ZacharyZhang-NY
b7fca0146d
ElyDoc, ElyTable, ElyShow (LibreOfficeKit), ElyPDF (MuPDF), ElyTree (Git), ElyMark (Milkdown and CodeMirror in CEF). ElyMail and ElyAgent follow.
88 lines
2.7 KiB
Rust
88 lines
2.7 KiB
Rust
//! Whether this system trusts a certificate chain (PDF-12).
|
|
|
|
use std::io;
|
|
|
|
/// The system's answer for a chain, leaf first.
|
|
#[derive(Clone, Debug, PartialEq, Eq)]
|
|
pub enum Trust {
|
|
Trusted,
|
|
/// The system's own words for why not.
|
|
Untrusted(String),
|
|
}
|
|
|
|
/// Evaluates `chain` (DER, leaf first) against the system's trust settings.
|
|
#[cfg(target_os = "macos")]
|
|
pub fn check(chain: &[Vec<u8>]) -> io::Result<Trust> {
|
|
mac::check(chain, None)
|
|
}
|
|
|
|
#[cfg(not(target_os = "macos"))]
|
|
pub fn check(_chain: &[Vec<u8>]) -> io::Result<Trust> {
|
|
Err(io::Error::new(
|
|
io::ErrorKind::Unsupported,
|
|
"certificate trust is not built on this platform",
|
|
))
|
|
}
|
|
|
|
#[cfg(target_os = "macos")]
|
|
mod mac {
|
|
use std::io;
|
|
|
|
use security_framework::{certificate::SecCertificate, policy::SecPolicy, trust::SecTrust};
|
|
|
|
use super::Trust;
|
|
|
|
/// `anchors` replaces the system's roots; tests only.
|
|
pub fn check(chain: &[Vec<u8>], anchors: Option<&[Vec<u8>]>) -> io::Result<Trust> {
|
|
let certs = |ders: &[Vec<u8>]| -> io::Result<Vec<SecCertificate>> {
|
|
ders.iter()
|
|
.map(|der| SecCertificate::from_der(der).map_err(io::Error::other))
|
|
.collect()
|
|
};
|
|
let leaf = certs(chain)?;
|
|
if leaf.is_empty() {
|
|
return Err(io::Error::other("a signature with no certificate"));
|
|
}
|
|
let mut trust = SecTrust::create_with_certificates(&leaf, &[SecPolicy::create_x509()])
|
|
.map_err(io::Error::other)?;
|
|
// No network: revocation is never checked.
|
|
trust
|
|
.set_network_fetch_allowed(false)
|
|
.map_err(io::Error::other)?;
|
|
if let Some(anchors) = anchors {
|
|
trust
|
|
.set_anchor_certificates(&certs(anchors)?)
|
|
.map_err(io::Error::other)?;
|
|
}
|
|
Ok(match trust.evaluate_with_error() {
|
|
Ok(()) => Trust::Trusted,
|
|
Err(why) => Trust::Untrusted(why.description().to_string()),
|
|
})
|
|
}
|
|
|
|
#[cfg(test)]
|
|
mod tests {
|
|
use super::{Trust, check};
|
|
|
|
/// The certificate in tests/fixtures/pdf/signer.p12, self-signed.
|
|
fn signer() -> Vec<u8> {
|
|
include_bytes!("../../../tests/fixtures/pdf/signer.der").to_vec()
|
|
}
|
|
|
|
#[test]
|
|
fn a_self_signed_signer_is_not_trusted_by_the_system() {
|
|
assert!(
|
|
matches!(check(&[signer()], None).expect("checks"), Trust::Untrusted(why) if !why.is_empty())
|
|
);
|
|
}
|
|
|
|
#[test]
|
|
fn a_chain_to_a_trusted_root_is_trusted() {
|
|
assert_eq!(
|
|
check(&[signer()], Some(&[signer()])).expect("checks"),
|
|
Trust::Trusted
|
|
);
|
|
}
|
|
}
|
|
}
|