blob: 958f0059ad27e9f11a9fb82c3773e098551cdc9f [file] [log] [blame]
Alexander Afanasyev7e721412017-01-11 13:36:08 -08001/* -*- Mode:C++; c-file-style:"gnu"; indent-tabs-mode:nil; -*- */
Davide Pesavento74daf742018-11-23 18:14:13 -05002/*
Alexander Afanasyev09236c22020-06-03 13:42:38 -04003 * Copyright (c) 2013-2020 Regents of the University of California.
Alexander Afanasyev7e721412017-01-11 13:36:08 -08004 *
5 * This file is part of ndn-cxx library (NDN C++ library with eXperimental eXtensions).
6 *
7 * ndn-cxx library is free software: you can redistribute it and/or modify it under the
8 * terms of the GNU Lesser General Public License as published by the Free Software
9 * Foundation, either version 3 of the License, or (at your option) any later version.
10 *
11 * ndn-cxx library is distributed in the hope that it will be useful, but WITHOUT ANY
12 * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
13 * PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details.
14 *
15 * You should have received copies of the GNU General Public License and GNU Lesser
16 * General Public License along with ndn-cxx, e.g., in COPYING.md file. If not, see
17 * <http://www.gnu.org/licenses/>.
18 *
19 * See AUTHORS.md for complete list of ndn-cxx authors and contributors.
20 */
21
Alexander Afanasyev09236c22020-06-03 13:42:38 -040022#include "ndn-cxx/security/validation-policy-simple-hierarchy.hpp"
Alexander Afanasyev7e721412017-01-11 13:36:08 -080023
Davide Pesavento7e780642018-11-24 15:51:34 -050024#include "tests/boost-test.hpp"
Alexander Afanasyev09236c22020-06-03 13:42:38 -040025#include "tests/unit/security/validator-fixture.hpp"
Alexander Afanasyev7e721412017-01-11 13:36:08 -080026
27#include <boost/mpl/vector.hpp>
Eric Newberryb74bbda2020-06-18 19:33:58 -070028#include <boost/scope_exit.hpp>
Alexander Afanasyev7e721412017-01-11 13:36:08 -080029
30namespace ndn {
31namespace security {
Alexander Afanasyev09236c22020-06-03 13:42:38 -040032inline namespace v2 {
Alexander Afanasyev7e721412017-01-11 13:36:08 -080033namespace tests {
34
35using namespace ndn::tests;
36
37BOOST_AUTO_TEST_SUITE(Security)
Alexander Afanasyev7e721412017-01-11 13:36:08 -080038BOOST_FIXTURE_TEST_SUITE(TestValidationPolicySimpleHierarchy,
39 HierarchicalValidatorFixture<ValidationPolicySimpleHierarchy>)
40
41typedef boost::mpl::vector<Interest, Data> Packets;
42
43BOOST_AUTO_TEST_CASE_TEMPLATE(Validate, Packet, Packets)
44{
Eric Newberryb74bbda2020-06-18 19:33:58 -070045 // Can't set CanBePrefix on Interests in this test case because of template
46 // TODO: Remove in #4582
47 BOOST_SCOPE_EXIT(void) {
48 Interest::s_errorIfCanBePrefixUnset = true;
49 } BOOST_SCOPE_EXIT_END
50 Interest::s_errorIfCanBePrefixUnset = false;
51
Alexander Afanasyev09236c22020-06-03 13:42:38 -040052 Packet unsignedPacket("/Security/ValidatorFixture/Sub1/Sub2/Packet");
Alexander Afanasyev7e721412017-01-11 13:36:08 -080053
54 Packet packet = unsignedPacket;
55 VALIDATE_FAILURE(packet, "Unsigned");
56
57 packet = unsignedPacket;
58 m_keyChain.sign(packet, signingWithSha256());
59 VALIDATE_FAILURE(packet, "Policy doesn't accept Sha256Digest signature");
60
61 packet = unsignedPacket;
62 m_keyChain.sign(packet, signingByIdentity(identity));
63 VALIDATE_SUCCESS(packet, "Should get accepted, as signed by the anchor");
64
65 packet = unsignedPacket;
66 m_keyChain.sign(packet, signingByIdentity(subIdentity));
67 VALIDATE_SUCCESS(packet, "Should get accepted, as signed by the policy-compliant cert");
68
69 packet = unsignedPacket;
70 m_keyChain.sign(packet, signingByIdentity(otherIdentity));
71 VALIDATE_FAILURE(packet, "Should fail, as signed by the policy-violating cert");
72
73 packet = unsignedPacket;
74 m_keyChain.sign(packet, signingByIdentity(subSelfSignedIdentity));
75 VALIDATE_FAILURE(packet, "Should fail, because subSelfSignedIdentity is not a trust anchor");
76
77 // TODO add checks with malformed packets
78}
79
Alexander Afanasyev8afba422020-06-11 17:56:21 -040080BOOST_AUTO_TEST_CASE(NonKeyNameInsideLocator)
81{
82 // auto cert = identity.getDefaultKey().getDefaultCertificate().wireEncode();
83 // std::cerr << "Certificate idCert{\"" << toHex(cert.wire(), cert.size()) << "\"_block};" << std::endl;
84
85 // cert = subIdentity.getDefaultKey().getDefaultCertificate().wireEncode();
86 // std::cerr << "Certificate subIdCert{\"" << toHex(cert.wire(), cert.size()) << "\"_block};" << std::endl;
87
88 // Data packet("/Security/ValidatorFixture/Sub1/Sub2/Packet");
89 // m_keyChain.sign(packet, signingByIdentity(subIdentity));
90 // std::cerr << "Data packet{\"" << toHex(packet.wireEncode().wire(), packet.wireEncode().size()) << "\"_block};" << std::endl;
91
92 // These are hard-coded with a key locator that is the exact name of the certificate
93 Certificate idCert{"06FD014C073C08085365637572697479081056616C696461746F724669787475726508034B455"
94 "9080816971C408D162A0A080473656C660809FD000001499D598CA0140918010219040036EE80155B30593013060"
95 "72A8648CE3D020106082A8648CE3D03010703420004F795BB9A7D51ECC4491605D49ADFCB46598D8260F872F0F15"
96 "15FA4EA7259F2A27C25B5ADAFA8D548C5FA0FBB88AB7769E986057FCAB52C7AF17A7964C47DF57B165C1B01031C2"
97 "D072B08085365637572697479081056616C696461746F724669787475726508034B4559080816971C408D162A0AF"
98 "D00FD26FD00FE0F313937303031303154303030303030FD00FF0F323033343131303654303533353332174630440"
99 "2200E9C538FE7285B006476C86F1CCCEC4398C939D1F6CE2E4F3537EB145252EE1502201A1C50E647CAF90CAA76A"
100 "065452D1D560E5BB7122A7553002E7DFBCA80FCB422"_block};
101 Certificate subIdCert{"06FD0188074408085365637572697479081056616C696461746F7246697874757265080453"
102 "75623108034B45590808D76A31B01E14092B0806706172656E740809FD000001499D598CA0140918010219040036"
103 "EE80155B3059301306072A8648CE3D020106082A8648CE3D0301070342000441783BEDE80DEF6F2910D78E1BD0AD"
104 "7EF033A62F510A7578D1FC8F7601AC2B7709B27BBF225423A865964FA523B9746169FDB03C68B2FAC8D75DA0C755"
105 "8122AF16901B01031C3E073C08085365637572697479081056616C696461746F724669787475726508034B455908"
106 "0816971C408D162A0A080473656C660809FD000001499D598CA0FD00FD26FD00FE0F323031343131313154303533"
107 "353332FD00FF0F323033343131303654303533353332FD01021FFD02001BFD02010474797065FD02020F7375622D"
108 "636572746966696361746517463044022013CEFBF0E15EA6C85B26C56B550316A8A0F6F45510CCBDA4188E7732EF"
109 "1E81B6022026BDC1B6F32BE163F20E379B86EF686F5B8B2B57B6494DE89D5D503C8E3C6125"_block};
110 Data packet{"06CD073008085365637572697479081056616C696461746F724669787475726508045375623108045375"
111 "623208065061636B657414001500164B1B01031C46074408085365637572697479081056616C696461746F724669"
112 "787475726508045375623108034B45590808D76A31B01E14092B0806706172656E740809FD000001499D598CA017"
113 "483046022100BDD3E0EF2385658825EB73E87A02D1A16AA8ACE50840C1B91782836164AACA3B0221008007B3EBA9"
114 "B7638BD204766B08AF6E4221CDB88156CC7DA13CD916610D6D3AED"_block};
115
116 this->cache.insert(idCert);
117 this->cache.insert(subIdCert);
118 this->validator.loadAnchor("", std::move(idCert));
119
120 BOOST_REQUIRE(packet.getKeyLocator());
121 BOOST_CHECK_EQUAL(packet.getKeyLocator()->getName(),
122 "/Security/ValidatorFixture/Sub1/KEY/%D7j1%B0%1E%14%09%2B/parent/%FD%00%00%01I%9DY%8C%A0");
123
124 VALIDATE_SUCCESS(packet, "Should get accepted, as signed by the policy-compliant cert");
125}
126
127BOOST_AUTO_TEST_SUITE_END() // TestValidationPolicySimpleHierarchy
Alexander Afanasyev7e721412017-01-11 13:36:08 -0800128BOOST_AUTO_TEST_SUITE_END() // Security
129
130} // namespace tests
Alexander Afanasyev09236c22020-06-03 13:42:38 -0400131} // inline namespace v2
Alexander Afanasyev7e721412017-01-11 13:36:08 -0800132} // namespace security
133} // namespace ndn