-
Notifications
You must be signed in to change notification settings - Fork 2.1k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge branch 'master' into im/subscribe-handler-app-callback
- Loading branch information
Showing
557 changed files
with
25,419 additions
and
15,522 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,4 +1,4 @@ | ||
| --- | ||
| Checks: 'bugprone-*,-bugprone-not-null-terminated-result,-bugprone-suspicious-memory-comparison,-bugprone-argument-comment,-bugprone-unused-return-value,-bugprone-branch-clone,-bugprone-easily-swappable-parameters,-bugprone-reserved-identifier,-bugprone-macro-parentheses,-bugprone-forward-declaration-namespace,-bugprone-forwarding-reference-overload,-bugprone-undelegated-constructor,-bugprone-sizeof-expression,-bugprone-implicit-widening-of-multiplication-result,-bugprone-too-small-loop-variable,-bugprone-narrowing-conversions,-bugprone-misplaced-widening-cast,-bugprone-suspicious-include,-bugprone-signed-char-misuse,-bugprone-copy-constructor-init,-clang-analyzer-core.CallAndMessage,-clang-analyzer-core.UndefinedBinaryOperatorResult,-clang-analyzer-core.NullDereference,-clang-analyzer-optin.cplusplus.UninitializedObject,-clang-analyzer-core.uninitialized.Branch,-clang-analyzer-optin.performance,-clang-analyzer-deadcode.DeadStores,-clang-analyzer-cplusplus.Move,-clang-analyzer-optin.cplusplus.VirtualCall,-clang-analyzer-security.insecureAPI.strcpy,-clang-analyzer-nullability.NullablePassedToNonnull,-clang-analyzer-optin.performance.Padding,-clang-analyzer-security.insecureAPI.bzero,-clang-analyzer-unix.cstring.NullArg,-clang-analyzer-security.insecureAPI.rand,-clang-analyzer-core.NonNullParamChecker,-clang-analyzer-nullability.NullPassedToNonnull,-clang-analyzer-unix.Malloc,-clang-analyzer-valist.Unterminated,-clang-analyzer-cplusplus.NewDeleteLeaks,-clang-diagnostic-implicit-int-conversion' | ||
| Checks: 'bugprone-*,-bugprone-not-null-terminated-result,-bugprone-suspicious-memory-comparison,-bugprone-argument-comment,-bugprone-unused-return-value,-bugprone-branch-clone,-bugprone-easily-swappable-parameters,-bugprone-reserved-identifier,-bugprone-macro-parentheses,-bugprone-forward-declaration-namespace,-bugprone-forwarding-reference-overload,-bugprone-undelegated-constructor,-bugprone-sizeof-expression,-bugprone-implicit-widening-of-multiplication-result,-bugprone-too-small-loop-variable,-bugprone-narrowing-conversions,-bugprone-misplaced-widening-cast,-bugprone-suspicious-include,-bugprone-signed-char-misuse,-bugprone-copy-constructor-init,-clang-analyzer-core.CallAndMessage,-clang-analyzer-core.UndefinedBinaryOperatorResult,-clang-analyzer-core.NullDereference,-clang-analyzer-optin.cplusplus.UninitializedObject,-clang-analyzer-core.uninitialized.Branch,-clang-analyzer-optin.performance,-clang-analyzer-optin.osx.cocoa.localizability.EmptyLocalizationContextChecker,-clang-analyzer-deadcode.DeadStores,-clang-analyzer-cplusplus.Move,-clang-analyzer-optin.cplusplus.VirtualCall,-clang-analyzer-security.insecureAPI.strcpy,-clang-analyzer-nullability.NullablePassedToNonnull,-clang-analyzer-optin.performance.Padding,-clang-analyzer-security.insecureAPI.bzero,-clang-analyzer-unix.cstring.NullArg,-clang-analyzer-security.insecureAPI.rand,-clang-analyzer-core.NonNullParamChecker,-clang-analyzer-nullability.NullPassedToNonnull,-clang-analyzer-unix.Malloc,-clang-analyzer-valist.Unterminated,-clang-analyzer-cplusplus.NewDeleteLeaks,-clang-diagnostic-implicit-int-conversion' | ||
| WarningsAsErrors: '*' | ||
| HeaderFilterRegex: '(src|examples|zzz_generated|credentials)' |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
131 changes: 131 additions & 0 deletions
131
credentials/development/fetch-development-paa-certs-from-dcl.py
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,131 @@ | ||
| #!/usr/bin/python | ||
|
|
||
| # | ||
| # Copyright (c) 2022 Project CHIP Authors | ||
| # | ||
| # Licensed under the Apache License, Version 2.0 (the "License"); | ||
| # you may not use this file except in compliance with the License. | ||
| # You may obtain a copy of the License at | ||
| # | ||
| # http://www.apache.org/licenses/LICENSE-2.0 | ||
| # | ||
| # Unless required by applicable law or agreed to in writing, software | ||
| # distributed under the License is distributed on an "AS IS" BASIS, | ||
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||
| # See the License for the specific language governing permissions and | ||
| # limitations under the License. | ||
| # | ||
|
|
||
| # Script that was used to fetch CHIP Development Product Attestation Authority (PAA) | ||
| # certificates from DCL. | ||
| # The script expects the path to the dcld tool binary as an input argument. | ||
| # | ||
| # Usage example when the script is run from the CHIP SDK root directory: | ||
| # python ./credentials/development/fetch-development-paa-certs-from-dcl.py /path/to/dcld | ||
| # | ||
| # The result will be stored in: | ||
| # credentials/development/paa-root-certs | ||
| # | ||
|
|
||
| import os | ||
| import sys | ||
| import subprocess | ||
| import copy | ||
| import re | ||
| from cryptography.hazmat.primitives import serialization | ||
| from cryptography import x509 | ||
|
|
||
|
|
||
| def parse_paa_root_certs(cmdpipe, paa_list): | ||
| """ | ||
| example output of a query to all x509 root certs in DCL: | ||
| certs: | ||
| - subject: CN=Non Production ONLY - XFN PAA Class 3 | ||
| subject_key_id: F8:99:A9:D5:AD:71:71:E4:C3:81:7F:14:10:7F:78:F0:D9:F7:62:E9 | ||
| - subject: CN=Matter Development PAA | ||
| subject_key_id: FA:92:CF:9:5E:FA:42:E1:14:30:65:16:32:FE:FE:1B:2C:77:A7:C8 | ||
| - subject: CN=Matter PAA 1,O=Google,C=US,1.3.6.1.4.1.37244.2.1=#130436303036 | ||
| subject_key_id: B0:0:56:81:B8:88:62:89:62:80:E1:21:18:A1:A8:BE:9:DE:93:21 | ||
| - subject: CN=Matter Test PAA,1.3.6.1.4.1.37244.2.1=#130431323544 | ||
| subject_key_id: E2:90:8D:36:9C:3C:A3:C1:13:BB:9:E2:4D:C1:CC:C5:A6:66:91:D4 | ||
| Brief: | ||
| This method will search for the first line that contains ': ' char sequence. | ||
| From there, it assumes every 2 lines contain subject and subject key id info of | ||
| a valid PAA root certificate. | ||
| The paa_list parameter will contain a list of all valid PAA Root certificates | ||
| from DCL. | ||
| """ | ||
|
|
||
| result = {} | ||
|
|
||
| while True: | ||
| line = cmdpipe.stdout.readline() | ||
| if not line: | ||
| break | ||
| else: | ||
| if b': ' in line: | ||
| key, value = line.split(b': ') | ||
| result[key.strip(b' -')] = value.strip() | ||
| parse_paa_root_certs.counter += 1 | ||
| if parse_paa_root_certs.counter % 2 == 0: | ||
| paa_list.append(copy.deepcopy(result)) | ||
|
|
||
|
|
||
| def write_paa_root_cert(cmdpipe, subject): | ||
| filename = 'paa-root-certs/dcld_mirror_' + \ | ||
| re.sub('[^a-zA-Z0-9_-]', '', re.sub('[=, ]', '_', subject)) | ||
| with open(filename + '.pem', 'wb+') as outfile: | ||
| while True: | ||
| line = cmdpipe.stdout.readline() | ||
| if not line: | ||
| break | ||
| else: | ||
| if b'pem_cert: |' in line: | ||
| while True: | ||
| line = cmdpipe.stdout.readline() | ||
| outfile.write(line.strip(b' \t')) | ||
| if b'-----END CERTIFICATE-----' in line: | ||
| break | ||
| # convert pem file to der | ||
| with open(filename + '.pem', 'rb') as infile: | ||
| pem_certificate = x509.load_pem_x509_certificate(infile.read()) | ||
| with open(filename + '.der', 'wb+') as outfile: | ||
| der_certificate = pem_certificate.public_bytes( | ||
| serialization.Encoding.DER) | ||
| outfile.write(der_certificate) | ||
|
|
||
|
|
||
| def main(): | ||
| if len(sys.argv) == 2: | ||
| dcld = sys.argv[1] | ||
| else: | ||
| sys.exit( | ||
| "Error: Please specify exactly one input argument; the path to the dcld tool binary") | ||
|
|
||
| previous_dir = os.getcwd() | ||
| abspath = os.path.dirname(sys.argv[0]) | ||
| os.chdir(abspath) | ||
|
|
||
| os.makedirs('paa-root-certs', exist_ok=True) | ||
|
|
||
| cmdpipe = subprocess.Popen([dcld, 'query', 'pki', 'all-x509-root-certs'], | ||
| stdout=subprocess.PIPE, stderr=subprocess.PIPE) | ||
|
|
||
| paa_list = [] | ||
| parse_paa_root_certs.counter = 0 | ||
| parse_paa_root_certs(cmdpipe, paa_list) | ||
|
|
||
| for paa in paa_list: | ||
| cmdpipe = subprocess.Popen( | ||
| [dcld, 'query', 'pki', 'x509-cert', '-u', | ||
| paa[b'subject'].decode("utf-8"), '-k', paa[b'subject_key_id'].decode("utf-8")], | ||
| stdout=subprocess.PIPE, stderr=subprocess.PIPE) | ||
| write_paa_root_cert(cmdpipe, paa[b'subject'].decode("utf-8")) | ||
|
|
||
| os.chdir(previous_dir) | ||
|
|
||
|
|
||
| if __name__ == "__main__": | ||
| main() |
Binary file not shown.
Oops, something went wrong.