blob: 745a63c69a3921d99bf42ba94cac02c12e70cf10 [file] [log] [blame]
// Copyright (c) 2013 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "net/ssl/ssl_platform_key_android.h"
#include <string>
#include "base/android/jni_android.h"
#include "base/android/jni_array.h"
#include "base/android/scoped_java_ref.h"
#include "base/files/file_path.h"
#include "base/files/file_util.h"
#include "net/android/keystore.h"
#include "net/cert/x509_certificate.h"
#include "net/net_test_jni_headers/AndroidKeyStoreTestUtil_jni.h"
#include "net/ssl/ssl_private_key.h"
#include "net/ssl/ssl_private_key_test_util.h"
#include "net/test/cert_test_util.h"
#include "net/test/test_data_directory.h"
#include "net/test/test_with_task_environment.h"
#include "testing/gtest/include/gtest/gtest.h"
#include "third_party/boringssl/src/include/openssl/ssl.h"
namespace net {
namespace {
typedef base::android::ScopedJavaLocalRef<jobject> ScopedJava;
bool ReadTestFile(const char* filename, std::string* pkcs8) {
base::FilePath certs_dir = GetTestCertsDirectory();
base::FilePath file_path = certs_dir.AppendASCII(filename);
return base::ReadFileToString(file_path, pkcs8);
}
// Retrieve a JNI local ref from encoded PKCS#8 data.
ScopedJava GetPKCS8PrivateKeyJava(android::PrivateKeyType key_type,
const std::string& pkcs8_key) {
JNIEnv* env = base::android::AttachCurrentThread();
base::android::ScopedJavaLocalRef<jbyteArray> bytes(
base::android::ToJavaByteArray(
env, reinterpret_cast<const uint8_t*>(pkcs8_key.data()),
pkcs8_key.size()));
ScopedJava key(Java_AndroidKeyStoreTestUtil_createPrivateKeyFromPKCS8(
env, key_type, bytes));
return key;
}
struct TestKey {
const char* name;
const char* cert_file;
const char* key_file;
int type;
android::PrivateKeyType android_key_type;
};
const TestKey kTestKeys[] = {
{"RSA", "client_1.pem", "client_1.pk8", EVP_PKEY_RSA,
android::PRIVATE_KEY_TYPE_RSA},
{"ECDSA_P256", "client_4.pem", "client_4.pk8", EVP_PKEY_EC,
android::PRIVATE_KEY_TYPE_ECDSA},
{"ECDSA_P384", "client_5.pem", "client_5.pk8", EVP_PKEY_EC,
android::PRIVATE_KEY_TYPE_ECDSA},
{"ECDSA_P521", "client_6.pem", "client_6.pk8", EVP_PKEY_EC,
android::PRIVATE_KEY_TYPE_ECDSA},
};
std::string TestKeyToString(const testing::TestParamInfo<TestKey>& params) {
return params.param.name;
}
} // namespace
class SSLPlatformKeyAndroidTest : public testing::TestWithParam<TestKey>,
public WithTaskEnvironment {};
TEST_P(SSLPlatformKeyAndroidTest, Matches) {
const TestKey& test_key = GetParam();
scoped_refptr<X509Certificate> cert =
ImportCertFromFile(GetTestCertsDirectory(), test_key.cert_file);
ASSERT_TRUE(cert);
std::string key_bytes;
ASSERT_TRUE(ReadTestFile(test_key.key_file, &key_bytes));
ScopedJava java_key =
GetPKCS8PrivateKeyJava(test_key.android_key_type, key_bytes);
ASSERT_FALSE(java_key.is_null());
scoped_refptr<SSLPrivateKey> key = WrapJavaPrivateKey(cert.get(), java_key);
ASSERT_TRUE(key);
EXPECT_EQ(SSLPrivateKey::DefaultAlgorithmPreferences(test_key.type,
true /* supports_pss */),
key->GetAlgorithmPreferences());
TestSSLPrivateKeyMatches(key.get(), key_bytes);
}
INSTANTIATE_TEST_SUITE_P(All,
SSLPlatformKeyAndroidTest,
testing::ValuesIn(kTestKeys),
TestKeyToString);
} // namespace net