CA

synrc · Jul 17, 2023 · 73b5149 · 73b5149
1 parent 16fe8e0
commit 73b5149
Show file tree

Hide file tree

Showing 15 changed files with 16,352 additions and 14 deletions.
diff --git a/lib/cmp.ex b/lib/cmp.ex
@@ -1,5 +1,10 @@
 defmodule CA.CMP do
 
+   # IETF 2510:2005 X.509 PKI CMP
+
+   # openssl cmp -cmd genm -server 127.0.0.1:829 \
+   #             -recipient "/CN=CMPserver" -ref 1234 -secret pass:0000
+
    def start(), do: :erlang.spawn(fn -> listen(829) end)
    def listen(port) do
        {:ok, socket} = :gen_tcp.listen(port,
@@ -14,11 +19,11 @@ defmodule CA.CMP do
    def loop(socket) do
        case :gen_tcp.recv(socket, 0) do
             {:ok, data} ->
-                 :io.format '~p~n', [data]
-                 case :'LDAP'.decode(:'LDAPMessage',data) do
-                      {:ok,decoded} -> :io.format '~p~n', [decoded] ; loop(socket)
-                      {:error,_} -> :exit
-                 end
+                 {{_,headers},asn} = :asn1rt_nif.decode_ber_tlv(data)
+                 [_,body] = :string.split asn, "\r\n\r\n", :all
+                 dec = :'PKIXCMP-2009'.decode(:'PKIMessage', body)
+                 :io.format 'CMP: ~ps~n', [dec]
+                 loop(socket)
             {:error, :closed} -> :exit
        end
    end

diff --git a/lib/cms.ex b/lib/cms.ex
@@ -20,8 +20,8 @@ defmodule CA.CMS do
         sharedKey   = :crypto.compute_key(:ecdh,publicKey,privateKeyBin,scheme)
         {_,payload} = :'CMSECCAlgs-2009-02'.encode(:'ECC-CMS-SharedInfo', sharedInfo(ukm,256))
         derived     = case map(kdf) do
-            {:kdf,hash} -> KDF.derive({:kdf,hash},  sharedKey, 32, payload)
-           {:hkdf,hash} -> HKDF.derive({:kdf,hash}, sharedKey, 32, payload)
+            {:kdf,hash} -> CA.KDF.derive({:kdf,hash},  sharedKey, 32, payload)
+           {:hkdf,hash} -> CA.HKDF.derive({:kdf,hash}, sharedKey, 32, payload)
         end
         unwrap      = CA.AES.KW.unwrap(encryptedKey, derived)
         res         = CA.AES.decrypt(enc, data, unwrap, iv)

diff --git a/lib/cms_test.ex b/lib/cms_test.ex
@@ -96,7 +96,7 @@ defmodule CA.CMS.Test do
         [{:kari,{_,:v3,{_,{_,_,publicKey}},ukm,_,[{_,_,encryptedKey}]}}|_] = x
         sharedKey   = :crypto.compute_key(:ecdh,publicKey,privateKey,scheme)
         {_,content}  =  :'CMSECCAlgs-2009-02'.encode(:'ECC-CMS-SharedInfo', CA.CMS.sharedInfo(ukm,256))
-        kdf          = KDF.derive({:kdf, :sha256}, sharedKey, 32, content)
+        kdf          = CA.KDF.derive({:kdf, :sha256}, sharedKey, 32, content)
         unwrap       = :aes_kw.unwrap(encryptedKey, kdf)
         CA.AES.decrypt(:'id-aes256-CBC', data, unwrap, iv)
     end

diff --git a/lib/csr.ex b/lib/csr.ex
@@ -1,4 +1,4 @@
-defmodule CSR do
+defmodule CA.CSR do
 
   def ca() do
       ca_key = X509.PrivateKey.new_ec(:sect571r1)

diff --git a/lib/hkdf.ex b/lib/hkdf.ex
@@ -1,4 +1,4 @@
-defmodule HKDF do
+defmodule CA.HKDF do
 
   def hl(:sha),    do: 20
   def hl(:sha224), do: 28

diff --git a/lib/kdf.ex b/lib/kdf.ex
@@ -1,4 +1,4 @@
-defmodule KDF do
+defmodule CA.KDF do
 
   def hl(:md5),    do: 16
   def hl(:sha),    do: 20

diff --git a/lib/ldap.ex b/lib/ldap.ex
@@ -1,5 +1,4 @@
 defmodule CA.LDAP do
-
    def start(), do: :erlang.spawn(fn -> listen(389) end)
    def listen(port) do
        {:ok, socket} = :gen_tcp.listen(port,
@@ -14,9 +13,8 @@ defmodule CA.LDAP do
    def loop(socket) do
        case :gen_tcp.recv(socket, 0) do
             {:ok, data} ->
-                 :io.format '~p~n', [data]
                  case :'LDAP'.decode(:'LDAPMessage',data) do
-                      {:ok,decoded} -> :io.format '~p~n', [decoded] ; loop(socket)
+                      {:ok,decoded} -> :io.format 'LDAP: ~p~n', [decoded] ; loop(socket)
                       {:error,_} -> :exit
                  end
             {:error, :closed} -> :exit