]>
Commit | Line | Data |
---|---|---|
596d6b7e | 1 | #! /usr/bin/env perl |
6738bf14 | 2 | # Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved. |
596d6b7e | 3 | # |
909f1a2e | 4 | # Licensed under the Apache License 2.0 (the "License"). You may not use |
596d6b7e RS |
5 | # this file except in compliance with the License. You can obtain a copy |
6 | # in the file LICENSE in the source distribution or at | |
7 | # https://www.openssl.org/source/license.html | |
8 | ||
453dfd8d EK |
9 | |
10 | use strict; | |
11 | use warnings; | |
12 | ||
13 | use File::Basename; | |
14 | use File::Compare qw/compare_text/; | |
8d2214c0 | 15 | use OpenSSL::Glob; |
453dfd8d EK |
16 | use OpenSSL::Test qw/:DEFAULT srctop_dir srctop_file/; |
17 | use OpenSSL::Test::Utils qw/disabled alldisabled available_protocols/; | |
18 | ||
19 | setup("test_ssl_new"); | |
20 | ||
21 | $ENV{TEST_CERTS_DIR} = srctop_dir("test", "certs"); | |
433deaff | 22 | $ENV{CTLOG_FILE} = srctop_file("test", "ct", "log_list.cnf"); |
453dfd8d | 23 | |
433deaff | 24 | my @conf_srcs = glob(srctop_file("test", "ssl-tests", "*.cnf.in")); |
1563102b | 25 | map { s/;.*// } @conf_srcs if $^O eq "VMS"; |
d89f6641 RL |
26 | my @conf_files = map { basename($_, ".in") } @conf_srcs; |
27 | map { s/\^// } @conf_files if $^O eq "VMS"; | |
453dfd8d | 28 | |
f4947bf1 RL |
29 | # We hard-code the number of tests to double-check that the globbing above |
30 | # finds all files as expected. | |
088dfa13 | 31 | plan tests => 30; # = scalar @conf_srcs |
f4947bf1 | 32 | |
3e82ae57 MC |
33 | # Some test results depend on the configuration of enabled protocols. We only |
34 | # verify generated sources in the default configuration. | |
74726750 | 35 | my $is_default_tls = (disabled("ssl3") && !disabled("tls1") && |
84a68336 | 36 | !disabled("tls1_1") && !disabled("tls1_2") && |
f518cef4 | 37 | !disabled("tls1_3")); |
453dfd8d | 38 | |
74726750 EK |
39 | my $is_default_dtls = (!disabled("dtls1") && !disabled("dtls1_2")); |
40 | ||
54d028aa | 41 | my @all_pre_tls1_3 = ("ssl3", "tls1", "tls1_1", "tls1_2"); |
74726750 | 42 | my $no_tls = alldisabled(available_protocols("tls")); |
c423ecaa | 43 | my $no_tls_below1_3 = $no_tls || (disabled("tls1_2") && !disabled("tls1_3")); |
54d028aa | 44 | my $no_pre_tls1_3 = alldisabled(@all_pre_tls1_3); |
74726750 | 45 | my $no_dtls = alldisabled(available_protocols("dtls")); |
ce2cdac2 | 46 | my $no_npn = disabled("nextprotoneg"); |
da085d27 | 47 | my $no_ct = disabled("ct"); |
be82f7b3 | 48 | my $no_ec = disabled("ec"); |
7c98706e RL |
49 | my $no_dh = disabled("dh"); |
50 | my $no_dsa = disabled("dsa"); | |
0a307450 | 51 | my $no_ec2m = disabled("ec2m"); |
057c676a | 52 | my $no_ocsp = disabled("ocsp"); |
74726750 | 53 | |
15269e56 EK |
54 | # Add your test here if the test conf.in generates test cases and/or |
55 | # expectations dynamically based on the OpenSSL compile-time config. | |
74726750 | 56 | my %conf_dependent_tests = ( |
433deaff RS |
57 | "02-protocol-version.cnf" => !$is_default_tls, |
58 | "04-client_auth.cnf" => !$is_default_tls || !$is_default_dtls | |
0f5df0f1 | 59 | || !disabled("sctp"), |
433deaff RS |
60 | "05-sni.cnf" => disabled("tls1_1"), |
61 | "07-dtls-protocol-version.cnf" => !$is_default_dtls || !disabled("sctp"), | |
62 | "10-resumption.cnf" => !$is_default_tls || $no_ec, | |
63 | "11-dtls_resumption.cnf" => !$is_default_dtls || !disabled("sctp"), | |
64 | "16-dtls-certstatus.cnf" => !$is_default_dtls || !disabled("sctp"), | |
65 | "17-renegotiate.cnf" => disabled("tls1_2"), | |
66 | "18-dtls-renegotiate.cnf" => disabled("dtls1_2") || !disabled("sctp"), | |
67 | "19-mac-then-encrypt.cnf" => !$is_default_tls, | |
68 | "20-cert-select.cnf" => !$is_default_tls || $no_dh || $no_dsa, | |
69 | "22-compression.cnf" => !$is_default_tls, | |
70 | "25-cipher.cnf" => disabled("poly1305") || disabled("chacha"), | |
71 | "27-ticket-appdata.cnf" => !$is_default_tls, | |
72 | "28-seclevel.cnf" => disabled("tls1_2") || $no_ec, | |
73 | "30-extended-master-secret.cnf" => disabled("tls1_2"), | |
74726750 EK |
74 | ); |
75 | ||
15269e56 EK |
76 | # Add your test here if it should be skipped for some compile-time |
77 | # configurations. Default is $no_tls but some tests have different skip | |
78 | # conditions. | |
74726750 | 79 | my %skip = ( |
433deaff RS |
80 | "06-sni-ticket.cnf" => $no_tls_below1_3, |
81 | "07-dtls-protocol-version.cnf" => $no_dtls, | |
82 | "08-npn.cnf" => (disabled("tls1") && disabled("tls1_1") | |
0f1e51ea | 83 | && disabled("tls1_2")) || $no_npn, |
433deaff RS |
84 | "10-resumption.cnf" => disabled("tls1_1") || disabled("tls1_2"), |
85 | "11-dtls_resumption.cnf" => disabled("dtls1") || disabled("dtls1_2"), | |
86 | "12-ct.cnf" => $no_tls || $no_ct || $no_ec, | |
6dc99745 EK |
87 | # We could run some of these tests without TLS 1.2 if we had a per-test |
88 | # disable instruction but that's a bizarre configuration not worth | |
89 | # special-casing for. | |
cf72c757 | 90 | # TODO(TLS 1.3): We should review this once we have TLS 1.3. |
433deaff RS |
91 | "13-fragmentation.cnf" => disabled("tls1_2"), |
92 | "14-curves.cnf" => disabled("tls1_2") || $no_ec || $no_ec2m, | |
93 | "15-certstatus.cnf" => $no_tls || $no_ocsp, | |
94 | "16-dtls-certstatus.cnf" => $no_dtls || $no_ocsp, | |
95 | "17-renegotiate.cnf" => $no_tls_below1_3, | |
96 | "18-dtls-renegotiate.cnf" => $no_dtls, | |
97 | "19-mac-then-encrypt.cnf" => $no_pre_tls1_3, | |
98 | "20-cert-select.cnf" => disabled("tls1_2") || $no_ec, | |
99 | "21-key-update.cnf" => disabled("tls1_3"), | |
100 | "22-compression.cnf" => disabled("zlib") || $no_tls, | |
101 | "23-srp.cnf" => (disabled("tls1") && disabled ("tls1_1") | |
ea1ecd98 | 102 | && disabled("tls1_2")) || disabled("srp"), |
433deaff RS |
103 | "24-padding.cnf" => disabled("tls1_3"), |
104 | "25-cipher.cnf" => disabled("ec") || disabled("tls1_2"), | |
105 | "26-tls13_client_auth.cnf" => disabled("tls1_3"), | |
106 | "29-dtls-sctp-label-bug.cnf" => disabled("sctp") || disabled("sock"), | |
74726750 | 107 | ); |
453dfd8d EK |
108 | |
109 | foreach my $conf (@conf_files) { | |
110 | subtest "Test configuration $conf" => sub { | |
578a0004 | 111 | test_conf($conf, |
74726750 | 112 | $conf_dependent_tests{$conf} || $^O eq "VMS" ? 0 : 1, |
f37c159a | 113 | defined($skip{$conf}) ? $skip{$conf} : $no_tls); |
453dfd8d EK |
114 | } |
115 | } | |
116 | ||
453dfd8d EK |
117 | sub test_conf { |
118 | plan tests => 3; | |
119 | ||
74726750 | 120 | my ($conf, $check_source, $skip) = @_; |
453dfd8d EK |
121 | |
122 | my $conf_file = srctop_file("test", "ssl-tests", $conf); | |
a3f3ed65 RL |
123 | my $input_file = $conf_file . ".in"; |
124 | my $output_file = $conf; | |
453dfd8d EK |
125 | my $run_test = 1; |
126 | ||
127 | SKIP: { | |
128 | # "Test" 1. Generate the source. | |
453dfd8d EK |
129 | skip 'failure', 2 unless |
130 | ok(run(perltest(["generate_ssl_tests.pl", $input_file], | |
cb6afcd6 | 131 | interpreter_args => [ "-I", srctop_dir("util", "perl")], |
a3f3ed65 | 132 | stdout => $output_file)), |
453dfd8d EK |
133 | "Getting output from generate_ssl_tests.pl."); |
134 | ||
135 | SKIP: { | |
433deaff | 136 | # Test 2. Compare against existing output in test/ssl_tests.cnf. |
453dfd8d EK |
137 | skip "Skipping generated source test for $conf", 1 |
138 | if !$check_source; | |
139 | ||
a3f3ed65 | 140 | $run_test = is(cmp_text($output_file, $conf_file), 0, |
453dfd8d EK |
141 | "Comparing generated sources."); |
142 | } | |
143 | ||
144 | # Test 3. Run the test. | |
74726750 | 145 | skip "No tests available; skipping tests", 1 if $skip; |
453dfd8d EK |
146 | skip "Stale sources; skipping tests", 1 if !$run_test; |
147 | ||
a3f3ed65 | 148 | ok(run(test(["ssl_test", $output_file])), "running ssl_test $conf"); |
453dfd8d | 149 | } |
453dfd8d EK |
150 | } |
151 | ||
152 | sub cmp_text { | |
153 | return compare_text(@_, sub { | |
154 | $_[0] =~ s/\R//g; | |
155 | $_[1] =~ s/\R//g; | |
156 | return $_[0] ne $_[1]; | |
157 | }); | |
158 | } |