1 files changed, 101 insertions, 0 deletions
diff --git a/libtransport/src/protocols/verification_manager.cc b/libtransport/src/protocols/verification_manager.cc
new file mode 100644
index 000000000..8eedd6106
--- /dev/null
+++ b/libtransport/src/protocols/verification_manager.cc
@@ -0,0 +1,101 @@
+/*
+ * Copyright (c) 2017-2019 Cisco and/or its affiliates.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+#include <hicn/transport/interfaces/socket_consumer.h>
+#include <hicn/transport/security/verifier.h>
+
+#include <implementation/socket_consumer.h>
+#include <protocols/verification_manager.h>
+
+namespace transport {
+
+namespace protocol {
+
+interface::VerificationPolicy SignatureVerificationManager::onPacketToVerify(
+    const Packet& packet) {
+  using namespace interface;
+
+  bool verify_signature = false, key_content = false;
+  VerificationPolicy ret = VerificationPolicy::DROP_PACKET;
+
+  icn_socket_->getSocketOption(GeneralTransportOptions::VERIFY_SIGNATURE,
+                               verify_signature);
+  icn_socket_->getSocketOption(GeneralTransportOptions::KEY_CONTENT,
+                               key_content);
+
+  if (!verify_signature) {
+    return VerificationPolicy::ACCEPT_PACKET;
+  }
+
+  if (key_content) {
+    key_packets_.push(copyPacket(packet));
+    return VerificationPolicy::ACCEPT_PACKET;
+  } else if (!key_packets_.empty()) {
+    std::queue<ContentObjectPtr>().swap(key_packets_);
+  }
+
+  ConsumerContentObjectVerificationFailedCallback*
+      verification_failed_callback = VOID_HANDLER;
+  icn_socket_->getSocketOption(ConsumerCallbacksOptions::VERIFICATION_FAILED,
+                               &verification_failed_callback);
+
+  if (!verification_failed_callback) {
+    throw errors::RuntimeException(
+        "No verification failed callback provided by application. "
+        "Aborting.");
+  }
+
+  std::shared_ptr<utils::Verifier> verifier;
+  icn_socket_->getSocketOption(GeneralTransportOptions::VERIFIER, verifier);
+
+  if (TRANSPORT_EXPECT_FALSE(!verifier)) {
+    ret = (*verification_failed_callback)(
+        *icn_socket_->getInterface(),
+        dynamic_cast<const ContentObject&>(packet),
+        make_error_code(protocol_error::no_verifier_provided));
+    return ret;
+  }
+
+  if (!verifier->verify(packet)) {
+    ret = (*verification_failed_callback)(
+        *icn_socket_->getInterface(),
+        dynamic_cast<const ContentObject&>(packet),
+        make_error_code(protocol_error::signature_verification_failed));
+  } else {
+    ret = VerificationPolicy::ACCEPT_PACKET;
+  }
+
+  return ret;
+}
+
+bool SignatureVerificationManager::onKeyToVerify() {
+  if (TRANSPORT_EXPECT_FALSE(key_packets_.empty())) {
+    throw errors::RuntimeException("No key to verify.");
+  }
+
+  while (!key_packets_.empty()) {
+    ContentObjectPtr packet_to_verify = key_packets_.front();
+    key_packets_.pop();
+    if (onPacketToVerify(*packet_to_verify) !=
+        VerificationPolicy::ACCEPT_PACKET)
+      return false;
+  }
+
+  return true;
+}
+
+}  // end namespace protocol
+
+}  // end namespace transport