vbatts/sbsigntools
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

sbkeysync: Change key_id to key_parse

Browse source 
Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
This commit is contained in:
Jeremy Kerr 2012-08-22 17:51:10 +08:00
parent 22450d8c40
commit bd9de8eadd
1 changed files with 25 additions and 37 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

62
src/sbkeysync.c
View file

@ -77,12 +77,6 @@ static const char *default_keystore_dirs[] = {
"/usr/share/secureboot/keys", "/usr/share/secureboot/keys",
}; };
typedef int (*key_id_func)(void *, uint8_t *, size_t, uint8_t **, int *);
struct cert_type {
EFI_GUID guid;
key_id_func get_id;
};
struct key { struct key {
EFI_GUID type; EFI_GUID type;
@ -95,6 +89,13 @@ struct key {
struct fs_keystore_entry *keystore_entry; struct fs_keystore_entry *keystore_entry;
}; };
typedef int (*key_parse_func)(struct key *, uint8_t *, size_t);
struct cert_type {
EFI_GUID guid;
key_parse_func parse;
};
struct key_database { struct key_database {
const struct key_database_type *type; const struct key_database_type *type;
struct list_head firmware_keys; struct list_head firmware_keys;
@ -137,38 +138,31 @@ static void guid_to_str(const EFI_GUID *guid, char *str)
guid->Data4[6], guid->Data4[7]); guid->Data4[6], guid->Data4[7]);
} }
static int sha256_key_id(void *ctx, uint8_t *sigdata, static int sha256_key_parse(struct key *key, uint8_t *data, size_t len)
size_t sigdata_len, uint8_t **buf, int *len)
{ {
const unsigned int sha256_id_size = 256 / 8; const unsigned int sha256_id_size = 256 / 8;
uint8_t *id;
if (sigdata_len != sha256_id_size) if (len != sha256_id_size)
return -1; return -1;
id = talloc_array(ctx, uint8_t, sha256_id_size); key->id = talloc_memdup(key, data, sha256_id_size);
memcpy(sigdata, buf, sha256_id_size); key->id_len = sha256_id_size;
*buf = id;
*len = sha256_id_size;
return 0; return 0;
} }
static int x509_key_id(void *ctx, uint8_t *sigdata, static int x509_key_parse(struct key *key, uint8_t *data, size_t len)
size_t sigdata_len, uint8_t **buf, int *len)
{ {
ASN1_INTEGER *serial; ASN1_INTEGER *serial;
const uint8_t *tmp; const uint8_t *tmp;
uint8_t *tmp_buf;
int tmp_len, rc; int tmp_len, rc;
X509 *x509; X509 *x509;
rc = -1; rc = -1;
tmp = sigdata; tmp = data;
x509 = d2i_X509(NULL, &tmp, sigdata_len); x509 = d2i_X509(NULL, &tmp, len);
if (!x509) if (!x509)
return -1; return -1;
@ -178,13 +172,8 @@ static int x509_key_id(void *ctx, uint8_t *sigdata,
serial = x509->cert_info->serialNumber; serial = x509->cert_info->serialNumber;
tmp_len = ASN1_STRING_length(serial); key->id_len = ASN1_STRING_length(serial);
tmp_buf = talloc_array(ctx, uint8_t, tmp_len); key->id = talloc_memdup(key, ASN1_STRING_data(serial), tmp_len);
memcpy(tmp_buf, ASN1_STRING_data(serial), tmp_len);
*buf = tmp_buf;
*len = tmp_len;
rc = 0; rc = 0;
@ -194,8 +183,8 @@ out:
} }
struct cert_type cert_types[] = { struct cert_type cert_types[] = {
{ EFI_CERT_SHA256_GUID, sha256_key_id }, { EFI_CERT_SHA256_GUID, sha256_key_parse },
{ EFI_CERT_X509_GUID, x509_key_id }, { EFI_CERT_X509_GUID, x509_key_parse },
}; };
static int guidcmp(const EFI_GUID *a, const EFI_GUID *b) static int guidcmp(const EFI_GUID *a, const EFI_GUID *b)
@ -203,8 +192,8 @@ static int guidcmp(const EFI_GUID *a, const EFI_GUID *b)
return memcmp(a, b, sizeof(EFI_GUID)); return memcmp(a, b, sizeof(EFI_GUID));
} }
static int key_id(void *ctx, const EFI_GUID *type, uint8_t *sigdata, static int key_parse(struct key *key, const EFI_GUID *type,
size_t sigdata_len, uint8_t **buf, int *len) uint8_t *data, size_t len)
{ {
char guid_str[GUID_STRLEN]; char guid_str[GUID_STRLEN];
unsigned int i; unsigned int i;
@ -213,8 +202,7 @@ static int key_id(void *ctx, const EFI_GUID *type, uint8_t *sigdata,
if (guidcmp(&cert_types[i].guid, type)) if (guidcmp(&cert_types[i].guid, type))
continue; continue;
return cert_types[i].get_id(ctx, sigdata, sigdata_len, return cert_types[i].parse(key, data, len);
buf, len);
} }
guid_to_str(type, guid_str); guid_to_str(type, guid_str);
@ -283,8 +271,8 @@ static int sigdb_add_key(EFI_SIGNATURE_DATA *sigdata, int len,
key = talloc(kdb, struct key); key = talloc(kdb, struct key);
rc = key_id(kdb, type, sigdata->SignatureData, len - sizeof(sigdata), rc = key_parse(key, type, sigdata->SignatureData,
&key->id, &key->id_len); len - sizeof(*sigdata));
if (rc) if (rc)
talloc_free(key); talloc_free(key);
@ -336,8 +324,8 @@ static int keystore_add_key(EFI_SIGNATURE_DATA *sigdata, int len,
key->keystore_entry = add_ctx->ke; key->keystore_entry = add_ctx->ke;
key->type = *type; key->type = *type;
rc = key_id(key, type, sigdata->SignatureData, len, rc = key_parse(key, type, sigdata->SignatureData,
&key->id, &key->id_len); len - sizeof(*sigdata));
if (rc) { if (rc) {
talloc_free(key); talloc_free(key);