Certificate Transparency: Parse Signed Tree Heads and validate them

net/test/ct_test_util.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/test/ct_test_util.h"
 
 #include <string>
 #include <vector>
 
 #include "base/strings/string_number_conversions.h"
 #include "base/strings/string_piece.h"
 #include "base/strings/string_util.h"
 #include "net/cert/ct_serialization.h"
 #include "net/cert/signed_certificate_timestamp.h"
+#include "net/cert/signed_tree_head.h"
 #include "net/cert/x509_certificate.h"
 
 namespace net {
 
 namespace ct {
 
 namespace {
 
 std::string HexToBytes(const char* hex_data) {
   std::vector<uint8> output;
@@ skipping 122 matching lines @@
     "71c64aa5ecf07d020103a333303130120603551d130101ff040830060101ff020100301b06"
     "03551d200101000411300f300d060b2b06010401d6790201ce0f300d06092a864886f70d01"
     "01050500038181003f4936f8d00e83fbdde331f2c64335dcf7dec8b1a2597683edeed61af0"
     "fa862412fad848938fe7ab77f1f9a43671ff6fdb729386e26f49e7aca0c0ea216e5970d933"
     "3ea1e11df2ccb357a5fed5220f9c6239e8946b9b7517707631d51ab996833d58a022cff5a6"
     "2169ac9258ec110efee78da9ab4a641e3b3c9ee5e8bd291460";
 
 
 const char kFakeOCSPExtensionValue[] = "74657374";  // "test"
 
+// For the sample STH
+const char kSampleSTHSHA256RootHash[] =
+    "726467216167397babca293dca398e4ce6b621b18b9bc42f30c900d1f92ac1e4";
+const char kSampleSTHTreeHeadSignature[] =
+    "0403004730450220365a91a2a88f2b9332f41d8959fa7086da7e6d634b7b089bc9da066426"
+    "6c7a20022100e38464f3c0fd066257b982074f7ac87655e0c8f714768a050b4be9a7b441cb"
+    "d3";
+
 }  // namespace
 
 void GetX509CertLogEntry(LogEntry* entry) {
   entry->type = ct::LogEntry::LOG_ENTRY_TYPE_X509;
   entry->leaf_certificate = HexToBytes(kDefaultDerCert);
 }
 
 std::string GetDerEncodedX509Cert() { return HexToBytes(kDefaultDerCert); }
 
 void GetPrecertLogEntry(LogEntry* entry) {
@@ skipping 66 matching lines @@
 }
 
 std::string GetDerEncodedFakeOCSPResponseCert() {
   return HexToBytes(kFakeOCSPResponseCert);
 }
 
 std::string GetDerEncodedFakeOCSPResponseIssuerCert() {
   return HexToBytes(kFakeOCSPResponseIssuerCert);
 }
 
+std::string GetSampleSTHSHA256RootHash() {
+  return HexToBytes(kSampleSTHSHA256RootHash);
+}
+
+// A sample, valid STH
+void GetSignedTreeHead(SignedTreeHead* sth) {
+  sth->version = SignedTreeHead::V1;
+  sth->timestamp = base::Time::UnixEpoch() +
+                   base::TimeDelta::FromMilliseconds(1396877277237);
+  sth->tree_size = 21u;
+  std::string sha256_root_hash = GetSampleSTHSHA256RootHash();
+  memcpy(sth->sha256_root_hash, sha256_root_hash.c_str(), kSthRootHashLength);
+
+  std::string tree_head_signature = HexToBytes(kSampleSTHTreeHeadSignature);
+  base::StringPiece sp(tree_head_signature);
+  DecodeDigitallySigned(&sp, &(sth->signature));
+}
+
 }  // namespace ct
 
 }  // namespace net