UDIF: Universal Digital Identification Framework 1.0.0.0a (A1)
A quantum-secure cryptographic identification
server.h
Go to the documentation of this file.
1/* 2025 Quantum Resistant Cryptographic Solutions Corporation
2 * All Rights Reserved.
3 *
4 * NOTICE: This software and all accompanying materials are the exclusive
5 * property of Quantum Resistant Cryptographic Solutions Corporation (QRCS).
6 * The intellectual and technical concepts contained within this implementation
7 * are proprietary to QRCS and its authorized licensors and are protected under
8 * applicable U.S. and international copyright, patent, and trade secret laws.
9 *
10 * CRYPTOGRAPHIC STANDAARS:
11 * - This software includes implementations of cryptographic algorithms such as
12 * SHA3, AES, and others. These algorithms are public domain or standardized
13 * by organizations such as NIST and are NOT the property of QRCS.
14 * - However, all source code, optimizations, and implementations in this library
15 * are original works of QRCS and are protected under this license.
16 *
17 * RESTRICTIONS:
18 * - Redistribution, modification, or unauthorized distribution of this software,
19 * in whole or in part, is strictly prohibited.
20 * - This software is provided for non-commercial, educational, and research
21 * purposes only. Commercial use in any form is expressly forbidden.
22 * - Licensing and authorized distribution are solely at the discretion of QRCS.
23 * - Any use of this software implies acceptance of these restrictions.
24 *
25 * DISCLAIMER:
26 * This software is provided "as is," without warranty of any kind, express or
27 * implied, including but not limited to warranties of merchantability or fitness
28 * for a particular purpose. QRCS disclaims all liability for any direct, indirect,
29 * incidental, or consequential damages resulting from the use or misuse of this software.
30 *
31 * FULL LICENSE:
32 * This software is subject to the **Quantum Resistant Cryptographic Solutions
33 * Proprietary License (QRCS-PL)**. The complete license terms are included
34 * in the LICENSE.txt file distributed with this software.
35 *
36 * Written by: John G. Underhill
37 * Contact: contact@qrcscorp.ca
38 */
39
40#ifndef UDIF_SERVER_H
41#define UDIF_SERVER_H
42
43#include "udifcommon.h"
44#include "certificate.h"
45#include "commands.h"
46#include "logger.h"
47#include "udif.h"
48#include "topology.h"
49#include "collection.h"
50
61
62/*---------------------------------------------------------------------------
63 MACRO DEFINITIONS
64---------------------------------------------------------------------------*/
65
70#define UDIF_SERVER_MINIMUM_COMMAND_LENGTH 4U
71
79#define UDIF_SERVER_APPLICATION_STATE_SIZE (UDIF_STORAGE_DOMAINNAME_MAX + UDIF_STORAGE_HOSTNAME_MAX + \
80 UDIF_STORAGE_ADDRESS_MAX + UDIF_STORAGE_PATH_MAX + UDIF_STORAGE_USERNAME_MAX + UDIF_CERTIFICATE_ISSUER_SIZE + \
81 sizeof(uint16_t) + sizeof(uint8_t) + sizeof(uint8_t) + sizeof(uint16_t) + sizeof(bool) + sizeof(bool) + \
82 UDIF_ASYMMETRIC_SIGNING_KEY_SIZE)
83
84/*---------------------------------------------------------------------------
85 ENUMERATIONS
86---------------------------------------------------------------------------*/
87
100
101/*---------------------------------------------------------------------------
102 DATA STRUCTURES
103---------------------------------------------------------------------------*/
104
115UDIF_EXPORT_API typedef struct udif_server_application_state
116{
117 char cmdprompt[UDIF_STORAGE_PROMPT_MAX];
118 char domain[UDIF_STORAGE_DOMAINNAME_MAX];
119 char hostname[UDIF_STORAGE_HOSTNAME_MAX];
121 char localip[UDIF_STORAGE_ADDRESS_MAX];
122 char logpath[UDIF_STORAGE_PATH_MAX];
123 char username[UDIF_STORAGE_USERNAME_MAX];
124 uint8_t* kchain;
125 uint8_t* sigkey;
126 const char* aplpath;
127 const char* banner;
128 const char* cfgname;
129 const char* prikeyname;
130 const char* promptdef;
131 const char* pubkeyname;
132 const char* srvname;
133 const char* topname;
134 const char* wtitle;
135 udif_child_certificate ads;
136 udif_root_certificate root;
140 uint16_t port;
142 uint16_t timeout;
143 uint8_t retries;
144 bool joined;
145 bool loghost;
147
148/*---------------------------------------------------------------------------
149 FUNCTION PROTOTYPES
150---------------------------------------------------------------------------*/
151
162UDIF_EXPORT_API void udif_server_certificate_directory(const udif_server_application_state* state, char* dpath, size_t pathlen);
163
174UDIF_EXPORT_API void udif_server_certificate_path(const udif_server_application_state* state, char* fpath, size_t pathlen, const char* issuer);
175
186UDIF_EXPORT_API bool udif_server_child_certificate_export(const udif_server_application_state* state, const char* dpath);
187
199UDIF_EXPORT_API bool udif_server_child_certificate_from_issuer(udif_child_certificate* ccert, const udif_server_application_state* state, const char* issuer);
200
212UDIF_EXPORT_API bool udif_server_child_certificate_from_serial(udif_child_certificate* ccert, const udif_server_application_state* state, const uint8_t* serial);
213
225UDIF_EXPORT_API void udif_server_child_certificate_generate(udif_server_application_state* state, udif_child_certificate* ccert, uint64_t period, uint8_t* capability);
226
238UDIF_EXPORT_API bool udif_server_child_certificate_import(udif_child_certificate* lcert, udif_server_application_state* state, const char* fpath);
239
249UDIF_EXPORT_API void udif_server_child_certificate_path(const udif_server_application_state* state, char* fpath, size_t pathlen);
250
261UDIF_EXPORT_API void udif_server_child_certificate_path_from_issuer(const udif_server_application_state* state, char* fpath, size_t pathlen, const char* issuer);
262
273UDIF_EXPORT_API bool udif_server_child_certificate_print(const char* fpath, size_t pathlen);
274
284UDIF_EXPORT_API void udif_server_local_certificate_store(udif_server_application_state* state, const udif_child_certificate* ccert, const char* address);
285
294
302UDIF_EXPORT_API void udif_server_clear_log(udif_server_application_state* state);
303
311UDIF_EXPORT_API void udif_server_erase_all(udif_server_application_state* state);
312
320UDIF_EXPORT_API void udif_server_log_host(udif_server_application_state* state);
321
329UDIF_EXPORT_API void udif_server_log_print(udif_server_application_state* state);
330
343UDIF_EXPORT_API bool udif_server_log_write_message(udif_server_application_state* state, udif_application_messages msgtype, const char* message, size_t msglen);
344
354UDIF_EXPORT_API void udif_server_mfkcol_path(const udif_server_application_state* state, char* fpath, size_t pathlen);
355
366UDIF_EXPORT_API bool udif_server_mfkcol_from_file(qsc_collection_state* mfkcol, const udif_server_application_state* state);
367
376UDIF_EXPORT_API void udif_server_mfkcol_to_file(const qsc_collection_state* mfkcol, const udif_server_application_state* state);
377
385UDIF_EXPORT_API void udif_server_print_banner(const udif_server_application_state* state);
386
397UDIF_EXPORT_API void udif_server_print_error(const udif_server_application_state* state, udif_application_messages appmsg, const char* message, udif_protocol_errors error);
398
406UDIF_EXPORT_API void udif_server_print_configuration(const udif_server_application_state* state);
407
418UDIF_EXPORT_API bool udif_server_root_certificate_export(const udif_server_application_state* state, const char* dpath);
419
430
441UDIF_EXPORT_API void udif_server_root_certificate_generate(udif_server_application_state* state, udif_root_certificate* rcert, uint64_t period);
442
454UDIF_EXPORT_API bool udif_server_root_certificate_load(const udif_server_application_state* state, udif_root_certificate* root, const udif_topology_list_state* tlist);
455
466UDIF_EXPORT_API bool udif_server_root_certificate_print(const char* fpath, size_t pathlen);
467
477UDIF_EXPORT_API void udif_server_root_certificate_store(udif_server_application_state* state, const udif_root_certificate* rcert);
478
487
499UDIF_EXPORT_API bool udif_server_set_console_timeout(udif_server_application_state* state, const char* snum, size_t numlen);
500
512UDIF_EXPORT_API bool udif_server_set_domain_name(udif_server_application_state* state, const char* name, size_t namelen);
513
525UDIF_EXPORT_API bool udif_server_set_host_name(udif_server_application_state* state, const char* name, size_t namelen);
526
538UDIF_EXPORT_API bool udif_server_set_ip_address(udif_server_application_state* state, const char* address, size_t addlen);
539
551UDIF_EXPORT_API bool udif_server_set_password_retries(udif_server_application_state* state, const char* snum, size_t numlen);
552
561
569UDIF_EXPORT_API void udif_server_state_backup_restore(const udif_server_application_state* state);
570
578UDIF_EXPORT_API void udif_server_state_backup_save(const udif_server_application_state* state);
579
589
599UDIF_EXPORT_API bool udif_server_state_store(udif_server_application_state* state);
600
609
620UDIF_EXPORT_API bool udif_server_topology_adc_fetch(const udif_server_application_state* state, udif_child_certificate* dcert);
621
632
641
650
659UDIF_EXPORT_API void udif_server_topology_remove_certificate(udif_server_application_state* state, const char* issuer);
660
669UDIF_EXPORT_API void udif_server_topology_remove_node(udif_server_application_state* state, const char* issuer);
670
679
690UDIF_EXPORT_API bool udif_server_topology_local_fetch(const udif_server_application_state* state, udif_child_certificate* ccert);
691
701UDIF_EXPORT_API bool udif_server_topology_root_exists(const udif_server_application_state* state);
702
713UDIF_EXPORT_API bool udif_server_topology_root_fetch(const udif_server_application_state* state, udif_root_certificate* rcert);
714
723
733UDIF_EXPORT_API bool udif_server_user_login(udif_server_application_state* state);
734
742UDIF_EXPORT_API void udif_server_user_logout(udif_server_application_state* state);
743
744#endif
UDIF Certificate Handling Functions.
The UDIF command enumerations.
udif_command_actions
The ARS command actions.
Definition commands.h:248
udif_console_modes
The ARS console modes.
Definition commands.h:331
udif_application_messages
The ARS application messages.
Definition commands.h:73
UDIF Logging Functions.
UDIF_EXPORT_API bool udif_server_child_certificate_print(const char *fpath, size_t pathlen)
Print the local child certificate to console.
Definition server.c:838
UDIF_EXPORT_API bool udif_server_state_store(udif_server_application_state *state)
Write the server state to file.
Definition server.c:2033
UDIF_EXPORT_API void udif_server_root_certificate_generate(udif_server_application_state *state, udif_root_certificate *rcert, uint64_t period)
Generate a new root certificate.
Definition server.c:1346
UDIF_EXPORT_API bool udif_server_root_certificate_print(const char *fpath, size_t pathlen)
Print a formatted root certificate to console.
Definition server.c:1431
UDIF_EXPORT_API void udif_server_topology_reset(udif_server_application_state *state)
Delete all nodes and certificates except for the root.
Definition server.c:2300
UDIF_EXPORT_API void udif_server_topology_remove_node(udif_server_application_state *state, const char *issuer)
Remove a node from the topology.
Definition server.c:2283
UDIF_EXPORT_API bool udif_server_set_password_retries(udif_server_application_state *state, const char *snum, size_t numlen)
Set the number of failed password retries.
Definition server.c:1773
UDIF_EXPORT_API void udif_server_child_certificate_path(const udif_server_application_state *state, char *fpath, size_t pathlen)
Get the full path to the child certificate.
Definition server.c:811
UDIF_EXPORT_API bool udif_server_set_ip_address(udif_server_application_state *state, const char *address, size_t addlen)
Set the IP address of the server.
Definition server.c:1732
UDIF_EXPORT_API void udif_server_mfkcol_to_file(const qsc_collection_state *mfkcol, const udif_server_application_state *state)
Convert an mfk collection to an encrypted file.
Definition server.c:1124
UDIF_EXPORT_API bool udif_server_topology_root_exists(const udif_server_application_state *state)
Check if the root certificate exists on file.
Definition server.c:2318
UDIF_EXPORT_API void udif_server_state_backup_restore(const udif_server_application_state *state)
Restore the state from backup.
Definition server.c:1819
UDIF_EXPORT_API bool udif_server_root_certificate_export(const udif_server_application_state *state, const char *dpath)
Export the root certificate to a directory.
Definition server.c:1262
UDIF_EXPORT_API bool udif_server_set_console_timeout(udif_server_application_state *state, const char *snum, size_t numlen)
Set the number of idle minutes before the user is logged out.
Definition server.c:1580
UDIF_EXPORT_API bool udif_server_log_write_message(udif_server_application_state *state, udif_application_messages msgtype, const char *message, size_t msglen)
Write a message to the log.
Definition server.c:1014
UDIF_EXPORT_API void udif_server_child_certificate_generate(udif_server_application_state *state, udif_child_certificate *ccert, uint64_t period, uint8_t *capability)
Generate a new child certificate.
Definition server.c:728
UDIF_EXPORT_API void udif_server_erase_signature_key(udif_server_application_state *state)
Erase the signature-scheme signing key.
Definition server.c:1809
UDIF_EXPORT_API void udif_server_print_error(const udif_server_application_state *state, udif_application_messages appmsg, const char *message, udif_protocol_errors error)
Print a network error to the console.
Definition server.c:1179
UDIF_EXPORT_API void udif_server_user_logout(udif_server_application_state *state)
Log out of the server.
Definition server.c:2700
UDIF_EXPORT_API bool udif_server_set_host_name(udif_server_application_state *state, const char *name, size_t namelen)
Rename the server host.
Definition server.c:1675
UDIF_EXPORT_API bool udif_server_set_domain_name(udif_server_application_state *state, const char *name, size_t namelen)
Rename the network domain.
Definition server.c:1617
UDIF_EXPORT_API void udif_server_local_certificate_store(udif_server_application_state *state, const udif_child_certificate *ccert, const char *address)
Store a child certificate.
Definition server.c:873
UDIF_EXPORT_API void udif_server_certificate_path(const udif_server_application_state *state, char *fpath, size_t pathlen, const char *issuer)
Get the full path to a certificate.
Definition server.c:637
UDIF_EXPORT_API bool udif_server_topology_root_fetch(const udif_server_application_state *state, udif_root_certificate *rcert)
Load the root certificate from state.
Definition server.c:2336
UDIF_EXPORT_API void udif_server_log_host(udif_server_application_state *state)
Enable logging on the server.
Definition server.c:942
UDIF_EXPORT_API bool udif_server_child_certificate_from_issuer(udif_child_certificate *ccert, const udif_server_application_state *state, const char *issuer)
Get the certificate instance from file using the issuer string.
Definition server.c:689
UDIF_EXPORT_API void udif_server_clear_config(udif_server_application_state *state)
Erase and reset the configuration file.
Definition server.c:905
UDIF_EXPORT_API void udif_server_clear_log(udif_server_application_state *state)
Erase the log file.
Definition server.c:916
UDIF_EXPORT_API void udif_server_set_command_prompt(udif_server_application_state *state)
Set the command prompt to the current state mode.
Definition server.c:1528
UDIF_EXPORT_API void udif_server_state_unload(udif_server_application_state *state)
Unload the server state from memory.
Definition server.c:2065
UDIF_EXPORT_API void udif_server_child_certificate_path_from_issuer(const udif_server_application_state *state, char *fpath, size_t pathlen, const char *issuer)
Get the certificate file path from the certificate issuer name.
Definition server.c:824
UDIF_EXPORT_API bool udif_server_root_certificate_load(const udif_server_application_state *state, udif_root_certificate *root, const udif_topology_list_state *tlist)
Load a root certificate using the issuer name.
Definition server.c:1373
UDIF_EXPORT_API void udif_server_topology_remove_certificate(udif_server_application_state *state, const char *issuer)
Delete the certificate.
Definition server.c:2259
UDIF_EXPORT_API void udif_server_erase_all(udif_server_application_state *state)
Erase all state, including log files, and reset configuration.
Definition server.c:930
UDIF_EXPORT_API void udif_server_state_backup_save(const udif_server_application_state *state)
Backup the state.
Definition server.c:1877
UDIF_EXPORT_API void udif_server_mfkcol_path(const udif_server_application_state *state, char *fpath, size_t pathlen)
Get the path to the mfk collection file.
Definition server.c:1044
udif_server_server_loop_status
The UDIF server loop status.
Definition server.h:95
@ udif_server_loop_status_paused
Definition server.h:98
@ udif_server_loop_status_started
Definition server.h:97
@ udif_server_loop_status_stopped
Definition server.h:96
UDIF_EXPORT_API void udif_server_certificate_directory(const udif_server_application_state *state, char *dpath, size_t pathlen)
Get the full delimited path to the certificate storage directory.
Definition server.c:617
UDIF_EXPORT_API void udif_server_log_print(udif_server_application_state *state)
Print the log file to the console.
Definition server.c:970
UDIF_EXPORT_API void udif_server_root_certificate_store(udif_server_application_state *state, const udif_root_certificate *rcert)
Store a root certificate to a file.
Definition server.c:1466
UDIF_EXPORT_API void udif_server_print_banner(const udif_server_application_state *state)
Print the server banner.
Definition server.c:1168
UDIF_EXPORT_API bool udif_server_topology_local_fetch(const udif_server_application_state *state, udif_child_certificate *ccert)
Load the local certificate from state.
Definition server.c:2172
UDIF_EXPORT_API bool udif_server_child_certificate_import(udif_child_certificate *lcert, udif_server_application_state *state, const char *fpath)
Import the local certificate signed by the root.
Definition server.c:755
UDIF_EXPORT_API bool udif_server_child_certificate_from_serial(udif_child_certificate *ccert, const udif_server_application_state *state, const uint8_t *serial)
Get the certificate instance from file using the serial number.
Definition server.c:706
UDIF_EXPORT_API bool udif_server_user_login(udif_server_application_state *state)
Start the user login dialogue.
Definition server.c:2416
UDIF_EXPORT_API bool udif_server_topology_load(udif_server_application_state *state)
Load the topology from an encrypted file to state.
Definition server.c:2107
UDIF_EXPORT_API bool udif_server_root_import_dialogue(udif_server_application_state *state)
Import the root certificate.
Definition server.c:1300
UDIF_EXPORT_API bool udif_server_topology_adc_fetch(const udif_server_application_state *state, udif_child_certificate *dcert)
Load the ADC certificate from state.
Definition server.c:2077
UDIF_EXPORT_API void udif_server_state_initialize(udif_server_application_state *state, udif_network_designations srvtype)
Initialize the internal state.
Definition server.c:1923
UDIF_EXPORT_API void udif_server_topology_print_list(udif_server_application_state *state)
Print the topological list to the console.
Definition server.c:2202
UDIF_EXPORT_API void udif_server_topology_purge_externals(udif_server_application_state *state)
Clear the topology list except for the root and local nodes.
Definition server.c:2234
UDIF_EXPORT_API void udif_server_topology_to_file(udif_server_application_state *state)
Copy the topology to an encrypted file.
Definition server.c:2366
UDIF_EXPORT_API bool udif_server_child_certificate_export(const udif_server_application_state *state, const char *dpath)
Export the local certificate to a file.
Definition server.c:651
UDIF_EXPORT_API void udif_server_print_configuration(const udif_server_application_state *state)
Print the server configuration.
Definition server.c:1194
UDIF_EXPORT_API bool udif_server_mfkcol_from_file(qsc_collection_state *mfkcol, const udif_server_application_state *state)
Convert an encrypted mfk collection file to a collection state.
Definition server.c:1058
The UDIF server state.
Definition server.h:116
char username[UDIF_STORAGE_USERNAME_MAX]
Definition server.h:123
uint8_t * kchain
Definition server.h:124
char logpath[UDIF_STORAGE_PATH_MAX]
Definition server.h:122
const char * aplpath
Definition server.h:126
const char * pubkeyname
Definition server.h:131
udif_topology_list_state tlist
Definition server.h:137
const char * srvname
Definition server.h:132
const char * promptdef
Definition server.h:130
uint8_t retries
Definition server.h:143
udif_console_modes mode
Definition server.h:139
const char * prikeyname
Definition server.h:129
udif_child_certificate ads
Definition server.h:135
bool loghost
Definition server.h:145
uint16_t timeout
Definition server.h:142
const char * banner
Definition server.h:127
uint8_t * sigkey
Definition server.h:125
uint16_t port
Definition server.h:140
udif_root_certificate root
Definition server.h:136
const char * topname
Definition server.h:133
bool joined
Definition server.h:144
udif_network_designations srvtype
Definition server.h:141
char hostname[UDIF_STORAGE_HOSTNAME_MAX]
Definition server.h:119
char localip[UDIF_STORAGE_ADDRESS_MAX]
Definition server.h:121
char issuer[UDIF_CERTIFICATE_ISSUER_SIZE]
Definition server.h:120
udif_command_actions action
Definition server.h:138
char cmdprompt[UDIF_STORAGE_PROMPT_MAX]
Definition server.h:117
const char * wtitle
Definition server.h:134
const char * cfgname
Definition server.h:128
char domain[UDIF_STORAGE_DOMAINNAME_MAX]
Definition server.h:118
The UDIF topology list structure.
Definition topology.h:185
The UDIF topology functions.
UDIF Common Definitions and Core Library Configuration.
udif_network_designations
The UDIF device designation.
Definition udif.h:1297
udif_protocol_errors
The UDIF protocol error values.
Definition udif.h:1392
#define UDIF_CERTIFICATE_ISSUER_SIZE
The maximum certificate issuer string length. The last character must be a string terminator.
Definition udif.h:899