1b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra/* 2b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra * Copyright (C) 2012 The Android Open Source Project 3b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra * 4b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra * Licensed under the Apache License, Version 2.0 (the "License"); 5b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra * you may not use this file except in compliance with the License. 6b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra * You may obtain a copy of the License at 7b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra * 8b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra * http://www.apache.org/licenses/LICENSE-2.0 9b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra * 10b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra * Unless required by applicable law or agreed to in writing, software 11b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra * distributed under the License is distributed on an "AS IS" BASIS, 12b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra * See the License for the specific language governing permissions and 14b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra * limitations under the License. 15b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra */ 16b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 17b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condrapackage com.android.server.updates; 18b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 19b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport android.content.Context; 20b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport android.content.Intent; 21b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport android.test.AndroidTestCase; 22b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport android.provider.Settings; 23b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport android.util.Base64; 24b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport android.util.Log; 25b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 26b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport java.io.ByteArrayInputStream; 27b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport java.io.File; 28b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport java.io.FileInputStream; 29b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport java.io.FileOutputStream; 30b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport java.io.FileWriter; 31b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport java.io.IOException; 32b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport java.io.InputStream; 33b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport java.security.cert.CertificateFactory; 34b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport java.security.cert.Certificate; 35b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport java.security.cert.X509Certificate; 36b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport java.security.MessageDigest; 37b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport java.security.NoSuchAlgorithmException; 38b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport java.security.PrivateKey; 39b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport java.security.Signature; 40b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport java.security.spec.PKCS8EncodedKeySpec; 41b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport java.security.KeyFactory; 42b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport java.util.HashSet; 43b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport java.io.*; 44b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condraimport libcore.io.IoUtils; 45b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 46b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra/** 47b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra * Tests for {@link com.android.server.CertPinInstallReceiver} 48b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra */ 49b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condrapublic class CertPinInstallReceiverTest extends AndroidTestCase { 50b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 51b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra private static final String TAG = "CertPinInstallReceiverTest"; 52b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 53b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra private static final String PINLIST_ROOT = System.getenv("ANDROID_DATA") + "/misc/keychain/"; 54b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 55b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra public static final String PINLIST_CONTENT_PATH = PINLIST_ROOT + "pins"; 56b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra public static final String PINLIST_METADATA_PATH = PINLIST_CONTENT_PATH + "metadata"; 57b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 58b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra public static final String PINLIST_CONTENT_URL_KEY = "pinlist_content_url"; 59b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra public static final String PINLIST_METADATA_URL_KEY = "pinlist_metadata_url"; 60b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra public static final String PINLIST_CERTIFICATE_KEY = "config_update_certificate"; 61b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra public static final String PINLIST_VERSION_KEY = "pinlist_version"; 62b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 63b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra private static final String EXTRA_CONTENT_PATH = "CONTENT_PATH"; 64b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra private static final String EXTRA_REQUIRED_HASH = "REQUIRED_HASH"; 65b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra private static final String EXTRA_SIGNATURE = "SIGNATURE"; 66b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra private static final String EXTRA_VERSION_NUMBER = "VERSION"; 67b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 68b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra public static final String TEST_CERT = "" + 69b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "MIIDsjCCAxugAwIBAgIJAPLf2gS0zYGUMA0GCSqGSIb3DQEBBQUAMIGYMQswCQYDVQQGEwJVUzET" + 70b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "MBEGA1UECBMKQ2FsaWZvcm5pYTEWMBQGA1UEBxMNTW91bnRhaW4gVmlldzEPMA0GA1UEChMGR29v" + 71b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "Z2xlMRAwDgYDVQQLEwd0ZXN0aW5nMRYwFAYDVQQDEw1HZXJlbXkgQ29uZHJhMSEwHwYJKoZIhvcN" + 72b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "AQkBFhJnY29uZHJhQGdvb2dsZS5jb20wHhcNMTIwNzE0MTc1MjIxWhcNMTIwODEzMTc1MjIxWjCB" + 73b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "mDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFjAUBgNVBAcTDU1vdW50YWluIFZp" + 74b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "ZXcxDzANBgNVBAoTBkdvb2dsZTEQMA4GA1UECxMHdGVzdGluZzEWMBQGA1UEAxMNR2VyZW15IENv" + 75b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "bmRyYTEhMB8GCSqGSIb3DQEJARYSZ2NvbmRyYUBnb29nbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUA" + 76b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "A4GNADCBiQKBgQCjGGHATBYlmas+0sEECkno8LZ1KPglb/mfe6VpCT3GhSr+7br7NG/ZwGZnEhLq" + 77b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "E7YIH4fxltHmQC3Tz+jM1YN+kMaQgRRjo/LBCJdOKaMwUbkVynAH6OYsKevjrOPk8lfM5SFQzJMG" + 78b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "sA9+Tfopr5xg0BwZ1vA/+E3mE7Tr3M2UvwIDAQABo4IBADCB/TAdBgNVHQ4EFgQUhzkS9E6G+x8W" + 79b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "L4EsmRjDxu28tHUwgc0GA1UdIwSBxTCBwoAUhzkS9E6G+x8WL4EsmRjDxu28tHWhgZ6kgZswgZgx" + 80b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3" + 81b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "MQ8wDQYDVQQKEwZHb29nbGUxEDAOBgNVBAsTB3Rlc3RpbmcxFjAUBgNVBAMTDUdlcmVteSBDb25k" + 82b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "cmExITAfBgkqhkiG9w0BCQEWEmdjb25kcmFAZ29vZ2xlLmNvbYIJAPLf2gS0zYGUMAwGA1UdEwQF" + 83b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "MAMBAf8wDQYJKoZIhvcNAQEFBQADgYEAYiugFDmbDOQ2U/+mqNt7o8ftlEo9SJrns6O8uTtK6AvR" + 84b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "orDrR1AXTXkuxwLSbmVfedMGOZy7Awh7iZa8hw5x9XmUudfNxvmrKVEwGQY2DZ9PXbrnta/dwbhK" + 85b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "mWfoepESVbo7CKIhJp8gRW0h1Z55ETXD57aGJRvQS4pxkP8ANhM="; 86b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 87b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 88b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra public static final String TEST_KEY = "" + 89b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "MIICdgIBADANBgkqhkiG9w0BAQEFAASCAmAwggJcAgEAAoGBAKMYYcBMFiWZqz7SwQQKSejwtnUo" + 90b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "+CVv+Z97pWkJPcaFKv7tuvs0b9nAZmcSEuoTtggfh/GW0eZALdPP6MzVg36QxpCBFGOj8sEIl04p" + 91b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "ozBRuRXKcAfo5iwp6+Os4+TyV8zlIVDMkwawD35N+imvnGDQHBnW8D/4TeYTtOvczZS/AgMBAAEC" + 92b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "gYBxwFalNSwZK3WJipq+g6KLCiBn1JxGGDQlLKrweFaSuFyFky9fd3IvkIabirqQchD612sMb+GT" + 93b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "0t1jptW6z4w2w6++IW0A3apDOCwoD+uvDBXrbFqI0VbyAWUNqHVdaFFIRk2IHGEE6463mGRdmILX" + 94b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "IlCd/85RTHReg4rl/GFqWQJBANgLAIR4pWbl5Gm+DtY18wp6Q3pJAAMkmP/lISCBIidu1zcqYIKt" + 95b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "PoDW4Knq9xnhxPbXrXKv4YzZWHBK8GkKhQ0CQQDBQnXufQcMew+PwiS0oJvS+eQ6YJwynuqG2ejg" + 96b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "WE+T7489jKtscRATpUXpZUYmDLGg9bLt7L62hFvFSj2LO2X7AkBcdrD9AWnBFWlh/G77LVHczSEu" + 97b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "KCoyLiqxcs5vy/TjLaQ8vw1ZQG580/qJnr+tOxyCjSJ18GK3VppsTRaBznfNAkB3nuCKNp9HTWCL" + 98b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "dfrsRsFMrFpk++mSt6SoxXaMbn0LL2u1CD4PCEiQMGt+lK3/3TmRTKNs+23sYS7Ahjxj0udDAkEA" + 99b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "p57Nj65WNaWeYiOfTwKXkLj8l29H5NbaGWxPT0XkWr4PvBOFZVH/wj0/qc3CMVGnv11+DyO+QUCN" + 100b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra "SqBB5aRe8g=="; 101b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 102b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra private void overrideSettings(String key, String value) throws Exception { 103b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra assertTrue(Settings.Secure.putString(mContext.getContentResolver(), key, value)); 104b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra Thread.sleep(1000); 105b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra } 106b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 107b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra private void overrideCert(String value) throws Exception { 108b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra overrideSettings(PINLIST_CERTIFICATE_KEY, value); 109b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra } 110b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 111b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra private String readPins() throws Exception { 112b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra return IoUtils.readFileAsString(PINLIST_CONTENT_PATH); 113b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra } 114b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 115b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra private String readCurrentVersion() throws Exception { 116b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra return IoUtils.readFileAsString("/data/misc/keychain/metadata/version"); 117b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra } 118b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 119b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra private String getNextVersion() throws Exception { 120b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra int currentVersion = Integer.parseInt(readCurrentVersion()); 121b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra return Integer.toString(currentVersion + 1); 122b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra } 123b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 124b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra private static String getCurrentHash(String content) throws Exception { 125b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra if (content == null) { 126b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra return "0"; 127b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra } 128b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra MessageDigest dgst = MessageDigest.getInstance("SHA512"); 129b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra byte[] encoded = content.getBytes(); 130b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra byte[] fingerprint = dgst.digest(encoded); 131b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra return IntegralToString.bytesToHexString(fingerprint, false); 132b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra } 133b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 134b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra private static String getHashOfCurrentContent() throws Exception { 135b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra String content = IoUtils.readFileAsString("/data/misc/keychain/pins"); 136b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra return getCurrentHash(content); 137b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra } 138b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 139b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra private PrivateKey createKey() throws Exception { 140b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra byte[] derKey = Base64.decode(TEST_KEY.getBytes(), Base64.DEFAULT); 141b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra PKCS8EncodedKeySpec keySpec = new PKCS8EncodedKeySpec(derKey); 142b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra KeyFactory keyFactory = KeyFactory.getInstance("RSA"); 143b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra return (PrivateKey) keyFactory.generatePrivate(keySpec); 144b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra } 145b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 146b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra private X509Certificate createCertificate() throws Exception { 147b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra byte[] derCert = Base64.decode(TEST_CERT.getBytes(), Base64.DEFAULT); 148b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra InputStream istream = new ByteArrayInputStream(derCert); 149b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra CertificateFactory cf = CertificateFactory.getInstance("X.509"); 150b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra return (X509Certificate) cf.generateCertificate(istream); 151b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra } 152b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 153b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra private String makeTemporaryContentFile(String content) throws Exception { 154b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra FileOutputStream fw = mContext.openFileOutput("content.txt", mContext.MODE_WORLD_READABLE); 155b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra fw.write(content.getBytes(), 0, content.length()); 156b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra fw.close(); 157b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra return mContext.getFilesDir() + "/content.txt"; 158b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra } 159b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 160b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra private String createSignature(String content, String version, String requiredHash) 161b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra throws Exception { 162b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra Signature signer = Signature.getInstance("SHA512withRSA"); 163b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra signer.initSign(createKey()); 164b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra signer.update(content.trim().getBytes()); 165b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra signer.update(version.trim().getBytes()); 166b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra signer.update(requiredHash.getBytes()); 167b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra String sig = new String(Base64.encode(signer.sign(), Base64.DEFAULT)); 168b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra assertEquals(true, 169b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra verifySignature(content, version, requiredHash, sig, createCertificate())); 170b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra return sig; 171b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra } 172b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 173b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra public boolean verifySignature(String content, String version, String requiredPrevious, 174b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra String signature, X509Certificate cert) throws Exception { 175b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra Signature signer = Signature.getInstance("SHA512withRSA"); 176b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra signer.initVerify(cert); 177b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra signer.update(content.trim().getBytes()); 178b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra signer.update(version.trim().getBytes()); 179b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra signer.update(requiredPrevious.trim().getBytes()); 180b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra return signer.verify(Base64.decode(signature.getBytes(), Base64.DEFAULT)); 181b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra } 182b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 183b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra private void sendIntent(String contentPath, String version, String required, String sig) { 184b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra Intent i = new Intent(); 185b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra i.setAction("android.intent.action.UPDATE_PINS"); 186b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra i.putExtra(EXTRA_CONTENT_PATH, contentPath); 187b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra i.putExtra(EXTRA_VERSION_NUMBER, version); 188b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra i.putExtra(EXTRA_REQUIRED_HASH, required); 189b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra i.putExtra(EXTRA_SIGNATURE, sig); 190b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra mContext.sendBroadcast(i); 191b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra } 192b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 193b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra private String runTest(String cert, String content, String version, String required, String sig) 194b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra throws Exception { 195b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra Log.e(TAG, "started test"); 196b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra overrideCert(cert); 197b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra String contentPath = makeTemporaryContentFile(content); 198b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra sendIntent(contentPath, version, required, sig); 199b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra Thread.sleep(1000); 200b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra return readPins(); 201b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra } 202b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 203b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra private String runTestWithoutSig(String cert, String content, String version, String required) 204b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra throws Exception { 205b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra String sig = createSignature(content, version, required); 206b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra return runTest(cert, content, version, required, sig); 207b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra } 208b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 209b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra public void testOverwritePinlist() throws Exception { 210b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra Log.e(TAG, "started testOverwritePinList"); 211b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra assertEquals("abcde", runTestWithoutSig(TEST_CERT, "abcde", getNextVersion(), getHashOfCurrentContent())); 212b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra Log.e(TAG, "started testOverwritePinList"); 213b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra } 214b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 215b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra public void testBadSignatureFails() throws Exception { 216b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra Log.e(TAG, "started testOverwritePinList"); 217b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra String text = "blahblah"; 218b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra runTestWithoutSig(TEST_CERT, text, getNextVersion(), getHashOfCurrentContent()); 219b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra assertEquals(text, runTest(TEST_CERT, "bcdef", getNextVersion(), getCurrentHash(text), "")); 220b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra Log.e(TAG, "started testOverwritePinList"); 221b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra } 222b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 223b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra public void testBadRequiredHashFails() throws Exception { 224b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra runTestWithoutSig(TEST_CERT, "blahblahblah", getNextVersion(), getHashOfCurrentContent()); 225b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra assertEquals("blahblahblah", runTestWithoutSig(TEST_CERT, "cdefg", getNextVersion(), "0")); 226b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra Log.e(TAG, "started testOverwritePinList"); 227b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra } 228b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 229b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra public void testBadVersionFails() throws Exception { 230b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra String text = "blahblahblahblah"; 231b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra String version = getNextVersion(); 232b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra runTestWithoutSig(TEST_CERT, text, version, getHashOfCurrentContent()); 233b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra assertEquals(text, runTestWithoutSig(TEST_CERT, "defgh", version, getCurrentHash(text))); 234b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra Log.e(TAG, "started testOverwritePinList"); 235b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra } 236b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 237b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra public void testOverrideRequiredHash() throws Exception { 238b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra runTestWithoutSig(TEST_CERT, "blahblahblah", getNextVersion(), getHashOfCurrentContent()); 239b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra assertEquals("blahblahblah", runTestWithoutSig(TEST_CERT, "cdefg", "NONE", "0")); 240b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra Log.e(TAG, "started testOverwritePinList"); 241b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra } 242b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra 243b631084613e12e1c6a0ae2ad9446e1284b650ccbGeremy Condra} 244