test/encryption_test.cc

   1 /*
   2     Copyright (C) 2013-2019 Carl Hetherington <cth@carlh.net>
   3
   4     This file is part of libdcp.
   5
   6     libdcp is free software; you can redistribute it and/or modify
   7     it under the terms of the GNU General Public License as published by
   8     the Free Software Foundation; either version 2 of the License, or
   9     (at your option) any later version.
  10
  11     libdcp is distributed in the hope that it will be useful,
  12     but WITHOUT ANY WARRANTY; without even the implied warranty of
  13     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14     GNU General Public License for more details.
  15
  16     You should have received a copy of the GNU General Public License
  17     along with libdcp.  If not, see <http://www.gnu.org/licenses/>.
  18
  19     In addition, as a special exception, the copyright holders give
  20     permission to link the code of portions of this program with the
  21     OpenSSL library under certain conditions as described in each
  22     individual source file, and distribute linked combinations
  23     including the two.
  24
  25     You must obey the GNU General Public License in all respects
  26     for all of the code used other than OpenSSL.  If you modify
  27     file(s) with this exception, you may extend this exception to your
  28     version of the file(s), but you are not obligated to do so.  If you
  29     do not wish to do so, delete this exception statement from your
  30     version.  If you delete this exception statement from all source
  31     files in the program, then also delete it here.
  32 */
  33
  34 #include "metadata.h"
  35 #include "certificate.h"
  36 #include "dcp.h"
  37 #include "certificate_chain.h"
  38 #include "cpl.h"
  39 #include "mono_picture_asset.h"
  40 #include "picture_asset_writer.h"
  41 #include "sound_asset_writer.h"
  42 #include "sound_asset.h"
  43 #include "reel.h"
  44 #include "test.h"
  45 #include "subtitle_asset.h"
  46 #include "reel_mono_picture_asset.h"
  47 #include "reel_sound_asset.h"
  48 #include "encrypted_kdm.h"
  49 #include "decrypted_kdm.h"
  50 #include <asdcp/KM_util.h>
  51 #include <sndfile.h>
  52 #include <boost/test/unit_test.hpp>
  53 #include <memory>
  54
  55
  56 using std::vector;
  57 using std::string;
  58 using std::shared_ptr;
  59 using std::make_shared;
  60
  61
  62 /** Load a certificate chain from build/test/data/ *.pem and then build
  63  *  an encrypted DCP and a KDM using it.
  64  */
  65 BOOST_AUTO_TEST_CASE (encryption_test)
  66 {
  67         boost::filesystem::remove_all ("build/test/signer");
  68         boost::filesystem::create_directory ("build/test/signer");
  69
  70         RNGFixer fix;
  71
  72         dcp::MXFMetadata mxf_metadata;
  73         mxf_metadata.company_name = "OpenDCP";
  74         mxf_metadata.product_name = "OpenDCP";
  75         mxf_metadata.product_version = "0.0.25";
  76
  77         boost::filesystem::remove_all ("build/test/DCP/encryption_test");
  78         boost::filesystem::create_directories ("build/test/DCP/encryption_test");
  79         dcp::DCP d ("build/test/DCP/encryption_test");
  80
  81         /* Use test/ref/crypt so this test is repeatable */
  82         auto signer = make_shared<dcp::CertificateChain>();
  83         signer->add (dcp::Certificate(dcp::file_to_string("test/ref/crypt/ca.self-signed.pem")));
  84         signer->add (dcp::Certificate(dcp::file_to_string("test/ref/crypt/intermediate.signed.pem")));
  85         signer->add (dcp::Certificate(dcp::file_to_string("test/ref/crypt/leaf.signed.pem")));
  86         signer->set_key (dcp::file_to_string("test/ref/crypt/leaf.key"));
  87
  88         auto cpl = make_shared<dcp::CPL>("A Test DCP", dcp::ContentKind::FEATURE, dcp::Standard::SMPTE);
  89
  90         dcp::Key key;
  91
  92         auto mp = make_shared<dcp::MonoPictureAsset>(dcp::Fraction (24, 1), dcp::Standard::SMPTE);
  93         mp->set_metadata (mxf_metadata);
  94         mp->set_key (key);
  95
  96         auto writer = mp->start_write("build/test/DCP/encryption_test/video.mxf", dcp::PictureAsset::Behaviour::MAKE_NEW);
  97         dcp::ArrayData j2c ("test/data/flat_red.j2c");
  98         for (int i = 0; i < 24; ++i) {
  99                 writer->write (j2c.data (), j2c.size ());
 100         }
 101         writer->finalize ();
 102
 103         auto ms = make_shared<dcp::SoundAsset>(dcp::Fraction (24, 1), 48000, 1, dcp::LanguageTag("en-GB"), dcp::Standard::SMPTE);
 104         ms->set_metadata (mxf_metadata);
 105         ms->set_key (key);
 106         auto sound_writer = ms->start_write("build/test/DCP/encryption_test/audio.mxf", {}, dcp::SoundAsset::AtmosSync::DISABLED, dcp::SoundAsset::MCASubDescriptors::ENABLED);
 107
 108         SF_INFO info;
 109         info.format = 0;
 110         auto sndfile = sf_open ("test/data/1s_24-bit_48k_silence.wav", SFM_READ, &info);
 111         BOOST_CHECK (sndfile);
 112         float buffer[4096*6];
 113         float* channels[1];
 114         channels[0] = buffer;
 115         while (true) {
 116                 auto N = sf_readf_float (sndfile, buffer, 4096);
 117                 sound_writer->write(channels, 1, N);
 118                 if (N < 4096) {
 119                         break;
 120                 }
 121         }
 122
 123         sound_writer->finalize ();
 124
 125         cpl->add (make_shared<dcp::Reel>(
 126                         make_shared<dcp::ReelMonoPictureAsset>(mp, 0),
 127                         make_shared<dcp::ReelSoundAsset>(ms, 0),
 128                         shared_ptr<dcp::ReelSubtitleAsset>()
 129                         ));
 130         cpl->set_content_version (
 131                 dcp::ContentVersion("urn:uri:81fb54df-e1bf-4647-8788-ea7ba154375b_2012-07-17T04:45:18+00:00", "81fb54df-e1bf-4647-8788-ea7ba154375b_2012-07-17T04:45:18+00:00")
 132                 );
 133         cpl->set_annotation_text ("A Test DCP");
 134         cpl->set_issuer ("OpenDCP 0.0.25");
 135         cpl->set_creator ("OpenDCP 0.0.25");
 136         cpl->set_issue_date ("2012-07-17T04:45:18+00:00");
 137
 138         d.add (cpl);
 139
 140         d.set_issuer("OpenDCP 0.0.25");
 141         d.set_creator("OpenDCP 0.0.25");
 142         d.set_issue_date("2012-07-17T04:45:18+00:00");
 143         d.set_annotation_text("Created by libdcp");
 144         d.write_xml(signer);
 145
 146         dcp::DecryptedKDM kdm (
 147                 cpl,
 148                 key,
 149                 dcp::LocalTime ("2016-01-01T00:00:00+00:00"),
 150                 dcp::LocalTime ("2017-01-08T00:00:00+00:00"),
 151                 "libdcp",
 152                 "test",
 153                 "2012-07-17T04:45:18+00:00"
 154                 );
 155
 156         kdm.encrypt (signer, signer->leaf(), vector<string>(), dcp::Formulation::MODIFIED_TRANSITIONAL_1, true, 0).as_xml("build/test/encryption_test.kdm.xml");
 157
 158         int r = system (
 159                 "xmllint --path schema --nonet --noout --schema schema/SMPTE-430-1-2006-Amd-1-2009-KDM.xsd build/test/encryption_test.kdm.xml "
 160 #ifndef LIBDCP_WINDOWS
 161                 "> build/test/xmllint.log 2>&1 < /dev/null"
 162 #endif
 163                 );
 164
 165 #ifdef LIBDCP_WINDOWS
 166         BOOST_CHECK_EQUAL (r, 0);
 167 #else
 168         BOOST_CHECK_EQUAL (WEXITSTATUS(r), 0);
 169 #endif
 170
 171         r = system ("xmlsec1 verify "
 172                 "--pubkey-cert-pem test/ref/crypt/leaf.signed.pem "
 173                 "--trusted-pem test/ref/crypt/intermediate.signed.pem "
 174                 "--trusted-pem test/ref/crypt/ca.self-signed.pem "
 175                 "--id-attr:Id http://www.smpte-ra.org/schemas/430-3/2006/ETM:AuthenticatedPublic "
 176                 "--id-attr:Id http://www.smpte-ra.org/schemas/430-3/2006/ETM:AuthenticatedPrivate --crypto openssl "
 177                 "build/test/encryption_test.kdm.xml "
 178 #ifndef LIBDCP_WINDOWS
 179                 "> build/test/xmlsec1.log 2>&1 < /dev/null"
 180 #endif
 181                    );
 182
 183 #ifdef LIBDCP_WINDOWS
 184         BOOST_CHECK_EQUAL (r, 0);
 185 #else
 186         BOOST_CHECK_EQUAL (WEXITSTATUS (r), 0);
 187 #endif
 188 }