]>
git.ipfire.org Git - thirdparty/openssl.git/blob - test/recipes/20-test_pkeyutl.t
2d9aae29cdc658acc7c6e8bb7f6de11c83344942
2 # Copyright 2018 The OpenSSL Project Authors. All Rights Reserved.
4 # Licensed under the Apache License 2.0 (the "License"). You may not use
5 # this file except in compliance with the License. You can obtain a copy
6 # in the file LICENSE in the source distribution or at
7 # https://www.openssl.org/source/license.html
14 use OpenSSL
::Test qw
/:DEFAULT srctop_file ok_nofips/;
15 use OpenSSL
::Test
::Utils
;
17 setup
("test_pkeyutl");
21 # For the tests below we use the cert itself as the TBS file
24 skip
"Skipping tests that require EC, SM2 or SM3", 2
25 if disabled
("ec") || disabled
("sm2") || disabled
("sm3");
28 ok_nofips
(run
(app
(([ 'openssl', 'pkeyutl', '-sign',
29 '-in', srctop_file
('test', 'certs', 'sm2.pem'),
30 '-inkey', srctop_file
('test', 'certs', 'sm2.key'),
31 '-out', 'sm2.sig', '-rawin',
32 '-digest', 'sm3', '-pkeyopt', 'distid:someid']))),
33 "Sign a piece of data using SM2");
34 ok_nofips
(run
(app
(([ 'openssl', 'pkeyutl', '-verify', '-certin',
35 '-in', srctop_file
('test', 'certs', 'sm2.pem'),
36 '-inkey', srctop_file
('test', 'certs', 'sm2.pem'),
37 '-sigfile', 'sm2.sig', '-rawin',
38 '-digest', 'sm3', '-pkeyopt', 'distid:someid']))),
39 "Verify an SM2 signature against a piece of data");
43 skip
"Skipping tests that require EC", 4
47 ok
(run
(app
(([ 'openssl', 'pkeyutl', '-sign', '-in',
48 srctop_file
('test', 'certs', 'server-ed25519-cert.pem'),
49 '-inkey', srctop_file
('test', 'certs', 'server-ed25519-key.pem'),
50 '-out', 'Ed25519.sig', '-rawin']))),
51 "Sign a piece of data using Ed25519");
52 ok
(run
(app
(([ 'openssl', 'pkeyutl', '-verify', '-certin', '-in',
53 srctop_file
('test', 'certs', 'server-ed25519-cert.pem'),
54 '-inkey', srctop_file
('test', 'certs', 'server-ed25519-cert.pem'),
55 '-sigfile', 'Ed25519.sig', '-rawin']))),
56 "Verify an Ed25519 signature against a piece of data");
59 ok
(run
(app
(([ 'openssl', 'pkeyutl', '-sign', '-in',
60 srctop_file
('test', 'certs', 'server-ed448-cert.pem'),
61 '-inkey', srctop_file
('test', 'certs', 'server-ed448-key.pem'),
62 '-out', 'Ed448.sig', '-rawin']))),
63 "Sign a piece of data using Ed448");
64 ok
(run
(app
(([ 'openssl', 'pkeyutl', '-verify', '-certin', '-in',
65 srctop_file
('test', 'certs', 'server-ed448-cert.pem'),
66 '-inkey', srctop_file
('test', 'certs', 'server-ed448-cert.pem'),
67 '-sigfile', 'Ed448.sig', '-rawin']))),
68 "Verify an Ed448 signature against a piece of data");
77 my $data_to_sign = srctop_file
('test', 'README');
78 my $other_data = srctop_file
('test', 'README.external');
79 my $sigfile = basename
($privkey, '.pem') . '.sig';
84 @args = ('openssl', 'pkeyutl', '-sign',
87 '-in', $data_to_sign);
88 push(@args, @extraopts);
90 $testtext.": Generating signature");
92 @args = ('openssl', 'pkeyutl', '-verify',
95 '-in', $data_to_sign);
96 push(@args, @extraopts);
98 $testtext.": Verify signature with private key");
100 @args = ('openssl', 'pkeyutl', '-verify',
101 '-inkey', $pubkey, '-pubin',
102 '-sigfile', $sigfile,
103 '-in', $data_to_sign);
104 push(@args, @extraopts);
105 ok
(run
(app
([@args])),
106 $testtext.": Verify signature with public key");
108 @args = ('openssl', 'pkeyutl', '-verify',
109 '-inkey', $pubkey, '-pubin',
110 '-sigfile', $sigfile,
112 push(@args, @extraopts);
113 ok
(!run
(app
([@args])),
114 $testtext.": Expect failure verifying mismatching data");
118 skip
"RSA is not supported by this OpenSSL build", 1
121 subtest
"RSA CLI signature generation and verification" => sub {
123 srctop_file
("test","testrsa.pem"),
124 srctop_file
("test","testrsapub.pem"),
125 "-rawin", "-digest", "sha256");
130 skip
"DSA is not supported by this OpenSSL build", 1
133 subtest
"DSA CLI signature generation and verification" => sub {
135 srctop_file
("test","testdsa.pem"),
136 srctop_file
("test","testdsapub.pem"),
137 "-rawin", "-digest", "sha256");
142 skip
"ECDSA is not supported by this OpenSSL build", 1
145 subtest
"ECDSA CLI signature generation and verification" => sub {
147 srctop_file
("test","testec-p256.pem"),
148 srctop_file
("test","testecpub-p256.pem"),
149 "-rawin", "-digest", "sha256");
154 skip
"EdDSA is not supported by this OpenSSL build", 2
157 subtest
"Ed2559 CLI signature generation and verification" => sub {
158 tsignverify
("Ed25519",
159 srctop_file
("test","tested25519.pem"),
160 srctop_file
("test","tested25519pub.pem"),
164 subtest
"Ed448 CLI signature generation and verification" => sub {
166 srctop_file
("test","tested448.pem"),
167 srctop_file
("test","tested448pub.pem"),