1# 2# This file is part of pyasn1-modules software. 3# 4# Created by Russ Housley 5# Copyright (c) 2019, Vigil Security, LLC 6# License: http://snmplabs.com/pyasn1/license.html 7# 8 9import sys 10 11from pyasn1.codec.der.decoder import decode as der_decode 12from pyasn1.codec.der.encoder import encode as der_encode 13 14from pyasn1_modules import pem 15from pyasn1_modules import rfc5652 16from pyasn1_modules import rfc2634 17 18try: 19 import unittest2 as unittest 20except ImportError: 21 import unittest 22 23 24class SignedMessageTestCase(unittest.TestCase): 25 signed_message_pem_text = """\ 26MIIFLgYJKoZIhvcNAQcCoIIFHzCCBRsCAQExDTALBglghkgBZQMEAgIwUQYJKoZI 27hvcNAQcBoEQEQkNvbnRlbnQtVHlwZTogdGV4dC9wbGFpbg0KDQpXYXRzb24sIGNv 28bWUgaGVyZSAtIEkgd2FudCB0byBzZWUgeW91LqCCAnwwggJ4MIIB/qADAgECAgkA 29pbNUKBuwbjswCgYIKoZIzj0EAwMwPzELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAlZB 30MRAwDgYDVQQHDAdIZXJuZG9uMREwDwYDVQQKDAhCb2d1cyBDQTAeFw0xOTA1Mjkx 31NDQ1NDFaFw0yMDA1MjgxNDQ1NDFaMHAxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJW 32QTEQMA4GA1UEBxMHSGVybmRvbjEQMA4GA1UEChMHRXhhbXBsZTEOMAwGA1UEAxMF 33QWxpY2UxIDAeBgkqhkiG9w0BCQEWEWFsaWNlQGV4YW1wbGUuY29tMHYwEAYHKoZI 34zj0CAQYFK4EEACIDYgAE+M2fBy/sRA6V1pKFqecRTE8+LuAHtZxes1wmJZrBBg+b 35z7uYZfYQxI3dVB0YCSD6Mt3yXFlnmfBRwoqyArbjIBYrDbHBv2k8Csg2DhQ7qs/w 36to8hMKoFgkcscqIbiV7Zo4GUMIGRMAsGA1UdDwQEAwIHgDBCBglghkgBhvhCAQ0E 37NRYzVGhpcyBjZXJ0aWZpY2F0ZSBjYW5ub3QgYmUgdHJ1c3RlZCBmb3IgYW55IHB1 38cnBvc2UuMB0GA1UdDgQWBBTEuloOPnrjPIGw9AKqaLsW4JYONTAfBgNVHSMEGDAW 39gBTyNds0BNqlVfK9aQOZsGLs4hUIwTAKBggqhkjOPQQDAwNoADBlAjBjuR/RNbgL 403kRhmn+PJTeKaL9sh/oQgHOYTgLmSnv3+NDCkhfKuMNoo/tHrkmihYgCMQC94Mae 41rDIrQpi0IDh+v0QSAv9rMife8tClafXWtDwwL8MS7oAh0ymT446Uizxx3PUxggIy 42MIICLgIBATBMMD8xCzAJBgNVBAYTAlVTMQswCQYDVQQIDAJWQTEQMA4GA1UEBwwH 43SGVybmRvbjERMA8GA1UECgwIQm9ndXMgQ0ECCQCls1QoG7BuOzALBglghkgBZQME 44AgKgggFXMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8X 45DTE5MDUyOTE4MjMxOVowJQYLKoZIhvcNAQkQAgcxFgQUAbWZQYhLO5wtUgsOCGtT 464V3aNhUwLwYLKoZIhvcNAQkQAgQxIDAeDBFXYXRzb24sIGNvbWUgaGVyZQYJKoZI 47hvcNAQcBMDUGCyqGSIb3DQEJEAICMSYxJAIBAQYKKwYBBAGBrGABARMTQm9hZ3Vz 48IFByaXZhY3kgTWFyazA/BgkqhkiG9w0BCQQxMgQwtuQipP2CZx7U96rGbUT06LC5 49jVFYccZW5/CaNvpcrOPiChDm2vI3m4k300z5mSZsME0GCyqGSIb3DQEJEAIBMT4w 50PAQgx08hD2QnVwj1DoeRELNtdZ0PffW4BQIvcwwVc/goU6OAAQEwFTATgRFhbGlj 51ZUBleGFtcGxlLmNvbTAKBggqhkjOPQQDAwRnMGUCMAFFVP2gYFLTbaxvV5J2ICNM 52Nk/K4pXbj5Zvj3dcCeC4+OUYyG3ZW5lOtKqaabEAXAIxALDg1WOouhkDfwuQdgBi 53mNTr0mjYeUWRe/15IsWNx+kuFcLDr71DFHvMFY5M3sdfMA== 54""" 55 56 def setUp(self): 57 self.asn1Spec = rfc5652.ContentInfo() 58 59 def testDerCodec(self): 60 substrate = pem.readBase64fromText(self.signed_message_pem_text) 61 asn1Object, rest = der_decode (substrate, asn1Spec=self.asn1Spec) 62 assert not rest 63 assert asn1Object.prettyPrint() 64 assert der_encode(asn1Object) == substrate 65 66 assert asn1Object['contentType'] == rfc5652.id_signedData 67 sd, rest = der_decode(asn1Object['content'], asn1Spec=rfc5652.SignedData()) 68 assert not rest 69 assert sd.prettyPrint() 70 assert der_encode(sd) == asn1Object['content'] 71 72 for sa in sd['signerInfos'][0]['signedAttrs']: 73 sat = sa['attrType'] 74 sav0 = sa['attrValues'][0] 75 76 if sat in rfc5652.cmsAttributesMap.keys(): 77 sav, rest = der_decode(sav0, asn1Spec=rfc5652.cmsAttributesMap[sat]) 78 assert not rest 79 assert sav.prettyPrint() 80 assert der_encode(sav) == sav0 81 82 83class SignedReceiptTestCase(unittest.TestCase): 84 signed_receipt_pem_text = """\ 85MIIE3gYJKoZIhvcNAQcCoIIEzzCCBMsCAQMxDTALBglghkgBZQMEAgEwga4GCyq 86GSIb3DQEJEAEBoIGeBIGbMIGYAgEBBgkqhkiG9w0BBwEEIMdPIQ9kJ1cI9Q6HkR 87CzbXWdD331uAUCL3MMFXP4KFOjBGYwZAIwOLV5WCbYjy5HLHE69IqXQQHVDJQzm 88o18WwkFrEYH3EMsvpXEIGqsFTFN6NV4VBe9AjA5fGOCP5IhI32YqmGfs+zDlqZy 89b2xSX6Gr/IfCIm0angfOI39g7lAZDyivjh5H/oSgggJ3MIICczCCAfqgAwIBAgI 90JAKWzVCgbsG48MAoGCCqGSM49BAMDMD8xCzAJBgNVBAYTAlVTMQswCQYDVQQIDA 91JWQTEQMA4GA1UEBwwHSGVybmRvbjERMA8GA1UECgwIQm9ndXMgQ0EwHhcNMTkwN 92TI5MTkyMDEzWhcNMjAwNTI4MTkyMDEzWjBsMQswCQYDVQQGEwJVUzELMAkGA1UE 93CBMCVkExEDAOBgNVBAcTB0hlcm5kb24xEDAOBgNVBAoTB0V4YW1wbGUxDDAKBgN 94VBAMTA0JvYjEeMBwGCSqGSIb3DQEJARYPYm9iQGV4YW1wbGUuY29tMHYwEAYHKo 95ZIzj0CAQYFK4EEACIDYgAEMaRiVS8WvN8Ycmpfq75jBbOMUukNfXAg6AL0JJBXt 96IFAuIJcZVlkLn/xbywkcMLHK/O+w9RWUQa2Cjw+h8b/1Cl+gIpqLtE558bD5PfM 972aYpJ/YE6yZ9nBfTQs7z1TH5o4GUMIGRMAsGA1UdDwQEAwIHgDBCBglghkgBhvh 98CAQ0ENRYzVGhpcyBjZXJ0aWZpY2F0ZSBjYW5ub3QgYmUgdHJ1c3RlZCBmb3IgYW 9955IHB1cnBvc2UuMB0GA1UdDgQWBBTKa2Zy3iybV3+YjuLDKtNmjsIapTAfBgNVH 100SMEGDAWgBTyNds0BNqlVfK9aQOZsGLs4hUIwTAKBggqhkjOPQQDAwNnADBkAjAV 101boS6OfEYQomLDi2RUkd71hzwwiQZztbxNbosahIzjR8ZQaHhjdjJlrP/T6aXBws 102CMDfRweYz3Ce4E4wPfoqQnvqpM7ZlfhstjQQGOsWAtIIfqW/l+TgCO8ux3XLV6f 103j36zGCAYkwggGFAgEBMEwwPzELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAlZBMRAwD 104gYDVQQHDAdIZXJuZG9uMREwDwYDVQQKDAhCb2d1cyBDQQIJAKWzVCgbsG48MAsG 105CWCGSAFlAwQCAaCBrjAaBgkqhkiG9w0BCQMxDQYLKoZIhvcNAQkQAQEwHAYJKoZ 106IhvcNAQkFMQ8XDTE5MDUyOTE5MzU1NVowLwYJKoZIhvcNAQkEMSIEIGb9Hm2kCn 107M0CYNpZU4Uj7dN0AzOieIn9sDqZMcIcZrEMEEGCyqGSIb3DQEJEAIFMTIEMBZze 108HVja7fQ62ywyh8rtKzBP1WJooMdZ+8c6pRqfIESYIU5bQnH99OPA51QCwdOdjAK 109BggqhkjOPQQDAgRoMGYCMQDZiT22xgab6RFMAPvN4fhWwzx017EzttD4VaYrpbo 110lropBdPJ6jIXiZQgCwxbGTCwCMQClaQ9K+L5LTeuW50ZKSIbmBZQ5dxjtnK3OlS 1117hYRi6U0JKZmWbbuS8vFIgX7eIkd8= 112""" 113 114 def setUp(self): 115 self.asn1Spec = rfc5652.ContentInfo() 116 117 def testDerCodec(self): 118 substrate = pem.readBase64fromText(self.signed_receipt_pem_text) 119 asn1Object, rest = der_decode(substrate, asn1Spec=self.asn1Spec) 120 assert not rest 121 assert asn1Object.prettyPrint() 122 assert der_encode(asn1Object) == substrate 123 124 assert asn1Object['contentType'] == rfc5652.id_signedData 125 sd, rest = der_decode (asn1Object['content'], asn1Spec=rfc5652.SignedData()) 126 assert not rest 127 assert sd.prettyPrint() 128 assert der_encode(sd) == asn1Object['content'] 129 130 assert sd['encapContentInfo']['eContentType'] == rfc2634.id_ct_receipt 131 receipt, rest = der_decode(sd['encapContentInfo']['eContent'], 132 asn1Spec=rfc2634.Receipt()) 133 assert not rest 134 assert receipt.prettyPrint() 135 assert der_encode(receipt) == sd['encapContentInfo']['eContent'] 136 assert receipt['version'] == rfc2634.ESSVersion().subtype(value='v1') 137 138 for sa in sd['signerInfos'][0]['signedAttrs']: 139 sat = sa['attrType'] 140 sav0 = sa['attrValues'][0] 141 142 if sat in rfc5652.cmsAttributesMap.keys(): 143 sav, rest = der_decode(sav0, asn1Spec=rfc5652.cmsAttributesMap[sat]) 144 assert not rest 145 assert sav.prettyPrint() 146 assert der_encode(sav) == sav0 147 148 def testOpenTypes(self): 149 substrate = pem.readBase64fromText(self.signed_receipt_pem_text) 150 asn1Object, rest = der_decode(substrate, 151 asn1Spec=self.asn1Spec, 152 decodeOpenTypes=True) 153 assert not rest 154 assert asn1Object.prettyPrint() 155 assert der_encode(asn1Object) == substrate 156 157 assert asn1Object['contentType'] in rfc5652.cmsContentTypesMap.keys() 158 assert asn1Object['contentType'] == rfc5652.id_signedData 159 160 sd = asn1Object['content'] 161 assert sd['version'] == rfc5652.CMSVersion().subtype(value='v3') 162 assert sd['encapContentInfo']['eContentType'] in rfc5652.cmsContentTypesMap.keys() 163 assert sd['encapContentInfo']['eContentType'] == rfc2634.id_ct_receipt 164 165 for sa in sd['signerInfos'][0]['signedAttrs']: 166 assert sa['attrType'] in rfc5652.cmsAttributesMap.keys() 167 if sa['attrType'] == rfc2634.id_aa_msgSigDigest: 168 sa['attrValues'][0].prettyPrint()[:10] == '0x167378' 169 170 # Since receipt is inside an OCTET STRING, decodeOpenTypes=True cannot 171 # automatically decode it 172 receipt, rest = der_decode(sd['encapContentInfo']['eContent'], 173 asn1Spec=rfc5652.cmsContentTypesMap[sd['encapContentInfo']['eContentType']]) 174 assert receipt['version'] == rfc2634.ESSVersion().subtype(value='v1') 175 176 177suite = unittest.TestLoader().loadTestsFromModule(sys.modules[__name__]) 178 179if __name__ == '__main__': 180 import sys 181 182 result = unittest.TextTestRunner(verbosity=2).run(suite) 183 sys.exit(not result.wasSuccessful()) 184