1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
|
#ifndef CERT_TRANS_LOG_TEST_SIGNER_H_
#define CERT_TRANS_LOG_TEST_SIGNER_H_
#include <gtest/gtest.h>
#include <stdint.h>
#include <string>
#include "log/log_signer.h"
#include "merkletree/tree_hasher.h"
namespace cert_trans {
class LoggedEntry;
class Signer;
class Verifier;
}
// Helper class for database tests that generates test data
// that roughly resembles real certificate data in shape and size.
class TestSigner {
public:
TestSigner();
~TestSigner();
static cert_trans::Signer* DefaultSigner();
static LogSigner* DefaultLogSigner();
static cert_trans::Verifier* DefaultVerifier();
static LogSigVerifier* DefaultLogSigVerifier();
// A string and its signature.
static void SetDefaults(std::string* data, std::string* signature);
// For KAT tests: an SCT with a valid signature.
// The default type is X509_ENTRY.
static void SetDefaults(ct::LogEntry* entry);
static void SetDefaults(ct::SignedCertificateTimestamp* sct);
static void SetPrecertDefaults(ct::LogEntry* entry);
static void SetPrecertDefaults(ct::SignedCertificateTimestamp* sct);
// For KAT tests: a logged cert with a valid hash and signature.
// TODO(ekasper): add an intermediate for better coverage.
static void SetDefaults(cert_trans::LoggedEntry* logged_cert);
// For KAT tests: a tree head with a valid signature.
// Uses SHA256 for the tree hash.
static void SetDefaults(ct::SignedTreeHead* tree_head);
// simulate a cert DER string - 512-1023 randomized (not random!) bytes.
// The bytes are obtained by (a) copying chunks of 256 bytes from
// offsets 0 - 255 of the default cert and (b) appending a counter value
// (derived from current time) to further guarantee no collisions.
// (Note that real DER certs always start with 0x30...)
std::string UniqueFakeCertBytestring();
// Sha256(counter).
std::string UniqueHash();
// Generates a randomized entry as follows:
// type - chosen randomly between all options
// leaf_certificate - 512-1023 randomized (not random!) bytes.
// intermediates - 50%, none; 25%, 1; 25%, 2.
void CreateUnique(ct::LogEntry* entry);
// timestamp - current
// signature - valid signature from the default signer
// hash - valid sha256 hash of the leaf certificate
// sequence number - cleared
void CreateUnique(cert_trans::LoggedEntry* logged_cert);
// Same as above but set the default signature to avoid overhead from
// signing.
void CreateUniqueFakeSignature(cert_trans::LoggedEntry* logged_cert);
// Generates a randomized entry as follows:
// timestamp - current
// tree size - [0, RAND_MAX]
// root hash - random unique hash
// signature - valid on the above
void CreateUnique(ct::SignedTreeHead* sth);
// Helper methods for unit tests. Compare protobufs with a set of
// EXPECT_EQ macros.
static void TestEqualDigitallySigned(const ct::DigitallySigned& ds0,
const ct::DigitallySigned& ds1);
static void TestEqualX509Entries(const ct::X509ChainEntry& entry0,
const ct::X509ChainEntry& entry1);
static void TestEqualPreEntries(const ct::PrecertChainEntry& entry0,
const ct::PrecertChainEntry& entry1);
static void TestEqualEntries(const ct::LogEntry& entry0,
const ct::LogEntry& entry1);
static void TestEqualSCTs(const ct::SignedCertificateTimestamp& sct0,
const ct::SignedCertificateTimestamp& sct1);
static void TestEqualLoggedCerts(const cert_trans::LoggedEntry& c1,
const cert_trans::LoggedEntry& c2);
static void TestEqualTreeHeads(const ct::SignedTreeHead& sth1,
const ct::SignedTreeHead& sth2);
private:
// Fill everything apart from the signature.
void FillData(cert_trans::LoggedEntry* logged_cert);
LogSigner* default_signer_;
// ct::SignedCertificateTimestamp default_sct_;
// ct::SignedTreeHead default_sth_;
uint64_t counter_;
// Binary blob.
std::string default_cert_;
TreeHasher tree_hasher_;
};
#endif // CERT_TRANS_LOG_TEST_SIGNER_H_
|
