platform/core/security/device-certificate-manager.git
6 years agoBump DCM release to 2 in spec 92/163992/2
Jaroslaw Pelczar [Thu, 14 Dec 2017 07:14:42 +0000 (08:14 +0100)]
Bump DCM release to 2 in spec

Change-Id: I38d4bfbb795042c8090109f72f73b7d9a1d0a6bf
Signed-off-by: Jaroslaw Pelczar <j.pelczar@samsung.com>
6 years agoMerge "Always rewrite certificate chain from backend" into tizen
Dong Sun Lee [Wed, 27 Dec 2017 05:21:51 +0000 (05:21 +0000)]
Merge "Always rewrite certificate chain from backend" into tizen

6 years agoMerge "Add test case for certificate rewriter" into tizen
Dong Sun Lee [Wed, 27 Dec 2017 05:20:19 +0000 (05:20 +0000)]
Merge "Add test case for certificate rewriter" into tizen

6 years agoMerge "Implement x509 certificate rewriter" into tizen
Dong Sun Lee [Wed, 27 Dec 2017 05:20:15 +0000 (05:20 +0000)]
Merge "Implement x509 certificate rewriter" into tizen

6 years agoAlways rewrite certificate chain from backend 91/163991/1
Jaroslaw Pelczar [Thu, 14 Dec 2017 06:37:18 +0000 (07:37 +0100)]
Always rewrite certificate chain from backend

Change-Id: Ia76a36d75a802a97f4cf58f8b4826504451e87bc
Signed-off-by: Jaroslaw Pelczar <j.pelczar@samsung.com>
6 years agoAdd test case for certificate rewriter 90/163990/1
Jaroslaw Pelczar [Thu, 14 Dec 2017 10:46:31 +0000 (11:46 +0100)]
Add test case for certificate rewriter

Change-Id: I10a3746c12ba922becb1e92b8e746d6c01b57338
Signed-off-by: Jaroslaw Pelczar <j.pelczar@samsung.com>
6 years agoImplement x509 certificate rewriter 89/163989/1
Jaroslaw Pelczar [Thu, 14 Dec 2017 06:30:47 +0000 (07:30 +0100)]
Implement x509 certificate rewriter

This class will rewrite broken x509 chains into correct order.

Change-Id: I58b7a312f39443d7740fcda2bef94b089ca24090
Signed-off-by: Jaroslaw Pelczar <j.pelczar@samsung.com>
6 years agoAdd some simple unit tests for hw_api 93/163493/1
Uladzislau Harbuz [Mon, 11 Dec 2017 13:47:36 +0000 (14:47 +0100)]
Add some simple unit tests for hw_api

Change-Id: If1fa9dfcec2afc437e00d2940378223c04ea6697

6 years agochange user/group from key-manager to security_fw 37/163437/2 accepted/tizen/4.0/unified/20171214.050336 accepted/tizen/4.0/unified/20171219.171734 accepted/tizen/unified/20171212.064720 submit/tizen/20171212.022906 submit/tizen_4.0/20171213.075947 submit/tizen_4.0/20171219.114031
Dongsun Lee [Mon, 11 Dec 2017 07:10:14 +0000 (16:10 +0900)]
change user/group from key-manager to security_fw

Change-Id: I8854d29a2ce01f3ba0460492b904ed0f05228744
Signed-off-by: Dongsun Lee <ds73.lee@samsung.com>
6 years agoUse Cynara for access control 76/163276/1
Jaroslaw Pelczar [Tue, 5 Dec 2017 07:35:42 +0000 (08:35 +0100)]
Use Cynara for access control

Change-Id: I42e7aebfd0369301877e023ad5721547098b20df
Signed-off-by: Jaroslaw Pelczar <j.pelczar@samsung.com>
6 years agodcm-client: remove debug level logs, leave only error logs 75/163275/1
Jaroslaw Pelczar [Tue, 5 Dec 2017 06:18:30 +0000 (07:18 +0100)]
dcm-client: remove debug level logs, leave only error logs

Change-Id: I65f9f68274c5407ed6f51df2db81ca8298233d9e
Signed-off-by: Jaroslaw Pelczar <j.pelczar@samsung.com>
6 years ago[cmake] Add missing include directory 74/163274/1
Jaroslaw Pelczar [Tue, 5 Dec 2017 05:43:59 +0000 (06:43 +0100)]
[cmake] Add missing include directory

Change-Id: I0d6be92ff596bee9eab05a0286b924335276ae33
Signed-off-by: Jaroslaw Pelczar <j.pelczar@samsung.com>
6 years agohw_api_test: use random test data 73/163273/1
Jaroslaw Pelczar [Tue, 5 Dec 2017 05:37:32 +0000 (06:37 +0100)]
hw_api_test: use random test data

Also print data using boost::algorithm::hex

Change-Id: I57981550c4101e593916851073fa73f753f1a505
Signed-off-by: Jaroslaw Pelczar <j.pelczar@samsung.com>
6 years agoHandle valid case for hash_size==0 72/163272/1
Jaroslaw Pelczar [Tue, 5 Dec 2017 05:32:09 +0000 (06:32 +0100)]
Handle valid case for hash_size==0

If hash size is 0 then MD algorithm must not be NONE, in this
case hash_size is extracted from expected length for MD algorithm.
If MD algorithm is not NONE, then hash_size is validated against
the algorithm's expected input length.

Change-Id: Ib95d8138ce6a21c364a5d7f88910fde15e32a026
Signed-off-by: Jaroslaw Pelczar <j.pelczar@samsung.com>
6 years agohw_api_test: refactor to use C++ wrappers for mbedtls 71/163271/1
Jaroslaw Pelczar [Tue, 5 Dec 2017 05:29:49 +0000 (06:29 +0100)]
hw_api_test: refactor to use C++ wrappers for mbedtls

Change-Id: I8b593f4a8ca3de9f4ac938cb65667bafccf71d06
Signed-off-by: Jaroslaw Pelczar <j.pelczar@samsung.com>
6 years agoMove mbedtls_wrapper.h to shared subdirectory 70/163270/1
Jaroslaw Pelczar [Tue, 5 Dec 2017 05:05:46 +0000 (06:05 +0100)]
Move mbedtls_wrapper.h to shared subdirectory

Change-Id: I7de8872bb943429ae38618a20f4e7f85248a75d1
Signed-off-by: Jaroslaw Pelczar <j.pelczar@samsung.com>
6 years agosee backend: create mbedtls compatible ASN.1 ECDSA signature 69/163269/1
Jaroslaw Pelczar [Mon, 4 Dec 2017 10:59:29 +0000 (11:59 +0100)]
see backend: create mbedtls compatible ASN.1 ECDSA signature

Change-Id: I0dd2133f1c5d687221f9d5290713cc15a0e97744
Signed-off-by: Jaroslaw Pelczar <j.pelczar@samsung.com>
6 years agohw_api_test: show more errors and update signature verification 68/163268/1
Jaroslaw Pelczar [Mon, 4 Dec 2017 10:20:32 +0000 (11:20 +0100)]
hw_api_test: show more errors and update signature verification

Change-Id: I4ba040beff40e16db60e5982525cac33d223ae6b
Signed-off-by: Jaroslaw Pelczar <j.pelczar@samsung.com>
6 years agohw_api_test: add hash signature verification 67/163267/1
Jaroslaw Pelczar [Mon, 4 Dec 2017 10:03:10 +0000 (11:03 +0100)]
hw_api_test: add hash signature verification

Change-Id: I56fcd9f41cdaad50728f0fb9226b06e4235f0fb3
Signed-off-by: Jaroslaw Pelczar <j.pelczar@samsung.com>
6 years agoAdded certificate reversing for broken libSEE API 66/163266/1
Jaroslaw Pelczar [Mon, 4 Dec 2017 09:07:23 +0000 (10:07 +0100)]
Added certificate reversing for broken libSEE API

Change-Id: I3ce62b70675feb4fa05a81ec357bea0c58a92bca
Signed-off-by: Jaroslaw Pelczar <j.pelczar@samsung.com>
6 years agodcm-client: add linker version script 65/163265/1
Jaroslaw Pelczar [Mon, 4 Dec 2017 07:01:23 +0000 (08:01 +0100)]
dcm-client: add linker version script

Change-Id: I3536085c5c2c4786666b322210918e569864d860
Signed-off-by: Jaroslaw Pelczar <j.pelczar@samsung.com>
6 years agoUse artik security framework without external dependency 64/163264/1
Jaroslaw Pelczar [Mon, 4 Dec 2017 06:10:33 +0000 (07:10 +0100)]
Use artik security framework without external dependency

Change-Id: If6533199a1cbfc1f4b6f36abacb96b3bfabaecc0
Signed-off-by: Jaroslaw Pelczar <j.pelczar@samsung.com>
6 years agoInitial source commit 63/163263/1
Jarek Pelczar [Tue, 21 Nov 2017 13:07:48 +0000 (14:07 +0100)]
Initial source commit

Change-Id: Ia5a0abd9f6b64e37aca07ecfb0b3b7476a0f7394
Signed-off-by: Jaroslaw Pelczar <j.pelczar@samsung.com>
6 years agoInitial empty repository master
Tizen Infrastructure [Wed, 15 Nov 2017 10:22:23 +0000 (10:22 +0000)]
Initial empty repository