[IOT-1785] Finish role certs feature
authorGreg Zaverucha <gregz@microsoft.com>
Tue, 28 Mar 2017 23:23:39 +0000 (16:23 -0700)
committerNathan Heldt-Sheller <nathan.heldt-sheller@intel.com>
Fri, 31 Mar 2017 18:09:40 +0000 (18:09 +0000)
commit4541e501149bab938d111bdb5d5603b4a877ec64
tree72f2487a498a6eff0c85089cc458d6fca6d04a56
parent9ca54cbacda60fb9a40bcdc54a48841158a4e16a
[IOT-1785] Finish role certs feature

Add end-to-end testing of role certificate scenario:
- provision role certs
- test role-based ACLs provisioning and enforcement
- test assertion of role certificates

Fix bugs and add new functions as necessary. Added the ROLE_CERT
usage to distinguish role certs (which can't be used for TLS)
from identity certs. Previously they were both saved as PRIMARY_CERT.
Some small changes to save and retrieve role certificates locally. Add
functionality to assert roles (POST the certs to /oic/sec/roles).

Change-Id: I9080e0ca6b0809608621eb8b23dd4bbbfbbb176c
Signed-off-by: Greg Zaverucha <gregz@microsoft.com>
Reviewed-on: https://gerrit.iotivity.org/gerrit/18219
Reviewed-by: Alex Kelley <alexke@microsoft.com>
Reviewed-by: Dave Thaler <dthaler@microsoft.com>
Reviewed-by: Kevin Kane <kkane@microsoft.com>
Tested-by: jenkins-iotivity <jenkins@iotivity.org>
Reviewed-by: Nathan Heldt-Sheller <nathan.heldt-sheller@intel.com>
19 files changed:
resource/csdk/security/include/internal/credresource.h
resource/csdk/security/include/internal/rolesresource.h
resource/csdk/security/include/internal/srmresourcestrings.h
resource/csdk/security/include/occertutility.h
resource/csdk/security/include/securevirtualresourcetypes.h
resource/csdk/security/provisioning/include/internal/secureresourceprovider.h
resource/csdk/security/provisioning/include/ocprovisioningmanager.h
resource/csdk/security/provisioning/sample/autoprovisioningclient.c
resource/csdk/security/provisioning/sample/provisioningTest.py
resource/csdk/security/provisioning/src/ocprovisioningmanager.c
resource/csdk/security/provisioning/src/secureresourceprovider.c
resource/csdk/security/src/aclresource.c
resource/csdk/security/src/certhelpers.c
resource/csdk/security/src/credresource.c
resource/csdk/security/src/policyengine.c
resource/csdk/security/src/rolesresource.c
resource/csdk/security/src/secureresourcemanager.c
resource/csdk/security/src/srmresourcestrings.c
resource/csdk/stack/octbstack_product_secured.def