Switch to sqlcipher library

[platform/core/security/key-manager.git] / tests / encryption-scheme / scheme-test.cpp

diff --git a/tests/encryption-scheme/scheme-test.cpp b/tests/encryption-scheme/scheme-test.cpp
index 73cca05..bfaaef9 100644 (file)
--- a/tests/encryption-scheme/scheme-test.cpp
+++ b/tests/encryption-scheme/scheme-test.cpp
@@ -1,5 +1,5 @@
 /*
- *  Copyright (c) 2015 Samsung Electronics Co., Ltd All Rights Reserved
+ *  Copyright (c) 2015-2020 Samsung Electronics Co., Ltd. All rights reserved
  *
  *  Licensed under the Apache License, Version 2.0 (the "License");
  *  you may not use this file except in compliance with the License.
@@ -60,6 +60,7 @@ RawBuffer TEST_DATA(TEST_DATA_STR.begin(), TEST_DATA_STR.end());
 const Password TEST_PASS = "custom user password";
 const size_t IV_LEN = 16;
 const size_t CHAIN_LEN = 3;
+const mode_t MODE_0644 = S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH;
 
 enum {
        NO_PASS = 0,
@@ -348,7 +349,7 @@ void restoreFile(const string &filename)
 
        FdPtr sourceFdPtr(&sourceFd);
 
-       int targetFd = TEMP_FAILURE_RETRY(creat(targetPath.c_str(), 0644));
+       int targetFd = TEMP_FAILURE_RETRY(creat(targetPath.c_str(), MODE_0644));
        err = errno;
        BOOST_REQUIRE_MESSAGE(targetFd > 0,
                                                  "Creating " << targetPath << " failed: " << GetErrnoString(err));
@@ -575,6 +576,70 @@ void SchemeTest::FillDb()
        }
 }
 
+void SchemeTest::CheckAliasInfo()
+{
+       SwitchToUser();
+       for (const auto &g : GROUPS) {
+               for (const auto &i : g.items) {
+                       int ret;
+                       bool encStatus = false;
+                       Password pass = i.policy.password;
+
+                       if (pass.empty())
+                               pass = TEST_PASS;
+                       else
+                               pass = Password();
+
+                       switch (i.type) {
+                       case DataType::BINARY_DATA: {
+                               ret = m_mgr->getDataEncryptionStatus(i.alias, encStatus);
+                               BOOST_REQUIRE_MESSAGE(ret == CKM_API_SUCCESS,
+                                                                         "can not get data encryption status, ret: " +
+                                                                         std::to_string(ret));
+                               break;
+                       }
+
+                       case DataType::KEY_AES:
+                       case DataType::KEY_RSA_PRIVATE:
+                       case DataType::KEY_RSA_PUBLIC: {
+                               ret = m_mgr->getKeyEncryptionStatus(i.alias, encStatus);
+                               BOOST_REQUIRE_MESSAGE(ret == CKM_API_SUCCESS,
+                                                                         "can not get key encryption status, ret: " +
+                                                                         std::to_string(ret));
+                               break;
+                       }
+
+                       case DataType::CERTIFICATE: {
+                               ret = m_mgr->getCertificateEncryptionStatus(i.alias, encStatus);
+                               BOOST_REQUIRE_MESSAGE(ret == CKM_API_SUCCESS,
+                                                                         "can not get certificate encryption status, ret: " +
+                                                                         std::to_string(ret));
+                               break;
+                       }
+
+                       case DataType::CHAIN_CERT_0: {
+                               ret = m_mgr->getCertificateEncryptionStatus(i.alias, encStatus);
+                               BOOST_REQUIRE_MESSAGE(ret == CKM_API_SUCCESS,
+                                                                         "can not get certificate encryption status, ret: " +
+                                                                         std::to_string(ret));
+                               ret = m_mgr->getKeyEncryptionStatus(i.alias, encStatus);
+                               BOOST_REQUIRE_MESSAGE(ret == CKM_API_SUCCESS,
+                                                                         "can not get key encryption status, ret: " +
+                                                                         std::to_string(ret));
+                               break;
+                       }
+
+                       default:
+                               BOOST_FAIL("Unsupported data type " << i.type);
+                       }
+               BOOST_REQUIRE_MESSAGE(encStatus == !i.policy.password.empty(), "item: " <<
+                                                         i.alias << " has wrong encryption status: " << encStatus);
+
+               }
+       }
+}
+
+
 void SchemeTest::ReadAll(bool useWrongPass)
 {
        SwitchToUser();
@@ -753,10 +818,10 @@ size_t SchemeTest::CountObjects()
 
 void SchemeTest::RestoreDb()
 {
+       m_db.reset();
        restoreFile("key-7654");
        restoreFile("db-key-7654");
        restoreFile("db-7654");
-       m_db.reset();
        m_directAccessEnabled = false;
 }
 
@@ -798,8 +863,15 @@ void SchemeTest::EnableDirectDbAccess()
        auto wrappedDatabaseDEK = fs.getDBDEK();
        RawBuffer key = keyProvider.getPureDEK(wrappedDatabaseDEK);
 
-       m_db.reset(new DB::Crypto(fs.getDBPath(), key));
+       m_db.reset(new DB::Crypto(fs.getLegacyDBPath(), fs.getDBPath(), key));
        m_directAccessEnabled = true;
+
+       // Legacy db files of the form db-$uid are incompatible with upstream sqlcipher.
+       // DB::Crypto(...) converts them to db0-$uid upstream-compatible, then deletes them.
+       // This function runs DB::Crypto(...) as root so db0-$uid are root-owned.
+       // However, database files need to be accessible to USER_NAME/GROUP_NAME (ex. ReadAll()).
+       // Thus the need to fix up ownership, much like restoreFile() does.
+       BOOST_REQUIRE(!chown(RW_DATA_DIR "/db0-7654", getUid(USER_NAME), getGid(GROUP_NAME)));
 }
 
 void SchemeTest::SignVerifyItem(const Item &itemPrv, const Item &itemPub)