test/recipes/25-test_verify.t

   1 #! /usr/bin/env perl
   2 # Copyright 2015-2021 The OpenSSL Project Authors. All Rights Reserved.
   3 #
   4 # Licensed under the Apache License 2.0 (the "License").  You may not use
   5 # this file except in compliance with the License.  You can obtain a copy
   6 # in the file LICENSE in the source distribution or at
   7 # https://www.openssl.org/source/license.html
   8
   9
  10 use strict;
  11 use warnings;
  12
  13 use File::Spec::Functions qw/canonpath/;
  14 use OpenSSL::Test qw/:DEFAULT srctop_file ok_nofips with/;
  15 use OpenSSL::Test::Utils;
  16
  17 setup("test_verify");
  18
  19 sub verify {
  20     my ($cert, $purpose, $trusted, $untrusted, @opts) = @_;
  21     my @path = qw(test certs);
  22     my @args = qw(openssl verify -auth_level 1);
  23     push(@args, "-purpose", $purpose) if $purpose ne "";
  24     push(@args, @opts);
  25     for (@$trusted) { push(@args, "-trusted", srctop_file(@path, "$_.pem")) }
  26     for (@$untrusted) { push(@args, "-untrusted", srctop_file(@path, "$_.pem")) }
  27     push(@args, srctop_file(@path, "$cert.pem"));
  28     run(app([@args]));
  29 }
  30
  31 plan tests => 157;
  32
  33 # Canonical success
  34 ok(verify("ee-cert", "sslserver", ["root-cert"], ["ca-cert"]),
  35    "accept compat trust");
  36
  37 # Root CA variants
  38 ok(!verify("ee-cert", "sslserver", [qw(root-nonca)], [qw(ca-cert)]),
  39    "fail trusted non-ca root");
  40 ok(!verify("ee-cert", "sslserver", [qw(nroot+serverAuth)], [qw(ca-cert)]),
  41    "fail server trust non-ca root");
  42 ok(!verify("ee-cert", "sslserver", [qw(nroot+anyEKU)], [qw(ca-cert)]),
  43    "fail wildcard trust non-ca root");
  44 ok(!verify("ee-cert", "sslserver", [qw(root-cert2)], [qw(ca-cert)]),
  45    "fail wrong root key");
  46 ok(!verify("ee-cert", "sslserver", [qw(root-name2)], [qw(ca-cert)]),
  47    "fail wrong root DN");
  48
  49 # Critical extensions
  50
  51 ok(verify("ee-cert-noncrit-unknown-ext", "", ["root-cert"], ["ca-cert"]),
  52    "accept non-critical unknown extension");
  53 ok(!verify("ee-cert-crit-unknown-ext", "", ["root-cert"], ["ca-cert"]),
  54    "reject critical unknown extension");
  55 ok(verify("ee-cert-ocsp-nocheck", "", ["root-cert"], ["ca-cert"]),
  56    "accept critical OCSP No Check");
  57
  58 # Explicit trust/purpose combinations
  59 #
  60 ok(verify("ee-cert", "sslserver", [qw(sroot-cert)], [qw(ca-cert)]),
  61    "accept server purpose");
  62 ok(!verify("ee-cert", "sslserver", [qw(croot-cert)], [qw(ca-cert)]),
  63    "fail client purpose");
  64 ok(verify("ee-cert", "sslserver", [qw(root+serverAuth)], [qw(ca-cert)]),
  65    "accept server trust");
  66 ok(verify("ee-cert", "sslserver", [qw(sroot+serverAuth)], [qw(ca-cert)]),
  67    "accept server trust with server purpose");
  68 ok(verify("ee-cert", "sslserver", [qw(croot+serverAuth)], [qw(ca-cert)]),
  69    "accept server trust with client purpose");
  70 # Wildcard trust
  71 ok(verify("ee-cert", "sslserver", [qw(root+anyEKU)], [qw(ca-cert)]),
  72    "accept wildcard trust");
  73 ok(verify("ee-cert", "sslserver", [qw(sroot+anyEKU)], [qw(ca-cert)]),
  74    "accept wildcard trust with server purpose");
  75 ok(verify("ee-cert", "sslserver", [qw(croot+anyEKU)], [qw(ca-cert)]),
  76    "accept wildcard trust with client purpose");
  77 # Inapplicable mistrust
  78 ok(verify("ee-cert", "sslserver", [qw(root-clientAuth)], [qw(ca-cert)]),
  79    "accept client mistrust");
  80 ok(verify("ee-cert", "sslserver", [qw(sroot-clientAuth)], [qw(ca-cert)]),
  81    "accept client mistrust with server purpose");
  82 ok(!verify("ee-cert", "sslserver", [qw(croot-clientAuth)], [qw(ca-cert)]),
  83    "fail client mistrust with client purpose");
  84 # Inapplicable trust
  85 ok(!verify("ee-cert", "sslserver", [qw(root+clientAuth)], [qw(ca-cert)]),
  86    "fail client trust");
  87 ok(!verify("ee-cert", "sslserver", [qw(sroot+clientAuth)], [qw(ca-cert)]),
  88    "fail client trust with server purpose");
  89 ok(!verify("ee-cert", "sslserver", [qw(croot+clientAuth)], [qw(ca-cert)]),
  90    "fail client trust with client purpose");
  91 # Server mistrust
  92 ok(!verify("ee-cert", "sslserver", [qw(root-serverAuth)], [qw(ca-cert)]),
  93    "fail rejected EKU");
  94 ok(!verify("ee-cert", "sslserver", [qw(sroot-serverAuth)], [qw(ca-cert)]),
  95    "fail server mistrust with server purpose");
  96 ok(!verify("ee-cert", "sslserver", [qw(croot-serverAuth)], [qw(ca-cert)]),
  97    "fail server mistrust with client purpose");
  98 # Wildcard mistrust
  99 ok(!verify("ee-cert", "sslserver", [qw(root-anyEKU)], [qw(ca-cert)]),
 100    "fail wildcard mistrust");
 101 ok(!verify("ee-cert", "sslserver", [qw(sroot-anyEKU)], [qw(ca-cert)]),
 102    "fail wildcard mistrust with server purpose");
 103 ok(!verify("ee-cert", "sslserver", [qw(croot-anyEKU)], [qw(ca-cert)]),
 104    "fail wildcard mistrust with client purpose");
 105
 106 # Check that trusted-first is on by setting up paths to different roots
 107 # depending on whether the intermediate is the trusted or untrusted one.
 108 #
 109 ok(verify("ee-cert", "sslserver", [qw(root-serverAuth root-cert2 ca-root2)],
 110           [qw(ca-cert)]),
 111    "accept trusted-first path");
 112 ok(verify("ee-cert", "sslserver", [qw(root-cert root2+serverAuth ca-root2)],
 113           [qw(ca-cert)]),
 114    "accept trusted-first path with server trust");
 115 ok(!verify("ee-cert", "sslserver", [qw(root-cert root2-serverAuth ca-root2)],
 116            [qw(ca-cert)]),
 117    "fail trusted-first path with server mistrust");
 118 ok(!verify("ee-cert", "sslserver", [qw(root-cert root2+clientAuth ca-root2)],
 119            [qw(ca-cert)]),
 120    "fail trusted-first path with client trust");
 121
 122 # CA variants
 123 ok(!verify("ee-cert", "sslserver", [qw(root-cert)], [qw(ca-nonca)]),
 124    "fail non-CA untrusted intermediate");
 125 ok(!verify("ee-cert", "sslserver", [qw(root-cert)], [qw(ca-nonbc)]),
 126    "fail non-CA untrusted intermediate");
 127 ok(!verify("ee-cert", "sslserver", [qw(root-cert ca-nonca)], []),
 128    "fail non-CA trust-store intermediate");
 129 ok(!verify("ee-cert", "sslserver", [qw(root-cert ca-nonbc)], []),
 130    "fail non-CA trust-store intermediate");
 131 ok(!verify("ee-cert", "sslserver", [qw(root-cert nca+serverAuth)], []),
 132    "fail non-CA server trust intermediate");
 133 ok(!verify("ee-cert", "sslserver", [qw(root-cert nca+anyEKU)], []),
 134    "fail non-CA wildcard trust intermediate");
 135 ok(!verify("ee-cert", "sslserver", [qw(root-cert)], [qw(ca-cert2)]),
 136    "fail wrong intermediate CA key");
 137 ok(!verify("ee-cert", "sslserver", [qw(root-cert)], [qw(ca-name2)]),
 138    "fail wrong intermediate CA DN");
 139 ok(!verify("ee-cert", "sslserver", [qw(root-cert)], [qw(ca-root2)]),
 140    "fail wrong intermediate CA issuer");
 141 ok(!verify("ee-cert", "sslserver", [], [qw(ca-cert)], "-partial_chain"),
 142    "fail untrusted partial chain");
 143 ok(verify("ee-cert", "sslserver", [qw(ca-cert)], [], "-partial_chain"),
 144    "accept trusted partial chain");
 145 ok(!verify("ee-cert", "sslserver", [qw(ca-expired)], [], "-partial_chain"),
 146    "reject expired trusted partial chain"); # this check is beyond RFC 5280
 147 ok(!verify("ee-cert", "sslserver", [qw(root-expired)], [qw(ca-cert)]),
 148    "reject expired trusted root"); # this check is beyond RFC 5280
 149 ok(verify("ee-cert", "sslserver", [qw(sca-cert)], [], "-partial_chain"),
 150    "accept partial chain with server purpose");
 151 ok(!verify("ee-cert", "sslserver", [qw(cca-cert)], [], "-partial_chain"),
 152    "fail partial chain with client purpose");
 153 ok(verify("ee-cert", "sslserver", [qw(ca+serverAuth)], [], "-partial_chain"),
 154    "accept server trust partial chain");
 155 ok(verify("ee-cert", "sslserver", [qw(cca+serverAuth)], [], "-partial_chain"),
 156    "accept server trust client purpose partial chain");
 157 ok(verify("ee-cert", "sslserver", [qw(ca-clientAuth)], [], "-partial_chain"),
 158    "accept client mistrust partial chain");
 159 ok(verify("ee-cert", "sslserver", [qw(ca+anyEKU)], [], "-partial_chain"),
 160    "accept wildcard trust partial chain");
 161 ok(!verify("ee-cert", "sslserver", [], [qw(ca+serverAuth)], "-partial_chain"),
 162    "fail untrusted partial issuer with ignored server trust");
 163 ok(!verify("ee-cert", "sslserver", [qw(ca-serverAuth)], [], "-partial_chain"),
 164    "fail server mistrust partial chain");
 165 ok(!verify("ee-cert", "sslserver", [qw(ca+clientAuth)], [], "-partial_chain"),
 166    "fail client trust partial chain");
 167 ok(!verify("ee-cert", "sslserver", [qw(ca-anyEKU)], [], "-partial_chain"),
 168    "fail wildcard mistrust partial chain");
 169
 170 # We now test auxiliary trust even for intermediate trusted certs without
 171 # -partial_chain.  Note that "-trusted_first" is now always on and cannot
 172 # be disabled.
 173 ok(verify("ee-cert", "sslserver", [qw(root-cert ca+serverAuth)], [qw(ca-cert)]),
 174    "accept server trust");
 175 ok(verify("ee-cert", "sslserver", [qw(root-cert ca+anyEKU)], [qw(ca-cert)]),
 176    "accept wildcard trust");
 177 ok(verify("ee-cert", "sslserver", [qw(root-cert sca-cert)], [qw(ca-cert)]),
 178    "accept server purpose");
 179 ok(verify("ee-cert", "sslserver", [qw(root-cert sca+serverAuth)], [qw(ca-cert)]),
 180    "accept server trust and purpose");
 181 ok(verify("ee-cert", "sslserver", [qw(root-cert sca+anyEKU)], [qw(ca-cert)]),
 182    "accept wildcard trust and server purpose");
 183 ok(verify("ee-cert", "sslserver", [qw(root-cert sca-clientAuth)], [qw(ca-cert)]),
 184    "accept client mistrust and server purpose");
 185 ok(verify("ee-cert", "sslserver", [qw(root-cert cca+serverAuth)], [qw(ca-cert)]),
 186    "accept server trust and client purpose");
 187 ok(verify("ee-cert", "sslserver", [qw(root-cert cca+anyEKU)], [qw(ca-cert)]),
 188    "accept wildcard trust and client purpose");
 189 ok(!verify("ee-cert", "sslserver", [qw(root-cert cca-cert)], [qw(ca-cert)]),
 190    "fail client purpose");
 191 ok(!verify("ee-cert", "sslserver", [qw(root-cert ca-anyEKU)], [qw(ca-cert)]),
 192    "fail wildcard mistrust");
 193 ok(!verify("ee-cert", "sslserver", [qw(root-cert ca-serverAuth)], [qw(ca-cert)]),
 194    "fail server mistrust");
 195 ok(!verify("ee-cert", "sslserver", [qw(root-cert ca+clientAuth)], [qw(ca-cert)]),
 196    "fail client trust");
 197 ok(!verify("ee-cert", "sslserver", [qw(root-cert sca+clientAuth)], [qw(ca-cert)]),
 198    "fail client trust and server purpose");
 199 ok(!verify("ee-cert", "sslserver", [qw(root-cert cca+clientAuth)], [qw(ca-cert)]),
 200    "fail client trust and client purpose");
 201 ok(!verify("ee-cert", "sslserver", [qw(root-cert cca-serverAuth)], [qw(ca-cert)]),
 202    "fail server mistrust and client purpose");
 203 ok(!verify("ee-cert", "sslserver", [qw(root-cert cca-clientAuth)], [qw(ca-cert)]),
 204    "fail client mistrust and client purpose");
 205 ok(!verify("ee-cert", "sslserver", [qw(root-cert sca-serverAuth)], [qw(ca-cert)]),
 206    "fail server mistrust and server purpose");
 207 ok(!verify("ee-cert", "sslserver", [qw(root-cert sca-anyEKU)], [qw(ca-cert)]),
 208    "fail wildcard mistrust and server purpose");
 209 ok(!verify("ee-cert", "sslserver", [qw(root-cert cca-anyEKU)], [qw(ca-cert)]),
 210    "fail wildcard mistrust and client purpose");
 211
 212 # EE variants
 213 ok(verify("ee-client", "sslclient", [qw(root-cert)], [qw(ca-cert)]),
 214    "accept client chain");
 215 ok(!verify("ee-client", "sslserver", [qw(root-cert)], [qw(ca-cert)]),
 216    "fail server leaf purpose");
 217 ok(!verify("ee-cert", "sslclient", [qw(root-cert)], [qw(ca-cert)]),
 218    "fail client leaf purpose");
 219 ok(!verify("ee-cert2", "sslserver", [qw(root-cert)], [qw(ca-cert)]),
 220    "fail wrong intermediate CA key");
 221 ok(!verify("ee-name2", "sslserver", [qw(root-cert)], [qw(ca-cert)]),
 222    "fail wrong intermediate CA DN");
 223 ok(!verify("ee-expired", "sslserver", [qw(root-cert)], [qw(ca-cert)]),
 224    "fail expired leaf");
 225 ok(verify("ee-cert", "sslserver", [qw(ee-cert)], [], "-partial_chain"),
 226    "accept last-resort direct leaf match");
 227 ok(verify("ee-client", "sslclient", [qw(ee-client)], [], "-partial_chain"),
 228    "accept last-resort direct leaf match");
 229 ok(!verify("ee-cert", "sslserver", [qw(ee-client)], [], "-partial_chain"),
 230    "fail last-resort direct leaf non-match");
 231 ok(verify("ee-cert", "sslserver", [qw(ee+serverAuth)], [], "-partial_chain"),
 232    "accept direct match with server trust");
 233 ok(!verify("ee-cert", "sslserver", [qw(ee-serverAuth)], [], "-partial_chain"),
 234    "fail direct match with server mistrust");
 235 ok(verify("ee-client", "sslclient", [qw(ee+clientAuth)], [], "-partial_chain"),
 236    "accept direct match with client trust");
 237 ok(!verify("ee-client", "sslclient", [qw(ee-clientAuth)], [], "-partial_chain"),
 238    "reject direct match with client mistrust");
 239 ok(verify("ee-pathlen", "sslserver", [qw(root-cert)], [qw(ca-cert)]),
 240    "accept non-ca with pathlen:0 by default");
 241 ok(!verify("ee-pathlen", "sslserver", [qw(root-cert)], [qw(ca-cert)], "-x509_strict"),
 242    "reject non-ca with pathlen:0 with strict flag");
 243
 244 # Proxy certificates
 245 ok(!verify("pc1-cert", "sslclient", [qw(root-cert)], [qw(ee-client ca-cert)]),
 246    "fail to accept proxy cert without -allow_proxy_certs");
 247 ok(verify("pc1-cert", "sslclient", [qw(root-cert)], [qw(ee-client ca-cert)],
 248           "-allow_proxy_certs"),
 249    "accept proxy cert 1");
 250 ok(verify("pc2-cert", "sslclient", [qw(root-cert)], [qw(pc1-cert ee-client ca-cert)],
 251           "-allow_proxy_certs"),
 252    "accept proxy cert 2");
 253 ok(!verify("bad-pc3-cert", "sslclient", [qw(root-cert)], [qw(pc1-cert ee-client ca-cert)],
 254           "-allow_proxy_certs"),
 255    "fail proxy cert with incorrect subject");
 256 ok(!verify("bad-pc4-cert", "sslclient", [qw(root-cert)], [qw(pc1-cert ee-client ca-cert)],
 257           "-allow_proxy_certs"),
 258    "fail proxy cert with incorrect pathlen");
 259 ok(verify("pc5-cert", "sslclient", [qw(root-cert)], [qw(pc1-cert ee-client ca-cert)],
 260           "-allow_proxy_certs"),
 261    "accept proxy cert missing proxy policy");
 262 ok(!verify("pc6-cert", "sslclient", [qw(root-cert)], [qw(pc1-cert ee-client ca-cert)],
 263           "-allow_proxy_certs"),
 264    "failed proxy cert where last CN was added as a multivalue RDN component");
 265
 266 # Security level tests
 267 ok(verify("ee-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "2"),
 268    "accept RSA 2048 chain at auth level 2");
 269 ok(!verify("ee-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "3"),
 270    "reject RSA 2048 root at auth level 3");
 271 ok(verify("ee-cert", "", ["root-cert-768"], ["ca-cert-768i"], "-auth_level", "0"),
 272    "accept RSA 768 root at auth level 0");
 273 ok(!verify("ee-cert", "", ["root-cert-768"], ["ca-cert-768i"]),
 274    "reject RSA 768 root at auth level 1");
 275 ok(verify("ee-cert-768i", "", ["root-cert"], ["ca-cert-768"], "-auth_level", "0"),
 276    "accept RSA 768 intermediate at auth level 0");
 277 ok(!verify("ee-cert-768i", "", ["root-cert"], ["ca-cert-768"]),
 278    "reject RSA 768 intermediate at auth level 1");
 279 ok(verify("ee-cert-768", "", ["root-cert"], ["ca-cert"], "-auth_level", "0"),
 280    "accept RSA 768 leaf at auth level 0");
 281 ok(!verify("ee-cert-768", "", ["root-cert"], ["ca-cert"]),
 282    "reject RSA 768 leaf at auth level 1");
 283 #
 284 ok(verify("ee-cert", "", ["root-cert-md5"], ["ca-cert"], "-auth_level", "2"),
 285    "accept md5 self-signed TA at auth level 2");
 286 ok(verify("ee-cert", "", ["ca-cert-md5-any"], [], "-auth_level", "2"),
 287    "accept md5 intermediate TA at auth level 2");
 288 ok(verify("ee-cert", "", ["root-cert"], ["ca-cert-md5"], "-auth_level", "0"),
 289    "accept md5 intermediate at auth level 0");
 290 ok(!verify("ee-cert", "", ["root-cert"], ["ca-cert-md5"]),
 291    "reject md5 intermediate at auth level 1");
 292 ok(verify("ee-cert-md5", "", ["root-cert"], ["ca-cert"], "-auth_level", "0"),
 293    "accept md5 leaf at auth level 0");
 294 ok(!verify("ee-cert-md5", "", ["root-cert"], ["ca-cert"]),
 295    "reject md5 leaf at auth level 1");
 296
 297 # Explicit vs named curve tests
 298 SKIP: {
 299     skip "EC is not supported by this OpenSSL build", 3
 300         if disabled("ec");
 301     ok(!verify("ee-cert-ec-explicit", "", ["root-cert"],
 302                ["ca-cert-ec-named"]),
 303         "reject explicit curve leaf with named curve intermediate");
 304     ok(!verify("ee-cert-ec-named-explicit", "", ["root-cert"],
 305                ["ca-cert-ec-explicit"]),
 306         "reject named curve leaf with explicit curve intermediate");
 307     ok(verify("ee-cert-ec-named-named", "", ["root-cert"],
 308               ["ca-cert-ec-named"]),
 309         "accept named curve leaf with named curve intermediate");
 310 }
 311
 312 # Depth tests, note the depth limit bounds the number of CA certificates
 313 # between the trust-anchor and the leaf, so, for example, with a root->ca->leaf
 314 # chain, depth = 1 is sufficient, but depth == 0 is not.
 315 #
 316 ok(verify("ee-cert", "", ["root-cert"], ["ca-cert"], "-verify_depth", "2"),
 317    "accept chain with verify_depth 2");
 318 ok(verify("ee-cert", "", ["root-cert"], ["ca-cert"], "-verify_depth", "1"),
 319    "accept chain with verify_depth 1");
 320 ok(!verify("ee-cert", "", ["root-cert"], ["ca-cert"], "-verify_depth", "0"),
 321    "reject chain with verify_depth 0");
 322 ok(verify("ee-cert", "", ["ca-cert-md5-any"], [], "-verify_depth", "0"),
 323    "accept md5 intermediate TA with verify_depth 0");
 324
 325 # Name Constraints tests.
 326
 327 ok(verify("alt1-cert", "", ["root-cert"], ["ncca1-cert"], ),
 328    "Name Constraints everything permitted");
 329
 330 ok(verify("alt2-cert", "", ["root-cert"], ["ncca2-cert"], ),
 331    "Name Constraints nothing excluded");
 332
 333 ok(verify("alt3-cert", "", ["root-cert"], ["ncca1-cert", "ncca3-cert"], ),
 334    "Name Constraints nested test all permitted");
 335
 336 ok(verify("goodcn1-cert", "", ["root-cert"], ["ncca1-cert"], ),
 337    "Name Constraints CNs permitted");
 338
 339 ok(!verify("badcn1-cert", "", ["root-cert"], ["ncca1-cert"], ),
 340    "Name Constraints CNs not permitted");
 341
 342 ok(!verify("badalt1-cert", "", ["root-cert"], ["ncca1-cert"], ),
 343    "Name Constraints hostname not permitted");
 344
 345 ok(!verify("badalt2-cert", "", ["root-cert"], ["ncca2-cert"], ),
 346    "Name Constraints hostname excluded");
 347
 348 ok(!verify("badalt3-cert", "", ["root-cert"], ["ncca1-cert"], ),
 349    "Name Constraints email address not permitted");
 350
 351 ok(!verify("badalt4-cert", "", ["root-cert"], ["ncca1-cert"], ),
 352    "Name Constraints subject email address not permitted");
 353
 354 ok(!verify("badalt5-cert", "", ["root-cert"], ["ncca1-cert"], ),
 355    "Name Constraints IP address not permitted");
 356
 357 ok(!verify("badalt6-cert", "", ["root-cert"], ["ncca1-cert"], ),
 358    "Name Constraints CN hostname not permitted");
 359
 360 ok(!verify("badalt7-cert", "", ["root-cert"], ["ncca1-cert"], ),
 361    "Name Constraints CN BMPSTRING hostname not permitted");
 362
 363 ok(!verify("badalt8-cert", "", ["root-cert"], ["ncca1-cert", "ncca3-cert"], ),
 364    "Name constraints nested DNS name not permitted 1");
 365
 366 ok(!verify("badalt9-cert", "", ["root-cert"], ["ncca1-cert", "ncca3-cert"], ),
 367    "Name constraints nested DNS name not permitted 2");
 368
 369 ok(!verify("badalt10-cert", "", ["root-cert"], ["ncca1-cert", "ncca3-cert"], ),
 370    "Name constraints nested DNS name excluded");
 371
 372 #Check that we get the expected failure return code
 373 with({ exit_checker => sub { return shift == 2; } },
 374      sub {
 375          ok(verify("bad-othername-namec", "", ["bad-othername-namec-inter"], [],
 376                    "-partial_chain", "-attime", "1623060000"),
 377             "Name constraints bad othername name constraint");
 378      });
 379
 380 ok(verify("ee-pss-sha1-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "0"),
 381     "Accept PSS signature using SHA1 at auth level 0");
 382
 383 ok(verify("ee-pss-sha256-cert", "", ["root-cert"], ["ca-cert"], ),
 384     "CA with PSS signature using SHA256");
 385
 386 ok(!verify("ee-pss-sha1-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "1"),
 387     "Reject PSS signature using SHA1 and auth level 1");
 388
 389 ok(verify("ee-pss-sha256-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "2"),
 390     "PSS signature using SHA256 and auth level 2");
 391
 392 ok(verify("ee-pss-cert", "", ["root-cert"], ["ca-pss-cert"], ),
 393     "CA PSS signature");
 394 ok(!verify("ee-pss-wrong1.5-cert", "", ["root-cert"], ["ca-pss-cert"], ),
 395     "CA producing regular PKCS#1 v1.5 signature with PSA-PSS key");
 396
 397 ok(!verify("many-names1", "", ["many-constraints"], ["many-constraints"], ),
 398     "Too many names and constraints to check (1)");
 399 ok(!verify("many-names2", "", ["many-constraints"], ["many-constraints"], ),
 400     "Too many names and constraints to check (2)");
 401 ok(!verify("many-names3", "", ["many-constraints"], ["many-constraints"], ),
 402     "Too many names and constraints to check (3)");
 403
 404 ok(verify("some-names1", "", ["many-constraints"], ["many-constraints"], ),
 405     "Not too many names and constraints to check (1)");
 406 ok(verify("some-names2", "", ["many-constraints"], ["many-constraints"], ),
 407     "Not too many names and constraints to check (2)");
 408 ok(verify("some-names2", "", ["many-constraints"], ["many-constraints"], ),
 409     "Not too many names and constraints to check (3)");
 410 ok(verify("root-cert-rsa2", "", ["root-cert-rsa2"], [], "-check_ss_sig"),
 411     "Public Key Algorithm rsa instead of rsaEncryption");
 412
 413 ok(verify("ee-self-signed", "", ["ee-self-signed"], [], "-attime", "1593565200"),
 414    "accept trusted self-signed EE cert excluding key usage keyCertSign");
 415 ok(verify("ee-ss-with-keyCertSign", "", ["ee-ss-with-keyCertSign"], []),
 416    "accept trusted self-signed EE cert with key usage keyCertSign also when strict");
 417
 418 SKIP: {
 419     skip "Ed25519 is not supported by this OpenSSL build", 6
 420         if disabled("ec");
 421
 422     # ED25519 certificate from draft-ietf-curdle-pkix-04
 423     ok(verify("ee-ed25519", "", ["root-ed25519"], []),
 424        "accept X25519 EE cert issued by trusted Ed25519 self-signed CA cert");
 425
 426     ok(!verify("ee-ed25519", "", ["root-ed25519"], [], "-x509_strict"),
 427        "reject X25519 EE cert in strict mode since AKID is missing");
 428
 429     ok(!verify("root-ed25519", "", ["ee-ed25519"], []),
 430        "fail Ed25519 CA and EE certs swapped");
 431
 432     ok(verify("root-ed25519", "", ["root-ed25519"], []),
 433        "accept trusted Ed25519 self-signed CA cert");
 434
 435     ok(!verify("ee-ed25519", "", ["ee-ed25519"], []),
 436        "fail trusted Ed25519-signed self-issued X25519 cert");
 437
 438     ok(verify("ee-ed25519", "", ["ee-ed25519"], [], "-partial_chain"),
 439        "accept last-resort direct leaf match Ed25519-signed self-issued cert");
 440
 441 }
 442
 443 SKIP: {
 444     skip "SM2 is not supported by this OpenSSL build", 2 if disabled("sm2");
 445
 446    ok_nofips(verify("sm2", "", ["sm2-ca-cert"], [], "-vfyopt", "distid:1234567812345678"),
 447        "SM2 ID test");
 448    ok_nofips(verify("sm2", "", ["sm2-ca-cert"], [], "-vfyopt", "hexdistid:31323334353637383132333435363738"),
 449        "SM2 hex ID test");
 450 }