2013-08-20 09:48:36 +00:00
|
|
|
/* BEGIN_HEADER */
|
2015-02-06 13:57:42 +00:00
|
|
|
#include "polarssl/x509_crt.h"
|
|
|
|
#include "polarssl/x509_csr.h"
|
|
|
|
#include "polarssl/pem.h"
|
|
|
|
#include "polarssl/oid.h"
|
2013-08-20 09:48:36 +00:00
|
|
|
/* END_HEADER */
|
2012-02-16 14:09:13 +00:00
|
|
|
|
2013-08-20 09:48:36 +00:00
|
|
|
/* BEGIN_DEPENDENCIES
|
2013-09-16 11:49:26 +00:00
|
|
|
* depends_on:POLARSSL_BIGNUM_C:POLARSSL_FS_IO:POLARSSL_PK_PARSE_C
|
2013-08-20 09:48:36 +00:00
|
|
|
* END_DEPENDENCIES
|
|
|
|
*/
|
2012-02-16 14:09:13 +00:00
|
|
|
|
2013-09-16 11:49:26 +00:00
|
|
|
/* BEGIN_CASE depends_on:POLARSSL_PEM_WRITE_C:POLARSSL_X509_CSR_WRITE_C */
|
2014-03-28 11:46:44 +00:00
|
|
|
void x509_csr_check( char *key_file, char *cert_req_check_file,
|
|
|
|
int md_type, int key_usage, int cert_type )
|
2012-02-16 14:09:13 +00:00
|
|
|
{
|
2013-09-11 20:48:40 +00:00
|
|
|
pk_context key;
|
2013-09-09 10:08:11 +00:00
|
|
|
x509write_csr req;
|
2012-02-16 14:09:13 +00:00
|
|
|
unsigned char buf[4000];
|
|
|
|
unsigned char check_buf[4000];
|
|
|
|
int ret;
|
2013-09-15 18:03:26 +00:00
|
|
|
size_t olen = 0, pem_len = 0;
|
2012-02-16 14:09:13 +00:00
|
|
|
FILE *f;
|
2013-12-30 19:41:54 +00:00
|
|
|
const char *subject_name = "C=NL,O=PolarSSL,CN=PolarSSL Server 1";
|
2013-09-11 20:48:40 +00:00
|
|
|
rnd_pseudo_info rnd_info;
|
2012-02-16 14:09:13 +00:00
|
|
|
|
2013-09-11 20:48:40 +00:00
|
|
|
memset( &rnd_info, 0x2a, sizeof( rnd_pseudo_info ) );
|
|
|
|
|
|
|
|
pk_init( &key );
|
2013-09-15 11:01:22 +00:00
|
|
|
TEST_ASSERT( pk_parse_keyfile( &key, key_file, NULL ) == 0 );
|
2012-02-16 14:09:13 +00:00
|
|
|
|
2013-08-25 09:01:31 +00:00
|
|
|
x509write_csr_init( &req );
|
|
|
|
x509write_csr_set_md_alg( &req, md_type );
|
2013-09-11 20:48:40 +00:00
|
|
|
x509write_csr_set_key( &req, &key );
|
2013-08-25 09:01:31 +00:00
|
|
|
TEST_ASSERT( x509write_csr_set_subject_name( &req, subject_name ) == 0 );
|
2014-03-28 11:46:44 +00:00
|
|
|
if( key_usage != 0 )
|
|
|
|
TEST_ASSERT( x509write_csr_set_key_usage( &req, key_usage ) == 0 );
|
|
|
|
if( cert_type != 0 )
|
|
|
|
TEST_ASSERT( x509write_csr_set_ns_cert_type( &req, cert_type ) == 0 );
|
2013-08-25 08:18:25 +00:00
|
|
|
|
2013-09-15 18:03:26 +00:00
|
|
|
ret = x509write_csr_pem( &req, buf, sizeof(buf),
|
2013-09-11 20:48:40 +00:00
|
|
|
rnd_pseudo_rand, &rnd_info );
|
2013-09-15 18:03:26 +00:00
|
|
|
TEST_ASSERT( ret == 0 );
|
2012-02-16 14:09:13 +00:00
|
|
|
|
2013-09-15 18:03:26 +00:00
|
|
|
pem_len = strlen( (char *) buf );
|
2012-02-16 14:09:13 +00:00
|
|
|
|
2013-08-20 09:48:36 +00:00
|
|
|
f = fopen( cert_req_check_file, "r" );
|
2012-02-16 14:09:13 +00:00
|
|
|
TEST_ASSERT( f != NULL );
|
2013-09-15 18:03:26 +00:00
|
|
|
olen = fread( check_buf, 1, sizeof( check_buf ), f );
|
2012-02-16 14:09:13 +00:00
|
|
|
fclose( f );
|
|
|
|
|
2013-09-15 18:03:26 +00:00
|
|
|
TEST_ASSERT( olen >= pem_len - 1 );
|
|
|
|
TEST_ASSERT( memcmp( buf, check_buf, pem_len - 1 ) == 0 );
|
2013-01-03 10:33:48 +00:00
|
|
|
|
2014-07-10 13:26:12 +00:00
|
|
|
exit:
|
2013-08-25 09:01:31 +00:00
|
|
|
x509write_csr_free( &req );
|
2013-09-11 20:48:40 +00:00
|
|
|
pk_free( &key );
|
2012-02-16 14:09:13 +00:00
|
|
|
}
|
2013-08-20 09:48:36 +00:00
|
|
|
/* END_CASE */
|
2013-09-08 13:58:15 +00:00
|
|
|
|
2013-10-27 13:22:02 +00:00
|
|
|
/* BEGIN_CASE depends_on:POLARSSL_PEM_WRITE_C:POLARSSL_X509_CRT_WRITE_C:POLARSSL_SHA1_C */
|
2013-09-08 13:58:15 +00:00
|
|
|
void x509_crt_check( char *subject_key_file, char *subject_pwd,
|
|
|
|
char *subject_name, char *issuer_key_file,
|
|
|
|
char *issuer_pwd, char *issuer_name,
|
|
|
|
char *serial_str, char *not_before, char *not_after,
|
2014-03-28 13:03:22 +00:00
|
|
|
int md_type, int key_usage, int cert_type, int ver,
|
|
|
|
char *cert_check_file )
|
2013-09-08 13:58:15 +00:00
|
|
|
{
|
2013-09-12 03:21:54 +00:00
|
|
|
pk_context subject_key, issuer_key;
|
2013-09-08 13:58:15 +00:00
|
|
|
x509write_cert crt;
|
|
|
|
unsigned char buf[4000];
|
|
|
|
unsigned char check_buf[5000];
|
|
|
|
mpi serial;
|
|
|
|
int ret;
|
2013-09-15 18:03:26 +00:00
|
|
|
size_t olen = 0, pem_len = 0;
|
2013-09-08 13:58:15 +00:00
|
|
|
FILE *f;
|
2013-09-12 03:59:05 +00:00
|
|
|
rnd_pseudo_info rnd_info;
|
2013-09-08 13:58:15 +00:00
|
|
|
|
2013-09-12 03:59:05 +00:00
|
|
|
memset( &rnd_info, 0x2a, sizeof( rnd_pseudo_info ) );
|
2013-09-08 13:58:15 +00:00
|
|
|
mpi_init( &serial );
|
2013-09-12 03:21:54 +00:00
|
|
|
pk_init( &subject_key );
|
|
|
|
pk_init( &issuer_key );
|
2013-09-08 13:58:15 +00:00
|
|
|
|
2013-09-15 11:01:22 +00:00
|
|
|
TEST_ASSERT( pk_parse_keyfile( &subject_key, subject_key_file,
|
2013-09-08 13:58:15 +00:00
|
|
|
subject_pwd ) == 0 );
|
2013-09-15 11:01:22 +00:00
|
|
|
TEST_ASSERT( pk_parse_keyfile( &issuer_key, issuer_key_file,
|
2013-09-08 13:58:15 +00:00
|
|
|
issuer_pwd ) == 0 );
|
|
|
|
TEST_ASSERT( mpi_read_string( &serial, 10, serial_str ) == 0 );
|
|
|
|
|
|
|
|
x509write_crt_init( &crt );
|
2014-03-28 13:03:22 +00:00
|
|
|
if( ver != -1 )
|
|
|
|
x509write_crt_set_version( &crt, ver );
|
|
|
|
TEST_ASSERT( x509write_crt_set_serial( &crt, &serial ) == 0 );
|
2013-09-08 13:58:15 +00:00
|
|
|
TEST_ASSERT( x509write_crt_set_validity( &crt, not_before,
|
|
|
|
not_after ) == 0 );
|
|
|
|
x509write_crt_set_md_alg( &crt, md_type );
|
|
|
|
TEST_ASSERT( x509write_crt_set_issuer_name( &crt, issuer_name ) == 0 );
|
|
|
|
TEST_ASSERT( x509write_crt_set_subject_name( &crt, subject_name ) == 0 );
|
2013-09-12 03:21:54 +00:00
|
|
|
x509write_crt_set_subject_key( &crt, &subject_key );
|
|
|
|
x509write_crt_set_issuer_key( &crt, &issuer_key );
|
2013-09-08 13:58:15 +00:00
|
|
|
|
2014-03-28 13:03:22 +00:00
|
|
|
if( crt.version >= X509_CRT_VERSION_3 )
|
|
|
|
{
|
|
|
|
TEST_ASSERT( x509write_crt_set_basic_constraints( &crt, 0, 0 ) == 0 );
|
|
|
|
TEST_ASSERT( x509write_crt_set_subject_key_identifier( &crt ) == 0 );
|
|
|
|
TEST_ASSERT( x509write_crt_set_authority_key_identifier( &crt ) == 0 );
|
|
|
|
if( key_usage != 0 )
|
|
|
|
TEST_ASSERT( x509write_crt_set_key_usage( &crt, key_usage ) == 0 );
|
|
|
|
if( cert_type != 0 )
|
|
|
|
TEST_ASSERT( x509write_crt_set_ns_cert_type( &crt, cert_type ) == 0 );
|
|
|
|
}
|
2013-09-08 13:58:15 +00:00
|
|
|
|
2013-09-15 18:03:26 +00:00
|
|
|
ret = x509write_crt_pem( &crt, buf, sizeof(buf),
|
2013-09-12 03:59:05 +00:00
|
|
|
rnd_pseudo_rand, &rnd_info );
|
2013-09-15 18:03:26 +00:00
|
|
|
TEST_ASSERT( ret == 0 );
|
2013-09-08 13:58:15 +00:00
|
|
|
|
2013-09-15 18:03:26 +00:00
|
|
|
pem_len = strlen( (char *) buf );
|
2013-09-08 13:58:15 +00:00
|
|
|
|
|
|
|
f = fopen( cert_check_file, "r" );
|
|
|
|
TEST_ASSERT( f != NULL );
|
2014-04-17 14:07:20 +00:00
|
|
|
olen = fread( check_buf, 1, sizeof(check_buf), f );
|
|
|
|
TEST_ASSERT( olen < sizeof(check_buf) );
|
2013-09-08 13:58:15 +00:00
|
|
|
fclose( f );
|
|
|
|
|
2013-09-15 18:03:26 +00:00
|
|
|
TEST_ASSERT( olen >= pem_len - 1 );
|
|
|
|
TEST_ASSERT( memcmp( buf, check_buf, pem_len - 1 ) == 0 );
|
2013-09-08 13:58:15 +00:00
|
|
|
|
2014-07-10 13:26:12 +00:00
|
|
|
exit:
|
2013-09-08 13:58:15 +00:00
|
|
|
x509write_crt_free( &crt );
|
2013-09-12 03:21:54 +00:00
|
|
|
pk_free( &issuer_key );
|
|
|
|
pk_free( &subject_key );
|
2013-09-08 13:58:15 +00:00
|
|
|
mpi_free( &serial );
|
|
|
|
}
|
|
|
|
/* END_CASE */
|
2014-08-08 10:22:30 +00:00
|
|
|
|
|
|
|
/* BEGIN_CASE depends_on:POLARSSL_X509_CREATE_C:POLARSSL_X509_USE_C */
|
|
|
|
void x509_string_to_names( char *name, char *parsed_name, int result )
|
|
|
|
{
|
|
|
|
int ret;
|
|
|
|
size_t len = 0;
|
|
|
|
asn1_named_data *names = NULL;
|
|
|
|
x509_name parsed, *parsed_cur, *parsed_prv;
|
|
|
|
unsigned char buf[2048], *c;
|
|
|
|
|
|
|
|
memset( &parsed, 0, sizeof( parsed ) );
|
|
|
|
memset( buf, 0, sizeof( buf ) );
|
|
|
|
c = buf + sizeof( buf );
|
|
|
|
|
|
|
|
ret = x509_string_to_names( &names, name );
|
|
|
|
TEST_ASSERT( ret == result );
|
|
|
|
|
|
|
|
if( ret != 0 )
|
|
|
|
goto exit;
|
|
|
|
|
|
|
|
ret = x509_write_names( &c, buf, names );
|
|
|
|
TEST_ASSERT( ret > 0 );
|
|
|
|
|
|
|
|
TEST_ASSERT( asn1_get_tag( &c, buf + sizeof( buf ), &len,
|
|
|
|
ASN1_CONSTRUCTED | ASN1_SEQUENCE ) == 0 );
|
|
|
|
TEST_ASSERT( x509_get_name( &c, buf + sizeof( buf ), &parsed ) == 0 );
|
|
|
|
|
|
|
|
ret = x509_dn_gets( (char *) buf, sizeof( buf ), &parsed );
|
|
|
|
TEST_ASSERT( ret > 0 );
|
|
|
|
|
|
|
|
TEST_ASSERT( strcmp( (char *) buf, parsed_name ) == 0 );
|
|
|
|
|
|
|
|
exit:
|
|
|
|
asn1_free_named_data_list( &names );
|
|
|
|
|
|
|
|
parsed_cur = parsed.next;
|
|
|
|
while( parsed_cur != 0 )
|
|
|
|
{
|
|
|
|
parsed_prv = parsed_cur;
|
|
|
|
parsed_cur = parsed_cur->next;
|
|
|
|
polarssl_free( parsed_prv );
|
|
|
|
}
|
|
|
|
}
|
|
|
|
/* END_CASE */
|