}
bool
-ConfigurationManager::RegisterCertInfo(InstallationContext* pContext) const
-{
- if (pContext->__isHybridService == true)
- {
- AppLog("Skip - HybridService");
- return true;
- }
-
- AppLog("START");
-
- int res = 0;
- bool result = true;
- pkgmgr_instcertinfo_h handle = null;
- String appId = pContext->__packageId;
- X509CertificatePath* pAuthorCertPath = pContext->GetAuthorCertPath();
- X509CertificatePath* pDistributorCertPath = pContext->GetDistributorCertPath();
-
- char* pAppId = _StringConverter::CopyToCharArrayN(appId);
- TryCatch(pAppId, result = false, "pAppId is null");
-
- res = pkgmgr_installer_create_certinfo_set_handle(&handle);
- TryCatch(res == 0, result = false, "pkgmgr_installer_create_certinfo_set_handle() failed.[%d]", res);
-
- if (pAuthorCertPath)
- {
- AppLog("[AuthorCert]");
- result = SetCertHashValue(handle, pAuthorCertPath, PM_SET_AUTHOR_SIGNER_CERT);
- TryCatch(result == true, , "RegisterCertHashValue() failed. [pAuthorCertPath]");
- }
-
- if (pDistributorCertPath)
- {
- AppLog("[DistributorCert]");
- result = SetCertHashValue(handle, pDistributorCertPath, PM_SET_DISTRIBUTOR_SIGNER_CERT);
- TryCatch(result == true, , "RegisterCertHashValue() failed. [pDistributorCertPath]");
- }
-
- res = pkgmgr_installer_save_certinfo(pAppId, handle);
- TryCatch(res == 0, result = false, "pkgmgr_installer_save_certinfo(%s) failed.[%d]", pAppId, res);
-
- AppLog("RegisterCertInfo - END");
- AppLog("------------------------------------------");
-
-CATCH:
- if (handle)
- {
- pkgmgr_installer_destroy_certinfo_set_handle(handle);
- }
-
- delete[] pAppId;
- return result;
-}
-
-bool
-ConfigurationManager::SetCertHashValue(void* pHandle, X509CertificatePath* pCertPath, int certType) const
-{
- TryReturn(pCertPath, false, "pCertPath is null.");
-
- int res = 0;
- bool result = true;
- ICertificate* pCert = null;
- char* pCertValue = null;
-
- for (int i = 0; i < pCertPath->GetLength(); i++)
- {
- pCert = pCertPath->GetCertificateN(i);
- TryCatch(pCert, result = false, "pCert is null.[%i]", i);
-
- pCertValue = GetCertValueN(pCert);
- TryCatch(pCertValue, result = false, "pCertValue is null.[%i]", i);
-
- AppLog("------------------------------------------");
- AppLog("CertValue(%d), certType[%d]", i, certType);
- AppLog("[%s]", pCertValue);
-
- res = pkgmgr_installer_set_cert_value(pHandle, (pkgmgr_instcert_type)certType, pCertValue);
- TryCatch(res == 0, result = false, "pkgmgr_installer_set_cert_value(%d) failed.[%d]", i, res);
-
- delete pCert;
- pCert = null;
- delete[] pCertValue;
- pCertValue = null;
-
- certType--;
- }
-
-CATCH:
- delete pCert;
- delete[] pCertValue;
-
- return result;
-}
-
-char*
-ConfigurationManager::GetCertValueN(ICertificate* pCert) const
-{
- result r = E_SUCCESS;
- ByteBuffer* pEncodedData = null;
- String base64Value;
- char* pEncodedValue = null;
-
- pEncodedData = pCert->GetEncodedDataN();
- TryCatch(pEncodedData, , "pEncodedData is null.");
-
- r = StringUtil::EncodeToBase64String(*pEncodedData, base64Value);
- TryCatch(!IsFailed(r), , "StringUtil::EncodeToBase64String is failed.");
-
- pEncodedValue = _StringConverter::CopyToCharArrayN(base64Value);
- TryCatch(pEncodedValue, , "pEncodedValue is null");
-
-CATCH:
- delete pEncodedData;
-
- return pEncodedValue;
-}
-
-bool
-ConfigurationManager::UnregisterCertInfo(InstallationContext* pContext) const
-{
- if (pContext->__isHybridService == true)
- {
- AppLog("Skip - HybridService");
- return true;
- }
-
- AppLog("START");
- int res = 0;
- bool result = true;
- String appId = pContext->__packageId;
-
- char* pAppId = _StringConverter::CopyToCharArrayN(appId);
- TryCatch(pAppId, result = false, "pAppId is null");
-
- res = pkgmgr_installer_delete_certinfo(pAppId);
- TryCatch(res == 0, result = false, "pkgmgr_installer_delete_certinfo(%s) failed.[%d]", pAppId, res);
-
- AppLog("UnregisterCertInfo - END");
- AppLog("------------------------------------------");
-
-CATCH:
- delete[] pAppId;
- return result;
-}
-
-bool
ConfigurationManager::PostInstall(InstallationContext* pContext, bool error) const
{
app2ext_handle* pHandle = (app2ext_handle*)pContext->__pApp2ExtHandle;
* @brief This is the implementation file for %SignatureManager class.
*/
+#include <pkgmgr_parser.h>
+#include <pkgmgr_installer.h>
+
#include <FBase_StringConverter.h>
+#include <FBaseInternalTypes.h>
#include "SignatureManager.h"
}
bool
+SignatureManager::ValidateSignatures()
+{
+ AppLog("ValidateSignatures start >>");
+
+ TryReturn(__pContext, false, "__pContext is null.");
+
+ bool res = false;
+ res = ValidationCore::VCoreInit(
+ std::string("/usr/share/wrt-engine/fingerprint_list.xml"),
+ std::string("/usr/share/wrt-engine/fingerprint_list.xsd"),
+ std::string("/opt/dbspace/.cert_svc_vcore.db"));
+ TryReturn(res, false, "ValidationCore::VCoreInit() is failed.");
+ TryReturn(__pContext->__rootPath.IsEmpty() == false, false, "__pContext->__rootPath is empty.");
+ fprintf(stderr, " ## sValidationCore::VCoreInit() is done\n");
+
+ std::unique_ptr<char[]> pRootPath(_StringConverter::CopyToCharArrayN(__pContext->__rootPath));
+ TryReturn(pRootPath, false, "__pRootPath is null.");
+
+ std::string rootPath = pRootPath.get();
+ rootPath += "/";
+ AppLog("rootPath=[%s]", rootPath.c_str());
+
+ ValidationCore::SignatureFinder::Result findRes = ValidationCore::SignatureFinder::NO_ERROR;
+ ValidationCore::SignatureFinder signatureFinder(rootPath);
+ ValidationCore::SignatureFileInfoSet signatureFiles;
+
+ findRes = signatureFinder.find(signatureFiles);
+ TryReturn(findRes == ValidationCore::SignatureFinder::NO_ERROR , false, "signatureFinder.find() is failed, findRes=[%d]", (int)findRes);
+
+ fprintf(stderr, " ## signatureFinder.find() is done\n");
+ ValidationCore::SignatureFileInfoSet::reverse_iterator iter = signatureFiles.rbegin();
+ for (; iter != signatureFiles.rend(); ++iter)
+ {
+ int sigFileNumber = iter->getFileNumber();
+ AppLog("SignatureFiles: name=[%s]", iter->getFileName().c_str());
+ AppLog("SignatureFiles: number=[%d]", sigFileNumber);
+ ValidationCore::SignatureData data(rootPath + iter->getFileName(), iter->getFileNumber());
+
+ try {
+ ValidationCore::SignatureReader xml;
+ xml.initialize(data, "/usr/share/wrt-engine/schema.xsd");
+ xml.read(data);
+ AppLog("ValidationCore::SignatureReader() done");
+ fprintf(stderr, " ## ValidationCore::SignatureReader() is done\n");
+
+ ValidationCore::CertificateList certList = data.getCertList();
+ ValidationCore::CertificateList::iterator it = certList.begin();
+ ValidationCore::CertificateList::iterator it_end = certList.end();
+ for (; it != it_end; it++)
+ {
+ std::string value = (*it)->getBase64();
+
+ if (data.isAuthorSignature() == true)
+ {
+ __pContext->__pAuthorCertList->Add(new String(value.c_str()));
+ AppLog("Author cert value=[%s]", value.c_str());
+ }
+ else
+ {
+ if (sigFileNumber == SIGNATURE_FILE_NUMBER_DISTRIBUTOR)
+ {
+ __pContext->__pDistributorCertList->Add(new String(value.c_str()));
+ AppLog("Default distributor cert value=[%s]", value.c_str());
+ }
+ }
+ }
+
+ ValidationCore::SignatureValidator::Result valRes = ValidationCore::SignatureValidator::SIGNATURE_VALID;
+ ValidationCore::SignatureValidator::AppType appType = ValidationCore::SignatureValidator::TIZEN;
+ ValidationCore::SignatureValidator validator(appType, false, false, false);
+
+ AppLog("validator.check() start >>");
+ fprintf(stderr, " ## validator.check() start\n");
+
+ valRes = validator.check(data, rootPath);
+ TryReturn(valRes == ValidationCore::SignatureValidator::SIGNATURE_VERIFIED, false, "validator.check() is failed, valRes=[%d]", (int)valRes);
+ fprintf(stderr, " ## validator.check() done\n");
+ AppLog("validator.check() done <<");
+ fprintf(stderr, " ## Signature validator.check success, name=[%s], number=[%d]\n", iter->getFileName().c_str(), iter->getFileNumber());
+
+ ValidationCore::CertificatePtr pRootCert = data.getRootCaCertificatePtr();
+ TryReturn(pRootCert, false, "__pRootPath is null.");
+ std::string value = pRootCert.Get()->getBase64();
+ if (data.isAuthorSignature() == true)
+ {
+ __pContext->__pAuthorCertList->Add(new String(value.c_str()));
+ AppLog("Author root cert value=[%s]", value.c_str());
+ }
+ else
+ {
+ if (sigFileNumber == SIGNATURE_FILE_NUMBER_DISTRIBUTOR)
+ {
+ __pContext->__pDistributorCertList->Add(new String(value.c_str()));
+ AppLog("Default root distributor cert value=[%s]", value.c_str());
+
+ ValidationCore::CertStoreId::Type certStoreIdType = data.getVisibilityLevel();
+ AppLog("CertStoreIdType = [%d]", (int)certStoreIdType);
+ __pContext->__rootCertType = (RootCertificateType)certStoreIdType;
+ }
+ }
+ }
+ catch (ValidationCore::ParserSchemaException::Base)
+ {
+ TryReturn(0, false, "ParserSchemaException::Base exception occurred.");
+ }
+ catch (DPL::Exception)
+ {
+ TryReturn(0, false, "DPL::Exception exception occurred.");
+ }
+ }
+
+ AppLog("ValidateSignatures done successfully <<");
+ return true;
+}
+
+bool
+SignatureManager::RegisterCertInfo() const
+{
+ TryReturn(__pContext, false, "__pContext is null");
+
+ if (__pContext->__isHybridService == true)
+ {
+ AppLog("Skip - HybridService");
+ return true;
+ }
+
+ AppLog("START");
+
+ int error = 0;
+ bool res = false;
+ pkgmgr_instcertinfo_h handle = null;
+
+ std::unique_ptr<char[]> pPackageId(_StringConverter::CopyToCharArrayN(__pContext->__packageId));
+ TryReturn(pPackageId, false, "pPackageId is null");
+
+ error = pkgmgr_installer_create_certinfo_set_handle(&handle);
+ TryReturn(error == 0, false, "pkgmgr_installer_create_certinfo_set_handle() failed, error = [%d].", error);
+
+ if (__pContext->__pAuthorCertList)
+ {
+ AppLog("[AuthorCert]");
+ res = SetAuthorCertValue(handle, __pContext->__pAuthorCertList);
+ TryCatch(res == true, , "SetAuthorCertHashValue() is failed.");
+ }
+
+ if (__pContext->__pDistributorCertList)
+ {
+ AppLog("[DistributorCert]");
+ res = SetDistributorCertValue(handle, __pContext->__pDistributorCertList);
+ TryCatch(res == true, , "RegisterCertHashValue() is failed.");
+ }
+
+ error = pkgmgr_installer_save_certinfo(pPackageId.get(), handle);
+ TryCatch(error == 0, res = false, "pkgmgr_installer_save_certinfo(%s) failed, error = [%d]", pPackageId.get(), error);
+
+ AppLog("RegisterCertInfo - END");
+ AppLog("------------------------------------------");
+
+ res = true;
+
+CATCH:
+ if (handle)
+ {
+ pkgmgr_installer_destroy_certinfo_set_handle(handle);
+ }
+
+ return res;
+}
+
+bool
+SignatureManager::UnregisterCertInfo() const
+{
+ TryReturn(__pContext, false, "__pContext is null");
+
+ if (__pContext->__isHybridService == true)
+ {
+ AppLog("Skip - HybridService");
+ return true;
+ }
+
+ AppLog("START");
+ int error = 0;
+ std::unique_ptr<char[]> pPackageId(_StringConverter::CopyToCharArrayN(__pContext->__packageId));
+ TryReturn(pPackageId, false, "pPackageId is null");
+
+ error = pkgmgr_installer_delete_certinfo(pPackageId.get());
+ TryReturn(error == 0, false, "pkgmgr_installer_delete_certinfo(%s) failed, error = [%d]", pPackageId.get(), error);
+
+ AppLog("UnregisterCertInfo - END");
+ AppLog("------------------------------------------");
+
+ return true;
+}
+
+int
+SignatureManager::GetApiVisibility(RootCertificateType certType)
+{
+ int apiVisibility = _API_VISIBILITY_NONE;
+
+ if (certType == ROOT_CERTIFICATE_PUBLIC)
+ {
+ apiVisibility = _API_VISIBILITY_PUBLIC;
+ }
+ else if (certType == ROOT_CERTIFICATE_PARTNER)
+ {
+ apiVisibility = _API_VISIBILITY_PARTNER;
+ }
+ else if (certType == ROOT_CERTIFICATE_PARTNER_OPERATOR)
+ {
+ apiVisibility = _API_VISIBILITY_PARTNER_OPERATOR;
+ }
+ else if (certType == ROOT_CERTIFICATE_PARTNER_MANUFACTURER)
+ {
+ apiVisibility = _API_VISIBILITY_PARTNER_MANUFACTURER;
+ }
+ else if (certType == ROOT_CERTIFICATE_CERT_SVC_PUBLIC)
+ {
+ apiVisibility = _API_VISIBILITY_PUBLIC;
+ }
+ else if (certType == ROOT_CERTIFICATE_CERT_SVC_PARTNER)
+ {
+ apiVisibility = _API_VISIBILITY_PARTNER;
+ }
+ else if (certType == ROOT_CERTIFICATE_CERT_SVC_PARTNER_OPERATOR)
+ {
+ apiVisibility = _API_VISIBILITY_PARTNER_OPERATOR;
+ }
+ else if (certType == ROOT_CERTIFICATE_CERT_SVC_PARTNER_MANUFACTURER)
+ {
+ apiVisibility = _API_VISIBILITY_PARTNER_MANUFACTURER;
+ }
+ else if (certType == ROOT_CERTIFICATE_CERT_SVC_PLATFORM)
+ {
+ apiVisibility = _API_VISIBILITY_PARTNER_MANUFACTURER;
+ }
+
+ return apiVisibility;
+}
+
+bool
SignatureManager::SetSignature()
{
TryReturn(__pContext, false, "__pContext is null.");
AppLog("AuthorCert Validate - END");
TryCatch(ret == true, ret = false, "Validate(AuthorCert) is failed.");
- __pContext->SetAuthorCertPath(__pAuthorCertPath);
+ SetCertificatePath(SIGNATURE_FILE_TYPE_AUTHOR, __pAuthorCertPath);
__pAuthorCertPath = null;
AppLog("DistributorCert Validate - START");
AppLog("DistributorCert Validate - END");
TryCatch(ret == true, ret = false, "Validate(DistributorCert) is failed.");
- __pContext->SetDistributorCertPath(__pDistributorCertPath);
+ SetCertificatePath(SIGNATURE_FILE_TYPE_DISTRIBUTOR, __pDistributorCertPath);
__pDistributorCertPath = null;
CATCH:
}
bool
+SignatureManager::SetAuthorCertValue(void* pHandle, IListT<String *>* pCertList) const
+{
+ TryReturn(pHandle, false, "pHandle is null.");
+ TryReturn(pCertList, false, "pCertPath is null.");
+
+ int res = 0;
+ result r = E_SUCCESS;
+ int certType = 0;
+
+ for (int i = 0; i < pCertList->GetCount(); i++)
+ {
+ String* pCert = null;
+ r = pCertList->GetAt(i, pCert);
+ TryReturn(!IsFailed(r), false, "pCertList->GetAt() is failed, [%d]", i);
+ TryReturn(pCert, false, "pCertList->GetAt() is failed, [%d]", i);
+
+ std::unique_ptr<char[]> pCertValue(_StringConverter::CopyToCharArrayN(*pCert));
+
+ if (i == 0)
+ {
+ certType = PM_SET_AUTHOR_SIGNER_CERT;
+ }
+ else if (i == 1)
+ {
+ certType = PM_SET_AUTHOR_INTERMEDIATE_CERT;
+ }
+ else if (i == 2)
+ {
+ certType = PM_SET_AUTHOR_ROOT_CERT;
+ }
+ else
+ {
+ AppLog("Invalid certificate type[%d]", i);
+ break;
+ }
+
+ AppLog("------------------------------------------");
+ AppLog("Certificate type=[%d]", certType);
+ AppLog("[%s]", pCertValue.get());
+
+ res = pkgmgr_installer_set_cert_value(pHandle, (pkgmgr_instcert_type)certType, pCertValue.get());
+ TryReturn(res == 0, false, "pkgmgr_installer_set_cert_value(%d) failed.[%d]", i, res);
+ }
+
+ return true;
+}
+
+bool
+SignatureManager::SetDistributorCertValue(void* pHandle, IListT<String *>* pCertList) const
+{
+ TryReturn(pHandle, false, "pHandle is null.");
+ TryReturn(pCertList, false, "pCertPath is null.");
+
+ int res = 0;
+ result r = E_SUCCESS;
+ int certType = 0;
+
+ for (int i = 0; i < pCertList->GetCount(); i++)
+ {
+ String* pCert = null;
+ r = pCertList->GetAt(i, pCert);
+ TryReturn(!IsFailed(r), false, "pCertList->GetAt() is failed, [%d]", i);
+ TryReturn(pCert, false, "pCertList->GetAt() is failed, [%d]", i);
+
+ std::unique_ptr<char[]> pCertValue(_StringConverter::CopyToCharArrayN(*pCert));
+
+ if (i == 0)
+ {
+ certType = PM_SET_DISTRIBUTOR_SIGNER_CERT;
+ }
+ else if (i == 1)
+ {
+ certType = PM_SET_DISTRIBUTOR_INTERMEDIATE_CERT;
+ }
+ else if (i == 2)
+ {
+ certType = PM_SET_DISTRIBUTOR_ROOT_CERT;
+ }
+ else
+ {
+ AppLog("Invalid certificate type[%d]", i);
+ break;
+ }
+
+ AppLog("------------------------------------------");
+ AppLog("Certificate type=[%d]", certType);
+ AppLog("[%s]", pCertValue.get());
+
+ res = pkgmgr_installer_set_cert_value(pHandle, (pkgmgr_instcert_type)certType, pCertValue.get());
+ TryReturn(res == 0, false, "pkgmgr_installer_set_cert_value(%d) failed.[%d]", i, res);
+ }
+
+ return true;
+}
+
+bool
+SignatureManager::SetCertificatePath(SignatureFileType type, X509CertificatePath* pCertPath)
+{
+ TryReturn(pCertPath, false, "pCertPath is null.");
+ TryReturn(__pContext, false, "__pContext is null.");
+
+ IListT<String *>* pList = null;
+
+ if (type == SIGNATURE_FILE_TYPE_AUTHOR)
+ {
+ pList = __pContext->__pAuthorCertList;
+ }
+ else if (type == SIGNATURE_FILE_TYPE_DISTRIBUTOR)
+ {
+ pList = __pContext->__pDistributorCertList;
+ }
+ else
+ {
+ TryReturn(0, false, "SignatureFileType is unknown, type = [%d]", (int)type);
+ }
+
+ for (int i = 0; i < pCertPath->GetLength(); i++)
+ {
+ std::unique_ptr<ICertificate> pCert(pCertPath->GetCertificateN(i));
+ TryReturn(pCert, false, "pCert is null, [%i].", i);
+
+ bool res = false;
+ String certValue;
+ res = GetCertValue(pCert.get(), certValue);
+ TryReturn(res == true, false, "GetCertValue() is failed, [%d].", i);
+
+ result r = pList->Add(new String(certValue));
+ TryReturn(!IsFailed(r), false, "pList->Add() is failed, [%d]", i);
+
+ AppLog("------------------------------------------");
+ AppLog("CertValue[%d], certType[%d]", i, (int)type);
+ AppLog("[%ls]", certValue.GetPointer());
+ }
+
+ return true;
+}
+
+bool
+SignatureManager::GetCertValue(ICertificate* pCert, String& value) const
+{
+ result r = E_SUCCESS;
+
+ std::unique_ptr<ByteBuffer> pEncodedData(pCert->GetEncodedDataN());
+ TryReturn(pEncodedData, false, "pEncodedData is null.");
+
+ r = StringUtil::EncodeToBase64String(*pEncodedData.get(), value);
+ TryReturn(!IsFailed(r), false, "StringUtil::EncodeToBase64String() is failed.");
+
+ return true;
+}
+
+bool
SignatureManager::Validate(X509CertificatePath* pCertPath)
{
TryReturn(pCertPath, false, "pCertPath is null.");
}
bool
+SignatureManager::AddAuthorRootCert(X509CertificatePath* pCertPath)
+{
+ TryReturn(pCertPath, false, "pCertPath is null.");
+
+ result r = E_SUCCESS;
+ bool ret = true;
+ ByteBuffer byteBuffer;
+ X509Certificate rootCert;
+ int length = 0;
+ const char* pAuthorRootCert = "MIICnzCCAggCCQCn+GGT4zh+BjANBgkqhkiG9w0BAQUFADCBkzELMAkGA1UEBhMC"
+ "S1IxDjAMBgNVBAgMBVN1d29uMQ4wDAYDVQQHDAVTdXdvbjEWMBQGA1UECgwNVGl6"
+ "ZW4gVGVzdCBDQTElMCMGA1UECwwcVGl6ZW4gVGVzdCBEZXZlbG9wZXIgUm9vdCBD"
+ "QTElMCMGA1UEAwwcVGl6ZW4gVGVzdCBEZXZlbG9wZXIgUm9vdCBDQTAeFw0xMjEw"
+ "MjYwOTUwMTNaFw0yMjEwMjQwOTUwMTNaMIGTMQswCQYDVQQGEwJLUjEOMAwGA1UE"
+ "CAwFU3V3b24xDjAMBgNVBAcMBVN1d29uMRYwFAYDVQQKDA1UaXplbiBUZXN0IENB"
+ "MSUwIwYDVQQLDBxUaXplbiBUZXN0IERldmVsb3BlciBSb290IENBMSUwIwYDVQQD"
+ "DBxUaXplbiBUZXN0IERldmVsb3BlciBSb290IENBMIGfMA0GCSqGSIb3DQEBAQUA"
+ "A4GNADCBiQKBgQDWT6ZH5JyGadTUK1QmNwU8j+py4WtuElJE+4/wPFP8/KBmvvmI"
+ "rGVjhUbKXToKIo8N6C/0SLxGEWuRAIoZHhg5JVbw1Ay7smgJJHizDUAqMTmV6LI9"
+ "yTFbBV+OlO2Dir4LVdQ/XDBiqqslr7pqXgsg1V2g7x+tOI/f3dn2kWoVZQIDAQAB"
+ "MA0GCSqGSIb3DQEBBQUAA4GBADGJYMtzUBDK+KKLZQ6zYmrKb+OWLlmEr/t/c2af"
+ "KjTKUtommcz8VeTPqrDBOwxlVPdxlbhisCYzzvwnWeZk1aeptxxU3kdW9N3/wocN"
+ "5nBzgqkkHJnj/ptqjrH2v/m0Z3hBuI4/akHIIfCBF8mUHwqcxYsRdcCIrkgp2Aiv"
+ "bSaM";
+
+ length = strlen(pAuthorRootCert);
+ byteBuffer.Construct(length);
+
+ r = byteBuffer.SetArray((byte*)pAuthorRootCert, 0, length);
+ TryCatch(!IsFailed(r), ret = false, "SetArray() is failed.");
+
+ byteBuffer.Flip();
+
+ r = rootCert.Construct(byteBuffer);
+ TryCatch(!IsFailed(r), ret = false, "rootCert.Construct() is failed.");
+
+ r = pCertPath->AddCertificate(rootCert);
+ TryCatch(!IsFailed(r), ret = false, "AddCertificate(AuthorRootCert) is failed.");
+
+CATCH:
+ return ret;
+}
+
+bool
SignatureManager::AddDistributorRootCert(X509CertificatePath* pCertPath)
{
TryReturn(pCertPath, false, "pCertPath is null.");
return ret;
}
-bool
-SignatureManager::AddAuthorRootCert(X509CertificatePath* pCertPath)
-{
- TryReturn(pCertPath, false, "pCertPath is null.");
-
- result r = E_SUCCESS;
- bool ret = true;
- ByteBuffer byteBuffer;
- X509Certificate rootCert;
- int length = 0;
- const char* pAuthorRootCert = "MIICnzCCAggCCQCn+GGT4zh+BjANBgkqhkiG9w0BAQUFADCBkzELMAkGA1UEBhMC"
- "S1IxDjAMBgNVBAgMBVN1d29uMQ4wDAYDVQQHDAVTdXdvbjEWMBQGA1UECgwNVGl6"
- "ZW4gVGVzdCBDQTElMCMGA1UECwwcVGl6ZW4gVGVzdCBEZXZlbG9wZXIgUm9vdCBD"
- "QTElMCMGA1UEAwwcVGl6ZW4gVGVzdCBEZXZlbG9wZXIgUm9vdCBDQTAeFw0xMjEw"
- "MjYwOTUwMTNaFw0yMjEwMjQwOTUwMTNaMIGTMQswCQYDVQQGEwJLUjEOMAwGA1UE"
- "CAwFU3V3b24xDjAMBgNVBAcMBVN1d29uMRYwFAYDVQQKDA1UaXplbiBUZXN0IENB"
- "MSUwIwYDVQQLDBxUaXplbiBUZXN0IERldmVsb3BlciBSb290IENBMSUwIwYDVQQD"
- "DBxUaXplbiBUZXN0IERldmVsb3BlciBSb290IENBMIGfMA0GCSqGSIb3DQEBAQUA"
- "A4GNADCBiQKBgQDWT6ZH5JyGadTUK1QmNwU8j+py4WtuElJE+4/wPFP8/KBmvvmI"
- "rGVjhUbKXToKIo8N6C/0SLxGEWuRAIoZHhg5JVbw1Ay7smgJJHizDUAqMTmV6LI9"
- "yTFbBV+OlO2Dir4LVdQ/XDBiqqslr7pqXgsg1V2g7x+tOI/f3dn2kWoVZQIDAQAB"
- "MA0GCSqGSIb3DQEBBQUAA4GBADGJYMtzUBDK+KKLZQ6zYmrKb+OWLlmEr/t/c2af"
- "KjTKUtommcz8VeTPqrDBOwxlVPdxlbhisCYzzvwnWeZk1aeptxxU3kdW9N3/wocN"
- "5nBzgqkkHJnj/ptqjrH2v/m0Z3hBuI4/akHIIfCBF8mUHwqcxYsRdcCIrkgp2Aiv"
- "bSaM";
-
- length = strlen(pAuthorRootCert);
- byteBuffer.Construct(length);
-
- r = byteBuffer.SetArray((byte*)pAuthorRootCert, 0, length);
- TryCatch(!IsFailed(r), ret = false, "SetArray() is failed.");
-
- byteBuffer.Flip();
-
- r = rootCert.Construct(byteBuffer);
- TryCatch(!IsFailed(r), ret = false, "rootCert.Construct() is failed.");
-
- r = pCertPath->AddCertificate(rootCert);
- TryCatch(!IsFailed(r), ret = false, "AddCertificate(AuthorRootCert) is failed.");
-
-CATCH:
- return ret;
-}
-
-bool
-SignatureManager::ValidateSignatures()
-{
- AppLog("ValidateSignatures start >>");
-
- TryReturn(__pContext, false, "__pContext is null.");
-
- bool res = false;
- res = ValidationCore::VCoreInit(
- std::string("/usr/share/wrt-engine/fingerprint_list.xml"),
- std::string("/usr/share/wrt-engine/fingerprint_list.xsd"),
- std::string("/opt/dbspace/.cert_svc_vcore.db"));
- TryReturn(res, false, "ValidationCore::VCoreInit() is failed.");
- TryReturn(__pContext->__rootPath.IsEmpty() == false, false, "__pContext->__rootPath is empty.");
- fprintf(stderr, " ## sValidationCore::VCoreInit() is done\n");
-
- std::unique_ptr<char[]> pRootPath(_StringConverter::CopyToCharArrayN(__pContext->__rootPath));
- TryReturn(pRootPath, false, "__pRootPath is null.");
-
- std::string rootPath = pRootPath.get();
- rootPath += "/";
- AppLog("rootPath=[%s]", rootPath.c_str());
-
- ValidationCore::SignatureFinder::Result findRes = ValidationCore::SignatureFinder::NO_ERROR;
- ValidationCore::SignatureFinder signatureFinder(rootPath);
- ValidationCore::SignatureFileInfoSet signatureFiles;
-
- findRes = signatureFinder.find(signatureFiles);
- TryReturn(findRes == ValidationCore::SignatureFinder::NO_ERROR , false, "signatureFinder.find() is failed, findRes=[%d]", (int)findRes);
-
- fprintf(stderr, " ## signatureFinder.find() is done\n");
- ValidationCore::SignatureFileInfoSet::reverse_iterator iter = signatureFiles.rbegin();
- for (; iter != signatureFiles.rend(); ++iter)
- {
- AppLog("SignatureFiles: name=[%s]", iter->getFileName().c_str());
- AppLog("SignatureFiles: number=[%d]", iter->getFileNumber());
- ValidationCore::SignatureData data(rootPath + iter->getFileName(), iter->getFileNumber());
-
- try {
- ValidationCore::SignatureReader xml;
- xml.initialize(data, "/usr/share/wrt-engine/schema.xsd");
- xml.read(data);
- AppLog("ValidationCore::SignatureReader() done");
- fprintf(stderr, " ## ValidationCore::SignatureReader() is done\n");
-
-// ValidationCore::CertificateList certList = data.getCertList();
-// ValidationCore::CertificateList::iterator it = certList.begin();
-// ValidationCore::CertificateList::iterator it_end = certList.end();
-// for (; it != it_end; it++)
-// {
-// std::string value = (*it)->getBase64();
-// AppLog("cert value=[%s]", value.c_str());
-// }
-
- ValidationCore::SignatureValidator::Result valRes = ValidationCore::SignatureValidator::SIGNATURE_VALID;
- ValidationCore::SignatureValidator::AppType appType = ValidationCore::SignatureValidator::TIZEN;
- ValidationCore::SignatureValidator validator(appType, false, false, false);
-
- AppLog("validator.check() start >>");
- fprintf(stderr, " ## validator.check() start\n");
-
- valRes = validator.check(data, rootPath);
- TryReturn(valRes == ValidationCore::SignatureValidator::SIGNATURE_VERIFIED, false, "validator.check() is failed, valRes=[%d]", (int)valRes);
- fprintf(stderr, " ## validator.check() done\n");
- AppLog("validator.check() done <<");
- fprintf(stderr, " ## Signature validator.check success, name=[%s], number=[%d]\n", iter->getFileName().c_str(), iter->getFileNumber());
- }
- catch (ValidationCore::ParserSchemaException::Base)
- {
- TryReturn(0, false, "ParserSchemaException::Base exception occurred.");
- }
- catch (DPL::Exception)
- {
- TryReturn(0, false, "DPL::Exception exception occurred.");
- }
- }
-
- AppLog("ValidateSignatures done successfully <<");
- return true;
-}
projects / platform / framework / native / installer.git / commitdiff