1#
2# This file is part of pyasn1-modules software.
3#
4# Created by Russ Housley
5# Copyright (c) 2019, Vigil Security, LLC
6# License: http://snmplabs.com/pyasn1/license.html
7#
8
9import sys
10
11from pyasn1.codec.der.decoder import decode as der_decode
12from pyasn1.codec.der.encoder import encode as der_encode
13
14from pyasn1_modules import pem
15from pyasn1_modules import rfc5652
16from pyasn1_modules import rfc2634
17
18try:
19    import unittest2 as unittest
20except ImportError:
21    import unittest
22
23
24class SignedMessageTestCase(unittest.TestCase):
25    signed_message_pem_text = """\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54"""
55
56    def setUp(self):
57        self.asn1Spec = rfc5652.ContentInfo()
58
59    def testDerCodec(self):
60        substrate = pem.readBase64fromText(self.signed_message_pem_text)
61        asn1Object, rest = der_decode (substrate, asn1Spec=self.asn1Spec)
62        assert not rest
63        assert asn1Object.prettyPrint()
64        assert der_encode(asn1Object) == substrate
65
66        assert asn1Object['contentType'] == rfc5652.id_signedData
67        sd, rest = der_decode(asn1Object['content'], asn1Spec=rfc5652.SignedData())
68        assert not rest
69        assert sd.prettyPrint()
70        assert der_encode(sd) == asn1Object['content']
71
72        for sa in sd['signerInfos'][0]['signedAttrs']:
73            sat = sa['attrType']
74            sav0 = sa['attrValues'][0]
75
76            if sat in rfc5652.cmsAttributesMap.keys():
77                sav, rest = der_decode(sav0, asn1Spec=rfc5652.cmsAttributesMap[sat])
78                assert not rest
79                assert sav.prettyPrint()
80                assert der_encode(sav) == sav0
81
82
83class SignedReceiptTestCase(unittest.TestCase):
84    signed_receipt_pem_text = """\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112"""
113
114    def setUp(self):
115        self.asn1Spec = rfc5652.ContentInfo()
116
117    def testDerCodec(self):
118        substrate = pem.readBase64fromText(self.signed_receipt_pem_text)
119        asn1Object, rest = der_decode(substrate, asn1Spec=self.asn1Spec)
120        assert not rest
121        assert asn1Object.prettyPrint()
122        assert der_encode(asn1Object) == substrate
123
124        assert asn1Object['contentType'] == rfc5652.id_signedData
125        sd, rest = der_decode (asn1Object['content'], asn1Spec=rfc5652.SignedData())
126        assert not rest
127        assert sd.prettyPrint()
128        assert der_encode(sd) == asn1Object['content']
129
130        assert sd['encapContentInfo']['eContentType'] == rfc2634.id_ct_receipt
131        receipt, rest = der_decode(sd['encapContentInfo']['eContent'],
132                                   asn1Spec=rfc2634.Receipt())
133        assert not rest
134        assert receipt.prettyPrint()
135        assert der_encode(receipt) == sd['encapContentInfo']['eContent']
136        assert receipt['version'] == rfc2634.ESSVersion().subtype(value='v1')
137
138        for sa in sd['signerInfos'][0]['signedAttrs']:
139            sat = sa['attrType']
140            sav0 = sa['attrValues'][0]
141
142            if sat in rfc5652.cmsAttributesMap.keys():
143                sav, rest = der_decode(sav0, asn1Spec=rfc5652.cmsAttributesMap[sat])
144                assert not rest
145                assert sav.prettyPrint()
146                assert der_encode(sav) == sav0
147
148    def testOpenTypes(self):
149        substrate = pem.readBase64fromText(self.signed_receipt_pem_text)
150        asn1Object, rest = der_decode(substrate,
151            asn1Spec=self.asn1Spec,
152            decodeOpenTypes=True)
153        assert not rest
154        assert asn1Object.prettyPrint()
155        assert der_encode(asn1Object) == substrate
156
157        assert asn1Object['contentType'] in rfc5652.cmsContentTypesMap.keys()
158        assert asn1Object['contentType'] == rfc5652.id_signedData
159
160        sd = asn1Object['content']
161        assert sd['version'] == rfc5652.CMSVersion().subtype(value='v3')
162        assert sd['encapContentInfo']['eContentType'] in rfc5652.cmsContentTypesMap.keys()
163        assert sd['encapContentInfo']['eContentType'] == rfc2634.id_ct_receipt
164
165        for sa in sd['signerInfos'][0]['signedAttrs']:
166            assert sa['attrType'] in rfc5652.cmsAttributesMap.keys()
167            if sa['attrType'] == rfc2634.id_aa_msgSigDigest:
168                sa['attrValues'][0].prettyPrint()[:10] == '0x167378'
169
170        # Since receipt is inside an OCTET STRING, decodeOpenTypes=True cannot
171        # automatically decode it
172        receipt, rest = der_decode(sd['encapContentInfo']['eContent'],
173            asn1Spec=rfc5652.cmsContentTypesMap[sd['encapContentInfo']['eContentType']])
174        assert receipt['version'] == rfc2634.ESSVersion().subtype(value='v1')
175
176
177suite = unittest.TestLoader().loadTestsFromModule(sys.modules[__name__])
178
179if __name__ == '__main__':
180    import sys
181
182    result = unittest.TextTestRunner(verbosity=2).run(suite)
183    sys.exit(not result.wasSuccessful())
184