Move Cast certificate verification code from extensions to components.

components/cast_certificate/cast_cert_validator_unittest.cc

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
-#include "extensions/common/cast/cast_cert_validator.h"
+#include "components/cast_certificate/cast_cert_validator.h"
 
-#include "extensions/common/cast/cast_cert_validator_test_helpers.h"
+#include "components/cast_certificate/cast_cert_validator_test_helpers.h"
 #include "testing/gtest/include/gtest/gtest.h"
 
-namespace extensions {
-
-namespace api {
-
-namespace cast_crypto {
+namespace cast_certificate {
 
 namespace {
 
 // Creates an std::string given a uint8_t array.
 template <size_t N>
 std::string CreateString(const uint8_t (&data)[N]) {
   return std::string(reinterpret_cast<const char*>(data), N);
 }
 
 // Indicates the expected result of test verification.
@@ skipping 13 matching lines @@
 //  * |time| - The timestamp to use when verifying the certificate.
 //  * |optional_signed_data_file_name| - optional path to a PEM file containing
 //        a valid signature generated by the device certificate.
 //
 void RunTest(TestResult expected_result,
              const std::string& expected_common_name,
              CastDeviceCertPolicy expected_policy,
              const std::string& certs_file_name,
              const base::Time::Exploded& time,
              const std::string& optional_signed_data_file_name) {
-  auto certs = cast_test_helpers::ReadCertificateChainFromFile(certs_file_name);
+  auto certs =
+      cast_certificate::testing::ReadCertificateChainFromFile(certs_file_name);
 
   std::unique_ptr<CertVerificationContext> context;
   CastDeviceCertPolicy policy;
   bool result = VerifyDeviceCert(certs, time, &context, &policy);
 
   if (expected_result == RESULT_FAIL) {
     ASSERT_FALSE(result);
     return;
   }
 
   ASSERT_TRUE(result);
   EXPECT_EQ(expected_policy, policy);
   ASSERT_TRUE(context.get());
 
   // Test that the context is good.
   EXPECT_EQ(expected_common_name, context->GetCommonName());
 
   ASSERT_TRUE(context);
 
   // Test verification of some invalid signatures.
   EXPECT_FALSE(
       context->VerifySignatureOverData("bogus signature", "bogus data"));
   EXPECT_FALSE(context->VerifySignatureOverData("", "bogus data"));
   EXPECT_FALSE(context->VerifySignatureOverData("", ""));
 
   // If valid signatures are known for this device certificate, test them.
   if (!optional_signed_data_file_name.empty()) {
-    auto signature_data = cast_test_helpers::ReadSignatureTestData(
+    auto signature_data = cast_certificate::testing::ReadSignatureTestData(
         optional_signed_data_file_name);
 
     // Test verification of a valid SHA1 signature.
     EXPECT_TRUE(context->VerifySignatureOverData(signature_data.signature_sha1,
                                                  signature_data.message));
 
     // Test verification of a valid SHA256
     //
     // TODO(eroman): This fails because there isn't currently support
     // for specifying a signature algorithm other than RSASSA PKCS#1 v1.5 with
@@ skipping 36 matching lines @@
 
 // Tests verifying a valid certificate chain of length 2:
 //
 //   0: 2ZZBG9 FA8FCA3EF91A
 //   1: Eureka Gen1 ICA
 //
 // Chains to trust anchor:
 //   Eureka Root CA    (not included)
 TEST(VerifyCastDeviceCertTest, ChromecastGen1) {
   RunTest(RESULT_SUCCESS, "2ZZBG9 FA8FCA3EF91A", CastDeviceCertPolicy::NONE,
-          "cast_certificates/chromecast_gen1.pem", AprilFirst2016(),
-          "cast_signeddata/2ZZBG9_FA8FCA3EF91A.pem");
+          "certificates/chromecast_gen1.pem", AprilFirst2016(),
+          "signeddata/2ZZBG9_FA8FCA3EF91A.pem");
 }
 
 // Tests verifying a valid certificate chain of length 2:
 //
 //  0: 2ZZBG9 FA8FCA3EF91A
 //  1: Eureka Gen1 ICA
 //
 // Chains to trust anchor:
 //   Cast Root CA     (not included)
 TEST(VerifyCastDeviceCertTest, ChromecastGen1Reissue) {
   RunTest(RESULT_SUCCESS, "2ZZBG9 FA8FCA3EF91A", CastDeviceCertPolicy::NONE,
-          "cast_certificates/chromecast_gen1_reissue.pem", AprilFirst2016(),
-          "cast_signeddata/2ZZBG9_FA8FCA3EF91A.pem");
+          "certificates/chromecast_gen1_reissue.pem", AprilFirst2016(),
+          "signeddata/2ZZBG9_FA8FCA3EF91A.pem");
 }
 
 // Tests verifying a valid certificate chain of length 2:
 //
 //   0: 3ZZAK6 FA8FCA3F0D35
 //   1: Chromecast ICA 3
 //
 // Chains to trust anchor:
 //   Cast Root CA     (not included)
 TEST(VerifyCastDeviceCertTest, ChromecastGen2) {
   RunTest(RESULT_SUCCESS, "3ZZAK6 FA8FCA3F0D35", CastDeviceCertPolicy::NONE,
-          "cast_certificates/chromecast_gen2.pem", AprilFirst2016(), "");
+          "certificates/chromecast_gen2.pem", AprilFirst2016(), "");
 }
 
 // Tests verifying a valid certificate chain of length 3:
 //
 //   0: -6394818897508095075
 //   1: Asus fugu Cast ICA
 //   2: Widevine Cast Subroot
 //
 // Chains to trust anchor:
 //   Cast Root CA     (not included)
 TEST(VerifyCastDeviceCertTest, Fugu) {
   RunTest(RESULT_SUCCESS, "-6394818897508095075", CastDeviceCertPolicy::NONE,
-          "cast_certificates/fugu.pem", AprilFirst2016(), "");
+          "certificates/fugu.pem", AprilFirst2016(), "");
 }
 
 // Tests verifying an invalid certificate chain of length 1:
 //
 //  0: Cast Test Untrusted Device
 //
 // Chains to:
 //   Cast Test Untrusted ICA    (not included)
 //
 // This is invalid because it does not chain to a trust anchor.
 TEST(VerifyCastDeviceCertTest, Unchained) {
   RunTest(RESULT_FAIL, "", CastDeviceCertPolicy::NONE,
-          "cast_certificates/unchained.pem", AprilFirst2016(), "");
+          "certificates/unchained.pem", AprilFirst2016(), "");
 }
 
 // Tests verifying one of the self-signed trust anchors (chain of length 1):
 //
 //  0: Cast Root CA
 //
 // Chains to trust anchor:
 //   Cast Root CA
 //
 // Although this is a valid and trusted certificate (it is one of the
 // trust anchors after all) it fails the test as it is not a *device
 // certificate*.
 TEST(VerifyCastDeviceCertTest, CastRootCa) {
   RunTest(RESULT_FAIL, "", CastDeviceCertPolicy::NONE,
-          "cast_certificates/cast_root_ca.pem", AprilFirst2016(), "");
+          "certificates/cast_root_ca.pem", AprilFirst2016(), "");
 }
 
 // Tests verifying a valid certificate chain of length 2:
 //
 //  0: 4ZZDZJ FA8FCA7EFE3C
 //  1: Chromecast ICA 4 (Audio)
 //
 // Chains to trust anchor:
 //   Cast Root CA     (not included)
 //
 // This device certificate has a policy that means it is valid only for audio
 // devices.
 TEST(VerifyCastDeviceCertTest, ChromecastAudio) {
   RunTest(RESULT_SUCCESS, "4ZZDZJ FA8FCA7EFE3C",
-          CastDeviceCertPolicy::AUDIO_ONLY,
-          "cast_certificates/chromecast_audio.pem", AprilFirst2016(), "");
+          CastDeviceCertPolicy::AUDIO_ONLY, "certificates/chromecast_audio.pem",
+          AprilFirst2016(), "");
 }
 
 // Tests verifying a valid certificate chain of length 3:
 //
 //  0: MediaTek Audio Dev Test
 //  1: MediaTek Audio Dev Model
 //  2: Cast Audio Dev Root CA
 //
 // Chains to trust anchor:
 //   Cast Root CA     (not included)
 //
 // This device certificate has a policy that means it is valid only for audio
 // devices.
 TEST(VerifyCastDeviceCertTest, MtkAudioDev) {
   RunTest(RESULT_SUCCESS, "MediaTek Audio Dev Test",
-          CastDeviceCertPolicy::AUDIO_ONLY,
-          "cast_certificates/mtk_audio_dev.pem", JanuaryFirst2015(), "");
+          CastDeviceCertPolicy::AUDIO_ONLY, "certificates/mtk_audio_dev.pem",
+          JanuaryFirst2015(), "");
 }
 
 // Tests verifying a valid certificate chain of length 2:
 //
 //  0: 9V0000VB FA8FCA784D01
 //  1: Cast TV ICA (Vizio)
 //
 // Chains to trust anchor:
 //   Cast Root CA     (not included)
 TEST(VerifyCastDeviceCertTest, Vizio) {
   RunTest(RESULT_SUCCESS, "9V0000VB FA8FCA784D01", CastDeviceCertPolicy::NONE,
-          "cast_certificates/vizio.pem", AprilFirst2016(), "");
+          "certificates/vizio.pem", AprilFirst2016(), "");
 }
 
 // Tests verifying a valid certificate chain of length 2 using expired
 // time points.
 TEST(VerifyCastDeviceCertTest, ChromecastGen2InvalidTime) {
-  const char* kCertsFile = "cast_certificates/chromecast_gen2.pem";
+  const char* kCertsFile = "certificates/chromecast_gen2.pem";
 
   // Control test - certificate should be valid at some time otherwise
   // this test is pointless.
   RunTest(RESULT_SUCCESS, "3ZZAK6 FA8FCA3F0D35", CastDeviceCertPolicy::NONE,
           kCertsFile, AprilFirst2016(), "");
 
   // Use a time before notBefore.
   RunTest(RESULT_FAIL, "", CastDeviceCertPolicy::NONE, kCertsFile,
           JanuaryFirst2015(), "");
 
   // Use a time after notAfter.
   RunTest(RESULT_FAIL, "", CastDeviceCertPolicy::NONE, kCertsFile,
           MarchFirst2040(), "");
 }
 
 // Tests verifying a valid certificate chain of length 3:
 //
 //  0: Audio Reference Dev Test
 //  1: Audio Reference Dev Model
 //  2: Cast Audio Dev Root CA
 //
 // Chains to trust anchor:
 //   Cast Root CA     (not included)
 //
 // This device certificate has a policy that means it is valid only for audio
 // devices.
 TEST(VerifyCastDeviceCertTest, AudioRefDevTestChain3) {
   RunTest(RESULT_SUCCESS, "Audio Reference Dev Test",
           CastDeviceCertPolicy::AUDIO_ONLY,
-          "cast_certificates/audio_ref_dev_test_chain_3.pem", AprilFirst2016(),
-          "cast_signeddata/AudioReferenceDevTest.pem");
+          "certificates/audio_ref_dev_test_chain_3.pem", AprilFirst2016(),
+          "signeddata/AudioReferenceDevTest.pem");
 }
 
 // ------------------------------------------------------
 // Valid signature using 1024-bit RSA key
 // ------------------------------------------------------
 
 // This test vector comes from the NIST test vectors (pkcs1v15sign-vectors.txt),
 // PKCS#1 v1.5 Signature Example 1.2.
 //
 // It is a valid signature using a 1024 bit key and SHA-1.
@@ skipping 116 matching lines @@
 TEST(VerifyCastDeviceCertTest, VerifySignature2048BitRsa) {
   auto context =
       CertVerificationContextImplForTest(CreateString(kEx2PublicKeySpki));
 
   EXPECT_TRUE(context->VerifySignatureOverData(CreateString(kEx2Signature),
                                                CreateString(kEx2Message)));
 }
 
 }  // namespace
 
-}  // namespace cast_crypto
-
-}  // namespace api
-
-}  // namespace extensions
+}  // namespace cast_certificate