|
Packit |
40b132 |
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
Packit |
40b132 |
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
Packit |
40b132 |
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
|
|
Packit |
40b132 |
/*
|
|
Packit |
40b132 |
* libpkixBuildThreads.c
|
|
Packit |
40b132 |
*
|
|
Packit |
40b132 |
* libpkix Builder Performance Evaluation application (multi-threaded)
|
|
Packit |
40b132 |
*
|
|
Packit |
40b132 |
*/
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
#include <stdio.h>
|
|
Packit |
40b132 |
#include <string.h>
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
#include "secutil.h"
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
#include "nspr.h"
|
|
Packit |
40b132 |
#include "prtypes.h"
|
|
Packit |
40b132 |
#include "prtime.h"
|
|
Packit |
40b132 |
#include "prlong.h"
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
#include "pk11func.h"
|
|
Packit |
40b132 |
#include "secasn1.h"
|
|
Packit |
40b132 |
#include "cert.h"
|
|
Packit |
40b132 |
#include "cryptohi.h"
|
|
Packit |
40b132 |
#include "secoid.h"
|
|
Packit |
40b132 |
#include "certdb.h"
|
|
Packit |
40b132 |
#include "nss.h"
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
#include "pkix.h"
|
|
Packit |
40b132 |
#include "pkix_tools.h"
|
|
Packit |
40b132 |
#include "pkix_pl_cert.h"
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
#include "testutil.h"
|
|
Packit |
40b132 |
#include "testutil_nss.h"
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
static void *plContext = NULL;
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
#undef pkixTempResult
|
|
Packit |
40b132 |
#define PERF_DECREF(obj) \
|
|
Packit |
40b132 |
{ \
|
|
Packit |
40b132 |
PKIX_Error *pkixTempResult = NULL; \
|
|
Packit |
40b132 |
if (obj){ \
|
|
Packit |
40b132 |
pkixTempResult = PKIX_PL_Object_DecRef \
|
|
Packit |
40b132 |
((PKIX_PL_Object *)(obj), plContext); \
|
|
Packit |
40b132 |
obj = NULL; \
|
|
Packit |
40b132 |
} \
|
|
Packit |
40b132 |
}
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
static void finish(char* message, int code);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
typedef struct ThreadDataStr tData;
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
struct ThreadDataStr {
|
|
Packit |
40b132 |
CERTCertificate* anchor;
|
|
Packit |
40b132 |
char* eecertName;
|
|
Packit |
40b132 |
PRIntervalTime duration;
|
|
Packit |
40b132 |
CERTCertDBHandle *handle;
|
|
Packit |
40b132 |
PRUint32 iterations;
|
|
Packit |
40b132 |
};
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
#define PKIX_LOGGER_ON 1
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
#ifdef PKIX_LOGGER_ON
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
char *logLevels[] = {
|
|
Packit |
40b132 |
"None",
|
|
Packit |
40b132 |
"Fatal Error",
|
|
Packit |
40b132 |
"Error",
|
|
Packit |
40b132 |
"Warning",
|
|
Packit |
40b132 |
"Debug",
|
|
Packit |
40b132 |
"Trace"
|
|
Packit |
40b132 |
};
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
static PKIX_Error *loggerCallback(
|
|
Packit |
40b132 |
PKIX_Logger *logger,
|
|
Packit |
40b132 |
PKIX_PL_String *message,
|
|
Packit |
40b132 |
PKIX_UInt32 logLevel,
|
|
Packit |
40b132 |
PKIX_ERRORCLASS logComponent,
|
|
Packit |
40b132 |
void *plContext)
|
|
Packit |
40b132 |
{
|
|
Packit |
40b132 |
char *msg = NULL;
|
|
Packit |
40b132 |
static int callCount = 0;
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
msg = PKIX_String2ASCII(message, plContext);
|
|
Packit |
40b132 |
printf("Logging %s (%s): %s\n",
|
|
Packit |
40b132 |
logLevels[logLevel],
|
|
Packit |
40b132 |
PKIX_ERRORCLASSNAMES[logComponent],
|
|
Packit |
40b132 |
msg);
|
|
Packit |
40b132 |
PR_Free((void *)msg);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
return(NULL);
|
|
Packit |
40b132 |
}
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
#endif /* PKIX_LOGGER_ON */
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
static void ThreadEntry(void* data)
|
|
Packit |
40b132 |
{
|
|
Packit |
40b132 |
tData* tdata = (tData*) data;
|
|
Packit |
40b132 |
PRIntervalTime duration = tdata->duration;
|
|
Packit |
40b132 |
PRIntervalTime start = PR_IntervalNow();
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
PKIX_List *anchors = NULL;
|
|
Packit |
40b132 |
PKIX_ProcessingParams *procParams = NULL;
|
|
Packit |
40b132 |
PKIX_BuildResult *buildResult = NULL;
|
|
Packit |
40b132 |
CERTCertificate* nsseecert;
|
|
Packit |
40b132 |
PKIX_PL_Cert *eeCert = NULL;
|
|
Packit |
40b132 |
PKIX_CertStore *certStore = NULL;
|
|
Packit |
40b132 |
PKIX_List *certStores = NULL;
|
|
Packit |
40b132 |
PKIX_ComCertSelParams *certSelParams = NULL;
|
|
Packit |
40b132 |
PKIX_CertSelector *certSelector = NULL;
|
|
Packit |
40b132 |
PKIX_PL_Date *nowDate = NULL;
|
|
Packit |
40b132 |
void *state = NULL; /* only relevant with non-blocking I/O */
|
|
Packit |
40b132 |
void *nbioContext = NULL; /* only relevant with non-blocking I/O */
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
PR_ASSERT(duration);
|
|
Packit |
40b132 |
if (!duration){
|
|
Packit |
40b132 |
return;
|
|
Packit |
40b132 |
}
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
do {
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
/* libpkix code */
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
/* keep more update time, testing cache */
|
|
Packit |
40b132 |
PKIX_PL_Date_Create_UTCTime(NULL, &nowDate, plContext);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
/* CertUsage is 0x10 and no NSS arena */
|
|
Packit |
40b132 |
/* We haven't determined how we obtain the value of wincx */
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
nsseecert = CERT_FindCertByNicknameOrEmailAddr(tdata->handle,
|
|
Packit |
40b132 |
tdata->eecertName);
|
|
Packit |
40b132 |
if (!nsseecert) finish("Unable to find eecert.\n", 1);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
pkix_pl_Cert_CreateWithNSSCert
|
|
Packit |
40b132 |
(nsseecert, &eeCert, plContext);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
PKIX_List_Create(&anchors, plContext);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
/*
|
|
Packit |
40b132 |
* This code is retired.
|
|
Packit |
40b132 |
* pkix_pl_Cert_CreateWithNSSCert
|
|
Packit |
40b132 |
* (tdata->anchor, &anchorCert, NULL);
|
|
Packit |
40b132 |
* PKIX_TrustAnchor_CreateWithCert(anchorCert, &anchor, NULL);
|
|
Packit |
40b132 |
* PKIX_List_AppendItem(anchors, (PKIX_PL_Object *)anchor, NULL);
|
|
Packit |
40b132 |
*/
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
PKIX_ProcessingParams_Create(anchors, &procParams, plContext);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
PKIX_ProcessingParams_SetRevocationEnabled
|
|
Packit |
40b132 |
(procParams, PKIX_TRUE, plContext);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
PKIX_ProcessingParams_SetDate
|
|
Packit |
40b132 |
(procParams, nowDate, plContext);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
/* create CertSelector with target certificate in params */
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
PKIX_ComCertSelParams_Create(&certSelParams, plContext);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
PKIX_ComCertSelParams_SetCertificate
|
|
Packit |
40b132 |
(certSelParams, eeCert, plContext);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
PKIX_CertSelector_Create
|
|
Packit |
40b132 |
(NULL, NULL, &certSelector, plContext);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
PKIX_CertSelector_SetCommonCertSelectorParams
|
|
Packit |
40b132 |
(certSelector, certSelParams, plContext);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
PKIX_ProcessingParams_SetTargetCertConstraints
|
|
Packit |
40b132 |
(procParams, certSelector, plContext);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
PKIX_PL_Pk11CertStore_Create(&certStore, plContext);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
PKIX_List_Create(&certStores, plContext);
|
|
Packit |
40b132 |
PKIX_List_AppendItem
|
|
Packit |
40b132 |
(certStores, (PKIX_PL_Object *)certStore, plContext);
|
|
Packit |
40b132 |
PKIX_ProcessingParams_SetCertStores
|
|
Packit |
40b132 |
(procParams, certStores, plContext);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
PKIX_BuildChain
|
|
Packit |
40b132 |
(procParams,
|
|
Packit |
40b132 |
&nbioContext,
|
|
Packit |
40b132 |
&state,
|
|
Packit |
40b132 |
&buildResult,
|
|
Packit |
40b132 |
NULL,
|
|
Packit |
40b132 |
plContext);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
/*
|
|
Packit |
40b132 |
* As long as we use only CertStores with blocking I/O, we
|
|
Packit |
40b132 |
* know we must be done at this point.
|
|
Packit |
40b132 |
*/
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
if (!buildResult){
|
|
Packit |
40b132 |
(void) fprintf(stderr, "libpkix BuildChain failed.\n");
|
|
Packit |
40b132 |
PORT_Assert(0);
|
|
Packit |
40b132 |
return;
|
|
Packit |
40b132 |
}
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
tdata->iterations ++;
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
PERF_DECREF(nowDate);
|
|
Packit |
40b132 |
PERF_DECREF(anchors);
|
|
Packit |
40b132 |
PERF_DECREF(procParams);
|
|
Packit |
40b132 |
PERF_DECREF(buildResult);
|
|
Packit |
40b132 |
PERF_DECREF(certStore);
|
|
Packit |
40b132 |
PERF_DECREF(certStores);
|
|
Packit |
40b132 |
PERF_DECREF(certSelParams);
|
|
Packit |
40b132 |
PERF_DECREF(certSelector);
|
|
Packit |
40b132 |
PERF_DECREF(eeCert);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
} while ((PR_IntervalNow() - start) < duration);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
}
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
static void
|
|
Packit |
40b132 |
Test(
|
|
Packit |
40b132 |
CERTCertificate* anchor,
|
|
Packit |
40b132 |
char* eecertName,
|
|
Packit |
40b132 |
PRIntervalTime duration,
|
|
Packit |
40b132 |
CERTCertDBHandle *handle,
|
|
Packit |
40b132 |
PRUint32 threads)
|
|
Packit |
40b132 |
{
|
|
Packit |
40b132 |
tData data;
|
|
Packit |
40b132 |
tData** alldata;
|
|
Packit |
40b132 |
PRIntervalTime starttime, endtime, elapsed;
|
|
Packit |
40b132 |
PRUint32 msecs;
|
|
Packit |
40b132 |
float total = 0;
|
|
Packit |
40b132 |
PRThread** pthreads = NULL;
|
|
Packit |
40b132 |
PRUint32 i = 0;
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
data.duration = duration;
|
|
Packit |
40b132 |
data.anchor = anchor;
|
|
Packit |
40b132 |
data.eecertName = eecertName;
|
|
Packit |
40b132 |
data.handle = handle;
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
data.iterations = 0;
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
starttime = PR_IntervalNow();
|
|
Packit |
40b132 |
pthreads = (PRThread**)PR_Malloc(threads*sizeof (PRThread*));
|
|
Packit |
40b132 |
alldata = (tData**)PR_Malloc(threads*sizeof (tData*));
|
|
Packit |
40b132 |
for (i = 0; i < threads; i++){
|
|
Packit |
40b132 |
alldata[i] = (tData*)PR_Malloc(sizeof (tData));
|
|
Packit |
40b132 |
*alldata[i] = data;
|
|
Packit |
40b132 |
pthreads[i] =
|
|
Packit |
40b132 |
PR_CreateThread(PR_USER_THREAD,
|
|
Packit |
40b132 |
ThreadEntry,
|
|
Packit |
40b132 |
(void*) alldata[i],
|
|
Packit |
40b132 |
PR_PRIORITY_NORMAL,
|
|
Packit |
40b132 |
PR_GLOBAL_THREAD,
|
|
Packit |
40b132 |
PR_JOINABLE_THREAD,
|
|
Packit |
40b132 |
0);
|
|
Packit |
40b132 |
}
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
for (i = 0; i < threads; i++) {
|
|
Packit |
40b132 |
tData* args = alldata[i];
|
|
Packit |
40b132 |
PR_JoinThread(pthreads[i]);
|
|
Packit |
40b132 |
total += args->iterations;
|
|
Packit |
40b132 |
PR_Free((void*)args);
|
|
Packit |
40b132 |
}
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
PR_Free((void*) pthreads);
|
|
Packit |
40b132 |
PR_Free((void*) alldata);
|
|
Packit |
40b132 |
endtime = PR_IntervalNow();
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
endtime = PR_IntervalNow();
|
|
Packit |
40b132 |
elapsed = endtime - starttime;
|
|
Packit |
40b132 |
msecs = PR_IntervalToMilliseconds(elapsed);
|
|
Packit |
40b132 |
total /= msecs;
|
|
Packit |
40b132 |
total *= 1000;
|
|
Packit |
40b132 |
(void) fprintf(stdout, "%f operations per second.\n", total);
|
|
Packit |
40b132 |
}
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
static void finish(char* message, int code)
|
|
Packit |
40b132 |
{
|
|
Packit |
40b132 |
(void) printf(message);
|
|
Packit |
40b132 |
exit(code);
|
|
Packit |
40b132 |
}
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
static void usage(char* progname)
|
|
Packit |
40b132 |
{
|
|
Packit |
40b132 |
(void) printf("Usage : %s <-d certStoreDirectory> <duration> <threads> "
|
|
Packit |
40b132 |
"<anchorNickname> <eecertNickname>\n\n", progname);
|
|
Packit |
40b132 |
finish("", 0);
|
|
Packit |
40b132 |
}
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
int
|
|
Packit |
40b132 |
libpkix_buildthreads(int argc, char** argv)
|
|
Packit |
40b132 |
{
|
|
Packit |
40b132 |
CERTCertDBHandle *handle = NULL;
|
|
Packit |
40b132 |
CERTCertificate* eecert = NULL;
|
|
Packit |
40b132 |
PRIntervalTime duration = PR_SecondsToInterval(1);
|
|
Packit |
40b132 |
PRUint32 threads = 1;
|
|
Packit |
40b132 |
PKIX_UInt32 actualMinorVersion;
|
|
Packit |
40b132 |
PKIX_UInt32 j = 0;
|
|
Packit |
40b132 |
PKIX_Logger *logger = NULL;
|
|
Packit |
40b132 |
void *wincx = NULL;
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
/* if (argc != 5) -- when TrustAnchor used to be on command line */
|
|
Packit |
40b132 |
if (argc != 4)
|
|
Packit |
40b132 |
{
|
|
Packit |
40b132 |
usage(argv[0]);
|
|
Packit |
40b132 |
}
|
|
Packit |
40b132 |
if (atoi(argv[1]) > 0)
|
|
Packit |
40b132 |
{
|
|
Packit |
40b132 |
duration = PR_SecondsToInterval(atoi(argv[1]));
|
|
Packit |
40b132 |
}
|
|
Packit |
40b132 |
if (atoi(argv[2]) > 0)
|
|
Packit |
40b132 |
{
|
|
Packit |
40b132 |
threads = atoi(argv[2]);
|
|
Packit |
40b132 |
}
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
PKIX_PL_NssContext_Create(certificateUsageEmailSigner, PKIX_FALSE,
|
|
Packit |
40b132 |
NULL, &plContext);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
handle = CERT_GetDefaultCertDB();
|
|
Packit |
40b132 |
PR_ASSERT(handle);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
#ifdef PKIX_LOGGER_ON
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
/* set logger to log trace and up */
|
|
Packit |
40b132 |
PKIX_SetLoggers(NULL, plContext);
|
|
Packit |
40b132 |
PKIX_Logger_Create(loggerCallback, NULL, &logger, plContext);
|
|
Packit |
40b132 |
PKIX_Logger_SetMaxLoggingLevel
|
|
Packit |
40b132 |
(logger, PKIX_LOGGER_LEVEL_WARNING, plContext);
|
|
Packit |
40b132 |
PKIX_AddLogger(logger, plContext);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
#endif /* PKIX_LOGGER_ON */
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
/*
|
|
Packit |
40b132 |
* This code is retired
|
|
Packit |
40b132 |
* anchor = CERT_FindCertByNicknameOrEmailAddr(handle, argv[3]);
|
|
Packit |
40b132 |
* if (!anchor) finish("Unable to find anchor.\n", 1);
|
|
Packit |
40b132 |
*
|
|
Packit |
40b132 |
* eecert = CERT_FindCertByNicknameOrEmailAddr(handle, argv[4]);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
* if (!eecert) finish("Unable to find eecert.\n", 1);
|
|
Packit |
40b132 |
*
|
|
Packit |
40b132 |
* Test(anchor, eecert, duration, threads);
|
|
Packit |
40b132 |
*/
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
Test(NULL, argv[3], duration, handle, threads);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
PERF_DECREF(logger);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
PKIX_Shutdown(plContext);
|
|
Packit |
40b132 |
|
|
Packit |
40b132 |
return (0);
|
|
Packit |
40b132 |
}
|