text: //
  // X509Certificate.h
  //
  // Library: NetSSL_OpenSSL
  // Package: SSLCore
  // Module:  X509Certificate
  //
  // Definition of the X509Certificate class.
  //
  // Copyright (c) 2006-2009, Applied Informatics Software Engineering GmbH.
  // and Contributors.
  //
  // SPDX-License-Identifier:	BSL-1.0
  //
  
  
  #ifndef NetSSL_X509Certificate_INCLUDED
  #define NetSSL_X509Certificate_INCLUDED
  
  
  #include "Poco/Net/NetSSL.h"
  #include "Poco/Net/SocketDefs.h"
  #include "Poco/Crypto/X509Certificate.h"
  #include "Poco/DateTime.h"
  #include "Poco/SharedPtr.h"
  #include <set>
  
  
  namespace Poco {
  namespace Net {
  
  
  class HostEntry;
  
  
  class NetSSL_API X509Certificate: public Poco::Crypto::X509Certificate
  	/// This class extends Poco::Crypto::X509Certificate with the
  	/// feature to validate a certificate.
  {
  public:
  	explicit X509Certificate(std::istream& istr);
  		/// Creates the X509Certificate object by reading
  		/// a certificate in PEM format from a stream.
  
  	explicit X509Certificate(const std::string& path);
  		/// Creates the X509Certificate object by reading
  		/// a certificate in PEM format from a file.
  
  	explicit X509Certificate(X509* pCert);
  		/// Creates the X509Certificate from an existing
  		/// OpenSSL certificate. Ownership is taken of 
  		/// the certificate.
  
  	X509Certificate(X509* pCert, bool shared);
  		/// Creates the X509Certificate from an existing
  		/// OpenSSL certificate. Ownership is taken of 
  		/// the certificate. If shared is true, the 
  		/// certificate's reference count is incremented.
  
  	X509Certificate(const Poco::Crypto::X509Certificate& cert);
  		/// Creates the certificate by copying another one.
  
  	X509Certificate& operator = (const Poco::Crypto::X509Certificate& cert);
  		/// Assigns a certificate.
  
  	~X509Certificate();
  		/// Destroys the X509Certificate.
  
  	bool verify(const std::string& hostName) const;
  		/// Verifies the validity of the certificate against the host name.
  		///
  		/// For this check to be successful, the certificate must contain
  		/// a domain name that matches the domain name
  		/// of the host.
  		/// 
  		/// Returns true if verification succeeded, or false otherwise.
  		
  	static bool verify(const Poco::Crypto::X509Certificate& cert, const std::string& hostName);
  		/// Verifies the validity of the certificate against the host name.
  		///
  		/// For this check to be successful, the certificate must contain
  		/// a domain name that matches the domain name
  		/// of the host.
  		///
  		/// Returns true if verification succeeded, or false otherwise.
  		
  protected:
  	static bool containsWildcards(const std::string& commonName);
  	static bool matchWildcard(const std::string& alias, const std::string& hostName);
  	
  private:
  	enum
  	{
  		NAME_BUFFER_SIZE = 256
  	};
  };
  
  
  } } // namespace Poco::Net
  
  
  #endif // NetSSL_X509Certificate_INCLUDED
  