OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "chromeos/network/onc/onc_utils.h" | 5 #include "chromeos/network/onc/onc_utils.h" |
6 | 6 |
7 #include "base/base64.h" | 7 #include "base/base64.h" |
8 #include "base/json/json_reader.h" | 8 #include "base/json/json_reader.h" |
9 #include "base/logging.h" | 9 #include "base/logging.h" |
10 #include "base/values.h" | 10 #include "base/values.h" |
11 #include "chromeos/network/network_event_log.h" | 11 #include "chromeos/network/network_event_log.h" |
12 #include "chromeos/network/onc/onc_constants.h" | 12 #include "chromeos/network/onc/onc_constants.h" |
13 #include "crypto/encryptor.h" | 13 #include "crypto/encryptor.h" |
14 #include "crypto/hmac.h" | 14 #include "crypto/hmac.h" |
15 #include "crypto/symmetric_key.h" | 15 #include "crypto/symmetric_key.h" |
16 | 16 |
17 #define ONC_LOG_WARNING(message) NET_LOG_WARNING("ONC", message) | 17 #define ONC_LOG_WARNING(message) NET_LOG_WARNING("ONC", message) |
18 #define ONC_LOG_ERROR(message) NET_LOG_ERROR("ONC", message) | 18 #define ONC_LOG_ERROR(message) NET_LOG_ERROR("ONC", message) |
19 | 19 |
20 namespace chromeos { | 20 namespace chromeos { |
21 namespace onc { | 21 namespace onc { |
22 | 22 |
23 namespace { | 23 namespace { |
24 | 24 |
25 const char kUnableToDecrypt[] = "Unable to decrypt encrypted ONC"; | 25 const char kUnableToDecrypt[] = "Unable to decrypt encrypted ONC"; |
26 const char kUnableToDecode[] = "Unable to decode encrypted ONC"; | 26 const char kUnableToDecode[] = "Unable to decode encrypted ONC"; |
27 | 27 |
28 } // namespace | 28 } // namespace |
29 | 29 |
| 30 const char kEmptyUnencryptedConfiguration[] = |
| 31 "{\"Type\":\"UnencryptedConfiguration\",\"NetworkConfigurations\":[]," |
| 32 "\"Certificates\":[]}"; |
| 33 |
30 scoped_ptr<base::DictionaryValue> ReadDictionaryFromJson( | 34 scoped_ptr<base::DictionaryValue> ReadDictionaryFromJson( |
31 const std::string& json) { | 35 const std::string& json) { |
32 std::string error; | 36 std::string error; |
33 base::Value* root = base::JSONReader::ReadAndReturnError( | 37 base::Value* root = base::JSONReader::ReadAndReturnError( |
34 json, base::JSON_ALLOW_TRAILING_COMMAS, NULL, &error); | 38 json, base::JSON_ALLOW_TRAILING_COMMAS, NULL, &error); |
35 | 39 |
36 base::DictionaryValue* dict_ptr = NULL; | 40 base::DictionaryValue* dict_ptr = NULL; |
37 if (!root || !root->GetAsDictionary(&dict_ptr)) { | 41 if (!root || !root->GetAsDictionary(&dict_ptr)) { |
38 ONC_LOG_ERROR("Invalid JSON Dictionary: " + error); | 42 ONC_LOG_ERROR("Invalid JSON Dictionary: " + error); |
39 delete root; | 43 delete root; |
(...skipping 17 matching lines...) Expand all Loading... |
57 std::string ciphertext; | 61 std::string ciphertext; |
58 | 62 |
59 if (!root.GetString(encrypted::kCiphertext, &ciphertext) || | 63 if (!root.GetString(encrypted::kCiphertext, &ciphertext) || |
60 !root.GetString(encrypted::kCipher, &cipher) || | 64 !root.GetString(encrypted::kCipher, &cipher) || |
61 !root.GetString(encrypted::kHMAC, &hmac) || | 65 !root.GetString(encrypted::kHMAC, &hmac) || |
62 !root.GetString(encrypted::kHMACMethod, &hmac_method) || | 66 !root.GetString(encrypted::kHMACMethod, &hmac_method) || |
63 !root.GetString(encrypted::kIV, &initial_vector) || | 67 !root.GetString(encrypted::kIV, &initial_vector) || |
64 !root.GetInteger(encrypted::kIterations, &iterations) || | 68 !root.GetInteger(encrypted::kIterations, &iterations) || |
65 !root.GetString(encrypted::kSalt, &salt) || | 69 !root.GetString(encrypted::kSalt, &salt) || |
66 !root.GetString(encrypted::kStretch, &stretch_method) || | 70 !root.GetString(encrypted::kStretch, &stretch_method) || |
67 !root.GetString(encrypted::kType, &onc_type) || | 71 !root.GetString(kType, &onc_type) || |
68 onc_type != kEncryptedConfiguration) { | 72 onc_type != kEncryptedConfiguration) { |
69 | 73 |
70 ONC_LOG_ERROR("Encrypted ONC malformed."); | 74 ONC_LOG_ERROR("Encrypted ONC malformed."); |
71 return scoped_ptr<base::DictionaryValue>(); | 75 return scoped_ptr<base::DictionaryValue>(); |
72 } | 76 } |
73 | 77 |
74 if (hmac_method != encrypted::kSHA1 || | 78 if (hmac_method != encrypted::kSHA1 || |
75 cipher != encrypted::kAES256 || | 79 cipher != encrypted::kAES256 || |
76 stretch_method != encrypted::kPBKDF2) { | 80 stretch_method != encrypted::kPBKDF2) { |
77 ONC_LOG_ERROR("Encrypted ONC unsupported encryption scheme."); | 81 ONC_LOG_ERROR("Encrypted ONC unsupported encryption scheme."); |
(...skipping 77 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
155 return "none"; | 159 return "none"; |
156 case ONC_SOURCE_USER_IMPORT: | 160 case ONC_SOURCE_USER_IMPORT: |
157 return "user import"; | 161 return "user import"; |
158 } | 162 } |
159 NOTREACHED() << "unknown ONC source " << source; | 163 NOTREACHED() << "unknown ONC source " << source; |
160 return "unknown"; | 164 return "unknown"; |
161 } | 165 } |
162 | 166 |
163 } // chromeos | 167 } // chromeos |
164 } // onc | 168 } // onc |
OLD | NEW |