Certificate Transparency: Start tracking logs' state

net/test/ct_test_util.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/test/ct_test_util.h"
 
 #include <stdint.h>
 #include <string.h>
 #include <vector>
 
@@ skipping 187 matching lines @@
 
 std::string GetTestPublicKeyId() {
   return HexToBytes(kTestKeyId);
 }
 
 void GetX509CertSCT(scoped_refptr<SignedCertificateTimestamp>* sct_ref) {
   CHECK(sct_ref != NULL);
   *sct_ref = new SignedCertificateTimestamp();
   SignedCertificateTimestamp *const sct(sct_ref->get());
   sct->version = ct::SignedCertificateTimestamp::SCT_VERSION_1;
-  sct->log_id = HexToBytes(kTestKeyId);
+  sct->log_id = GetTestPublicKeyId();
   // Time the log issued a SCT for this certificate, which is
   // Fri Apr  5 10:04:16.089 2013
   sct->timestamp = base::Time::UnixEpoch() +
       base::TimeDelta::FromMilliseconds(INT64_C(1365181456089));
   sct->extensions.clear();
 
   sct->signature.hash_algorithm = ct::DigitallySigned::HASH_ALGO_SHA256;
   sct->signature.signature_algorithm = ct::DigitallySigned::SIG_ALGO_ECDSA;
   sct->signature.signature_data = HexToBytes(kTestSCTSignatureData);
 }
 
 void GetPrecertSCT(scoped_refptr<SignedCertificateTimestamp>* sct_ref) {
   CHECK(sct_ref != NULL);
   *sct_ref = new SignedCertificateTimestamp();
   SignedCertificateTimestamp *const sct(sct_ref->get());
   sct->version = ct::SignedCertificateTimestamp::SCT_VERSION_1;
-  sct->log_id = HexToBytes(kTestKeyId);
+  sct->log_id = GetTestPublicKeyId();
   // Time the log issued a SCT for this Precertificate, which is
   // Fri Apr  5 10:04:16.275 2013
   sct->timestamp = base::Time::UnixEpoch() +
     base::TimeDelta::FromMilliseconds(INT64_C(1365181456275));
   sct->extensions.clear();
 
   sct->signature.hash_algorithm = ct::DigitallySigned::HASH_ALGO_SHA256;
   sct->signature.signature_algorithm = ct::DigitallySigned::SIG_ALGO_ECDSA;
   sct->signature.signature_data = HexToBytes(kTestSCTPrecertSignatureData);
 }
@@ skipping 14 matching lines @@
   return HexToBytes(kFakeOCSPResponseCert);
 }
 
 std::string GetDerEncodedFakeOCSPResponseIssuerCert() {
   return HexToBytes(kFakeOCSPResponseIssuerCert);
 }
 
 // A sample, valid STH
 bool GetSampleSignedTreeHead(SignedTreeHead* sth) {
   sth->version = SignedTreeHead::V1;
+  sth->log_id = GetTestPublicKeyId();
   sth->timestamp = base::Time::UnixEpoch() +
                    base::TimeDelta::FromMilliseconds(kSampleSTHTimestamp);
   sth->tree_size = kSampleSTHTreeSize;
   std::string sha256_root_hash = GetSampleSTHSHA256RootHash();
   memcpy(sth->sha256_root_hash, sha256_root_hash.c_str(), kSthRootHashLength);
 
   return GetSampleSTHTreeHeadDecodedSignature(&(sth->signature));
 }
 
 bool GetSampleEmptySignedTreeHead(SignedTreeHead* sth) {
@@ skipping 35 matching lines @@
 std::string GetSampleSTHTreeHeadSignature() {
   return HexToBytes(kSampleSTHTreeHeadSignature);
 }
 
 bool GetSampleSTHTreeHeadDecodedSignature(DigitallySigned* signature) {
   std::string tree_head_signature = HexToBytes(kSampleSTHTreeHeadSignature);
   base::StringPiece sp(tree_head_signature);
   return DecodeDigitallySigned(&sp, signature) && sp.empty();
 }
 
+std::string GetSampleSTH() {
+  const std::string log_id = ct::GetTestPublicKeyId();
+  const std::string timestamp("\x0\x0\x1\x45\x3c\x5f\xb8\x35", 8);
+  const std::string tree_size("\x0\x0\x0\x0\x0\x0\x0\x15", 8);
+
+  std::string expected_output;
+  expected_output += log_id;
+  expected_output += timestamp;
+  expected_output += tree_size;
+  expected_output += ct::GetSampleSTHSHA256RootHash();
+  expected_output += ct::GetSampleSTHTreeHeadSignature();
+
+  return expected_output;
+}
+
 std::string GetSampleSTHAsJson() {
   return CreateSignedTreeHeadJsonString(kSampleSTHTreeSize, kSampleSTHTimestamp,
                                         GetSampleSTHSHA256RootHash(),
                                         GetSampleSTHTreeHeadSignature());
 }
 
 std::string CreateSignedTreeHeadJsonString(size_t tree_size,
                                            int64_t timestamp,
                                            std::string sha256_root_hash,
                                            std::string tree_head_signature) {
@@ skipping 63 matching lines @@
 
 bool CheckForSCTOrigin(const ct::CTVerifyResult& result,
                        ct::SignedCertificateTimestamp::Origin origin) {
   return (result.verified_scts.size() > 0) &&
          (result.verified_scts[0]->origin == origin);
 }
 
 }  // namespace ct
 
 }  // namespace net