public void returns_correct_issuer_when_one_registered()
{
string issuerName = "testIssuer";
var issuer = new IssuerInformation(issuerName, new NullSignatureAlgorithm());
_signatureProvider.Register(issuer);
Assert.AreSame(issuer, _signatureProvider.GetIssuer(issuerName),
"Incorrect issuer returned");
}
/// <summary>
/// Checks, if provided module has all necessary data and that it signature is trusted
/// </summary>
/// <remarks>
/// <para>
/// Firstly, it verifies that module has manifest, and that manifest has its signature.
/// Secondly, it verifies that manifest matches it signatures.
/// Than it verifies, that each file mentioned in manifest is present and matches its signature.
/// </para>
/// <para>
/// There is also asumption that module assembly provided by <see cref="ModuleInfo.AssemblyPath"/>
/// is in the same directory as the manifest file and manifest signature file.
/// </para>
/// </remarks>
/// <param name="moduleInfo">module to verify</param>
/// <returns>true if all conditions are fullfilled, otherwise false - preventing module from loading</returns>
public bool Matches(ModuleInfo moduleInfo)
{
string modulePath = moduleInfo.AssemblyPath;
string basePath = Path.GetDirectoryName(modulePath);
string manifestPath = modulePath + ModuleManifest.ManifestFileNameSuffix;
string manifestSig = manifestPath + ModuleManifest.ManifestSignatureFileNameSuffix;
try
{
//get manifest
var manifest = moduleInfo.Manifest;
//get current issuer
IssuerInformation issuer = _signatureProvider.GetIssuer(manifest.Issuer);
//verify signature of manifest
//TODO: Would we like to inform user when module loading fails?
if (!File.Exists(manifestSig))
{
return(false);
}
if (!issuer.IssuerAlgorithm.Verify(File.ReadAllBytes(manifestPath),
File.ReadAllBytes(manifestSig)))
{
return(false);
}
//verify all file signatures
foreach (SignedFile signedFile in manifest.SignedFiles)
{
string filePath = Path.Combine(basePath, signedFile.FilePath);
if (
!issuer.IssuerAlgorithm.Verify(File.ReadAllBytes(filePath),
signedFile.Signature))
{
return(false);
}
}
}
catch (Exception e)
{
//TODO: any exception should be logged!
//if exception occurs, it means that something went bad and module is not correct
return(false);
}
//if we are here, then none of tests failed.
return(true);
}