RegressionTests/secbackuptest/secbackuptest.m

   1 //
   2 //  Copyright 2015 - 2016 Apple. All rights reserved.
   3 //
   4
   5 /*
   6  * This is to fool os services to not provide the Keychain manager
   7  * interface tht doens't work since we don't have unified headers
   8  * between iOS and OS X. rdar://23405418/
   9  */
  10 #define __KEYCHAINCORE__ 1
  11
  12 #include <Foundation/Foundation.h>
  13 #include <Security/Security.h>
  14
  15 #include <TargetConditionals.h>
  16
  17 #include <Security/SecItemPriv.h>
  18 #include <sys/stat.h>
  19 #include <err.h>
  20
  21 #if TARGET_OS_SIMULATOR || TARGET_OS_BRIDGE
  22 int
  23 main(void)
  24 {
  25     return 0;
  26 }
  27 #else
  28
  29 #include <libaks.h>
  30
  31 static NSData *keybag = NULL;
  32 static NSString *keybaguuid = NULL;
  33
  34 static void
  35 BagMe(void)
  36 {
  37     keybag_handle_t handle;
  38     kern_return_t result;
  39     char uuidstr[37];
  40     uuid_t uuid;
  41     void *data = NULL;
  42     int length;
  43
  44     result = aks_create_bag("foo", 3, kAppleKeyStoreAsymmetricBackupBag, &handle);
  45     if (result)
  46         errx(1, "aks_create_bag: %08x", result);
  47
  48     result = aks_save_bag(handle, &data, &length);
  49     if (result)
  50         errx(1, "aks_save_bag");
  51
  52     result = aks_get_bag_uuid(handle, uuid);
  53     if (result)
  54         errx(1, "aks_get_bag_uuid");
  55
  56     uuid_unparse_lower(uuid, uuidstr);
  57
  58     keybaguuid = [NSString stringWithUTF8String:uuidstr];
  59     keybag = [NSData dataWithBytes:data length:length];
  60 }
  61
  62 int main (int argc, const char * argv[])
  63 {
  64     @autoreleasepool {
  65         NSData *password = NULL;
  66         CFErrorRef error = NULL;
  67         NSString *uuid = NULL;
  68
  69         BagMe();
  70         password = [NSData dataWithBytes:"foo" length:3];
  71
  72         NSData *backup = CFBridgingRelease(_SecKeychainCopyBackup((__bridge CFDataRef)keybag, (__bridge CFDataRef)password));
  73         if (backup == NULL) {
  74             errx(1, "backup failed");
  75         }
  76
  77         char path[] = "/tmp/secbackuptestXXXXXXX";
  78         int fd = mkstemp(path);
  79
  80         bool status = _SecKeychainWriteBackupToFileDescriptor((__bridge CFDataRef)keybag, (__bridge CFDataRef)password, fd, &error);
  81         if (!status) {
  82             NSLog(@"backup failed: %@", error);
  83             errx(1, "failed backup 2");
  84         }
  85
  86         uuid = CFBridgingRelease(_SecKeychainCopyKeybagUUIDFromFileDescriptor(fd, &error));
  87         if (uuid == NULL) {
  88             NSLog(@"getting uuid failed failed: %@", error);
  89             errx(1, "failed getting uuid");
  90         }
  91
  92         if (![uuid isEqual:keybaguuid]) {
  93             NSLog(@"getting uuid failed failed: %@ vs %@", uuid, keybaguuid);
  94             errx(1, "failed compare uuid");
  95         }
  96
  97         struct stat sb;
  98         fstat(fd, &sb);
  99
 100         if (sb.st_size != (off_t)[backup length])
 101             warn("backup different ");
 102
 103         if (abs((int)(sb.st_size - (off_t)[backup length])) > 1000)
 104             errx(1, "backup different enough to fail");
 105
 106         status = _SecKeychainRestoreBackupFromFileDescriptor(fd, (__bridge CFDataRef)keybag, (__bridge CFDataRef)password, &error);
 107         if (!status) {
 108             NSLog(@"restore failed: %@", error);
 109             errx(1, "restore failed");
 110         }
 111
 112         close(fd);
 113         unlink(path);
 114
 115         NSData *backup2 = CFBridgingRelease(_SecKeychainCopyBackup((__bridge CFDataRef)keybag, (__bridge CFDataRef)password));
 116         if (backup2 == NULL) {
 117             errx(1, "backup 3 failed");
 118         }
 119
 120         if (abs((int)(sb.st_size - (off_t)[backup2 length])) > 1000)
 121             errx(1, "backup different enough to fail (mem vs backup2): %d vs %d", (int)sb.st_size, (int)[backup2 length]);
 122         if (abs((int)([backup length] - [backup2 length])) > 1000)
 123             errx(1, "backup different enough to fail (backup1 vs backup2: %d vs %d", (int)[backup length], (int)[backup2 length]);
 124
 125         return 0;
 126     }
 127 }
 128
 129 #endif /* TARGET_OS_SIMULATOR */
 130