| OLD | NEW |
| 1 // Copyright 2013 The Chromium Authors. All rights reserved. | 1 // Copyright 2013 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "net/cert/jwk_serializer.h" | 5 #include "net/cert/jwk_serializer.h" |
| 6 | 6 |
| 7 #include "base/base64.h" | 7 #include "base/base64.h" |
| 8 #include "base/values.h" | 8 #include "base/values.h" |
| 9 #include "testing/gtest/include/gtest/gtest.h" | 9 #include "testing/gtest/include/gtest/gtest.h" |
| 10 | 10 |
| 11 namespace net { | 11 namespace net { |
| 12 | 12 |
| 13 #if !defined(USE_OPENSSL) | 13 #if !defined(USE_OPENSSL) |
| 14 // This is the ASN.1 prefix for a P-256 public key. Specifically it's: | 14 // This is the ASN.1 prefix for a P-256 public key. Specifically it's: |
| 15 // SEQUENCE | 15 // SEQUENCE |
| 16 // SEQUENCE | 16 // SEQUENCE |
| 17 // OID id-ecPublicKey | 17 // OID id-ecPublicKey |
| 18 // OID prime256v1 | 18 // OID prime256v1 |
| 19 // BIT STRING, length 66, 0 trailing bits: 0x04 | 19 // BIT STRING, length 66, 0 trailing bits: 0x04 |
| 20 // | 20 // |
| 21 // The 0x04 in the BIT STRING is the prefix for an uncompressed, X9.62 | 21 // The 0x04 in the BIT STRING is the prefix for an uncompressed, X9.62 |
| 22 // public key. Following that are the two field elements as 32-byte, | 22 // public key. Following that are the two field elements as 32-byte, |
| 23 // big-endian numbers, as required by the Channel ID. | 23 // big-endian numbers, as required by the Channel ID. |
| 24 static const unsigned char kP256SpkiPrefix[] = { | 24 static const unsigned char kP256SpkiPrefix[] = { |
| 25 0x30, 0x59, 0x30, 0x13, 0x06, 0x07, 0x2a, 0x86, | 25 0x30, 0x59, 0x30, 0x13, 0x06, 0x07, 0x2a, 0x86, 0x48, |
| 26 0x48, 0xce, 0x3d, 0x02, 0x01, 0x06, 0x08, 0x2a, | 26 0xce, 0x3d, 0x02, 0x01, 0x06, 0x08, 0x2a, 0x86, 0x48, |
| 27 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07, 0x03, | 27 0xce, 0x3d, 0x03, 0x01, 0x07, 0x03, 0x42, 0x00, 0x04}; |
| 28 0x42, 0x00, 0x04 | |
| 29 }; | |
| 30 static const unsigned int kEcCoordinateSize = 32U; | 28 static const unsigned int kEcCoordinateSize = 32U; |
| 31 #endif | 29 #endif |
| 32 | 30 |
| 33 // This is a valid P-256 public key. | 31 // This is a valid P-256 public key. |
| 34 static const unsigned char kSpkiEc[] = { | 32 static const unsigned char kSpkiEc[] = { |
| 35 0x30, 0x59, 0x30, 0x13, 0x06, 0x07, 0x2a, 0x86, | 33 0x30, 0x59, 0x30, 0x13, 0x06, 0x07, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x02, |
| 36 0x48, 0xce, 0x3d, 0x02, 0x01, 0x06, 0x08, 0x2a, | 34 0x01, 0x06, 0x08, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07, 0x03, |
| 37 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07, 0x03, | 35 0x42, 0x00, 0x04, 0x29, 0x5d, 0x6e, 0xfe, 0x33, 0x77, 0x26, 0xea, 0x5b, |
| 38 0x42, 0x00, 0x04, | 36 0xa4, 0xe6, 0x1b, 0x34, 0x6e, 0x7b, 0xa0, 0xa3, 0x8f, 0x33, 0x49, 0xa0, |
| 39 0x29, 0x5d, 0x6e, 0xfe, 0x33, 0x77, 0x26, 0xea, | 37 0x9c, 0xae, 0x98, 0xbd, 0x46, 0x0d, 0xf6, 0xd4, 0x5a, 0xdc, 0x8a, 0x1f, |
| 40 0x5b, 0xa4, 0xe6, 0x1b, 0x34, 0x6e, 0x7b, 0xa0, | 38 0x8a, 0xb2, 0x20, 0x51, 0xb7, 0xd2, 0x87, 0x0d, 0x53, 0x7e, 0x5d, 0x94, |
| 41 0xa3, 0x8f, 0x33, 0x49, 0xa0, 0x9c, 0xae, 0x98, | 39 0xa3, 0xe0, 0x34, 0x16, 0xa1, 0xcc, 0x10, 0x48, 0xcd, 0x70, 0x9c, 0x05, |
| 42 0xbd, 0x46, 0x0d, 0xf6, 0xd4, 0x5a, 0xdc, 0x8a, | 40 0xd3, 0xd2, 0xca, 0xdf, 0x44, 0x2f, 0xf4}; |
| 43 0x1f, 0x8a, 0xb2, 0x20, 0x51, 0xb7, 0xd2, 0x87, | |
| 44 0x0d, 0x53, 0x7e, 0x5d, 0x94, 0xa3, 0xe0, 0x34, | |
| 45 0x16, 0xa1, 0xcc, 0x10, 0x48, 0xcd, 0x70, 0x9c, | |
| 46 0x05, 0xd3, 0xd2, 0xca, 0xdf, 0x44, 0x2f, 0xf4 | |
| 47 }; | |
| 48 | 41 |
| 49 #if !defined(USE_OPENSSL) | 42 #if !defined(USE_OPENSSL) |
| 50 // This is a P-256 public key with 0 X and Y values. | 43 // This is a P-256 public key with 0 X and Y values. |
| 51 static const unsigned char kSpkiEcWithZeroXY[] = { | 44 static const unsigned char kSpkiEcWithZeroXY[] = { |
| 52 0x30, 0x59, 0x30, 0x13, 0x06, 0x07, 0x2a, 0x86, | 45 0x30, 0x59, 0x30, 0x13, 0x06, 0x07, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x02, |
| 53 0x48, 0xce, 0x3d, 0x02, 0x01, 0x06, 0x08, 0x2a, | 46 0x01, 0x06, 0x08, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07, 0x03, |
| 54 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07, 0x03, | 47 0x42, 0x00, 0x04, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
| 55 0x42, 0x00, 0x04, | 48 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
| 56 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, | 49 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
| 57 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, | 50 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
| 58 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, | 51 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
| 59 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, | 52 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}; |
| 60 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, | |
| 61 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, | |
| 62 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, | |
| 63 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 | |
| 64 }; | |
| 65 | 53 |
| 66 TEST(JwkSerializerNSSTest, ConvertSpkiFromDerToJwkEc) { | 54 TEST(JwkSerializerNSSTest, ConvertSpkiFromDerToJwkEc) { |
| 67 base::StringPiece spki; | 55 base::StringPiece spki; |
| 68 base::DictionaryValue public_key_jwk; | 56 base::DictionaryValue public_key_jwk; |
| 69 | 57 |
| 70 EXPECT_FALSE(JwkSerializer::ConvertSpkiFromDerToJwk(spki, &public_key_jwk)); | 58 EXPECT_FALSE(JwkSerializer::ConvertSpkiFromDerToJwk(spki, &public_key_jwk)); |
| 71 EXPECT_TRUE(public_key_jwk.empty()); | 59 EXPECT_TRUE(public_key_jwk.empty()); |
| 72 | 60 |
| 73 // Test the result of a "normal" point on this curve. | 61 // Test the result of a "normal" point on this curve. |
| 74 spki.set(reinterpret_cast<const char*>(kSpkiEc), sizeof(kSpkiEc)); | 62 spki.set(reinterpret_cast<const char*>(kSpkiEc), sizeof(kSpkiEc)); |
| (...skipping 12 matching lines...) Expand all Loading... |
| 87 EXPECT_EQ(0, | 75 EXPECT_EQ(0, |
| 88 memcmp(decoded_coordinate.data(), | 76 memcmp(decoded_coordinate.data(), |
| 89 kSpkiEc + sizeof(kP256SpkiPrefix), | 77 kSpkiEc + sizeof(kP256SpkiPrefix), |
| 90 kEcCoordinateSize)); | 78 kEcCoordinateSize)); |
| 91 | 79 |
| 92 EXPECT_TRUE(public_key_jwk.GetString("y", &string_value)); | 80 EXPECT_TRUE(public_key_jwk.GetString("y", &string_value)); |
| 93 EXPECT_TRUE(base::Base64Decode(string_value, &decoded_coordinate)); | 81 EXPECT_TRUE(base::Base64Decode(string_value, &decoded_coordinate)); |
| 94 EXPECT_EQ(kEcCoordinateSize, decoded_coordinate.size()); | 82 EXPECT_EQ(kEcCoordinateSize, decoded_coordinate.size()); |
| 95 EXPECT_EQ(0, | 83 EXPECT_EQ(0, |
| 96 memcmp(decoded_coordinate.data(), | 84 memcmp(decoded_coordinate.data(), |
| 97 kSpkiEc + sizeof(kP256SpkiPrefix) + kEcCoordinateSize, | 85 kSpkiEc + sizeof(kP256SpkiPrefix) + kEcCoordinateSize, |
| 98 kEcCoordinateSize)); | 86 kEcCoordinateSize)); |
| 99 | 87 |
| 100 // Test the result of a corner case: leading 0s in the x, y coordinates are | 88 // Test the result of a corner case: leading 0s in the x, y coordinates are |
| 101 // not trimmed, but the point is fixed-length encoded. | 89 // not trimmed, but the point is fixed-length encoded. |
| 102 spki.set(reinterpret_cast<const char*>(kSpkiEcWithZeroXY), | 90 spki.set(reinterpret_cast<const char*>(kSpkiEcWithZeroXY), |
| 103 sizeof(kSpkiEcWithZeroXY)); | 91 sizeof(kSpkiEcWithZeroXY)); |
| 104 EXPECT_TRUE(JwkSerializer::ConvertSpkiFromDerToJwk(spki, &public_key_jwk)); | 92 EXPECT_TRUE(JwkSerializer::ConvertSpkiFromDerToJwk(spki, &public_key_jwk)); |
| 105 | 93 |
| 106 EXPECT_TRUE(public_key_jwk.GetString("kty", &string_value)); | 94 EXPECT_TRUE(public_key_jwk.GetString("kty", &string_value)); |
| 107 EXPECT_STREQ("EC", string_value.c_str()); | 95 EXPECT_STREQ("EC", string_value.c_str()); |
| 108 EXPECT_TRUE(public_key_jwk.GetString("crv", &string_value)); | 96 EXPECT_TRUE(public_key_jwk.GetString("crv", &string_value)); |
| 109 EXPECT_STREQ("P-256", string_value.c_str()); | 97 EXPECT_STREQ("P-256", string_value.c_str()); |
| 110 | 98 |
| 111 EXPECT_TRUE(public_key_jwk.GetString("x", &string_value)); | 99 EXPECT_TRUE(public_key_jwk.GetString("x", &string_value)); |
| 112 EXPECT_TRUE(base::Base64Decode(string_value, &decoded_coordinate)); | 100 EXPECT_TRUE(base::Base64Decode(string_value, &decoded_coordinate)); |
| 113 EXPECT_EQ(kEcCoordinateSize, decoded_coordinate.size()); | 101 EXPECT_EQ(kEcCoordinateSize, decoded_coordinate.size()); |
| 114 EXPECT_EQ(0, | 102 EXPECT_EQ(0, |
| 115 memcmp(decoded_coordinate.data(), | 103 memcmp(decoded_coordinate.data(), |
| 116 kSpkiEcWithZeroXY + sizeof(kP256SpkiPrefix), | 104 kSpkiEcWithZeroXY + sizeof(kP256SpkiPrefix), |
| 117 kEcCoordinateSize)); | 105 kEcCoordinateSize)); |
| 118 | 106 |
| 119 EXPECT_TRUE(public_key_jwk.GetString("y", &string_value)); | 107 EXPECT_TRUE(public_key_jwk.GetString("y", &string_value)); |
| 120 EXPECT_TRUE(base::Base64Decode(string_value, &decoded_coordinate)); | 108 EXPECT_TRUE(base::Base64Decode(string_value, &decoded_coordinate)); |
| 121 EXPECT_EQ(kEcCoordinateSize, decoded_coordinate.size()); | 109 EXPECT_EQ(kEcCoordinateSize, decoded_coordinate.size()); |
| 122 EXPECT_EQ(0, | 110 EXPECT_EQ( |
| 111 0, |
| 123 memcmp(decoded_coordinate.data(), | 112 memcmp(decoded_coordinate.data(), |
| 124 kSpkiEcWithZeroXY + sizeof(kP256SpkiPrefix) + kEcCoordinateSize, | 113 kSpkiEcWithZeroXY + sizeof(kP256SpkiPrefix) + kEcCoordinateSize, |
| 125 kEcCoordinateSize)); | 114 kEcCoordinateSize)); |
| 126 } | 115 } |
| 127 | 116 |
| 128 #else | 117 #else |
| 129 | 118 |
| 130 // For OpenSSL, JwkSerializer::ConvertSpkiFromDerToJwk() is not yet implemented | 119 // For OpenSSL, JwkSerializer::ConvertSpkiFromDerToJwk() is not yet implemented |
| 131 // and should return false. This unit test ensures that a stub implementation | 120 // and should return false. This unit test ensures that a stub implementation |
| 132 // is present. | 121 // is present. |
| 133 TEST(JwkSerializerOpenSSLTest, ConvertSpkiFromDerToJwkNotImplemented) { | 122 TEST(JwkSerializerOpenSSLTest, ConvertSpkiFromDerToJwkNotImplemented) { |
| 134 base::StringPiece spki; | 123 base::StringPiece spki; |
| 135 base::DictionaryValue public_key_jwk; | 124 base::DictionaryValue public_key_jwk; |
| 136 | 125 |
| 137 // The empty SPKI is trivially non-convertible... | 126 // The empty SPKI is trivially non-convertible... |
| 138 EXPECT_FALSE(JwkSerializer::ConvertSpkiFromDerToJwk(spki, &public_key_jwk)); | 127 EXPECT_FALSE(JwkSerializer::ConvertSpkiFromDerToJwk(spki, &public_key_jwk)); |
| 139 EXPECT_TRUE(public_key_jwk.empty()); | 128 EXPECT_TRUE(public_key_jwk.empty()); |
| 140 // but even a valid SPKI is non-convertible via the stub OpenSSL | 129 // but even a valid SPKI is non-convertible via the stub OpenSSL |
| 141 // implementation. | 130 // implementation. |
| 142 spki.set(reinterpret_cast<const char*>(kSpkiEc), sizeof(kSpkiEc)); | 131 spki.set(reinterpret_cast<const char*>(kSpkiEc), sizeof(kSpkiEc)); |
| 143 EXPECT_FALSE(JwkSerializer::ConvertSpkiFromDerToJwk(spki, &public_key_jwk)); | 132 EXPECT_FALSE(JwkSerializer::ConvertSpkiFromDerToJwk(spki, &public_key_jwk)); |
| 144 EXPECT_TRUE(public_key_jwk.empty()); | 133 EXPECT_TRUE(public_key_jwk.empty()); |
| 145 } | 134 } |
| 146 | 135 |
| 147 #endif // !defined(USE_OPENSSL) | 136 #endif // !defined(USE_OPENSSL) |
| 148 | 137 |
| 149 } // namespace net | 138 } // namespace net |
| OLD | NEW |