VirtualBox

source: vbox/trunk/src/VBox/Runtime/common/crypto/pkcs7-sanity.cpp

Last change on this file was 100442, checked in by vboxsync, 11 months ago

IPRT,OpenSSL: Support ECDSA for verficiation purposes when IPRT links with OpenSSL. This required quite a bit of cleanups, so not entirely no-risk. bugref:10479 ticketref:21621
  • Property svn:eol-style set to native
  • Property svn:keywords set to Author Date Id Revision
File size: 12.0 KB
Line 
1/* $Id: pkcs7-sanity.cpp 100442 2023-07-08 11:10:51Z vboxsync $ */
2/** @file
3 * IPRT - Crypto - PKCS \#7, Sanity Checkers.
4 */
5
6/*
7 * Copyright (C) 2006-2023 Oracle and/or its affiliates.
8 *
9 * This file is part of VirtualBox base platform packages, as
10 * available from https://www.virtualbox.org.
11 *
12 * This program is free software; you can redistribute it and/or
13 * modify it under the terms of the GNU General Public License
14 * as published by the Free Software Foundation, in version 3 of the
15 * License.
16 *
17 * This program is distributed in the hope that it will be useful, but
18 * WITHOUT ANY WARRANTY; without even the implied warranty of
19 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
20 * General Public License for more details.
21 *
22 * You should have received a copy of the GNU General Public License
23 * along with this program; if not, see <https://www.gnu.org/licenses>.
24 *
25 * The contents of this file may alternatively be used under the terms
26 * of the Common Development and Distribution License Version 1.0
27 * (CDDL), a copy of it is provided in the "COPYING.CDDL" file included
28 * in the VirtualBox distribution, in which case the provisions of the
29 * CDDL are applicable instead of those of the GPL.
30 *
31 * You may elect to license modified versions of this file under the
32 * terms and conditions of either the GPL or the CDDL or both.
33 *
34 * SPDX-License-Identifier: GPL-3.0-only OR CDDL-1.0
35 */
36
37
38/*********************************************************************************************************************************
39* Header Files *
40*********************************************************************************************************************************/
41#include "internal/iprt.h"
42#include <iprt/crypto/pkcs7.h>
43
44#include <iprt/err.h>
45#include <iprt/string.h>
46
47//#include <iprt/stream.h>
48
49#include "pkcs7-internal.h"
50
51
52static int rtCrPkcs7SignedData_CheckSanityExtra(PCRTCRPKCS7SIGNEDDATA pSignedData, uint32_t fFlags,
53 PRTERRINFO pErrInfo, const char *pszErrorTag)
54{
55 bool const fAuthenticode = RT_BOOL(fFlags & RTCRPKCS7SIGNEDDATA_SANITY_F_AUTHENTICODE);
56 RT_NOREF_PV(fFlags);
57
58 //RTAsn1Dump(&pSignedData->SeqCore.Asn1Core, 0, 0, RTAsn1DumpStrmPrintfV, g_pStdOut);
59
60 if ( RTAsn1Integer_UnsignedCompareWithU32(&pSignedData->Version, RTCRPKCS7SIGNEDDATA_V1) != 0
61 && RTAsn1Integer_UnsignedCompareWithU32(&pSignedData->Version, RTCRPKCS7SIGNEDDATA_V3) != 0
62 && RTAsn1Integer_UnsignedCompareWithU32(&pSignedData->Version, RTCRPKCS7SIGNEDDATA_V4) != 0
63 && RTAsn1Integer_UnsignedCompareWithU32(&pSignedData->Version, RTCRPKCS7SIGNEDDATA_V5) != 0)
64 return RTErrInfoSetF(pErrInfo, VERR_CR_PKCS7_SIGNED_DATA_VERSION, "SignedData version is %llu, expected %u",
65 pSignedData->Version.uValue.u, RTCRPKCS7SIGNEDDATA_V1);
66
67 /*
68 * DigestAlgorithms.
69 */
70 if (pSignedData->DigestAlgorithms.cItems == 0) /** @todo this might be too strict */
71 return RTErrInfoSet(pErrInfo, VERR_CR_PKCS7_SIGNED_DATA_NO_DIGEST_ALGOS, "SignedData.DigestAlgorithms is empty");
72 if (pSignedData->DigestAlgorithms.cItems != 1 && fAuthenticode)
73 return RTErrInfoSetF(pErrInfo, VERR_CR_SPC_NOT_EXACTLY_ONE_DIGEST_ALGO,
74 "%s: SignedData.DigestAlgorithms has more than one algorithm (%u)",
75 pszErrorTag, pSignedData->DigestAlgorithms.cItems);
76
77 if (fFlags & RTCRPKCS7SIGNEDDATA_SANITY_F_ONLY_KNOWN_HASH)
78 for (uint32_t i = 0; i < pSignedData->DigestAlgorithms.cItems; i++)
79 {
80 if ( RTCrX509AlgorithmIdentifier_GetDigestType(pSignedData->DigestAlgorithms.papItems[i],
81 true /*fPureDigestsOnly*/)
82 == RTDIGESTTYPE_INVALID)
83 return RTErrInfoSetF(pErrInfo, VERR_CR_PKCS7_UNKNOWN_DIGEST_ALGORITHM,
84 "%s: SignedData.DigestAlgorithms[%i] is not known: %s",
85 pszErrorTag, i, pSignedData->DigestAlgorithms.papItems[i]->Algorithm.szObjId);
86 if ( pSignedData->DigestAlgorithms.papItems[i]->Parameters.enmType != RTASN1TYPE_NULL
87 && pSignedData->DigestAlgorithms.papItems[i]->Parameters.enmType != RTASN1TYPE_NOT_PRESENT)
88 return RTErrInfoSetF(pErrInfo, VERR_CR_PKCS7_DIGEST_PARAMS_NOT_IMPL,
89 "%s: SignedData.DigestAlgorithms[%i] has parameters: tag=%u",
90 pszErrorTag, i, pSignedData->DigestAlgorithms.papItems[i]->Parameters.u.Core.uTag);
91 }
92
93 /*
94 * Certificates.
95 */
96 if ( (fFlags & RTCRPKCS7SIGNEDDATA_SANITY_F_SIGNING_CERT_PRESENT)
97 && pSignedData->Certificates.cItems == 0)
98 return RTErrInfoSetF(pErrInfo, VERR_CR_PKCS7_NO_CERTIFICATES,
99 "%s: SignedData.Certifcates is empty, expected at least one certificate", pszErrorTag);
100
101 /*
102 * Crls.
103 */
104 if (fAuthenticode && RTAsn1Core_IsPresent(&pSignedData->Crls))
105 return RTErrInfoSetF(pErrInfo, VERR_CR_PKCS7_EXPECTED_NO_CRLS,
106 "%s: SignedData.Crls is not empty as expected for authenticode.", pszErrorTag);
107 /** @todo check Crls when they become important. */
108
109 /*
110 * SignerInfos.
111 */
112 if (pSignedData->SignerInfos.cItems == 0)
113 return RTErrInfoSetF(pErrInfo, VERR_CR_PKCS7_NO_SIGNER_INFOS, "%s: SignedData.SignerInfos is empty?", pszErrorTag);
114 if (fAuthenticode && pSignedData->SignerInfos.cItems != 1)
115 return RTErrInfoSetF(pErrInfo, VERR_CR_PKCS7_EXPECTED_ONE_SIGNER_INFO,
116 "%s: SignedData.SignerInfos should have one entry for authenticode: %u",
117 pszErrorTag, pSignedData->SignerInfos.cItems);
118
119 for (uint32_t i = 0; i < pSignedData->SignerInfos.cItems; i++)
120 {
121 PCRTCRPKCS7SIGNERINFO pSignerInfo = pSignedData->SignerInfos.papItems[i];
122
123 if (RTAsn1Integer_UnsignedCompareWithU32(&pSignerInfo->Version, RTCRPKCS7SIGNERINFO_V1) != 0)
124 return RTErrInfoSetF(pErrInfo, VERR_CR_PKCS7_SIGNER_INFO_VERSION,
125 "%s: SignedData.SignerInfos[%u] version is %llu, expected %u",
126 pszErrorTag, i, pSignerInfo->Version.uValue.u, RTCRPKCS7SIGNERINFO_V1);
127
128 /* IssuerAndSerialNumber. */
129 int rc = RTCrX509Name_CheckSanity(&pSignerInfo->IssuerAndSerialNumber.Name, 0, pErrInfo,
130 "SignedData.SignerInfos[#].IssuerAndSerialNumber.Name");
131 if (RT_FAILURE(rc))
132 return rc;
133
134 if (pSignerInfo->IssuerAndSerialNumber.SerialNumber.Asn1Core.cb == 0)
135 return RTErrInfoSetF(pErrInfo, VERR_CR_PKCS7_SIGNER_INFO_NO_ISSUER_SERIAL_NO,
136 "%s: SignedData.SignerInfos[%u].IssuerAndSerialNumber.SerialNumber is missing (zero length)",
137 pszErrorTag, i);
138
139 PCRTCRX509CERTIFICATE pCert;
140 pCert = RTCrPkcs7SetOfCerts_FindX509ByIssuerAndSerialNumber(&pSignedData->Certificates,
141 &pSignerInfo->IssuerAndSerialNumber.Name,
142 &pSignerInfo->IssuerAndSerialNumber.SerialNumber);
143 if (!pCert && (fFlags & RTCRPKCS7SIGNEDDATA_SANITY_F_SIGNING_CERT_PRESENT))
144 return RTErrInfoSetF(pErrInfo, VERR_CR_PKCS7_SIGNER_CERT_NOT_SHIPPED,
145 "%s: SignedData.SignerInfos[%u].IssuerAndSerialNumber not found in T0.Certificates",
146 pszErrorTag, i);
147
148 /* DigestAlgorithm */
149 uint32_t j = 0;
150 while ( j < pSignedData->DigestAlgorithms.cItems
151 && RTCrX509AlgorithmIdentifier_Compare(pSignedData->DigestAlgorithms.papItems[j],
152 &pSignerInfo->DigestAlgorithm) != 0)
153 j++;
154 if (j >= pSignedData->DigestAlgorithms.cItems)
155 return RTErrInfoSetF(pErrInfo, VERR_CR_PKCS7_DIGEST_ALGO_NOT_FOUND_IN_LIST,
156 "%s: SignedData.SignerInfos[%u].DigestAlgorithm (%s) not found in SignedData.DigestAlgorithms",
157 pszErrorTag, i, pSignerInfo->DigestAlgorithm.Algorithm.szObjId);
158
159 /* Digest encryption algorithm. */
160#if 0 /** @todo Unimportant: Seen timestamp signatures specifying pkcs1-Sha256WithRsaEncryption in SignerInfo and just RSA in the certificate. Figure out how to compare the two. */
161 if ( pCert
162 && RTCrX509AlgorithmIdentifier_Compare(&pSignerInfo->DigestEncryptionAlgorithm,
163 &pCert->TbsCertificate.SubjectPublicKeyInfo.Algorithm) != 0)
164 return RTErrInfoSetF(pErrInfo, VERR_CR_PKCS7_SIGNER_INFO_DIGEST_ENCRYPT_MISMATCH,
165 "SignedData.SignerInfos[%u].DigestEncryptionAlgorithm (%s) mismatch with certificate (%s)",
166 i, pSignerInfo->DigestEncryptionAlgorithm.Algorithm.szObjId,
167 pCert->TbsCertificate.SubjectPublicKeyInfo.Algorithm.Algorithm.szObjId);
168#endif
169
170 /* Authenticated attributes we know. */
171 if (RTCrPkcs7Attributes_IsPresent(&pSignerInfo->AuthenticatedAttributes))
172 {
173 bool fFoundContentInfo = false;
174 bool fFoundMessageDigest = false;
175 for (j = 0; j < pSignerInfo->AuthenticatedAttributes.cItems; j++)
176 {
177 PCRTCRPKCS7ATTRIBUTE pAttrib = pSignerInfo->AuthenticatedAttributes.papItems[j];
178 if (RTAsn1ObjId_CompareWithString(&pAttrib->Type, RTCR_PKCS9_ID_CONTENT_TYPE_OID) == 0)
179 {
180 if (fFoundContentInfo)
181 return RTErrInfoSetF(pErrInfo, VERR_CR_PKCS7_MISSING_CONTENT_TYPE_ATTRIB,
182 "%s: Multiple authenticated content-type attributes.", pszErrorTag);
183 fFoundContentInfo = true;
184 AssertReturn(pAttrib->enmType == RTCRPKCS7ATTRIBUTETYPE_OBJ_IDS, VERR_INTERNAL_ERROR_3);
185 if (pAttrib->uValues.pObjIds->cItems != 1)
186 return RTErrInfoSetF(pErrInfo, VERR_CR_PKCS7_BAD_CONTENT_TYPE_ATTRIB,
187 "%s: Expected exactly one value for content-type attrib, found: %u",
188 pszErrorTag, pAttrib->uValues.pObjIds->cItems);
189 }
190 else if (RTAsn1ObjId_CompareWithString(&pAttrib->Type, RTCR_PKCS9_ID_MESSAGE_DIGEST_OID) == 0)
191 {
192 if (fFoundMessageDigest)
193 return RTErrInfoSetF(pErrInfo, VERR_CR_PKCS7_MISSING_MESSAGE_DIGEST_ATTRIB,
194 "%s: Multiple authenticated message-digest attributes.", pszErrorTag);
195 fFoundMessageDigest = true;
196 AssertReturn(pAttrib->enmType == RTCRPKCS7ATTRIBUTETYPE_OCTET_STRINGS, VERR_INTERNAL_ERROR_3);
197 if (pAttrib->uValues.pOctetStrings->cItems != 1)
198 return RTErrInfoSetF(pErrInfo, VERR_CR_PKCS7_BAD_CONTENT_TYPE_ATTRIB,
199 "%s: Expected exactly one value for message-digest attrib, found: %u",
200 pszErrorTag, pAttrib->uValues.pOctetStrings->cItems);
201 }
202 }
203
204 if (!fFoundContentInfo)
205 return RTErrInfoSetF(pErrInfo, VERR_CR_PKCS7_MISSING_CONTENT_TYPE_ATTRIB,
206 "%s: Missing authenticated content-type attribute.", pszErrorTag);
207 if (!fFoundMessageDigest)
208 return RTErrInfoSetF(pErrInfo, VERR_CR_PKCS7_MISSING_MESSAGE_DIGEST_ATTRIB,
209 "%s: Missing authenticated message-digest attribute.", pszErrorTag);
210 }
211 }
212
213 return VINF_SUCCESS;
214}
215
216
217/*
218 * Generate the code.
219 */
220#include <iprt/asn1-generator-sanity.h>
221
Note: See TracBrowser for help on using the repository browser.

© 2023 Oracle
Contact – Privacy policy – Terms of Use