• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1#!/usr/bin/env python3
2
3#
4# Copyright (C) 2017-2020 The Android Open Source Project
5#
6# Permission is hereby granted, free of charge, to any person
7# obtaining a copy of this software and associated documentation
8# files (the "Software"), to deal in the Software without
9# restriction, including without limitation the rights to use, copy,
10# modify, merge, publish, distribute, sublicense, and/or sell copies
11# of the Software, and to permit persons to whom the Software is
12# furnished to do so, subject to the following conditions:
13#
14# The above copyright notice and this permission notice shall be
15# included in all copies or substantial portions of the Software.
16#
17# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
18# EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
19# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
20# NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
21# BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
22# ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
23# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
24# SOFTWARE.
25#
26
27import errno
28import os
29import subprocess
30import sys
31
32
33def rsa_signer_with_files(argv):
34  if len(argv) != 4:
35    sys.stderr.write('Wrong number of arguments: {} <alg> <pub key> <file>\n'
36                     .format(argv[0]))
37    return errno.EINVAL
38
39  signing_file = open(argv[3], mode='rb+')
40  data = signing_file.read()
41  if not data:
42    sys.stderr.write('There is no input data\n')
43    return errno.EINVAL
44
45  if os.environ.get('SIGNING_HELPER_GENERATE_WRONG_SIGNATURE'):
46    # We're only called with this algorithm which signature size is 256.
47    assert argv[1] == 'SHA256_RSA2048'
48    signing_file.seek(0)
49    signing_file.write(b'X' * 256)
50    return 0
51
52  if not os.getenv('SIGNING_HELPER_TEST'):
53    sys.stderr.write('env SIGNING_HELPER_TEST is not set or empty\n')
54    return errno.EINVAL
55
56  test_file_name = os.environ['SIGNING_HELPER_TEST']
57  if os.path.isfile(test_file_name) and not os.access(test_file_name, os.W_OK):
58    sys.stderr.write('no permission to write into {} file\n'
59                     .format(test_file_name))
60    return errno.EACCES
61
62  p = subprocess.Popen(
63      ['openssl', 'rsautl', '-sign', '-inkey', argv[2], '-raw'],
64      stdin=subprocess.PIPE, stdout=subprocess.PIPE)
65
66  (pout, _) = p.communicate(data)
67  retcode = p.wait()
68  if retcode != 0:
69    return retcode
70
71  signing_file.seek(0)
72  signing_file.write(pout)
73
74  with open(test_file_name, 'w') as f:
75    f.write('DONE')
76
77  return 0
78
79if __name__ == '__main__':
80  sys.exit(rsa_signer_with_files(sys.argv))
81