]>
Commit | Line | Data |
---|---|---|
8a302080 | 1 | #! /usr/bin/env perl |
3c2bdd7d | 2 | # Copyright 2019-2021 The OpenSSL Project Authors. All Rights Reserved. |
8a302080 DB |
3 | # |
4 | # Licensed under the Apache License 2.0 (the "License"). You may not use | |
5 | # this file except in compliance with the License. You can obtain a copy | |
6 | # in the file LICENSE in the source distribution or at | |
7 | # https://www.openssl.org/source/license.html | |
8 | ||
9 | ||
10 | use strict; | |
11 | use warnings; | |
12 | ||
13 | use File::Spec; | |
14 | use OpenSSL::Test::Utils; | |
59f4a51a | 15 | use OpenSSL::Test qw/:DEFAULT srctop_file with/; |
8a302080 DB |
16 | |
17 | setup("test_eai_data"); | |
18 | ||
19 | #./util/wrap.pl apps/openssl verify -nameopt utf8 -no_check_time -CAfile test/recipes/25-test_eai_data/ascii_chain.pem test/recipes/25-test_eai_data/ascii_leaf.pem | |
20 | #./util/wrap.pl apps/openssl verify -nameopt utf8 -no_check_time -CAfile test/recipes/25-test_eai_data/utf8_chain.pem test/recipes/25-test_eai_data/utf8_leaf.pem | |
21 | #./util/wrap.pl apps/openssl verify -nameopt utf8 -no_check_time -CAfile test/recipes/25-test_eai_data/utf8_chain.pem test/recipes/25-test_eai_data/ascii_leaf.pem | |
22 | #./util/wrap.pl apps/openssl verify -nameopt utf8 -no_check_time -CAfile test/recipes/25-test_eai_data/ascii_chain.pem test/recipes/25-test_eai_data/utf8_leaf.pem | |
23 | ||
59f4a51a | 24 | plan tests => 12; |
8a302080 DB |
25 | |
26 | require_ok(srctop_file('test','recipes','tconversion.pl')); | |
27 | my $folder = "test/recipes/25-test_eai_data"; | |
28 | ||
29 | my $ascii_pem = srctop_file($folder, "ascii_leaf.pem"); | |
30 | my $utf8_pem = srctop_file($folder, "utf8_leaf.pem"); | |
31 | ||
32 | my $ascii_chain_pem = srctop_file($folder, "ascii_chain.pem"); | |
33 | my $utf8_chain_pem = srctop_file($folder, "utf8_chain.pem"); | |
34 | ||
53eecb5d RL |
35 | my $out; |
36 | my $outcnt = 0; | |
37 | sub outname { | |
38 | $outcnt++; | |
39 | return "sanout-$outcnt.tmp"; | |
40 | } | |
41 | ||
42 | $out = outname(); | |
8a302080 DB |
43 | ok(run(app(["openssl", "x509", "-ext", "subjectAltName", "-in", $ascii_pem, "-noout", "-out", $out]))); |
44 | is(cmp_text($out, srctop_file($folder, "san.ascii")), 0, 'Comparing othername for ASCII domain'); | |
45 | ||
53eecb5d | 46 | $out = outname(); |
8a302080 DB |
47 | ok(run(app(["openssl", "x509", "-ext", "subjectAltName", "-in", $utf8_pem, "-noout", "-out", $out]))); |
48 | is(cmp_text($out, srctop_file($folder, "san.utf8")), 0, 'Comparing othername for IDN domain'); | |
49 | ||
53d0d01f MC |
50 | SKIP: { |
51 | skip "Unicode tests disabled on MingW", 2 if $^O =~ /^msys$/; | |
52 | ||
53 | ok(run(app(["openssl", "verify", "-nameopt", "utf8", "-no_check_time", "-verify_email", "学生\@elementary.school.example.com", "-CAfile", $ascii_chain_pem, $ascii_pem]))); | |
54 | ok(run(app(["openssl", "verify", "-nameopt", "utf8", "-no_check_time", "-verify_email", "医生\@大学.example.com", "-CAfile", $utf8_chain_pem, $utf8_pem]))); | |
55 | } | |
8a302080 DB |
56 | |
57 | ok(run(app(["openssl", "verify", "-nameopt", "utf8", "-no_check_time", "-CAfile", $ascii_chain_pem, $ascii_pem]))); | |
58 | ok(run(app(["openssl", "verify", "-nameopt", "utf8", "-no_check_time", "-CAfile", $utf8_chain_pem, $utf8_pem]))); | |
59 | ||
60 | ok(!run(app(["openssl", "verify", "-nameopt", "utf8", "-no_check_time", "-CAfile", $ascii_chain_pem, $utf8_pem]))); | |
61 | ok(!run(app(["openssl", "verify", "-nameopt", "utf8", "-no_check_time", "-CAfile", $utf8_chain_pem, $ascii_pem]))); | |
62 | ||
59f4a51a MC |
63 | #Check that we get the expected failure return code |
64 | with({ exit_checker => sub { return shift == 2; } }, | |
65 | sub { | |
66 | ok(run(app(["openssl", "verify", "-CAfile", | |
67 | srctop_file("test", "certs", "bad-othername-namec.pem"), | |
68 | "-partial_chain", "-no_check_time", "-verify_email", | |
69 | 'foo@example.com', | |
70 | srctop_file("test", "certs", "bad-othername-namec.pem")]))); | |
71 | }); | |
72 |