CAPI tests adjusted to new password logic
[platform/core/test/security-tests.git] / tests / ckm / capi-testcases.cpp
1 #include <dpl/test/test_runner.h>
2 #include <dpl/test/test_runner_child.h>
3
4 #include <tests_common.h>
5 #include <ckm-common.h>
6 #include <access_provider2.h>
7
8 #include <ckm/ckm-manager.h>
9 #include <ckm/ckm-control.h>
10 #include <ckm/ckm-type.h>
11
12 #include <ckmc/ckmc-manager.h>
13 #include <ckmc/ckmc-control.h>
14 #include <ckmc/ckmc-type.h>
15 #include <ckmc/ckmc-error.h>
16
17 #include <string>
18 #include <string.h>
19 #include <stdio.h>
20 #include <stddef.h>
21 #include <stdlib.h>
22
23 static const int USER_APP = 5000;
24 static const int GROUP_APP = 5000;
25
26 namespace
27 {
28
29 typedef enum {
30         ALIAS_KEY,
31         ALIAS_CERT,
32         ALIAS_DATA
33 } alias_type_;
34
35 const char* USER_PASS = "user-pass";
36
37 int count_aliases(alias_type_ type, int minimum_initial_element_count = 0)
38 {
39         ckmc_alias_list_s *aliasList = NULL;
40         int ec;
41         switch(type)
42         {
43                 case ALIAS_KEY:
44                         ec = ckmc_get_key_alias_list(&aliasList);
45                         break;
46
47                 case ALIAS_CERT:
48                         ec = ckmc_get_cert_alias_list(&aliasList);
49                         break;
50
51                 case ALIAS_DATA:
52                         ec = ckmc_get_data_alias_list(&aliasList);
53                         break;
54         }
55         if(ec == CKMC_ERROR_DB_ALIAS_UNKNOWN)
56                 return 0;
57         else if(ec==0)
58         {
59                 ckmc_alias_list_s *plist = aliasList;
60                 int return_count = 0;
61                 while(plist)
62                 {
63                         plist = plist->next;
64                         return_count ++;
65                 }
66                 ckmc_alias_list_all_free(aliasList);
67
68                 RUNNER_ASSERT_MSG(
69                                 return_count >= minimum_initial_element_count,
70                                 "Error: alias list failed, current element count: " << return_count <<
71                                 " while expected minimal count of " << minimum_initial_element_count <<
72                                 " elements");
73
74                 return return_count;
75         }
76         else
77         {
78                 // error - fail
79                 RUNNER_ASSERT_MSG(
80                                 ec >= 0,
81                                 "Error: alias list failed, ec: " << ec);
82         }
83
84         return ec;
85 }
86
87 ckmc_raw_buffer_s prepare_message_buffer(const char * input)
88 {
89         ckmc_raw_buffer_s retval;
90         retval.data = const_cast<unsigned char *>(reinterpret_cast<const unsigned char *>(input));
91         retval.size = strlen(input);
92         return retval;
93 }
94 }
95
96
97 RUNNER_TEST_GROUP_INIT (T301_CKMC_CONTROL_C_API);
98
99 RUNNER_TEST(T3011_Control_C_API)
100 {
101         int temp;
102
103         RUNNER_ASSERT_MSG( CKMC_ERROR_NONE == (temp = ckmc_lock_user_key(0)),
104                         "Error=" << temp);
105
106         RUNNER_ASSERT_MSG( CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(0)),
107                         "Error=" << temp);
108 }
109
110 RUNNER_TEST(T3012_Control_C_API)
111 {
112         int temp;
113
114         RUNNER_ASSERT_MSG( CKMC_ERROR_NONE == (temp = ckmc_unlock_user_key(0, "simple-password")),
115                         "Error=" << temp);
116         RUNNER_ASSERT_MSG( CKMC_ERROR_NONE == (temp = ckmc_lock_user_key(0)),
117                         "Error=" << temp);
118 }
119
120 RUNNER_TEST(T3013_Control_C_API)
121 {
122         int temp;
123
124         RUNNER_ASSERT_MSG( CKMC_ERROR_NONE == (temp = ckmc_unlock_user_key(0, "simple-password")),
125                         "Error=" << temp);
126 }
127
128 RUNNER_TEST(T3014_Control_C_API)
129 {
130         int temp;
131         const uid_t UNIQUE_USER = 15;
132
133         // clean up environment
134         RUNNER_ASSERT_MSG( CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(UNIQUE_USER)),
135                         "Error=" << temp);
136         // unlock with default password
137         RUNNER_ASSERT_MSG( CKMC_ERROR_NONE == (temp = ckmc_unlock_user_key(UNIQUE_USER, NULL)),
138                         "Error=" << temp);
139         // reset password (NULL, "simple-password")
140         RUNNER_ASSERT_MSG( CKMC_ERROR_NONE == (temp = ckmc_reset_user_password(UNIQUE_USER, "simple-password")),
141                         "Error=" << temp);
142         // get rid of NULL DKEK
143         RUNNER_ASSERT_MSG( CKMC_ERROR_NONE == (temp = ckmc_unlock_user_key(UNIQUE_USER, "simple-password")),
144                         "Error=" << temp);
145         // lock db
146         RUNNER_ASSERT_MSG( CKMC_ERROR_NONE == (temp = ckmc_lock_user_key(UNIQUE_USER)),
147                         "Error=" << temp);
148         // try to reset password when db locked
149         RUNNER_ASSERT_MSG( CKMC_ERROR_BAD_REQUEST == (temp = ckmc_reset_user_password(UNIQUE_USER, "simple-password")),
150                         "Error=" << temp);
151         // clean up environment
152         RUNNER_ASSERT_MSG( CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(UNIQUE_USER)),
153                         "Error=" << temp);
154 }
155
156 RUNNER_TEST(T3015_Control_C_API)
157 {
158         int temp;
159
160         RUNNER_ASSERT_MSG(
161                         CKMC_ERROR_NONE == (temp = ckmc_unlock_user_key(20, "test-pass")),
162                         "Error=" << temp);
163         RUNNER_ASSERT_MSG(
164                         CKMC_ERROR_NONE == (temp = ckmc_change_user_password(20, "test-pass", "new-pass")),
165                         "Error=" << temp);
166         RUNNER_ASSERT_MSG( CKMC_ERROR_NONE == (temp = ckmc_lock_user_key(20)),
167                         "Error=" << temp);
168         RUNNER_ASSERT_MSG( CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(20)),
169                         "Error=" << temp);
170 }
171
172 RUNNER_TEST(T3016_Control_C_API)
173 {
174         int temp;
175
176         RUNNER_ASSERT_MSG(
177                         CKMC_ERROR_NONE == (temp = ckmc_lock_user_key(0)),
178                         "Error=" << temp);
179         RUNNER_ASSERT_MSG(
180                         CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(0)),
181                         "Error=" << temp);
182         RUNNER_ASSERT_MSG(
183                         CKMC_ERROR_NONE == (temp = ckmc_lock_user_key(20)),
184                         "Error=" << temp);
185         RUNNER_ASSERT_MSG(
186                         CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(20)),
187                         "Error=" << temp);
188 }
189
190 RUNNER_TEST_GROUP_INIT (T302_CKMC_QUICK_SET_GET_TESTS_C_API);
191
192 RUNNER_TEST(T3021_init_C_API)
193 {
194         int temp;
195
196         RUNNER_ASSERT_MSG(
197                         CKMC_ERROR_NONE == (temp = ckmc_unlock_user_key(0, "test-pass")),
198                         "Error=" << temp);
199         RUNNER_ASSERT_MSG(
200                         CKMC_ERROR_NONE == (temp = ckmc_unlock_user_key(USER_APP, USER_PASS)),
201                         "Error=" << temp);
202 }
203
204 RUNNER_TEST(T3022_key_C_API)
205 {
206         int temp;
207
208         ckmc_key_s test_key, *test_key2;
209         ckmc_policy_s test_policy;
210
211         char* password = NULL;
212         const char *alias = "mykey";
213
214         std::string keyPem = "-----BEGIN PUBLIC KEY-----\n"
215                 "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b1bXDa+S8/MGWnMkru4\n"
216                 "T4tUddtZNi0NVjQn9RFH1NMa220GsRhRO56F77FlSVFKfSfVZKIiWg6C+DVCkcLf\n"
217                 "zXJ/Z0pvwOQYBAqVMFjV6efQGN0JzJ1Unu7pPRiZl7RKGEI+cyzzrcDyrLLrQ2W7\n"
218                 "0ZySkNEOv6Frx9JgC5NExuYY4lk2fQQa38JXiZkfyzif2em0px7mXbyf5LjccsKq\n"
219                 "v1e+XLtMsL0ZefRcqsP++NzQAI8fKX7WBT+qK0HJDLiHrKOTWYzx6CwJ66LD/vvf\n"
220                 "j55xtsKDLVDbsotvf8/m6VLMab+vqKk11TP4tq6yo0mwyTADvgl1zowQEO9I1W6o\n"
221                 "zQIDAQAB\n"
222                 "-----END PUBLIC KEY-----";
223
224         char* char_keypem = new char[keyPem.length() + 1];
225
226         std::strcpy(char_keypem, keyPem.c_str());
227         test_key.raw_key =  (unsigned char *)char_keypem;
228         test_key.key_size = keyPem.length();
229         test_key.key_type = CKMC_KEY_RSA_PUBLIC;
230         test_key.password = password;
231
232         test_policy.password = password;
233         test_policy.extractable = 1;
234
235         test_key2 = &test_key;
236
237         RUNNER_ASSERT_MSG(
238                         CKMC_ERROR_NONE == (temp = ckmc_save_key(alias, test_key, test_policy)),
239                         "Error=" << temp);
240
241         RUNNER_ASSERT_MSG(
242                         CKMC_ERROR_NONE == (temp = ckmc_get_key(alias, password, &test_key2)),
243                         "Error=" << temp);
244 }
245
246 RUNNER_TEST(T3023_certificate_C_API)
247 {
248         int temp;
249
250         std::string certPem = "-----BEGIN CERTIFICATE-----\n"
251                 "MIIEgDCCA2igAwIBAgIIcjtBYJGQtOAwDQYJKoZIhvcNAQEFBQAwSTELMAkGA1UE\n"
252                 "BhMCVVMxEzARBgNVBAoTCkdvb2dsZSBJbmMxJTAjBgNVBAMTHEdvb2dsZSBJbnRl\n"
253                 "cm5ldCBBdXRob3JpdHkgRzIwHhcNMTQwNTIyMTEyOTQyWhcNMTQwODIwMDAwMDAw\n"
254                 "WjBtMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwN\n"
255                 "TW91bnRhaW4gVmlldzETMBEGA1UECgwKR29vZ2xlIEluYzEcMBoGA1UEAwwTYWNj\n"
256                 "b3VudHMuZ29vZ2xlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB\n"
257                 "ALtlLWVWPN3q3bSEQl1Z97gPdgl5vbgJOZSAr0ZY0tJCuFLBbUKetJWryyE+5KpG\n"
258                 "gMMpLS4v8/bvXaZc6mAs+RfAqGM24C3vQg5hPnj4dflnhL0WiOCZBurm1tV4oexk\n"
259                 "HLXs3jr/jpnb738AQpj8zZ9a4VEBuHJRZALnWZ/XhqU+dvYomAoRQNuL5OhkT7uu\n"
260                 "d0NKJL9JjYLyQglGgE2sVsWv2kj7EO/P9Q6NEKt9BGmhMsFvtfeKUaymynaxpR1g\n"
261                 "wEPlqYvB38goh1dIOgVLT0OVyLImeg5Mdwar/8c1U0OYhLOc6PJapOZAfUkE+3+w\n"
262                 "xYt8AChLN1b5szOwInrCVpECAwEAAaOCAUYwggFCMB0GA1UdJQQWMBQGCCsGAQUF\n"
263                 "BwMBBggrBgEFBQcDAjAeBgNVHREEFzAVghNhY2NvdW50cy5nb29nbGUuY29tMGgG\n"
264                 "CCsGAQUFBwEBBFwwWjArBggrBgEFBQcwAoYfaHR0cDovL3BraS5nb29nbGUuY29t\n"
265                 "L0dJQUcyLmNydDArBggrBgEFBQcwAYYfaHR0cDovL2NsaWVudHMxLmdvb2dsZS5j\n"
266                 "b20vb2NzcDAdBgNVHQ4EFgQU0/UtToEtNIfwDwHuYGuVKcj0xK8wDAYDVR0TAQH/\n"
267                 "BAIwADAfBgNVHSMEGDAWgBRK3QYWG7z2aLV29YG2u2IaulqBLzAXBgNVHSAEEDAO\n"
268                 "MAwGCisGAQQB1nkCBQEwMAYDVR0fBCkwJzAloCOgIYYfaHR0cDovL3BraS5nb29n\n"
269                 "bGUuY29tL0dJQUcyLmNybDANBgkqhkiG9w0BAQUFAAOCAQEAcGNI/X9f0g+7ij0o\n"
270                 "ehLpk6vxSMQGrmOZ4+PG/MC9SLClCkt7zJkfU7erZnyVXyxCpwlljq+Wk9YTPUOq\n"
271                 "xD/V2ikQVSAANoxGJFO9UoL5jzWusPhKKv8CcM7fuiERz8K+CfBcqfxbgI5rH0g5\n"
272                 "dYclmLC81cJ/08i+9Nltvxv69Y3hGfEICT6K+EdSxwnQzOhpMZmvxZsIj+d6CVNa\n"
273                 "9ICYgUthsNQVWzrIs5wknpjjZ9liDMwJX0vu8A0rce4X/Lna5hh2bW9igz2iP5WM\n"
274                 "9fuwdbTw4y3jfPQgszU4YZxWxhMzccxe058Qx1tLndAknBQEBesQjXytVQpuM1SV\n"
275                 "rHva8A==\n"
276                 "-----END CERTIFICATE-----\n";
277
278         char* password = NULL;
279         ckmc_cert_s *cert2;
280         ckmc_cert_s cert;
281
282         const char *alias = "test-cert-1-RSA";
283
284         ckmc_policy_s test_policy;
285         test_policy.password = password;
286         test_policy.extractable = 1;
287
288         char* char_certPem = new char[certPem.length() + 1];
289         std::strcpy(char_certPem, certPem.c_str());
290         cert.raw_cert =  (unsigned char *)char_certPem;
291         cert.cert_size = certPem.length();
292         cert.data_format = CKMC_FORM_PEM;
293
294         RUNNER_ASSERT_MSG(
295                         CKMC_ERROR_NONE == (temp = ckmc_save_cert(alias, cert, test_policy)),
296                         "Error=" << temp);
297
298         RUNNER_ASSERT_MSG(
299                         CKMC_ERROR_NONE == (temp = ckmc_get_cert(alias, password, &cert2)),
300                         "Error=" << temp);
301
302         ckmc_cert_free(cert2);
303 }
304
305 RUNNER_TEST(T3024_certificate_remove_C_API)
306 {
307         int temp;
308
309         char* password = NULL;
310         ckmc_cert_s *cert2;
311         const char *alias = "test-cert-1-RSA";
312
313         RUNNER_ASSERT_MSG(
314                         CKMC_ERROR_NONE == (temp = ckmc_get_cert(alias, password, &cert2)),
315                         "Error=" << temp);
316         ckmc_cert_free(cert2);
317
318         RUNNER_ASSERT_MSG(
319                         CKMC_ERROR_NONE == (temp = ckmc_remove_cert(alias)),
320                         "Error=" << temp);
321
322         RUNNER_ASSERT_MSG(
323                         CKMC_ERROR_NONE != (temp = ckmc_get_cert(alias, password, &cert2)),
324                         "Error=" << temp);
325 }
326
327 RUNNER_TEST(T3025_certificate_list_C_API)
328 {
329         int temp;
330
331         std::string certPem = "-----BEGIN CERTIFICATE-----\n"
332                 "MIIEgDCCA2igAwIBAgIIcjtBYJGQtOAwDQYJKoZIhvcNAQEFBQAwSTELMAkGA1UE\n"
333                 "BhMCVVMxEzARBgNVBAoTCkdvb2dsZSBJbmMxJTAjBgNVBAMTHEdvb2dsZSBJbnRl\n"
334                 "cm5ldCBBdXRob3JpdHkgRzIwHhcNMTQwNTIyMTEyOTQyWhcNMTQwODIwMDAwMDAw\n"
335                 "WjBtMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwN\n"
336                 "TW91bnRhaW4gVmlldzETMBEGA1UECgwKR29vZ2xlIEluYzEcMBoGA1UEAwwTYWNj\n"
337                 "b3VudHMuZ29vZ2xlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB\n"
338                 "ALtlLWVWPN3q3bSEQl1Z97gPdgl5vbgJOZSAr0ZY0tJCuFLBbUKetJWryyE+5KpG\n"
339                 "gMMpLS4v8/bvXaZc6mAs+RfAqGM24C3vQg5hPnj4dflnhL0WiOCZBurm1tV4oexk\n"
340                 "HLXs3jr/jpnb738AQpj8zZ9a4VEBuHJRZALnWZ/XhqU+dvYomAoRQNuL5OhkT7uu\n"
341                 "d0NKJL9JjYLyQglGgE2sVsWv2kj7EO/P9Q6NEKt9BGmhMsFvtfeKUaymynaxpR1g\n"
342                 "wEPlqYvB38goh1dIOgVLT0OVyLImeg5Mdwar/8c1U0OYhLOc6PJapOZAfUkE+3+w\n"
343                 "xYt8AChLN1b5szOwInrCVpECAwEAAaOCAUYwggFCMB0GA1UdJQQWMBQGCCsGAQUF\n"
344                 "BwMBBggrBgEFBQcDAjAeBgNVHREEFzAVghNhY2NvdW50cy5nb29nbGUuY29tMGgG\n"
345                 "CCsGAQUFBwEBBFwwWjArBggrBgEFBQcwAoYfaHR0cDovL3BraS5nb29nbGUuY29t\n"
346                 "L0dJQUcyLmNydDArBggrBgEFBQcwAYYfaHR0cDovL2NsaWVudHMxLmdvb2dsZS5j\n"
347                 "b20vb2NzcDAdBgNVHQ4EFgQU0/UtToEtNIfwDwHuYGuVKcj0xK8wDAYDVR0TAQH/\n"
348                 "BAIwADAfBgNVHSMEGDAWgBRK3QYWG7z2aLV29YG2u2IaulqBLzAXBgNVHSAEEDAO\n"
349                 "MAwGCisGAQQB1nkCBQEwMAYDVR0fBCkwJzAloCOgIYYfaHR0cDovL3BraS5nb29n\n"
350                 "bGUuY29tL0dJQUcyLmNybDANBgkqhkiG9w0BAQUFAAOCAQEAcGNI/X9f0g+7ij0o\n"
351                 "ehLpk6vxSMQGrmOZ4+PG/MC9SLClCkt7zJkfU7erZnyVXyxCpwlljq+Wk9YTPUOq\n"
352                 "xD/V2ikQVSAANoxGJFO9UoL5jzWusPhKKv8CcM7fuiERz8K+CfBcqfxbgI5rH0g5\n"
353                 "dYclmLC81cJ/08i+9Nltvxv69Y3hGfEICT6K+EdSxwnQzOhpMZmvxZsIj+d6CVNa\n"
354                 "9ICYgUthsNQVWzrIs5wknpjjZ9liDMwJX0vu8A0rce4X/Lna5hh2bW9igz2iP5WM\n"
355                 "9fuwdbTw4y3jfPQgszU4YZxWxhMzccxe058Qx1tLndAknBQEBesQjXytVQpuM1SV\n"
356                 "rHva8A==\n"
357                 "-----END CERTIFICATE-----\n";
358
359         char* password = NULL;
360         ckmc_cert_s cert;
361
362         ckmc_policy_s test_policy;
363         test_policy.password = password;
364         test_policy.extractable = 1;
365
366         char* char_certPem = new char[certPem.length() + 1];
367         std::strcpy(char_certPem, certPem.c_str());
368         cert.raw_cert =  (unsigned char *)char_certPem;
369         cert.cert_size = certPem.length();
370         cert.data_format = CKMC_FORM_PEM;
371
372         int current_aliases_num = count_aliases(ALIAS_CERT);
373
374         RUNNER_ASSERT_MSG(
375                         CKMC_ERROR_NONE == (temp = ckmc_save_cert("cert_test1", cert, test_policy)),
376                         "Error=" << temp);
377
378         RUNNER_ASSERT_MSG(
379                         CKMC_ERROR_NONE == (temp = ckmc_save_cert("cert_test2", cert, test_policy)),
380                         "Error=" << temp);
381
382         RUNNER_ASSERT_MSG(
383                         CKMC_ERROR_NONE == (temp = ckmc_save_cert("cert_test3", cert, test_policy)),
384                         "Error=" << temp);
385
386         RUNNER_ASSERT_MSG(
387                         (current_aliases_num+3) == (temp = count_aliases(ALIAS_CERT)),
388                         "Error: expecting " << (current_aliases_num+3) << " aliases, while found " << temp);
389 }
390
391
392 RUNNER_CHILD_TEST(T3026_user_app_save_key_C_API)
393 {
394         AccessProvider ap("mylabel");
395         ap.allowAPI("key-manager::api-storage", "rw");
396         ap.applyAndSwithToUser(USER_APP, GROUP_APP);
397
398         std::string keyPem = "-----BEGIN PUBLIC KEY-----\n"
399                 "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b1bXDa+S8/MGWnMkru4\n"
400                 "T4tUddtZNi0NVjQn9RFH1NMa220GsRhRO56F77FlSVFKfSfVZKIiWg6C+DVCkcLf\n"
401                 "zXJ/Z0pvwOQYBAqVMFjV6efQGN0JzJ1Unu7pPRiZl7RKGEI+cyzzrcDyrLLrQ2W7\n"
402                 "0ZySkNEOv6Frx9JgC5NExuYY4lk2fQQa38JXiZkfyzif2em0px7mXbyf5LjccsKq\n"
403                 "v1e+XLtMsL0ZefRcqsP++NzQAI8fKX7WBT+qK0HJDLiHrKOTWYzx6CwJ66LD/vvf\n"
404                 "j55xtsKDLVDbsotvf8/m6VLMab+vqKk11TP4tq6yo0mwyTADvgl1zowQEO9I1W6o\n"
405                 "zQIDAQAB\n"
406                 "-----END PUBLIC KEY-----";
407
408         int temp;
409
410         ckmc_key_s test_key, *test_key2;
411         ckmc_policy_s test_policy;
412
413         char* password = NULL;
414         const char *passwordPolicy = "x";
415         const char *alias = "mykey";
416         char* char_keypem = new char[keyPem.length() + 1];
417
418         std::strcpy(char_keypem, keyPem.c_str());
419         test_key.raw_key =  (unsigned char *)char_keypem;
420         test_key.key_size = keyPem.length();
421         test_key.key_type = CKMC_KEY_RSA_PUBLIC;
422         test_key.password = password;
423
424         test_policy.password = const_cast<char *>(passwordPolicy);
425         test_policy.extractable = 1;
426
427         test_key2 = &test_key;
428
429
430         RUNNER_ASSERT_MSG(
431                         CKMC_ERROR_NONE == (temp = ckmc_save_key(alias, test_key, test_policy)),
432                         "Error=" << temp);
433         RUNNER_ASSERT_MSG(
434                         CKMC_ERROR_NONE == (temp = ckmc_get_key(alias, passwordPolicy, &test_key2)),
435                         "Error=" << temp);
436
437         //       RUNNER_ASSERT_MSG(
438         //                       key.getDER() == key2.getDER(), "Key value has been changed by service");
439 }
440
441 RUNNER_CHILD_TEST(T3027_app_user_save_keys_exportable_flag)
442 {
443         AccessProvider ap("mylabel");
444         ap.allowAPI("key-manager::api-storage", "rw");
445         ap.applyAndSwithToUser(USER_APP, GROUP_APP);
446
447         int temp;
448         auto manager = CKM::Manager::create();
449
450         std::string keyPem = "-----BEGIN PUBLIC KEY-----\n"
451                 "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b1bXDa+S8/MGWnMkru4\n"
452                 "T4tUddtZNi0NVjQn9RFH1NMa220GsRhRO56F77FlSVFKfSfVZKIiWg6C+DVCkcLf\n"
453                 "zXJ/Z0pvwOQYBAqVMFjV6efQGN0JzJ1Unu7pPRiZl7RKGEI+cyzzrcDyrLLrQ2W7\n"
454                 "0ZySkNEOv6Frx9JgC5NExuYY4lk2fQQa38JXiZkfyzif2em0px7mXbyf5LjccsKq\n"
455                 "v1e+XLtMsL0ZefRcqsP++NzQAI8fKX7WBT+qK0HJDLiHrKOTWYzx6CwJ66LD/vvf\n"
456                 "j55xtsKDLVDbsotvf8/m6VLMab+vqKk11TP4tq6yo0mwyTADvgl1zowQEO9I1W6o\n"
457                 "zQIDAQAB\n"
458                 "-----END PUBLIC KEY-----";
459
460         ckmc_policy_s test_policy;
461         ckmc_key_s test_key, *test_key2;
462         char* char_keypem = new char[keyPem.length() + 1];
463         char* password = NULL;
464
465         std::strcpy(char_keypem, keyPem.c_str());
466         test_key.raw_key = (unsigned char *)char_keypem;
467         test_key.key_size = keyPem.length();
468         test_key.key_type = CKMC_KEY_RSA_PUBLIC;
469         test_key.password = password;
470
471         test_policy.password = password;
472         test_policy.extractable = 0;
473
474         RUNNER_ASSERT_MSG(
475                         CKMC_ERROR_NONE == (temp = ckmc_save_key("appkey1", test_key, test_policy)),
476                         "Error=" << temp);
477
478         RUNNER_ASSERT_MSG(
479                         CKMC_ERROR_NOT_EXPORTABLE == (temp = ckmc_get_key("appkey1", password, &test_key2)),
480                         "Error=" << temp);
481 }
482
483
484 RUNNER_TEST(T3028_certificate_with_DSA_key_C_API)
485 {
486         int temp;
487
488         std::string certPem = "-----BEGIN CERTIFICATE-----\n"
489                 "MIIEgDCCA2igAwIBAgIIcjtBYJGQtOAwDQYJKoZIhvcNAQEFBQAwSTELMAkGA1UE\n"
490                 "BhMCVVMxEzARBgNVBAoTCkdvb2dsZSBJbmMxJTAjBgNVBAMTHEdvb2dsZSBJbnRl\n"
491                 "cm5ldCBBdXRob3JpdHkgRzIwHhcNMTQwNTIyMTEyOTQyWhcNMTQwODIwMDAwMDAw\n"
492                 "WjBtMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwN\n"
493                 "TW91bnRhaW4gVmlldzETMBEGA1UECgwKR29vZ2xlIEluYzEcMBoGA1UEAwwTYWNj\n"
494                 "b3VudHMuZ29vZ2xlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB\n"
495                 "ALtlLWVWPN3q3bSEQl1Z97gPdgl5vbgJOZSAr0ZY0tJCuFLBbUKetJWryyE+5KpG\n"
496                 "gMMpLS4v8/bvXaZc6mAs+RfAqGM24C3vQg5hPnj4dflnhL0WiOCZBurm1tV4oexk\n"
497                 "HLXs3jr/jpnb738AQpj8zZ9a4VEBuHJRZALnWZ/XhqU+dvYomAoRQNuL5OhkT7uu\n"
498                 "d0NKJL9JjYLyQglGgE2sVsWv2kj7EO/P9Q6NEKt9BGmhMsFvtfeKUaymynaxpR1g\n"
499                 "wEPlqYvB38goh1dIOgVLT0OVyLImeg5Mdwar/8c1U0OYhLOc6PJapOZAfUkE+3+w\n"
500                 "xYt8AChLN1b5szOwInrCVpECAwEAAaOCAUYwggFCMB0GA1UdJQQWMBQGCCsGAQUF\n"
501                 "BwMBBggrBgEFBQcDAjAeBgNVHREEFzAVghNhY2NvdW50cy5nb29nbGUuY29tMGgG\n"
502                 "CCsGAQUFBwEBBFwwWjArBggrBgEFBQcwAoYfaHR0cDovL3BraS5nb29nbGUuY29t\n"
503                 "L0dJQUcyLmNydDArBggrBgEFBQcwAYYfaHR0cDovL2NsaWVudHMxLmdvb2dsZS5j\n"
504                 "b20vb2NzcDAdBgNVHQ4EFgQU0/UtToEtNIfwDwHuYGuVKcj0xK8wDAYDVR0TAQH/\n"
505                 "BAIwADAfBgNVHSMEGDAWgBRK3QYWG7z2aLV29YG2u2IaulqBLzAXBgNVHSAEEDAO\n"
506                 "MAwGCisGAQQB1nkCBQEwMAYDVR0fBCkwJzAloCOgIYYfaHR0cDovL3BraS5nb29n\n"
507                 "bGUuY29tL0dJQUcyLmNybDANBgkqhkiG9w0BAQUFAAOCAQEAcGNI/X9f0g+7ij0o\n"
508                 "ehLpk6vxSMQGrmOZ4+PG/MC9SLClCkt7zJkfU7erZnyVXyxCpwlljq+Wk9YTPUOq\n"
509                 "xD/V2ikQVSAANoxGJFO9UoL5jzWusPhKKv8CcM7fuiERz8K+CfBcqfxbgI5rH0g5\n"
510                 "dYclmLC81cJ/08i+9Nltvxv69Y3hGfEICT6K+EdSxwnQzOhpMZmvxZsIj+d6CVNa\n"
511                 "9ICYgUthsNQVWzrIs5wknpjjZ9liDMwJX0vu8A0rce4X/Lna5hh2bW9igz2iP5WM\n"
512                 "9fuwdbTw4y3jfPQgszU4YZxWxhMzccxe058Qx1tLndAknBQEBesQjXytVQpuM1SV\n"
513                 "rHva8A==\n"
514                 "-----END CERTIFICATE-----\n";
515
516         char* password = NULL;
517         ckmc_cert_s *cert2 = NULL;
518         ckmc_cert_s cert;
519
520         ckmc_policy_s test_policy;
521         test_policy.password = password;
522         test_policy.extractable = 1;
523
524         char* char_certPem = new char[certPem.length() + 1];
525         std::strcpy(char_certPem, certPem.c_str());
526         cert.raw_cert =  (unsigned char *)char_certPem;
527         cert.cert_size = certPem.length();
528         cert.data_format = CKMC_FORM_PEM;
529
530         const char *alias = "test-cert-1-DSA";
531         RUNNER_ASSERT_MSG(
532                         CKMC_ERROR_NONE == (temp = ckmc_save_cert(alias, cert, test_policy)),
533                         "Error=" << temp);
534
535         RUNNER_ASSERT_MSG(
536                         CKMC_ERROR_NONE == (temp = ckmc_get_cert(alias, password, &cert2)),
537                         "Error=" << temp);
538
539         ckmc_cert_free(cert2);
540 }
541
542 RUNNER_TEST(T3029_deinit_C_API)
543 {
544         int temp;
545
546         RUNNER_ASSERT_MSG( CKMC_ERROR_NONE == (temp = ckmc_lock_user_key(0)),
547                         "Error=" << temp);
548         RUNNER_ASSERT_MSG( CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(0)),
549                         "Error=" << temp);
550         RUNNER_ASSERT_MSG(
551                         CKMC_ERROR_NONE == (temp = ckmc_lock_user_key(USER_APP)),
552                         "Error=" << temp);
553         RUNNER_ASSERT_MSG(
554                         CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(USER_APP)),
555                         "Error=" << temp);
556 }
557
558
559 RUNNER_TEST_GROUP_INIT (T3030_CKMC_QUICK_GET_ALIAS_TESTS_C_API);
560
561 RUNNER_TEST(T3031_init_C_API)
562 {
563         int temp;
564
565         RUNNER_ASSERT_MSG(
566                         CKMC_ERROR_NONE == (temp = ckmc_unlock_user_key(0, "simple-password")),
567                         "Error=" << temp);
568         RUNNER_ASSERT_MSG(
569                         CKMC_ERROR_NONE == (temp = ckmc_unlock_user_key(USER_APP, "simple-password")),
570                         "Error=" << temp);
571 }
572
573 RUNNER_TEST(T3032_save_keys_get_alias_C_API)
574 {
575         int temp;
576
577         char* password = NULL;
578         ckmc_policy_s test_policy1, test_policy2, test_policy3;
579         ckmc_key_s test_key;
580
581         std::string keyPem = "-----BEGIN PUBLIC KEY-----\n"
582                 "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b1bXDa+S8/MGWnMkru4\n"
583                 "T4tUddtZNi0NVjQn9RFH1NMa220GsRhRO56F77FlSVFKfSfVZKIiWg6C+DVCkcLf\n"
584                 "zXJ/Z0pvwOQYBAqVMFjV6efQGN0JzJ1Unu7pPRiZl7RKGEI+cyzzrcDyrLLrQ2W7\n"
585                 "0ZySkNEOv6Frx9JgC5NExuYY4lk2fQQa38JXiZkfyzif2em0px7mXbyf5LjccsKq\n"
586                 "v1e+XLtMsL0ZefRcqsP++NzQAI8fKX7WBT+qK0HJDLiHrKOTWYzx6CwJ66LD/vvf\n"
587                 "j55xtsKDLVDbsotvf8/m6VLMab+vqKk11TP4tq6yo0mwyTADvgl1zowQEO9I1W6o\n"
588                 "zQIDAQAB\n"
589                 "-----END PUBLIC KEY-----";
590
591         char* char_keypem = new char[keyPem.length() + 1];
592
593         std::strcpy(char_keypem, keyPem.c_str());
594         test_key.raw_key = (unsigned char *)char_keypem;
595         test_key.key_size = keyPem.length();
596         test_key.key_type = CKMC_KEY_RSA_PUBLIC;
597         test_key.password = password;
598
599         test_policy1.password = password;
600         test_policy1.extractable = 1;
601
602         test_policy2.password = password;
603         test_policy2.extractable = 0;
604
605         test_policy3.password = password;
606         test_policy3.extractable = 0;
607
608         int current_aliases_num = count_aliases(ALIAS_KEY);
609
610         RUNNER_ASSERT_MSG(
611                         CKMC_ERROR_NONE == (temp = ckmc_save_key("rootkey1", test_key, test_policy1)),
612                         "Error=" << temp);
613
614         RUNNER_ASSERT_MSG(
615                         CKMC_ERROR_NONE == (temp = ckmc_save_key("rootkey2", test_key, test_policy2)),
616                         "Error=" << temp);
617
618         RUNNER_ASSERT_MSG(
619                         CKMC_ERROR_NONE == (temp = ckmc_save_key("rootkey3", test_key, test_policy3)),
620                         "Error=" << temp);
621
622         RUNNER_ASSERT_MSG(
623                         (current_aliases_num+3) == (temp = count_aliases(ALIAS_KEY)),
624                         "Error: expecting " << (current_aliases_num+3) << " aliases, while found " << temp);
625 }
626
627
628 RUNNER_TEST(T3033_remove_key_C_API)
629 {
630         int temp;
631
632         char* password = NULL;
633
634         ckmc_key_s *test_key2;
635         RUNNER_ASSERT_MSG(
636                         CKMC_ERROR_NONE == (temp = ckmc_get_key("rootkey1", password, &test_key2)),
637                         "Error=" << temp);
638
639         RUNNER_ASSERT_MSG(
640                         CKMC_ERROR_NONE == (temp = ckmc_remove_key("rootkey1")),
641                         "Error=" << temp);
642
643         RUNNER_ASSERT_MSG(
644                         CKMC_ERROR_NONE != (temp = ckmc_get_key("rootkey1", password, &test_key2)),
645                         "Error=" << temp);
646 }
647
648 RUNNER_TEST(T3034_deinit_C_API)
649 {
650         int temp;
651
652         RUNNER_ASSERT_MSG( CKMC_ERROR_NONE == (temp = ckmc_lock_user_key(0)),
653                         "Error=" << temp);
654         RUNNER_ASSERT_MSG( CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(0)),
655                         "Error=" << temp);
656         RUNNER_ASSERT_MSG(
657                         CKMC_ERROR_NONE == (temp = ckmc_lock_user_key(USER_APP)),
658                         "Error=" << temp);
659         RUNNER_ASSERT_MSG(
660                         CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(USER_APP)),
661                         "Error=" << temp);
662 }
663
664 RUNNER_TEST_GROUP_INIT (T3040_CKMC_QUICK_REMOVE_BIN_DATA_TEST_C_API);
665
666 RUNNER_TEST(T3041_init_C_API)
667 {
668         int temp;
669         RUNNER_ASSERT_MSG(
670                         CKMC_ERROR_NONE == (temp = ckmc_unlock_user_key(0, "simple-password")),
671                         "Error=" << temp);
672         RUNNER_ASSERT_MSG(
673                         CKMC_ERROR_NONE == (temp = ckmc_unlock_user_key(USER_APP, "simple-password")),
674                         "Error=" << temp);
675 }
676
677 RUNNER_TEST(T3042_save_get_bin_data_C_API)
678 {
679         int temp;
680
681         ckmc_raw_buffer_s testData1, testData2, testData3;
682         char* password = NULL;
683         
684         std::string binData1 = "My bin data1";
685         std::string binData2 = "My bin data2";
686         std::string binData3 = "My bin data3";
687         char* char_binData1 = new char[binData1.length() + 1];
688         char* char_binData2 = new char[binData2.length() + 1];
689         char* char_binData3 = new char[binData3.length() + 1];
690         std::strcpy(char_binData1, binData1.c_str());
691         std::strcpy(char_binData2, binData2.c_str());
692         std::strcpy(char_binData3, binData3.c_str());
693         testData1.data = (unsigned char *) char_binData1;
694         testData2.data = (unsigned char *) char_binData2;
695         testData3.data = (unsigned char *) char_binData3;
696         testData1.size = binData1.length()+1;
697         testData2.size = binData2.length()+1;
698         testData3.size = binData3.length()+1;
699
700         ckmc_policy_s test_policy1, test_policy2, test_policy3;
701         
702         test_policy1.password = password;
703         test_policy1.extractable = 1;
704         test_policy2.password = password;
705         test_policy2.extractable = 1;
706         test_policy3.password = password;
707         test_policy3.extractable = 0;
708
709         int current_aliases_num = count_aliases(ALIAS_DATA);
710
711         RUNNER_ASSERT_MSG(
712                         CKMC_ERROR_NONE == (temp = ckmc_save_data("data1", testData1, test_policy1)), // should change it as null value
713                         "Error=" << temp);
714         
715         RUNNER_ASSERT_MSG(
716                         CKMC_ERROR_NONE == (temp = ckmc_save_data("data2", testData2, test_policy1)), // should change it as null value
717                         "Error=" << temp);
718         
719         RUNNER_ASSERT_MSG(
720                         CKMC_ERROR_NONE == (temp = ckmc_save_data("data3", testData3, test_policy2)),
721                         "Error=" << temp);
722         
723         RUNNER_ASSERT_MSG(
724                         CKMC_ERROR_INVALID_PARAMETER == (temp = ckmc_save_data("data4", testData3, test_policy3)),
725                         "Error=" << temp);
726         
727         RUNNER_ASSERT_MSG(
728                         (current_aliases_num+3) == (temp = count_aliases(ALIAS_DATA)),
729                         "Error: expecting " << (current_aliases_num+3) << " aliases, while found " << temp);
730
731         ckmc_raw_buffer_s *testData4;
732         RUNNER_ASSERT_MSG(
733                         CKMC_ERROR_NONE == (temp = ckmc_get_data("data2", password, &testData4)),
734                         "Error=" << temp);
735         
736         int compareResult;
737         compareResult = (strcmp((const char *)testData2.data, (const char *)testData4->data));
738         RUNNER_ASSERT_MSG( compareResult == 0,
739                         "Data corrupted");
740 }
741
742 RUNNER_CHILD_TEST(T3043_app_user_save_bin_data_C_API)
743 {
744         AccessProvider ap("mylabel");
745         ap.allowAPI("key-manager::api-storage", "rw");
746         ap.applyAndSwithToUser(USER_APP, GROUP_APP);
747
748         int temp;
749         ckmc_raw_buffer_s testData1;
750         char* password = NULL;
751         std::string binData1 = "My bin data";
752         char* char_binData1 = new char[binData1.length() + 1];
753         std::strcpy(char_binData1, binData1.c_str());
754         testData1.data = (unsigned char *) char_binData1;
755         testData1.size = binData1.length()+1;
756
757         ckmc_policy_s test_policy1, test_policy2;
758
759         test_policy1.password = password;
760         test_policy1.extractable = 1;
761
762         test_policy2.password = password;
763         test_policy2.extractable = 1;
764
765         std::string binData = "My bin data";
766
767         int current_aliases_num = count_aliases(ALIAS_DATA);
768
769         RUNNER_ASSERT_MSG(
770                         CKMC_ERROR_NONE == (temp = ckmc_save_data("appdata1", testData1, test_policy1)),
771                         "Error=" << temp);
772         RUNNER_ASSERT_MSG(
773                         CKMC_ERROR_NONE == (temp = ckmc_save_data("appdata2", testData1, test_policy1)),
774                         "Error=" << temp);
775         RUNNER_ASSERT_MSG(
776                         CKMC_ERROR_NONE == (temp = ckmc_save_data("appdata3", testData1, test_policy2)),
777                         "Error=" << temp);
778
779         RUNNER_ASSERT_MSG(
780                                 (current_aliases_num+3) == (temp = count_aliases(ALIAS_DATA)),
781                                 "Error: expecting " << (current_aliases_num+3) << " aliases, while found " << temp);
782 }
783
784 RUNNER_TEST(T3044_remove_bin_data_C_API)
785 {
786         int temp;
787
788         int current_aliases_num = count_aliases(ALIAS_DATA, 2);
789
790         RUNNER_ASSERT_MSG(
791                         CKMC_ERROR_NONE == (temp = ckmc_remove_data("data1")),
792                         "Error=" << temp);
793         RUNNER_ASSERT_MSG(
794                         CKMC_ERROR_NONE == (temp = ckmc_remove_data("data3")),
795                         "Error=" << temp);
796
797         RUNNER_ASSERT_MSG(
798                                 (current_aliases_num-2) == (temp = count_aliases(ALIAS_DATA)),
799                                 "Error: expecting " << (current_aliases_num-2) << " aliases, while found " << temp);
800
801         char* password = NULL;
802
803         ckmc_raw_buffer_s *testData1, testData2;
804
805         std::string testStr = "My bin data2";
806         char* char_testData2 = new char[testStr.length() + 1];
807         std::strcpy(char_testData2, testStr.c_str());
808         testData2.data = (unsigned char *) char_testData2;
809         testData2.size = testStr.length()+1;
810
811         CKM::RawBuffer buffer;
812         RUNNER_ASSERT_MSG(
813                         CKMC_ERROR_NONE == (temp = ckmc_get_data("data2", password, &testData1)),
814                         "Error=" << temp);
815
816         int compareResult;
817         compareResult = (strcmp((const char *)testData2.data, (const char *)testData1->data));
818         RUNNER_ASSERT_MSG( compareResult == 0,
819                         "Data corrupted");
820
821         RUNNER_ASSERT_MSG(
822                         CKMC_ERROR_DB_ALIAS_UNKNOWN == (temp = ckmc_get_data("data3", password, &testData1)),
823                         "Error=" << temp);
824 }
825
826 RUNNER_TEST(T3045_deinit_C_API)
827 {
828         int temp;
829
830         RUNNER_ASSERT_MSG(
831                         CKMC_ERROR_NONE == (temp = ckmc_lock_user_key(0)),
832                         "Error=" << temp);
833         RUNNER_ASSERT_MSG(
834                         CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(0)),
835                         "Error=" << temp);
836         RUNNER_ASSERT_MSG(
837                         CKMC_ERROR_NONE == (temp = ckmc_lock_user_key(USER_APP)),
838                         "Error=" << temp);
839         RUNNER_ASSERT_MSG(
840                         CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(USER_APP)),
841                         "Error=" << temp);
842 }
843
844 RUNNER_TEST_GROUP_INIT(T305_CKMC_QUICK_CREATE_PAIR_CAPI);
845
846 RUNNER_TEST(T3051_CAPI_init)
847 {
848         int temp;
849
850         RUNNER_ASSERT_MSG(
851                         CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(USER_APP)),
852                         "Error=" << temp);
853
854         RUNNER_ASSERT_MSG(
855                         CKMC_ERROR_NONE == (temp = ckmc_unlock_user_key(USER_APP, USER_PASS)),
856                         "Error=" << temp);
857 }
858
859 RUNNER_CHILD_TEST(T3052_CAPI_create_rsa_key)
860 {
861         int temp;
862
863         AccessProvider ap("mylabel");
864         ap.allowAPI("key-manager::api-storage", "rw");
865         ap.applyAndSwithToUser(USER_APP, GROUP_APP);
866
867         size_t size = 1024;
868         const char *private_key_alias = "RSA-test-1-priv";
869         const char *public_key_alias = "RSA-test-1-pub";
870         ckmc_policy_s policy_private_key;
871         ckmc_policy_s policy_public_key;
872
873         policy_private_key.password = NULL;
874         policy_private_key.extractable = 1;
875
876         policy_public_key.password = NULL;
877         policy_public_key.extractable = 1;
878
879
880         int current_aliases_num = count_aliases(ALIAS_KEY);
881
882         RUNNER_ASSERT_MSG(
883                         CKMC_ERROR_NONE == (temp = ckmc_create_key_pair_rsa(size, private_key_alias, public_key_alias, policy_private_key, policy_public_key)),
884                         "Error=" << temp);
885
886         RUNNER_ASSERT_MSG(
887                         (current_aliases_num+2) == (temp = count_aliases(ALIAS_KEY)),
888                         "Error: expecting " << (current_aliases_num+2) << " aliases, while found " << temp);
889
890         ckmc_key_s *privateKey;
891         RUNNER_ASSERT_MSG(
892                         CKMC_ERROR_NONE == (temp = ckmc_get_key(private_key_alias, policy_private_key.password,&privateKey)),
893                         "Error=" << temp);
894         RUNNER_ASSERT_MSG(
895                         privateKey->key_type == CKMC_KEY_RSA_PRIVATE,
896                         "Key Type Error: expected =" << static_cast<int>(CKMC_KEY_RSA_PRIVATE) << ", actual=" << static_cast<int>(privateKey->key_type));
897         RUNNER_ASSERT_MSG(
898                         privateKey != NULL && privateKey->key_size > 0 && privateKey->raw_key != NULL,
899                         "Error=" << temp);
900
901         ckmc_key_s *publicKey;
902         RUNNER_ASSERT_MSG(
903                         CKMC_ERROR_NONE == (temp = ckmc_get_key(public_key_alias, policy_public_key.password, &publicKey)),
904                         "Error=" << temp);
905         RUNNER_ASSERT_MSG(
906                         publicKey->key_type == CKMC_KEY_RSA_PUBLIC,
907                         "Key Type Error: expected =" << static_cast<int>(CKMC_KEY_RSA_PUBLIC) << ", actual=" << static_cast<int>(publicKey->key_type));
908         RUNNER_ASSERT_MSG(
909                         publicKey != NULL && publicKey->key_size > 0 && publicKey->raw_key != NULL,
910                         "Error=" << temp);
911
912         // on next attempt to generate keys with the same alias, expect fail (alias exists)
913         RUNNER_ASSERT_MSG(
914                         CKMC_ERROR_DB_ALIAS_EXISTS == (temp = ckmc_create_key_pair_rsa(size, private_key_alias, public_key_alias, policy_private_key, policy_public_key)),
915                         "Error=" << temp << ", ret=" << temp);
916 }
917
918 RUNNER_CHILD_TEST(T3053_CAPI_create_dsa_key)
919 {
920         int temp;
921         size_t size = 1024;
922         const char *private_key_alias = "DSA-test-2-priv";
923         const char *public_key_alias = "DSA-test-2-pub";
924         ckmc_policy_s policy_private_key;
925         ckmc_policy_s policy_public_key;
926
927         policy_private_key.password = NULL;
928         policy_private_key.extractable = 1;
929
930         policy_public_key.password = NULL;
931         policy_public_key.extractable = 1;
932
933         int current_aliases_num = count_aliases(ALIAS_KEY);
934
935         RUNNER_ASSERT_MSG(
936                         CKMC_ERROR_NONE == (temp = ckmc_create_key_pair_dsa(size, private_key_alias, public_key_alias, policy_private_key, policy_public_key)),
937                         "Error=" << temp);
938
939         RUNNER_ASSERT_MSG(
940                         (current_aliases_num+2) == (temp = count_aliases(ALIAS_KEY)),
941                         "Error: expecting " << (current_aliases_num+2) << " aliases, while found " << temp);
942
943         ckmc_key_s *privateKey = 0;
944         RUNNER_ASSERT_MSG(
945                         CKMC_ERROR_NONE == (temp = ckmc_get_key(private_key_alias, policy_private_key.password,&privateKey)),
946                         "Error=" << temp);
947         RUNNER_ASSERT_MSG(
948                         privateKey != NULL && privateKey->key_size > 0 && privateKey->raw_key != NULL,
949                         "Error=" << temp);
950         RUNNER_ASSERT_MSG(
951                         privateKey->key_type == CKMC_KEY_DSA_PRIVATE,
952                         "Key Type Error: expected =" << static_cast<int>(CKMC_KEY_DSA_PRIVATE) << ", actual=" << static_cast<int>(privateKey->key_type));
953         ckmc_key_free(privateKey);
954
955         ckmc_key_s *pubKey = 0;
956         RUNNER_ASSERT_MSG(
957                         CKMC_ERROR_NONE == (temp = ckmc_get_key(public_key_alias, policy_public_key.password, &pubKey)),
958                         "Error=" << temp);
959         RUNNER_ASSERT_MSG(
960                         pubKey != NULL && pubKey->key_size > 0 && pubKey->raw_key != NULL,
961                         "Error=" << temp);
962         RUNNER_ASSERT_MSG(
963                         pubKey->key_type == CKMC_KEY_DSA_PUBLIC,
964                         "Key Type Error: expected =" << static_cast<int>(CKMC_KEY_DSA_PUBLIC) << ", actual=" << static_cast<int>(pubKey->key_type));
965         ckmc_key_free(pubKey);
966
967         // on next attempt to generate keys with the same alias, expect fail (alias exists)
968         RUNNER_ASSERT_MSG(
969                         CKMC_ERROR_DB_ALIAS_EXISTS == (temp = ckmc_create_key_pair_dsa(size, private_key_alias, public_key_alias, policy_private_key, policy_public_key)),
970                         "Error=" << temp << ", ret=" << temp);
971 }
972
973
974 RUNNER_TEST(T3054_CAPI_deinit)
975 {
976         int temp;
977
978         RUNNER_ASSERT_MSG(
979                         CKMC_ERROR_NONE == (temp = ckmc_lock_user_key(USER_APP)),
980                         "Error=" << temp);
981         RUNNER_ASSERT_MSG(
982                         CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(USER_APP)),
983                         "Error=" << temp);
984 }
985
986
987 RUNNER_TEST_GROUP_INIT(T306_CKMC_CAPI_CreateKeyPair);
988
989 RUNNER_TEST(T3061_CAPI_init)
990 {
991         int temp;
992         RUNNER_ASSERT_MSG(
993                         CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(0)),
994                         "Error=" << temp);
995         RUNNER_ASSERT_MSG(
996                         CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(USER_APP)),
997                         "Error=" << temp);
998         RUNNER_ASSERT_MSG(
999                         CKMC_ERROR_NONE == (temp = ckmc_unlock_user_key(0, "test-pass")),
1000                         "Error=" << temp);
1001         RUNNER_ASSERT_MSG(
1002                         CKMC_ERROR_NONE == (temp = ckmc_unlock_user_key(USER_APP, USER_PASS)),
1003                         "Error=" << temp);
1004 }
1005
1006 RUNNER_TEST(T3062_CAPI_CreateKeyPairRSA)
1007 {
1008         int temp;
1009
1010         size_t size = 1024;
1011         const char *private_key_alias = "rsa-test-1";
1012         const char *public_key_alias = "rsa-test-2";
1013         ckmc_policy_s policy_private_key;
1014         ckmc_policy_s policy_public_key;
1015
1016         policy_private_key.password = const_cast<char *>("privatepassword");
1017         policy_private_key.extractable = 0;
1018
1019         policy_public_key.password = NULL;
1020         policy_public_key.extractable = 1;
1021
1022         RUNNER_ASSERT_MSG(
1023                         CKMC_ERROR_NONE == (temp = ckmc_create_key_pair_rsa(size, private_key_alias, public_key_alias, policy_private_key, policy_public_key)),
1024                         "Error=" << temp);
1025
1026         // on next attempt to generate keys with the same alias, expect fail (alias exists)
1027         RUNNER_ASSERT_MSG(
1028                         CKMC_ERROR_DB_ALIAS_EXISTS == (temp = ckmc_create_key_pair_rsa(size, private_key_alias, public_key_alias, policy_private_key, policy_public_key)),
1029                         "Error=" << temp << ", ret=" << temp);
1030 }
1031
1032 RUNNER_TEST(T3063_CAPI_CreateKeyPairDSA)
1033 {
1034         int temp;
1035
1036         size_t size = 1024;
1037         const char *private_key_alias = "dsa-test-1";
1038         const char *public_key_alias = "dsa-test-2";
1039         ckmc_policy_s policy_private_key;
1040         ckmc_policy_s policy_public_key;
1041
1042         policy_private_key.password = const_cast<char *>("privatepassword");
1043         policy_private_key.extractable = 0;
1044
1045         policy_public_key.password = NULL;
1046         policy_public_key.extractable = 1;
1047
1048         RUNNER_ASSERT_MSG(
1049                         CKMC_ERROR_NONE == (temp = ckmc_create_key_pair_dsa(size, private_key_alias, public_key_alias, policy_private_key, policy_public_key)),
1050                         "Error=" << temp);
1051 }
1052
1053 RUNNER_TEST(T3064_CAPI_CreateKeyPairECDSA)
1054 {
1055         int temp;
1056
1057         ckmc_ec_type_e ectype = CKMC_EC_PRIME192V1;
1058         const char *private_key_alias = "ecdsa-test-1";
1059         const char *public_key_alias = "ecdsa-test-2";
1060         ckmc_policy_s policy_private_key;
1061         ckmc_policy_s policy_public_key;
1062
1063         policy_private_key.password = const_cast<char *>("privatepassword");
1064         policy_private_key.extractable = 0;
1065
1066         policy_public_key.password = NULL;
1067         policy_public_key.extractable = 1;
1068
1069         RUNNER_ASSERT_MSG(
1070                         CKMC_ERROR_NONE == (temp = ckmc_create_key_pair_ecdsa(ectype, private_key_alias, public_key_alias, policy_private_key, policy_public_key)),
1071                         "Error=" << temp);
1072 }
1073
1074 RUNNER_TEST(T3065_CAPI_deinit)
1075 {
1076         int temp;
1077
1078         RUNNER_ASSERT_MSG(
1079                         CKMC_ERROR_NONE == (temp = ckmc_lock_user_key(0)),
1080                         "Error=" << temp);
1081         RUNNER_ASSERT_MSG(
1082                         CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(0)),
1083                         "Error=" << temp);
1084 }
1085
1086 // TODO
1087 //RUNNER_TEST_GROUP_INIT(T120_NEGATIVE_TESTS);
1088
1089
1090
1091 RUNNER_TEST_GROUP_INIT(T307_CKMC_CAPI_QUICK_SET_GET_TESTS);
1092
1093 RUNNER_TEST(T3071_CAPI_init)
1094 {
1095         int temp;
1096         RUNNER_ASSERT_MSG(
1097                         CKMC_ERROR_NONE == (temp = ckmc_unlock_user_key(0, "test-pass")),
1098                         "Error=" << temp);
1099 }
1100
1101 RUNNER_TEST(T3072_CAPI_get_chain)
1102 {
1103         std::string ee =
1104                 "-----BEGIN CERTIFICATE-----\n"
1105                 "MIIF0TCCBLmgAwIBAgIQaPGTP4aS7Ut/WDNaBzdQrDANBgkqhkiG9w0BAQUFADCB\n"
1106                 "ujELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL\n"
1107                 "ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug\n"
1108                 "YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykwNjE0MDIGA1UEAxMr\n"
1109                 "VmVyaVNpZ24gQ2xhc3MgMyBFeHRlbmRlZCBWYWxpZGF0aW9uIFNTTCBDQTAeFw0x\n"
1110                 "NDAyMjAwMDAwMDBaFw0xNTAyMjAyMzU5NTlaMIHmMRMwEQYLKwYBBAGCNzwCAQMT\n"
1111                 "AlBMMR0wGwYDVQQPExRQcml2YXRlIE9yZ2FuaXphdGlvbjETMBEGA1UEBRMKMDAw\n"
1112                 "MDAyNTIzNzELMAkGA1UEBhMCUEwxDzANBgNVBBEUBjAwLTk1MDEUMBIGA1UECBML\n"
1113                 "bWF6b3dpZWNraWUxETAPBgNVBAcUCFdhcnN6YXdhMRYwFAYDVQQJFA1TZW5hdG9y\n"
1114                 "c2thIDE4MRMwEQYDVQQKFAptQmFuayBTLkEuMQwwCgYDVQQLFANESU4xGTAXBgNV\n"
1115                 "BAMUEHd3dy5tYmFuay5jb20ucGwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK\n"
1116                 "AoIBAQDph6x8V6xUW/+651+qHF+UmorH9uaz2ZrX2bIWiMKIJFmpDDHlxcapKkqE\n"
1117                 "BV04is83aiCpqKtc2ZHy2g4Hpj1eSF5BP2+OAlo0YUQZPIeRRdiMjmeAxw/ncBDx\n"
1118                 "9rQBuCJ4XTD6cqQox5SI0TASOZ+wyAEjbDRXzL73XqRAFZ1LOpb2ONkolS+RutMB\n"
1119                 "vshvCsWPeNe7eGLuOh6DyC6r1vX9xhw3xnjM2mTSvmtimgzSLacNGKqRrsucUgcb\n"
1120                 "0+O5C2jZAtAMLyZksL92cxmWbtVzUYzem4chjHu5cRxUlPNzUJWrrczueB7Ip4A8\n"
1121                 "aQuFMfNXYc0x+WLWjy//urypMKjhAgMBAAGjggGjMIIBnzAbBgNVHREEFDASghB3\n"
1122                 "d3cubWJhbmsuY29tLnBsMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud\n"
1123                 "JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBEBgNVHSAEPTA7MDkGC2CGSAGG+EUB\n"
1124                 "BxcGMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LnZlcmlzaWduLmNvbS9jcHMw\n"
1125                 "HQYDVR0OBBYEFN37iGaS7mZnENxZ9FGqNLR+QgoMMB8GA1UdIwQYMBaAFPyKULqe\n"
1126                 "uSVae1WFT5UAY4/pWGtDMEIGA1UdHwQ7MDkwN6A1oDOGMWh0dHA6Ly9FVlNlY3Vy\n"
1127                 "ZS1jcmwudmVyaXNpZ24uY29tL0VWU2VjdXJlMjAwNi5jcmwwfAYIKwYBBQUHAQEE\n"
1128                 "cDBuMC0GCCsGAQUFBzABhiFodHRwOi8vRVZTZWN1cmUtb2NzcC52ZXJpc2lnbi5j\n"
1129                 "b20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9FVlNlY3VyZS1haWEudmVyaXNpZ24uY29t\n"
1130                 "L0VWU2VjdXJlMjAwNi5jZXIwDQYJKoZIhvcNAQEFBQADggEBAD0wO+rooUrIM4qp\n"
1131                 "PHhp+hkXK6WMQ2qzGOmbMcZjw0govg5vkzkefPDryIXXbrF8mRagiJNMSfNaWWeh\n"
1132                 "Cj41OV24EdUl0OLbFxNzcvub599zRs/apfaRLTfsmlmOgi0/YP305i+3tJ2ll946\n"
1133                 "P+qV1wXnXqTqEdIl4Ys3+1HmDCdTB1hoDwAAzqRVUXZ5+iiwPAU7R/LTHfMjV1ke\n"
1134                 "8jtNFfrorlZMCfVH/7eEnHJvVjOJt+YFe4aFMzE+DfuYIK7MH+olC2v79kBwbnEQ\n"
1135                 "fvHMA9gFwOYLUBBdSfcocp8EKZ+mRlNPGR/3LBrPeaQQ0GZEkxzRK+v/aNTuiYfr\n"
1136                 "oFXtrg0=\n"
1137                 "-----END CERTIFICATE-----\n";
1138
1139         std::string im =
1140                 "-----BEGIN CERTIFICATE-----\n"
1141                 "MIIF5DCCBMygAwIBAgIQW3dZxheE4V7HJ8AylSkoazANBgkqhkiG9w0BAQUFADCB\n"
1142                 "yjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL\n"
1143                 "ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJp\n"
1144                 "U2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxW\n"
1145                 "ZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0\n"
1146                 "aG9yaXR5IC0gRzUwHhcNMDYxMTA4MDAwMDAwWhcNMTYxMTA3MjM1OTU5WjCBujEL\n"
1147                 "MAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZW\n"
1148                 "ZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2UgYXQg\n"
1149                 "aHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykwNjE0MDIGA1UEAxMrVmVy\n"
1150                 "aVNpZ24gQ2xhc3MgMyBFeHRlbmRlZCBWYWxpZGF0aW9uIFNTTCBDQTCCASIwDQYJ\n"
1151                 "KoZIhvcNAQEBBQADggEPADCCAQoCggEBAJjboFXrnP0XeeOabhQdsVuYI4cWbod2\n"
1152                 "nLU4O7WgerQHYwkZ5iqISKnnnbYwWgiXDOyq5BZpcmIjmvt6VCiYxQwtt9citsj5\n"
1153                 "OBfH3doxRpqUFI6e7nigtyLUSVSXTeV0W5K87Gws3+fBthsaVWtmCAN/Ra+aM/EQ\n"
1154                 "wGyZSpIkMQht3QI+YXZ4eLbtfjeubPOJ4bfh3BXMt1afgKCxBX9ONxX/ty8ejwY4\n"
1155                 "P1C3aSijtWZfNhpSSENmUt+ikk/TGGC+4+peGXEFv54cbGhyJW+ze3PJbb0S/5tB\n"
1156                 "Ml706H7FC6NMZNFOvCYIZfsZl1h44TO/7Wg+sSdFb8Di7Jdp91zT91ECAwEAAaOC\n"
1157                 "AdIwggHOMB0GA1UdDgQWBBT8ilC6nrklWntVhU+VAGOP6VhrQzASBgNVHRMBAf8E\n"
1158                 "CDAGAQH/AgEAMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRw\n"
1159                 "czovL3d3dy52ZXJpc2lnbi5jb20vY3BzMD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6\n"
1160                 "Ly9FVlNlY3VyZS1jcmwudmVyaXNpZ24uY29tL3BjYTMtZzUuY3JsMA4GA1UdDwEB\n"
1161                 "/wQEAwIBBjARBglghkgBhvhCAQEEBAMCAQYwbQYIKwYBBQUHAQwEYTBfoV2gWzBZ\n"
1162                 "MFcwVRYJaW1hZ2UvZ2lmMCEwHzAHBgUrDgMCGgQUj+XTGoasjY5rw8+AatRIGCx7\n"
1163                 "GS4wJRYjaHR0cDovL2xvZ28udmVyaXNpZ24uY29tL3ZzbG9nby5naWYwKQYDVR0R\n"
1164                 "BCIwIKQeMBwxGjAYBgNVBAMTEUNsYXNzM0NBMjA0OC0xLTQ3MD0GCCsGAQUFBwEB\n"
1165                 "BDEwLzAtBggrBgEFBQcwAYYhaHR0cDovL0VWU2VjdXJlLW9jc3AudmVyaXNpZ24u\n"
1166                 "Y29tMB8GA1UdIwQYMBaAFH/TZafC3ey78DAJ80M5+gKvMzEzMA0GCSqGSIb3DQEB\n"
1167                 "BQUAA4IBAQCWovp/5j3t1CvOtxU/wHIDX4u6FpAl98KD2Md1NGNoElMMU4l7yVYJ\n"
1168                 "p8M2RE4O0GJis4b66KGbNGeNUyIXPv2s7mcuQ+JdfzOE8qJwwG6Cl8A0/SXGI3/t\n"
1169                 "5rDFV0OEst4t8dD2SB8UcVeyrDHhlyQjyRNddOVG7wl8nuGZMQoIeRuPcZ8XZsg4\n"
1170                 "z+6Ml7YGuXNG5NOUweVgtSV1LdlpMezNlsOjdv3odESsErlNv1HoudRETifLriDR\n"
1171                 "fip8tmNHnna6l9AW5wtsbfdDbzMLKTB3+p359U64drPNGLT5IO892+bKrZvQTtKH\n"
1172                 "qQ2mRHNQ3XBb7a1+Srwi1agm5MKFIA3Z\n"
1173                 "-----END CERTIFICATE-----\n";
1174
1175         ckmc_cert_s c_cert;
1176         c_cert.raw_cert = reinterpret_cast<unsigned char *>(const_cast<char *>(ee.c_str()));
1177         c_cert.cert_size = ee.size();
1178         c_cert.data_format = CKMC_FORM_PEM;
1179
1180         ckmc_cert_s c_cert1;
1181         c_cert1.raw_cert = reinterpret_cast<unsigned char *>(const_cast<char *>(im.c_str()));
1182         c_cert1.cert_size = im.size();
1183         c_cert1.data_format = CKMC_FORM_PEM;
1184
1185         ckmc_cert_list_s untrustedcerts;
1186         untrustedcerts.cert = &c_cert1;
1187         untrustedcerts.next = NULL;
1188
1189         ckmc_cert_list_s *cert_chain_list;
1190
1191         int tmp;
1192
1193         tmp = ckmc_get_cert_chain(&c_cert, &untrustedcerts, &cert_chain_list);
1194         RUNNER_ASSERT_MSG(
1195                         CKMC_ERROR_NONE == tmp, "Error=" << tmp << "/" << CKM::ErrorToString(tmp));
1196
1197         int cnt = 0;
1198         ckmc_cert_list_s *current;
1199         ckmc_cert_list_s *next =cert_chain_list;
1200         do{
1201                 current = next;
1202                 next = current->next;
1203                 cnt ++;
1204         }while(next != NULL);
1205         RUNNER_ASSERT_MSG(cnt == 3, "Wrong size of certificate chain.");
1206
1207         ckmc_cert_list_s *cert_chain_list2 = NULL;
1208         ckmc_cert_list_s *untrustedcerts2 = NULL;
1209         RUNNER_ASSERT_MSG(
1210                         CKMC_ERROR_VERIFICATION_FAILED == (tmp = ckmc_get_cert_chain(&c_cert, untrustedcerts2, &cert_chain_list2)),
1211                         "Error=" << tmp << "/" << CKM::ErrorToString(tmp));
1212
1213         RUNNER_ASSERT_MSG(
1214                         cert_chain_list2 == NULL,
1215                         "Wrong size of certificate chain.");
1216 }
1217
1218 RUNNER_TEST(T3073_CAPI_get_chain_with_alias)
1219 {
1220         std::string ee =
1221                 "-----BEGIN CERTIFICATE-----\n"
1222                 "MIIF0TCCBLmgAwIBAgIQaPGTP4aS7Ut/WDNaBzdQrDANBgkqhkiG9w0BAQUFADCB\n"
1223                 "ujELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL\n"
1224                 "ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug\n"
1225                 "YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykwNjE0MDIGA1UEAxMr\n"
1226                 "VmVyaVNpZ24gQ2xhc3MgMyBFeHRlbmRlZCBWYWxpZGF0aW9uIFNTTCBDQTAeFw0x\n"
1227                 "NDAyMjAwMDAwMDBaFw0xNTAyMjAyMzU5NTlaMIHmMRMwEQYLKwYBBAGCNzwCAQMT\n"
1228                 "AlBMMR0wGwYDVQQPExRQcml2YXRlIE9yZ2FuaXphdGlvbjETMBEGA1UEBRMKMDAw\n"
1229                 "MDAyNTIzNzELMAkGA1UEBhMCUEwxDzANBgNVBBEUBjAwLTk1MDEUMBIGA1UECBML\n"
1230                 "bWF6b3dpZWNraWUxETAPBgNVBAcUCFdhcnN6YXdhMRYwFAYDVQQJFA1TZW5hdG9y\n"
1231                 "c2thIDE4MRMwEQYDVQQKFAptQmFuayBTLkEuMQwwCgYDVQQLFANESU4xGTAXBgNV\n"
1232                 "BAMUEHd3dy5tYmFuay5jb20ucGwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK\n"
1233                 "AoIBAQDph6x8V6xUW/+651+qHF+UmorH9uaz2ZrX2bIWiMKIJFmpDDHlxcapKkqE\n"
1234                 "BV04is83aiCpqKtc2ZHy2g4Hpj1eSF5BP2+OAlo0YUQZPIeRRdiMjmeAxw/ncBDx\n"
1235                 "9rQBuCJ4XTD6cqQox5SI0TASOZ+wyAEjbDRXzL73XqRAFZ1LOpb2ONkolS+RutMB\n"
1236                 "vshvCsWPeNe7eGLuOh6DyC6r1vX9xhw3xnjM2mTSvmtimgzSLacNGKqRrsucUgcb\n"
1237                 "0+O5C2jZAtAMLyZksL92cxmWbtVzUYzem4chjHu5cRxUlPNzUJWrrczueB7Ip4A8\n"
1238                 "aQuFMfNXYc0x+WLWjy//urypMKjhAgMBAAGjggGjMIIBnzAbBgNVHREEFDASghB3\n"
1239                 "d3cubWJhbmsuY29tLnBsMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud\n"
1240                 "JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBEBgNVHSAEPTA7MDkGC2CGSAGG+EUB\n"
1241                 "BxcGMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LnZlcmlzaWduLmNvbS9jcHMw\n"
1242                 "HQYDVR0OBBYEFN37iGaS7mZnENxZ9FGqNLR+QgoMMB8GA1UdIwQYMBaAFPyKULqe\n"
1243                 "uSVae1WFT5UAY4/pWGtDMEIGA1UdHwQ7MDkwN6A1oDOGMWh0dHA6Ly9FVlNlY3Vy\n"
1244                 "ZS1jcmwudmVyaXNpZ24uY29tL0VWU2VjdXJlMjAwNi5jcmwwfAYIKwYBBQUHAQEE\n"
1245                 "cDBuMC0GCCsGAQUFBzABhiFodHRwOi8vRVZTZWN1cmUtb2NzcC52ZXJpc2lnbi5j\n"
1246                 "b20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9FVlNlY3VyZS1haWEudmVyaXNpZ24uY29t\n"
1247                 "L0VWU2VjdXJlMjAwNi5jZXIwDQYJKoZIhvcNAQEFBQADggEBAD0wO+rooUrIM4qp\n"
1248                 "PHhp+hkXK6WMQ2qzGOmbMcZjw0govg5vkzkefPDryIXXbrF8mRagiJNMSfNaWWeh\n"
1249                 "Cj41OV24EdUl0OLbFxNzcvub599zRs/apfaRLTfsmlmOgi0/YP305i+3tJ2ll946\n"
1250                 "P+qV1wXnXqTqEdIl4Ys3+1HmDCdTB1hoDwAAzqRVUXZ5+iiwPAU7R/LTHfMjV1ke\n"
1251                 "8jtNFfrorlZMCfVH/7eEnHJvVjOJt+YFe4aFMzE+DfuYIK7MH+olC2v79kBwbnEQ\n"
1252                 "fvHMA9gFwOYLUBBdSfcocp8EKZ+mRlNPGR/3LBrPeaQQ0GZEkxzRK+v/aNTuiYfr\n"
1253                 "oFXtrg0=\n"
1254                 "-----END CERTIFICATE-----\n";
1255
1256         std::string im =
1257                 "-----BEGIN CERTIFICATE-----\n"
1258                 "MIIF5DCCBMygAwIBAgIQW3dZxheE4V7HJ8AylSkoazANBgkqhkiG9w0BAQUFADCB\n"
1259                 "yjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL\n"
1260                 "ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJp\n"
1261                 "U2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxW\n"
1262                 "ZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0\n"
1263                 "aG9yaXR5IC0gRzUwHhcNMDYxMTA4MDAwMDAwWhcNMTYxMTA3MjM1OTU5WjCBujEL\n"
1264                 "MAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZW\n"
1265                 "ZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2UgYXQg\n"
1266                 "aHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykwNjE0MDIGA1UEAxMrVmVy\n"
1267                 "aVNpZ24gQ2xhc3MgMyBFeHRlbmRlZCBWYWxpZGF0aW9uIFNTTCBDQTCCASIwDQYJ\n"
1268                 "KoZIhvcNAQEBBQADggEPADCCAQoCggEBAJjboFXrnP0XeeOabhQdsVuYI4cWbod2\n"
1269                 "nLU4O7WgerQHYwkZ5iqISKnnnbYwWgiXDOyq5BZpcmIjmvt6VCiYxQwtt9citsj5\n"
1270                 "OBfH3doxRpqUFI6e7nigtyLUSVSXTeV0W5K87Gws3+fBthsaVWtmCAN/Ra+aM/EQ\n"
1271                 "wGyZSpIkMQht3QI+YXZ4eLbtfjeubPOJ4bfh3BXMt1afgKCxBX9ONxX/ty8ejwY4\n"
1272                 "P1C3aSijtWZfNhpSSENmUt+ikk/TGGC+4+peGXEFv54cbGhyJW+ze3PJbb0S/5tB\n"
1273                 "Ml706H7FC6NMZNFOvCYIZfsZl1h44TO/7Wg+sSdFb8Di7Jdp91zT91ECAwEAAaOC\n"
1274                 "AdIwggHOMB0GA1UdDgQWBBT8ilC6nrklWntVhU+VAGOP6VhrQzASBgNVHRMBAf8E\n"
1275                 "CDAGAQH/AgEAMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRw\n"
1276                 "czovL3d3dy52ZXJpc2lnbi5jb20vY3BzMD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6\n"
1277                 "Ly9FVlNlY3VyZS1jcmwudmVyaXNpZ24uY29tL3BjYTMtZzUuY3JsMA4GA1UdDwEB\n"
1278                 "/wQEAwIBBjARBglghkgBhvhCAQEEBAMCAQYwbQYIKwYBBQUHAQwEYTBfoV2gWzBZ\n"
1279                 "MFcwVRYJaW1hZ2UvZ2lmMCEwHzAHBgUrDgMCGgQUj+XTGoasjY5rw8+AatRIGCx7\n"
1280                 "GS4wJRYjaHR0cDovL2xvZ28udmVyaXNpZ24uY29tL3ZzbG9nby5naWYwKQYDVR0R\n"
1281                 "BCIwIKQeMBwxGjAYBgNVBAMTEUNsYXNzM0NBMjA0OC0xLTQ3MD0GCCsGAQUFBwEB\n"
1282                 "BDEwLzAtBggrBgEFBQcwAYYhaHR0cDovL0VWU2VjdXJlLW9jc3AudmVyaXNpZ24u\n"
1283                 "Y29tMB8GA1UdIwQYMBaAFH/TZafC3ey78DAJ80M5+gKvMzEzMA0GCSqGSIb3DQEB\n"
1284                 "BQUAA4IBAQCWovp/5j3t1CvOtxU/wHIDX4u6FpAl98KD2Md1NGNoElMMU4l7yVYJ\n"
1285                 "p8M2RE4O0GJis4b66KGbNGeNUyIXPv2s7mcuQ+JdfzOE8qJwwG6Cl8A0/SXGI3/t\n"
1286                 "5rDFV0OEst4t8dD2SB8UcVeyrDHhlyQjyRNddOVG7wl8nuGZMQoIeRuPcZ8XZsg4\n"
1287                 "z+6Ml7YGuXNG5NOUweVgtSV1LdlpMezNlsOjdv3odESsErlNv1HoudRETifLriDR\n"
1288                 "fip8tmNHnna6l9AW5wtsbfdDbzMLKTB3+p359U64drPNGLT5IO892+bKrZvQTtKH\n"
1289                 "qQ2mRHNQ3XBb7a1+Srwi1agm5MKFIA3Z\n"
1290                 "-----END CERTIFICATE-----\n";
1291
1292         ckmc_cert_s c_cert;
1293         c_cert.raw_cert = reinterpret_cast<unsigned char *>(const_cast<char *>(ee.c_str()));
1294         c_cert.cert_size = ee.size();
1295         c_cert.data_format = CKMC_FORM_PEM;
1296
1297         // save untrusted certificate
1298         ckmc_cert_s c_cert1;
1299         c_cert1.raw_cert = reinterpret_cast<unsigned char *>(const_cast<char *>(im.c_str()));
1300         c_cert1.cert_size = im.size();
1301         c_cert1.data_format = CKMC_FORM_PEM;
1302         ckmc_policy_s test_policy;
1303         test_policy.password = NULL;
1304         test_policy.extractable = 1;
1305
1306         const char *untrusted_alias = "untrusted_certificate";
1307         int tmp;
1308         RUNNER_ASSERT_MSG(
1309                         CKMC_ERROR_NONE == (tmp = ckmc_save_cert(untrusted_alias, c_cert1, test_policy)),
1310                         "Error=" << tmp);
1311
1312         CharPtr top_label = get_label();
1313         std::string full_address = aliasWithLabel(top_label.get(), untrusted_alias);
1314
1315         // check if exists (access with full path)
1316         ckmc_cert_s *c_cert_tmp;
1317         RUNNER_ASSERT_MSG(
1318                         CKMC_ERROR_NONE == (tmp = ckmc_get_cert(full_address.c_str(), NULL, &c_cert_tmp)),
1319                         "Error=" << tmp);
1320         ckmc_cert_free(c_cert_tmp);
1321
1322         // get cert chain using alias in full "label alias" form
1323         ckmc_alias_list_s *untrustedcerts = (ckmc_alias_list_s *)malloc(sizeof(ckmc_alias_list_s));
1324         untrustedcerts->alias = strdup(full_address.c_str());
1325         untrustedcerts->next = NULL;
1326         ckmc_cert_list_s *cert_chain_list;
1327
1328         tmp = ckmc_get_cert_chain_with_alias(&c_cert, untrustedcerts, &cert_chain_list);
1329         RUNNER_ASSERT_MSG(
1330                         CKMC_ERROR_NONE == tmp, "Error=" << tmp << "/" << CKM::ErrorToString(tmp));
1331         ckmc_alias_list_free(untrustedcerts);
1332
1333
1334         int cnt = 0;
1335         ckmc_cert_list_s *current;
1336         ckmc_cert_list_s *next = cert_chain_list;
1337         do{
1338                 current = next;
1339                 next = current->next;
1340                 cnt ++;
1341         }while(next != NULL);
1342         RUNNER_ASSERT_MSG(cnt == 3, "Wrong size of certificate chain.");
1343
1344         ckmc_cert_list_s *cert_chain_list2 = NULL;
1345         ckmc_alias_list_s *untrustedcerts2 = NULL;
1346         RUNNER_ASSERT_MSG(
1347                         CKMC_ERROR_VERIFICATION_FAILED == (tmp = ckmc_get_cert_chain_with_alias(&c_cert, untrustedcerts2, &cert_chain_list2)),
1348                         "Error=" << tmp << "/" << CKM::ErrorToString(tmp));
1349
1350         RUNNER_ASSERT_MSG(
1351                         cert_chain_list2 == NULL,
1352                         "Wrong size of certificate chain.");
1353 }
1354
1355 RUNNER_TEST(T3074_CAPI_deinit)
1356 {
1357         int temp;
1358
1359         RUNNER_ASSERT_MSG(
1360                 CKMC_ERROR_NONE == (temp = ckmc_lock_user_key(0)),
1361                 "Error=" << temp);
1362         RUNNER_ASSERT_MSG(
1363                 CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(0)),
1364                 "Error=" << temp);
1365 }
1366
1367
1368 RUNNER_TEST_GROUP_INIT(T308_CAPI_CREATE_AND_VERIFY_SIGNATURE);
1369
1370 RUNNER_TEST(T3081_CAPI__init)
1371 {
1372         int temp;
1373
1374         RUNNER_ASSERT_MSG(
1375                         CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(USER_APP)),
1376                         "Error=" << temp);
1377
1378         RUNNER_ASSERT_MSG(
1379                         CKMC_ERROR_NONE == (temp = ckmc_unlock_user_key(USER_APP, USER_PASS)),
1380                         "Error=" << temp);
1381
1382         RUNNER_ASSERT_MSG(
1383                         CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(0)),
1384                         "Error=" << temp);
1385
1386         RUNNER_ASSERT_MSG(
1387                         CKMC_ERROR_NONE == (temp = ckmc_unlock_user_key(0, "test-pass")),
1388                         "Error=" << temp);
1389 }
1390
1391 RUNNER_TEST(T3082_CAPI__rsa_key_create_verify)
1392 {
1393         int temp;
1394
1395         std::string prv = "-----BEGIN RSA PRIVATE KEY-----\n"
1396                 "Proc-Type: 4,ENCRYPTED\n"
1397                 "DEK-Info: DES-EDE3-CBC,6C6507B11671DABC\n"
1398                 "\n"
1399                 "YiKNviNqc/V/i241CKtAVsNckesE0kcaka3VrY7ApXR+Va93YoEwVQ8gB9cE/eHH\n"
1400                 "S0j3ZS1PAVFM/qo4ZnPdMzaSLvTQw0GAL90wWgF3XQ+feMnWyBObEoQdGXE828TB\n"
1401                 "SLz4UOIQ55Dx6JSWTfEhwAlPs2cEWD14xvuxPzAEzBIYmWmBBsCN94YgFeRTzjH0\n"
1402                 "TImoYVMN60GgOfZWw6rXq9RaV5dY0Y6F1piypCLGD35VaXAutdHIDvwUGECPm7SN\n"
1403                 "w05jRro53E1vb4mYlZEY/bs4q7XEOI5+ZKT76Xn0oEJNX1KRL1h2q8fgUkm5j40M\n"
1404                 "uQj71aLR9KyIoQARwGLeRy09tLVjH3fj66CCMqaPcxcIRIyWi5yYBB0s53ipm6A9\n"
1405                 "CYuyc7MS2C0pOdWKsDvYsHR/36KUiIdPuhF4AbaTqqO0eWeuP7Na7dGK56Fl+ooi\n"
1406                 "cUpJr7cIqMl2vL25B0jW7d4TB3zwCEkVVD1fBPeNoZWo30z4bILcBqjjPkQfHZ2e\n"
1407                 "xNraG3qI4FHjoPT8JEE8p+PgwaMoINlICyIMKiCdvwz9yEnsHPy7FkmatpS+jFoS\n"
1408                 "mg8R9vMwgK/HGEm0dmb/7/a0XsG2jCDm6cOmJdZJFQ8JW7hFs3eOHpNlQYDChG2D\n"
1409                 "A1ExslqBtbpicywTZhzFdYU/hxeCr4UqcY27Zmhr4JlBPMyvadWKeOqCamWepjbT\n"
1410                 "T/MhWJbmWgZbI5s5sbpu7cOYubQcUIEsTaQXGx/KEzGo1HLn9tzSeQfP/nqjAD/L\n"
1411                 "T5t1Mb8o4LuV/fGIT33Q3i2FospJMqp2JINNzG18I6Fjo08PTvJ3row40Rb76+lJ\n"
1412                 "wN1IBthgBgsgsOdB6XNc56sV+uq2TACsNNWw+JnFRCkCQgfF/KUrvN+WireWq88B\n"
1413                 "9UPG+Hbans5A6K+y1a+bzfdYnKws7x8wNRyPxb7Vb2t9ZTl5PBorPLVGsjgf9N5X\n"
1414                 "tCdBlfJsUdXot+EOxrIczV5zx0JIB1Y9hrDG07RYkzPuJKxkW7skqeLo8oWGVpaQ\n"
1415                 "LGWvuebky1R75hcSuL3e4QHfjBHPdQ31fScB884tqkbhBAWr2nT9bYEmyT170bno\n"
1416                 "8QkyOSb99xZBX55sLDHs9p61sTJr2C9Lz/KaWQs+3hTkpwSjSRyjEMH2n491qiQX\n"
1417                 "G+kvLEnvtR8sl9zinorj/RfsxyPntAxudfY3qaYUu2QkLvVdfTVUVbxS/Fg8f7B3\n"
1418                 "hEjCtpKgFjPxQuHE3didNOr5xM7mkmLN/QA7yHVgdpE64T5mFgC3JcVRpcR7zBPH\n"
1419                 "3OeXHgjrhDfN8UIX/cq6gNgD8w7O0rhHa3mEXI1xP14ykPcJ7wlRuLm9P3fwx5A2\n"
1420                 "jQrVKJKw1Nzummmspn4VOpJY3LkH4Sxo4e7Soo1l1cxJpzmERwgMF+vGz1L70+DG\n"
1421                 "M0hVrz1PxlOsBBFgcdS4TB91DIs/RcFDqrJ4gOPNKCgBP+rgTXXLFcxUwJfE3lKg\n"
1422                 "Kmpwdne6FuQYX3eyRVAmPgOHbJuRQCh/V4fYo51UxCcEKeKy6UgOPEJlXksWGbH5\n"
1423                 "VFmlytYW6dFKJvjltSmK6L2r+TlyEQoXwTqe4bkfhB2LniDEq28hKQ==\n"
1424                 "-----END RSA PRIVATE KEY-----\n";
1425
1426         std::string pub = "-----BEGIN PUBLIC KEY-----\n"
1427                 "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b1bXDa+S8/MGWnMkru4\n"
1428                 "T4tUddtZNi0NVjQn9RFH1NMa220GsRhRO56F77FlSVFKfSfVZKIiWg6C+DVCkcLf\n"
1429                 "zXJ/Z0pvwOQYBAqVMFjV6efQGN0JzJ1Unu7pPRiZl7RKGEI+cyzzrcDyrLLrQ2W7\n"
1430                 "0ZySkNEOv6Frx9JgC5NExuYY4lk2fQQa38JXiZkfyzif2em0px7mXbyf5LjccsKq\n"
1431                 "v1e+XLtMsL0ZefRcqsP++NzQAI8fKX7WBT+qK0HJDLiHrKOTWYzx6CwJ66LD/vvf\n"
1432                 "j55xtsKDLVDbsotvf8/m6VLMab+vqKk11TP4tq6yo0mwyTADvgl1zowQEO9I1W6o\n"
1433                 "zQIDAQAB\n"
1434                 "-----END PUBLIC KEY-----\n";
1435
1436         ckmc_raw_buffer_s msg_buff = prepare_message_buffer("message test");
1437
1438         const char *pub_alias = "pub1";
1439         const char *pri_alias = "prv1";
1440         const char *key_passwd = "1234";
1441         char *pri_passwd = NULL;
1442         char *pub_passwd = NULL;
1443         ckmc_hash_algo_e hash_algo = CKMC_HASH_SHA256;
1444         ckmc_rsa_padding_algo_e pad_algo = CKMC_PKCS1_PADDING;
1445         ckmc_raw_buffer_s *signature;
1446
1447         ckmc_key_s pubkey;
1448         pubkey.raw_key = const_cast<unsigned char *>(reinterpret_cast<const unsigned char *>(pub.c_str()));
1449         pubkey.key_size = pub.size();
1450         pubkey.key_type = CKMC_KEY_NONE;
1451         pubkey.password = NULL;
1452
1453         ckmc_policy_s pubpolicy;
1454         pubpolicy.password = pub_passwd;
1455         pubpolicy.extractable = 0;
1456
1457         ckmc_policy_s pripolicy;
1458         pripolicy.password = pri_passwd;
1459         pripolicy.extractable = 1;
1460
1461         ckmc_key_s prikey;
1462         prikey.raw_key = const_cast<unsigned char *>(reinterpret_cast<const unsigned char *>(prv.c_str()));
1463         prikey.key_size = prv.size();
1464         prikey.key_type = CKMC_KEY_NONE;
1465         prikey.password = const_cast<char *>(key_passwd);
1466
1467
1468         RUNNER_ASSERT_MSG(
1469                         CKMC_ERROR_NONE == (temp = ckmc_save_key(pri_alias, prikey, pripolicy)),
1470                         "Error=" << temp);
1471
1472         RUNNER_ASSERT_MSG(
1473                         CKMC_ERROR_NONE == (temp = ckmc_save_key(pub_alias, pubkey, pubpolicy)),
1474                         "Error=" << temp);
1475
1476         RUNNER_ASSERT_MSG(
1477                         CKMC_ERROR_NONE == (temp = ckmc_create_signature(
1478                                         pri_alias,
1479                                         pri_passwd,
1480                                         msg_buff,
1481                                         hash_algo,
1482                                         pad_algo,
1483                                         &signature)),
1484                         "Error=" << temp);
1485
1486         RUNNER_ASSERT_MSG(
1487                         CKMC_ERROR_NONE == (temp = ckmc_verify_signature(
1488                                         pub_alias,
1489                                         pub_passwd,
1490                                         msg_buff,
1491                                         *signature,
1492                                         hash_algo,
1493                                         pad_algo)),
1494                         "Error=" << temp);
1495 }
1496
1497 RUNNER_TEST(T3083_CAPI__rsa_key_create_verify_negative)
1498 {
1499         int temp;
1500
1501         ckmc_raw_buffer_s msg_buff = prepare_message_buffer("message asdfaslkdfjlksadjf test");
1502         const char *pub_alias = "pub1";
1503         const char *pri_alias = "prv1";
1504         char *pri_passwd = NULL;
1505         char *pub_passwd = NULL;
1506         ckmc_hash_algo_e hash_algo = CKMC_HASH_SHA256;
1507         ckmc_rsa_padding_algo_e pad_algo = CKMC_PKCS1_PADDING;
1508         ckmc_raw_buffer_s *signature;
1509
1510         RUNNER_ASSERT_MSG(
1511                         CKMC_ERROR_NONE == (temp = ckmc_create_signature(
1512                                         pri_alias,
1513                                         pri_passwd,
1514                                         msg_buff,
1515                                         hash_algo,
1516                                         pad_algo,
1517                                         &signature)),
1518                         "Error=" << temp);
1519
1520         RUNNER_ASSERT_MSG(
1521                         CKMC_ERROR_NONE == (temp = ckmc_verify_signature(
1522                                         pub_alias,
1523                                         pub_passwd,
1524                                         msg_buff,
1525                                         *signature,
1526                                         hash_algo,
1527                                         pad_algo)),
1528                         "Error=" << temp);
1529
1530         RUNNER_ASSERT_MSG(signature->size > 6, "Signature is too small");
1531         memcpy((void*)signature->data, "BROKEN", 6);
1532
1533         RUNNER_ASSERT_MSG(
1534                         CKMC_ERROR_VERIFICATION_FAILED == (temp = ckmc_verify_signature(
1535                                         pub_alias,
1536                                         pub_passwd,
1537                                         msg_buff,
1538                                         *signature,
1539                                         hash_algo,
1540                                         pad_algo)),
1541                         "Error=" << temp);
1542 }
1543
1544 RUNNER_TEST(T3084_CAPI__ec_key_create_verify)
1545 {
1546         int temp;
1547
1548         std::string prv = "-----BEGIN EC PRIVATE KEY-----\n"
1549                 "MHQCAQEEIJNud6U4h8EM1rASn4W5vQOJELTaVPQTUiESaBULvQUVoAcGBSuBBAAK\n"
1550                 "oUQDQgAEL1R+hgjiFrdjbUKRNOxUG8ze9nveD9zT05YHeT7vK0w08AUL1HCH5nFV\n"
1551                 "ljePBYSxe6CybFiseayaxRxjA+iF1g==\n"
1552                 "-----END EC PRIVATE KEY-----\n";
1553
1554         std::string pub = "-----BEGIN PUBLIC KEY-----\n"
1555                 "MFYwEAYHKoZIzj0CAQYFK4EEAAoDQgAEL1R+hgjiFrdjbUKRNOxUG8ze9nveD9zT\n"
1556                 "05YHeT7vK0w08AUL1HCH5nFVljePBYSxe6CybFiseayaxRxjA+iF1g==\n"
1557                 "-----END PUBLIC KEY-----\n";
1558
1559         ckmc_raw_buffer_s msg_buff = prepare_message_buffer("message test");
1560         const char *pri_alias = "ecprv2";
1561         const char *pub_alias = "ecpub2";
1562         char *key_passwd = NULL;
1563         char *pri_passwd = NULL;
1564         char *pub_passwd = NULL;
1565         ckmc_hash_algo_e hash_algo = CKMC_HASH_SHA256;
1566         ckmc_rsa_padding_algo_e pad_algo = CKMC_PKCS1_PADDING;
1567         ckmc_raw_buffer_s *signature;
1568
1569         ckmc_key_s pubkey;
1570         pubkey.raw_key = const_cast<unsigned char *>(reinterpret_cast<const unsigned char *>(pub.c_str()));
1571         pubkey.key_size = pub.size();
1572         pubkey.key_type = CKMC_KEY_NONE;
1573         pubkey.password = NULL;
1574
1575         ckmc_policy_s pubpolicy;
1576         pubpolicy.password = pub_passwd;
1577         pubpolicy.extractable = 1;
1578
1579         ckmc_key_s prikey;
1580         prikey.raw_key = const_cast<unsigned char *>(reinterpret_cast<const unsigned char *>(prv.c_str()));
1581         prikey.key_size = prv.size();
1582         prikey.key_type = CKMC_KEY_NONE;
1583         prikey.password = key_passwd;
1584
1585         ckmc_policy_s pripolicy;
1586         pripolicy.password = pri_passwd;
1587         pripolicy.extractable = 0;
1588
1589         RUNNER_ASSERT_MSG(
1590                         CKMC_ERROR_NONE == (temp = ckmc_save_key(pub_alias, pubkey, pubpolicy)),
1591                         "Error=" << temp);
1592         RUNNER_ASSERT_MSG(
1593                         CKMC_ERROR_NONE == (temp = ckmc_save_key(pri_alias, prikey, pripolicy)),
1594                         "Error=" << temp);
1595
1596         RUNNER_ASSERT_MSG(
1597                         CKMC_ERROR_NONE == (temp = ckmc_create_signature(
1598                                         pri_alias,
1599                                         pri_passwd,
1600                                         msg_buff,
1601                                         hash_algo,
1602                                         pad_algo,
1603                                         &signature)),
1604                         "Error=" << temp);
1605
1606         RUNNER_ASSERT_MSG(
1607                         CKMC_ERROR_NONE == (temp = ckmc_verify_signature(
1608                                         pub_alias,
1609                                         pub_passwd,
1610                                         msg_buff,
1611                                         *signature,
1612                                         hash_algo,
1613                                         pad_algo)),
1614                         "Error=" << temp);
1615
1616         RUNNER_ASSERT_MSG(signature->size > 6, "Signature is too small");
1617         memcpy((void*)signature->data, "BROKEN", 6);
1618
1619         RUNNER_ASSERT_MSG(
1620                         CKMC_ERROR_VERIFICATION_FAILED == (temp = ckmc_verify_signature(
1621                                         pub_alias,
1622                                         pub_passwd,
1623                                         msg_buff,
1624                                         *signature,
1625                                         hash_algo,
1626                                         pad_algo)),
1627                         "Error=" << temp);
1628 }
1629
1630 RUNNER_TEST(T3085_CAPI__rsa_cert_create_verify_signature)
1631 {
1632         int temp;
1633
1634         std::string prv =
1635                 "-----BEGIN RSA PRIVATE KEY-----\n"
1636                 "MIICXQIBAAKBgQDCKb9BkTdOjCTXKPi/H5FSGuyrgzORBtR3nCTg7SRnL47zNGEj\n"
1637                 "l2wkgsY9ZO3UJHm0gy5KMjWeCuUVkSD3G46J9obg1bYJivCQBJKxfieA8sWOtNq1\n"
1638                 "M8emHGK8o3sjaRklrngmk2xSCs5vFJVlCluzAYUmrPDm64C3+n4yW4pBCQIDAQAB\n"
1639                 "AoGAd1IWgiHO3kuLvFome7XXpaB8P27SutZ6rcLcewnhLDRy4g0XgTrmL43abBJh\n"
1640                 "gdSkooVXZity/dvuKpHUs2dQ8W8zYiFFsHfu9qqLmLP6SuBPyUCvlUDH5BGfjjxI\n"
1641                 "5qGWIowj/qGHKpbQ7uB+Oe2BHwbHao0zFZIkfKqY0mX9U00CQQDwF/4zQcGS1RX/\n"
1642                 "229gowTsvSGVmm8cy1jGst6xkueEuOEZ/AVPO1fjavz+nTziUk4E5lZHAj18L6Hl\n"
1643                 "iO29LRujAkEAzwbEWVhfTJewCZIFf3sY3ifXhGZhVKDHVzPBNyoft8Z+09DMHTJb\n"
1644                 "EYg85MIbR73aUyIWsEci/CPk6LPRNv47YwJAHtQF2NEFqPPhakPjzjXAaSFz0YDN\n"
1645                 "6ZWWpZTMEWL6hUkz5iE9EUpeY54WNB8+dRT6XZix1VZNTMfU8uMdG6BSHwJBAKYM\n"
1646                 "gm47AGz5eVujwD8op6CACk+KomRzdI+P1lh9s+T+E3mnDiAY5IxiXp0Ix0K6lyN4\n"
1647                 "wwPuerQLwi2XFKZsMYsCQQDOiSQFP9PfXh9kFzN6e89LxOdnqC/r9i5GDB3ea8eL\n"
1648                 "SCRprpzqOXZvOP1HBAEjsJ6k4f8Dqj1fm+y8ZcgAZUPr\n"
1649                 "-----END RSA PRIVATE KEY-----\n";
1650
1651         std::string pub =
1652                 "-----BEGIN CERTIFICATE-----\n"
1653                 "MIICijCCAfOgAwIBAgIJAMvaNHQ1ozT8MA0GCSqGSIb3DQEBBQUAMF4xCzAJBgNV\n"
1654                 "BAYTAlBMMQ0wCwYDVQQIDARMb2R6MQ0wCwYDVQQHDARMb2R6MRAwDgYDVQQKDAdT\n"
1655                 "YW1zdW5nMREwDwYDVQQLDAhTZWN1cml0eTEMMAoGA1UEAwwDQ0tNMB4XDTE0MDcw\n"
1656                 "MjEyNDE0N1oXDTE3MDcwMTEyNDE0N1owXjELMAkGA1UEBhMCUEwxDTALBgNVBAgM\n"
1657                 "BExvZHoxDTALBgNVBAcMBExvZHoxEDAOBgNVBAoMB1NhbXN1bmcxETAPBgNVBAsM\n"
1658                 "CFNlY3VyaXR5MQwwCgYDVQQDDANDS00wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJ\n"
1659                 "AoGBAMIpv0GRN06MJNco+L8fkVIa7KuDM5EG1HecJODtJGcvjvM0YSOXbCSCxj1k\n"
1660                 "7dQkebSDLkoyNZ4K5RWRIPcbjon2huDVtgmK8JAEkrF+J4DyxY602rUzx6YcYryj\n"
1661                 "eyNpGSWueCaTbFIKzm8UlWUKW7MBhSas8ObrgLf6fjJbikEJAgMBAAGjUDBOMB0G\n"
1662                 "A1UdDgQWBBQuW9DuITahZJ6saVZZI0aBlis5vzAfBgNVHSMEGDAWgBQuW9DuITah\n"
1663                 "ZJ6saVZZI0aBlis5vzAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBQUAA4GBAB2X\n"
1664                 "GNtJopBJR3dCpzDONknr/c6qcsPVa3nH4c7qzy6F+4bgqa5IObnoF8zUrvD2sMAO\n"
1665                 "km3C/N+Qzt8Rb7ORM6U4tlPp1kZ5t6PKjghhNaiYwVm9A/Zm+wyAmRIkQiYDr4MX\n"
1666                 "e+bRAkPmJeEWpaav1lvvBnFzGSGJrnSSeWUegGyn\n"
1667                 "-----END CERTIFICATE-----\n";
1668
1669         ckmc_raw_buffer_s msg_buff = prepare_message_buffer("message test");
1670
1671         const char *pri_alias = "prv3";
1672         const char *pub_alias = "pub3";
1673         char *key_passwd = NULL;
1674         char *pri_passwd = NULL;
1675         char *pub_passwd = NULL;
1676         ckmc_hash_algo_e hash_algo = CKMC_HASH_SHA256;
1677         ckmc_rsa_padding_algo_e pad_algo = CKMC_PKCS1_PADDING;
1678         ckmc_raw_buffer_s *signature;
1679
1680         ckmc_cert_s cert;
1681         cert.raw_cert = const_cast<unsigned char *>(reinterpret_cast<const unsigned char *>(pub.c_str()));
1682         cert.cert_size = pub.size();
1683         cert.data_format = CKMC_FORM_PEM;
1684
1685         ckmc_policy_s certpolicy;
1686         certpolicy.password = pub_passwd;
1687         certpolicy.extractable = 1;
1688
1689         ckmc_key_s prikey;
1690         prikey.raw_key = const_cast<unsigned char *>(reinterpret_cast<const unsigned char *>(prv.c_str()));
1691         prikey.key_size = prv.size();
1692         prikey.key_type = CKMC_KEY_NONE;
1693         prikey.password = key_passwd;
1694
1695         ckmc_policy_s pripolicy;
1696         pripolicy.password = pri_passwd;
1697         pripolicy.extractable = 0;
1698
1699         RUNNER_ASSERT_MSG(
1700                         CKMC_ERROR_NONE == (temp = ckmc_save_cert(pub_alias, cert, certpolicy)),
1701                         "Error=" << temp);
1702         RUNNER_ASSERT_MSG(
1703                         CKMC_ERROR_NONE == (temp = ckmc_save_key(pri_alias, prikey, pripolicy)),
1704                         "Error=" << temp);
1705
1706
1707         RUNNER_ASSERT_MSG(
1708                         CKMC_ERROR_NONE == (temp = ckmc_create_signature(
1709                                         pri_alias,
1710                                         pri_passwd,
1711                                         msg_buff,
1712                                         hash_algo,
1713                                         pad_algo,
1714                                         &signature)),
1715                         "Error=" << temp);
1716
1717         RUNNER_ASSERT_MSG(
1718                         CKMC_ERROR_NONE == (temp = ckmc_verify_signature(
1719                                         pub_alias,
1720                                         pub_passwd,
1721                                         msg_buff,
1722                                         *signature,
1723                                         hash_algo,
1724                                         pad_algo)),
1725                         "Error=" << temp);
1726
1727         RUNNER_ASSERT_MSG(signature->size > 6, "Signature is too small");
1728         memcpy((void*)signature->data, "BROKEN", 6);
1729
1730         RUNNER_ASSERT_MSG(
1731                         CKMC_ERROR_VERIFICATION_FAILED == (temp = ckmc_verify_signature(
1732                                         pub_alias,
1733                                         pub_passwd,
1734                                         msg_buff,
1735                                         *signature,
1736                                         hash_algo,
1737                                         pad_algo)),
1738                         "Error=" << temp);
1739 }
1740
1741 RUNNER_TEST(T3086_CAPI__dsa_ext_key_create_verify_with_negative)
1742 {
1743         int temp;
1744
1745         const std::string pub = "-----BEGIN PUBLIC KEY-----\n"
1746                 "MIIBtzCCASwGByqGSM44BAEwggEfAoGBALeveaD/EheW+ws1YuW77f344+brkEzm\n"
1747                 "BVfFYHr7t+jwu6nQe341SoESJG+PCgrrhy76KNDCfveiwEoWufVHnI4bYBU/ClzP\n"
1748                 "A3amf6c5yud45ZR/b6OiAuew6ohY0mQGnzqeio8BaCsZaJ6EziCSlkdIDJisSfPg\n"
1749                 "nlWHqf4AwHVdAhUA7I1JQ7sBFJ+N19w3Omu+aO8EG08CgYEAldagy/Ccxhh43cZu\n"
1750                 "AZQxgJLCcp1jg6NdPMdkZ2TcSijvaVxBu+gjEGOqN5Os2V6UF7S/k/rjHYmcX9ux\n"
1751                 "gpjkC31yTNrKyERIAFIYZtG2K7LVBUZq5Fgm7I83QBVchJ2PA7mBaugJFEhNjbhK\n"
1752                 "NRip5UH38le1YDZ/IiA+svFOpeoDgYQAAoGAPT91aEgwFdulzmHlvr3k+GBCE9z+\n"
1753                 "hq0c3FGUCtGbVOqg2KPqMBgwSb4MC0msQys4DTVZhLJI+C5eIPEHgfBMqY1ZNJdO\n"
1754                 "OSCQciDXnRfSqKbT6tjDTgR5jmh5bG1Q8QFeBTHCDsQHoQYWgx0nyu12lASN80rC\n"
1755                 "YMYCBhubtrVaLmc=\n"
1756                 "-----END PUBLIC KEY-----";
1757
1758         const std::string priv = "-----BEGIN DSA PRIVATE KEY-----\n"
1759                 "MIIBvAIBAAKBgQC3r3mg/xIXlvsLNWLlu+39+OPm65BM5gVXxWB6+7fo8Lup0Ht+\n"
1760                 "NUqBEiRvjwoK64cu+ijQwn73osBKFrn1R5yOG2AVPwpczwN2pn+nOcrneOWUf2+j\n"
1761                 "ogLnsOqIWNJkBp86noqPAWgrGWiehM4gkpZHSAyYrEnz4J5Vh6n+AMB1XQIVAOyN\n"
1762                 "SUO7ARSfjdfcNzprvmjvBBtPAoGBAJXWoMvwnMYYeN3GbgGUMYCSwnKdY4OjXTzH\n"
1763                 "ZGdk3Eoo72lcQbvoIxBjqjeTrNlelBe0v5P64x2JnF/bsYKY5At9ckzayshESABS\n"
1764                 "GGbRtiuy1QVGauRYJuyPN0AVXISdjwO5gWroCRRITY24SjUYqeVB9/JXtWA2fyIg\n"
1765                 "PrLxTqXqAoGAPT91aEgwFdulzmHlvr3k+GBCE9z+hq0c3FGUCtGbVOqg2KPqMBgw\n"
1766                 "Sb4MC0msQys4DTVZhLJI+C5eIPEHgfBMqY1ZNJdOOSCQciDXnRfSqKbT6tjDTgR5\n"
1767                 "jmh5bG1Q8QFeBTHCDsQHoQYWgx0nyu12lASN80rCYMYCBhubtrVaLmcCFQC0IB4m\n"
1768                 "u1roOuaPY+Hl19BlTE2qdw==\n"
1769                 "-----END DSA PRIVATE KEY-----";
1770
1771         ckmc_raw_buffer_s msg_buff = prepare_message_buffer("message test");
1772
1773         const char *pub_alias = "dsa-pub1";
1774         const char *pri_alias = "dsa-prv1";
1775         char *pri_passwd = NULL;
1776         char *pub_passwd = NULL;
1777         ckmc_hash_algo_e hash_algo = CKMC_HASH_SHA256;
1778         ckmc_rsa_padding_algo_e pad_algo = CKMC_PKCS1_PADDING;
1779         ckmc_raw_buffer_s *signature = NULL;
1780
1781         ckmc_key_s pubkey;
1782         pubkey.raw_key = const_cast<unsigned char *>(reinterpret_cast<const unsigned char *>(pub.c_str()));
1783         pubkey.key_size = pub.size();
1784         pubkey.key_type = CKMC_KEY_NONE;
1785         pubkey.password = NULL;
1786
1787         ckmc_policy_s pubpolicy;
1788         pubpolicy.password = pub_passwd;
1789         pubpolicy.extractable = 0;
1790
1791         ckmc_policy_s pripolicy;
1792         pripolicy.password = pri_passwd;
1793         pripolicy.extractable = 1;
1794
1795         ckmc_key_s prikey;
1796         prikey.raw_key = const_cast<unsigned char *>(reinterpret_cast<const unsigned char *>(priv.c_str()));
1797         prikey.key_size = priv.size();
1798         prikey.key_type = CKMC_KEY_NONE;
1799         prikey.password = NULL;
1800
1801
1802         RUNNER_ASSERT_MSG(
1803                         CKMC_ERROR_NONE == (temp = ckmc_save_key(pri_alias, prikey, pripolicy)),
1804                         "Error=" << temp);
1805
1806         RUNNER_ASSERT_MSG(
1807                         CKMC_ERROR_NONE == (temp = ckmc_save_key(pub_alias, pubkey, pubpolicy)),
1808                         "Error=" << temp);
1809
1810         RUNNER_ASSERT_MSG(
1811                         CKMC_ERROR_NONE == (temp = ckmc_create_signature(
1812                                         pri_alias,
1813                                         pri_passwd,
1814                                         msg_buff,
1815                                         hash_algo,
1816                                         pad_algo,
1817                                         &signature)),
1818                         "Error=" << temp);
1819
1820         // positive test
1821         RUNNER_ASSERT_MSG(
1822                         CKMC_ERROR_NONE == (temp = ckmc_verify_signature(
1823                                         pub_alias,
1824                                         pub_passwd,
1825                                         msg_buff,
1826                                         *signature,
1827                                         hash_algo,
1828                                         pad_algo)),
1829                         "Error=" << temp);
1830
1831         // negative test
1832         ckmc_raw_buffer_s invalid_msg_buff = prepare_message_buffer("invalid message test");
1833         RUNNER_ASSERT_MSG(
1834                         CKMC_ERROR_VERIFICATION_FAILED == (temp = ckmc_verify_signature(
1835                                         pub_alias,
1836                                         pub_passwd,
1837                                         invalid_msg_buff,
1838                                         *signature,
1839                                         hash_algo,
1840                                         pad_algo)),
1841                         "Error=" << temp);
1842
1843         ckmc_buffer_free(signature);
1844 }
1845
1846 RUNNER_TEST(T3087_CAPI__dsa_int_key_create_verify_with_negative)
1847 {
1848         int temp;
1849
1850         size_t size = 1024;
1851         ckmc_policy_s policy_private_key;
1852         ckmc_policy_s policy_public_key;
1853
1854         policy_private_key.password = NULL;
1855         policy_private_key.extractable = 1;
1856
1857         policy_public_key.password = NULL;
1858         policy_public_key.extractable = 1;
1859
1860         ckmc_raw_buffer_s msg_buff = prepare_message_buffer("message test");
1861
1862         const char *pub_alias = "dsa-pub2";
1863         const char *pri_alias = "dsa-prv2";
1864
1865         RUNNER_ASSERT_MSG(
1866                         CKMC_ERROR_NONE == (temp = ckmc_create_key_pair_dsa(size, pri_alias, pub_alias, policy_private_key, policy_public_key)),
1867                         "Error=" << temp);
1868
1869         char *pri_passwd = NULL;
1870         char *pub_passwd = NULL;
1871         ckmc_hash_algo_e hash_algo = CKMC_HASH_SHA256;
1872         ckmc_rsa_padding_algo_e pad_algo = CKMC_PKCS1_PADDING;
1873         ckmc_raw_buffer_s *signature;
1874
1875         ckmc_key_s *pubkey = NULL;
1876         ckmc_key_s *prikey = NULL;
1877         RUNNER_ASSERT_MSG(
1878                         CKMC_ERROR_NONE == (temp = ckmc_get_key(pri_alias, 0, &prikey)),
1879                         "Error=" << temp);
1880
1881         RUNNER_ASSERT_MSG(
1882                         CKMC_ERROR_NONE == (temp = ckmc_get_key(pub_alias, 0, &pubkey)),
1883                         "Error=" << temp);
1884
1885         RUNNER_ASSERT_MSG(
1886                         CKMC_ERROR_NONE == (temp = ckmc_create_signature(
1887                                         pri_alias,
1888                                         pri_passwd,
1889                                         msg_buff,
1890                                         hash_algo,
1891                                         pad_algo,
1892                                         &signature)),
1893                         "Error=" << temp);
1894
1895         // positive test
1896         RUNNER_ASSERT_MSG(
1897                         CKMC_ERROR_NONE == (temp = ckmc_verify_signature(
1898                                         pub_alias,
1899                                         pub_passwd,
1900                                         msg_buff,
1901                                         *signature,
1902                                         hash_algo,
1903                                         pad_algo)),
1904                         "Error=" << temp);
1905
1906         // negative test
1907         ckmc_raw_buffer_s invalid_msg_buff = prepare_message_buffer("invalid message test");
1908         RUNNER_ASSERT_MSG(
1909                         CKMC_ERROR_VERIFICATION_FAILED == (temp = ckmc_verify_signature(
1910                                         pub_alias,
1911                                         pub_passwd,
1912                                         invalid_msg_buff,
1913                                         *signature,
1914                                         hash_algo,
1915                                         pad_algo)),
1916                         "Error=" << temp);
1917
1918         ckmc_key_free(prikey);
1919         ckmc_key_free(pubkey);
1920         ckmc_buffer_free(signature);
1921 }
1922
1923 RUNNER_TEST(T3088_CAPI__ecdsa_cert_create_verify_signature)
1924 {
1925         int temp;
1926
1927         std::string prv =
1928                 "-----BEGIN EC PRIVATE KEY-----\n"
1929                 "MIH8AgEBBBRPb/2utS5aCtyuwmzIHpU6LH3mc6CBsjCBrwIBATAgBgcqhkjOPQEB\n"
1930                 "AhUA/////////////////////3////8wQwQU/////////////////////3////wE\n"
1931                 "FByXvvxUvXqLZaz4n4HU1K3FZfpFAxUAEFPN5CwU1pbmdodWFRdTO/P4M0UEKQRK\n"
1932                 "lrVojvVzKEZkaYlow4u5E8v8giOmKFUxaJR9WdzJEgQjUTd6xfsyAhUBAAAAAAAA\n"
1933                 "AAAAAfTI+Seu08p1IlcCAQGhLAMqAATehLqu61gKC3Tgr4wQMVoguAhhG3Uwwz8u\n"
1934                 "ELyhe7yPCAuOoLZlTLgf\n"
1935                 "-----END EC PRIVATE KEY-----\n";
1936
1937         std::string pub =
1938                 "-----BEGIN CERTIFICATE-----\n"
1939                 "MIICfDCCAjqgAwIBAgIJANIytpeTKlXBMAkGByqGSM49BAEwXjELMAkGA1UEBhMC\n"
1940                 "UEwxDTALBgNVBAgMBExvZHoxDTALBgNVBAcMBExvZHoxEDAOBgNVBAoMB1NhbXN1\n"
1941                 "bmcxETAPBgNVBAsMCFNlY3VyaXR5MQwwCgYDVQQDDANDS00wHhcNMTQwNzAyMTI0\n"
1942                 "MTQ3WhcNMTcwNzAxMTI0MTQ3WjBeMQswCQYDVQQGEwJQTDENMAsGA1UECAwETG9k\n"
1943                 "ejENMAsGA1UEBwwETG9kejEQMA4GA1UECgwHU2Ftc3VuZzERMA8GA1UECwwIU2Vj\n"
1944                 "dXJpdHkxDDAKBgNVBAMMA0NLTTCB6jCBuwYHKoZIzj0CATCBrwIBATAgBgcqhkjO\n"
1945                 "PQEBAhUA/////////////////////3////8wQwQU/////////////////////3//\n"
1946                 "//wEFByXvvxUvXqLZaz4n4HU1K3FZfpFAxUAEFPN5CwU1pbmdodWFRdTO/P4M0UE\n"
1947                 "KQRKlrVojvVzKEZkaYlow4u5E8v8giOmKFUxaJR9WdzJEgQjUTd6xfsyAhUBAAAA\n"
1948                 "AAAAAAAAAfTI+Seu08p1IlcCAQEDKgAE3oS6rutYCgt04K+MEDFaILgIYRt1MMM/\n"
1949                 "LhC8oXu8jwgLjqC2ZUy4H6NQME4wHQYDVR0OBBYEFELElWx3kbLo55Cfn1vywsEZ\n"
1950                 "ccsmMB8GA1UdIwQYMBaAFELElWx3kbLo55Cfn1vywsEZccsmMAwGA1UdEwQFMAMB\n"
1951                 "Af8wCQYHKoZIzj0EAQMxADAuAhUAumC4mGoyK97SxTvVBQ+ELfCbxEECFQCbMJ72\n"
1952                 "Q1oBry6NEc+lLFmWMDesAA==\n"
1953                 "-----END CERTIFICATE-----\n";
1954
1955         ckmc_raw_buffer_s msg_buff = prepare_message_buffer("message test");
1956
1957         const char *pri_alias = "prv4";
1958         const char *pub_alias = "pub4";
1959         char *key_passwd = NULL;
1960         char *pri_passwd = NULL;
1961         char *pub_passwd = NULL;
1962         ckmc_hash_algo_e hash_algo = CKMC_HASH_SHA256;
1963         ckmc_rsa_padding_algo_e pad_algo = CKMC_PKCS1_PADDING;
1964         ckmc_raw_buffer_s *signature;
1965
1966         ckmc_cert_s cert;
1967         cert.raw_cert = const_cast<unsigned char *>(reinterpret_cast<const unsigned char *>(pub.c_str()));
1968         cert.cert_size = pub.size();
1969         cert.data_format = CKMC_FORM_PEM;
1970
1971         ckmc_policy_s certpolicy;
1972         certpolicy.password = pub_passwd;
1973         certpolicy.extractable = 1;
1974
1975         ckmc_key_s prikey;
1976         prikey.raw_key = const_cast<unsigned char *>(reinterpret_cast<const unsigned char *>(prv.c_str()));
1977         prikey.key_size = prv.size();
1978         prikey.key_type = CKMC_KEY_NONE;
1979         prikey.password = key_passwd;
1980
1981         ckmc_policy_s pripolicy;
1982         pripolicy.password = pri_passwd;
1983         pripolicy.extractable = 0;
1984
1985
1986         RUNNER_ASSERT_MSG(
1987                         CKMC_ERROR_NONE == (temp = ckmc_save_cert(pub_alias, cert, certpolicy)),
1988                         "Error=" << temp);
1989         RUNNER_ASSERT_MSG(
1990                         CKMC_ERROR_NONE == (temp = ckmc_save_key(pri_alias, prikey, pripolicy)),
1991                         "Error=" << temp);
1992
1993         RUNNER_ASSERT_MSG(
1994                         CKMC_ERROR_NONE == (temp = ckmc_create_signature(
1995                                         pri_alias,
1996                                         pri_passwd,
1997                                         msg_buff,
1998                                         hash_algo,
1999                                         pad_algo,
2000                                         &signature)),
2001                         "Error=" << temp);
2002
2003         RUNNER_ASSERT_MSG(
2004                         CKMC_ERROR_NONE == (temp = ckmc_verify_signature(
2005                                         pub_alias,
2006                                         pub_passwd,
2007                                         msg_buff,
2008                                         *signature,
2009                                         hash_algo,
2010                                         pad_algo)),
2011                         "Error=" << temp);
2012
2013         RUNNER_ASSERT_MSG(signature->size > 6, "Signature is too small");
2014         memcpy((void*)signature->data, "BROKEN", 6);
2015
2016         RUNNER_ASSERT_MSG(
2017                         CKMC_ERROR_VERIFICATION_FAILED == (temp = ckmc_verify_signature(
2018                                         pub_alias,
2019                                         pub_passwd,
2020                                         msg_buff,
2021                                         *signature,
2022                                         hash_algo,
2023                                         pad_algo)),
2024                         "Error=" << temp);
2025 }
2026
2027 RUNNER_TEST(T3089_CAPI__deinit)
2028 {
2029         int temp;
2030
2031         RUNNER_ASSERT_MSG(
2032                         CKMC_ERROR_NONE == (temp = ckmc_lock_user_key(0)),
2033                         "Error=" << temp);
2034         RUNNER_ASSERT_MSG(
2035                         CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(0)),
2036                         "Error=" << temp);
2037 }
2038
2039
2040 //#######################################################################################
2041
2042 void _assertKey(ckmc_key_s *key, unsigned char *raw_key, unsigned int key_size, ckmc_key_type_e key_type, char *password)
2043 {
2044         RUNNER_ASSERT_MSG(key->key_size == key_size, "Key Size Error" );
2045         RUNNER_ASSERT_MSG(key->key_type == key_type, "Key Type Error" );
2046
2047         if(key->password != NULL && password != NULL) {
2048                 RUNNER_ASSERT_MSG(strcmp(key->password, password) == 0, "Password Error" );
2049         }else if(key->password == NULL && password == NULL) {
2050                 RUNNER_ASSERT_MSG(true, "Password Error" );
2051         }else {
2052                 RUNNER_ASSERT_MSG(false, "Password Error" );
2053         }
2054
2055         if(key->raw_key != NULL && raw_key != NULL) {
2056                 for(unsigned int i=0; i<key_size; i++) {
2057                         RUNNER_ASSERT_MSG((key->raw_key)[i] == raw_key[i],  "Raw Key Error" );
2058                 }
2059         }else if(key->raw_key == NULL && raw_key == NULL) {
2060                 RUNNER_ASSERT_MSG(true,  "Raw Key Error" );
2061         }else {
2062                 RUNNER_ASSERT_MSG(false,  "Raw Key Error" );
2063         }
2064 }
2065
2066 RUNNER_TEST_GROUP_INIT(T309_CKMC_CAPI_TYPES);
2067
2068 RUNNER_TEST(T3091_CAPI_TYPE_init)
2069 {
2070         int temp;
2071         RUNNER_ASSERT_MSG(
2072                         CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(0)),
2073                         "Error=" << temp);
2074         RUNNER_ASSERT_MSG(
2075                         CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(USER_APP)),
2076                         "Error=" << temp);
2077         RUNNER_ASSERT_MSG(
2078                         CKMC_ERROR_NONE == (temp = ckmc_unlock_user_key(0, "test-pass")),
2079                         "Error=" << temp);
2080         RUNNER_ASSERT_MSG(
2081                         CKMC_ERROR_NONE == (temp = ckmc_unlock_user_key(USER_APP, USER_PASS)),
2082                         "Error=" << temp);
2083 }
2084
2085 RUNNER_TEST(T3092_CAPI_TYPE_KEY)
2086 {
2087         std::string keyPem = "-----BEGIN PUBLIC KEY-----\n"
2088                 "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b1bXDa+S8/MGWnMkru4\n"
2089                 "T4tUddtZNi0NVjQn9RFH1NMa220GsRhRO56F77FlSVFKfSfVZKIiWg6C+DVCkcLf\n"
2090                 "zXJ/Z0pvwOQYBAqVMFjV6efQGN0JzJ1Unu7pPRiZl7RKGEI+cyzzrcDyrLLrQ2W7\n"
2091                 "0ZySkNEOv6Frx9JgC5NExuYY4lk2fQQa38JXiZkfyzif2em0px7mXbyf5LjccsKq\n"
2092                 "v1e+XLtMsL0ZefRcqsP++NzQAI8fKX7WBT+qK0HJDLiHrKOTWYzx6CwJ66LD/vvf\n"
2093                 "j55xtsKDLVDbsotvf8/m6VLMab+vqKk11TP4tq6yo0mwyTADvgl1zowQEO9I1W6o\n"
2094                 "zQIDAQAB\n"
2095                 "-----END PUBLIC KEY-----";
2096
2097         unsigned char *raw_key = const_cast<unsigned char *>(reinterpret_cast<const unsigned char *>(keyPem.c_str()));
2098         unsigned int key_size = keyPem.size();
2099         ckmc_key_type_e key_type = CKMC_KEY_NONE;
2100         char *password = const_cast< char *>("");
2101
2102         ckmc_key_s *key;
2103         ckmc_key_new(raw_key, key_size, key_type, password, &key);
2104
2105         _assertKey(key, raw_key, key_size, key_type, password);
2106         ckmc_key_free(key);
2107
2108         char *passwordNull = NULL;
2109         ckmc_key_s *key2;
2110         ckmc_key_new(raw_key, key_size, key_type, passwordNull, &key2);
2111         ckmc_key_free(key2);
2112 }
2113
2114 RUNNER_TEST(T3093_CAPI_TYPE_BUFFER)
2115 {
2116         std::string keyPem = "-----BEGIN PUBLIC KEY-----\n"
2117                 "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b1bXDa+S8/MGWnMkru4\n"
2118                 "T4tUddtZNi0NVjQn9RFH1NMa220GsRhRO56F77FlSVFKfSfVZKIiWg6C+DVCkcLf\n"
2119                 "zXJ/Z0pvwOQYBAqVMFjV6efQGN0JzJ1Unu7pPRiZl7RKGEI+cyzzrcDyrLLrQ2W7\n"
2120                 "0ZySkNEOv6Frx9JgC5NExuYY4lk2fQQa38JXiZkfyzif2em0px7mXbyf5LjccsKq\n"
2121                 "v1e+XLtMsL0ZefRcqsP++NzQAI8fKX7WBT+qK0HJDLiHrKOTWYzx6CwJ66LD/vvf\n"
2122                 "j55xtsKDLVDbsotvf8/m6VLMab+vqKk11TP4tq6yo0mwyTADvgl1zowQEO9I1W6o\n"
2123                 "zQIDAQAB\n"
2124                 "-----END PUBLIC KEY-----";
2125
2126         unsigned char *data = const_cast<unsigned char *>(reinterpret_cast<const unsigned char *>(keyPem.c_str()));
2127         unsigned int size = keyPem.size();
2128
2129         ckmc_raw_buffer_s *buff;
2130         ckmc_buffer_new(data, size, &buff);
2131
2132         RUNNER_ASSERT_MSG(buff->size == size, "Size Error" );
2133
2134         if(buff->data != NULL && data != NULL) {
2135                 for(unsigned int i=0; i<size; i++) {
2136                         RUNNER_ASSERT_MSG((buff->data)[i] == data[i],  "Raw data Error" );
2137                 }
2138         }else if(buff->data == NULL && data == NULL) {
2139                 RUNNER_ASSERT_MSG(true,  "Raw data Error" );
2140         }else {
2141                 RUNNER_ASSERT_MSG(false,  "Raw data Error" );
2142         }
2143
2144         ckmc_buffer_free(buff);
2145 }
2146
2147 RUNNER_TEST(T3094_CAPI_TYPE_CERT)
2148 {
2149         std::string certPem =
2150                 "-----BEGIN CERTIFICATE-----\n"
2151                 "MIIEgDCCA2igAwIBAgIIcjtBYJGQtOAwDQYJKoZIhvcNAQEFBQAwSTELMAkGA1UE\n"
2152                 "BhMCVVMxEzARBgNVBAoTCkdvb2dsZSBJbmMxJTAjBgNVBAMTHEdvb2dsZSBJbnRl\n"
2153                 "cm5ldCBBdXRob3JpdHkgRzIwHhcNMTQwNTIyMTEyOTQyWhcNMTQwODIwMDAwMDAw\n"
2154                 "WjBtMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwN\n"
2155                 "TW91bnRhaW4gVmlldzETMBEGA1UECgwKR29vZ2xlIEluYzEcMBoGA1UEAwwTYWNj\n"
2156                 "b3VudHMuZ29vZ2xlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB\n"
2157                 "ALtlLWVWPN3q3bSEQl1Z97gPdgl5vbgJOZSAr0ZY0tJCuFLBbUKetJWryyE+5KpG\n"
2158                 "gMMpLS4v8/bvXaZc6mAs+RfAqGM24C3vQg5hPnj4dflnhL0WiOCZBurm1tV4oexk\n"
2159                 "HLXs3jr/jpnb738AQpj8zZ9a4VEBuHJRZALnWZ/XhqU+dvYomAoRQNuL5OhkT7uu\n"
2160                 "d0NKJL9JjYLyQglGgE2sVsWv2kj7EO/P9Q6NEKt9BGmhMsFvtfeKUaymynaxpR1g\n"
2161                 "wEPlqYvB38goh1dIOgVLT0OVyLImeg5Mdwar/8c1U0OYhLOc6PJapOZAfUkE+3+w\n"
2162                 "xYt8AChLN1b5szOwInrCVpECAwEAAaOCAUYwggFCMB0GA1UdJQQWMBQGCCsGAQUF\n"
2163                 "BwMBBggrBgEFBQcDAjAeBgNVHREEFzAVghNhY2NvdW50cy5nb29nbGUuY29tMGgG\n"
2164                 "CCsGAQUFBwEBBFwwWjArBggrBgEFBQcwAoYfaHR0cDovL3BraS5nb29nbGUuY29t\n"
2165                 "L0dJQUcyLmNydDArBggrBgEFBQcwAYYfaHR0cDovL2NsaWVudHMxLmdvb2dsZS5j\n"
2166                 "b20vb2NzcDAdBgNVHQ4EFgQU0/UtToEtNIfwDwHuYGuVKcj0xK8wDAYDVR0TAQH/\n"
2167                 "BAIwADAfBgNVHSMEGDAWgBRK3QYWG7z2aLV29YG2u2IaulqBLzAXBgNVHSAEEDAO\n"
2168                 "MAwGCisGAQQB1nkCBQEwMAYDVR0fBCkwJzAloCOgIYYfaHR0cDovL3BraS5nb29n\n"
2169                 "bGUuY29tL0dJQUcyLmNybDANBgkqhkiG9w0BAQUFAAOCAQEAcGNI/X9f0g+7ij0o\n"
2170                 "ehLpk6vxSMQGrmOZ4+PG/MC9SLClCkt7zJkfU7erZnyVXyxCpwlljq+Wk9YTPUOq\n"
2171                 "xD/V2ikQVSAANoxGJFO9UoL5jzWusPhKKv8CcM7fuiERz8K+CfBcqfxbgI5rH0g5\n"
2172                 "dYclmLC81cJ/08i+9Nltvxv69Y3hGfEICT6K+EdSxwnQzOhpMZmvxZsIj+d6CVNa\n"
2173                 "9ICYgUthsNQVWzrIs5wknpjjZ9liDMwJX0vu8A0rce4X/Lna5hh2bW9igz2iP5WM\n"
2174                 "9fuwdbTw4y3jfPQgszU4YZxWxhMzccxe058Qx1tLndAknBQEBesQjXytVQpuM1SV\n"
2175                 "rHva8A==\n"
2176                 "-----END CERTIFICATE-----\n";
2177
2178         unsigned char *raw_cert = const_cast<unsigned char *>(reinterpret_cast<const unsigned char *>(certPem.c_str()));
2179         unsigned int size = certPem.size();
2180         ckmc_data_format_e form = CKMC_FORM_PEM;
2181
2182         ckmc_cert_s *ckmCert;
2183         ckmc_cert_new(raw_cert, size, form, &ckmCert);
2184
2185         RUNNER_ASSERT_MSG(ckmCert->cert_size == size, "Size Error" );
2186
2187         if(ckmCert->raw_cert != NULL && raw_cert != NULL) {
2188                 for(unsigned int i=0; i<size; i++) {
2189                         RUNNER_ASSERT_MSG((ckmCert->raw_cert)[i] == raw_cert[i],  "Raw data Error" );
2190                 }
2191         }else if(ckmCert->raw_cert == NULL && raw_cert == NULL) {
2192                 RUNNER_ASSERT_MSG(true,  "raw_cert Error" );
2193         }else {
2194                 RUNNER_ASSERT_MSG(false,  "raw_cert Error" );
2195         }
2196
2197         RUNNER_ASSERT_MSG(ckmCert->data_format == form, "ckmc_cert_form Error" );
2198
2199         ckmc_cert_free(ckmCert);
2200 }
2201
2202
2203 RUNNER_TEST(T3095_CAPI_TYPE_load_cert_file)
2204 {
2205         int ret;
2206
2207         std::string certStr =
2208                 "-----BEGIN CERTIFICATE-----\n"
2209                 "MIIF0TCCBLmgAwIBAgIQaPGTP4aS7Ut/WDNaBzdQrDANBgkqhkiG9w0BAQUFADCB\n"
2210                 "ujELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL\n"
2211                 "ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug\n"
2212                 "YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykwNjE0MDIGA1UEAxMr\n"
2213                 "VmVyaVNpZ24gQ2xhc3MgMyBFeHRlbmRlZCBWYWxpZGF0aW9uIFNTTCBDQTAeFw0x\n"
2214                 "NDAyMjAwMDAwMDBaFw0xNTAyMjAyMzU5NTlaMIHmMRMwEQYLKwYBBAGCNzwCAQMT\n"
2215                 "AlBMMR0wGwYDVQQPExRQcml2YXRlIE9yZ2FuaXphdGlvbjETMBEGA1UEBRMKMDAw\n"
2216                 "MDAyNTIzNzELMAkGA1UEBhMCUEwxDzANBgNVBBEUBjAwLTk1MDEUMBIGA1UECBML\n"
2217                 "bWF6b3dpZWNraWUxETAPBgNVBAcUCFdhcnN6YXdhMRYwFAYDVQQJFA1TZW5hdG9y\n"
2218                 "c2thIDE4MRMwEQYDVQQKFAptQmFuayBTLkEuMQwwCgYDVQQLFANESU4xGTAXBgNV\n"
2219                 "BAMUEHd3dy5tYmFuay5jb20ucGwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK\n"
2220                 "AoIBAQDph6x8V6xUW/+651+qHF+UmorH9uaz2ZrX2bIWiMKIJFmpDDHlxcapKkqE\n"
2221                 "BV04is83aiCpqKtc2ZHy2g4Hpj1eSF5BP2+OAlo0YUQZPIeRRdiMjmeAxw/ncBDx\n"
2222                 "9rQBuCJ4XTD6cqQox5SI0TASOZ+wyAEjbDRXzL73XqRAFZ1LOpb2ONkolS+RutMB\n"
2223                 "vshvCsWPeNe7eGLuOh6DyC6r1vX9xhw3xnjM2mTSvmtimgzSLacNGKqRrsucUgcb\n"
2224                 "0+O5C2jZAtAMLyZksL92cxmWbtVzUYzem4chjHu5cRxUlPNzUJWrrczueB7Ip4A8\n"
2225                 "aQuFMfNXYc0x+WLWjy//urypMKjhAgMBAAGjggGjMIIBnzAbBgNVHREEFDASghB3\n"
2226                 "d3cubWJhbmsuY29tLnBsMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud\n"
2227                 "JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBEBgNVHSAEPTA7MDkGC2CGSAGG+EUB\n"
2228                 "BxcGMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LnZlcmlzaWduLmNvbS9jcHMw\n"
2229                 "HQYDVR0OBBYEFN37iGaS7mZnENxZ9FGqNLR+QgoMMB8GA1UdIwQYMBaAFPyKULqe\n"
2230                 "uSVae1WFT5UAY4/pWGtDMEIGA1UdHwQ7MDkwN6A1oDOGMWh0dHA6Ly9FVlNlY3Vy\n"
2231                 "ZS1jcmwudmVyaXNpZ24uY29tL0VWU2VjdXJlMjAwNi5jcmwwfAYIKwYBBQUHAQEE\n"
2232                 "cDBuMC0GCCsGAQUFBzABhiFodHRwOi8vRVZTZWN1cmUtb2NzcC52ZXJpc2lnbi5j\n"
2233                 "b20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9FVlNlY3VyZS1haWEudmVyaXNpZ24uY29t\n"
2234                 "L0VWU2VjdXJlMjAwNi5jZXIwDQYJKoZIhvcNAQEFBQADggEBAD0wO+rooUrIM4qp\n"
2235                 "PHhp+hkXK6WMQ2qzGOmbMcZjw0govg5vkzkefPDryIXXbrF8mRagiJNMSfNaWWeh\n"
2236                 "Cj41OV24EdUl0OLbFxNzcvub599zRs/apfaRLTfsmlmOgi0/YP305i+3tJ2ll946\n"
2237                 "P+qV1wXnXqTqEdIl4Ys3+1HmDCdTB1hoDwAAzqRVUXZ5+iiwPAU7R/LTHfMjV1ke\n"
2238                 "8jtNFfrorlZMCfVH/7eEnHJvVjOJt+YFe4aFMzE+DfuYIK7MH+olC2v79kBwbnEQ\n"
2239                 "fvHMA9gFwOYLUBBdSfcocp8EKZ+mRlNPGR/3LBrPeaQQ0GZEkxzRK+v/aNTuiYfr\n"
2240                 "oFXtrg0=\n"
2241                 "-----END CERTIFICATE-----\n";
2242
2243         const char *file_name = "/tmp/ckmc_test_cert.pem";
2244         remove(file_name);
2245
2246         FILE* cert_file;
2247         cert_file = fopen(file_name, "w");
2248         fprintf(cert_file, "%s",certStr.c_str());
2249         fclose(cert_file);
2250
2251         ckmc_cert_s *pcert;
2252
2253         RUNNER_ASSERT_MSG(
2254                         CKMC_ERROR_NONE == (ret = ckmc_load_cert_from_file(file_name, &pcert)),
2255                         "Error=" << CKM::ErrorToString(ret));
2256
2257         RUNNER_ASSERT_MSG(
2258                         pcert != NULL && pcert->cert_size > 0,"Fail to load cert from file.");
2259
2260         const char *lcert_alias = "lcert_alias";
2261         ckmc_policy_s policy;
2262         policy.password = NULL;
2263         policy.extractable = 1;
2264
2265         RUNNER_ASSERT_MSG(
2266                         CKMC_ERROR_NONE == (ret = ckmc_save_cert(lcert_alias, *pcert, policy)),
2267                         "Error=" << CKM::ErrorToString(ret));
2268
2269         remove(file_name);
2270 }
2271
2272 RUNNER_TEST(T3096_CAPI_TYPE_load_p12_file) {
2273         std::string p12Base64 =
2274                 "MIINaQIBAzCCDS8GCSqGSIb3DQEHAaCCDSAEgg0cMIINGDCCChcGCSqGSIb3DQEH\n"
2275                 "BqCCCggwggoEAgEAMIIJ/QYJKoZIhvcNAQcBMBwGCiqGSIb3DQEMAQYwDgQIvO01\n"
2276                 "D2ODdkYCAggAgIIJ0NscvWq3hmXai5DQcleOgELPbu2c97d+KJnRGCK7K3eRb0/v\n"
2277                 "4F3f3LFSFFT9OAK0/OS1ZYCiO+IuZ6Rpc8Baqe89xVcOHrQ0dQ7sIvbq10dnp5nY\n"
2278                 "fEcrt7qPXcRa3IdOX4PFo4aCOFq5bHv5M3quHldKRh4itosjsAGuF/xtnVnO6lU5\n"
2279                 "UlPhtAdr2Mpr4SHh+oBbJknLvyd6n/4xZ2elEA8ui4Qt5GfiHwWs2J7KO3Z8M1vW\n"
2280                 "yukuyVTaZ6RNkj8dkq/RttvVinlgATYLoosjCsH7VVcd+/z9JqD37QQ89pzdjvJg\n"
2281                 "CtXFVbqsOIbjPMkQMYtMdaPsLDDzw6l+q7BJreGIoJmTHbhTtNOJo03XPEnlVXUq\n"
2282                 "Q+224ibNKzLAvpSWOo8BUHK7ZDc1oaLODDZ+WAA6jfgHkuhhWYr9dxce6UdhMghJ\n"
2283                 "M7ixWwa350psdACREdGxNQzxmucmueprbDumVPAnnJfnKfgRXdKpTDFWS4TaYRc/\n"
2284                 "TE4lKSBZpFFduy/gdpLGCHdklTs33aWZ/mEVZJnk2PggKyvSKH9oL3DxkZIFkGdQ\n"
2285                 "wcy8gAuLBirdWB/q4JWqW7sH8kMfEwXACEm1z4SzCik8afamQNJEbovA3Pvrhw/P\n"
2286                 "1HE5KPNvKMaIr9kk5rTnGGTSNrSMqUCnBl4MjVS4HacrZvvt60y0D3RFB8IqlFMt\n"
2287                 "od2FagxojPyO/wP8jDERnySo2Irz0x0WUjWARtcLLH2FOK7ROkX1/WjRZmDV0jtv\n"
2288                 "yL8r97XZf/NddVU13Jt13dBJCjxZRvfJZgNI8RybkPQ3Y9J5LIOLVFPU3ZKIi7W7\n"
2289                 "KtCw/FCUfEdNarLQMWG0Z9bux7vu/eK1+KpF9pfzD3Q1V0sj2M158Q5W2gy9q/u0\n"
2290                 "gOOuybiZB2AL9kxBv0rqb8h7SF5ZIRoy85PrwtnX7w4Xq+4I7RA68bcEGyqgTWWb\n"
2291                 "XZxcY65F2slqekXddKeDSTizQk/APgWva/TwgaUeXR9YBCO4o71pla//FNqJ6pRm\n"
2292                 "tZjEY9ALBCc083gsImc7+LAeubEcYzjhhgRPQwGJfJTMqgC/NOa9wFhvNO4QcFjf\n"
2293                 "XQxxIFxlQJ64qU316FyeuyxLYGd02uakrLLgYtAGG7nPZCYNkUKvCwICKJYI+wAg\n"
2294                 "CX0FVwXsR1f33kVuV6sd4YConz80Lk9ayvNJVeCzEOBvhthbMcP3mIn22X+GT3jU\n"
2295                 "O5Z0bkXAU0C8XTfLQMk2m6Ag3mctrn4iJBPwQ7j12GnlSLko+e7IssRd4Qj4vBZd\n"
2296                 "KXUIoRcOsXqWoQgXJAtdLJEHVo0SUyxVojXsXqUZ3yYOkVUykvXZUcBnS6xwtaUt\n"
2297                 "EzdFsEO3NQSLOju5Tpp12lKbrgIToV75zyA3CULEdimEUWD/wA+pDaIS39shNyeE\n"
2298                 "edtAp3WF3mDkHQFyKG52IVx7hJU8jXXunvY21tshTAx/Gda0X1CtgSU7Q00ROr+L\n"
2299                 "TaehRiKsSgxQa6/jyJY5KY1hIDzwaem5Y7gDnxotmQuPhIX8MeD5Qdv6AVovfScN\n"
2300                 "07QuWyUBgFsZzbp79AsnPRLzoiAMQljMn7TXDDLq+uF922OU47BQkzlPfKAuHbyu\n"
2301                 "R+uZwtDfMD71FqWjCAHMPyENinsnUehCwX2pVxa6KSs61IsTfb3oUPY1TRxfZnfd\n"
2302                 "8SAUfPjKVss9Eyahuv+kzenPUDZn5LV9E0G0DGNxIf493A5Z29scNkQcCBjTJJvx\n"
2303                 "4BBJCES6SgkTQl7eFoBGOIqqytpYP9QZW5jy7ramgz/gF2kMKjAfikhbd5vB4Fwd\n"
2304                 "QlExMlbW+wL/ffr4AGlwenlDzXBFKQM0mYZNKLuB9LrRzw35fVFZ9XY06VCxhbMa\n"
2305                 "wI9gN4rKA3bNG3DCWTsr1TZ6CvrqFJjlfK4KF/+eNfnkIY8uVYxnPlRRkmPw4dpE\n"
2306                 "KdaXUiu5WJvZupeYqqNsWdxs+v2KS1E/PcM9BgUFKFD4lW84WbWUHPxvxXoZhSCs\n"
2307                 "nQ0hsPd53NKBBdEOao5HAAf+T5yFnJzZ3rVkYBEC67gHyWgXB1Zy283yAIihvUXw\n"
2308                 "DOEVppNHnIqAjQpncQcDpV0/zYCvqOEfU+JPpmepgo737Tq2MlUKLTByhg1mQhKm\n"
2309                 "2pI63BFiw2/2igImFbmhzJjilWkaM4kwM1uGKOKgjacXI/VSVEajuYAfo37quBxF\n"
2310                 "ZWyWJoFXBvQ7jolTKXUVbCqnSSaItosZrS3vcDdGUegRm0rf6IzCRPdSIsfCDdZG\n"
2311                 "9UeChoznNezoLENgmqQJTV3wDo3uSZbztlctoERvZpn457MLZEn8hXEwMLPXx2Ur\n"
2312                 "HQ5fYAdTBzBpoLiy8ujzFxFJDzW9ytnb7aFF7YVivfj42eVGnCANvVcwkp2/E3MW\n"
2313                 "Img0OyqKRQHaGGI7iGNO5KYpTk0CdSyErQarH52ZRvr0t2CK6J6vDgrhJnzd5Ayr\n"
2314                 "6t+coAZBw8eIJqiM5WzAm4mlZRSHL+JcaKkrqoYOo+kewj7wgW2Kk/7S8re38RvP\n"
2315                 "+V9nqpfr18gIV72G2yZ60C21eRqOFPgl1CYbmWHqYKXatuT4o+kgBmJpez5uvIHz\n"
2316                 "LSd88An02ow+WQ+KP8YGV38ZtuA6D4FPA3fsMdhNOqjtwWiPei+ILaXD5PsOfDGH\n"
2317                 "2fZgOWXivFYqq9Cm3B3ffFX/oD/7sFMs+/AWeZOh8XqU8ro73L1HNRXx4HdyRUY/\n"
2318                 "pInwA0mWaFNGgBRPbNW0A6cZ2dY0Hn8sRRsF+5tIs0hOelpT1y/ZEVyGImTQgEbK\n"
2319                 "KeggQGT9h9rhrrUK+hE27MorcRi6tVteKlNyGQsCJko0ZoqqctM4o7wT5ce4nWtb\n"
2320                 "ixzp5xDkDmcP6eldHiVm8TsZn0hkmNDu0xpgIVtb4VDRmWP687EOaGHYhjOBw6X1\n"
2321                 "GD1d1yyg/VxlUr0lKmbsFVC2mDiWbnWd49+FGsrySc2RO8DlC9xkXLaG+ubjmLpK\n"
2322                 "lwagiI2P1MzkHuZiz7WlIjFefuYh0yrYvDA5UDiQTDdoZWFuR5r93QWdsUcHlvdF\n"
2323                 "rYmhQ93F6I4gaT9HSVEDJfisIjIUmIwhh20tdGnf3FC5VyqBYS5GQObq3VnC8stU\n"
2324                 "b7byCEMlKr5bWslEem6gRGTB9xektKgrsFgS7nb3Geegq9K+mWIBC/iBOInVqFYx\n"
2325                 "Uw8+s6ywApXPLPEIrVZumkwo7Rl8lJfCTDNni/68XHhhVHY70N0PSdfnCAvV9G41\n"
2326                 "3wuTZHqLOeQG3Sm8I1JJXkWSuuk0QI7DVKZpmz+x4aFBd+rncfvWOEbN9G0ZqbUT\n"
2327                 "lGkfxtUWY6pWX/XJpyBzOlv2+fCPi/Yd0csb45IEuFHNG1svgqGMJw5BmFu5v0Qs\n"
2328                 "0i1zKBrNA/Acd6+uL0UqDZStB6lyPn6+uifh3sMwggL5BgkqhkiG9w0BBwGgggLq\n"
2329                 "BIIC5jCCAuIwggLeBgsqhkiG9w0BDAoBAqCCAqYwggKiMBwGCiqGSIb3DQEMAQMw\n"
2330                 "DgQIBJuBj07uHGACAggABIICgJBfOlC99JJjEUBibYLXIJPe53Cy7eDXCtVaPbhX\n"
2331                 "VHPCsBrUd7+6Ul7Vh/JHMlJL1VA3WvGnX93f0p5FICgZZA3sIZjpxBoeVkZ0Zx6r\n"
2332                 "ZMnBPIN4GaHYufCGPyAlPXgEGjlBr3g6Sxr8j50vsWtfspwiILsyte+nQ3kE1nV4\n"
2333                 "TjNBnayXmCMnEkf4kKu+dlLFbd1OY/fQJbiT+f9YtMfcfp2IR+7bXb23UIv8Wt1I\n"
2334                 "XyqsYTcUjIvnByKSDrvVu941x1EN5DF1964qQbAZb/z5ueTl8tCpaCFlGbZcXz7X\n"
2335                 "7L3k0YWdymx1J+szd6heQJrzqMjcHK3XWC7YlDytWB59j0eNMx42XEFP0pAO+gt9\n"
2336                 "Iny2XL+sxJC/xzf6apYMmmGwEXrZkkudsSVMgLCtYyin4zM7PFzLAPK9ryEhsxaP\n"
2337                 "g077MJ/aIaZ7PLi7cABz/g+gQ1dSXakNOof6EjRUADHpav9UKeKwWdR8ycB/8AQV\n"
2338                 "XxQTpEsFJ7izdNZDNC/ZeOhc/ohnei169rfH0shVeeckjf++c8zlh/Y5UWIi3V6i\n"
2339                 "5c7RlIJLMtHrvpB5UxRpZgWSdXvCuTCBEzlZAeWJ11I4DAeioqJ1V3h2KcUjNKf1\n"
2340                 "z8mTJrzAycuhm8npaC0Gj6JU7jiYPZLvj+cK/e/gjadWggHFYsjAKhACDbAtG64N\n"
2341                 "Gu9PWJszvhSO8ga7TOVEzdbe2jm4oWtqPe3gb6eYl2Ma6GTfj/PUEDpNAOnr99qV\n"
2342                 "g3uKIXMBp2115bfUf5sbfPdMbnH12XILXR9Va+JjeQHexa64QWlsiRgtXEAXxoEb\n"
2343                 "D2aTlfdsJpgilyj31Y45xOdN7FI+Ltfhudxt1kABPdmKwRMxJTAjBgkqhkiG9w0B\n"
2344                 "CRUxFgQUMvxYuPi3XpEeXbzAkXaNbAw7P5gwMTAhMAkGBSsOAwIaBQAEFOBC4ppE\n"
2345                 "AXO+xdzSBKimvjBBTLbEBAjlaWiC5IVtmAICCAA=\n";
2346
2347         // write file
2348         const char *p12base64file = "/tmp/ckmc_test_p12.p12.b64";
2349         const char *p12file = "/tmp/ckmc_test_p12.p12";
2350         const char *password = "password";
2351
2352         remove(p12base64file);
2353         remove(p12file);
2354
2355         FILE* b64_file;
2356         b64_file = fopen(p12base64file, "w");
2357         fprintf(b64_file, "%s",p12Base64.c_str());
2358         fclose(b64_file);
2359
2360         std::string cmd("openssl base64 -d -in ");
2361         cmd.append(p12base64file);
2362         cmd.append(" -out ");
2363         cmd.append(p12file);
2364         system(cmd.c_str());
2365
2366         int temp;
2367
2368         ckmc_key_s *private_key = NULL;
2369         ckmc_cert_s *cert = NULL;
2370         ckmc_cert_list_s *ca_cert_list = NULL;
2371
2372         RUNNER_ASSERT_MSG(
2373                         CKMC_ERROR_NONE == (temp = ckmc_load_from_pkcs12_file(p12file, password,
2374                                         &private_key, &cert, &ca_cert_list)),
2375                         "Error=" << temp);
2376         RUNNER_ASSERT_MSG(private_key != NULL, "Null private_key");
2377         RUNNER_ASSERT_MSG(cert != NULL, "Null cert");
2378         RUNNER_ASSERT_MSG(ca_cert_list != NULL, "Null ca_cert_list");
2379
2380         ckmc_policy_s policy;
2381         policy.password = NULL;
2382         policy.extractable = 1;
2383
2384
2385         const char *pkey_alias = "pkey_alias";
2386         RUNNER_ASSERT_MSG(
2387                         CKMC_ERROR_NONE == (temp = ckmc_save_key(pkey_alias, *private_key, policy)),
2388                         "Error=" << temp);
2389
2390         const char *cert_alias = "cert_alias";
2391         RUNNER_ASSERT_MSG(
2392                         CKMC_ERROR_NONE == (temp = ckmc_save_cert(cert_alias, *cert, policy)),
2393                         "Error=" << temp);
2394         std::string caCertAlias = "ca_cert_alias_";
2395         const char *idx = "0";
2396         int cnt = 0;
2397         ckmc_cert_list_s *tmpList = ca_cert_list;
2398         while(tmpList != NULL) {
2399                 caCertAlias.append(idx);
2400                 RUNNER_ASSERT_MSG(
2401                                 CKMC_ERROR_NONE == (temp = ckmc_save_cert(caCertAlias.c_str(), *(tmpList->cert), policy)),
2402                                 "Error=" << temp);
2403                 tmpList = tmpList->next;
2404                 cnt ++;
2405         }
2406
2407         RUNNER_ASSERT_MSG(cnt ==  2,"Invalid CA Cert Count");
2408
2409         ckmc_key_free(private_key);
2410         ckmc_cert_free(cert);
2411         ckmc_cert_list_all_free(ca_cert_list);
2412
2413         remove(p12base64file);
2414         remove(p12file);
2415 }
2416
2417
2418 RUNNER_TEST(T3098_CAPI_TYPE_deinit)
2419 {
2420         int temp;
2421         RUNNER_ASSERT_MSG(
2422                         CKMC_ERROR_NONE == (temp = ckmc_lock_user_key(0)),
2423                         "Error=" << temp);
2424         RUNNER_ASSERT_MSG(
2425                         CKMC_ERROR_NONE == (temp = ckmc_lock_user_key(USER_APP)),
2426                         "Error=" << temp);
2427         RUNNER_ASSERT_MSG(
2428                         CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(0)),
2429                         "Error=" << temp);
2430         RUNNER_ASSERT_MSG(
2431                         CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(USER_APP)),
2432                         "Error=" << temp);
2433 }
2434
2435
2436 RUNNER_TEST_GROUP_INIT(T3000_CAPI_LOCKTYPE_TESTS);
2437
2438 RUNNER_TEST(T3100_CAPI_locktype_init)
2439 {
2440         int temp;
2441         RUNNER_ASSERT_MSG_BT(
2442                         CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(USER_APP)),
2443                         "Error=" << temp);
2444         RUNNER_ASSERT_MSG_BT(
2445                         CKMC_ERROR_NONE == (temp = ckmc_unlock_user_key(USER_APP, USER_PASS)),
2446                         "Error=" << temp);
2447 }
2448
2449 RUNNER_CHILD_TEST(T3101_CAPI_init_lock_key)
2450 {
2451         int tmp;
2452         AccessProvider ap("my-label");
2453         ap.allowAPI("key-manager::api-control", "rw");
2454         ap.applyAndSwithToUser(USER_APP, GROUP_APP);
2455
2456         char *null_password = NULL;
2457         RUNNER_ASSERT_MSG(
2458                 CKMC_ERROR_NONE == (tmp = ckmc_change_user_password(USER_APP,USER_PASS,null_password)),
2459                 CKM::ErrorToString(tmp));
2460         RUNNER_ASSERT_MSG(
2461                 CKMC_ERROR_NONE == (tmp = ckmc_lock_user_key(USER_APP)),
2462                 CKM::ErrorToString(tmp));
2463 }
2464
2465 RUNNER_CHILD_TEST(T3102_CAPI_unlock_default_passwd)
2466 {
2467         AccessProvider ap("my-label");
2468         ap.allowAPI("key-manager::api-storage", "rw");
2469         ap.applyAndSwithToUser(USER_APP, GROUP_APP);
2470
2471         int temp;
2472
2473         ckmc_key_s test_key, *test_key2;
2474         ckmc_policy_s test_policy;
2475
2476         char* password = NULL;
2477         char alias[20] = "mykey_defpasswd";
2478
2479         std::string keyPem = "-----BEGIN PUBLIC KEY-----\n"
2480                 "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b1bXDa+S8/MGWnMkru4\n"
2481                 "T4tUddtZNi0NVjQn9RFH1NMa220GsRhRO56F77FlSVFKfSfVZKIiWg6C+DVCkcLf\n"
2482                 "zXJ/Z0pvwOQYBAqVMFjV6efQGN0JzJ1Unu7pPRiZl7RKGEI+cyzzrcDyrLLrQ2W7\n"
2483                 "0ZySkNEOv6Frx9JgC5NExuYY4lk2fQQa38JXiZkfyzif2em0px7mXbyf5LjccsKq\n"
2484                 "v1e+XLtMsL0ZefRcqsP++NzQAI8fKX7WBT+qK0HJDLiHrKOTWYzx6CwJ66LD/vvf\n"
2485                 "j55xtsKDLVDbsotvf8/m6VLMab+vqKk11TP4tq6yo0mwyTADvgl1zowQEO9I1W6o\n"
2486                 "zQIDAQAB\n"
2487                 "-----END PUBLIC KEY-----";
2488
2489         char* char_keypem = new char[keyPem.length() + 1];
2490
2491         std::strcpy(char_keypem, keyPem.c_str());
2492         test_key.raw_key =  (unsigned char *)char_keypem;
2493         test_key.key_size = keyPem.length();
2494         test_key.key_type = CKMC_KEY_RSA_PUBLIC;
2495         test_key.password = password;
2496
2497         test_policy.password = password;
2498         test_policy.extractable = 1;
2499
2500         test_key2 = &test_key;
2501
2502         RUNNER_ASSERT_MSG(
2503                         CKMC_ERROR_NONE == (temp = ckmc_save_key(alias, test_key, test_policy)),
2504                         "Error=" << temp);
2505
2506         RUNNER_ASSERT_MSG(
2507                         CKMC_ERROR_NONE == (temp = ckmc_get_key(alias, password, &test_key2)),
2508                         "Error=" << temp);
2509         RUNNER_ASSERT_MSG(
2510                         CKMC_ERROR_NONE == (temp = ckmc_remove_key(alias)),
2511                         "Error=" << temp);
2512 }
2513
2514 RUNNER_CHILD_TEST(T3103_CAPI_init_change_user_password)
2515 {
2516         int tmp;
2517         AccessProvider ap("my-label");
2518         ap.allowAPI("key-manager::api-control", "rw");
2519         ap.applyAndSwithToUser(USER_APP, GROUP_APP);
2520
2521         char *null_password = NULL;
2522
2523         // database has been automatically unlocked with NULL pw in previous test. Lock it now
2524         RUNNER_ASSERT_MSG(
2525                 CKMC_ERROR_NONE == (tmp = ckmc_lock_user_key(USER_APP)),
2526                 CKM::ErrorToString(tmp));
2527         RUNNER_ASSERT_MSG(
2528                 CKMC_ERROR_NONE == (tmp = ckmc_change_user_password(USER_APP,null_password,USER_PASS)),
2529                 CKM::ErrorToString(tmp));
2530         // get rid of NULL DKEK
2531         RUNNER_ASSERT_MSG(
2532                 CKMC_ERROR_NONE == (tmp = ckmc_unlock_user_key(USER_APP,USER_PASS)),
2533                 CKM::ErrorToString(tmp));
2534         RUNNER_ASSERT_MSG(
2535                 CKMC_ERROR_NONE == (tmp = ckmc_lock_user_key(USER_APP)),
2536                 CKM::ErrorToString(tmp));
2537 }
2538
2539 RUNNER_CHILD_TEST(T3104_CAPI_unlock_default_passwd_negative)
2540 {
2541         AccessProvider ap("my-label");
2542         ap.allowAPI("key-manager::api-storage", "rw");
2543         ap.applyAndSwithToUser(USER_APP, GROUP_APP);
2544
2545         int temp;
2546
2547         ckmc_key_s test_key, *test_key2;
2548         ckmc_policy_s test_policy;
2549
2550         char* password = NULL;
2551         char alias[20] = "mykey_defpasswd";
2552
2553         std::string keyPem = "-----BEGIN PUBLIC KEY-----\n"
2554                 "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b1bXDa+S8/MGWnMkru4\n"
2555                 "T4tUddtZNi0NVjQn9RFH1NMa220GsRhRO56F77FlSVFKfSfVZKIiWg6C+DVCkcLf\n"
2556                 "zXJ/Z0pvwOQYBAqVMFjV6efQGN0JzJ1Unu7pPRiZl7RKGEI+cyzzrcDyrLLrQ2W7\n"
2557                 "0ZySkNEOv6Frx9JgC5NExuYY4lk2fQQa38JXiZkfyzif2em0px7mXbyf5LjccsKq\n"
2558                 "v1e+XLtMsL0ZefRcqsP++NzQAI8fKX7WBT+qK0HJDLiHrKOTWYzx6CwJ66LD/vvf\n"
2559                 "j55xtsKDLVDbsotvf8/m6VLMab+vqKk11TP4tq6yo0mwyTADvgl1zowQEO9I1W6o\n"
2560                 "zQIDAQAB\n"
2561                 "-----END PUBLIC KEY-----";
2562
2563         char* char_keypem = new char[keyPem.length() + 1];
2564
2565         std::strcpy(char_keypem, keyPem.c_str());
2566         test_key.raw_key =  (unsigned char *)char_keypem;
2567         test_key.key_size = keyPem.length();
2568         test_key.key_type = CKMC_KEY_RSA_PUBLIC;
2569         test_key.password = password;
2570
2571         test_policy.password = password;
2572         test_policy.extractable = 1;
2573
2574         test_key2 = &test_key;
2575
2576         RUNNER_ASSERT_MSG(
2577                         CKMC_ERROR_DB_LOCKED == (temp = ckmc_save_key(alias, test_key, test_policy)),
2578                         "Error=" << temp);
2579
2580         RUNNER_ASSERT_MSG(
2581                         CKMC_ERROR_DB_LOCKED == (temp = ckmc_get_key(alias, password, &test_key2)),
2582                         "Error=" << temp);
2583 }
2584
2585 RUNNER_CHILD_TEST(T3109_CAPI_deinit)
2586 {
2587         int temp;
2588         RUNNER_ASSERT_MSG_BT(
2589                         CKMC_ERROR_NONE == (temp = ckmc_lock_user_key(USER_APP)),
2590                         "Error=" << temp);
2591         RUNNER_ASSERT_MSG_BT(
2592                         CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(USER_APP)),
2593                         "Error=" << temp);
2594 }
2595
2596 RUNNER_TEST_GROUP_INIT(T320_CAPI_EMPTY_DATABASE);
2597
2598 RUNNER_TEST(T3201_CAPI_unlock_database)
2599 {
2600         int temp;
2601         RUNNER_ASSERT_MSG( CKMC_ERROR_NONE == (temp = ckmc_lock_user_key(0)),
2602                 "Error=" << temp);
2603         RUNNER_ASSERT_MSG( CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(0)),
2604                 "Error=" << temp);
2605         RUNNER_ASSERT_MSG( CKMC_ERROR_NONE == (temp = ckmc_unlock_user_key(0, "simple-password")),
2606                 "Error=" << temp);
2607 }
2608
2609 RUNNER_CHILD_TEST(T3202_CAPI_get_data_from_empty_database)
2610 {
2611         int temp;
2612         char alias[10] = "mykey";
2613         char *password = NULL;
2614         ckmc_key_s *test_key = NULL;
2615
2616         RUNNER_ASSERT_MSG(
2617                 CKMC_ERROR_DB_ALIAS_UNKNOWN == (temp = ckmc_get_key(alias, password, &test_key)),
2618                 "Error=" << temp);
2619
2620         RUNNER_ASSERT_MSG(NULL == test_key, "Key value should not be changed");
2621 }
2622
2623 RUNNER_CHILD_TEST(T3203_CAPI_lock_database)
2624 {
2625         int temp;
2626         RUNNER_ASSERT_MSG( CKMC_ERROR_NONE == (temp = ckmc_lock_user_key(0)),
2627                 "Error=" << temp);
2628 }
2629
2630 RUNNER_CHILD_TEST(T3204_CAPI_get_data_from_locked_database)
2631 {
2632         int temp;
2633         char alias[10] = "mykey";
2634         char *password = NULL;
2635         ckmc_key_s *test_key = NULL;
2636
2637         RUNNER_ASSERT_MSG(
2638                 CKMC_ERROR_DB_LOCKED == (temp = ckmc_get_key(alias, password, &test_key)),
2639                 "Error=" << temp);
2640
2641         RUNNER_ASSERT_MSG(NULL == test_key, "Key value should not be changed");
2642 }
2643
2644 RUNNER_TEST(T3204_deinit)
2645 {
2646         int temp;
2647         RUNNER_ASSERT_MSG( CKMC_ERROR_NONE == (temp = ckmc_remove_user_data(0)),
2648                 "Error=" << temp);
2649 }
2650