OSX/sec/securityd/Regressions/secd-58-password-change.m

   1 /*
   2  * Copyright (c) 2013-2014 Apple Inc. All Rights Reserved.
   3  *
   4  * @APPLE_LICENSE_HEADER_START@
   5  *
   6  * This file contains Original Code and/or Modifications of Original Code
   7  * as defined in and that are subject to the Apple Public Source License
   8  * Version 2.0 (the 'License'). You may not use this file except in
   9  * compliance with the License. Please obtain a copy of the License at
  10  * http://www.opensource.apple.com/apsl/ and read it before using this
  11  * file.
  12  *
  13  * The Original Code and all software distributed under the License are
  14  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
  15  * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
  16  * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
  17  * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
  18  * Please see the License for the specific language governing rights and
  19  * limitations under the License.
  20  *
  21  * @APPLE_LICENSE_HEADER_END@
  22  */
  23
  24
  25
  26
  27 #include <Security/SecBase.h>
  28 #include <Security/SecItem.h>
  29
  30 #include <CoreFoundation/CFDictionary.h>
  31
  32 #include "keychain/SecureObjectSync/SOSAccount.h"
  33 #include <Security/SecureObjectSync/SOSCloudCircle.h>
  34 #include "keychain/SecureObjectSync/SOSInternal.h"
  35 #include "keychain/SecureObjectSync/SOSUserKeygen.h"
  36 #include "keychain/SecureObjectSync/SOSTransport.h"
  37
  38 #include <stdlib.h>
  39 #include <unistd.h>
  40
  41 #include "secd_regressions.h"
  42 #include "SOSTestDataSource.h"
  43
  44 #include "SOSRegressionUtilities.h"
  45 #include <utilities/SecCFWrappers.h>
  46 #include <Security/SecKeyPriv.h>
  47
  48 #include <securityd/SOSCloudCircleServer.h>
  49
  50 #include "SOSAccountTesting.h"
  51 #include "SecdTestKeychainUtilities.h"
  52
  53
  54 static bool AssertCreds(SOSAccount* account,CFStringRef acct_name, CFDataRef password) {
  55     CFErrorRef error = NULL;
  56     bool retval;
  57     ok((retval = SOSAccountAssertUserCredentialsAndUpdate(account, acct_name, password, &error)), "Credential setting (%@)", error);
  58     CFReleaseNull(error);
  59     return retval;
  60 }
  61
  62 static bool ResetToOffering(SOSAccount* account) {
  63     CFErrorRef error = NULL;
  64     bool retval;
  65     ok((retval = SOSAccountResetToOffering_wTxn(account, &error)), "Reset to offering (%@)", error);
  66     CFReleaseNull(error);
  67     return retval;
  68 }
  69
  70 static bool JoinCircle(SOSAccount* account) {
  71     CFErrorRef error = NULL;
  72     bool retval;
  73     ok((retval = SOSAccountJoinCircles_wTxn(account, &error)), "Join Circle (%@)", error);
  74     CFReleaseNull(error);
  75     return retval;
  76 }
  77
  78 static bool AcceptApplicants(SOSAccount* account, CFIndex cnt) {
  79     CFErrorRef error = NULL;
  80     bool retval = false;
  81     CFArrayRef applicants = SOSAccountCopyApplicants(account, &error);
  82
  83     ok((retval = (applicants && CFArrayGetCount(applicants) == cnt)), "See applicants %@ (%@)", applicants, error);
  84     if(retval) ok((retval = SOSAccountAcceptApplicants(account, applicants, &error)), "Accept Applicants (%@)", error);
  85     CFReleaseNull(applicants);
  86     CFReleaseNull(error);
  87     return retval;
  88 }
  89
  90 static void tests(void)
  91 {
  92     CFDataRef cfpassword = CFDataCreate(NULL, (uint8_t *) "FooFooFoo", 10);
  93     CFStringRef cfaccount = CFSTR("test@test.org");
  94
  95     CFMutableDictionaryRef changes = CFDictionaryCreateMutableForCFTypes(kCFAllocatorDefault);
  96     SOSAccount* alice_account = CreateAccountForLocalChanges(CFSTR("Alice"), CFSTR("TestSource"));
  97     SOSAccount* bob_account = CreateAccountForLocalChanges(CFSTR("Bob"), CFSTR("TestSource"));
  98     SOSAccount* carol_account = CreateAccountForLocalChanges(CFSTR("Carol"), CFSTR("TestSource"));
  99
 100     /* Set Initial Credentials and Parameters for the Syncing Circles ---------------------------------------*/
 101     ok(AssertCreds(bob_account, cfaccount, cfpassword), "Setting credentials for Bob");
 102     // Bob wins writing at this point, feed the changes back to alice.
 103
 104     is(ProcessChangesUntilNoChange(changes, alice_account, bob_account, carol_account, NULL), 1, "updates");
 105
 106     ok(AssertCreds(alice_account, cfaccount, cfpassword), "Setting credentials for Alice");
 107     ok(AssertCreds(carol_account, cfaccount, cfpassword), "Setting credentials for Carol");
 108     CFReleaseNull(cfpassword);
 109
 110     /* Make Alice First Peer -------------------------------------------------------------------------------*/
 111     ok(ResetToOffering(alice_account), "Reset to offering - Alice as first peer");
 112
 113     is(ProcessChangesUntilNoChange(changes, alice_account, bob_account, carol_account, NULL), 2, "updates");
 114
 115     /* Bob Joins -------------------------------------------------------------------------------------------*/
 116     ok(JoinCircle(bob_account), "Bob Applies");
 117
 118     is(ProcessChangesUntilNoChange(changes, alice_account, bob_account, carol_account, NULL), 2, "updates");
 119
 120     /* Alice Accepts -------------------------------------------------------------------------------------------*/
 121     ok(AcceptApplicants(alice_account, 1), "Alice Accepts Bob's Application");
 122
 123     is(ProcessChangesUntilNoChange(changes, alice_account, bob_account, carol_account, NULL), 3, "4 updates");
 124     accounts_agree("bob&alice pair", bob_account, alice_account);
 125
 126     /* Carol Applies -------------------------------------------------------------------------------------------*/
 127     ok(JoinCircle(carol_account), "Carol Applies");
 128
 129     is(ProcessChangesUntilNoChange(changes, alice_account, bob_account, carol_account, NULL), 2, "updates");
 130     is(countPeers(alice_account), 2, "See two peers");
 131
 132
 133     /* Change Password ------------------------------------------------------------------------------------------*/
 134     CFDataRef cfnewpassword = CFDataCreate(NULL, (uint8_t *) "ooFooFooF", 10);
 135
 136     ok(AssertCreds(bob_account , cfaccount, cfnewpassword), "Credential resetting for Bob");
 137     is(countPeers(bob_account), 2, "There are two valid peers - iCloud and Bob");
 138     is(countActivePeers(bob_account), 3, "There are three active peers - bob, alice, and iCloud");
 139     is(countActiveValidPeers(bob_account), 2, "There is two active valid peer - Bob and iCloud");
 140
 141     is(ProcessChangesUntilNoChange(changes, alice_account, bob_account, carol_account, NULL), 2, "updates");
 142
 143     ok(AssertCreds(alice_account , cfaccount, cfnewpassword), "Credential resetting for Alice");
 144
 145     is(ProcessChangesUntilNoChange(changes, alice_account, bob_account, carol_account, NULL), 3, "updates");
 146
 147     is(countPeers(alice_account), 2, "There are two peers - bob and alice");
 148     is(countActiveValidPeers(alice_account), 3, "There are three active valid peers - alice, bob, and icloud");
 149
 150     is(ProcessChangesUntilNoChange(changes, alice_account, bob_account, carol_account, NULL), 1, "updates");
 151
 152     accounts_agree("bob&alice pair", bob_account, alice_account);
 153     is(countPeers(alice_account), 2, "There are two peers - bob and alice");
 154     is(countActiveValidPeers(alice_account), 3, "There are three active valid peers - alice, bob, and icloud");
 155
 156     ok(AssertCreds(carol_account , cfaccount, cfnewpassword), "Credential resetting for Carol");
 157
 158     is(ProcessChangesUntilNoChange(changes, alice_account, bob_account, carol_account, NULL), 1, "updates");
 159     is(ProcessChangesUntilNoChange(changes, alice_account, bob_account, carol_account, NULL), 2, "updates");
 160
 161     accounts_agree("bob&alice pair", bob_account, alice_account);
 162     accounts_agree_internal("bob&carol pair", bob_account, carol_account, false);
 163
 164     ok(AcceptApplicants(alice_account , 1), "Alice Accepts Carol's Application");
 165
 166     is(ProcessChangesUntilNoChange(changes, alice_account, bob_account, carol_account, NULL), 4, "updates");
 167
 168     accounts_agree_internal("bob&alice pair", bob_account, alice_account, false);
 169     accounts_agree_internal("bob&carol pair", bob_account, carol_account, false);
 170     accounts_agree_internal("carol&alice pair", alice_account, carol_account, false);
 171
 172
 173     /* Change Password 2 ----------------------------------------------------------------------------------------*/
 174     CFReleaseNull(cfnewpassword);
 175     cfnewpassword = CFDataCreate(NULL, (uint8_t *) "ffoffoffo", 10);
 176
 177     /* Bob */
 178     ok(AssertCreds(bob_account , cfaccount, cfnewpassword), "Credential resetting for Bob");
 179     is(ProcessChangesUntilNoChange(changes, alice_account, bob_account, carol_account, NULL), 2, "updates");
 180
 181     is(countPeers(bob_account), 3, "There are three peers - Alice, Carol, Bob");
 182     is(countActivePeers(bob_account), 4, "There are four active peers - bob, alice, carol and iCloud");
 183     is(countActiveValidPeers(bob_account), 2, "There is two active valid peer - Bob and iCloud");
 184
 185
 186     /* Alice */
 187     ok(AssertCreds(alice_account , cfaccount, cfnewpassword), "Credential resetting for Alice");
 188     is(ProcessChangesUntilNoChange(changes, alice_account, bob_account, carol_account, NULL), 3, "updates");
 189
 190     is(countPeers(alice_account), 3, "There are three peers - Alice, Carol, Bob");
 191     is(countActivePeers(alice_account), 4, "There are four active peers - bob, alice, carol and iCloud");
 192     is(countActiveValidPeers(alice_account), 3, "There are three active valid peers - alice, bob, and icloud");
 193
 194
 195     /* Carol */
 196     ok(AssertCreds(carol_account , cfaccount, cfnewpassword), "Credential resetting for Carol");
 197     is(ProcessChangesUntilNoChange(changes, alice_account, bob_account, carol_account, NULL), 4, "updates");
 198
 199     is(countPeers(carol_account), 3, "There are three peers - Alice, Carol, Bob");
 200     is(countActivePeers(carol_account), 4, "There are four active peers - bob, alice, carol and iCloud");
 201     is(countActiveValidPeers(carol_account), 4, "There are three active valid peers - alice, bob, carol, and icloud");
 202
 203     accounts_agree_internal("bob&alice pair", bob_account, alice_account, false);
 204
 205     /* Change Password 3 - cause a parm lost update collision ----------------------------------------------------*/
 206     CFReleaseNull(cfnewpassword);
 207     cfnewpassword = CFDataCreate(NULL, (uint8_t *) "cococococ", 10);
 208
 209     ok(AssertCreds(bob_account , cfaccount, cfnewpassword), "Credential resetting for Bob");
 210     ok(AssertCreds(alice_account , cfaccount, cfnewpassword), "Credential resetting for Alice");
 211     is(ProcessChangesUntilNoChange(changes, alice_account, bob_account, carol_account, NULL), 4, "updates");
 212
 213     is(countPeers(alice_account), 3, "There are three peers - Alice, Carol, Bob");
 214     is(countActivePeers(alice_account), 4, "There are four active peers - bob, alice, carol and iCloud");
 215     is(countActiveValidPeers(alice_account), 3, "There are three active valid peers - alice, bob, and icloud");
 216
 217     CFReleaseNull(cfnewpassword);
 218     alice_account = nil;
 219     bob_account = nil;
 220     carol_account = nil;
 221     SOSTestCleanup();
 222 }
 223
 224 int secd_58_password_change(int argc, char *const *argv)
 225 {
 226     plan_tests(211);
 227
 228     secd_test_setup_temp_keychain(__FUNCTION__, NULL);
 229
 230     tests();
 231
 232     return 0;
 233 }