SET (this_target security)
INCLUDE_DIRECTORIES(
- ${SLP_INCLUDE_DIRS}
+ ${SLP_INCLUDE_DIRS}
/usr/include/chromium
/usr/include/privacy_manager
- cert
inc
./
${CMAKE_SOURCE_DIR}/inc
${CMAKE_SOURCE_DIR}/src/base/inc
${CMAKE_SOURCE_DIR}/src/net/inc
- ${CMAKE_SOURCE_DIR}/src/io/inc
+ ${CMAKE_SOURCE_DIR}/src/io/inc
${CMAKE_SOURCE_DIR}/src/app/inc
${CMAKE_SOURCE_DIR}/src/system/inc
)
crypto/FSecCryptoRsaSignature.cpp
crypto/FSecCrypto_TrustZoneService.cpp
crypto/FSecCrypto_TrustZoneServiceMessage.cpp
- cert/FSecCertX509Certificate.cpp
- cert/FSecCertX509CertificatePath.cpp
- cert/FSecCertX509CertificateSelector.cpp
- cert/FSecCertX509CertificateStore.cpp
- cert/FSecCert_X509CertificateStoreImpl.cpp
- cert/FSecCert_CertServiceProxy.cpp
pkcs/FSecPkcsAlgorithmIdentifier.cpp
- pkcs/FSecPkcs_AlgorithmIdentifierImpl.cpp
+ pkcs/FSecPkcs_AlgorithmIdentifierImpl.cpp
pkcs/FSecPkcsInitialVector.cpp
- pkcs/FSecPkcs_InitialVectorImpl.cpp
+ pkcs/FSecPkcs_InitialVectorImpl.cpp
pkcs/FSecPkcsPkcs05PbEs2Parameters.cpp
pkcs/FSecPkcs_Pkcs05PbEs2ParametersImpl.cpp
pkcs/FSecPkcsPkcs05PbKdf2Parameters.cpp
pkcs/FSecPkcs_Pkcs05PbKdf2ParametersImpl.cpp
pkcs/FSecPkcsPkcs05PbMacParameters.cpp
- pkcs/FSecPkcs_Pkcs05PbMacParametersImpl.cpp
+ pkcs/FSecPkcs_Pkcs05PbMacParametersImpl.cpp
pkcs/FSecPkcsPkcs05Schemes.cpp
- pkcs/FSecPkcs_Pkcs05SchemesImpl.cpp
+ pkcs/FSecPkcs_Pkcs05SchemesImpl.cpp
pkcs/FSecPkcsPkcs08Attribute.cpp
pkcs/FSecPkcs_Pkcs08AttributeImpl.cpp
pkcs/FSecPkcsPkcs08AttributeValue.cpp
pkcs/FSecPkcs_Pkcs08AttributeValueImpl.cpp
pkcs/FSecPkcsPkcs08EncryptedPrivateKeyInfo.cpp
- pkcs/FSecPkcs_Pkcs08EncryptedPrivateKeyInfoImpl.cpp
+ pkcs/FSecPkcs_Pkcs08EncryptedPrivateKeyInfoImpl.cpp
pkcs/FSecPkcsPkcs08PrivateKeyInfo.cpp
- pkcs/FSecPkcs_Pkcs08PrivateKeyInfoImpl.cpp
+ pkcs/FSecPkcs_Pkcs08PrivateKeyInfoImpl.cpp
pkcs/FSecPkcsRc2CbcParameters.cpp
- pkcs/FSecPkcs_Rc2CbcParametersImpl.cpp
+ pkcs/FSecPkcs_Rc2CbcParametersImpl.cpp
pkcs/FSecPkcs_PkcsUtility.cpp
FSecSecretKey.cpp
FSecSecretKeyGenerator.cpp
FSec_AccessController.cpp
FSec_PrivilegeCache.cpp
FSec_PrivilegeManager.cpp
- FSec_PrivilegeInfo.cpp
- FSec_PrivilegeInfoImpl.cpp
- FSecPrivilegeInfo.cpp
+ FSec_PrivilegeInfo.cpp
+ FSec_PrivilegeInfoImpl.cpp
+ FSecPrivilegeInfo.cpp
FSec_PrivilegeManagerMessage.cpp
FSec_Prng.cpp
FSec_GenerateParameters.cpp
#include <FBaseByteBuffer.h>
#include <FBaseResult.h>
#include <FBaseSysLog.h>
-#include "FSec_CertServer.h"
+#include "FSecCert_CertServer.h"
#include <FSecCert_CertService.h>
#include <FSecCert_CertManager.h>
#include <FSecCert_CertDbManager.h>
namespace Tizen { namespace Security { namespace Cert
{
-const String _CERT_MGR_BASE_DIRECTORY = L"/opt/usr/share/certs/";
-const String _CERT_ROOT_CA_CERT_FILE_DIRECTORY = L"/opt/usr/share/certs/rootcert/";
-const String _CERT_USER_CERT_FILE_DIRECTORY = L"/opt/usr/share/certs/usercert/";
-const String _CERT_USER_PRIVKEY_FILE_DIRECTORY = L"/opt/usr/share/certs/usercert/key/";
-
-const String _CERT_ROOT_CA_CERT_TABLE = L"/opt/usr/dbspace/.security-rootcert.db";
-const String _CERT_USER_CERT_TABLE = L"/opt/usr/dbspace/.security-usercert.db";
-
-const String _CERT_MGR_CRT_FILE_PATH = _CERT_MGR_BASE_DIRECTORY + L"ca-certificate.crt";
-const String _TEMP_CERT_MGR_CRT_FILE_PATH = _CERT_MGR_BASE_DIRECTORY + L"tmp-ca-certificate.crt";
-
-const String _CERT_DOMAIN1_CERT_FILE_PATH = L"/opt/share/cert-svc/certs/sim/thirdparty/";
-const String _CERT_DOMAIN2_CERT_FILE_PATH = L"/opt/share/cert-svc/certs/sim/operator/";
-const String _CERT_SVC_DEFAULT_CERT_DIRECTORY = L"/opt/share/cert-svc/certs/ssl/";
-
-//Prefix definition for NAME Prefix
-const char* _CERT_COMMON_NAME = "CN=";
-const char* _CERT_ORG_UNIT_NAME = "OU=";
-const char* _CERT_ORG_NAME = "O=";
-const char* _CERT_LOCALITY_NAME = "L=";
-const char* _CERT_STATE_OR_PROVINCE_NAME = "S=";
-const char* _CERT_COUNTRY_NAME = "C=";
-const char* _CERT_EMAIL_ADDRESS = "emailAddress=";
-const char* _CERT_SERIAL_NUM = "SN=";
-const char* _CERT_GIVEN_NAME = "GN=";
-const char* _CERT_SUR_NAME = "SUN=";
-const char* _CERT_STATE_OF_PROVINCE = "ST=";
-const char* _CERT_DC = "_CERT_DC=";
-const char* _CERT_TK_ISSUER_NAME = "Test";
-
result
_CertServer::InitializeDb(void)
{
#include <FSecCertX509Certificate.h>
#include <FBaseSysLog.h>
#include <FBase_StringConverter.h>
+#include <FSec_AccessController.h>
+#include <FSec_AccessControlTypes.h>
+#include <FSecCert_CertServer.h>
#include <FSecCert_CertService.h>
#include <FSecCert_CertServiceProxy.h>
#include <FSecCert_X509CertificateStoreImpl.h>
static const int _MAX_CERT_BUFFER_SIZE = 2048;
+int
+GetIndexFromCertType(int certType)
+{
+ int index = 0;
+ switch (certType)
+ {
+ case _CERT_TYPE_ROOT_CA:
+ index = 0;
+ break;
+
+ case _CERT_TYPE_ROOT_DOMAIN1:
+ index = 1;
+ break;
+
+ case _CERT_TYPE_ROOT_DOMAIN3:
+ index = 2;
+ break;
+
+ default:
+ SysTryReturn(NID_SEC_CERT, false, -1, E_INVALID_ARG, "[%s] Invalid certificate type.", GetErrorMessage(E_INVALID_ARG));
+ break;
+ }
+
+ return index;
+}
+
_X509CertificateStoreImpl::_X509CertificateStoreImpl(void)
: __certType(static_cast< int >(_CERT_TYPE_NOT_BOUNDED))
, __curPos(0)
{
ClearLastResult();
+ memset(__context, 0, sizeof(__context));
+
__pCertServiceProxy = _CertServiceProxy::GetInstance();
SysTryReturnVoidResult(NID_SEC_CERT, __pCertServiceProxy != null, E_SYSTEM, "[E_SYSTEM] Failed to get certificate proxy instance.");
}
result
_X509CertificateStoreImpl::GetName(String& name) const
{
- result r = __pCertServiceProxy->GetName();
- if (!IsFailed(r))
- {
- name = L"CertServiceStore";
- }
-
- return r;
+ name = L"CertServiceStore";
+ return E_SUCCESS;
}
result
_X509CertificateStoreImpl::SetCertificateSelector(const Tizen::Security::Cert::ICertificateSelector& selector)
{
- int count = 0;
-
- CertificateType certType = (const_cast< ICertificateSelector& >(selector)).GetType();
+ result r = E_SUCCESS;
- if ((__certType > _CERT_TYPE_NOT_BOUNDED) && (__certType < _CERT_TYPE_MAX))
+ int prevIndex = GetIndexFromCertType(__certType);
+ if (__certType == _CERT_TYPE_USER_CERT)
{
- __pCertServiceProxy->CloseCertificateStore(__certType);
+ r = __pCertServiceProxy->CloseCertificateStore(__certType);
+ SysTryReturnResult(NID_SEC_CERT, !IsFailed(r), E_SYSTEM, "Failed to close certificate store.");
}
+ else if (prevIndex > -1 && __context[prevIndex] != 0)
+ {
+ r = _CertServer::CloseCertificateStore(reinterpret_cast< CertificateStoreCtx >(__context[prevIndex]));
+ __context[prevIndex] = 0;
+ SysTryReturnResult(NID_SEC_CERT, !IsFailed(r), E_SYSTEM, "Failed to close certificate store.");
+ }
+
+ int count = 0;
__curPos = 0;
+ CertificateType certType = (const_cast< ICertificateSelector& >(selector)).GetType();
switch (certType)
{
case ROOT_CA:
case USER_CERT:
__certType = _CERT_TYPE_USER_CERT;
- break;
+ return __pCertServiceProxy->OpenCertificateStoreByType(static_cast< _CaCertType >(__certType), count);
default:
SysTryReturnResult(NID_SEC_CERT, false, E_INVALID_ARG, "Invalid certificate type.");
break;
}
- return __pCertServiceProxy->OpenCertificateStoreByType(static_cast< _CaCertType >(__certType), count);
+ CertificateStoreCtx certList = null;
+ int index = GetIndexFromCertType(__certType);
+
+ if (__context[index] == 0)
+ {
+ certList = _CertServer::OpenCertificateStoreByType(static_cast< _CaCertType >(__certType), &count);
+ r = GetLastResult();
+ SysTryReturnResult(NID_SEC_CERT, !IsFailed(r), E_SYSTEM, "Failed to open certificate store.");
+ __context[index] = reinterpret_cast< int >(certList);
+ }
+
+ return E_SUCCESS;
}
result
_X509CertificateStoreImpl::GetCertificateCount(int& count)
{
- return __pCertServiceProxy->GetCertificateCount(__certType, count);
-}
+ result r = E_SUCCESS;
+
+ if (__certType == _CERT_TYPE_USER_CERT)
+ {
+ r = __pCertServiceProxy->GetCertificateCount(__certType, count);
+ }
+ else
+ {
+ r = _AccessController::CheckUserPrivilege(_PRV_CERTIFICATE_READ);
+ SysTryReturnResult(NID_SEC_CERT, !IsFailed(r), E_PRIVILEGE_DENIED, "The application does not have the privilege to call this method.");
+
+ int index = GetIndexFromCertType(__certType);
+ SysTryReturnResult(NID_SEC_CERT, index > -1, E_SYSTEM, "Failed to open certificate store.");
+ count = _CertServer::GetCertificateCount(reinterpret_cast< CertificateStoreCtx >(__context[index]));
+ }
+ return r;
+}
Tizen::Security::Cert::ICertificate*
_X509CertificateStoreImpl::GetNextCertificateN(void)
ClearLastResult();
- r = __pCertServiceProxy->GetNextCertificate(__certType, curPos, certBytes, certLen);
- SysTryReturn(NID_SEC_CERT, !IsFailed(r), null, r, "[%s] Failed to get next root certificate.", GetErrorMessage(r));
+ if (__certType == _CERT_TYPE_USER_CERT)
+ {
+ r = __pCertServiceProxy->GetNextCertificate(__certType, curPos, certBytes, certLen);
+ SysTryReturn(NID_SEC_CERT, !IsFailed(r), null, r, "[%s] Failed to get next root certificate.", GetErrorMessage(r));
+ }
+ else
+ {
+ r = _AccessController::CheckUserPrivilege(_PRV_CERTIFICATE_READ);
+ SysTryReturn(NID_SEC_CERT, !IsFailed(r), null, E_PRIVILEGE_DENIED, "The application does not have the privilege to call this method.");
+
+ _CertRootCaInfo* pRootCa = null;
+ _CertRootList* pTemp = null;
+ int count = 0;
+
+ int index = GetIndexFromCertType(__certType);
+ SysTryReturnResult(NID_SEC_CERT, index > -1, null, "Failed to open certificate store.");
+
+ CertificateStoreCtx certificateStoreCtx = reinterpret_cast< CertificateStoreCtx >(__context[index]);
+ SysTryReturn(NID_SEC_CERT, certificateStoreCtx != null, null, E_INVALID_ARG, "Invalid certificate store context.");
+
+ pRootCa = reinterpret_cast< _CertRootCaInfo* >(certificateStoreCtx);
+ SysTryReturn(NID_SEC_CERT, pRootCa->pRootList != null, null, E_OBJ_NOT_FOUND, "Certificate list is empty.");
+
+ pTemp = pRootCa->pRootList;
+
+ while (count != curPos)
+ {
+ count++;
+ SysTryReturn(NID_SEC_CERT, pTemp->pNext != null, null, E_OBJ_NOT_FOUND, "Certificate index not found.");
+
+ pTemp = pTemp->pNext;
+ }
+
+ pRootCa->pCurrRootList = pTemp;
+ if (certLen > static_cast< int >(pRootCa->pCurrRootList->length))
+ {
+ memcpy(certBytes, pRootCa->pCurrRootList->certificate, pRootCa->pCurrRootList->length);
+ certLen = pRootCa->pCurrRootList->length;
+ }
+ else
+ {
+ memcpy(certBytes, pRootCa->pCurrRootList->certificate, certLen);
+ }
+
+ curPos++;
+ }
+
__curPos = curPos;
r = certBuffer.Construct(certLen);
else
{
r = __pCertServiceProxy->InsertCaCertificate(static_cast< int >(certType), _CERT_X509, pBuffer, bufferLen);
+
+ UpdateCertStoreContext(certType);
+ SysTryReturn(NID_SEC_CERT, !IsFailed(r), r, r, "[%s] Failed to update cert store.", GetErrorMessage(r));
}
if (r == E_FILE_ALREADY_EXIST)
{
r = __pCertServiceProxy->UpdateCaCertificate(static_cast< int >(certType), pOldBuffer, oldBufferLen, pNewBuffer, newBufferLen);
SysTryReturn(NID_SEC_CERT, !IsFailed(r), r, r, "[%s] Failed to update certificate.", GetErrorMessage(r));
+
+ UpdateCertStoreContext(certType);
+ SysTryReturn(NID_SEC_CERT, !IsFailed(r), r, r, "[%s] Failed to update cert store.", GetErrorMessage(r));
}
return r;
result r = E_SUCCESS;
byte* pBuffer = null;
int bufferLen = 0;
+
_CaCertType certType = _CERT_TYPE_NOT_BOUNDED;
switch (certificateType)
{
r = __pCertServiceProxy->RemoveCaCertificate(static_cast< int >(certType), pBuffer, bufferLen);
SysTryReturn(NID_SEC_CERT, !IsFailed(r), r, r, "[%s] Failed to remove certificate.", GetErrorMessage(r));
+
+ UpdateCertStoreContext(certType);
+ SysTryReturn(NID_SEC_CERT, !IsFailed(r), r, r, "[%s] Failed to update cert store.", GetErrorMessage(r));
+ }
+
+ return r;
+}
+
+result
+_X509CertificateStoreImpl::UpdateCertStoreContext(int type)
+{
+ result r = E_SUCCESS;
+
+ CertificateStoreCtx certList = null;
+ int index = GetIndexFromCertType(type);
+
+ int count = 0;
+
+ if (index > -1 && type == __certType)
+ {
+ if (__context[index] != 0)
+ {
+ r = _CertServer::CloseCertificateStore(reinterpret_cast< CertificateStoreCtx >(__context[index]));
+ TryReturnResult(!IsFailed(r), r, r, "[%s] Propagating.", GetErrorMessage(r));
+ }
+ certList = _CertServer::OpenCertificateStoreByType(static_cast< _CaCertType >(type), &count);
+ r = GetLastResult();
+ SysTryReturnResult(NID_SEC_CERT, !IsFailed(r), E_SYSTEM, "Failed to open certificate store.");
+ __context[index] = reinterpret_cast< int >(certList);
}
return r;
}
-} } } // Tizen::Security::Cert
+} } } // Tizen::Security::Cert
projects / platform / framework / native / appfw.git / commitdiff