]>
Commit | Line | Data |
---|---|---|
596d6b7e | 1 | #! /usr/bin/env perl |
cf72c757 | 2 | # Copyright 2015-2017 The OpenSSL Project Authors. All Rights Reserved. |
596d6b7e RS |
3 | # |
4 | # Licensed under the OpenSSL license (the "License"). You may not use | |
5 | # this file except in compliance with the License. You can obtain a copy | |
6 | # in the file LICENSE in the source distribution or at | |
7 | # https://www.openssl.org/source/license.html | |
8 | ||
453dfd8d EK |
9 | |
10 | use strict; | |
11 | use warnings; | |
12 | ||
13 | use File::Basename; | |
14 | use File::Compare qw/compare_text/; | |
8d2214c0 | 15 | use OpenSSL::Glob; |
453dfd8d EK |
16 | use OpenSSL::Test qw/:DEFAULT srctop_dir srctop_file/; |
17 | use OpenSSL::Test::Utils qw/disabled alldisabled available_protocols/; | |
18 | ||
19 | setup("test_ssl_new"); | |
20 | ||
21 | $ENV{TEST_CERTS_DIR} = srctop_dir("test", "certs"); | |
da085d27 | 22 | $ENV{CTLOG_FILE} = srctop_file("test", "ct", "log_list.conf"); |
453dfd8d | 23 | |
97855556 | 24 | my @conf_srcs = glob(srctop_file("test", "ssl-tests", "*.conf.in")); |
1563102b | 25 | map { s/;.*// } @conf_srcs if $^O eq "VMS"; |
d89f6641 RL |
26 | my @conf_files = map { basename($_, ".in") } @conf_srcs; |
27 | map { s/\^// } @conf_files if $^O eq "VMS"; | |
453dfd8d | 28 | |
f4947bf1 RL |
29 | # We hard-code the number of tests to double-check that the globbing above |
30 | # finds all files as expected. | |
9d75dce3 | 31 | plan tests => 26; # = scalar @conf_srcs |
f4947bf1 | 32 | |
3e82ae57 MC |
33 | # Some test results depend on the configuration of enabled protocols. We only |
34 | # verify generated sources in the default configuration. | |
74726750 | 35 | my $is_default_tls = (disabled("ssl3") && !disabled("tls1") && |
84a68336 | 36 | !disabled("tls1_1") && !disabled("tls1_2") && |
f518cef4 | 37 | !disabled("tls1_3")); |
453dfd8d | 38 | |
74726750 EK |
39 | my $is_default_dtls = (!disabled("dtls1") && !disabled("dtls1_2")); |
40 | ||
54d028aa | 41 | my @all_pre_tls1_3 = ("ssl3", "tls1", "tls1_1", "tls1_2"); |
74726750 | 42 | my $no_tls = alldisabled(available_protocols("tls")); |
54d028aa | 43 | my $no_pre_tls1_3 = alldisabled(@all_pre_tls1_3); |
74726750 | 44 | my $no_dtls = alldisabled(available_protocols("dtls")); |
ce2cdac2 | 45 | my $no_npn = disabled("nextprotoneg"); |
da085d27 | 46 | my $no_ct = disabled("ct"); |
be82f7b3 | 47 | my $no_ec = disabled("ec"); |
7c98706e RL |
48 | my $no_dh = disabled("dh"); |
49 | my $no_dsa = disabled("dsa"); | |
0a307450 | 50 | my $no_ec2m = disabled("ec2m"); |
057c676a | 51 | my $no_ocsp = disabled("ocsp"); |
74726750 | 52 | |
15269e56 EK |
53 | # Add your test here if the test conf.in generates test cases and/or |
54 | # expectations dynamically based on the OpenSSL compile-time config. | |
74726750 EK |
55 | my %conf_dependent_tests = ( |
56 | "02-protocol-version.conf" => !$is_default_tls, | |
0f5df0f1 MC |
57 | "04-client_auth.conf" => !$is_default_tls || !$is_default_dtls |
58 | || !disabled("sctp"), | |
548d0153 | 59 | "05-sni.conf" => disabled("tls1_1"), |
00da4f4d | 60 | "07-dtls-protocol-version.conf" => !$is_default_dtls || !disabled("sctp"), |
590ed3d7 | 61 | "10-resumption.conf" => !$is_default_tls, |
cf156009 | 62 | "11-dtls_resumption.conf" => !$is_default_dtls || !disabled("sctp"), |
83964ca0 | 63 | "16-dtls-certstatus.conf" => !$is_default_dtls || !disabled("sctp"), |
4d118fe0 | 64 | "17-renegotiate.conf" => disabled("tls1_2"), |
83964ca0 | 65 | "18-dtls-renegotiate.conf" => disabled("dtls1_2") || !disabled("sctp"), |
ac6eb152 | 66 | "19-mac-then-encrypt.conf" => !$is_default_tls, |
e4a3d0f9 | 67 | "20-cert-select.conf" => !$is_default_tls || $no_dh || $no_dsa, |
439db0c9 | 68 | "22-compression.conf" => !$is_default_tls, |
a8ea8018 | 69 | "25-cipher.conf" => disabled("poly1305") || disabled("chacha"), |
74726750 EK |
70 | ); |
71 | ||
15269e56 EK |
72 | # Add your test here if it should be skipped for some compile-time |
73 | # configurations. Default is $no_tls but some tests have different skip | |
74 | # conditions. | |
74726750 | 75 | my %skip = ( |
3e82ae57 | 76 | "07-dtls-protocol-version.conf" => $no_dtls, |
0f1e51ea MC |
77 | "08-npn.conf" => (disabled("tls1") && disabled("tls1_1") |
78 | && disabled("tls1_2")) || $no_npn, | |
80f397e2 MC |
79 | "10-resumption.conf" => disabled("tls1_1") || disabled("tls1_2"), |
80 | "11-dtls_resumption.conf" => disabled("dtls1") || disabled("dtls1_2"), | |
be82f7b3 | 81 | "12-ct.conf" => $no_tls || $no_ct || $no_ec, |
6dc99745 EK |
82 | # We could run some of these tests without TLS 1.2 if we had a per-test |
83 | # disable instruction but that's a bizarre configuration not worth | |
84 | # special-casing for. | |
cf72c757 | 85 | # TODO(TLS 1.3): We should review this once we have TLS 1.3. |
b1b22b0b | 86 | "13-fragmentation.conf" => disabled("tls1_2"), |
767ccc3b | 87 | "14-curves.conf" => disabled("tls1_2") || $no_ec || $no_ec2m, |
f07d639e | 88 | "15-certstatus.conf" => $no_tls || $no_ocsp, |
057c676a | 89 | "16-dtls-certstatus.conf" => $no_dtls || $no_ocsp, |
f9b1b664 | 90 | "18-dtls-renegotiate.conf" => $no_dtls, |
ac6eb152 | 91 | "19-mac-then-encrypt.conf" => $no_pre_tls1_3, |
ea24bb0a | 92 | "20-cert-select.conf" => disabled("tls1_2") || $no_ec, |
9b92f161 | 93 | "21-key-update.conf" => disabled("tls1_3"), |
439db0c9 | 94 | "22-compression.conf" => disabled("zlib") || $no_tls, |
ea1ecd98 EK |
95 | "23-srp.conf" => (disabled("tls1") && disabled ("tls1_1") |
96 | && disabled("tls1_2")) || disabled("srp"), | |
c649d10d | 97 | "24-padding.conf" => disabled("tls1_3"), |
f5fea665 | 98 | "25-cipher.conf" => disabled("ec") || disabled("tls1_2"), |
9d75dce3 | 99 | "26-tls13_client_auth.conf" => disabled("tls1_3"), |
74726750 | 100 | ); |
453dfd8d EK |
101 | |
102 | foreach my $conf (@conf_files) { | |
103 | subtest "Test configuration $conf" => sub { | |
578a0004 | 104 | test_conf($conf, |
74726750 | 105 | $conf_dependent_tests{$conf} || $^O eq "VMS" ? 0 : 1, |
f37c159a | 106 | defined($skip{$conf}) ? $skip{$conf} : $no_tls); |
453dfd8d EK |
107 | } |
108 | } | |
109 | ||
453dfd8d EK |
110 | sub test_conf { |
111 | plan tests => 3; | |
112 | ||
74726750 | 113 | my ($conf, $check_source, $skip) = @_; |
453dfd8d EK |
114 | |
115 | my $conf_file = srctop_file("test", "ssl-tests", $conf); | |
116 | my $tmp_file = "${conf}.$$.tmp"; | |
117 | my $run_test = 1; | |
118 | ||
119 | SKIP: { | |
120 | # "Test" 1. Generate the source. | |
121 | my $input_file = $conf_file . ".in"; | |
122 | ||
123 | skip 'failure', 2 unless | |
124 | ok(run(perltest(["generate_ssl_tests.pl", $input_file], | |
cb6afcd6 | 125 | interpreter_args => [ "-I", srctop_dir("util", "perl")], |
453dfd8d EK |
126 | stdout => $tmp_file)), |
127 | "Getting output from generate_ssl_tests.pl."); | |
128 | ||
129 | SKIP: { | |
130 | # Test 2. Compare against existing output in test/ssl_tests.conf. | |
131 | skip "Skipping generated source test for $conf", 1 | |
132 | if !$check_source; | |
133 | ||
134 | $run_test = is(cmp_text($tmp_file, $conf_file), 0, | |
135 | "Comparing generated sources."); | |
136 | } | |
137 | ||
138 | # Test 3. Run the test. | |
74726750 | 139 | skip "No tests available; skipping tests", 1 if $skip; |
453dfd8d EK |
140 | skip "Stale sources; skipping tests", 1 if !$run_test; |
141 | ||
142 | ok(run(test(["ssl_test", $tmp_file])), "running ssl_test $conf"); | |
143 | } | |
144 | ||
145 | unlink glob $tmp_file; | |
146 | } | |
147 | ||
148 | sub cmp_text { | |
149 | return compare_text(@_, sub { | |
150 | $_[0] =~ s/\R//g; | |
151 | $_[1] =~ s/\R//g; | |
152 | return $_[0] ne $_[1]; | |
153 | }); | |
154 | } |