fcc_bundle_certificate_chain_utils.c

00001 // ----------------------------------------------------------------------------
00002 // Copyright 2016-2017 ARM Ltd.
00003 //  
00004 // Licensed under the Apache License, Version 2.0 (the "License");
00005 // you may not use this file except in compliance with the License.
00006 // You may obtain a copy of the License at
00007 //  
00008 //     http://www.apache.org/licenses/LICENSE-2.0
00009 //  
00010 // Unless required by applicable law or agreed to in writing, software
00011 // distributed under the License is distributed on an "AS IS" BASIS,
00012 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
00013 // See the License for the specific language governing permissions and
00014 // limitations under the License.
00015 // ----------------------------------------------------------------------------
00016 
00017 #include "fcc_bundle_handler.h"
00018 #include "cn-cbor.h"
00019 #include "pv_error_handling.h"
00020 #include "fcc_bundle_utils.h"
00021 #include "key_config_manager.h"
00022 #include "fcc_output_info_handler.h"
00023 #include "fcc_malloc.h"
00024 #include "fcc_time_profiling.h"
00025 
00026 /** Processes  certificate chain list.
00027 * The function extracts data parameters for each certificate chain and stores it.
00028 *
00029 * @param cert_chains_list_cb[in]   The cbor structure with certificate chain list.
00030 *
00031 * @return
00032 *     true for success, false otherwise.
00033 */
00034 fcc_status_e  fcc_bundle_process_certificate_chains(const cn_cbor *cert_chains_list_cb)
00035 {
00036     bool status = false;
00037     fcc_status_e  fcc_status = FCC_STATUS_SUCCESS;
00038     fcc_status_e  output_info_fcc_status = FCC_STATUS_SUCCESS;
00039     kcm_status_e  kcm_result = KCM_STATUS_SUCCESS;
00040     uint32_t cert_chain_index = 0;
00041     uint32_t cert_index = 0;
00042     cn_cbor *cert_chain_cb = NULL;
00043     cn_cbor *cert_cb = NULL;
00044     fcc_bundle_data_param_s certificate_chain;
00045     uint8_t *certificate_data;
00046     size_t certificate_data_size = 0;
00047     kcm_cert_chain_handle cert_chain_handle = NULL;
00048 
00049     SA_PV_LOG_TRACE_FUNC_ENTER_NO_ARGS();
00050     SA_PV_ERR_RECOVERABLE_RETURN_IF((cert_chains_list_cb == NULL), fcc_status = FCC_STATUS_INVALID_PARAMETER, "Invalid cert_chains_list_cb pointer");
00051 
00052     //Initialize data struct
00053     memset(&certificate_chain, 0, sizeof(fcc_bundle_data_param_s));
00054 
00055     for (cert_chain_index = 0; cert_chain_index < (uint32_t)cert_chains_list_cb->length; cert_chain_index++) {
00056 
00057         FCC_SET_START_TIMER(fcc_certificate_chain_timer);
00058 
00059         certificate_data = NULL;
00060 
00061         fcc_bundle_clean_and_free_data_param(&certificate_chain);
00062 
00063         //Get certificate chain CBOR struct at index cert_chain_index
00064         cert_chain_cb = cn_cbor_index(cert_chains_list_cb, cert_chain_index);
00065         SA_PV_ERR_RECOVERABLE_RETURN_IF((cert_chain_cb == NULL), fcc_status = FCC_STATUS_BUNDLE_ERROR, "Failed to get certificate chain at index (%" PRIu32 ") ", cert_chain_index);
00066         SA_PV_ERR_RECOVERABLE_RETURN_IF((cert_chain_cb->type != CN_CBOR_MAP), fcc_status = FCC_STATUS_BUNDLE_ERROR, "Wrong type of certificate chain CBOR struct at index (%" PRIu32 ") ", cert_chain_index);
00067 
00068         status = fcc_bundle_get_data_param(cert_chain_cb, &certificate_chain);
00069         SA_PV_ERR_RECOVERABLE_GOTO_IF((status != true), fcc_status = FCC_STATUS_BUNDLE_ERROR, exit, "Failed to get certificate chain data at index (%" PRIu32 ") ", cert_chain_index);
00070 
00071         // create chain
00072         kcm_result = kcm_cert_chain_create(&cert_chain_handle, certificate_chain.name, certificate_chain.name_len, (size_t)certificate_chain.array_cn->length, true);
00073         SA_PV_ERR_RECOVERABLE_GOTO_IF((kcm_result != KCM_STATUS_SUCCESS), fcc_status = FCC_STATUS_KCM_ERROR, exit, "Failed to create certificate chain");
00074         //Get all certificates in certificate chain and store it
00075         for (cert_index = 0; cert_index < (uint32_t)certificate_chain.array_cn->length; cert_index++) {
00076 
00077             cert_cb = cn_cbor_index(certificate_chain.array_cn, (unsigned int)cert_index);
00078             SA_PV_ERR_RECOVERABLE_GOTO_IF((cert_cb == NULL), fcc_status = FCC_STATUS_BUNDLE_ERROR, exit, "Failed to get cert cbor at index (%" PRIu32 ") ", cert_index);
00079 
00080             status = get_data_buffer_from_cbor(cert_cb, &certificate_data, &certificate_data_size);
00081             SA_PV_ERR_RECOVERABLE_GOTO_IF((status == false || certificate_data == NULL || certificate_data_size == 0), fcc_status = FCC_STATUS_BUNDLE_ERROR, exit, "Failed to get cert data at index (%" PRIu32 ") ", cert_index);
00082 
00083             kcm_result = kcm_cert_chain_add_next(cert_chain_handle, certificate_data, certificate_data_size);
00084             SA_PV_ERR_RECOVERABLE_GOTO_IF((kcm_result != KCM_STATUS_SUCCESS), fcc_status = FCC_STATUS_KCM_ERROR, exit, "Failed to add certificate chain at index (%" PRIu32 ") ", cert_chain_index);
00085         }
00086         // close chain
00087         kcm_result = kcm_cert_chain_close(cert_chain_handle);
00088         cert_chain_handle = NULL;
00089         SA_PV_ERR_RECOVERABLE_GOTO_IF((kcm_result != KCM_STATUS_SUCCESS), fcc_status = FCC_STATUS_KCM_ERROR, exit, "Failed to close certificate chain");
00090         FCC_END_TIMER((char*)certificate_chain.name, certificate_chain.name_len, fcc_certificate_chain_timer);
00091     }
00092 
00093 exit:
00094     if (kcm_result != KCM_STATUS_SUCCESS) {
00095         if (cert_chain_handle != NULL) {
00096             kcm_cert_chain_close(cert_chain_handle);
00097         }
00098         output_info_fcc_status = fcc_bundle_store_error_info(certificate_chain.name, certificate_chain.name_len, kcm_result);
00099     }
00100     fcc_bundle_clean_and_free_data_param(&certificate_chain);
00101     SA_PV_ERR_RECOVERABLE_RETURN_IF((output_info_fcc_status != FCC_STATUS_SUCCESS),
00102                                     fcc_status = FCC_STATUS_OUTPUT_INFO_ERROR,
00103                                     "Failed to create output kcm_status error %d", kcm_result);
00104 
00105     SA_PV_LOG_TRACE_FUNC_EXIT_NO_ARGS();
00106 
00107     return fcc_status;
00108 }