1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
|
//===----------------------------------------------------------------------===//
//
// This source file is part of the Swift open source project
//
// Copyright (c) 2023 Apple Inc. and the Swift project authors
// Licensed under Apache License v2.0 with Runtime Library Exception
//
// See http://swift.org/LICENSE.txt for license information
// See http://swift.org/CONTRIBUTORS.txt for the list of Swift project authors
//
//===----------------------------------------------------------------------===//
#if USE_IMPL_ONLY_IMPORTS
@_implementationOnly import SwiftASN1
@_implementationOnly import X509
#else
import SwiftASN1
import X509
#endif
// MARK: - SigningEntity is the entity that generated the signature
public enum SigningEntity: Hashable, Codable, CustomStringConvertible, Sendable {
case recognized(type: SigningEntityType, name: String, organizationalUnit: String, organization: String)
case unrecognized(name: String?, organizationalUnit: String?, organization: String?)
static func from(certificate: Certificate) -> SigningEntity {
let name = certificate.subject.commonName
let organizationalUnit = certificate.subject.organizationalUnitName
let organization = certificate.subject.organizationName
if let type = certificate.signingEntityType,
let name = name,
let organizationalUnit = organizationalUnit,
let organization = organization {
return .recognized(
type: type,
name: name,
organizationalUnit: organizationalUnit,
organization: organization
)
} else {
return .unrecognized(
name: name,
organizationalUnit: organizationalUnit,
organization: organization
)
}
}
public static func == (lhs: SigningEntity, rhs: SigningEntity) -> Bool {
switch (lhs, rhs) {
case (
.recognized(let lhsType, let lhsName, let lhsOrgUnit, let lhsOrg),
.recognized(let rhsType, let rhsName, let rhsOrgUnit, let rhsOrg)
):
// For ADP type, only team ID (org unit) needs to match
if lhsType == .adp, rhsType == .adp {
return lhsOrgUnit == rhsOrgUnit
}
return lhsType == rhsType && lhsName == rhsName && lhsOrgUnit == rhsOrgUnit && lhsOrg == rhsOrg
case (
.unrecognized(let lhsName, let lhsOrgUnit, let lhsOrg),
.unrecognized(let rhsName, let rhsOrgUnit, let rhsOrg)
):
return lhsName == rhsName && lhsOrgUnit == rhsOrgUnit && lhsOrg == rhsOrg
default:
return false
}
}
public var description: String {
switch self {
case .recognized(let type, let name, let organizationalUnit, let organization):
return "SigningEntity[type=\(type), name=\(name), organizationalUnit=\(organizationalUnit), organization=\(organization)]"
case .unrecognized(let name, let organizationalUnit, let organization):
return "SigningEntity[name=\(String(describing: name)), organizationalUnit=\(String(describing: organizationalUnit)), organization=\(String(describing: organization))]"
}
}
}
// MARK: - SigningEntity types that SwiftPM recognizes
public enum SigningEntityType: String, Hashable, Codable, Sendable {
case adp // Apple Developer Program
}
extension ASN1ObjectIdentifier.NameAttributes {
static let adpSwiftPackageMarker: ASN1ObjectIdentifier = [1, 2, 840, 113_635, 100, 6, 1, 35]
}
extension Certificate {
var signingEntityType: SigningEntityType? {
if self.hasExtension(oid: ASN1ObjectIdentifier.NameAttributes.adpSwiftPackageMarker),
Certificates.wwdrIntermediates
.first(where: { $0.subject == self.issuer && $0.publicKey.isValidSignature(self.signature, for: self) }) !=
nil
{
return .adp
}
return .none
}
}
|
