2 * Copyright 2021-2023 The OpenSSL Project Authors. All Rights Reserved.
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
10 #include <openssl/objects.h>
11 #include <openssl/crypto.h>
12 #include <openssl/provider.h>
15 static const OSSL_ALGORITHM
*obj_query(void *provctx
, int operation_id
,
22 static const OSSL_DISPATCH obj_dispatch_table
[] = {
23 { OSSL_FUNC_PROVIDER_QUERY_OPERATION
, (void (*)(void))obj_query
},
27 static OSSL_FUNC_core_obj_add_sigid_fn
*c_obj_add_sigid
= NULL
;
28 static OSSL_FUNC_core_obj_create_fn
*c_obj_create
= NULL
;
30 /* test signature ids requiring digest */
31 #define SIG_OID "1.3.6.1.4.1.16604.998877.1"
32 #define SIG_SN "my-sig"
33 #define SIG_LN "my-sig-long"
34 #define DIGEST_OID "1.3.6.1.4.1.16604.998877.2"
35 #define DIGEST_SN "my-digest"
36 #define DIGEST_LN "my-digest-long"
37 #define SIGALG_OID "1.3.6.1.4.1.16604.998877.3"
38 #define SIGALG_SN "my-sigalg"
39 #define SIGALG_LN "my-sigalg-long"
41 /* test signature ids requiring no digest */
42 #define NODIG_SIG_OID "1.3.6.1.4.1.16604.998877.4"
43 #define NODIG_SIG_SN "my-nodig-sig"
44 #define NODIG_SIG_LN "my-nodig-sig-long"
45 #define NODIG_SIGALG_OID "1.3.6.1.4.1.16604.998877.5"
46 #define NODIG_SIGALG_SN "my-nodig-sigalg"
47 #define NODIG_SIGALG_LN "my-nodig-sigalg-long"
49 static int obj_provider_init(const OSSL_CORE_HANDLE
*handle
,
50 const OSSL_DISPATCH
*in
,
51 const OSSL_DISPATCH
**out
,
54 *provctx
= (void *)handle
;
55 *out
= obj_dispatch_table
;
57 for (; in
->function_id
!= 0; in
++) {
58 switch (in
->function_id
) {
59 case OSSL_FUNC_CORE_OBJ_ADD_SIGID
:
60 c_obj_add_sigid
= OSSL_FUNC_core_obj_add_sigid(in
);
62 case OSSL_FUNC_CORE_OBJ_CREATE
:
63 c_obj_create
= OSSL_FUNC_core_obj_create(in
);
67 /* Just ignore anything we don't understand */
72 if (!c_obj_create(handle
, DIGEST_OID
, DIGEST_SN
, DIGEST_LN
)
73 || !c_obj_create(handle
, SIG_OID
, SIG_SN
, SIG_LN
)
74 || !c_obj_create(handle
, SIGALG_OID
, SIGALG_SN
, SIGALG_LN
))
77 if (!c_obj_create(handle
, NODIG_SIG_OID
, NODIG_SIG_SN
, NODIG_SIG_LN
)
78 || !c_obj_create(handle
, NODIG_SIGALG_OID
, NODIG_SIGALG_SN
, NODIG_SIGALG_LN
))
81 if (!c_obj_add_sigid(handle
, SIGALG_OID
, DIGEST_SN
, SIG_LN
))
84 /* additional tests checking empty digest algs are accepted, too */
85 if (!c_obj_add_sigid(handle
, NODIG_SIGALG_OID
, "", NODIG_SIG_LN
))
87 /* checking wrong digest alg name is rejected: */
88 if (c_obj_add_sigid(handle
, NODIG_SIGALG_OID
, "NonsenseAlg", NODIG_SIG_LN
))
94 static int obj_create_test(void)
96 OSSL_LIB_CTX
*libctx
= OSSL_LIB_CTX_new();
97 OSSL_PROVIDER
*objprov
= NULL
;
98 int sigalgnid
, digestnid
, signid
, foundsid
;
101 if (!TEST_ptr(libctx
))
104 if (!TEST_true(OSSL_PROVIDER_add_builtin(libctx
, "obj-prov",
106 || !TEST_ptr(objprov
= OSSL_PROVIDER_load(libctx
, "obj-prov")))
109 /* Check that the provider created the OIDs/NIDs we expected */
110 sigalgnid
= OBJ_txt2nid(SIGALG_OID
);
111 if (!TEST_int_ne(sigalgnid
, NID_undef
)
112 || !TEST_true(OBJ_find_sigid_algs(sigalgnid
, &digestnid
, &signid
))
113 || !TEST_int_ne(digestnid
, NID_undef
)
114 || !TEST_int_ne(signid
, NID_undef
)
115 || !TEST_int_eq(digestnid
, OBJ_sn2nid(DIGEST_SN
))
116 || !TEST_int_eq(signid
, OBJ_ln2nid(SIG_LN
)))
119 /* Check empty digest alg storage capability */
120 sigalgnid
= OBJ_txt2nid(NODIG_SIGALG_OID
);
121 if (!TEST_int_ne(sigalgnid
, NID_undef
)
122 || !TEST_true(OBJ_find_sigid_algs(sigalgnid
, &digestnid
, &signid
))
123 || !TEST_int_eq(digestnid
, NID_undef
)
124 || !TEST_int_ne(signid
, NID_undef
))
127 /* Testing OBJ_find_sigid_by_algs */
128 /* First check exact sig/digest recall: */
129 sigalgnid
= OBJ_sn2nid(SIGALG_SN
);
130 digestnid
= OBJ_sn2nid(DIGEST_SN
);
131 signid
= OBJ_ln2nid(SIG_LN
);
132 if ((!OBJ_find_sigid_by_algs(&foundsid
, digestnid
, signid
)) ||
133 (foundsid
!= sigalgnid
))
135 /* Check wrong signature/digest combination is rejected */
136 if ((OBJ_find_sigid_by_algs(&foundsid
, OBJ_sn2nid("SHA512"), signid
)) &&
137 (foundsid
== sigalgnid
))
139 /* Now also check signature not needing digest is found */
140 /* a) when some digest is given */
141 sigalgnid
= OBJ_sn2nid(NODIG_SIGALG_SN
);
142 digestnid
= OBJ_sn2nid("SHA512");
143 signid
= OBJ_ln2nid(NODIG_SIG_LN
);
144 if ((!OBJ_find_sigid_by_algs(&foundsid
, digestnid
, signid
)) ||
145 (foundsid
!= sigalgnid
))
147 /* b) when NID_undef is passed */
148 digestnid
= NID_undef
;
149 if ((!OBJ_find_sigid_by_algs(&foundsid
, digestnid
, signid
)) ||
150 (foundsid
!= sigalgnid
))
155 OSSL_PROVIDER_unload(objprov
);
156 OSSL_LIB_CTX_free(libctx
);
160 int setup_tests(void)
163 ADD_TEST(obj_create_test
);