[457] | 1 | // Copyright (c) Microsoft. All rights reserved.
|
---|
| 2 | // Licensed under the MIT license. See LICENSE file in the project root for full license information.
|
---|
| 3 |
|
---|
| 4 | #include <stdlib.h>
|
---|
| 5 | #include "azure_prov_client/iothub_security_factory.h"
|
---|
| 6 | #include "azure_prov_client/prov_security_factory.h"
|
---|
| 7 | #include "azure_c_shared_utility/xlogging.h"
|
---|
| 8 | #include "azure_c_shared_utility/crt_abstractions.h"
|
---|
| 9 |
|
---|
| 10 | #include "hsm_client_data.h"
|
---|
| 11 |
|
---|
| 12 | static IOTHUB_SECURITY_TYPE g_security_type = IOTHUB_SECURITY_TYPE_UNKNOWN;
|
---|
| 13 | static char* g_symm_key = NULL;
|
---|
| 14 | static char* g_symm_key_reg_name = NULL;
|
---|
| 15 |
|
---|
| 16 | static SECURE_DEVICE_TYPE get_secure_device_type(IOTHUB_SECURITY_TYPE sec_type)
|
---|
| 17 | {
|
---|
| 18 | SECURE_DEVICE_TYPE ret;
|
---|
| 19 |
|
---|
| 20 | switch (sec_type)
|
---|
| 21 | {
|
---|
| 22 | #if defined(HSM_TYPE_SAS_TOKEN) || defined(HSM_AUTH_TYPE_CUSTOM)
|
---|
| 23 | case IOTHUB_SECURITY_TYPE_SAS:
|
---|
| 24 | ret = SECURE_DEVICE_TYPE_TPM;
|
---|
| 25 | break;
|
---|
| 26 | #endif
|
---|
| 27 |
|
---|
| 28 | #if defined(HSM_TYPE_X509) || defined(HSM_AUTH_TYPE_CUSTOM)
|
---|
| 29 | case IOTHUB_SECURITY_TYPE_X509:
|
---|
| 30 | ret = SECURE_DEVICE_TYPE_X509;
|
---|
| 31 | break;
|
---|
| 32 | #endif
|
---|
| 33 |
|
---|
| 34 | #if defined(HSM_TYPE_SYMM_KEY) || defined(HSM_AUTH_TYPE_CUSTOM)
|
---|
| 35 | case IOTHUB_SECURITY_TYPE_SYMMETRIC_KEY:
|
---|
| 36 | ret = SECURE_DEVICE_TYPE_SYMMETRIC_KEY;
|
---|
| 37 | break;
|
---|
| 38 | #endif
|
---|
| 39 |
|
---|
| 40 | #ifdef HSM_TYPE_HTTP_EDGE
|
---|
| 41 | case IOTHUB_SECURITY_TYPE_HTTP_EDGE:
|
---|
| 42 | ret = SECURE_DEVICE_TYPE_HTTP_EDGE;
|
---|
| 43 | break;
|
---|
| 44 | #endif
|
---|
| 45 |
|
---|
| 46 | default:
|
---|
| 47 | ret = SECURE_DEVICE_TYPE_UNKNOWN;
|
---|
| 48 | break;
|
---|
| 49 | }
|
---|
| 50 |
|
---|
| 51 | return ret;
|
---|
| 52 | }
|
---|
| 53 |
|
---|
| 54 | int iothub_security_init(IOTHUB_SECURITY_TYPE sec_type)
|
---|
| 55 | {
|
---|
| 56 | int result;
|
---|
| 57 |
|
---|
| 58 | SECURE_DEVICE_TYPE secure_device_type_from_caller = get_secure_device_type(sec_type);
|
---|
| 59 |
|
---|
| 60 | if (secure_device_type_from_caller == SECURE_DEVICE_TYPE_UNKNOWN)
|
---|
| 61 | {
|
---|
| 62 | LogError("Security type %d is not supported in this SDK build", sec_type);
|
---|
| 63 | result = MU_FAILURE;
|
---|
| 64 | }
|
---|
| 65 | else
|
---|
| 66 | {
|
---|
| 67 | g_security_type = sec_type;
|
---|
| 68 | SECURE_DEVICE_TYPE security_device_type_from_prov = prov_dev_security_get_type();
|
---|
| 69 | if (security_device_type_from_prov == SECURE_DEVICE_TYPE_UNKNOWN)
|
---|
| 70 | {
|
---|
| 71 | result = prov_dev_security_init(secure_device_type_from_caller);
|
---|
| 72 | }
|
---|
| 73 | else if (secure_device_type_from_caller != security_device_type_from_prov)
|
---|
| 74 | {
|
---|
| 75 | LogError("Security type from caller %d (which maps to security device type %d) does not match already specified security device type %d", sec_type, secure_device_type_from_caller, security_device_type_from_prov);
|
---|
| 76 | result = MU_FAILURE;
|
---|
| 77 | }
|
---|
| 78 | else
|
---|
| 79 | {
|
---|
| 80 | result = 0;
|
---|
| 81 | }
|
---|
| 82 |
|
---|
| 83 | if (result == 0)
|
---|
| 84 | {
|
---|
| 85 | result = initialize_hsm_system();
|
---|
| 86 | }
|
---|
| 87 | }
|
---|
| 88 | return result;
|
---|
| 89 | }
|
---|
| 90 |
|
---|
| 91 | void iothub_security_deinit()
|
---|
| 92 | {
|
---|
| 93 | if (g_symm_key != NULL)
|
---|
| 94 | {
|
---|
| 95 | free(g_symm_key);
|
---|
| 96 | g_symm_key = NULL;
|
---|
| 97 | }
|
---|
| 98 | if (g_symm_key_reg_name != NULL)
|
---|
| 99 | {
|
---|
| 100 | free(g_symm_key_reg_name);
|
---|
| 101 | g_symm_key_reg_name = NULL;
|
---|
| 102 | }
|
---|
| 103 | deinitialize_hsm_system();
|
---|
| 104 | if (prov_dev_get_symmetric_key() != NULL || prov_dev_get_symm_registration_name() != NULL)
|
---|
| 105 | {
|
---|
| 106 | prov_dev_security_deinit();
|
---|
| 107 | }
|
---|
| 108 | }
|
---|
| 109 |
|
---|
| 110 | IOTHUB_SECURITY_TYPE iothub_security_type()
|
---|
| 111 | {
|
---|
| 112 | return g_security_type;
|
---|
| 113 | }
|
---|
| 114 |
|
---|
| 115 | int iothub_security_set_symmetric_key_info(const char* registration_name, const char* symmetric_key)
|
---|
| 116 | {
|
---|
| 117 | int result;
|
---|
| 118 | if (registration_name == NULL || symmetric_key == NULL)
|
---|
| 119 | {
|
---|
| 120 | LogError("Invalid parameter specified reg_name: %p, symm_key: %p", registration_name, symmetric_key);
|
---|
| 121 | result = MU_FAILURE;
|
---|
| 122 | }
|
---|
| 123 | else
|
---|
| 124 | {
|
---|
| 125 | char* temp_key;
|
---|
| 126 | char* temp_name;
|
---|
| 127 | if (mallocAndStrcpy_s(&temp_name, registration_name) != 0)
|
---|
| 128 | {
|
---|
| 129 | LogError("Failure allocating registration name");
|
---|
| 130 | result = MU_FAILURE;
|
---|
| 131 | }
|
---|
| 132 | else if (mallocAndStrcpy_s(&temp_key, symmetric_key) != 0)
|
---|
| 133 | {
|
---|
| 134 | LogError("Failure allocating symmetric key");
|
---|
| 135 | free(temp_name);
|
---|
| 136 | result = MU_FAILURE;
|
---|
| 137 | }
|
---|
| 138 | else
|
---|
| 139 | {
|
---|
| 140 | if (g_symm_key != NULL)
|
---|
| 141 | {
|
---|
| 142 | free(g_symm_key);
|
---|
| 143 | }
|
---|
| 144 | if (g_symm_key_reg_name != NULL)
|
---|
| 145 | {
|
---|
| 146 | free(g_symm_key_reg_name);
|
---|
| 147 | }
|
---|
| 148 | g_symm_key_reg_name = temp_name;
|
---|
| 149 | g_symm_key = temp_key;
|
---|
| 150 |
|
---|
| 151 | // Sync iothub with dps
|
---|
| 152 | if (prov_dev_get_symmetric_key() == NULL || prov_dev_get_symm_registration_name() == NULL)
|
---|
| 153 | {
|
---|
| 154 | if (prov_dev_set_symmetric_key_info(g_symm_key_reg_name, g_symm_key) != 0)
|
---|
| 155 | {
|
---|
| 156 | LogError("Failure syncing dps & IoThub key information");
|
---|
| 157 | result = MU_FAILURE;
|
---|
| 158 | }
|
---|
| 159 | else
|
---|
| 160 | {
|
---|
| 161 | result = 0;
|
---|
| 162 | }
|
---|
| 163 | }
|
---|
| 164 | else
|
---|
| 165 | {
|
---|
| 166 | result = 0;
|
---|
| 167 | }
|
---|
| 168 | }
|
---|
| 169 | }
|
---|
| 170 | return result;
|
---|
| 171 | }
|
---|
| 172 |
|
---|
| 173 | const char* iothub_security_get_symmetric_key()
|
---|
| 174 | {
|
---|
| 175 | return g_symm_key;
|
---|
| 176 | }
|
---|
| 177 |
|
---|
| 178 | const char* iothub_security_get_symm_registration_name()
|
---|
| 179 | {
|
---|
| 180 | return g_symm_key_reg_name;
|
---|
| 181 | }
|
---|