Change order of loading certificates from pk7 cert

------------- Add libcurl to media_cas_packager_sdk. libcurl will later be used by a key fetcher to retrieve entitlement key from License Server using a HTTP request. ------------- Add a function named parsehelper to parse DCSL from the key smith response. ------------- Move wv_cas_key_fetcher to media_cas_packager_sdk so partners can use it request entitlement keys from License Server. ------------- Add pkcs7 write method to x509_cert.cc ------------- Update boringssl_repo to latest in master-with-bazel ------------- Add a TsPacket class to media_cas_packager_sdk to allow the construction of a ECM TS packet in the SDK. ------------- Move InsertEcm() from our internal CAS directory to the media_cas_packager_sdk, to be used to build a ECM TS packet by the SDK. ------------- Add METADATA in common folder ------------- Refactoring of certificate verification into DrmRootCertificate. ------------- Extend the default duration of leaf certificates. ------------- Fix moe_test ------------- Add a new method to WvCasEcm to allow partner to create a TS packet carrying the generated ECM. ------------- Change from SHA1 to SHA256 for Cast certificates ------------- Update crypto mode enumeration to match WV ECM document ------------- Fix the way we set the validity dates ------------- Move exported_root/util/status to common/ to prepare for util::Status migration Also added constructor/operator to copy from/to util::Status. ------------- Add GenerateDCSLrequest function to certificate_util.h. ------------- Fix build break ------------- Allow 'table_id' (in the section header) be specified by caller of SDK method WvCasEcm::GenerateTsPacket(). ------------- Created by MOE: https://github.com/google/moe MOE_MIGRATED_REVID=224535399
2018-12-07 10:16:38 -08:00
parent fb96918196
commit 121d554c20
63 changed files with 4834 additions and 560 deletions
--- a/common/BUILD
+++ b/common/BUILD
@@ -31,6 +31,120 @@ cc_library(
    hdrs = ["certificate_type.h"],
 )

+cc_library(
+    name = "status",
+    srcs = ["status.cc"],
+    hdrs = ["status.h"],
+    deps = [
+        "//base",
+        "@abseil_repo//absl/base:core_headers",
+        "@abseil_repo//absl/strings",
+        "//util:error_space",
+    ],
+)
+
+cc_test(
+    name = "status_test",
+    srcs = ["status_test.cc"],
+    deps = [
+        ":status",
+        "//testing:gunit_main",
+    ],
+)
+
+cc_library(
+    name = "client_cert",
+    srcs = ["client_cert.cc"],
+    hdrs = ["client_cert.h"],
+    deps = [
+        ":crypto_util",
+        ":drm_root_certificate",
+        ":error_space",
+        ":random_util",
+        ":rsa_key",
+        ":signing_key_util",
+        ":wvm_token_handler",
+        "//base",
+        "//strings",
+        "@abseil_repo//absl/strings",
+        "@abseil_repo//absl/synchronization",
+        "@abseil_repo//absl/time",
+        "//util/gtl:map_util",
+        "//util:status",
+        "//protos/public:client_identification_proto",
+        "//protos/public:drm_certificate_proto",
+        "//protos/public:errors_proto",
+        "//protos/public:license_protocol_proto",
+        "//protos/public:signed_drm_certificate_proto",
+    ],
+)
+
+cc_test(
+    name = "client_cert_test",
+    srcs = ["client_cert_test.cc"],
+    deps = [
+        ":client_cert",
+        ":drm_root_certificate",
+        ":error_space",
+        ":wvm_test_keys",
+        "//base",
+        "//strings",
+        "//testing:gunit_main",
+        "@abseil_repo//absl/strings",
+        "@abseil_repo//absl/synchronization",
+        "@abseil_repo//absl/time",
+        "//common:rsa_key",
+        "//common:rsa_test_keys",
+        "//protos/public:drm_certificate_proto",
+        "//protos/public:errors_proto",
+        "//protos/public:signed_drm_certificate_proto",
+    ],
+)
+
+cc_library(
+    name = "device_status_list",
+    srcs = ["device_status_list.cc"],
+    hdrs = ["device_status_list.h"],
+    deps = [
+        ":client_cert",
+        ":crypto_util",
+        ":drm_root_certificate",
+        ":drm_service_certificate",
+        ":error_space",
+        ":random_util",
+        ":rsa_key",
+        ":signing_key_util",
+        "//base",
+        "@abseil_repo//absl/strings",
+        "@abseil_repo//absl/synchronization",
+        "//util/gtl:map_util",
+        "//util:status",
+        "//protos/public:client_identification_proto",
+        "//protos/public:device_certificate_status_proto",
+        "//protos/public:errors_proto",
+        "//protos/public:provisioned_device_info_proto",
+    ],
+)
+
+cc_test(
+    name = "device_status_list_test",
+    timeout = "short",
+    srcs = ["device_status_list_test.cc"],
+    deps = [
+        ":client_cert",
+        ":device_status_list",
+        "//base",
+        "//testing:gunit_main",
+        "@abseil_repo//absl/strings",
+        "//common:rsa_key",
+        "//common:rsa_test_keys",
+        "//protos/public:client_identification_proto",
+        "//protos/public:errors_proto",
+        "//protos/public:provisioned_device_info_proto",
+        "//protos/public:signed_drm_certificate_proto",
+    ],
+)
+
 cc_library(
    name = "drm_root_certificate",
    srcs = ["drm_root_certificate.cc"],
@@ -39,8 +153,11 @@ cc_library(
        ":certificate_type",
        ":error_space",
        ":rsa_key",
+        ":sha_util",
        "//base",
+        "@abseil_repo//absl/memory",
        "@abseil_repo//absl/strings",
+        "@abseil_repo//absl/synchronization",
        "//external:openssl",
        "//util:status",
        "//protos/public:drm_certificate_proto",
@@ -55,9 +172,12 @@ cc_test(
    srcs = ["drm_root_certificate_test.cc"],
    deps = [
        ":drm_root_certificate",
+        ":error_space",
        ":rsa_key",
        ":rsa_test_keys",
+        ":test_drm_certificates",
        "//base",
+        "//external:protobuf",
        "//testing:gunit_main",
        "//protos/public:drm_certificate_proto",
        "//protos/public:errors_proto",
@@ -65,22 +185,6 @@ cc_test(
    ],
 )

-cc_library(
-    name = "certificate_util",
-    srcs = ["certificate_util.cc"],
-    hdrs = ["certificate_util.h"],
-    deps = [
-        ":certificate_type",
-        ":drm_root_certificate",
-        ":drm_service_certificate",
-        ":verified_media_pipeline",
-        ":vmp_checker",
-        "//base",
-        "//util:status",
-        "//license_server_sdk/internal:sdk",
-    ],
-)
-
 cc_library(
    name = "client_id_util",
    srcs = ["client_id_util.cc"],
@@ -342,10 +446,10 @@ cc_test(
 )

 cc_library(
-    name = "test_certificates",
+    name = "test_drm_certificates",
    testonly = 1,
-    srcs = ["test_certificates.cc"],
-    hdrs = ["test_certificates.h"],
+    srcs = ["test_drm_certificates.cc"],
+    hdrs = ["test_drm_certificates.h"],
    deps = [
        "//base",
        "@abseil_repo//absl/strings",
@@ -454,11 +558,12 @@ cc_test(
    srcs = ["drm_service_certificate_test.cc"],
    deps = [
        ":aes_cbc_util",
+        ":drm_root_certificate",
        ":drm_service_certificate",
        ":rsa_key",
        ":rsa_test_keys",
        ":rsa_util",
-        ":test_certificates",
+        ":test_drm_certificates",
        "//base",
        "//external:protobuf",
        "//testing:gunit_main",
@@ -489,6 +594,7 @@ cc_library(
    srcs = ["x509_cert.cc"],
    hdrs = ["x509_cert.h"],
    deps = [
+        ":error_space",
        ":openssl_util",
        ":rsa_key",
        "//base",