]> git.ipfire.org Git - thirdparty/openssl.git/blame - test/recipes/80-test_ssl_new.t
Update copyright year
[thirdparty/openssl.git] / test / recipes / 80-test_ssl_new.t
CommitLineData
596d6b7e 1#! /usr/bin/env perl
6738bf14 2# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
596d6b7e
RS
3#
4# Licensed under the OpenSSL license (the "License"). You may not use
5# this file except in compliance with the License. You can obtain a copy
6# in the file LICENSE in the source distribution or at
7# https://www.openssl.org/source/license.html
8
453dfd8d
EK
9
10use strict;
11use warnings;
12
13use File::Basename;
14use File::Compare qw/compare_text/;
8d2214c0 15use OpenSSL::Glob;
453dfd8d
EK
16use OpenSSL::Test qw/:DEFAULT srctop_dir srctop_file/;
17use OpenSSL::Test::Utils qw/disabled alldisabled available_protocols/;
18
19setup("test_ssl_new");
20
21$ENV{TEST_CERTS_DIR} = srctop_dir("test", "certs");
da085d27 22$ENV{CTLOG_FILE} = srctop_file("test", "ct", "log_list.conf");
453dfd8d 23
97855556 24my @conf_srcs = glob(srctop_file("test", "ssl-tests", "*.conf.in"));
1563102b 25map { s/;.*// } @conf_srcs if $^O eq "VMS";
d89f6641
RL
26my @conf_files = map { basename($_, ".in") } @conf_srcs;
27map { s/\^// } @conf_files if $^O eq "VMS";
453dfd8d 28
f4947bf1
RL
29# We hard-code the number of tests to double-check that the globbing above
30# finds all files as expected.
9d75dce3 31plan tests => 26; # = scalar @conf_srcs
f4947bf1 32
3e82ae57
MC
33# Some test results depend on the configuration of enabled protocols. We only
34# verify generated sources in the default configuration.
74726750 35my $is_default_tls = (disabled("ssl3") && !disabled("tls1") &&
84a68336 36 !disabled("tls1_1") && !disabled("tls1_2") &&
f518cef4 37 !disabled("tls1_3"));
453dfd8d 38
74726750
EK
39my $is_default_dtls = (!disabled("dtls1") && !disabled("dtls1_2"));
40
54d028aa 41my @all_pre_tls1_3 = ("ssl3", "tls1", "tls1_1", "tls1_2");
74726750 42my $no_tls = alldisabled(available_protocols("tls"));
c423ecaa 43my $no_tls_below1_3 = $no_tls || (disabled("tls1_2") && !disabled("tls1_3"));
54d028aa 44my $no_pre_tls1_3 = alldisabled(@all_pre_tls1_3);
74726750 45my $no_dtls = alldisabled(available_protocols("dtls"));
ce2cdac2 46my $no_npn = disabled("nextprotoneg");
da085d27 47my $no_ct = disabled("ct");
be82f7b3 48my $no_ec = disabled("ec");
7c98706e
RL
49my $no_dh = disabled("dh");
50my $no_dsa = disabled("dsa");
0a307450 51my $no_ec2m = disabled("ec2m");
057c676a 52my $no_ocsp = disabled("ocsp");
74726750 53
15269e56
EK
54# Add your test here if the test conf.in generates test cases and/or
55# expectations dynamically based on the OpenSSL compile-time config.
74726750
EK
56my %conf_dependent_tests = (
57 "02-protocol-version.conf" => !$is_default_tls,
0f5df0f1
MC
58 "04-client_auth.conf" => !$is_default_tls || !$is_default_dtls
59 || !disabled("sctp"),
548d0153 60 "05-sni.conf" => disabled("tls1_1"),
00da4f4d 61 "07-dtls-protocol-version.conf" => !$is_default_dtls || !disabled("sctp"),
590ed3d7 62 "10-resumption.conf" => !$is_default_tls,
cf156009 63 "11-dtls_resumption.conf" => !$is_default_dtls || !disabled("sctp"),
83964ca0 64 "16-dtls-certstatus.conf" => !$is_default_dtls || !disabled("sctp"),
4d118fe0 65 "17-renegotiate.conf" => disabled("tls1_2"),
83964ca0 66 "18-dtls-renegotiate.conf" => disabled("dtls1_2") || !disabled("sctp"),
ac6eb152 67 "19-mac-then-encrypt.conf" => !$is_default_tls,
e4a3d0f9 68 "20-cert-select.conf" => !$is_default_tls || $no_dh || $no_dsa,
439db0c9 69 "22-compression.conf" => !$is_default_tls,
a8ea8018 70 "25-cipher.conf" => disabled("poly1305") || disabled("chacha"),
74726750
EK
71);
72
15269e56
EK
73# Add your test here if it should be skipped for some compile-time
74# configurations. Default is $no_tls but some tests have different skip
75# conditions.
74726750 76my %skip = (
c423ecaa 77 "06-sni-ticket.conf" => $no_tls_below1_3,
3e82ae57 78 "07-dtls-protocol-version.conf" => $no_dtls,
0f1e51ea
MC
79 "08-npn.conf" => (disabled("tls1") && disabled("tls1_1")
80 && disabled("tls1_2")) || $no_npn,
80f397e2
MC
81 "10-resumption.conf" => disabled("tls1_1") || disabled("tls1_2"),
82 "11-dtls_resumption.conf" => disabled("dtls1") || disabled("dtls1_2"),
be82f7b3 83 "12-ct.conf" => $no_tls || $no_ct || $no_ec,
6dc99745
EK
84 # We could run some of these tests without TLS 1.2 if we had a per-test
85 # disable instruction but that's a bizarre configuration not worth
86 # special-casing for.
cf72c757 87 # TODO(TLS 1.3): We should review this once we have TLS 1.3.
b1b22b0b 88 "13-fragmentation.conf" => disabled("tls1_2"),
767ccc3b 89 "14-curves.conf" => disabled("tls1_2") || $no_ec || $no_ec2m,
f07d639e 90 "15-certstatus.conf" => $no_tls || $no_ocsp,
057c676a 91 "16-dtls-certstatus.conf" => $no_dtls || $no_ocsp,
c423ecaa 92 "17-renegotiate.conf" => $no_tls_below1_3,
f9b1b664 93 "18-dtls-renegotiate.conf" => $no_dtls,
ac6eb152 94 "19-mac-then-encrypt.conf" => $no_pre_tls1_3,
ea24bb0a 95 "20-cert-select.conf" => disabled("tls1_2") || $no_ec,
9b92f161 96 "21-key-update.conf" => disabled("tls1_3"),
439db0c9 97 "22-compression.conf" => disabled("zlib") || $no_tls,
ea1ecd98
EK
98 "23-srp.conf" => (disabled("tls1") && disabled ("tls1_1")
99 && disabled("tls1_2")) || disabled("srp"),
c649d10d 100 "24-padding.conf" => disabled("tls1_3"),
f5fea665 101 "25-cipher.conf" => disabled("ec") || disabled("tls1_2"),
9d75dce3 102 "26-tls13_client_auth.conf" => disabled("tls1_3"),
74726750 103);
453dfd8d
EK
104
105foreach my $conf (@conf_files) {
106 subtest "Test configuration $conf" => sub {
578a0004 107 test_conf($conf,
74726750 108 $conf_dependent_tests{$conf} || $^O eq "VMS" ? 0 : 1,
f37c159a 109 defined($skip{$conf}) ? $skip{$conf} : $no_tls);
453dfd8d
EK
110 }
111}
112
453dfd8d
EK
113sub test_conf {
114 plan tests => 3;
115
74726750 116 my ($conf, $check_source, $skip) = @_;
453dfd8d
EK
117
118 my $conf_file = srctop_file("test", "ssl-tests", $conf);
119 my $tmp_file = "${conf}.$$.tmp";
120 my $run_test = 1;
121
122 SKIP: {
123 # "Test" 1. Generate the source.
124 my $input_file = $conf_file . ".in";
125
126 skip 'failure', 2 unless
127 ok(run(perltest(["generate_ssl_tests.pl", $input_file],
cb6afcd6 128 interpreter_args => [ "-I", srctop_dir("util", "perl")],
453dfd8d
EK
129 stdout => $tmp_file)),
130 "Getting output from generate_ssl_tests.pl.");
131
132 SKIP: {
133 # Test 2. Compare against existing output in test/ssl_tests.conf.
134 skip "Skipping generated source test for $conf", 1
135 if !$check_source;
136
137 $run_test = is(cmp_text($tmp_file, $conf_file), 0,
138 "Comparing generated sources.");
139 }
140
141 # Test 3. Run the test.
74726750 142 skip "No tests available; skipping tests", 1 if $skip;
453dfd8d
EK
143 skip "Stale sources; skipping tests", 1 if !$run_test;
144
145 ok(run(test(["ssl_test", $tmp_file])), "running ssl_test $conf");
146 }
147
148 unlink glob $tmp_file;
149}
150
151sub cmp_text {
152 return compare_text(@_, sub {
153 $_[0] =~ s/\R//g;
154 $_[1] =~ s/\R//g;
155 return $_[0] ne $_[1];
156 });
157}