMSA1(SHA-1)";
      format = DER_SEQUENCE;
      }
   else
      throw Invalid_Argument(priv_key->algo_name() +
                             " is invalid/unknown for TLS signatures");
 
   PK_Signer signer(*priv_key, padding, format);
 
   signature = signer.sign_message(hash.final(), rng);
   send(writer, hash);
   }

References Botan::Public_Key::algo_name(), Botan::DER_SEQUENCE, Botan::HandshakeHash::final(), Botan::IEEE_1363, Botan::HandshakeMessage::send(), and Botan::PK_Signer::sign_message().

Certificate_Verify() [2/2]

Botan::Certificate_Verify::Certificate_Verify ( const MemoryRegion< byte > & buf )

inline

Definition at line 174 of file tls_messages.h.

{ deserialize(buf); }

Member Function Documentation

send()

void Botan::HandshakeMessage::send ( Record_Writer & writer, HandshakeHash & hash ) const

inherited

Definition at line 16 of file hello.cpp.

   {
   SecureVector<byte> buf = serialize();
   SecureVector<byte> send_buf(4);
 
   const size_t buf_size = buf.size();
 
   send_buf[0] = type();
 
   for(size_t i = 1; i != 4; ++i)
     send_buf[i] = get_byte<u32bit>(i, buf_size);
 
   send_buf += buf;
 
   hash.update(send_buf);
 
   writer.send(HANDSHAKE, &send_buf[0], send_buf.size());
   writer.flush();
   }

References Botan::Record_Writer::flush(), Botan::get_byte(), Botan::HANDSHAKE, Botan::Record_Writer::send(), Botan::MemoryRegion< T >::size(), type(), and Botan::HandshakeHash::update().

Referenced by Botan::Certificate::Certificate(), Botan::Certificate_Req::Certificate_Req(), Botan::Certificate_Verify::Certificate_Verify(), Botan::Client_Hello::Client_Hello(), Botan::Client_Key_Exchange::Client_Key_Exchange(), Botan::Finished::Finished(), Botan::Hello_Request::Hello_Request(), Botan::Server_Hello::Server_Hello(), Botan::Server_Hello_Done::Server_Hello_Done(), and Botan::Server_Key_Exchange::Server_Key_Exchange().

type()

Handshake_Type Botan::Certificate_Verify::type ( ) const

inlinevirtual

Implements Botan::HandshakeMessage.

Definition at line 166 of file tls_messages.h.

{ return CERTIFICATE_VERIFY; }

References Botan::CERTIFICATE_VERIFY.

verify()

bool Botan::Certificate_Verify::verify	(	const X509_Certificate &	cert,
		HandshakeHash &	hash )

Verify a Certificate Verify message

Definition at line 73 of file cert_ver.cpp.

   {
   // FIXME: duplicate of Server_Key_Exchange::verify
 
   std::auto_ptr<Public_Key> key(cert.subject_public_key());
 
   std::string padding = "";
   Signature_Format format = IEEE_1363;
 
   if(key->algo_name() == "RSA")
      padding = "EMSA3(TLS.Digest.0)";
   else if(key->algo_name() == "DSA")
      {
      padding = "EMSA1(SHA-1)";
      format = DER_SEQUENCE;
      }
   else
      throw Invalid_Argument(key->algo_name() +
                             " is invalid/unknown for TLS signatures");
 
   PK_Verifier verifier(*key, padding, format);
   return verifier.verify_message(hash.final(), signature);
   }

References Botan::DER_SEQUENCE, Botan::HandshakeHash::final(), Botan::IEEE_1363, Botan::X509_Certificate::subject_public_key(), and Botan::PK_Verifier::verify_message().

---

The documentation for this class was generated from the following files:

• src/ssl/tls_messages.h
• src/ssl/cert_ver.cpp