test/encryption_test.cc

   1 /*
   2     Copyright (C) 2013-2019 Carl Hetherington <cth@carlh.net>
   3
   4     This file is part of libdcp.
   5
   6     libdcp is free software; you can redistribute it and/or modify
   7     it under the terms of the GNU General Public License as published by
   8     the Free Software Foundation; either version 2 of the License, or
   9     (at your option) any later version.
  10
  11     libdcp is distributed in the hope that it will be useful,
  12     but WITHOUT ANY WARRANTY; without even the implied warranty of
  13     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14     GNU General Public License for more details.
  15
  16     You should have received a copy of the GNU General Public License
  17     along with libdcp.  If not, see <http://www.gnu.org/licenses/>.
  18
  19     In addition, as a special exception, the copyright holders give
  20     permission to link the code of portions of this program with the
  21     OpenSSL library under certain conditions as described in each
  22     individual source file, and distribute linked combinations
  23     including the two.
  24
  25     You must obey the GNU General Public License in all respects
  26     for all of the code used other than OpenSSL.  If you modify
  27     file(s) with this exception, you may extend this exception to your
  28     version of the file(s), but you are not obligated to do so.  If you
  29     do not wish to do so, delete this exception statement from your
  30     version.  If you delete this exception statement from all source
  31     files in the program, then also delete it here.
  32 */
  33
  34 #include "metadata.h"
  35 #include "certificate.h"
  36 #include "dcp.h"
  37 #include "certificate_chain.h"
  38 #include "cpl.h"
  39 #include "mono_picture_asset.h"
  40 #include "picture_asset_writer.h"
  41 #include "sound_asset_writer.h"
  42 #include "sound_asset.h"
  43 #include "reel.h"
  44 #include "test.h"
  45 #include "file.h"
  46 #include "subtitle_asset.h"
  47 #include "reel_mono_picture_asset.h"
  48 #include "reel_sound_asset.h"
  49 #include "encrypted_kdm.h"
  50 #include "decrypted_kdm.h"
  51 #include <asdcp/KM_util.h>
  52 #include <sndfile.h>
  53 #include <boost/test/unit_test.hpp>
  54 #include <boost/shared_ptr.hpp>
  55
  56 using std::vector;
  57 using std::string;
  58 using boost::shared_ptr;
  59
  60 /** Load a certificate chain from build/test/data/ *.pem and then build
  61  *  an encrypted DCP and a KDM using it.
  62  */
  63 BOOST_AUTO_TEST_CASE (encryption_test)
  64 {
  65         boost::filesystem::remove_all ("build/test/signer");
  66         boost::filesystem::create_directory ("build/test/signer");
  67
  68         RNGFixer fix;
  69
  70         dcp::MXFMetadata mxf_metadata;
  71         mxf_metadata.company_name = "OpenDCP";
  72         mxf_metadata.product_name = "OpenDCP";
  73         mxf_metadata.product_version = "0.0.25";
  74
  75         boost::filesystem::remove_all ("build/test/DCP/encryption_test");
  76         boost::filesystem::create_directories ("build/test/DCP/encryption_test");
  77         dcp::DCP d ("build/test/DCP/encryption_test");
  78
  79         /* Use test/ref/crypt so this test is repeatable */
  80         shared_ptr<dcp::CertificateChain> signer (new dcp::CertificateChain ());
  81         signer->add (dcp::Certificate (dcp::file_to_string ("test/ref/crypt/ca.self-signed.pem")));
  82         signer->add (dcp::Certificate (dcp::file_to_string ("test/ref/crypt/intermediate.signed.pem")));
  83         signer->add (dcp::Certificate (dcp::file_to_string ("test/ref/crypt/leaf.signed.pem")));
  84         signer->set_key (dcp::file_to_string ("test/ref/crypt/leaf.key"));
  85
  86         shared_ptr<dcp::CPL> cpl (new dcp::CPL ("A Test DCP", dcp::FEATURE));
  87
  88         dcp::Key key;
  89
  90         shared_ptr<dcp::MonoPictureAsset> mp (new dcp::MonoPictureAsset (dcp::Fraction (24, 1), dcp::SMPTE));
  91         mp->set_metadata (mxf_metadata);
  92         mp->set_key (key);
  93
  94         shared_ptr<dcp::PictureAssetWriter> writer = mp->start_write ("build/test/DCP/encryption_test/video.mxf", false);
  95         dcp::File j2c ("test/data/32x32_red_square.j2c");
  96         for (int i = 0; i < 24; ++i) {
  97                 writer->write (j2c.data (), j2c.size ());
  98         }
  99         writer->finalize ();
 100
 101         shared_ptr<dcp::SoundAsset> ms (new dcp::SoundAsset (dcp::Fraction (24, 1), 48000, 1, dcp::LanguageTag("en-GB"), dcp::SMPTE));
 102         ms->set_metadata (mxf_metadata);
 103         ms->set_key (key);
 104         shared_ptr<dcp::SoundAssetWriter> sound_writer = ms->start_write ("build/test/DCP/encryption_test/audio.mxf", vector<dcp::Channel>());
 105
 106         SF_INFO info;
 107         info.format = 0;
 108         SNDFILE* sndfile = sf_open ("test/data/1s_24-bit_48k_silence.wav", SFM_READ, &info);
 109         BOOST_CHECK (sndfile);
 110         float buffer[4096*6];
 111         float* channels[1];
 112         channels[0] = buffer;
 113         while (1) {
 114                 sf_count_t N = sf_readf_float (sndfile, buffer, 4096);
 115                 sound_writer->write (channels, N);
 116                 if (N < 4096) {
 117                         break;
 118                 }
 119         }
 120
 121         sound_writer->finalize ();
 122
 123         cpl->add (shared_ptr<dcp::Reel> (new dcp::Reel (
 124                                                  shared_ptr<dcp::ReelMonoPictureAsset> (new dcp::ReelMonoPictureAsset (mp, 0)),
 125                                                  shared_ptr<dcp::ReelSoundAsset> (new dcp::ReelSoundAsset (ms, 0)),
 126                                                  shared_ptr<dcp::ReelSubtitleAsset> ()
 127                                                  )));
 128         cpl->set_content_version (
 129                 dcp::ContentVersion("urn:uri:81fb54df-e1bf-4647-8788-ea7ba154375b_2012-07-17T04:45:18+00:00", "81fb54df-e1bf-4647-8788-ea7ba154375b_2012-07-17T04:45:18+00:00")
 130                 );
 131         cpl->set_annotation_text ("A Test DCP");
 132         cpl->set_issuer ("OpenDCP 0.0.25");
 133         cpl->set_creator ("OpenDCP 0.0.25");
 134         cpl->set_issue_date ("2012-07-17T04:45:18+00:00");
 135
 136         d.add (cpl);
 137
 138         d.write_xml (dcp::SMPTE, "OpenDCP 0.0.25", "OpenDCP 0.0.25", "2012-07-17T04:45:18+00:00", "Created by libdcp", signer);
 139
 140         dcp::DecryptedKDM kdm (
 141                 cpl,
 142                 key,
 143                 dcp::LocalTime ("2016-01-01T00:00:00+00:00"),
 144                 dcp::LocalTime ("2017-01-08T00:00:00+00:00"),
 145                 "libdcp",
 146                 "test",
 147                 "2012-07-17T04:45:18+00:00"
 148                 );
 149
 150         kdm.encrypt (signer, signer->leaf(), vector<string>(), dcp::MODIFIED_TRANSITIONAL_1, true, 0).as_xml ("build/test/encryption_test.kdm.xml");
 151
 152         int r = system (
 153                 "xmllint --path schema --nonet --noout --schema schema/SMPTE-430-1-2006-Amd-1-2009-KDM.xsd build/test/encryption_test.kdm.xml "
 154                 "> build/test/xmllint.log 2>&1 < /dev/null"
 155                 );
 156
 157 #ifdef LIBDCP_POSIX
 158         BOOST_CHECK_EQUAL (WEXITSTATUS (r), 0);
 159 #else
 160         BOOST_CHECK_EQUAL (r, 0);
 161 #endif
 162
 163         r = system ("xmlsec1 verify "
 164                 "--pubkey-cert-pem test/ref/crypt/leaf.signed.pem "
 165                 "--trusted-pem test/ref/crypt/intermediate.signed.pem "
 166                 "--trusted-pem test/ref/crypt/ca.self-signed.pem "
 167                 "--id-attr:Id http://www.smpte-ra.org/schemas/430-3/2006/ETM:AuthenticatedPublic "
 168                 "--id-attr:Id http://www.smpte-ra.org/schemas/430-3/2006/ETM:AuthenticatedPrivate "
 169                     "build/test/encryption_test.kdm.xml > build/test/xmlsec1.log 2>&1 < /dev/null");
 170
 171 #ifdef LIBDCP_POSIX
 172         BOOST_CHECK_EQUAL (WEXITSTATUS (r), 0);
 173 #else
 174         BOOST_CHECK_EQUAL (r, 0);
 175 #endif
 176 }