X-Git-Url: https://tinc-vpn.org/git/browse?a=blobdiff_plain;f=lib%2Ffides.h;h=fcb34cc7b9e933af34758120d160835e409f641e;hb=c30548270cbb65865f0336dd7911e196b0949717;hp=ff665afede7d82849fcf04d9c0768a66765cf26a;hpb=4b17b54e2250ea75c9947b92a571554dae672bec;p=fides

diff --git a/lib/fides.h b/lib/fides.h
index ff665af..fcb34cc 100644
--- a/lib/fides.h
+++ b/lib/fides.h
@@ -89,13 +89,13 @@ class fides {
 
 		int trust;
 		void load(std::istream &in);
-		void save(std::ostream &out);
+		void save(std::ostream &out) const;
 		void load(const std::string &filename);
-		void save(const std::string &filename);
-		bool verify(const std::string &data, const std::string &signature);
-		std::string to_string();
+		void save(const std::string &filename) const;
+		bool verify(const std::string &data, const std::string &signature) const;
+		std::string to_string() const;
 		void from_string(const std::string &in);
-		std::string fingerprint(unsigned int bits = 64);
+		std::string fingerprint(unsigned int bits = 64) const;
 	};
 
 	class privatekey: public publickey {
@@ -106,28 +106,28 @@ class fides {
 		~privatekey();
 
 		void load_private(std::istream &in);
-		void save_private(std::ostream &out);
+		void save_private(std::ostream &out) const;
 		void load_private(const std::string &filename);
-		void save_private(const std::string &filename);
+		void save_private(const std::string &filename) const;
 		void generate(const std::string &field);
 		void generate(unsigned int bits = 224);
-		std::string sign(const std::string &data);
+		std::string sign(const std::string &data) const;
 	};
 
 	class certificate {
 		friend class fides;
-		publickey *signer;
+		const publickey *signer;
 		struct timeval timestamp;
 		std::string statement;
 		std::string signature;
 
 		public:
-		certificate(publickey *pub, struct timeval timestamp, const std::string &statement, const std::string &signature);
-		certificate(privatekey *priv, struct timeval timestamp, const std::string &statement);
+		certificate(const publickey *pub, struct timeval timestamp, const std::string &statement, const std::string &signature);
+		certificate(const privatekey *priv, struct timeval timestamp, const std::string &statement);
 
 		std::string to_string() const;
-		std::string fingerprint(unsigned int bits = 64);
-		bool validate();
+		std::string fingerprint(unsigned int bits = 64) const;
+		bool validate() const;
 	};
 
 	// Fides class itself
@@ -136,7 +136,6 @@ class fides {
 	privatekey mykey;
 	std::map<std::string, publickey *> keys;
 	std::map<std::string, certificate *> certs;
-	std::set<publickey *> trustedkeys;
 
 	void merge(certificate *cert);
 	void merge(publickey *key);
@@ -145,43 +144,43 @@ class fides {
 	fides(const std::string &homedir = "");
 	~fides();
 
-	bool is_firstrun();
-	bool fsck();
-	std::string get_homedir();
+	bool is_firstrun() const;
+	bool fsck() const;
+	std::string get_homedir() const;
 
 	void sign(const std::string &statement);
 
-	void allow(const std::string &statement, publickey *key = 0);
-	void dontcare(const std::string &statement, publickey *key = 0);
-	void deny(const std::string &statement, publickey *key = 0);
-	bool is_allowed(const std::string &statement, publickey *key = 0);
-	bool is_denied(const std::string &statement, publickey *key = 0);
-
-	void auth_stats(const std::string &statement, int &self, int &trusted, int &all);
-	void trust(publickey *key);
-	void dctrust(publickey *key);
-	void distrust(publickey *key);
-	bool is_trusted(publickey *key);
-	bool is_distrusted(publickey *key);
-	publickey *find_key(const std::string &fingerprint);
+	void allow(const std::string &statement, const publickey *key = 0);
+	void dontcare(const std::string &statement, const publickey *key = 0);
+	void deny(const std::string &statement, const publickey *key = 0);
+	bool is_allowed(const std::string &statement, const publickey *key = 0) const;
+	bool is_denied(const std::string &statement, const publickey *key = 0) const;
+
+	void auth_stats(const std::string &statement, int &self, int &trusted, int &all) const;
+	void trust(const publickey *key);
+	void dctrust(const publickey *key);
+	void distrust(const publickey *key);
+	bool is_trusted(const publickey *key) const;
+	bool is_distrusted(const publickey *key) const;
+	publickey *find_key(const std::string &fingerprint) const;
 	void update_trust();
 
-	std::vector<certificate *> find_certificates(publickey *key, const std::string &statement);
-	std::vector<certificate *> find_certificates(const std::string &statement);
-	std::vector<certificate *> find_certificates(publickey *key);
+	std::vector<const certificate *> find_certificates(const publickey *key, const std::string &statement) const;
+	std::vector<const certificate *> find_certificates(const std::string &statement) const;
+	std::vector<const certificate *> find_certificates(const publickey *key) const;
 
-	certificate *import_certificate(const std::string &certificate);
-	std::string export_certificate(const certificate *);
+	const certificate *import_certificate(const std::string &certificate);
+	std::string export_certificate(const certificate *) const;
 
-	publickey *import_key(const std::string &key);
-	std::string export_key(const publickey *key);
+	const publickey *import_key(const std::string &key);
+	std::string export_key(const publickey *key) const;
 
 	void import_all(std::istream &in);
-	void export_all(std::ostream &out);
+	void export_all(std::ostream &out) const;
 
 	certificate *certificate_from_string(const std::string &certificate);
 	certificate *certificate_load(const std::string &filename);
-	void certificate_save(const certificate *cert, const std::string &filename);
+	void certificate_save(const certificate *cert, const std::string &filename) const;
 
 };