Added test to detect a wrong ECDSA key.

diff --git a/tests/ecdsa/bad-key.pem b/tests/ecdsa/bad-key.pem
new file mode 100644 (file)
index 0000000..6dfb622
--- /dev/null
+++ b/tests/ecdsa/bad-key.pem
@@ -0,0 +1,25 @@
+Public Key Info:
+       Public Key Algorithm: ECC
+       Key Security Level: High
+
+curve: SECP256R1
+private key:
+       00:f4:fa:5f:3e:48:39:dd:4c:d1:24:3f:a1:f5:51:
+       49:36:74:c3:2c:ae:ad:d9:96:91:93:da:ec:03:25:
+       1f:aa:0b:
+x:
+       56:d1:7e:b2:c4:f6:bb:02:e2:4a:76:63:14:8c:1a:
+       c1:eb:12:56:bd:3d:08:66:2f:dc:eb:e5:b9:32:15:
+       1e:e7:
+y:
+       00:88:27:c8:52:8f:a5:9a:3a:bb:20:e6:54:ef:a8:
+       7c:50:39:db:af:cf:e4:5e:69:7a:25:20:6d:63:60:
+       af:29:d5:
+
+Public Key ID: 5A:37:9C:B2:B2:BA:33:AC:8E:87:7B:63:18:15:99:3F:DF:3A:F3:A3
+
+-----BEGIN EC PRIVATE KEY-----
+MHgCAQEEIQCIJ8hSj6WaOrsg5lTvqHxQOduvz+ReaXolIG1jYK8p1aAKBggqhkjO
+PQMBB6FEA0IABFbRfrLE9rsC4kp2YxSMGsHrEla9PQhmL9zr5bkyFR7niCfIUo+l
+mjq7IOZU76h8UDnbr8/kXml6JSBtY2CvKdU=
+-----END EC PRIVATE KEY-----

diff --git a/tests/ecdsa/ecdsa b/tests/ecdsa/ecdsa
index e1b7dc6abdb6437c89b90f925830007040308bf0..5ac716a90a410b8364f7fb7a554d9da078417acd 100755 (executable)
--- a/tests/ecdsa/ecdsa
+++ b/tests/ecdsa/ecdsa
@@ -82,4 +82,10 @@ fi
 rm -f verify new-user.pem new-ca-ecdsa.pem new-subca-ecdsa.pem template out
 rm -f key-subca-ecdsa.pem key-ca-ecdsa.pem key-ecdsa.pem
 
+$CERTTOOL -k <bad-key.pem | grep "validation failed" >/dev/null 2>&1
+if [ $? != 0 ];then
+       echo "certtool didn't detect a bad ECDSA key."
+       exit 1
+fi
+
 exit 0