1#!/usr/bin/env python
2
3#
4# Copyright (C) 2017 The Android Open Source Project
5#
6# Permission is hereby granted, free of charge, to any person
7# obtaining a copy of this software and associated documentation
8# files (the "Software"), to deal in the Software without
9# restriction, including without limitation the rights to use, copy,
10# modify, merge, publish, distribute, sublicense, and/or sell copies
11# of the Software, and to permit persons to whom the Software is
12# furnished to do so, subject to the following conditions:
13#
14# The above copyright notice and this permission notice shall be
15# included in all copies or substantial portions of the Software.
16#
17# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
18# EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
19# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
20# NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
21# BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
22# ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
23# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
24# SOFTWARE.
25#
26
27import subprocess
28import sys
29import errno
30import os
31
32def rsa_signer_with_files(argv):
33  if len(argv) != 4:
34    sys.stderr.write("Wrong number of arguments: {} <alg> <pub key> <file>\n".format(argv[0]))
35    return errno.EINVAL
36
37  signing_file = open(argv[3], mode='rw+')
38  data = signing_file.read()
39  if len(data) == 0:
40    sys.stderr.write("There is no input data\n")
41    return errno.EINVAL
42
43  if os.environ.get('SIGNING_HELPER_GENERATE_WRONG_SIGNATURE'):
44    # We're only called with this algorithm which signature size is 256.
45    assert argv[1] == 'SHA256_RSA2048'
46    signing_file.seek(0)
47    signing_file.write('X'*256)
48    return 0
49
50  if 'SIGNING_HELPER_TEST' not in os.environ or os.environ['SIGNING_HELPER_TEST'] == "":
51    sys.stderr.write("env SIGNING_HELPER_TEST is not set or empty\n")
52    return errno.EINVAL
53
54  test_file_name = os.environ['SIGNING_HELPER_TEST']
55  if os.path.isfile(test_file_name) and not os.access(test_file_name, os.W_OK):
56    sys.stderr.write("no permission to write into {} file\n".format(test_file_name))
57    return errno.EACCESS
58
59  p = subprocess.Popen(
60      ['openssl', 'rsautl', '-sign', '-inkey', argv[2], '-raw'],
61      stdin=subprocess.PIPE, stdout=subprocess.PIPE)
62
63  (pout, _) = p.communicate(data)
64  retcode = p.wait()
65  if retcode != 0:
66    return retcode
67
68  signing_file.seek(0)
69  signing_file.write(pout)
70
71  with open(test_file_name, "w") as f:
72    f.write("DONE")
73
74  return 0
75
76if __name__ == '__main__':
77  sys.exit(rsa_signer_with_files(sys.argv))
78