Add unit test for gnutls_pkcs11_obj_get_pk_algorithm

Signed-off-by: Ghadi Elie Rahme <ghadi.rahme@canonical.com>

diff --git a/.gitignore b/.gitignore
index 88583f593f2cf74dd6a69ed14b5e01cb6e4ed192..d19ea16d6ec7dd2033b5aabf9134745fa5a20257 100644 (file)
--- a/.gitignore
+++ b/.gitignore
@@ -593,6 +593,7 @@ tests/pkcs11/pkcs11-get-issuer
 tests/pkcs11/pkcs11-import-url-privkey
 tests/pkcs11/pkcs11-import-with-pin
 tests/pkcs11/pkcs11-is-known
+tests/pkcs11/pkcs11-obj-get-pk-algorithm
 tests/pkcs11/pkcs11-obj-import
 tests/pkcs11/pkcs11-pin-func
 tests/pkcs11/pkcs11-privkey

diff --git a/tests/Makefile.am b/tests/Makefile.am
index 0acb40e18b398490dc4a277ebdf468f86fbbc6ba..f9a1ef73f104dc86b8c0d9ad45818dcd705f22d7 100644 (file)
--- a/tests/Makefile.am
+++ b/tests/Makefile.am
@@ -387,6 +387,10 @@ pkcs11_obj_raw_SOURCES = pkcs11/pkcs11-obj-raw.c
 pkcs11_obj_raw_DEPENDENCIES = libpkcs11mock1.la libutils.la
 pkcs11_obj_raw_LDADD = $(LDADD) $(LIBDL)
 
+pkcs11_obj_raw_pk_algorithm_SOURCES = pkcs11/pkcs11-obj-get-pk-algorithm.c
+pkcs11_obj_raw_pk_algorithm_DEPENDENCIES = libpkcs11mock1.la libutils.la
+pkcs11_obj_raw_pk_algorithm_LDADD = $(LDADD) $(LIBDL)
+
 pkcs11_import_url_privkey_caps_SOURCES = pkcs11/pkcs11-import-url-privkey.c
 pkcs11_import_url_privkey_caps_DEPENDENCIES = libpkcs11mock1.la libutils.la
 pkcs11_import_url_privkey_caps_LDADD = $(LDADD) $(LIBDL)
@@ -428,7 +432,7 @@ ctests += pkcs11-cert-import-url-exts pkcs11-get-exts pkcs11-get-raw-issuer-exts
        pkcs11/pkcs11-rsa-pss-privkey-test pkcs11/tls-neg-pkcs11-key pkcs11/pkcs11-privkey-generate \
        pkcs11/gnutls_x509_crt_list_import_url pkcs11/gnutls_pcert_list_import_x509_file \
        pkcs11/pkcs11-eddsa-privkey-test pkcs11/eddsa-ecpoint-encodings \
-       pkcs11-token-raw pkcs11-obj-raw
+       pkcs11/pkcs11-obj-get-pk-algorithm pkcs11-token-raw pkcs11-obj-raw
 
 if P11KIT_0_23_11_API
 ctests += pkcs11-import-url-privkey-caps

diff --git a/tests/pkcs11/pkcs11-obj-get-pk-algorithm.c b/tests/pkcs11/pkcs11-obj-get-pk-algorithm.c
new file mode 100644 (file)
index 0000000..9b9bc75
--- /dev/null
+++ b/tests/pkcs11/pkcs11-obj-get-pk-algorithm.c
@@ -0,0 +1,156 @@
+/*
+ * Copyright (C) 2026 Ghadi Elie Rahme.
+ *
+ * Author: Ghadi Elie Rahme
+ *
+ * This file is part of GnuTLS.
+ *
+ * GnuTLS is free software; you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * GnuTLS is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>
+ */
+
+#ifdef HAVE_CONFIG_H
+#include "config.h"
+#endif
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <assert.h>
+#include <unistd.h>
+#include <sys/types.h>
+#include <sys/wait.h>
+
+#include <gnutls/gnutls.h>
+#include <gnutls/pkcs11.h>
+#ifndef CRYPTOKI_GNU
+#define CRYPTOKI_GNU
+#endif
+#include <p11-kit/pkcs11.h>
+
+#include "utils.h"
+
+/* Tests whether gnutls_pkcs11_obj_get_pk_algorithm returns valid
+ * algorithm and bit count for a private key object. */
+
+#if defined(HAVE___REGISTER_ATFORK)
+
+#ifdef _WIN32
+#define P11LIB "libpkcs11mock1.dll"
+#else
+#include <dlfcn.h>
+#define P11LIB "libpkcs11mock1.so"
+#endif
+
+static void tls_log_func(int level, const char *str)
+{
+       fprintf(stderr, "|<%d>| %s", level, str);
+}
+
+#define PIN "1234"
+
+static int pin_func(void *userdata, int attempt, const char *url,
+                   const char *label, unsigned flags, char *pin,
+                   size_t pin_max)
+{
+       if (attempt == 0) {
+               strcpy(pin, PIN);
+               return 0;
+       }
+       return -1;
+}
+
+void doit(void)
+{
+       int ret;
+       const char *lib;
+       gnutls_pkcs11_obj_t obj;
+       unsigned int bits;
+
+       ret = global_init();
+       if (ret != 0) {
+               fail("%d: %s\n", ret, gnutls_strerror(ret));
+               exit(1);
+       }
+
+       gnutls_global_set_log_function(tls_log_func);
+       if (debug)
+               gnutls_global_set_log_level(4711);
+
+       lib = getenv("P11MOCKLIB1");
+       if (lib == NULL)
+               lib = P11LIB;
+
+       ret = gnutls_pkcs11_init(GNUTLS_PKCS11_FLAG_MANUAL, NULL);
+       if (ret != 0) {
+               fail("%d: %s\n", ret, gnutls_strerror(ret));
+               exit(1);
+       }
+
+       ret = gnutls_pkcs11_add_provider(lib, NULL);
+       if (ret != 0) {
+               fail("%d: %s\n", ret, gnutls_strerror(ret));
+               exit(1);
+       }
+
+       /* Test NULL obj parameter */
+       ret = gnutls_pkcs11_obj_get_pk_algorithm(NULL, &bits);
+       assert(ret == GNUTLS_E_INVALID_REQUEST);
+
+       assert(gnutls_pkcs11_obj_init(&obj) >= 0);
+
+       gnutls_pkcs11_obj_set_pin_function(obj, pin_func, NULL);
+
+       /* Test NULL bits parameter */
+       ret = gnutls_pkcs11_obj_import_url(obj,
+                                          "pkcs11:object=test;type=private",
+                                          GNUTLS_PKCS11_OBJ_FLAG_LOGIN);
+       assert(ret >= 0);
+
+       ret = gnutls_pkcs11_obj_get_pk_algorithm(obj, NULL);
+       assert(ret == GNUTLS_E_INVALID_REQUEST);
+
+       /* Test with an RSA private key object */
+       bits = 0;
+       ret = gnutls_pkcs11_obj_get_pk_algorithm(obj, &bits);
+       if (ret < 0) {
+               fail("gnutls_pkcs11_obj_get_pk_algorithm: %s\n",
+                    gnutls_strerror(ret));
+               exit(1);
+       }
+
+       if (ret != GNUTLS_PK_RSA) {
+               fail("expected algorithm %d (RSA), got %d\n", GNUTLS_PK_RSA,
+                    ret);
+               exit(1);
+       }
+
+       if (bits == 0) {
+               fail("expected non-zero bit count for RSA key\n");
+               exit(1);
+       }
+
+       if (debug)
+               printf("pk algorithm: %s, bits: %u\n",
+                      gnutls_pk_algorithm_get_name(ret), bits);
+
+       gnutls_pkcs11_obj_deinit(obj);
+       gnutls_pkcs11_deinit();
+       gnutls_global_deinit();
+}
+#else
+void doit(void)
+{
+       exit(77);
+}
+#endif