]>
Commit | Line | Data |
---|---|---|
fde2257f | 1 | /* |
fd38836b | 2 | * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved. |
fde2257f | 3 | * |
909f1a2e | 4 | * Licensed under the Apache License 2.0 (the "License"); |
fde2257f VD |
5 | * you may not use this file except in compliance with the License. |
6 | * You may obtain a copy of the License at | |
7 | * https://www.openssl.org/source/license.html | |
8 | * or in the file LICENSE in the source distribution. | |
9 | */ | |
10 | ||
11 | #include <stdio.h> | |
12 | #include <string.h> | |
13 | #include <errno.h> | |
14 | ||
15 | #include <openssl/x509.h> | |
16 | #include <openssl/pem.h> | |
17 | #include <openssl/conf.h> | |
18 | #include <openssl/err.h> | |
176db6dc | 19 | #include "internal/nelem.h" |
e2a29ad6 | 20 | #include "testutil.h" |
fde2257f | 21 | |
f1e793cc | 22 | static int test_certs(int num) |
fde2257f | 23 | { |
4f58c6b9 | 24 | int c; |
fde2257f VD |
25 | char *name = 0; |
26 | char *header = 0; | |
27 | unsigned char *data = 0; | |
28 | long len; | |
29 | typedef X509 *(*d2i_X509_t)(X509 **, const unsigned char **, long); | |
9fdcc21f | 30 | typedef int (*i2d_X509_t)(const X509 *, unsigned char **); |
fde2257f | 31 | int err = 0; |
ad887416 | 32 | BIO *fp = BIO_new_file(test_get_argument(num), "r"); |
53649022 | 33 | X509 *reuse = NULL; |
f1e793cc RS |
34 | |
35 | if (!TEST_ptr(fp)) | |
36 | return 0; | |
fde2257f | 37 | |
4f58c6b9 P |
38 | for (c = 0; !err && PEM_read_bio(fp, &name, &header, &data, &len); ++c) { |
39 | const int trusted = (strcmp(name, PEM_STRING_X509_TRUSTED) == 0); | |
40 | ||
fde2257f VD |
41 | d2i_X509_t d2i = trusted ? d2i_X509_AUX : d2i_X509; |
42 | i2d_X509_t i2d = trusted ? i2d_X509_AUX : i2d_X509; | |
43 | X509 *cert = NULL; | |
8fe3127c | 44 | const unsigned char *p = data; |
fde2257f VD |
45 | unsigned char *buf = NULL; |
46 | unsigned char *bufp; | |
47 | long enclen; | |
48 | ||
8fe3127c | 49 | if (!trusted |
fde2257f | 50 | && strcmp(name, PEM_STRING_X509) != 0 |
8fe3127c P |
51 | && strcmp(name, PEM_STRING_X509_OLD) != 0) { |
52 | TEST_error("unexpected PEM object: %s", name); | |
fde2257f | 53 | err = 1; |
8fe3127c | 54 | goto next; |
fde2257f VD |
55 | } |
56 | cert = d2i(NULL, &p, len); | |
57 | ||
58 | if (cert == NULL || (p - data) != len) { | |
8fe3127c | 59 | TEST_error("error parsing input %s", name); |
fde2257f VD |
60 | err = 1; |
61 | goto next; | |
62 | } | |
63 | ||
64 | /* Test traditional 2-pass encoding into caller allocated buffer */ | |
65 | enclen = i2d(cert, NULL); | |
66 | if (len != enclen) { | |
8fe3127c P |
67 | TEST_error("encoded length %ld of %s != input length %ld", |
68 | enclen, name, len); | |
fde2257f VD |
69 | err = 1; |
70 | goto next; | |
71 | } | |
72 | if ((buf = bufp = OPENSSL_malloc(len)) == NULL) { | |
8fe3127c | 73 | TEST_perror("malloc"); |
fde2257f VD |
74 | err = 1; |
75 | goto next; | |
76 | } | |
77 | enclen = i2d(cert, &bufp); | |
78 | if (len != enclen) { | |
8fe3127c P |
79 | TEST_error("encoded length %ld of %s != input length %ld", |
80 | enclen, name, len); | |
fde2257f VD |
81 | err = 1; |
82 | goto next; | |
83 | } | |
84 | enclen = (long) (bufp - buf); | |
85 | if (enclen != len) { | |
8fe3127c | 86 | TEST_error("unexpected buffer position after encoding %s", name); |
fde2257f VD |
87 | err = 1; |
88 | goto next; | |
89 | } | |
90 | if (memcmp(buf, data, len) != 0) { | |
8fe3127c | 91 | TEST_error("encoded content of %s does not match input", name); |
fde2257f VD |
92 | err = 1; |
93 | goto next; | |
94 | } | |
53649022 BE |
95 | p = buf; |
96 | reuse = d2i(&reuse, &p, enclen); | |
97 | if (reuse == NULL || X509_cmp (reuse, cert)) { | |
98 | TEST_error("X509_cmp does not work with %s", name); | |
99 | err = 1; | |
100 | goto next; | |
101 | } | |
fde2257f VD |
102 | OPENSSL_free(buf); |
103 | buf = NULL; | |
104 | ||
105 | /* Test 1-pass encoding into library allocated buffer */ | |
106 | enclen = i2d(cert, &buf); | |
107 | if (len != enclen) { | |
8fe3127c P |
108 | TEST_error("encoded length %ld of %s != input length %ld", |
109 | enclen, name, len); | |
fde2257f VD |
110 | err = 1; |
111 | goto next; | |
112 | } | |
113 | if (memcmp(buf, data, len) != 0) { | |
8fe3127c | 114 | TEST_error("encoded content of %s does not match input", name); |
fde2257f VD |
115 | err = 1; |
116 | goto next; | |
117 | } | |
118 | ||
119 | if (trusted) { | |
120 | /* Encode just the cert and compare with initial encoding */ | |
121 | OPENSSL_free(buf); | |
122 | buf = NULL; | |
123 | ||
124 | /* Test 1-pass encoding into library allocated buffer */ | |
125 | enclen = i2d(cert, &buf); | |
126 | if (enclen > len) { | |
8fe3127c P |
127 | TEST_error("encoded length %ld of %s > input length %ld", |
128 | enclen, name, len); | |
fde2257f VD |
129 | err = 1; |
130 | goto next; | |
131 | } | |
132 | if (memcmp(buf, data, enclen) != 0) { | |
8fe3127c | 133 | TEST_error("encoded cert content does not match input"); |
fde2257f VD |
134 | err = 1; |
135 | goto next; | |
136 | } | |
137 | } | |
138 | ||
8fe3127c P |
139 | /* |
140 | * If any of these were null, PEM_read() would have failed. | |
141 | */ | |
fde2257f VD |
142 | next: |
143 | X509_free(cert); | |
144 | OPENSSL_free(buf); | |
8fe3127c P |
145 | OPENSSL_free(name); |
146 | OPENSSL_free(header); | |
147 | OPENSSL_free(data); | |
fde2257f | 148 | } |
f1e793cc | 149 | BIO_free(fp); |
53649022 | 150 | X509_free(reuse); |
fde2257f VD |
151 | |
152 | if (ERR_GET_REASON(ERR_peek_last_error()) == PEM_R_NO_START_LINE) { | |
153 | /* Reached end of PEM file */ | |
4f58c6b9 | 154 | if (c > 0) { |
fde2257f VD |
155 | ERR_clear_error(); |
156 | return 1; | |
157 | } | |
158 | } | |
159 | ||
160 | /* Some other PEM read error */ | |
fde2257f VD |
161 | return 0; |
162 | } | |
163 | ||
a43ce58f SL |
164 | OPT_TEST_DECLARE_USAGE("certfile...\n") |
165 | ||
ad887416 | 166 | int setup_tests(void) |
fde2257f | 167 | { |
ad887416 | 168 | size_t n = test_get_argument_count(); |
a43ce58f | 169 | if (n == 0) |
f1e793cc | 170 | return 0; |
f1e793cc | 171 | |
8263e6cb | 172 | ADD_ALL_TESTS(test_certs, (int)n); |
ad887416 | 173 | return 1; |
fde2257f | 174 | } |