test/recipes/90-test_sslapi.t

   1 #! /usr/bin/env perl
   2 # Copyright 2016-2020 The OpenSSL Project Authors. All Rights Reserved.
   3 #
   4 # Licensed under the Apache License 2.0 (the "License").  You may not use
   5 # this file except in compliance with the License.  You can obtain a copy
   6 # in the file LICENSE in the source distribution or at
   7 # https://www.openssl.org/source/license.html
   8
   9
  10 use OpenSSL::Test::Utils;
  11 use OpenSSL::Test qw/:DEFAULT srctop_file srctop_dir bldtop_dir bldtop_file/;
  12 use File::Temp qw(tempfile);
  13
  14 BEGIN {
  15 setup("test_sslapi");
  16 }
  17
  18 use lib srctop_dir('Configurations');
  19 use lib bldtop_dir('.');
  20 use platform;
  21
  22 my $no_fips = disabled('fips') || ($ENV{NO_FIPS} // 0);
  23
  24 plan skip_all => "No TLS/SSL protocols are supported by this OpenSSL build"
  25     if alldisabled(grep { $_ ne "ssl3" } available_protocols("tls"));
  26
  27 plan tests =>
  28     ($no_fips ? 0 : 2)          # FIPS install test + sslapitest with fips
  29     + 1;                        # sslapitest with default provider
  30
  31 (undef, my $tmpfilename) = tempfile();
  32
  33 ok(run(test(["sslapitest", srctop_dir("test", "certs"),
  34              srctop_file("test", "recipes", "90-test_sslapi_data",
  35                          "passwd.txt"), $tmpfilename, "default",
  36              srctop_file("test", "default.cnf")])),
  37              "running sslapitest");
  38
  39 unless ($no_fips) {
  40     ok(run(app(['openssl', 'fipsinstall',
  41                 '-out', bldtop_file('providers', 'fipsmodule.cnf'),
  42                 '-module', bldtop_file('providers', platform->dso('fips')),
  43                 '-provider_name', 'fips', '-mac_name', 'HMAC',
  44                 '-macopt', 'digest:SHA256', '-macopt', 'hexkey:00',
  45                 '-section_name', 'fips_sect'])),
  46        "fipsinstall");
  47
  48     ok(run(test(["sslapitest", srctop_dir("test", "certs"),
  49                  srctop_file("test", "recipes", "90-test_sslapi_data",
  50                              "passwd.txt"), $tmpfilename, "fips",
  51                  srctop_file("test", "fips.cnf")])),
  52                  "running sslapitest");
  53 }
  54
  55 unlink $tmpfilename;