[autotest] Add test for the re-taking of ownership after the owner key is lost

client/cros/ownership.py

 # Copyright (c) 2011 The Chromium OS Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import common
 import constants
 import cryptohome
 import dbus
 import logging
 import login
@@ skipping 59 matching lines @@
 
     Connects to the session manager over the DBus system bus.  Returns
     appropriately configured DBus interface object.
     """
     bus = dbus.SystemBus()
     proxy = bus.get_object('org.chromium.SessionManager',
                            '/org/chromium/SessionManager')
     return dbus.Interface(proxy, 'org.chromium.SessionManagerInterface')
 
 
+def listen_to_session_manager_signal(callback, signal):
+    """Create and return a DBus connection to session_manager.
+
+    Connects to the session manager over the DBus system bus.  Returns
+    appropriately configured DBus interface object.
+    """
+    bus = dbus.SystemBus()
+    bus.add_signal_receiver(
+        handler_function=callback,
+        signal_name=signal,
+        dbus_interface='org.chromium.Chromium',
+        bus_name=None,
+        path='/')
+
+
 NSSDB = constants.CRYPTOHOME_MOUNT_PT + '/.pki/nssdb'
 PK12UTIL = 'nsspk12util'
 OPENSSLP12 = 'openssl pkcs12'
 OPENSSLX509 = 'openssl x509'
 OPENSSLRSA = 'openssl rsa'
 OPENSSLREQ = 'openssl req'
 OPENSSLCRYPTO = 'openssl sha1'
 
 
+def use_known_ownerkeys():

[petkov, 2011/04/28 22:16:25]

where is this routine used?

[Chris Masone, 2011/04/28 22:43:51]

login_OwnershipApi.py

[petkov, 2011/04/28 22:48:47]

So you rely on these test running in a specific sequence?

+    """Sets the system up to use a well-known keypair for owner operations.
+
+    Assuming the appropriate cryptohome is already mounted, configures the
+    device to accept policies signed with the checked-in 'mock' owner key.
+    """
+    dirname = os.path.dirname(__file__)
+    mock_keyfile = os.path.join(dirname, 'mock_owner_private.key')
+    mock_certfile = os.path.join(dirname, 'mock_owner_cert.pem')
+    push_to_nss(mock_keyfile, mock_certfile,  NSSDB)
+    utils.open_write_close(constants.OWNER_KEY_FILE,
+                           cert_extract_pubkey_der(mock_certfile))
+
+
+def known_privkey():
+    """Returns the mock owner private key in PEM format.
+    """
+    dirname = os.path.dirname(__file__)
+    return utils.read_file(os.path.join(dirname, 'mock_owner_private.key'))

[petkov, 2011/04/28 22:16:25]

mock_owner_private.key used in a couple of place -- define in a constant?

[Chris Masone, 2011/04/28 22:43:51]

Done.

+
+
+def known_pubkey():
+    """Returns the mock owner public key in DER format.
+    """
+    dirname = os.path.dirname(__file__)
+    return cert_extract_pubkey_der(os.path.join(dirname, 'mock_owner_cert.pem'))

[petkov, 2011/04/28 22:16:25]

mock_owner_cert.pem in a constant?

[Chris Masone, 2011/04/28 22:43:51]

Done.

+
+
 def pairgen():
     """Generate a self-signed cert and associated private key.
 
     Generates a self-signed X509 certificate and the associated private key.
     The key is 2048 bits.  The generated material is stored in PEM format
     and the paths to the two files are returned.
 
     The caller is responsible for cleaning up these files.
     """
     keyfile = scoped_tempfile.tempdir.name + '/private.key'
@@ skipping 108 matching lines @@
     except:
         err.fo.seek(0)
         logging.error(err.fo.read())
         raise
 
     sig.fo.seek(0)
     sig_data = sig.fo.read()
     if not sig_data:
         raise error.TestFail('Empty signature!')
     return sig_data