mirror of
https://github.com/matrix-construct/construct
synced 2024-11-09 03:21:15 +01:00
121 lines
4.3 KiB
C++
121 lines
4.3 KiB
C++
/*
|
|
* charybdis: 21st Century IRC++d
|
|
*
|
|
* Copyright (C) 2017 Charybdis Development Team
|
|
* Copyright (C) 2017 Jason Volk <jason@zemos.net>
|
|
*
|
|
* Permission to use, copy, modify, and/or distribute this software for any
|
|
* purpose with or without fee is hereby granted, provided that the above
|
|
* copyright notice and this permission notice is present in all copies.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
|
|
* IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
|
|
* WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
|
|
* DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT,
|
|
* INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
|
|
* (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
|
|
* SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
|
|
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
|
|
* IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
|
|
* POSSIBILITY OF SUCH DAMAGE.
|
|
*
|
|
*/
|
|
|
|
#pragma once
|
|
#define HAVE_IRCD_M_KEYS_H
|
|
#pragma GCC diagnostic push
|
|
#pragma GCC diagnostic ignored "-Wsubobject-linkage"
|
|
|
|
namespace ircd::m
|
|
{
|
|
struct keys;
|
|
}
|
|
|
|
namespace ircd::m::self
|
|
{
|
|
extern ed25519::sk secret_key;
|
|
extern ed25519::pk public_key;
|
|
extern std::string public_key_b64;
|
|
extern std::string public_key_id;
|
|
|
|
extern std::string tls_cert_der;
|
|
extern std::string tls_cert_der_sha256_b64;
|
|
}
|
|
|
|
namespace ircd::m::name
|
|
{
|
|
constexpr const char *const server_name {"server_name"};
|
|
constexpr const char *const verify_keys {"verify_keys"};
|
|
constexpr const char *const old_verify_keys {"old_verify_keys"};
|
|
// constexpr const char *const signatures {"signatures"};
|
|
constexpr const char *const tls_fingerprints {"tls_fingerprints"};
|
|
constexpr const char *const valid_until_ts {"valid_until_ts"};
|
|
}
|
|
|
|
/// Contains the public keys and proof of identity for a remote server.
|
|
///
|
|
/// A user who wishes to verify a signature from a remote server must have
|
|
/// the name of the server (origin) and the key_id. Calling the appropriate
|
|
/// static function of this class will attempt to fetch the key from the db
|
|
/// or make network requests, with valid response being saved to the db. Keys
|
|
/// are thus managed internally so the user doesn't supply a buffer or ever
|
|
/// construct this object; instead this object backed by internal db data is
|
|
/// presented in the supplied synchronous closure.
|
|
///
|
|
/// 2.2.1.1 Publishing Keys
|
|
///
|
|
/// Key Type, Description
|
|
/// server_name String, DNS name of the homeserver.
|
|
/// verify_keys Object, Public keys of the homeserver for verifying digital signatures.
|
|
/// old_verify_keys Object, The public keys that the server used to use and when it stopped using them.
|
|
/// signatures Object, Digital signatures for this object signed using the verify_keys.
|
|
/// tls_fingerprints Array of Objects, Hashes of X.509 TLS certificates used by this this server encoded as Unpadded Base64.
|
|
/// valid_until_ts Integer, POSIX timestamp when the list of valid keys should be refreshed.
|
|
///
|
|
struct ircd::m::keys
|
|
:json::tuple
|
|
<
|
|
json::property<name::old_verify_keys, json::object>,
|
|
json::property<name::server_name, string_view>,
|
|
json::property<name::signatures, json::object>,
|
|
json::property<name::tls_fingerprints, json::array>,
|
|
json::property<name::valid_until_ts, time_t>,
|
|
json::property<name::verify_keys, json::object>
|
|
>
|
|
{
|
|
struct init;
|
|
|
|
using key_closure = std::function<void (const string_view &)>; // remember to unquote()!!!
|
|
using keys_closure = std::function<void (const keys &)>;
|
|
|
|
static m::room room;
|
|
|
|
static bool get_local(const string_view &server_name, const keys_closure &);
|
|
static bool verify(const keys &) noexcept;
|
|
static void set(const keys &);
|
|
|
|
public:
|
|
static void get(const string_view &server_name, const string_view &key_id, const string_view &query_server, const keys_closure &);
|
|
static void get(const string_view &server_name, const string_view &key_id, const key_closure &);
|
|
static void get(const string_view &server_name, const keys_closure &);
|
|
|
|
using super_type::tuple;
|
|
using super_type::operator=;
|
|
};
|
|
|
|
struct ircd::m::keys::init
|
|
{
|
|
json::object conf;
|
|
|
|
void certificate();
|
|
void signing();
|
|
|
|
public:
|
|
void bootstrap();
|
|
|
|
init(const json::object &conf);
|
|
~init() noexcept;
|
|
};
|
|
|
|
#pragma GCC diagnostic pop
|