Add tests for signature verification

diff --git a/src/tests/modules/cipher/rsa_sign_verify.unlang b/src/tests/modules/cipher/rsa_sign_verify.unlang
new file mode 100644 (file)
index 0000000..1bca2ef
--- /dev/null
+++ b/src/tests/modules/cipher/rsa_sign_verify.unlang
@@ -0,0 +1,108 @@
+update request {
+       &Tmp-String-0 := "Hello world!"
+}
+
+update request {
+       &Tmp-Octets-0 := "%{cipher_rsa_sign:%{Tmp-String-0}}"
+}
+
+if (!&Tmp-Octets-0) {
+       test_fail
+}
+else {
+       test_pass
+}
+
+if (<octets>&Tmp-String-0[0] == &Tmp-Octets-0[0]) {
+       test_fail
+}
+else {
+       test_pass
+}
+
+#
+#  Pass the signature and the original message to the verification function
+#
+update request {
+       &Tmp-String-0 := "%{cipher_rsa_verify:%{Tmp-Octets-0} %{Tmp-String-0}}"
+}
+
+if (&Tmp-String-0 != 'yes') {
+       test_fail
+}
+else {
+       test_pass
+}
+
+#
+#  Verification should now fail
+#
+update request {
+       &Tmp-String-0 := "Goodbye world!"
+}
+update request {
+       &Tmp-String-0 := "%{cipher_rsa_verify:%{Tmp-Octets-0} %{Tmp-String-0}}"
+}
+
+if (&Tmp-String-0 != 'no') {
+       test_fail
+}
+else {
+       test_pass
+}
+
+#
+#  Repeat tests to ensure there are no issues with EVP_PKEY_CTX reuse
+#
+update request {
+       &Tmp-String-0 := "Hello nurse!"
+}
+
+update request {
+       &Tmp-Octets-0 := "%{cipher_rsa_sign:%{Tmp-String-0}}"
+}
+
+if (!&Tmp-Octets-0) {
+       test_fail
+}
+else {
+       test_pass
+}
+
+if (<octets>&Tmp-String-0[0] == &Tmp-Octets-0[0]) {
+       test_fail
+}
+else {
+       test_pass
+}
+
+#
+#  Pass the signature and the original message to the verification function
+#
+update request {
+       &Tmp-String-0 := "%{cipher_rsa_verify:%{Tmp-Octets-0} %{Tmp-String-0}}"
+}
+
+if (&Tmp-String-0 != 'yes') {
+       test_fail
+}
+else {
+       test_pass
+}
+
+#
+#  Verification should now fail
+#
+update request {
+       &Tmp-String-0 := "Goodbye nurse!"
+}
+update request {
+       &Tmp-String-0 := "%{cipher_rsa_verify:%{Tmp-Octets-0} %{Tmp-String-0}}"
+}
+
+if (&Tmp-String-0 != 'no') {
+       test_fail
+}
+else {
+       test_pass
+}