| | | 1 | | // Licensed to the .NET Foundation under one or more agreements. |
| | | 2 | | // The .NET Foundation licenses this file to you under the MIT license. |
| | | 3 | | |
| | | 4 | | using System; |
| | | 5 | | using System.Security.Cryptography.Xml; |
| | | 6 | | using System.Xml; |
| | | 7 | | using CoreWCF.Diagnostics; |
| | | 8 | | using CoreWCF.IdentityModel; |
| | | 9 | | using CoreWCF.IdentityModel.Tokens; |
| | | 10 | | using CoreWCF.Runtime; |
| | | 11 | | using ISignatureValueSecurityElement = CoreWCF.IdentityModel.ISignatureValueSecurityElement; |
| | | 12 | | |
| | | 13 | | namespace CoreWCF.Security |
| | | 14 | | { |
| | | 15 | | internal interface ISignatureReaderProvider |
| | | 16 | | { |
| | | 17 | | XmlDictionaryReader GetReader(object callbackContext); |
| | | 18 | | } |
| | | 19 | | |
| | | 20 | | internal sealed class ReceiveSecurityHeaderElementManager : ISignatureReaderProvider |
| | | 21 | | { |
| | | 22 | | private const int InitialCapacity = 8; |
| | | 23 | | private readonly ReceiveSecurityHeader _securityHeader; |
| | | 24 | | private ReceiveSecurityHeaderEntry[] _elements; |
| | | 25 | | private readonly string[] _headerIds; |
| | | 26 | | private string[] _predecryptionHeaderIds; |
| | | 27 | | private string _bodyId; |
| | | 28 | | private string _bodyContentId; |
| | | 29 | | |
| | 94 | 30 | | public ReceiveSecurityHeaderElementManager(ReceiveSecurityHeader securityHeader) |
| | | 31 | | { |
| | 94 | 32 | | _securityHeader = securityHeader; |
| | 94 | 33 | | _elements = new ReceiveSecurityHeaderEntry[InitialCapacity]; |
| | 94 | 34 | | if (securityHeader.RequireMessageProtection) |
| | | 35 | | { |
| | 94 | 36 | | _headerIds = new string[securityHeader.ProcessedMessage.Headers.Count]; |
| | | 37 | | } |
| | 94 | 38 | | } |
| | | 39 | | |
| | 866 | 40 | | public int Count { get; private set; } |
| | | 41 | | |
| | 0 | 42 | | public bool IsPrimaryTokenSigned { get; set; } = false; |
| | | 43 | | |
| | | 44 | | public void AppendElement( |
| | | 45 | | ReceiveSecurityHeaderElementCategory elementCategory, object element, |
| | | 46 | | ReceiveSecurityHeaderBindingModes bindingMode, string id, TokenTracker supportingTokenTracker) |
| | | 47 | | { |
| | 181 | 48 | | if (id != null) |
| | | 49 | | { |
| | 159 | 50 | | VerifyIdUniquenessInSecurityHeader(id); |
| | | 51 | | } |
| | 181 | 52 | | EnsureCapacityToAdd(); |
| | 181 | 53 | | _elements[Count++].SetElement(elementCategory, element, bindingMode, id, false, null, supportingTokenTracker |
| | 181 | 54 | | } |
| | | 55 | | |
| | | 56 | | public void AppendSignature(SignedXml signedXml) |
| | | 57 | | { |
| | 23 | 58 | | AppendElement(ReceiveSecurityHeaderElementCategory.Signature, signedXml, |
| | 23 | 59 | | ReceiveSecurityHeaderBindingModes.Unknown, signedXml.Signature.Id, null); |
| | 23 | 60 | | } |
| | | 61 | | |
| | | 62 | | public void AppendReferenceList(ReferenceList referenceList) |
| | | 63 | | { |
| | 0 | 64 | | AppendElement(ReceiveSecurityHeaderElementCategory.ReferenceList, referenceList, |
| | 0 | 65 | | ReceiveSecurityHeaderBindingModes.Unknown, null, null); |
| | 0 | 66 | | } |
| | | 67 | | |
| | | 68 | | public void AppendEncryptedData(EncryptedData encryptedData) |
| | | 69 | | { |
| | 0 | 70 | | AppendElement(ReceiveSecurityHeaderElementCategory.EncryptedData, encryptedData, |
| | 0 | 71 | | ReceiveSecurityHeaderBindingModes.Unknown, encryptedData.Id, null); |
| | 0 | 72 | | } |
| | | 73 | | |
| | | 74 | | public void AppendSignatureConfirmation(ISignatureValueSecurityElement signatureConfirmationElement) |
| | | 75 | | { |
| | 0 | 76 | | AppendElement(ReceiveSecurityHeaderElementCategory.SignatureConfirmation, signatureConfirmationElement, |
| | 0 | 77 | | ReceiveSecurityHeaderBindingModes.Unknown, signatureConfirmationElement.Id, null); |
| | 0 | 78 | | } |
| | | 79 | | |
| | | 80 | | public void AppendTimestamp(SecurityTimestamp timestamp) |
| | | 81 | | { |
| | 94 | 82 | | AppendElement(ReceiveSecurityHeaderElementCategory.Timestamp, timestamp, |
| | 94 | 83 | | ReceiveSecurityHeaderBindingModes.Unknown, timestamp.Id, null); |
| | 94 | 84 | | } |
| | | 85 | | |
| | | 86 | | public void AppendSecurityTokenReference(SecurityKeyIdentifierClause strClause, string strId) |
| | | 87 | | { |
| | 0 | 88 | | if (!string.IsNullOrEmpty(strId)) |
| | | 89 | | { |
| | 0 | 90 | | VerifyIdUniquenessInSecurityHeader(strId); |
| | 0 | 91 | | AppendElement(ReceiveSecurityHeaderElementCategory.SecurityTokenReference, strClause, ReceiveSecurityHea |
| | | 92 | | } |
| | 0 | 93 | | } |
| | | 94 | | |
| | | 95 | | public void AppendToken(SecurityToken token, ReceiveSecurityHeaderBindingModes mode, TokenTracker supportingToke |
| | | 96 | | { |
| | 64 | 97 | | AppendElement(ReceiveSecurityHeaderElementCategory.Token, token, |
| | 64 | 98 | | mode, token.Id, supportingTokenTracker); |
| | 64 | 99 | | } |
| | | 100 | | |
| | | 101 | | public void EnsureAllRequiredSecurityHeaderTargetsWereProtected() |
| | | 102 | | { |
| | | 103 | | Fx.Assert(_securityHeader.RequireMessageProtection, "security header protection checks should only be done f |
| | 0 | 104 | | for (int i = 0; i < Count; i++) |
| | | 105 | | { |
| | 0 | 106 | | GetElementEntry(i, out ReceiveSecurityHeaderEntry entry); |
| | 0 | 107 | | if (!entry.signed) |
| | | 108 | | { |
| | 0 | 109 | | switch (entry.elementCategory) |
| | | 110 | | { |
| | | 111 | | case ReceiveSecurityHeaderElementCategory.Timestamp: |
| | | 112 | | case ReceiveSecurityHeaderElementCategory.SignatureConfirmation: |
| | 0 | 113 | | throw DiagnosticUtility.ExceptionUtility.ThrowHelperError( |
| | 0 | 114 | | new MessageSecurityException(SR.Format(SR.RequiredSecurityHeaderElementNotSigned, entry. |
| | | 115 | | case ReceiveSecurityHeaderElementCategory.Token: |
| | 0 | 116 | | switch (entry.bindingMode) |
| | | 117 | | { |
| | | 118 | | case ReceiveSecurityHeaderBindingModes.Signed: |
| | | 119 | | case ReceiveSecurityHeaderBindingModes.SignedEndorsing: |
| | | 120 | | case ReceiveSecurityHeaderBindingModes.Basic: |
| | 0 | 121 | | throw DiagnosticUtility.ExceptionUtility.ThrowHelperError( |
| | 0 | 122 | | new MessageSecurityException(SR.Format(SR.RequiredSecurityTokenNotSigned, entry. |
| | | 123 | | } |
| | | 124 | | break; |
| | | 125 | | } |
| | | 126 | | } |
| | | 127 | | |
| | 0 | 128 | | if (!entry.encrypted) |
| | | 129 | | { |
| | 0 | 130 | | if (entry.elementCategory == ReceiveSecurityHeaderElementCategory.Token && |
| | 0 | 131 | | entry.bindingMode == ReceiveSecurityHeaderBindingModes.Basic) |
| | | 132 | | { |
| | 0 | 133 | | throw DiagnosticUtility.ExceptionUtility.ThrowHelperError( |
| | 0 | 134 | | new MessageSecurityException(SR.Format(SR.RequiredSecurityTokenNotEncrypted, entry.element, |
| | | 135 | | } |
| | | 136 | | } |
| | | 137 | | } |
| | 0 | 138 | | } |
| | | 139 | | |
| | | 140 | | private void EnsureCapacityToAdd() |
| | | 141 | | { |
| | 181 | 142 | | if (Count == _elements.Length) |
| | | 143 | | { |
| | 0 | 144 | | ReceiveSecurityHeaderEntry[] newElements = new ReceiveSecurityHeaderEntry[_elements.Length * 2]; |
| | 0 | 145 | | Array.Copy(_elements, 0, newElements, 0, Count); |
| | 0 | 146 | | _elements = newElements; |
| | | 147 | | } |
| | 181 | 148 | | } |
| | | 149 | | |
| | | 150 | | public object GetElement(int index) |
| | | 151 | | { |
| | | 152 | | Fx.Assert(0 <= index && index < Count, ""); |
| | 10 | 153 | | return _elements[index].element; |
| | | 154 | | } |
| | | 155 | | |
| | | 156 | | public T GetElement<T>(int index) where T : class |
| | | 157 | | { |
| | | 158 | | Fx.Assert(0 <= index && index < Count, ""); |
| | 0 | 159 | | return (T)_elements[index].element; |
| | | 160 | | } |
| | | 161 | | |
| | | 162 | | public void GetElementEntry(int index, out ReceiveSecurityHeaderEntry element) |
| | | 163 | | { |
| | | 164 | | Fx.Assert(0 <= index && index < Count, "index out of range"); |
| | 20 | 165 | | element = _elements[index]; |
| | 20 | 166 | | } |
| | | 167 | | |
| | | 168 | | public ReceiveSecurityHeaderElementCategory GetElementCategory(int index) |
| | | 169 | | { |
| | | 170 | | Fx.Assert(0 <= index && index < Count, "index out of range"); |
| | 30 | 171 | | return _elements[index].elementCategory; |
| | | 172 | | } |
| | | 173 | | |
| | | 174 | | public void GetPrimarySignature(out XmlDictionaryReader reader, out string id) |
| | | 175 | | { |
| | 0 | 176 | | for (int i = 0; i < Count; i++) |
| | | 177 | | { |
| | 0 | 178 | | GetElementEntry(i, out ReceiveSecurityHeaderEntry entry); |
| | 0 | 179 | | if (entry.elementCategory == ReceiveSecurityHeaderElementCategory.Signature && |
| | 0 | 180 | | entry.bindingMode == ReceiveSecurityHeaderBindingModes.Primary) |
| | | 181 | | { |
| | 0 | 182 | | reader = GetReader(i, false); |
| | 0 | 183 | | id = entry.id; |
| | 0 | 184 | | return; |
| | | 185 | | } |
| | | 186 | | } |
| | 0 | 187 | | reader = null; |
| | 0 | 188 | | id = null; |
| | 0 | 189 | | return; |
| | | 190 | | } |
| | | 191 | | |
| | | 192 | | internal XmlDictionaryReader GetReader(int index, bool requiresEncryptedFormReader) |
| | | 193 | | { |
| | | 194 | | Fx.Assert(0 <= index && index < Count, "index out of range"); |
| | 0 | 195 | | if (!requiresEncryptedFormReader) |
| | | 196 | | { |
| | 0 | 197 | | byte[] decryptedBuffer = _elements[index].decryptedBuffer; |
| | 0 | 198 | | if (decryptedBuffer != null) |
| | | 199 | | { |
| | 0 | 200 | | return _securityHeader.CreateDecryptedReader(decryptedBuffer); |
| | | 201 | | } |
| | | 202 | | } |
| | 0 | 203 | | XmlDictionaryReader securityHeaderReader = _securityHeader.CreateSecurityHeaderReader(); |
| | 0 | 204 | | securityHeaderReader.ReadStartElement(); |
| | 0 | 205 | | for (int i = 0; securityHeaderReader.IsStartElement() && i < index; i++) |
| | | 206 | | { |
| | 0 | 207 | | securityHeaderReader.Skip(); |
| | | 208 | | } |
| | 0 | 209 | | return securityHeaderReader; |
| | | 210 | | } |
| | | 211 | | |
| | | 212 | | public XmlDictionaryReader GetSignatureVerificationReader(string id, bool requiresEncryptedFormReaderIfDecrypted |
| | | 213 | | { |
| | 0 | 214 | | for (int i = 0; i < Count; i++) |
| | | 215 | | { |
| | 0 | 216 | | GetElementEntry(i, out ReceiveSecurityHeaderEntry entry); |
| | 0 | 217 | | bool encryptedForm = entry.encrypted && requiresEncryptedFormReaderIfDecrypted; |
| | 0 | 218 | | bool isSignedToken = (entry.bindingMode == ReceiveSecurityHeaderBindingModes.Signed) || (entry.bindingMo |
| | 0 | 219 | | if (entry.MatchesId(id, encryptedForm)) |
| | | 220 | | { |
| | 0 | 221 | | SetSigned(i); |
| | 0 | 222 | | if (!IsPrimaryTokenSigned) |
| | | 223 | | { |
| | 0 | 224 | | IsPrimaryTokenSigned = entry.bindingMode == ReceiveSecurityHeaderBindingModes.Primary && entry.e |
| | | 225 | | } |
| | 0 | 226 | | return GetReader(i, encryptedForm); |
| | | 227 | | } |
| | 0 | 228 | | else if (entry.MatchesId(id, isSignedToken)) |
| | | 229 | | { |
| | 0 | 230 | | SetSigned(i); |
| | 0 | 231 | | if (!IsPrimaryTokenSigned) |
| | | 232 | | { |
| | 0 | 233 | | IsPrimaryTokenSigned = entry.bindingMode == ReceiveSecurityHeaderBindingModes.Primary && entry.e |
| | | 234 | | } |
| | 0 | 235 | | return GetReader(i, isSignedToken); |
| | | 236 | | } |
| | | 237 | | } |
| | 0 | 238 | | return null; |
| | | 239 | | } |
| | | 240 | | |
| | | 241 | | private void OnDuplicateId(string id) |
| | | 242 | | { |
| | 0 | 243 | | throw TraceUtility.ThrowHelperError( |
| | 0 | 244 | | new MessageSecurityException(SR.Format(SR.DuplicateIdInMessageToBeVerified, id)), _securityHeader.Securi |
| | | 245 | | } |
| | | 246 | | |
| | | 247 | | public void SetBindingMode(int index, ReceiveSecurityHeaderBindingModes bindingMode) |
| | | 248 | | { |
| | | 249 | | Fx.Assert(0 <= index && index < Count, "index out of range"); |
| | 23 | 250 | | _elements[index].bindingMode = bindingMode; |
| | 23 | 251 | | } |
| | | 252 | | |
| | | 253 | | public void SetElement(int index, object element) |
| | | 254 | | { |
| | | 255 | | Fx.Assert(0 <= index && index < Count, ""); |
| | 0 | 256 | | _elements[index].element = element; |
| | 0 | 257 | | } |
| | | 258 | | |
| | | 259 | | public void ReplaceHeaderEntry(int index, ReceiveSecurityHeaderEntry element) |
| | | 260 | | { |
| | | 261 | | Fx.Assert(0 <= index && index < Count, ""); |
| | 0 | 262 | | _elements[index] = element; |
| | 0 | 263 | | } |
| | | 264 | | |
| | | 265 | | public void SetElementAfterDecryption( |
| | | 266 | | int index, |
| | | 267 | | ReceiveSecurityHeaderElementCategory elementCategory, object element, |
| | | 268 | | ReceiveSecurityHeaderBindingModes bindingMode, string id, byte[] decryptedBuffer, TokenTracker supportingTok |
| | | 269 | | { |
| | | 270 | | Fx.Assert(0 <= index && index < Count, "index out of range"); |
| | | 271 | | Fx.Assert(_elements[index].elementCategory == ReceiveSecurityHeaderElementCategory.EncryptedData, "Replaced |
| | 0 | 272 | | if (id != null) |
| | | 273 | | { |
| | 0 | 274 | | VerifyIdUniquenessInSecurityHeader(id); |
| | | 275 | | } |
| | 0 | 276 | | _elements[index].PreserveIdBeforeDecryption(); |
| | 0 | 277 | | _elements[index].SetElement(elementCategory, element, bindingMode, id, true, decryptedBuffer, supportingToke |
| | 0 | 278 | | } |
| | | 279 | | |
| | | 280 | | public void SetSignatureAfterDecryption(int index, SignedXml signedXml, byte[] decryptedBuffer) |
| | | 281 | | { |
| | 0 | 282 | | SetElementAfterDecryption(index, ReceiveSecurityHeaderElementCategory.Signature, |
| | 0 | 283 | | signedXml, ReceiveSecurityHeaderBindingModes.Unknown, signedXml.SignedInfo.Id, dec |
| | 0 | 284 | | } |
| | | 285 | | |
| | | 286 | | public void SetSignatureConfirmationAfterDecryption(int index, ISignatureValueSecurityElement signatureConfirmat |
| | | 287 | | { |
| | 0 | 288 | | SetElementAfterDecryption(index, ReceiveSecurityHeaderElementCategory.SignatureConfirmation, |
| | 0 | 289 | | signatureConfirmationElement, ReceiveSecurityHeaderBindingModes.Unknown, signature |
| | 0 | 290 | | } |
| | | 291 | | |
| | | 292 | | internal void SetSigned(int index) |
| | | 293 | | { |
| | | 294 | | Fx.Assert(0 <= index && index < Count, ""); |
| | 0 | 295 | | _elements[index].signed = true; |
| | 0 | 296 | | if (_elements[index].supportingTokenTracker != null) |
| | | 297 | | { |
| | 0 | 298 | | _elements[index].supportingTokenTracker.IsSigned = true; |
| | | 299 | | } |
| | 0 | 300 | | } |
| | | 301 | | |
| | | 302 | | public void SetTimestampSigned(string id) |
| | | 303 | | { |
| | 0 | 304 | | for (int i = 0; i < Count; i++) |
| | | 305 | | { |
| | 0 | 306 | | if (_elements[i].elementCategory == ReceiveSecurityHeaderElementCategory.Timestamp && |
| | 0 | 307 | | _elements[i].id == id) |
| | | 308 | | { |
| | 0 | 309 | | SetSigned(i); |
| | | 310 | | } |
| | | 311 | | } |
| | 0 | 312 | | } |
| | | 313 | | |
| | | 314 | | public void SetTokenAfterDecryption(int index, SecurityToken token, ReceiveSecurityHeaderBindingModes mode, byte |
| | | 315 | | { |
| | 0 | 316 | | SetElementAfterDecryption(index, ReceiveSecurityHeaderElementCategory.Token, token, mode, token.Id, decrypte |
| | 0 | 317 | | } |
| | | 318 | | |
| | | 319 | | internal bool TryGetTokenElementIndexFromStrId(string strId, out int index) |
| | | 320 | | { |
| | 0 | 321 | | index = -1; |
| | 0 | 322 | | SecurityKeyIdentifierClause strClause = null; |
| | 0 | 323 | | for (int position = 0; position < Count; position++) |
| | | 324 | | { |
| | 0 | 325 | | if (GetElementCategory(position) == ReceiveSecurityHeaderElementCategory.SecurityTokenReference) |
| | | 326 | | { |
| | 0 | 327 | | strClause = GetElement(position) as SecurityKeyIdentifierClause; |
| | 0 | 328 | | if (strClause.Id == strId) |
| | | 329 | | { |
| | | 330 | | break; |
| | | 331 | | } |
| | | 332 | | } |
| | | 333 | | } |
| | | 334 | | |
| | 0 | 335 | | if (strClause == null) |
| | | 336 | | { |
| | 0 | 337 | | return false; |
| | | 338 | | } |
| | | 339 | | |
| | 0 | 340 | | for (int position = 0; position < Count; position++) |
| | | 341 | | { |
| | 0 | 342 | | if (GetElementCategory(position) == ReceiveSecurityHeaderElementCategory.Token) |
| | | 343 | | { |
| | 0 | 344 | | SecurityToken token = GetElement(position) as SecurityToken; |
| | 0 | 345 | | if (token.MatchesKeyIdentifierClause(strClause)) |
| | | 346 | | { |
| | 0 | 347 | | index = position; |
| | 0 | 348 | | return true; |
| | | 349 | | } |
| | | 350 | | } |
| | | 351 | | } |
| | | 352 | | |
| | 0 | 353 | | return false; |
| | | 354 | | } |
| | | 355 | | |
| | | 356 | | public void VerifyUniquenessAndSetBodyId(string id) |
| | | 357 | | { |
| | 0 | 358 | | if (id != null) |
| | | 359 | | { |
| | 0 | 360 | | VerifyIdUniquenessInSecurityHeader(id); |
| | 0 | 361 | | VerifyIdUniquenessInMessageHeadersAndBody(id, _headerIds.Length); |
| | 0 | 362 | | _bodyId = id; |
| | | 363 | | } |
| | 0 | 364 | | } |
| | | 365 | | |
| | | 366 | | public void VerifyUniquenessAndSetBodyContentId(string id) |
| | | 367 | | { |
| | 0 | 368 | | if (id != null) |
| | | 369 | | { |
| | 0 | 370 | | VerifyIdUniquenessInSecurityHeader(id); |
| | 0 | 371 | | VerifyIdUniquenessInMessageHeadersAndBody(id, _headerIds.Length); |
| | 0 | 372 | | _bodyContentId = id; |
| | | 373 | | } |
| | 0 | 374 | | } |
| | | 375 | | |
| | | 376 | | public void VerifyUniquenessAndSetDecryptedHeaderId(string id, int headerIndex) |
| | | 377 | | { |
| | 0 | 378 | | if (id != null) |
| | | 379 | | { |
| | 0 | 380 | | VerifyIdUniquenessInSecurityHeader(id); |
| | 0 | 381 | | VerifyIdUniquenessInMessageHeadersAndBody(id, headerIndex); |
| | 0 | 382 | | if (_predecryptionHeaderIds == null) |
| | | 383 | | { |
| | 0 | 384 | | _predecryptionHeaderIds = new string[_headerIds.Length]; |
| | | 385 | | } |
| | 0 | 386 | | _predecryptionHeaderIds[headerIndex] = _headerIds[headerIndex]; |
| | 0 | 387 | | _headerIds[headerIndex] = id; |
| | | 388 | | } |
| | 0 | 389 | | } |
| | | 390 | | |
| | | 391 | | public void VerifyUniquenessAndSetHeaderId(string id, int headerIndex) |
| | | 392 | | { |
| | 0 | 393 | | if (id != null) |
| | | 394 | | { |
| | 0 | 395 | | VerifyIdUniquenessInSecurityHeader(id); |
| | 0 | 396 | | VerifyIdUniquenessInMessageHeadersAndBody(id, headerIndex); |
| | 0 | 397 | | _headerIds[headerIndex] = id; |
| | | 398 | | } |
| | 0 | 399 | | } |
| | | 400 | | |
| | | 401 | | private void VerifyIdUniquenessInHeaderIdTable(string id, int headerCount, string[] headerIdTable) |
| | | 402 | | { |
| | 0 | 403 | | for (int i = 0; i < headerCount; i++) |
| | | 404 | | { |
| | 0 | 405 | | if (headerIdTable[i] == id) |
| | | 406 | | { |
| | 0 | 407 | | OnDuplicateId(id); |
| | | 408 | | } |
| | | 409 | | } |
| | 0 | 410 | | } |
| | | 411 | | |
| | | 412 | | private void VerifyIdUniquenessInSecurityHeader(string id) |
| | | 413 | | { |
| | | 414 | | Fx.Assert(id != null, "Uniqueness should only be tested for non-empty ids"); |
| | 450 | 415 | | for (int i = 0; i < Count; i++) |
| | | 416 | | { |
| | 66 | 417 | | if (_elements[i].id == id || _elements[i].encryptedFormId == id) |
| | | 418 | | { |
| | 0 | 419 | | OnDuplicateId(id); |
| | | 420 | | } |
| | | 421 | | } |
| | 159 | 422 | | } |
| | | 423 | | |
| | | 424 | | private void VerifyIdUniquenessInMessageHeadersAndBody(string id, int headerCount) |
| | | 425 | | { |
| | | 426 | | Fx.Assert(id != null, "Uniqueness should only be tested for non-empty ids"); |
| | 0 | 427 | | VerifyIdUniquenessInHeaderIdTable(id, headerCount, _headerIds); |
| | 0 | 428 | | if (_predecryptionHeaderIds != null) |
| | | 429 | | { |
| | 0 | 430 | | VerifyIdUniquenessInHeaderIdTable(id, headerCount, _predecryptionHeaderIds); |
| | | 431 | | } |
| | 0 | 432 | | if (_bodyId == id || _bodyContentId == id) |
| | | 433 | | { |
| | 0 | 434 | | OnDuplicateId(id); |
| | | 435 | | } |
| | 0 | 436 | | } |
| | | 437 | | |
| | | 438 | | XmlDictionaryReader ISignatureReaderProvider.GetReader(object callbackContext) |
| | | 439 | | { |
| | 0 | 440 | | int index = (int)callbackContext; |
| | | 441 | | Fx.Assert(index < Count, "Invalid Context provided."); |
| | 0 | 442 | | return GetReader(index, false); |
| | | 443 | | } |
| | | 444 | | |
| | | 445 | | public void VerifySignatureConfirmationWasFound() |
| | | 446 | | { |
| | 0 | 447 | | for (int i = 0; i < Count; i++) |
| | | 448 | | { |
| | 0 | 449 | | GetElementEntry(i, out ReceiveSecurityHeaderEntry entry); |
| | 0 | 450 | | if (entry.elementCategory == ReceiveSecurityHeaderElementCategory.SignatureConfirmation) |
| | | 451 | | { |
| | 0 | 452 | | return; |
| | | 453 | | } |
| | | 454 | | } |
| | 0 | 455 | | throw DiagnosticUtility.ExceptionUtility.ThrowHelperError(new MessageSecurityException(SR.SignatureConfirmat |
| | | 456 | | } |
| | | 457 | | } |
| | | 458 | | } |