123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129 |
- // Copyright 2014 The Chromium Authors. All rights reserved.
- // Use of this source code is governed by a BSD-style license that can be
- // found in the LICENSE file.
- #include "net/cert/ct_log_response_parser.h"
- #include <memory>
- #include "base/base64.h"
- #include "base/json/json_value_converter.h"
- #include "base/logging.h"
- #include "base/strings/string_piece.h"
- #include "base/time/time.h"
- #include "base/values.h"
- #include "net/cert/ct_serialization.h"
- #include "net/cert/signed_tree_head.h"
- namespace net::ct {
- namespace {
- // Structure for making JSON decoding easier. The string fields
- // are base64-encoded so will require further decoding.
- struct JsonSignedTreeHead {
- int tree_size;
- double timestamp;
- std::string sha256_root_hash;
- DigitallySigned signature;
- static void RegisterJSONConverter(
- base::JSONValueConverter<JsonSignedTreeHead>* converted);
- };
- bool ConvertSHA256RootHash(base::StringPiece s, std::string* result) {
- return base::Base64Decode(s, result) && result->size() == kSthRootHashLength;
- }
- bool ConvertTreeHeadSignature(base::StringPiece s, DigitallySigned* result) {
- std::string tree_head_signature;
- if (!base::Base64Decode(s, &tree_head_signature)) {
- return false;
- }
- base::StringPiece sp(tree_head_signature);
- return DecodeDigitallySigned(&sp, result);
- }
- void JsonSignedTreeHead::RegisterJSONConverter(
- base::JSONValueConverter<JsonSignedTreeHead>* converter) {
- converter->RegisterIntField("tree_size", &JsonSignedTreeHead::tree_size);
- converter->RegisterDoubleField("timestamp", &JsonSignedTreeHead::timestamp);
- converter->RegisterCustomField("sha256_root_hash",
- &JsonSignedTreeHead::sha256_root_hash,
- &ConvertSHA256RootHash);
- converter->RegisterCustomField<DigitallySigned>(
- "tree_head_signature",
- &JsonSignedTreeHead::signature,
- &ConvertTreeHeadSignature);
- }
- bool IsJsonSTHStructurallyValid(const JsonSignedTreeHead& sth) {
- return sth.tree_size >= 0 && sth.timestamp >= 0 &&
- !sth.sha256_root_hash.empty() && !sth.signature.signature_data.empty();
- }
- // Structure for making JSON decoding easier. The string fields
- // are base64-encoded so will require further decoding.
- struct JsonConsistencyProof {
- std::vector<std::unique_ptr<std::string>> proof_nodes;
- static void RegisterJSONConverter(
- base::JSONValueConverter<JsonConsistencyProof>* converter);
- };
- bool ConvertIndividualProofNode(const base::Value* value, std::string* result) {
- const std::string* b64_encoded_node = value->GetIfString();
- return b64_encoded_node && ConvertSHA256RootHash(*b64_encoded_node, result);
- }
- void JsonConsistencyProof::RegisterJSONConverter(
- base::JSONValueConverter<JsonConsistencyProof>* converter) {
- converter->RegisterRepeatedCustomValue<std::string>(
- "consistency", &JsonConsistencyProof::proof_nodes,
- &ConvertIndividualProofNode);
- }
- } // namespace
- bool FillSignedTreeHead(const base::Value& json_signed_tree_head,
- SignedTreeHead* signed_tree_head) {
- JsonSignedTreeHead parsed_sth;
- base::JSONValueConverter<JsonSignedTreeHead> converter;
- if (!converter.Convert(json_signed_tree_head, &parsed_sth) ||
- !IsJsonSTHStructurallyValid(parsed_sth)) {
- return false;
- }
- signed_tree_head->version = SignedTreeHead::V1;
- signed_tree_head->tree_size = parsed_sth.tree_size;
- signed_tree_head->timestamp = base::Time::FromJsTime(parsed_sth.timestamp);
- signed_tree_head->signature = parsed_sth.signature;
- memcpy(signed_tree_head->sha256_root_hash,
- parsed_sth.sha256_root_hash.c_str(),
- kSthRootHashLength);
- return true;
- }
- bool FillConsistencyProof(const base::Value& json_consistency_proof,
- std::vector<std::string>* consistency_proof) {
- JsonConsistencyProof parsed_proof;
- base::JSONValueConverter<JsonConsistencyProof> converter;
- if (!converter.Convert(json_consistency_proof, &parsed_proof)) {
- return false;
- }
- const base::Value::Dict* dict_value = json_consistency_proof.GetIfDict();
- if (!dict_value || !dict_value->Find("consistency")) {
- return false;
- }
- consistency_proof->reserve(parsed_proof.proof_nodes.size());
- for (const auto& proof_node : parsed_proof.proof_nodes) {
- consistency_proof->push_back(*proof_node);
- }
- return true;
- }
- } // namespace net::ct
|