You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
159 lines
6.2 KiB
159 lines
6.2 KiB
#
|
|
# This file is part of pyasn1-modules software.
|
|
#
|
|
# Created by Russ Housley
|
|
# Copyright (c) 2019, Vigil Security, LLC
|
|
# License: http://snmplabs.com/pyasn1/license.html
|
|
#
|
|
|
|
import sys
|
|
|
|
from pyasn1.codec.der.decoder import decode as der_decode
|
|
from pyasn1.codec.der.encoder import encode as der_encode
|
|
|
|
from pyasn1.type import char
|
|
from pyasn1.type import namedtype
|
|
from pyasn1.type import univ
|
|
|
|
from pyasn1_modules import pem
|
|
from pyasn1_modules import rfc5280
|
|
from pyasn1_modules import rfc5652
|
|
from pyasn1_modules import rfc6402
|
|
|
|
try:
|
|
import unittest2 as unittest
|
|
except ImportError:
|
|
import unittest
|
|
|
|
|
|
class BackwardCompatibilityTestCase(unittest.TestCase):
|
|
pem_text = """\
|
|
MIIEJQYJKoZIhvcNAQcCoIIEFjCCBBICAQMxCzAJBgUrDgMCGgUAMIIDAgYIKwYBBQUHDAKgggL0
|
|
BIIC8DCCAuwweDB2AgECBgorBgEEAYI3CgoBMWUwYwIBADADAgEBMVkwVwYJKwYBBAGCNxUUMUow
|
|
SAIBBQwZcGl0dWNoYTEuZW1lYS5ocHFjb3JwLm5ldAwMRU1FQVxwaXR1Y2hhDBpDTUNSZXFHZW5l
|
|
cmF0b3IudnNob3N0LmV4ZTCCAmqgggJmAgEBMIICXzCCAcgCAQAwADCBnzANBgkqhkiG9w0BAQEF
|
|
AAOBjQAwgYkCgYEA0jm7SSSm2wyEAzuNKtFZFJKo91SrJq9wQwEhEKHDavZwMQOm1rZ2PF8NWCEb
|
|
PqrhToQ7rtiGLSZa4dF4bzgmBqQ9aoSfEX4jISt31Vy+skHidXjHHpbsjT24NPhrZgANivL7CxD6
|
|
Ft+s7qS1gL4HRm2twQkqSwOLrE/q2QeXl2UCAwEAAaCCAR0wGgYKKwYBBAGCNw0CAzEMFgo2LjIu
|
|
OTIwMC4yMD4GCSqGSIb3DQEJDjExMC8wHQYDVR0OBBYEFMW2skn88gxhONWZQA4sWGBDb68yMA4G
|
|
A1UdDwEB/wQEAwIHgDBXBgkrBgEEAYI3FRQxSjBIAgEFDBlwaXR1Y2hhMS5lbWVhLmhwcWNvcnAu
|
|
bmV0DAxFTUVBXHBpdHVjaGEMGkNNQ1JlcUdlbmVyYXRvci52c2hvc3QuZXhlMGYGCisGAQQBgjcN
|
|
AgIxWDBWAgECHk4ATQBpAGMAcgBvAHMAbwBmAHQAIABTAHQAcgBvAG4AZwAgAEMAcgB5AHAAdABv
|
|
AGcAcgBhAHAAaABpAGMAIABQAHIAbwB2AGkAZABlAHIDAQAwDQYJKoZIhvcNAQEFBQADgYEAJZlu
|
|
mxjtCxSOQi27jsVdd3y8NSIlzNv0b3LqmzvAly6L+CstXcnuG2MPQqPH9R7tbJonGUniBQO9sQ7C
|
|
KhYWj2gfhiEkSID82lV5chINVUFKoUlSiEhWr0tPGgvOaqdsKQcrHfzrsBbFkhDqrFSVy7Yivbnh
|
|
qYszKrOjJKiiCPMwADAAMYH5MIH2AgEDgBTFtrJJ/PIMYTjVmUAOLFhgQ2+vMjAJBgUrDgMCGgUA
|
|
oD4wFwYJKoZIhvcNAQkDMQoGCCsGAQUFBwwCMCMGCSqGSIb3DQEJBDEWBBTFTkK/OifaFjwqHiJu
|
|
xM7qXcg/VzANBgkqhkiG9w0BAQEFAASBgKfC6jOi1Wgy4xxDCQVK9+e5tktL8wE/j2cb9JSqq+aU
|
|
5UxEgXEw7q7BoYZCAzcxMRriGzakXr8aXHcgkRJ7XcFvLPUjpmGg9SOZ2sGW4zQdWAwImN/i8loc
|
|
xicQmJP+VoMHo/ZpjFY9fYCjNZUArgKsEwK/s+p9yrVVeB1Nf8Mn
|
|
"""
|
|
|
|
def testDerCodec(self):
|
|
layers = { }
|
|
layers.update(rfc5652.cmsContentTypesMap)
|
|
|
|
getNextLayer = {
|
|
rfc5652.id_ct_contentInfo: lambda x: x['contentType'],
|
|
rfc5652.id_signedData: lambda x: x['encapContentInfo']['eContentType'],
|
|
rfc6402.id_cct_PKIData: lambda x: None
|
|
}
|
|
|
|
getNextSubstrate = {
|
|
rfc5652.id_ct_contentInfo: lambda x: x['content'],
|
|
rfc5652.id_signedData: lambda x: x['encapContentInfo']['eContent'],
|
|
rfc6402.id_cct_PKIData: lambda x: None
|
|
}
|
|
|
|
substrate = pem.readBase64fromText(self.pem_text)
|
|
|
|
next_layer = rfc5652.id_ct_contentInfo
|
|
while next_layer:
|
|
asn1Object, rest = der_decode(substrate, asn1Spec=layers[next_layer])
|
|
assert not rest
|
|
assert asn1Object.prettyPrint()
|
|
assert der_encode(asn1Object) == substrate
|
|
|
|
substrate = getNextSubstrate[next_layer](asn1Object)
|
|
next_layer = getNextLayer[next_layer](asn1Object)
|
|
|
|
|
|
def testOpenTypes(self):
|
|
class ClientInformation(univ.Sequence):
|
|
pass
|
|
|
|
ClientInformation.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('clientId', univ.Integer()),
|
|
namedtype.NamedType('MachineName', char.UTF8String()),
|
|
namedtype.NamedType('UserName', char.UTF8String()),
|
|
namedtype.NamedType('ProcessName', char.UTF8String())
|
|
)
|
|
|
|
class EnrollmentCSP(univ.Sequence):
|
|
pass
|
|
|
|
EnrollmentCSP.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('KeySpec', univ.Integer()),
|
|
namedtype.NamedType('Name', char.BMPString()),
|
|
namedtype.NamedType('Signature', univ.BitString())
|
|
)
|
|
|
|
openTypeMap = {
|
|
# attributes
|
|
univ.ObjectIdentifier('1.3.6.1.4.1.311.13.2.3'): char.IA5String(),
|
|
univ.ObjectIdentifier('1.3.6.1.4.1.311.13.2.2'): EnrollmentCSP(),
|
|
univ.ObjectIdentifier('1.3.6.1.4.1.311.21.20'): ClientInformation(),
|
|
# algorithm identifier parameters
|
|
univ.ObjectIdentifier('1.2.840.113549.1.1.1'): univ.Null(""),
|
|
univ.ObjectIdentifier('1.2.840.113549.1.1.5'): univ.Null(""),
|
|
univ.ObjectIdentifier('1.2.840.113549.1.1.11'): univ.Null(""),
|
|
}
|
|
|
|
openTypeMap.update(rfc5652.cmsAttributesMap)
|
|
openTypeMap.update(rfc6402.cmcControlAttributesMap)
|
|
|
|
substrate = pem.readBase64fromText(self.pem_text)
|
|
asn1Object, rest = der_decode(substrate,
|
|
asn1Spec=rfc5652.ContentInfo(),
|
|
decodeOpenTypes=True)
|
|
assert not rest
|
|
assert asn1Object.prettyPrint()
|
|
assert der_encode(asn1Object) == substrate
|
|
|
|
eci = asn1Object['content']['encapContentInfo']
|
|
assert eci['eContentType'] == rfc6402.id_cct_PKIData
|
|
substrate = eci['eContent']
|
|
asn1Object, rest = der_decode(substrate,
|
|
asn1Spec=rfc6402.PKIData(),
|
|
openTypes=openTypeMap,
|
|
decodeOpenTypes=True)
|
|
assert not rest
|
|
assert asn1Object.prettyPrint()
|
|
assert der_encode(asn1Object) == substrate
|
|
|
|
for req in asn1Object['reqSequence']:
|
|
cr = req['tcr']['certificationRequest']
|
|
|
|
sig_alg = cr['signatureAlgorithm']
|
|
assert sig_alg['algorithm'] in openTypeMap.keys()
|
|
assert sig_alg['parameters'] == univ.Null("")
|
|
|
|
cri = cr['certificationRequestInfo']
|
|
spki_alg = cri['subjectPublicKeyInfo']['algorithm']
|
|
assert spki_alg['algorithm'] in openTypeMap.keys()
|
|
assert spki_alg['parameters'] == univ.Null("")
|
|
|
|
attrs = cr['certificationRequestInfo']['attributes']
|
|
for attr in attrs:
|
|
assert attr['attrType'] in openTypeMap.keys()
|
|
if attr['attrType'] == univ.ObjectIdentifier('1.3.6.1.4.1.311.13.2.3'):
|
|
assert attr['attrValues'][0] == "6.2.9200.2"
|
|
else:
|
|
assert attr['attrValues'][0].hasValue()
|
|
|
|
|
|
suite = unittest.TestLoader().loadTestsFromModule(sys.modules[__name__])
|
|
|
|
if __name__ == '__main__':
|
|
unittest.TextTestRunner(verbosity=2).run(suite)
|