From: Stefan Metzmacher <metze@samba.org>
Date: Wed, 14 Jul 2021 13:04:22 +0000 (+0200)
Subject: s4:torture: force AES_CMAC or HMAC_SHA256 for some SMB 3.1.1 tests
X-Git-Tag: samba-4.15.0rc1~15
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=220c019933e3143741bf612aa4900ac1cd39fae0;p=thirdparty%2Fsamba.git

s4:torture: force AES_CMAC or HMAC_SHA256 for some SMB 3.1.1 tests

Allowing GMAC in future will generate different results, so
make sure the tests keep working as is.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
---

diff --git a/source4/torture/smb2/session.c b/source4/torture/smb2/session.c
index 34dafa3b17c..b323ec5284f 100644
--- a/source4/torture/smb2/session.c
+++ b/source4/torture/smb2/session.c
@@ -2812,6 +2812,12 @@ static bool test_session_bind_negative_smb2to3s(struct torture_context *tctx, st
 	options2.only_negprot = true;
 	options2.min_protocol = PROTOCOL_SMB3_00;
 	options2.max_protocol = PROTOCOL_SMB3_11;
+	options2.smb3_capabilities.signing = (struct smb3_signing_capabilities) {
+		.num_algos = 1,
+		.algos = {
+			SMB2_SIGNING_AES128_CMAC,
+		},
+	};
 
 	ret = test_session_bind_negative_smbXtoX(tctx, __func__,
 						 credentials,
@@ -2852,6 +2858,12 @@ static bool test_session_bind_negative_smb2to3d(struct torture_context *tctx, st
 	options2.only_negprot = true;
 	options2.min_protocol = PROTOCOL_SMB3_00;
 	options2.max_protocol = PROTOCOL_SMB3_11;
+	options2.smb3_capabilities.signing = (struct smb3_signing_capabilities) {
+		.num_algos = 1,
+		.algos = {
+			SMB2_SIGNING_AES128_CMAC,
+		},
+	};
 
 	ret = test_session_bind_negative_smbXtoX(tctx, __func__,
 						 credentials,
@@ -2885,12 +2897,24 @@ static bool test_session_bind_negative_smb3to2s(struct torture_context *tctx, st
 	options1.client_guid = GUID_random();
 	options1.min_protocol = PROTOCOL_SMB3_00;
 	options1.max_protocol = PROTOCOL_SMB3_11;
+	options1.smb3_capabilities.signing = (struct smb3_signing_capabilities) {
+		.num_algos = 1,
+		.algos = {
+			SMB2_SIGNING_AES128_CMAC,
+		},
+	};
 
 	/* same client guid */
 	options2 = options1;
 	options2.only_negprot = true;
 	options2.min_protocol = PROTOCOL_SMB2_02;
 	options2.max_protocol = PROTOCOL_SMB2_10;
+	options2.smb3_capabilities.signing = (struct smb3_signing_capabilities) {
+		.num_algos = 1,
+		.algos = {
+			SMB2_SIGNING_HMAC_SHA256,
+		},
+	};
 
 	ret = test_session_bind_negative_smbXtoX(tctx, __func__,
 						 credentials,
@@ -2924,6 +2948,12 @@ static bool test_session_bind_negative_smb3to2d(struct torture_context *tctx, st
 	options1.client_guid = GUID_random();
 	options1.min_protocol = PROTOCOL_SMB3_00;
 	options1.max_protocol = PROTOCOL_SMB3_11;
+	options1.smb3_capabilities.signing = (struct smb3_signing_capabilities) {
+		.num_algos = 1,
+		.algos = {
+			SMB2_SIGNING_AES128_CMAC,
+		},
+	};
 
 	/* different client guid */
 	options2 = options1;
@@ -2931,6 +2961,12 @@ static bool test_session_bind_negative_smb3to2d(struct torture_context *tctx, st
 	options2.only_negprot = true;
 	options2.min_protocol = PROTOCOL_SMB2_02;
 	options2.max_protocol = PROTOCOL_SMB2_10;
+	options2.smb3_capabilities.signing = (struct smb3_signing_capabilities) {
+		.num_algos = 1,
+		.algos = {
+			SMB2_SIGNING_HMAC_SHA256,
+		},
+	};
 
 	ret = test_session_bind_negative_smbXtoX(tctx, __func__,
 						 credentials,
@@ -2963,6 +2999,12 @@ static bool test_session_bind_negative_smb3to3s(struct torture_context *tctx, st
 	options2.only_negprot = true;
 	options2.min_protocol = PROTOCOL_SMB3_11;
 	options2.max_protocol = PROTOCOL_SMB3_11;
+	options2.smb3_capabilities.signing = (struct smb3_signing_capabilities) {
+		.num_algos = 1,
+		.algos = {
+			SMB2_SIGNING_AES128_CMAC,
+		},
+	};
 
 	ret = test_session_bind_negative_smbXtoX(tctx, __func__,
 						 credentials,
@@ -2996,6 +3038,12 @@ static bool test_session_bind_negative_smb3to3d(struct torture_context *tctx, st
 	options2.only_negprot = true;
 	options2.min_protocol = PROTOCOL_SMB3_11;
 	options2.max_protocol = PROTOCOL_SMB3_11;
+	options2.smb3_capabilities.signing = (struct smb3_signing_capabilities) {
+		.num_algos = 1,
+		.algos = {
+			SMB2_SIGNING_AES128_CMAC,
+		},
+	};
 
 	ret = test_session_bind_negative_smbXtoX(tctx, __func__,
 						 credentials,