| # |
| # Copyright 2019,2020 NXP |
| # SPDX-License-Identifier: Apache-2.0 |
| # |
| # |
| |
| """License text""" |
| |
| import sys |
| import click |
| import func_timeout |
| from sss.refkey import RefPem |
| import sss.sss_api as apis |
| from .cli import refpem, pass_context, session_open, session_close, \ |
| log_traceback, TIME_OUT, TIME_OUT_RSA |
| |
| |
| @refpem.group() |
| @pass_context |
| def ecc(cli_ctx): |
| """Refpem ECC Keys""" |
| cli_ctx.vlog("Refpem ECC Keys") |
| |
| |
| @refpem.group() |
| @pass_context |
| def rsa(cli_ctx): |
| """Refpem RSA Keys""" |
| cli_ctx.vlog("Refpem RSA Keys") |
| |
| |
| @ecc.command('pair', short_help='Create reference PEM file for ECC Pair') |
| @click.argument('keyid', type=str, metavar='keyid') |
| @click.argument('filename', type=str, metavar='filename') |
| @click.option('--format', default='', |
| help="Output file format. TEXT can be \"DER\" or \"PEM\" or \"PKCS12\"") |
| @click.option('--password', default="", type=str, help="Password used for PKCS12 format.") |
| @pass_context |
| def pair(cli_ctx, keyid, filename, format, password): # pylint: disable=function-redefined, redefined-builtin |
| """Create reference PEM file for ECC Pair \n |
| |
| keyid = 32bit Key ID. Should be in hex format. Example: 0x20E8A001 \n |
| |
| filename = File name to store key. Can be in PEM or DER or PKCS12 format |
| based on file extension. By default filename with extension .pem in PEM format, |
| .pfx or .p12 in PKCS12 format and others in DER format. |
| """ |
| session_status = apis.kStatus_SSS_Fail |
| try: |
| keyid = int(keyid, 16) |
| if password == "" and \ |
| (filename.endswith('.pfx') or filename.endswith('.p12') or format == "PKCS12"): |
| raise Exception("Password Required for PKCS12 format. " |
| "Use '--password' flag to enter password") |
| try: |
| session_open(cli_ctx) |
| refpem_obj = RefPem(cli_ctx.session) |
| status = func_timeout.func_timeout(TIME_OUT, refpem_obj.do_ecc_refpem_pair, |
| (keyid, filename, format, password)) |
| except func_timeout.FunctionTimedOut as timeout_exc: |
| log_traceback(cli_ctx, timeout_exc.getMsg()) |
| status = apis.kStatus_SSS_Fail |
| except Exception as exc: # pylint: disable=broad-except |
| log_traceback(cli_ctx, exc) |
| status = apis.kStatus_SSS_Fail |
| session_status = session_close(cli_ctx) |
| |
| except Exception as exc: # pylint: disable=broad-except |
| log_traceback(cli_ctx, exc) |
| status = apis.kStatus_SSS_Fail |
| if status == apis.kStatus_SSS_Success and session_status == apis.kStatus_SSS_Success: |
| cli_ctx.log("Created reference key for ECC Pair from KeyID = 0x%08X" % keyid) |
| ret_value = 0 |
| else: |
| cli_ctx.log("ERROR! Could not Create reference key for ECC Pair from KeyID 0x%08X " |
| % (keyid,)) |
| ret_value = 1 |
| sys.exit(ret_value) |
| |
| |
| @ecc.command('pub', short_help='Create reference PEM file for ECC Pub') |
| @click.argument('keyid', type=str, metavar='keyid') |
| @click.argument('filename', type=str, metavar='filename') |
| @click.option('--format', default='', |
| help="Output file format. TEXT can be \"DER\" or \"PEM\" or \"PKCS12\"") |
| @click.option('--password', default="", type=str, help="Password used for PKCS12 format.") |
| @pass_context |
| def pub(cli_ctx, keyid, filename, format, password): # pylint: disable=redefined-builtin |
| """Create reference PEM file for ECC Pub \n |
| |
| keyid = 32bit Key ID. Should be in hex format. Example: 20E8A001 \n |
| |
| filename = File name to store key. Data Can be in PEM or DER format or PKCS12 format |
| based on file extension. By default filename with extension .pem in PEM format, |
| .pfx or .p12 in PKCS12 format and others in DER format. |
| |
| """ |
| session_status = apis.kStatus_SSS_Fail |
| try: |
| keyid = int(keyid, 16) |
| if password == "" and \ |
| (filename.endswith('.pfx') or filename.endswith('.p12') or format == "PKCS12"): |
| raise Exception("Password Required for PKCS12 format. " |
| "Use '--password' flag to enter password") |
| try: |
| session_open(cli_ctx) |
| refpem_obj = RefPem(cli_ctx.session) |
| status = func_timeout.func_timeout(TIME_OUT, refpem_obj.do_ecc_refpem_pub, |
| (keyid, filename, format, password)) |
| except func_timeout.FunctionTimedOut as timeout_exc: |
| log_traceback(cli_ctx, timeout_exc.getMsg()) |
| status = apis.kStatus_SSS_Fail |
| except Exception as exc: # pylint: disable=broad-except |
| log_traceback(cli_ctx, exc) |
| status = apis.kStatus_SSS_Fail |
| session_status = session_close(cli_ctx) |
| except Exception as exc: # pylint: disable=broad-except |
| log_traceback(cli_ctx, exc) |
| status = apis.kStatus_SSS_Fail |
| if status == apis.kStatus_SSS_Success and session_status == apis.kStatus_SSS_Success: |
| cli_ctx.log("Created reference key for ECC Public Key from KeyID = 0x%08X" % keyid) |
| ret_value = 0 |
| else: |
| cli_ctx.log("ERROR! Could not Create reference key for ECC Public Key from KeyID 0x%08X " |
| % (keyid,)) |
| ret_value = 1 |
| sys.exit(ret_value) |
| |
| |
| @rsa.command('pair', short_help='Create reference PEM file for RSA Pair') |
| @click.argument('keyid', type=str, metavar='keyid') |
| @click.argument('filename', type=str, metavar='filename') |
| @click.option('--format', default='', |
| help="Output file format. TEXT can be \"DER\" or \"PEM\" or \"PKCS12\"") |
| @click.option('--password', default="", type=str, help="Password used for PKCS12 format.") |
| @pass_context |
| def pair(cli_ctx, keyid, filename, format, password): # pylint: disable=function-redefined, redefined-builtin |
| """Create reference PEM file for RSA Pair \n |
| |
| keyid = 32bit Key ID. Should be in hex format. Example: 20E8A001 \n |
| |
| filename = File name to store key. Data Can be in PEM or DER format or PKCS12 format |
| based on file extension. By default filename with extension .pem in PEM format, |
| .pfx or .p12 in PKCS12 format and others in DER format. |
| """ |
| session_status = apis.kStatus_SSS_Fail |
| try: |
| keyid = int(keyid, 16) |
| if password == "" and \ |
| (filename.endswith('.pfx') or filename.endswith('.p12') or format == "PKCS12"): |
| raise Exception("Password Required for PKCS12 format. " |
| "Use '--password' flag to enter password") |
| try: |
| session_open(cli_ctx) |
| refpem_obj = RefPem(cli_ctx.session) |
| status = func_timeout.func_timeout(TIME_OUT_RSA, refpem_obj.do_rsa_refpem_pair, |
| (keyid, filename, format, password)) |
| except func_timeout.FunctionTimedOut as timeout_exc: |
| log_traceback(cli_ctx, timeout_exc.getMsg()) |
| status = apis.kStatus_SSS_Fail |
| except Exception as exc: # pylint: disable=broad-except |
| log_traceback(cli_ctx, exc) |
| status = apis.kStatus_SSS_Fail |
| session_status = session_close(cli_ctx) |
| |
| except Exception as exc: # pylint: disable=broad-except |
| log_traceback(cli_ctx, exc) |
| status = apis.kStatus_SSS_Fail |
| if status == apis.kStatus_SSS_Success and session_status == apis.kStatus_SSS_Success: |
| cli_ctx.log("Created reference key for RSA Pair from KeyID = 0x%08X" % keyid) |
| ret_value = 0 |
| else: |
| cli_ctx.log("ERROR! Could not Create reference key for RSA Pair from KeyID 0x%08X " |
| % (keyid,)) |
| ret_value = 1 |
| sys.exit(ret_value) |
