]>
Commit | Line | Data |
---|---|---|
596d6b7e RS |
1 | #! /usr/bin/env perl |
2 | # Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved. | |
3 | # | |
909f1a2e | 4 | # Licensed under the Apache License 2.0 (the "License"). You may not use |
596d6b7e RS |
5 | # this file except in compliance with the License. You can obtain a copy |
6 | # in the file LICENSE in the source distribution or at | |
7 | # https://www.openssl.org/source/license.html | |
8 | ||
88b8a527 RL |
9 | |
10 | use strict; | |
11 | use warnings; | |
12 | ||
13 | use POSIX; | |
e9fd82f6 | 14 | use File::Path 2.00 qw/rmtree/; |
42e0ccdf | 15 | use OpenSSL::Test qw/:DEFAULT cmdstr srctop_file/; |
51f5930a | 16 | use OpenSSL::Test::Utils; |
88b8a527 RL |
17 | |
18 | setup("test_ca"); | |
19 | ||
25c78440 | 20 | $ENV{OPENSSL} = cmdstr(app(["openssl"]), display => 1); |
42e0ccdf RL |
21 | my $std_openssl_cnf = |
22 | srctop_file("apps", $^O eq "VMS" ? "openssl-vms.cnf" : "openssl.cnf"); | |
88b8a527 | 23 | |
e9fd82f6 | 24 | rmtree("demoCA", { safe => 0 }); |
88b8a527 | 25 | |
bc42bd62 | 26 | plan tests => 6; |
88b8a527 | 27 | SKIP: { |
ac1a998d | 28 | $ENV{OPENSSL_CONFIG} = '-config "'.srctop_file("test", "CAss.cnf").'"'; |
a4c5f859 | 29 | skip "failed creating CA structure", 4 |
7d9b2d53 | 30 | if !ok(run(perlapp(["CA.pl","-newca"], stdin => undef)), |
88b8a527 RL |
31 | 'creating CA structure'); |
32 | ||
ac1a998d | 33 | $ENV{OPENSSL_CONFIG} = '-config "'.srctop_file("test", "Uss.cnf").'"'; |
a4c5f859 | 34 | skip "failed creating new certificate request", 3 |
7d9b2d53 | 35 | if !ok(run(perlapp(["CA.pl","-newreq"])), |
32804b04 | 36 | 'creating certificate request'); |
88b8a527 | 37 | |
ffb46830 | 38 | $ENV{OPENSSL_CONFIG} = '-rand_serial -config "'.$std_openssl_cnf.'"'; |
a4c5f859 | 39 | skip "failed to sign certificate request", 2 |
7d9b2d53 | 40 | if !is(yes(cmdstr(perlapp(["CA.pl", "-sign"]))), 0, |
88b8a527 RL |
41 | 'signing certificate request'); |
42 | ||
7d9b2d53 | 43 | ok(run(perlapp(["CA.pl", "-verify", "newcert.pem"])), |
32804b04 | 44 | 'verifying new certificate'); |
caee75d2 | 45 | |
51f5930a RL |
46 | skip "CT not configured, can't use -precert", 1 |
47 | if disabled("ct"); | |
48 | ||
fbf9d108 | 49 | $ENV{OPENSSL_CONFIG} = '-config "'.srctop_file("test", "Uss.cnf").'"'; |
505fb999 | 50 | ok(run(perlapp(["CA.pl", "-precert"], stderr => undef)), |
caee75d2 | 51 | 'creating new pre-certificate'); |
88b8a527 RL |
52 | } |
53 | ||
bc42bd62 PY |
54 | SKIP: { |
55 | skip "SM2 is not supported by this OpenSSL build", 1 | |
56 | if disabled("sm2"); | |
57 | ||
58 | is(yes(cmdstr(app(["openssl", "ca", "-config", | |
59 | srctop_file("test", "CAss.cnf"), | |
60 | "-in", srctop_file("test", "certs", "sm2-csr.pem"), | |
61 | "-out", "sm2-test.crt", | |
fda127be RL |
62 | "-sigopt", "distid:1234567812345678", |
63 | "-vfyopt", "distid:1234567812345678", | |
bc42bd62 PY |
64 | "-md", "sm3", |
65 | "-cert", srctop_file("test", "certs", "sm2-root.crt"), | |
66 | "-keyfile", srctop_file("test", "certs", "sm2-root.key")]))), | |
67 | 0, | |
68 | "Signing SM2 certificate request"); | |
69 | } | |
88b8a527 | 70 | |
88b8a527 | 71 | sub yes { |
4034c38b | 72 | my $cntr = 10; |
88b8a527 RL |
73 | open(PIPE, "|-", join(" ",@_)); |
74 | local $SIG{PIPE} = "IGNORE"; | |
4034c38b | 75 | 1 while $cntr-- > 0 && print PIPE "y\n"; |
88b8a527 RL |
76 | close PIPE; |
77 | return 0; | |
78 | } | |
42e0ccdf | 79 |