summaryrefslogtreecommitdiff
path: root/src/certs.cpp
diff options
context:
space:
mode:
authorsangwan.kwon <sangwan.kwon@samsung.com>2016-02-25 14:19:12 +0900
committersangwan.kwon <sangwan.kwon@samsung.com>2016-02-25 15:31:59 +0900
commit43cb8a8eeb0819e1b1fe25d142187075b25237b0 (patch)
tree5754cd0980d35c316025e3953414dfac09dbc067 /src/certs.cpp
parenta49b608fe94e1c8f6a16f721a24f605967948867 (diff)
downloadcert-checker-43cb8a8eeb0819e1b1fe25d142187075b25237b0.tar.gz
cert-checker-43cb8a8eeb0819e1b1fe25d142187075b25237b0.tar.bz2
cert-checker-43cb8a8eeb0819e1b1fe25d142187075b25237b0.zip
Delete unuse data, function
* key-manager uses only a chain for OCSP Check * url is no longer needed Change-Id: I8fb1e8baa6834c79a487ff865c0c6452b34078f1 Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
Diffstat (limited to 'src/certs.cpp')
-rw-r--r--src/certs.cpp86
1 files changed, 2 insertions, 84 deletions
diff --git a/src/certs.cpp b/src/certs.cpp
index 9c76b71..67c6900 100644
--- a/src/certs.cpp
+++ b/src/certs.cpp
@@ -33,7 +33,6 @@
#include <vcore/Certificate.h>
#include <ckm/ckm-type.h>
#include <ckm/ckm-raw-buffer.h>
-#include <tzplatform_config.h>
#include <cchecker/certs.h>
#include <cchecker/log.h>
@@ -106,7 +105,7 @@ Certs::Certs()
Certs::~Certs()
{}
-void Certs::get_certificates (app_t &app, ocsp_urls_t &ocsp_urls)
+void Certs::get_certificates(app_t &app)
{
// build chain using pkgmgr-info
std::map<int, int> sig_type;
@@ -123,90 +122,9 @@ void Certs::get_certificates (app_t &app, ocsp_urls_t &ocsp_urls)
app.signatures.emplace_back(std::move(chain));
}
}
-
- // get ocsp urls using cert-svc
- if (0 != tzplatform_set_user(app.uid)) {
- LogError("Cannot set user: tzplatform_set_user has failed");
- return;
- }
-
- if (app.app_id == TEMP_APP_ID) {
- LogDebug("Temporary app_id. Searching for apps in package.");
- search_app(app, ocsp_urls);
- }
- else {
- const char *pkg_path = tzplatform_mkpath(TZ_USER_APP, app.pkg_id.c_str());
- std::string app_path = std::string(pkg_path) + std::string("/") + app.app_id;
- find_app_signatures (app, app_path, ocsp_urls);
- }
-}
-
-/* Since there's no information about application in signal,
- * and we've got information only about package, we have to check
- * all applications that belongs to that package
- */
-void Certs::search_app (app_t &app, ocsp_urls_t &ocsp_urls)
-{
- DIR *dp;
- struct dirent *entry;
- const char *pkg_path = tzplatform_mkpath(TZ_USER_APP, app.pkg_id.c_str());
- if (!pkg_path) {
- LogError("tzplatform_mkpath has returned NULL for TZ_USER_APP");
- return;
- }
-
- dp = opendir(pkg_path);
- if (dp != NULL) {
- while ((entry = readdir(dp))) {
- if (strcmp(entry->d_name, ".") != 0 && strcmp(entry->d_name, "..") != 0 && entry->d_type == DT_DIR) {
- LogDebug("Found app: " << entry->d_name);
- std::string app_path = std::string(pkg_path) + std::string("/") + std::string(entry->d_name);
- find_app_signatures(app, app_path, ocsp_urls);
- }
- }
- closedir(dp); //close directory
- }
- else
- LogError("Couldn't open the package directory.");
-}
-
-// Together with certificates we can pull out OCSP URLs
-void Certs::find_app_signatures (app_t &app, const std::string &app_path, ocsp_urls_t &ocsp_urls)
-{
- // FIXME : delete unuse parameter
- (void) app;
-
- ValidationCore::SignatureFinder signature_finder(app_path);
- ValidationCore::SignatureFileInfoSet signature_files;
-
- if (signature_finder.find(signature_files) !=
- ValidationCore::SignatureFinder::NO_ERROR) {
- LogError("Error while searching for signatures in " << app_path.c_str());
- return;
- }
- LogDebug("Number of signature files: " << signature_files.size());
-
- LogDebug("Searching for certificates");
- for (auto &iter : signature_files) {
- LogDebug("Checking signature");
- ValidationCore::CertificateList certs;
- ValidationCore::SignatureValidator validator(iter);
-
- for (auto &cert_iter : certs) {
- // check OCSP URL
- std::string ocsp_url = (*cert_iter).getOCSPURL();
- if (!ocsp_url.empty()) {
- std::string issuer = (*cert_iter).getCommonName(ValidationCore::Certificate::FIELD_ISSUER);
- int64_t time = (*cert_iter).getNotBefore();
- url_t url(issuer, ocsp_url, time);
- ocsp_urls.push_back(url);
- LogDebug("Found OCSP URL: " << ocsp_url << " for issuer: " << issuer << ", time: " << time);
- }
- }
- }
}
-Certs::ocsp_response_t Certs::check_ocsp_chain (const chain_t &chain)
+Certs::ocsp_response_t Certs::check_ocsp_chain(const chain_t &chain)
{
CKM::CertificateShPtrVector vect_ckm_chain;