Google Git
Sign in
android / platform / external / cronet / 181bb755f589c53bd3e47be5f2a1883b9c33a562 / . / net / test / cert_builder.cc
blob: 899f1b2fb5f1c36b0180e49171da8c4dd4f8ebaf [file] [log] [blame]
// Copyright 2019 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "net/test/cert_builder.h"
#include <map>
#include <memory>
#include <string>
#include <utility>
#include <vector>
#include "base/files/file_path.h"
#include "base/memory/ptr_util.h"
#include "base/memory/scoped_refptr.h"
#include "base/notreached.h"
#include "base/ranges/algorithm.h"
#include "base/strings/string_number_conversions.h"
#include "base/strings/string_util.h"
#include "base/time/time.h"
#include "crypto/ec_private_key.h"
#include "crypto/openssl_util.h"
#include "crypto/rsa_private_key.h"
#include "crypto/sha2.h"
#include "net/cert/asn1_util.h"
#include "net/cert/ct_objects_extractor.h"
#include "net/cert/ct_serialization.h"
#include "net/cert/signed_certificate_timestamp.h"
#include "net/cert/time_conversions.h"
#include "net/cert/x509_util.h"
#include "net/test/cert_test_util.h"
#include "net/test/key_util.h"
#include "net/test/test_data_directory.h"
#include "testing/gtest/include/gtest/gtest.h"
#include "third_party/abseil-cpp/absl/types/optional.h"
#include "third_party/boringssl/src/include/openssl/evp.h"
#include "third_party/boringssl/src/include/openssl/mem.h"
#include "third_party/boringssl/src/pki/certificate_policies.h"
#include "third_party/boringssl/src/pki/extended_key_usage.h"
#include "third_party/boringssl/src/pki/input.h"
#include "third_party/boringssl/src/pki/parse_certificate.h"
#include "third_party/boringssl/src/pki/parse_values.h"
#include "third_party/boringssl/src/pki/parser.h"
#include "third_party/boringssl/src/pki/verify_signed_data.h"
#include "url/gurl.h"
namespace net {
namespace {
constexpr char kSimpleChainHostname[] = "www.example.com";
std::string Sha256WithRSAEncryption() {
const uint8_t kSha256WithRSAEncryption[] = {0x30, 0x0D, 0x06, 0x09, 0x2a,
0x86, 0x48, 0x86, 0xf7, 0x0d,
0x01, 0x01, 0x0b, 0x05, 0x00};
return std::string(std::begin(kSha256WithRSAEncryption),
std::end(kSha256WithRSAEncryption));
}
std::string Sha1WithRSAEncryption() {
const uint8_t kSha1WithRSAEncryption[] = {0x30, 0x0D, 0x06, 0x09, 0x2a,
0x86, 0x48, 0x86, 0xf7, 0x0d,
0x01, 0x01, 0x05, 0x05, 0x00};
return std::string(std::begin(kSha1WithRSAEncryption),
std::end(kSha1WithRSAEncryption));
}
std::string EcdsaWithSha256() {
const uint8_t kDer[] = {0x30, 0x0a, 0x06, 0x08, 0x2a, 0x86,
0x48, 0xce, 0x3d, 0x04, 0x03, 0x02};
return std::string(std::begin(kDer), std::end(kDer));
}
std::string EcdsaWithSha1() {
const uint8_t kDer[] = {0x30, 0x09, 0x06, 0x07, 0x2a, 0x86,
0x48, 0xce, 0x3d, 0x04, 0x01};
return std::string(std::begin(kDer), std::end(kDer));
}
// Adds bytes (specified as a StringPiece) to the given CBB.
// The argument ordering follows the boringssl CBB_* api style.
bool CBBAddBytes(CBB* cbb, base::StringPiece bytes) {
return CBB_add_bytes(cbb, reinterpret_cast<const uint8_t*>(bytes.data()),
bytes.size());
}
// Adds bytes (from fixed size array) to the given CBB.
// The argument ordering follows the boringssl CBB_* api style.
template <size_t N>
bool CBBAddBytes(CBB* cbb, const uint8_t (&data)[N]) {
return CBB_add_bytes(cbb, data, N);
}
// Finalizes the CBB to a std::string.
std::string FinishCBB(CBB* cbb) {
size_t cbb_len;
uint8_t* cbb_bytes;
if (!CBB_finish(cbb, &cbb_bytes, &cbb_len)) {
ADD_FAILURE() << "CBB_finish() failed";
return std::string();
}
bssl::UniquePtr<uint8_t> delete_bytes(cbb_bytes);
return std::string(reinterpret_cast<char*>(cbb_bytes), cbb_len);
}
// Finalizes the CBB to a std::vector.
std::vector<uint8_t> FinishCBBToVector(CBB* cbb) {
size_t cbb_len;
uint8_t* cbb_bytes;
if (!CBB_finish(cbb, &cbb_bytes, &cbb_len)) {
ADD_FAILURE() << "CBB_finish() failed";
return {};
}
bssl::UniquePtr<uint8_t> delete_bytes(cbb_bytes);
return std::vector<uint8_t>(cbb_bytes, cbb_bytes + cbb_len);
}
} // namespace
CertBuilder::SctConfig::SctConfig() = default;
CertBuilder::SctConfig::SctConfig(std::string log_id,
bssl::UniquePtr<EVP_PKEY> log_key,
base::Time timestamp)
: log_id(std::move(log_id)),
log_key(std::move(log_key)),
timestamp(timestamp) {}
CertBuilder::SctConfig::SctConfig(const SctConfig& other)
: SctConfig(other.log_id,
bssl::UpRef(other.log_key.get()),
other.timestamp) {}
CertBuilder::SctConfig::SctConfig(SctConfig&&) = default;
CertBuilder::SctConfig::~SctConfig() = default;
CertBuilder::SctConfig& CertBuilder::SctConfig::operator=(
const SctConfig& other) {
log_id = other.log_id;
log_key = bssl::UpRef(other.log_key.get());
timestamp = other.timestamp;
return *this;
}
CertBuilder::SctConfig& CertBuilder::SctConfig::operator=(SctConfig&&) =
default;
CertBuilder::CertBuilder(CRYPTO_BUFFER* orig_cert, CertBuilder* issuer)
: CertBuilder(orig_cert, issuer, /*unique_subject_key_identifier=*/true) {}
// static
std::unique_ptr<CertBuilder> CertBuilder::FromFile(
const base::FilePath& cert_and_key_file,
CertBuilder* issuer) {
scoped_refptr<X509Certificate> cert = ImportCertFromFile(cert_and_key_file);
if (!cert)
return nullptr;
bssl::UniquePtr<EVP_PKEY> private_key(
key_util::LoadEVP_PKEYFromPEM(cert_and_key_file));
if (!private_key)
return nullptr;
auto builder = base::WrapUnique(new CertBuilder(cert->cert_buffer(), issuer));
builder->key_ = std::move(private_key);
return builder;
}
// static
std::unique_ptr<CertBuilder> CertBuilder::FromStaticCert(CRYPTO_BUFFER* cert,
EVP_PKEY* key) {
std::unique_ptr<CertBuilder> builder = base::WrapUnique(
new CertBuilder(cert, nullptr, /*unique_subject_key_identifier=*/false));
// |cert_|, |key_|, and |subject_tlv_| must be initialized for |builder| to
// function as the |issuer| of another CertBuilder.
builder->cert_ = bssl::UpRef(cert);
builder->key_ = bssl::UpRef(key);
base::StringPiece subject_tlv;
CHECK(asn1::ExtractSubjectFromDERCert(
x509_util::CryptoBufferAsStringPiece(cert), &subject_tlv));
builder->subject_tlv_ = std::string(subject_tlv);
return builder;
}
// static
std::unique_ptr<CertBuilder> CertBuilder::FromStaticCertFile(
const base::FilePath& cert_and_key_file) {
scoped_refptr<X509Certificate> cert = ImportCertFromFile(cert_and_key_file);
if (!cert)
return nullptr;
bssl::UniquePtr<EVP_PKEY> private_key(
key_util::LoadEVP_PKEYFromPEM(cert_and_key_file));
if (!private_key)
return nullptr;
return CertBuilder::FromStaticCert(cert->cert_buffer(), private_key.get());
}
// static
std::unique_ptr<CertBuilder> CertBuilder::FromSubjectPublicKeyInfo(
base::span<const uint8_t> spki_der,
CertBuilder* issuer) {
DCHECK(issuer);
auto builder = std::make_unique<CertBuilder>(/*orig_cert=*/nullptr, issuer);
CBS cbs;
CBS_init(&cbs, spki_der.data(), spki_der.size());
builder->key_ = bssl::UniquePtr<EVP_PKEY>(EVP_parse_public_key(&cbs));
// Check that there was no error in `EVP_parse_public_key` and that it
// consumed the entire public key.
if (!builder->key_ || (CBS_len(&cbs) != 0))
return nullptr;
return builder;
}
CertBuilder::~CertBuilder() = default;
// static
std::vector<std::unique_ptr<CertBuilder>> CertBuilder::CreateSimpleChain(
size_t chain_length) {
std::vector<std::unique_ptr<CertBuilder>> chain;
base::Time not_before = base::Time::Now() - base::Days(7);
base::Time not_after = base::Time::Now() + base::Days(7);
CertBuilder* parent_builder = nullptr;
for (size_t remaining_chain_length = chain_length; remaining_chain_length;
remaining_chain_length--) {
auto builder = std::make_unique<CertBuilder>(nullptr, parent_builder);
builder->SetValidity(not_before, not_after);
if (remaining_chain_length > 1) {
// CA properties:
builder->SetBasicConstraints(/*is_ca=*/true, /*path_len=*/-1);
builder->SetKeyUsages(
{bssl::KEY_USAGE_BIT_KEY_CERT_SIGN, bssl::KEY_USAGE_BIT_CRL_SIGN});
} else {
// Leaf properties:
builder->SetBasicConstraints(/*is_ca=*/false, /*path_len=*/-1);
builder->SetKeyUsages({bssl::KEY_USAGE_BIT_DIGITAL_SIGNATURE});
builder->SetExtendedKeyUsages({bssl::der::Input(bssl::kServerAuth)});
builder->SetSubjectAltName(kSimpleChainHostname);
}
parent_builder = builder.get();
chain.push_back(std::move(builder));
}
base::ranges::reverse(chain);
return chain;
}
// static
std::array<std::unique_ptr<CertBuilder>, 3> CertBuilder::CreateSimpleChain3() {
auto chain = CreateSimpleChain(3);
return {std::move(chain[0]), std::move(chain[1]), std::move(chain[2])};
}
// static
std::array<std::unique_ptr<CertBuilder>, 2> CertBuilder::CreateSimpleChain2() {
auto chain = CreateSimpleChain(2);
return {std::move(chain[0]), std::move(chain[1])};
}
// static
absl::optional<bssl::SignatureAlgorithm>
CertBuilder::DefaultSignatureAlgorithmForKey(EVP_PKEY* key) {
if (EVP_PKEY_id(key) == EVP_PKEY_RSA)
return bssl::SignatureAlgorithm::kRsaPkcs1Sha256;
if (EVP_PKEY_id(key) == EVP_PKEY_EC)
return bssl::SignatureAlgorithm::kEcdsaSha256;
return absl::nullopt;
}
// static
bool CertBuilder::SignData(bssl::SignatureAlgorithm signature_algorithm,
base::StringPiece tbs_data,
EVP_PKEY* key,
CBB* out_signature) {
if (!key)
return false;
int expected_pkey_id = 1;
const EVP_MD* digest;
switch (signature_algorithm) {
case bssl::SignatureAlgorithm::kRsaPkcs1Sha1:
expected_pkey_id = EVP_PKEY_RSA;
digest = EVP_sha1();
break;
case bssl::SignatureAlgorithm::kRsaPkcs1Sha256:
expected_pkey_id = EVP_PKEY_RSA;
digest = EVP_sha256();
break;
case bssl::SignatureAlgorithm::kRsaPkcs1Sha384:
expected_pkey_id = EVP_PKEY_RSA;
digest = EVP_sha384();
break;
case bssl::SignatureAlgorithm::kRsaPkcs1Sha512:
expected_pkey_id = EVP_PKEY_RSA;
digest = EVP_sha512();
break;
case bssl::SignatureAlgorithm::kEcdsaSha1:
expected_pkey_id = EVP_PKEY_EC;
digest = EVP_sha1();
break;
case bssl::SignatureAlgorithm::kEcdsaSha256:
expected_pkey_id = EVP_PKEY_EC;
digest = EVP_sha256();
break;
case bssl::SignatureAlgorithm::kEcdsaSha384:
expected_pkey_id = EVP_PKEY_EC;
digest = EVP_sha384();
break;
case bssl::SignatureAlgorithm::kEcdsaSha512:
expected_pkey_id = EVP_PKEY_EC;
digest = EVP_sha512();
break;
case bssl::SignatureAlgorithm::kRsaPssSha256:
case bssl::SignatureAlgorithm::kRsaPssSha384:
case bssl::SignatureAlgorithm::kRsaPssSha512:
// Unsupported algorithms.
return false;
}
return expected_pkey_id == EVP_PKEY_id(key) &&
SignDataWithDigest(digest, tbs_data, key, out_signature);
}
// static
bool CertBuilder::SignDataWithDigest(const EVP_MD* digest,
base::StringPiece tbs_data,
EVP_PKEY* key,
CBB* out_signature) {
const uint8_t* tbs_bytes = reinterpret_cast<const uint8_t*>(tbs_data.data());
bssl::ScopedEVP_MD_CTX ctx;
uint8_t* sig_out;
size_t sig_len;
return EVP_DigestSignInit(ctx.get(), nullptr, digest, nullptr, key) &&
EVP_DigestSign(ctx.get(), nullptr, &sig_len, tbs_bytes,
tbs_data.size()) &&
CBB_reserve(out_signature, &sig_out, sig_len) &&
EVP_DigestSign(ctx.get(), sig_out, &sig_len, tbs_bytes,
tbs_data.size()) &&
CBB_did_write(out_signature, sig_len);
}
// static
std::string CertBuilder::SignatureAlgorithmToDer(
bssl::SignatureAlgorithm signature_algorithm) {
switch (signature_algorithm) {
case bssl::SignatureAlgorithm::kRsaPkcs1Sha1:
return Sha1WithRSAEncryption();
case bssl::SignatureAlgorithm::kRsaPkcs1Sha256:
return Sha256WithRSAEncryption();
case bssl::SignatureAlgorithm::kEcdsaSha1:
return EcdsaWithSha1();
case bssl::SignatureAlgorithm::kEcdsaSha256:
return EcdsaWithSha256();
default:
ADD_FAILURE();
return std::string();
}
}
// static
std::string CertBuilder::MakeRandomHexString(size_t num_bytes) {
std::vector<char> rand_bytes;
rand_bytes.resize(num_bytes);
base::RandBytes(rand_bytes.data(), rand_bytes.size());
return base::HexEncode(rand_bytes.data(), rand_bytes.size());
}
// static
std::vector<uint8_t> CertBuilder::BuildNameWithCommonNameOfType(
base::StringPiece common_name,
unsigned common_name_tag) {
// See RFC 4519.
static const uint8_t kCommonName[] = {0x55, 0x04, 0x03};
// See RFC 5280, section 4.1.2.4.
bssl::ScopedCBB cbb;
CBB rdns, rdn, attr, type, value;
if (!CBB_init(cbb.get(), 64) ||
!CBB_add_asn1(cbb.get(), &rdns, CBS_ASN1_SEQUENCE) ||
!CBB_add_asn1(&rdns, &rdn, CBS_ASN1_SET) ||
!CBB_add_asn1(&rdn, &attr, CBS_ASN1_SEQUENCE) ||
!CBB_add_asn1(&attr, &type, CBS_ASN1_OBJECT) ||
!CBBAddBytes(&type, kCommonName) ||
!CBB_add_asn1(&attr, &value, common_name_tag) ||
!CBBAddBytes(&value, common_name)) {
ADD_FAILURE();
return {};
}
return FinishCBBToVector(cbb.get());
}
void CertBuilder::SetCertificateVersion(bssl::CertificateVersion version) {
version_ = version;
Invalidate();
}
void CertBuilder::SetExtension(const bssl::der::Input& oid,
std::string value,
bool critical) {
auto& extension_value = extensions_[oid.AsString()];
extension_value.critical = critical;
extension_value.value = std::move(value);
Invalidate();
}
void CertBuilder::EraseExtension(const bssl::der::Input& oid) {
extensions_.erase(oid.AsString());
Invalidate();
}
void CertBuilder::ClearExtensions() {
extensions_.clear();
Invalidate();
}
void CertBuilder::SetBasicConstraints(bool is_ca, int path_len) {
// From RFC 5280:
//
// BasicConstraints ::= SEQUENCE {
// cA BOOLEAN DEFAULT FALSE,
// pathLenConstraint INTEGER (0..MAX) OPTIONAL }
bssl::ScopedCBB cbb;
CBB basic_constraints;
ASSERT_TRUE(CBB_init(cbb.get(), 64));
ASSERT_TRUE(CBB_add_asn1(cbb.get(), &basic_constraints, CBS_ASN1_SEQUENCE));
if (is_ca)
ASSERT_TRUE(CBB_add_asn1_bool(&basic_constraints, true));
if (path_len >= 0)
ASSERT_TRUE(CBB_add_asn1_uint64(&basic_constraints, path_len));
SetExtension(bssl::der::Input(bssl::kBasicConstraintsOid),
FinishCBB(cbb.get()),
/*critical=*/true);
}
namespace {
void AddNameConstraintsSubTrees(CBB* cbb,
const std::vector<std::string>& dns_names) {
CBB subtrees;
ASSERT_TRUE(CBB_add_asn1(
cbb, &subtrees, CBS_ASN1_CONTEXT_SPECIFIC | CBS_ASN1_CONSTRUCTED | 0));
for (const auto& name : dns_names) {
CBB subtree;
ASSERT_TRUE(CBB_add_asn1(&subtrees, &subtree, CBS_ASN1_SEQUENCE));
CBB general_name;
ASSERT_TRUE(
CBB_add_asn1(&subtree, &general_name, CBS_ASN1_CONTEXT_SPECIFIC | 2));
ASSERT_TRUE(CBBAddBytes(&general_name, name));
ASSERT_TRUE(CBB_flush(&subtrees));
}
ASSERT_TRUE(CBB_flush(cbb));
}
} // namespace
void CertBuilder::SetNameConstraintsDnsNames(
const std::vector<std::string>& permitted_dns_names,
const std::vector<std::string>& excluded_dns_names) {
// From RFC 5280:
//
// id-ce-nameConstraints OBJECT IDENTIFIER ::= { id-ce 30 }
//
// NameConstraints ::= SEQUENCE {
// permittedSubtrees [0] GeneralSubtrees OPTIONAL,
// excludedSubtrees [1] GeneralSubtrees OPTIONAL }
//
// GeneralSubtrees ::= SEQUENCE SIZE (1..MAX) OF GeneralSubtree
//
// GeneralSubtree ::= SEQUENCE {
// base GeneralName,
// minimum [0] BaseDistance DEFAULT 0,
// maximum [1] BaseDistance OPTIONAL }
//
// BaseDistance ::= INTEGER (0..MAX)
if (permitted_dns_names.empty() && excluded_dns_names.empty()) {
EraseExtension(bssl::der::Input(bssl::kNameConstraintsOid));
return;
}
bssl::ScopedCBB cbb;
CBB name_constraints;
ASSERT_TRUE(CBB_init(cbb.get(), 64));
ASSERT_TRUE(CBB_add_asn1(cbb.get(), &name_constraints, CBS_ASN1_SEQUENCE));
if (!permitted_dns_names.empty()) {
ASSERT_NO_FATAL_FAILURE(
AddNameConstraintsSubTrees(&name_constraints, permitted_dns_names));
}
if (!excluded_dns_names.empty()) {
ASSERT_NO_FATAL_FAILURE(
AddNameConstraintsSubTrees(&name_constraints, excluded_dns_names));
}
SetExtension(bssl::der::Input(bssl::kNameConstraintsOid),
FinishCBB(cbb.get()),
/*critical=*/true);
}
void CertBuilder::SetCaIssuersUrl(const GURL& url) {
SetCaIssuersAndOCSPUrls({url}, {});
}
void CertBuilder::SetCaIssuersAndOCSPUrls(
const std::vector<GURL>& ca_issuers_urls,
const std::vector<GURL>& ocsp_urls) {
std::vector<std::pair<bssl::der::Input, GURL>> entries;
for (const auto& url : ca_issuers_urls)
entries.emplace_back(bssl::der::Input(bssl::kAdCaIssuersOid), url);
for (const auto& url : ocsp_urls)
entries.emplace_back(bssl::der::Input(bssl::kAdOcspOid), url);
if (entries.empty()) {
EraseExtension(bssl::der::Input(bssl::kAuthorityInfoAccessOid));
return;
}
// From RFC 5280:
//
// AuthorityInfoAccessSyntax ::=
// SEQUENCE SIZE (1..MAX) OF AccessDescription
//
// AccessDescription ::= SEQUENCE {
// accessMethod OBJECT IDENTIFIER,
// accessLocation GeneralName }
bssl::ScopedCBB cbb;
CBB aia;
ASSERT_TRUE(CBB_init(cbb.get(), 64));
ASSERT_TRUE(CBB_add_asn1(cbb.get(), &aia, CBS_ASN1_SEQUENCE));
for (const auto& entry : entries) {
CBB access_description, access_method, access_location;
ASSERT_TRUE(CBB_add_asn1(&aia, &access_description, CBS_ASN1_SEQUENCE));
ASSERT_TRUE(
CBB_add_asn1(&access_description, &access_method, CBS_ASN1_OBJECT));
ASSERT_TRUE(CBBAddBytes(&access_method, entry.first.AsStringView()));
ASSERT_TRUE(CBB_add_asn1(&access_description, &access_location,
CBS_ASN1_CONTEXT_SPECIFIC | 6));
ASSERT_TRUE(CBBAddBytes(&access_location, entry.second.spec()));
ASSERT_TRUE(CBB_flush(&aia));
}
SetExtension(bssl::der::Input(bssl::kAuthorityInfoAccessOid),
FinishCBB(cbb.get()));
}
void CertBuilder::SetCrlDistributionPointUrl(const GURL& url) {
SetCrlDistributionPointUrls({url});
}
void CertBuilder::SetCrlDistributionPointUrls(const std::vector<GURL>& urls) {
bssl::ScopedCBB cbb;
ASSERT_TRUE(CBB_init(cbb.get(), 64));
CBB dps, dp, dp_name, dp_fullname;
// CRLDistributionPoints ::= SEQUENCE SIZE (1..MAX) OF DistributionPoint
ASSERT_TRUE(CBB_add_asn1(cbb.get(), &dps, CBS_ASN1_SEQUENCE));
// DistributionPoint ::= SEQUENCE {
// distributionPoint [0] DistributionPointName OPTIONAL,
// reasons [1] ReasonFlags OPTIONAL,
// cRLIssuer [2] bssl::GeneralNames OPTIONAL }
ASSERT_TRUE(CBB_add_asn1(&dps, &dp, CBS_ASN1_SEQUENCE));
ASSERT_TRUE(CBB_add_asn1(
&dp, &dp_name, CBS_ASN1_CONTEXT_SPECIFIC | CBS_ASN1_CONSTRUCTED | 0));
// DistributionPointName ::= CHOICE {
// fullName [0] bssl::GeneralNames,
// nameRelativeToCRLIssuer [1] bssl::RelativeDistinguishedName }
ASSERT_TRUE(
CBB_add_asn1(&dp_name, &dp_fullname,
CBS_ASN1_CONTEXT_SPECIFIC | CBS_ASN1_CONSTRUCTED | 0));
// bssl::GeneralNames ::= SEQUENCE SIZE (1..MAX) OF GeneralName
// GeneralName ::= CHOICE {
// uniformResourceIdentifier [6] IA5String,
for (const auto& url : urls) {
CBB dp_url;
ASSERT_TRUE(
CBB_add_asn1(&dp_fullname, &dp_url, CBS_ASN1_CONTEXT_SPECIFIC | 6));
ASSERT_TRUE(CBBAddBytes(&dp_url, url.spec()));
ASSERT_TRUE(CBB_flush(&dp_fullname));
}
SetExtension(bssl::der::Input(bssl::kCrlDistributionPointsOid),
FinishCBB(cbb.get()));
}
void CertBuilder::SetIssuerTLV(base::span<const uint8_t> issuer_tlv) {
if (issuer_tlv.empty())
issuer_tlv_ = absl::nullopt;
else
issuer_tlv_ = std::string(issuer_tlv.begin(), issuer_tlv.end());
Invalidate();
}
void CertBuilder::SetSubjectCommonName(base::StringPiece common_name) {
SetSubjectTLV(
BuildNameWithCommonNameOfType(common_name, CBS_ASN1_UTF8STRING));
Invalidate();
}
void CertBuilder::SetSubjectTLV(base::span<const uint8_t> subject_tlv) {
subject_tlv_.assign(subject_tlv.begin(), subject_tlv.end());
Invalidate();
}
void CertBuilder::SetSubjectAltName(base::StringPiece dns_name) {
SetSubjectAltNames({std::string(dns_name)}, {});
}
void CertBuilder::SetSubjectAltNames(
const std::vector<std::string>& dns_names,
const std::vector<IPAddress>& ip_addresses) {
// From RFC 5280:
//
// SubjectAltName ::= bssl::GeneralNames
//
// bssl::GeneralNames ::= SEQUENCE SIZE (1..MAX) OF GeneralName
//
// GeneralName ::= CHOICE {
// ...
// dNSName [2] IA5String,
// ...
// iPAddress [7] OCTET STRING,
// ... }
ASSERT_GT(dns_names.size() + ip_addresses.size(), 0U);
bssl::ScopedCBB cbb;
CBB general_names;
ASSERT_TRUE(CBB_init(cbb.get(), 64));
ASSERT_TRUE(CBB_add_asn1(cbb.get(), &general_names, CBS_ASN1_SEQUENCE));
if (!dns_names.empty()) {
for (const auto& name : dns_names) {
CBB general_name;
ASSERT_TRUE(CBB_add_asn1(&general_names, &general_name,
CBS_ASN1_CONTEXT_SPECIFIC | 2));
ASSERT_TRUE(CBBAddBytes(&general_name, name));
ASSERT_TRUE(CBB_flush(&general_names));
}
}
if (!ip_addresses.empty()) {
for (const auto& addr : ip_addresses) {
CBB general_name;
ASSERT_TRUE(CBB_add_asn1(&general_names, &general_name,
CBS_ASN1_CONTEXT_SPECIFIC | 7));
ASSERT_TRUE(
CBB_add_bytes(&general_name, addr.bytes().data(), addr.size()));
ASSERT_TRUE(CBB_flush(&general_names));
}
}
SetExtension(bssl::der::Input(bssl::kSubjectAltNameOid),
FinishCBB(cbb.get()));
}
void CertBuilder::SetKeyUsages(const std::vector<bssl::KeyUsageBit>& usages) {
ASSERT_GT(usages.size(), 0U);
int number_of_unused_bits = 0;
std::vector<uint8_t> bytes;
for (auto usage : usages) {
int bit_index = static_cast<int>(usage);
// Index of the byte that contains the bit.
size_t byte_index = bit_index / 8;
if (byte_index + 1 > bytes.size()) {
bytes.resize(byte_index + 1);
number_of_unused_bits = 8;
}
// Within a byte, bits are ordered from most significant to least
// significant. Convert |bit_index| to an index within the |byte_index|
// byte, measured from its least significant bit.
uint8_t bit_index_in_byte = 7 - (bit_index - byte_index * 8);
if (byte_index + 1 == bytes.size() &&
bit_index_in_byte < number_of_unused_bits) {
number_of_unused_bits = bit_index_in_byte;
}
bytes[byte_index] |= (1 << bit_index_in_byte);
}
// From RFC 5290:
// KeyUsage ::= BIT STRING {...}
bssl::ScopedCBB cbb;
CBB ku_cbb;
ASSERT_TRUE(CBB_init(cbb.get(), bytes.size() + 1));
ASSERT_TRUE(CBB_add_asn1(cbb.get(), &ku_cbb, CBS_ASN1_BITSTRING));
ASSERT_TRUE(CBB_add_u8(&ku_cbb, number_of_unused_bits));
ASSERT_TRUE(CBB_add_bytes(&ku_cbb, bytes.data(), bytes.size()));
SetExtension(bssl::der::Input(bssl::kKeyUsageOid), FinishCBB(cbb.get()),
/*critical=*/true);
}
void CertBuilder::SetExtendedKeyUsages(
const std::vector<bssl::der::Input>& purpose_oids) {
// From RFC 5280:
// ExtKeyUsageSyntax ::= SEQUENCE SIZE (1..MAX) OF KeyPurposeId
// KeyPurposeId ::= OBJECT IDENTIFIER
ASSERT_GT(purpose_oids.size(), 0U);
bssl::ScopedCBB cbb;
CBB eku;
ASSERT_TRUE(CBB_init(cbb.get(), 64));
ASSERT_TRUE(CBB_add_asn1(cbb.get(), &eku, CBS_ASN1_SEQUENCE));
for (const auto& oid : purpose_oids) {
CBB purpose_cbb;
ASSERT_TRUE(CBB_add_asn1(&eku, &purpose_cbb, CBS_ASN1_OBJECT));
ASSERT_TRUE(CBBAddBytes(&purpose_cbb, oid.AsStringView()));
ASSERT_TRUE(CBB_flush(&eku));
}
SetExtension(bssl::der::Input(bssl::kExtKeyUsageOid), FinishCBB(cbb.get()));
}
void CertBuilder::SetCertificatePolicies(
const std::vector<std::string>& policy_oids) {
// From RFC 5280:
// certificatePolicies ::= SEQUENCE SIZE (1..MAX) OF PolicyInformation
//
// PolicyInformation ::= SEQUENCE {
// policyIdentifier CertPolicyId,
// policyQualifiers SEQUENCE SIZE (1..MAX) OF
// PolicyQualifierInfo OPTIONAL }
//
// CertPolicyId ::= OBJECT IDENTIFIER
if (policy_oids.empty()) {
EraseExtension(bssl::der::Input(bssl::kCertificatePoliciesOid));
return;
}
bssl::ScopedCBB cbb;
CBB certificate_policies;
ASSERT_TRUE(CBB_init(cbb.get(), 64));
ASSERT_TRUE(
CBB_add_asn1(cbb.get(), &certificate_policies, CBS_ASN1_SEQUENCE));
for (const auto& oid : policy_oids) {
CBB policy_information, policy_identifier;
ASSERT_TRUE(CBB_add_asn1(&certificate_policies, &policy_information,
CBS_ASN1_SEQUENCE));
ASSERT_TRUE(
CBB_add_asn1(&policy_information, &policy_identifier, CBS_ASN1_OBJECT));
ASSERT_TRUE(
CBB_add_asn1_oid_from_text(&policy_identifier, oid.data(), oid.size()));
ASSERT_TRUE(CBB_flush(&certificate_policies));
}
SetExtension(bssl::der::Input(bssl::kCertificatePoliciesOid),
FinishCBB(cbb.get()));
}
void CertBuilder::SetPolicyMappings(
const std::vector<std::pair<std::string, std::string>>& policy_mappings) {
// From RFC 5280:
// PolicyMappings ::= SEQUENCE SIZE (1..MAX) OF SEQUENCE {
// issuerDomainPolicy CertPolicyId,
// subjectDomainPolicy CertPolicyId }
if (policy_mappings.empty()) {
EraseExtension(bssl::der::Input(bssl::kPolicyMappingsOid));
return;
}
bssl::ScopedCBB cbb;
CBB mappings_sequence;
ASSERT_TRUE(CBB_init(cbb.get(), 64));
ASSERT_TRUE(CBB_add_asn1(cbb.get(), &mappings_sequence, CBS_ASN1_SEQUENCE));
for (const auto& [issuer_domain_policy, subject_domain_policy] :
policy_mappings) {
CBB mapping_sequence;
CBB issuer_policy_object;
CBB subject_policy_object;
ASSERT_TRUE(
CBB_add_asn1(&mappings_sequence, &mapping_sequence, CBS_ASN1_SEQUENCE));
ASSERT_TRUE(CBB_add_asn1(&mapping_sequence, &issuer_policy_object,
CBS_ASN1_OBJECT));
ASSERT_TRUE(CBB_add_asn1_oid_from_text(&issuer_policy_object,
issuer_domain_policy.data(),
issuer_domain_policy.size()));
ASSERT_TRUE(CBB_add_asn1(&mapping_sequence, &subject_policy_object,
CBS_ASN1_OBJECT));
ASSERT_TRUE(CBB_add_asn1_oid_from_text(&subject_policy_object,
subject_domain_policy.data(),
subject_domain_policy.size()));
ASSERT_TRUE(CBB_flush(&mappings_sequence));
}
SetExtension(bssl::der::Input(bssl::kPolicyMappingsOid), FinishCBB(cbb.get()),
/*critical=*/true);
}
void CertBuilder::SetPolicyConstraints(
absl::optional<uint64_t> require_explicit_policy,
absl::optional<uint64_t> inhibit_policy_mapping) {
if (!require_explicit_policy.has_value() &&
!inhibit_policy_mapping.has_value()) {
EraseExtension(bssl::der::Input(bssl::kPolicyConstraintsOid));
return;
}
// From RFC 5280:
// PolicyConstraints ::= SEQUENCE {
// requireExplicitPolicy [0] SkipCerts OPTIONAL,
// inhibitPolicyMapping [1] SkipCerts OPTIONAL }
//
// SkipCerts ::= INTEGER (0..MAX)
bssl::ScopedCBB cbb;
CBB policy_constraints;
ASSERT_TRUE(CBB_init(cbb.get(), 64));
ASSERT_TRUE(CBB_add_asn1(cbb.get(), &policy_constraints, CBS_ASN1_SEQUENCE));
if (require_explicit_policy.has_value()) {
ASSERT_TRUE(CBB_add_asn1_uint64_with_tag(
&policy_constraints, *require_explicit_policy,
bssl::der::ContextSpecificPrimitive(0)));
}
if (inhibit_policy_mapping.has_value()) {
ASSERT_TRUE(CBB_add_asn1_uint64_with_tag(
&policy_constraints, *inhibit_policy_mapping,
bssl::der::ContextSpecificPrimitive(1)));
}
SetExtension(bssl::der::Input(bssl::kPolicyConstraintsOid),
FinishCBB(cbb.get()),
/*critical=*/true);
}
void CertBuilder::SetInhibitAnyPolicy(uint64_t skip_certs) {
// From RFC 5280:
// id-ce-inhibitAnyPolicy OBJECT IDENTIFIER ::= { id-ce 54 }
//
// InhibitAnyPolicy ::= SkipCerts
//
// SkipCerts ::= INTEGER (0..MAX)
bssl::ScopedCBB cbb;
ASSERT_TRUE(CBB_init(cbb.get(), 64));
ASSERT_TRUE(CBB_add_asn1_uint64(cbb.get(), skip_certs));
SetExtension(bssl::der::Input(bssl::kInhibitAnyPolicyOid),
FinishCBB(cbb.get()),
/*critical=*/true);
}
void CertBuilder::SetValidity(base::Time not_before, base::Time not_after) {
// From RFC 5280:
// Validity ::= SEQUENCE {
// notBefore Time,
// notAfter Time }
bssl::ScopedCBB cbb;
CBB validity;
ASSERT_TRUE(CBB_init(cbb.get(), 64));
ASSERT_TRUE(CBB_add_asn1(cbb.get(), &validity, CBS_ASN1_SEQUENCE));
ASSERT_TRUE(x509_util::CBBAddTime(&validity, not_before));
ASSERT_TRUE(x509_util::CBBAddTime(&validity, not_after));
validity_tlv_ = FinishCBB(cbb.get());
Invalidate();
}
void CertBuilder::SetSubjectKeyIdentifier(
const std::string& subject_key_identifier) {
ASSERT_FALSE(subject_key_identifier.empty());
// From RFC 5280:
// KeyIdentifier ::= OCTET STRING
// SubjectKeyIdentifier ::= KeyIdentifier
bssl::ScopedCBB cbb;
ASSERT_TRUE(CBB_init(cbb.get(), 32));
ASSERT_TRUE(CBB_add_asn1_octet_string(
cbb.get(),
reinterpret_cast<const uint8_t*>(subject_key_identifier.data()),
subject_key_identifier.size()));
// Replace the existing SKI. Note it MUST be non-critical, per RFC 5280.
SetExtension(bssl::der::Input(bssl::kSubjectKeyIdentifierOid),
FinishCBB(cbb.get()),
/*critical=*/false);
}
void CertBuilder::SetAuthorityKeyIdentifier(
const std::string& authority_key_identifier) {
// If an empty AKI is presented, simply erase the existing one. Creating
// an empty AKI is technically valid, but there's no use case for this.
// An empty AKI would an empty (ergo, non-unique) SKI on the issuer,
// which would violate RFC 5280, so using the empty value as a placeholder
// unless and until a use case emerges is fine.
if (authority_key_identifier.empty()) {
EraseExtension(bssl::der::Input(bssl::kAuthorityKeyIdentifierOid));
return;
}
// From RFC 5280:
//
// AuthorityKeyIdentifier ::= SEQUENCE {
// keyIdentifier [0] KeyIdentifier OPTIONAL,
// authorityCertIssuer [1] bssl::GeneralNames OPTIONAL,
// authorityCertSerialNumber [2] CertificateSerialNumber OPTIONAL }
//
// KeyIdentifier ::= OCTET STRING
bssl::ScopedCBB cbb;
CBB aki, aki_value;
ASSERT_TRUE(CBB_init(cbb.get(), 32));
ASSERT_TRUE(CBB_add_asn1(cbb.get(), &aki, CBS_ASN1_SEQUENCE));
ASSERT_TRUE(CBB_add_asn1(&aki, &aki_value, CBS_ASN1_CONTEXT_SPECIFIC | 0));
ASSERT_TRUE(CBBAddBytes(&aki_value, authority_key_identifier));
ASSERT_TRUE(CBB_flush(&aki));
SetExtension(bssl::der::Input(bssl::kAuthorityKeyIdentifierOid),
FinishCBB(cbb.get()));
}
void CertBuilder::SetSignatureAlgorithm(
bssl::SignatureAlgorithm signature_algorithm) {
signature_algorithm_ = signature_algorithm;
Invalidate();
}
void CertBuilder::SetSignatureAlgorithmTLV(
base::StringPiece signature_algorithm_tlv) {
SetOuterSignatureAlgorithmTLV(signature_algorithm_tlv);
SetTBSSignatureAlgorithmTLV(signature_algorithm_tlv);
}
void CertBuilder::SetOuterSignatureAlgorithmTLV(
base::StringPiece signature_algorithm_tlv) {
outer_signature_algorithm_tlv_ = std::string(signature_algorithm_tlv);
Invalidate();
}
void CertBuilder::SetTBSSignatureAlgorithmTLV(
base::StringPiece signature_algorithm_tlv) {
tbs_signature_algorithm_tlv_ = std::string(signature_algorithm_tlv);
Invalidate();
}
void CertBuilder::SetSerialNumber(uint64_t serial_number) {
serial_number_ = serial_number;
Invalidate();
}
void CertBuilder::SetRandomSerialNumber() {
serial_number_ = base::RandUint64();
Invalidate();
}
void CertBuilder::SetSctConfig(
std::vector<CertBuilder::SctConfig> sct_configs) {
sct_configs_ = std::move(sct_configs);
Invalidate();
}
CRYPTO_BUFFER* CertBuilder::GetCertBuffer() {
if (!cert_)
GenerateCertificate();
return cert_.get();
}
bssl::UniquePtr<CRYPTO_BUFFER> CertBuilder::DupCertBuffer() {
return bssl::UpRef(GetCertBuffer());
}
const std::string& CertBuilder::GetSubject() {
if (subject_tlv_.empty())
GenerateSubject();
return subject_tlv_;
}
uint64_t CertBuilder::GetSerialNumber() {
if (!serial_number_)
serial_number_ = base::RandUint64();
return serial_number_;
}
std::string CertBuilder::GetSubjectKeyIdentifier() {
std::string ski_oid =
bssl::der::Input(bssl::kSubjectKeyIdentifierOid).AsString();
if (extensions_.find(ski_oid) == extensions_.end()) {
// If no SKI is present, this means that the certificate was either
// created by FromStaticCert() and lacked one, or it was explicitly
// deleted as an extension.
return std::string();
}
auto& extension_value = extensions_[ski_oid];
bssl::der::Input ski_value;
if (!bssl::ParseSubjectKeyIdentifier(bssl::der::Input(extension_value.value),
&ski_value)) {
return std::string();
}
return ski_value.AsString();
}
bool CertBuilder::GetValidity(base::Time* not_before,
base::Time* not_after) const {
bssl::der::GeneralizedTime not_before_generalized_time;
bssl::der::GeneralizedTime not_after_generalized_time;
if (!bssl::ParseValidity(bssl::der::Input(validity_tlv_),
&not_before_generalized_time,
&not_after_generalized_time) ||
!GeneralizedTimeToTime(not_before_generalized_time, not_before) ||
!GeneralizedTimeToTime(not_after_generalized_time, not_after)) {
return false;
}
return true;
}
EVP_PKEY* CertBuilder::GetKey() {
if (!key_) {
switch (default_pkey_id_) {
case EVP_PKEY_RSA:
GenerateRSAKey();
break;
case EVP_PKEY_EC:
GenerateECKey();
break;
}
}
return key_.get();
}
scoped_refptr<X509Certificate> CertBuilder::GetX509Certificate() {
return X509Certificate::CreateFromBuffer(DupCertBuffer(), {});
}
scoped_refptr<X509Certificate> CertBuilder::GetX509CertificateChain() {
std::vector<bssl::UniquePtr<CRYPTO_BUFFER>> intermediates;
// Add intermediates, not including the self-signed root.
for (CertBuilder* cert = issuer_; cert && cert != cert->issuer_;
cert = cert->issuer_) {
intermediates.push_back(cert->DupCertBuffer());
}
return X509Certificate::CreateFromBuffer(DupCertBuffer(),
std::move(intermediates));
}
scoped_refptr<X509Certificate> CertBuilder::GetX509CertificateFullChain() {
std::vector<bssl::UniquePtr<CRYPTO_BUFFER>> intermediates;
// Add intermediates and the self-signed root.
for (CertBuilder* cert = issuer_; cert; cert = cert->issuer_) {
intermediates.push_back(cert->DupCertBuffer());
if (cert == cert->issuer_)
break;
}
return X509Certificate::CreateFromBuffer(DupCertBuffer(),
std::move(intermediates));
}
std::string CertBuilder::GetDER() {
return std::string(x509_util::CryptoBufferAsStringPiece(GetCertBuffer()));
}
std::string CertBuilder::GetPEM() {
std::string pem_encoded;
EXPECT_TRUE(X509Certificate::GetPEMEncoded(GetCertBuffer(), &pem_encoded));
return pem_encoded;
}
std::string CertBuilder::GetPEMFullChain() {
std::vector<std::string> pems;
CertBuilder* cert = this;
while (cert) {
pems.push_back(cert->GetPEM());
if (cert == cert->issuer_)
break;
cert = cert->issuer_;
}
return base::JoinString(pems, "\n");
}
std::string CertBuilder::GetPrivateKeyPEM() {
std::string pem_encoded = key_util::PEMFromPrivateKey(GetKey());
EXPECT_FALSE(pem_encoded.empty());
return pem_encoded;
}
CertBuilder::CertBuilder(CRYPTO_BUFFER* orig_cert,
CertBuilder* issuer,
bool unique_subject_key_identifier)
: issuer_(issuer) {
if (!issuer_)
issuer_ = this;
crypto::EnsureOpenSSLInit();
if (orig_cert)
InitFromCert(
bssl::der::Input(x509_util::CryptoBufferAsStringPiece(orig_cert)));
if (unique_subject_key_identifier) {
GenerateSubjectKeyIdentifier();
SetAuthorityKeyIdentifier(issuer_->GetSubjectKeyIdentifier());
}
}
void CertBuilder::Invalidate() {
cert_.reset();
}
void CertBuilder::GenerateECKey() {
auto private_key = crypto::ECPrivateKey::Create();
SetKey(bssl::UpRef(private_key->key()));
}
void CertBuilder::GenerateRSAKey() {
auto private_key = crypto::RSAPrivateKey::Create(2048);
SetKey(bssl::UpRef(private_key->key()));
}
bool CertBuilder::UseKeyFromFile(const base::FilePath& key_file) {
bssl::UniquePtr<EVP_PKEY> private_key(
key_util::LoadEVP_PKEYFromPEM(key_file));
if (!private_key)
return false;
SetKey(std::move(private_key));
return true;
}
void CertBuilder::SetKey(bssl::UniquePtr<EVP_PKEY> key) {
key_ = std::move(key);
Invalidate();
}
void CertBuilder::GenerateSubjectKeyIdentifier() {
// 20 bytes are chosen here for no other reason than it's compatible with
// systems that assume the SKI is SHA-1(SPKI), which RFC 5280 notes as one
// mechanism for generating an SKI, while also noting that random/unique
// SKIs are also fine.
std::string random_ski = base::RandBytesAsString(20);
SetSubjectKeyIdentifier(random_ski);
}
void CertBuilder::GenerateSubject() {
ASSERT_TRUE(subject_tlv_.empty());
// Use a random common name comprised of 12 bytes in hex.
std::string common_name = MakeRandomHexString(12);
SetSubjectCommonName(common_name);
}
void CertBuilder::InitFromCert(const bssl::der::Input& cert) {
extensions_.clear();
Invalidate();
// From RFC 5280, section 4.1
// Certificate ::= SEQUENCE {
// tbsCertificate TBSCertificate,
// signatureAlgorithm AlgorithmIdentifier,
// signatureValue BIT STRING }
// TBSCertificate ::= SEQUENCE {
// version [0] EXPLICIT Version DEFAULT v1,
// serialNumber CertificateSerialNumber,
// signature AlgorithmIdentifier,
// issuer Name,
// validity Validity,
// subject Name,
// subjectPublicKeyInfo SubjectPublicKeyInfo,
// issuerUniqueID [1] IMPLICIT UniqueIdentifier OPTIONAL,
// -- If present, version MUST be v2 or v3
// subjectUniqueID [2] IMPLICIT UniqueIdentifier OPTIONAL,
// -- If present, version MUST be v2 or v3
// extensions [3] EXPLICIT Extensions OPTIONAL
// -- If present, version MUST be v3
// }
bssl::der::Parser parser(cert);
bssl::der::Parser certificate;
bssl::der::Parser tbs_certificate;
ASSERT_TRUE(parser.ReadSequence(&certificate));
ASSERT_TRUE(certificate.ReadSequence(&tbs_certificate));
// version
bool has_version;
ASSERT_TRUE(tbs_certificate.SkipOptionalTag(
bssl::der::kTagConstructed | bssl::der::kTagContextSpecific | 0,
&has_version));
if (has_version) {
// TODO(mattm): could actually parse the version here instead of assuming
// V3.
version_ = bssl::CertificateVersion::V3;
} else {
version_ = bssl::CertificateVersion::V1;
}
// serialNumber
ASSERT_TRUE(tbs_certificate.SkipTag(bssl::der::kInteger));
// signature
bssl::der::Input signature_algorithm_tlv;
ASSERT_TRUE(tbs_certificate.ReadRawTLV(&signature_algorithm_tlv));
auto signature_algorithm =
bssl::ParseSignatureAlgorithm(signature_algorithm_tlv);
ASSERT_TRUE(signature_algorithm);
signature_algorithm_ = *signature_algorithm;
// issuer
ASSERT_TRUE(tbs_certificate.SkipTag(bssl::der::kSequence));
// validity
bssl::der::Input validity_tlv;
ASSERT_TRUE(tbs_certificate.ReadRawTLV(&validity_tlv));
validity_tlv_ = validity_tlv.AsString();
// subject
ASSERT_TRUE(tbs_certificate.SkipTag(bssl::der::kSequence));
// subjectPublicKeyInfo
bssl::der::Input spki_tlv;
ASSERT_TRUE(tbs_certificate.ReadRawTLV(&spki_tlv));
bssl::UniquePtr<EVP_PKEY> public_key;
ASSERT_TRUE(bssl::ParsePublicKey(spki_tlv, &public_key));
default_pkey_id_ = EVP_PKEY_id(public_key.get());
// issuerUniqueID
bool unused;
ASSERT_TRUE(tbs_certificate.SkipOptionalTag(
bssl::der::ContextSpecificPrimitive(1), &unused));
// subjectUniqueID
ASSERT_TRUE(tbs_certificate.SkipOptionalTag(
bssl::der::ContextSpecificPrimitive(2), &unused));
// extensions
absl::optional<bssl::der::Input> extensions_tlv;
ASSERT_TRUE(tbs_certificate.ReadOptionalTag(
bssl::der::ContextSpecificConstructed(3), &extensions_tlv));
if (extensions_tlv) {
std::map<bssl::der::Input, bssl::ParsedExtension> parsed_extensions;
ASSERT_TRUE(ParseExtensions(extensions_tlv.value(), &parsed_extensions));
for (const auto& parsed_extension : parsed_extensions) {
SetExtension(parsed_extension.second.oid,
parsed_extension.second.value.AsString(),
parsed_extension.second.critical);
}
}
}
void CertBuilder::BuildTBSCertificate(base::StringPiece signature_algorithm_tlv,
std::string* out) {
bssl::ScopedCBB cbb;
CBB tbs_cert, version, extensions_context, extensions;
ASSERT_TRUE(CBB_init(cbb.get(), 64));
ASSERT_TRUE(CBB_add_asn1(cbb.get(), &tbs_cert, CBS_ASN1_SEQUENCE));
if (version_ != bssl::CertificateVersion::V1) {
ASSERT_TRUE(
CBB_add_asn1(&tbs_cert, &version,
CBS_ASN1_CONTEXT_SPECIFIC | CBS_ASN1_CONSTRUCTED | 0));
switch (version_) {
case bssl::CertificateVersion::V2:
ASSERT_TRUE(CBB_add_asn1_uint64(&version, 1));
break;
case bssl::CertificateVersion::V3:
ASSERT_TRUE(CBB_add_asn1_uint64(&version, 2));
break;
case bssl::CertificateVersion::V1:
NOTREACHED_NORETURN();
}
}
ASSERT_TRUE(CBB_add_asn1_uint64(&tbs_cert, GetSerialNumber()));
ASSERT_TRUE(CBBAddBytes(&tbs_cert, signature_algorithm_tlv));
ASSERT_TRUE(CBBAddBytes(&tbs_cert, issuer_tlv_.has_value()
? *issuer_tlv_
: issuer_->GetSubject()));
ASSERT_TRUE(CBBAddBytes(&tbs_cert, validity_tlv_));
ASSERT_TRUE(CBBAddBytes(&tbs_cert, GetSubject()));
ASSERT_TRUE(GetKey());
ASSERT_TRUE(EVP_marshal_public_key(&tbs_cert, GetKey()));
// Serialize all the extensions.
if (!extensions_.empty()) {
ASSERT_TRUE(
CBB_add_asn1(&tbs_cert, &extensions_context,
CBS_ASN1_CONTEXT_SPECIFIC | CBS_ASN1_CONSTRUCTED | 3));
ASSERT_TRUE(
CBB_add_asn1(&extensions_context, &extensions, CBS_ASN1_SEQUENCE));
// Extension ::= SEQUENCE {
// extnID OBJECT IDENTIFIER,
// critical BOOLEAN DEFAULT FALSE,
// extnValue OCTET STRING
// -- contains the DER encoding of an ASN.1 value
// -- corresponding to the extension type identified
// -- by extnID
// }
for (const auto& extension_it : extensions_) {
CBB extension_seq, oid, extn_value;
ASSERT_TRUE(CBB_add_asn1(&extensions, &extension_seq, CBS_ASN1_SEQUENCE));
ASSERT_TRUE(CBB_add_asn1(&extension_seq, &oid, CBS_ASN1_OBJECT));
ASSERT_TRUE(CBBAddBytes(&oid, extension_it.first));
if (extension_it.second.critical) {
ASSERT_TRUE(CBB_add_asn1_bool(&extension_seq, true));
}
ASSERT_TRUE(
CBB_add_asn1(&extension_seq, &extn_value, CBS_ASN1_OCTETSTRING));
ASSERT_TRUE(CBBAddBytes(&extn_value, extension_it.second.value));
ASSERT_TRUE(CBB_flush(&extensions));
}
}
*out = FinishCBB(cbb.get());
}
void CertBuilder::BuildSctListExtension(const std::string& pre_tbs_certificate,
std::string* out) {
std::vector<std::string> encoded_scts;
for (const SctConfig& sct_config : sct_configs_) {
ct::SignedEntryData entry;
entry.type = ct::SignedEntryData::LOG_ENTRY_TYPE_PRECERT;
bssl::ScopedCBB issuer_spki_cbb;
ASSERT_TRUE(CBB_init(issuer_spki_cbb.get(), 32));
ASSERT_TRUE(
EVP_marshal_public_key(issuer_spki_cbb.get(), issuer_->GetKey()));
crypto::SHA256HashString(FinishCBB(issuer_spki_cbb.get()),
entry.issuer_key_hash.data,
sizeof(entry.issuer_key_hash.data));
entry.tbs_certificate = pre_tbs_certificate;
std::string serialized_log_entry;
std::string serialized_data;
ASSERT_TRUE(ct::EncodeSignedEntry(entry, &serialized_log_entry));
ASSERT_TRUE(ct::EncodeV1SCTSignedData(sct_config.timestamp,
serialized_log_entry,
/*extensions=*/"", &serialized_data));
scoped_refptr<ct::SignedCertificateTimestamp> sct =
base::MakeRefCounted<ct::SignedCertificateTimestamp>();
sct->log_id = sct_config.log_id;
sct->timestamp = sct_config.timestamp;
sct->signature.hash_algorithm = ct::DigitallySigned::HASH_ALGO_SHA256;
sct->signature.signature_algorithm = ct::DigitallySigned::SIG_ALGO_ECDSA;
bssl::ScopedCBB sct_signature_cbb;
ASSERT_TRUE(CBB_init(sct_signature_cbb.get(), 0));
ASSERT_TRUE(SignData(bssl::SignatureAlgorithm::kEcdsaSha256,
serialized_data, sct_config.log_key.get(),
sct_signature_cbb.get()));
sct->signature.signature_data = FinishCBB(sct_signature_cbb.get());
sct->origin = ct::SignedCertificateTimestamp::SCT_EMBEDDED;
std::string encoded_sct;
ASSERT_TRUE(ct::EncodeSignedCertificateTimestamp(sct, &encoded_sct));
encoded_scts.push_back(std::move(encoded_sct));
}
std::string encoded_sct_list;
ASSERT_TRUE(ct::EncodeSCTListForTesting(encoded_scts, &encoded_sct_list));
bssl::ScopedCBB sct_extension_cbb;
ASSERT_TRUE(CBB_init(sct_extension_cbb.get(), 32));
ASSERT_TRUE(CBB_add_asn1_octet_string(
sct_extension_cbb.get(),
reinterpret_cast<const uint8_t*>(encoded_sct_list.data()),
encoded_sct_list.size()));
*out = FinishCBB(sct_extension_cbb.get());
}
void CertBuilder::GenerateCertificate() {
ASSERT_FALSE(cert_);
absl::optional<bssl::SignatureAlgorithm> signature_algorithm =
signature_algorithm_;
if (!signature_algorithm)
signature_algorithm = DefaultSignatureAlgorithmForKey(issuer_->GetKey());
ASSERT_TRUE(signature_algorithm.has_value());
std::string signature_algorithm_tlv =
!outer_signature_algorithm_tlv_.empty()
? outer_signature_algorithm_tlv_
: SignatureAlgorithmToDer(*signature_algorithm);
ASSERT_FALSE(signature_algorithm_tlv.empty());
std::string tbs_signature_algorithm_tlv =
!tbs_signature_algorithm_tlv_.empty()
? tbs_signature_algorithm_tlv_
: SignatureAlgorithmToDer(*signature_algorithm);
ASSERT_FALSE(tbs_signature_algorithm_tlv.empty());
if (!sct_configs_.empty()) {
EraseExtension(bssl::der::Input(ct::kEmbeddedSCTOid));
std::string pre_tbs_certificate;
BuildTBSCertificate(tbs_signature_algorithm_tlv, &pre_tbs_certificate);
std::string sct_extension;
BuildSctListExtension(pre_tbs_certificate, &sct_extension);
SetExtension(bssl::der::Input(ct::kEmbeddedSCTOid), sct_extension,
/*critical=*/false);
}
std::string tbs_cert;
BuildTBSCertificate(tbs_signature_algorithm_tlv, &tbs_cert);
// Sign the TBSCertificate and write the entire certificate.
bssl::ScopedCBB cbb;
CBB cert, signature;
ASSERT_TRUE(CBB_init(cbb.get(), tbs_cert.size()));
ASSERT_TRUE(CBB_add_asn1(cbb.get(), &cert, CBS_ASN1_SEQUENCE));
ASSERT_TRUE(CBBAddBytes(&cert, tbs_cert));
ASSERT_TRUE(CBBAddBytes(&cert, signature_algorithm_tlv));
ASSERT_TRUE(CBB_add_asn1(&cert, &signature, CBS_ASN1_BITSTRING));
ASSERT_TRUE(CBB_add_u8(&signature, 0 /* no unused bits */));
ASSERT_TRUE(
SignData(*signature_algorithm, tbs_cert, issuer_->GetKey(), &signature));
auto cert_der = FinishCBB(cbb.get());
cert_ =
x509_util::CreateCryptoBuffer(base::as_bytes(base::make_span(cert_der)));
}
} // namespace net