1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
|
/*
* certification service
*
* Copyright (c) 2000 - 2011 Samsung Electronics Co., Ltd All Rights Reserved
*
* Contact: Kidong Kim <kd0228.kim@samsung.com>
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*
*/
/* To prevent inadvertently including a header twice */
#ifndef CERT_SERVICE_H
#define CERT_SERVICE_H
#ifdef __cplusplus
extern "C" {
#endif // __cplusplus
/*********************************************************************************/
/* Constants */
/*********************************************************************************/
/* max size */
#define CERT_SVC_MAX_CERT_TYPE_SIZE 50
#define CERT_SVC_MAX_FILE_NAME_SIZE 256
#define CERT_SVC_MAX_BUFFER_SIZE (4 * 1024)
/* error codes */
#define CERT_SVC_ERR_NO_ERROR 0
#define CERT_SVC_ERR_UNKNOWN_ERROR -1
#define CERT_SVC_ERR_BROKEN_CHAIN -2
#define CERT_SVC_ERR_NO_ROOT_CERT -3
#define CERT_SVC_ERR_INVALID_SIGNATURE -4
#define CERT_SVC_ERR_INVALID_CERTIFICATE -5
#define CERT_SVC_ERR_FILE_IO -6
#define CERT_SVC_ERR_UNSUPPORTED_HASH_TYPE -7
#define CERT_SVC_ERR_UNSUPPORTED_KEY_TYPE -8
#define CERT_SVC_ERR_INVALID_OPERATION -9
#define CERT_SVC_ERR_BUFFER_TOO_SMALL -10
#define CERT_SVC_ERR_NO_MORE_CERTIFICATE -11
#define CERT_SVC_ERR_DUPLICATED_CERTIFICATE -12
#define CERT_SVC_ERR_SYSTEM_CALL -13
#define CERT_SVC_ERR_MEMORY_ALLOCATION -14
#define CERT_SVC_ERR_INVALID_PARAMETER -15
#define CERT_SVC_ERR_PERMISSION_DENIED -16
#define CERT_SVC_ERR_IS_EXPIRED -17
#ifdef TIZEN_FEATURE_CERT_SVC_OCSP_CRL
#define CERT_SVC_ERR_OCSP_REVOKED -18
#define CERT_SVC_ERR_OCSP_UNKNOWN -19
#define CERT_SVC_ERR_OCSP_VERIFICATION_ERROR -20
#define CERT_SVC_ERR_OCSP_NO_SUPPORT -21
#define CERT_SVC_ERR_OCSP_NETWORK_FAILED -22
#define CERT_SVC_ERR_OCSP_INTERNAL -23
#define CERT_SVC_ERR_OCSP_REMOTE -24
#endif
#define CERT_SVC_ERR_INVALID_NO_DEVICE_PROFILE -25
#define CERT_SVC_ERR_INVALID_DEVICE_UNIQUE_ID -26
#define CERT_SVC_ERR_INVALID_SDK_DEFAULT_AUTHOR_CERT -27
#define CERT_SVC_ERR_IN_DISTRIBUTOR_CASE_AUTHOR_CERT -28
#define CERT_SVC_ERR_IN_AUTHOR_CASE_DISTRIBUTOR_CERT -29
/*********************************************************************************/
/* Type definitions */
/*********************************************************************************/
typedef enum {
SEARCH_FIELD_START = 0,
ISSUER_COUNTRY = 0,
ISSUER_STATEORPROVINCE,
ISSUER_LOCALITY,
ISSUER_ORGANIZATION,
ISSUER_ORGANIZATIONUNIT,
ISSUER_COMMONNAME,
ISSUER_EMAILADDRESS,
ISSUER_STR,
SUBJECT_COUNTRY,
SUBJECT_STATEORPROVINCE,
SUBJECT_LOCALITY,
SUBJECT_ORGANIZATION,
SUBJECT_ORGANIZATIONUNIT,
SUBJECT_COMMONNAME,
SUBJECT_EMAILADDRESS,
SUBJECT_STR,
SEARCH_FIELD_END = 16,
} search_field;
typedef enum cert_svc_visibility_t {
CERT_SVC_VISIBILITY_DEVELOPER = 1,
CERT_SVC_VISIBILITY_PUBLIC = 1 << 6,
CERT_SVC_VISIBILITY_PARTNER = 1 << 7,
CERT_SVC_VISIBILITY_PARTNER_OPERATOR = 1 << 8,
CERT_SVC_VISIBILITY_PARTNER_MANUFACTURER = 1 << 9,
CERT_SVC_VISIBILITY_PLATFORM = 1 << 10
} cert_svc_visibility;
typedef enum cert_svc_type_t {
CERT_SVC_TYPE_NO_TYPE = 0,
CERT_SVC_TYPE_TEST = 1 << 1,
CERT_SVC_TYPE_VERIFY = 1 << 2,
CERT_SVC_TYPE_STORE = 1 << 3
} cert_svc_type;
typedef struct {
unsigned int firstSecond;
unsigned int firstMinute;
unsigned int firstHour;
unsigned int firstDay;
unsigned int firstMonth;
unsigned int firstYear;
unsigned int secondSecond;
unsigned int secondMinute;
unsigned int secondHour;
unsigned int secondDay;
unsigned int secondMonth;
unsigned int secondYear;
} cert_svc_validity_fld_data;
typedef struct {
unsigned char* countryName;
unsigned char* stateOrProvinceName;
unsigned char* localityName;
unsigned char* organizationName;
unsigned char* organizationUnitName;
unsigned char* commonName;
unsigned char* emailAddress;
} cert_svc_name_fld_data;
typedef struct {
unsigned char* name;
unsigned char* data;
int datasize;
} cert_svc_cert_fld_desc;
typedef struct {
unsigned int version;
unsigned int serialNumber;
unsigned char* sigAlgo;
unsigned char* issuerStr;
cert_svc_name_fld_data issuer;
cert_svc_validity_fld_data validPeriod;
unsigned char* subjectStr;
cert_svc_name_fld_data subject;
unsigned char* pubKeyAlgo;
int pubKeyLen;
unsigned char* pubKey;
unsigned char* issuerUID;
unsigned char* subjectUID;
} cert_svc_information_fields;
typedef struct {
unsigned int numOfFields;
cert_svc_cert_fld_desc* fields;
} cert_svc_extension_fields;
typedef struct {
char type[4];
cert_svc_information_fields info;
cert_svc_extension_fields ext;
unsigned char* signatureAlgo;
unsigned char* signatureData;
int signatureLen;
} cert_svc_cert_descriptor;
typedef struct {
unsigned char* data;
char type[4];
unsigned int size;
} cert_svc_mem_buff;
typedef struct _cert_svc_linked_list {
cert_svc_mem_buff* certificate;
struct _cert_svc_linked_list* next;
} cert_svc_linked_list;
typedef struct _cert_filename_list {
char* filename;
struct _cert_filename_list* next;
} cert_svc_filename_list;
typedef struct {
cert_svc_mem_buff* certBuf;
cert_svc_cert_descriptor* certDesc;
cert_svc_linked_list* certLink;
cert_svc_filename_list* fileNames;
} CERT_CONTEXT;
/*********************************************************************************/
/* Function definitions */
/*********************************************************************************/
CERT_CONTEXT* cert_svc_cert_context_init();
int cert_svc_cert_context_final(CERT_CONTEXT* ctx);
int cert_svc_load_buf_to_context(CERT_CONTEXT* ctx, unsigned char* buf);
int cert_svc_load_file_to_context(CERT_CONTEXT* ctx, const char* filePath);
int cert_svc_load_PFX_file_to_context(CERT_CONTEXT* ctx, unsigned char** privateKey, int* priKeyLen, const char* filePath, char* passPhrase);
int cert_svc_push_buf_into_context(CERT_CONTEXT* ctx, unsigned char* buf);
int cert_svc_push_file_into_context(CERT_CONTEXT* ctx, const char* filePath);
int cert_svc_add_certificate_to_store(const char* filePath, const char* location);
int cert_svc_delete_certificate_from_store(const char* fileName, const char* location);
int cert_svc_verify_certificate(CERT_CONTEXT* ctx, int* validity);
int cert_svc_verify_package_certificate(CERT_CONTEXT* ctx, int* validity, const char* signatureFile);
int cert_svc_verify_certificate_with_caflag(CERT_CONTEXT* ctx, int* validity);
int cert_svc_verify_signature(CERT_CONTEXT* ctx, unsigned char* message, int msgLen, unsigned char* signature, char* algo, int* validity);
int cert_svc_extract_certificate_data(CERT_CONTEXT* ctx);
int cert_svc_search_certificate(CERT_CONTEXT* ctx, search_field fldName, char* fldData);
int cert_svc_get_visibility(CERT_CONTEXT* ctx, int* visibility);
int cert_svc_get_visibility_by_root_certificate(const char* cert_data, int data_len, int* visibility);
#ifdef TIZEN_FEATURE_CERT_SVC_OCSP_CRL
int cert_svc_check_ocsp_status(CERT_CONTEXT* ctx, const char* uri);
#endif
char* cert_svc_get_certificate_crt_file_path(void);
int cert_svc_util_parse_name_fld_data(unsigned char* str, cert_svc_name_fld_data* fld);
#ifdef __cplusplus
}
#endif // __cplusplus
#endif // CERT_SERVICE_H
|
