Async::SslX509Extensions Class Reference

A class representing X.509 extensions. More...

#include <AsyncSslX509Extensions.h>

Public Member Functions
	SslX509Extensions (void)
	Default constructor.
	SslX509Extensions (STACK_OF(X509_EXTENSION) *exts)
	Constructor.
	SslX509Extensions (SslX509Extensions &&other)
	Move Constructor.
	SslX509Extensions (const SslX509Extensions &other)
	Copy constructor.
SslX509Extensions &	operator= (const SslX509Extensions &)=delete
	Disallow copy assignment.
	~SslX509Extensions (void)
	Destructor.
bool	addBasicConstraints (const std::string &bc)
	Add basic constraints extension.
bool	addKeyUsage (const std::string &ku)
	Add key usage.
bool	addExtKeyUsage (const std::string &eku)
	Add extended key usage.
bool	addSubjectAltNames (const std::string &san)
	Add subject alternative names.
SslX509ExtSubjectAltName	subjectAltName (void) const
	Get the subject alternative names extension.
bool	addExtension (const SslX509ExtSubjectAltName &san)
	Add a subject alternative names object.
	operator const STACK_OF (X509_EXTENSION) *() const
	Cast to a pointer to a stack of X509_EXTENSION objects.

Detailed Description

A class representing X.509 extensions.

Author

Tobias Blomberg / SM0SVX

Date

2022-05-22

#include <AsyncSslContext.h>
#include <AsyncSslKeypair.h>
#include <AsyncSslCertSigningReq.h>
#include <AsyncSslX509.h>
 
int main(void)
{
    // Create a key pair for the CA
  Async::SslKeypair ca_pkey;
  if (!ca_pkey.generate(2048))
  {
    std::cout << "*** ERROR: Failed to generate CA key" << std::endl;
    return 1;
  }
  if (!ca_pkey.writePrivateKeyFile("demo_ca.key"))
  {
    std::cout << "*** WARNING: Failed to write CA key file" << std::endl;
  }
 
    // Create a CA certificate and sign it with the key above
  Async::SslX509 ca_cert;
  ca_cert.setSerialNumber(1);
  ca_cert.setVersion(Async::SslX509::VERSION_3);
  ca_cert.addIssuerName("CN", "Demo Root CA");
  ca_cert.addIssuerName("L", "My City");
  ca_cert.addIssuerName("C", "XX");
  ca_cert.setSubjectName(ca_cert.issuerName());
  Async::SslX509Extensions ca_exts;
  ca_exts.addBasicConstraints("critical, CA:TRUE");
  ca_exts.addKeyUsage("critical, cRLSign, digitalSignature, keyCertSign");
  ca_exts.addSubjectAltNames("email:ca@example.org");
  ca_cert.addExtensions(ca_exts);
  time_t t = time(nullptr);
  ca_cert.setNotBefore(t);
  ca_cert.setNotAfter(t + 24*3600);
  ca_cert.setPublicKey(ca_pkey);
  ca_cert.sign(ca_pkey);
  std::cout << "--------------- CA Certificate ----------------" << std::endl;
  ca_cert.print();
  std::cout << "-----------------------------------------------" << std::endl;
  if (!ca_cert.writePemFile("demo_ca.crt"))
  {
    std::cout << "*** WARNING: Failed to write CA certificate file"
              << std::endl;
  }
 
    // Create a key pair for the server certificate
  Async::SslKeypair cert_pkey;
  if (!cert_pkey.generate(2048))
  {
    std::cout << "*** ERROR: Failed to generate server certificate key"
              << std::endl;
    return 1;
  }
  if (!cert_pkey.writePrivateKeyFile("demo.key"))
  {
    std::cout << "*** WARNING: Failed to write CA key file" << std::endl;
  }
 
    // Create a Certificate Signing Request
  Async::SslCertSigningReq csr;
  csr.setVersion(Async::SslCertSigningReq::VERSION_1);
  csr.addSubjectName("CN", "hostname.example.org");
  csr.addSubjectName("L", "My City");
  csr.addSubjectName("C", "XX");
  Async::SslX509Extensions csr_exts;
  csr_exts.addSubjectAltNames(
      "DNS:hostname.example.org"
      ", DNS:alias.example.org"
      ", DNS:localhost"
      ", IP:127.0.0.1"
      ", email:admin@example.org"
      ", URI:https://www.example.org"
      ", otherName:msUPN;UTF8:sb@sb.local");
  csr.addExtensions(csr_exts);
  csr.setPublicKey(cert_pkey);
  csr.sign(cert_pkey);
  std::cout << "--------- Certificate Signing Request ---------" << std::endl;
  csr.print();
  std::cout << "-----------------------------------------------" << std::endl;
  if (!csr.writePemFile("demo.csr"))
  {
    std::cout << "*** WARNING: Failed to write CSR file" << std::endl;
  }
  std::cout << "The CSR verification "
            << (csr.verify(cert_pkey) ? "PASSED" : "FAILED")
            << std::endl;
 
    // Create the certificate using the CSR then sign it using the CA cert
  Async::SslX509 cert;
  cert.setSerialNumber(2);
  cert.setVersion(Async::SslX509::VERSION_3);
  cert.setIssuerName(ca_cert.subjectName());
  cert.setSubjectName(csr.subjectName());
  cert.setNotBefore(t);
  cert.setNotAfter(t + 3600);
  const Async::SslX509Extensions exts(csr.extensions());
  Async::SslX509Extensions cert_exts;
  cert_exts.addBasicConstraints("critical, CA:FALSE");
  cert_exts.addKeyUsage("critical, nonRepudiation, digitalSignature, keyEncipherment, keyAgreement");
  cert_exts.addExtKeyUsage("serverAuth");
  Async::SslX509ExtSubjectAltName san(exts.subjectAltName());
  cert_exts.addExtension(san);
  cert.addExtensions(cert_exts);
  Async::SslKeypair csr_pkey(csr.publicKey());
  cert.setPublicKey(csr_pkey);
  cert.sign(ca_pkey);
  std::cout << "------------- Server Certificate --------------" << std::endl;
  cert.print();
  std::cout << "-----------------------------------------------" << std::endl;
  if (!cert.writePemFile("demo.crt"))
  {
    std::cout << "*** WARNING: Failed to write certificate file"
              << std::endl;
  }
  std::cout << "The certificate verification "
            << (cert.verify(ca_pkey) ? "PASSED" : "FAILED")
            << std::endl;
 
  return 0;
}

Examples

AsyncSslX509_demo.cpp.

Definition at line 119 of file AsyncSslX509Extensions.h.

Constructor & Destructor Documentation

SslX509Extensions() [1/4]

Async::SslX509Extensions::SslX509Extensions ( void )

inline

Default constructor.

Definition at line 125 of file AsyncSslX509Extensions.h.

SslX509Extensions() [2/4]

Async::SslX509Extensions::SslX509Extensions ( STACK_OF(X509_EXTENSION) * exts )

inlineexplicit

Constructor.

Parameters

exts	Pointer to a stack of X509_EXTENSION objects

Definition at line 134 of file AsyncSslX509Extensions.h.

SslX509Extensions() [3/4]

Async::SslX509Extensions::SslX509Extensions ( SslX509Extensions && other )

inline

Move Constructor.

Parameters

other

The object to move from

Definition at line 143 of file AsyncSslX509Extensions.h.

SslX509Extensions() [4/4]

Async::SslX509Extensions::SslX509Extensions ( const SslX509Extensions & other )

inlineexplicit

Copy constructor.

Parameters

other

The object to copy from

Definition at line 153 of file AsyncSslX509Extensions.h.

~SslX509Extensions()

Async::SslX509Extensions::~SslX509Extensions ( void )

inline

Destructor.

Definition at line 171 of file AsyncSslX509Extensions.h.

Member Function Documentation

addBasicConstraints()

bool Async::SslX509Extensions::addBasicConstraints ( const std::string & bc )

inline

Add basic constraints extension.

Parameters

bc	Basic constraints string

Returns

Return true on success

Ex: addBasicConstraints("critical, CA:FALSE");

Examples

AsyncSslX509_demo.cpp.

Definition at line 187 of file AsyncSslX509Extensions.h.

addExtension()

bool Async::SslX509Extensions::addExtension ( const SslX509ExtSubjectAltName & san )

inline

Add a subject alternative names object.

Parameters

san	A subject alternative names object containing names to add

Examples

AsyncSslX509_demo.cpp.

Definition at line 249 of file AsyncSslX509Extensions.h.

addExtKeyUsage()

bool Async::SslX509Extensions::addExtKeyUsage ( const std::string & eku )

inline

Add extended key usage.

Parameters

eku	Extended key usage string

Returns

Return true on success

Ex: addExtKeyUsage("serverAuth");

Examples

AsyncSslX509_demo.cpp.

Definition at line 213 of file AsyncSslX509Extensions.h.

addKeyUsage()

bool Async::SslX509Extensions::addKeyUsage ( const std::string & ku )

inline

Add key usage.

Parameters

ku	Key usage string

Returns

Return true on success

Ex: addKeyUsage( "critical, digitalSignature, keyEncipherment, keyAgreement" );

Examples

AsyncSslX509_demo.cpp.

Definition at line 201 of file AsyncSslX509Extensions.h.

addSubjectAltNames()

bool Async::SslX509Extensions::addSubjectAltNames ( const std::string & san )

inline

Add subject alternative names.

Parameters

Subject

alternative names string

Returns

Return true on success

Ex: addSUbjectAltNames("DNS:dom.org,IP:1.2.3.4,email:user@dom.org")

Examples

AsyncSslX509_demo.cpp.

Definition at line 225 of file AsyncSslX509Extensions.h.

operator const STACK_OF()

Async::SslX509Extensions::operator const STACK_OF ( X509_EXTENSION ) const

inline

Cast to a pointer to a stack of X509_EXTENSION objects.

Definition at line 263 of file AsyncSslX509Extensions.h.

operator=()

SslX509Extensions & Async::SslX509Extensions::operator= ( const SslX509Extensions & )

delete

Disallow copy assignment.

subjectAltName()

SslX509ExtSubjectAltName Async::SslX509Extensions::subjectAltName ( void ) const

inline

Get the subject alternative names extension.

Returns

Returns an object representing the SAN

Examples

AsyncSslX509_demo.cpp.

Definition at line 234 of file AsyncSslX509Extensions.h.

Referenced by Async::SslCertSigningReq::print().

---

The documentation for this class was generated from the following file:

• AsyncSslX509Extensions.h