blob: a43bb159c346abd747527ba1e5658685e5ee597b [file] [log] [blame]
henrike@webrtc.orgf0488722014-05-13 18:00:26 +00001/*
2 * Copyright 2012 The WebRTC Project Authors. All rights reserved.
3 *
4 * Use of this source code is governed by a BSD-style license
5 * that can be found in the LICENSE file in the root of the source
6 * tree. An additional intellectual property rights grant can be found
7 * in the file PATENTS. All contributing project authors may
8 * be found in the AUTHORS file in the root of the source tree.
9 */
10
Steve Anton10542f22019-01-11 09:11:00 -080011#include "rtc_base/ssl_fingerprint.h"
henrike@webrtc.orgf0488722014-05-13 18:00:26 +000012
13#include <ctype.h>
Ali Tofigh7fa90572022-03-17 15:47:49 +010014
Yves Gerey988cc082018-10-23 12:03:01 +020015#include <cstdint>
Mirko Bonadei317a1f02019-09-17 17:06:18 +020016#include <memory>
henrike@webrtc.orgf0488722014-05-13 18:00:26 +000017#include <string>
18
Steve Anton2acd1632019-03-25 13:48:30 -070019#include "absl/algorithm/container.h"
Ali Tofigh7fa90572022-03-17 15:47:49 +010020#include "absl/strings/string_view.h"
Ali Tofighfd6a4d62022-03-31 10:36:48 +020021#include "api/array_view.h"
Mirko Bonadei92ea95e2017-09-15 06:47:31 +020022#include "rtc_base/logging.h"
Steve Anton10542f22019-01-11 09:11:00 -080023#include "rtc_base/message_digest.h"
24#include "rtc_base/rtc_certificate.h"
25#include "rtc_base/ssl_certificate.h"
26#include "rtc_base/ssl_identity.h"
27#include "rtc_base/string_encode.h"
henrike@webrtc.orgf0488722014-05-13 18:00:26 +000028
29namespace rtc {
30
Ali Tofigh7fa90572022-03-17 15:47:49 +010031SSLFingerprint* SSLFingerprint::Create(absl::string_view algorithm,
Mirko Bonadei6932fb22018-10-15 14:18:03 +000032 const rtc::SSLIdentity* identity) {
Steve Anton4905edb2018-10-15 19:27:44 -070033 return CreateUnique(algorithm, *identity).release();
henrike@webrtc.orgf0488722014-05-13 18:00:26 +000034}
35
Steve Anton4905edb2018-10-15 19:27:44 -070036std::unique_ptr<SSLFingerprint> SSLFingerprint::CreateUnique(
Ali Tofigh7fa90572022-03-17 15:47:49 +010037 absl::string_view algorithm,
Steve Anton4905edb2018-10-15 19:27:44 -070038 const rtc::SSLIdentity& identity) {
39 return Create(algorithm, identity.certificate());
40}
41
42std::unique_ptr<SSLFingerprint> SSLFingerprint::Create(
Ali Tofigh7fa90572022-03-17 15:47:49 +010043 absl::string_view algorithm,
Steve Anton4905edb2018-10-15 19:27:44 -070044 const rtc::SSLCertificate& cert) {
Peter Boström0c4e06b2015-10-07 12:23:21 +020045 uint8_t digest_val[64];
henrike@webrtc.orgf0488722014-05-13 18:00:26 +000046 size_t digest_len;
Steve Anton4905edb2018-10-15 19:27:44 -070047 bool ret = cert.ComputeDigest(algorithm, digest_val, sizeof(digest_val),
48 &digest_len);
henrike@webrtc.orgf0488722014-05-13 18:00:26 +000049 if (!ret) {
deadbeef37f5ecf2017-02-27 14:06:41 -080050 return nullptr;
henrike@webrtc.orgf0488722014-05-13 18:00:26 +000051 }
Mirko Bonadei317a1f02019-09-17 17:06:18 +020052 return std::make_unique<SSLFingerprint>(
Steve Anton4905edb2018-10-15 19:27:44 -070053 algorithm, ArrayView<const uint8_t>(digest_val, digest_len));
henrike@webrtc.orgf0488722014-05-13 18:00:26 +000054}
55
56SSLFingerprint* SSLFingerprint::CreateFromRfc4572(
Ali Tofigh7fa90572022-03-17 15:47:49 +010057 absl::string_view algorithm,
58 absl::string_view fingerprint) {
Steve Anton4905edb2018-10-15 19:27:44 -070059 return CreateUniqueFromRfc4572(algorithm, fingerprint).release();
60}
61
62std::unique_ptr<SSLFingerprint> SSLFingerprint::CreateUniqueFromRfc4572(
Ali Tofigh7fa90572022-03-17 15:47:49 +010063 absl::string_view algorithm,
64 absl::string_view fingerprint) {
henrike@webrtc.orgf0488722014-05-13 18:00:26 +000065 if (algorithm.empty() || !rtc::IsFips180DigestAlgorithm(algorithm))
deadbeef37f5ecf2017-02-27 14:06:41 -080066 return nullptr;
henrike@webrtc.orgf0488722014-05-13 18:00:26 +000067
68 if (fingerprint.empty())
deadbeef37f5ecf2017-02-27 14:06:41 -080069 return nullptr;
henrike@webrtc.orgf0488722014-05-13 18:00:26 +000070
henrike@webrtc.orgf0488722014-05-13 18:00:26 +000071 char value[rtc::MessageDigest::kMaxSize];
Ali Tofighfd6a4d62022-03-31 10:36:48 +020072 size_t value_len =
73 rtc::hex_decode_with_delimiter(ArrayView<char>(value), fingerprint, ':');
henrike@webrtc.orgf0488722014-05-13 18:00:26 +000074 if (!value_len)
deadbeef37f5ecf2017-02-27 14:06:41 -080075 return nullptr;
henrike@webrtc.orgf0488722014-05-13 18:00:26 +000076
Mirko Bonadei317a1f02019-09-17 17:06:18 +020077 return std::make_unique<SSLFingerprint>(
Steve Anton4905edb2018-10-15 19:27:44 -070078 algorithm,
79 ArrayView<const uint8_t>(reinterpret_cast<uint8_t*>(value), value_len));
henrike@webrtc.orgf0488722014-05-13 18:00:26 +000080}
81
Steve Anton4905edb2018-10-15 19:27:44 -070082std::unique_ptr<SSLFingerprint> SSLFingerprint::CreateFromCertificate(
83 const RTCCertificate& cert) {
deadbeef8662f942017-01-20 21:20:51 -080084 std::string digest_alg;
Benjamin Wright6c6c9df2018-10-25 01:16:26 -070085 if (!cert.GetSSLCertificate().GetSignatureDigestAlgorithm(&digest_alg)) {
Mirko Bonadei675513b2017-11-09 11:09:25 +010086 RTC_LOG(LS_ERROR)
87 << "Failed to retrieve the certificate's digest algorithm";
deadbeef8662f942017-01-20 21:20:51 -080088 return nullptr;
89 }
90
Steve Anton4905edb2018-10-15 19:27:44 -070091 std::unique_ptr<SSLFingerprint> fingerprint =
92 CreateUnique(digest_alg, *cert.identity());
deadbeef8662f942017-01-20 21:20:51 -080093 if (!fingerprint) {
Mirko Bonadei675513b2017-11-09 11:09:25 +010094 RTC_LOG(LS_ERROR) << "Failed to create identity fingerprint, alg="
95 << digest_alg;
deadbeef8662f942017-01-20 21:20:51 -080096 }
97 return fingerprint;
98}
99
Ali Tofigh7fa90572022-03-17 15:47:49 +0100100SSLFingerprint::SSLFingerprint(absl::string_view algorithm,
Steve Anton4905edb2018-10-15 19:27:44 -0700101 ArrayView<const uint8_t> digest_view)
102 : algorithm(algorithm), digest(digest_view.data(), digest_view.size()) {}
103
Ali Tofigh7fa90572022-03-17 15:47:49 +0100104SSLFingerprint::SSLFingerprint(absl::string_view algorithm,
Peter Boström0c4e06b2015-10-07 12:23:21 +0200105 const uint8_t* digest_in,
106 size_t digest_len)
Steve Anton4905edb2018-10-15 19:27:44 -0700107 : SSLFingerprint(algorithm, MakeArrayView(digest_in, digest_len)) {}
henrike@webrtc.orgf0488722014-05-13 18:00:26 +0000108
henrike@webrtc.orgf0488722014-05-13 18:00:26 +0000109bool SSLFingerprint::operator==(const SSLFingerprint& other) const {
Yves Gerey665174f2018-06-19 15:03:05 +0200110 return algorithm == other.algorithm && digest == other.digest;
henrike@webrtc.orgf0488722014-05-13 18:00:26 +0000111}
112
113std::string SSLFingerprint::GetRfc4572Fingerprint() const {
Ali Tofighfd6a4d62022-03-31 10:36:48 +0200114 std::string fingerprint = rtc::hex_encode_with_delimiter(
115 absl::string_view(digest.data<char>(), digest.size()), ':');
Steve Anton2acd1632019-03-25 13:48:30 -0700116 absl::c_transform(fingerprint, fingerprint.begin(), ::toupper);
henrike@webrtc.orgf0488722014-05-13 18:00:26 +0000117 return fingerprint;
118}
119
mikescarlette7748672016-04-29 20:20:54 -0700120std::string SSLFingerprint::ToString() const {
henrike@webrtc.orgf0488722014-05-13 18:00:26 +0000121 std::string fp_str = algorithm;
122 fp_str.append(" ");
123 fp_str.append(GetRfc4572Fingerprint());
124 return fp_str;
125}
126
127} // namespace rtc