tests: pkcs12-pbmac1: exercise extended/truncated MAC values

This adds a couple of new test vectors embedding
PFX.macData.mac.digest with extended/truncated MAC values, both of
which should fail MAC verification.

Signed-off-by: Daiki Ueno <ueno@gnu.org>
Co-authored-by: Alexander Sosedkin <asosedkin@redhat.com>

diff --git a/tests/cert-tests/Makefile.am b/tests/cert-tests/Makefile.am
index 9c71c083bd82dea883d3764af566240eade833b3..ea5673d37ecd568624f4f1790b5b9584dcdd5371 100644 (file)
--- a/tests/cert-tests/Makefile.am
+++ b/tests/cert-tests/Makefile.am
@@ -105,6 +105,8 @@ EXTRA_DIST = data/ca-no-pathlen.pem data/no-ca-or-pathlen.pem data/aki-cert.pem
        data/pbmac1_256_256.bad-iter.p12 data/pbmac1_256_256.bad-salt.p12 \
        data/pbmac1_256_256.good.p12 data/pbmac1_256_256.no-len.p12 \
        data/pbmac1_256_256.short-len.p12 \
+       data/pbmac1_256_256.extended-mac.p12 \
+       data/pbmac1_256_256.truncated-mac.p12 \
        data/pbmac1_512_256.good.p12 data/pbmac1_512_512.good.p12 \
        data/pbmac1-simple.p12 \
        templates/simple-policy.tmpl data/simple-policy.pem templates/template-negative-serial.tmpl \

diff --git a/tests/cert-tests/data/pbmac1_256_256.extended-mac.p12 b/tests/cert-tests/data/pbmac1_256_256.extended-mac.p12
new file mode 100644 (file)
index 0000000..cc2964c
Binary files /dev/null and b/tests/cert-tests/data/pbmac1_256_256.extended-mac.p12 differ

diff --git a/tests/cert-tests/data/pbmac1_256_256.truncated-mac.p12 b/tests/cert-tests/data/pbmac1_256_256.truncated-mac.p12
new file mode 100644 (file)
index 0000000..444fca8
Binary files /dev/null and b/tests/cert-tests/data/pbmac1_256_256.truncated-mac.p12 differ

diff --git a/tests/cert-tests/pkcs12-pbmac1.sh b/tests/cert-tests/pkcs12-pbmac1.sh
index c97ece15a5c088e28782dd6eb8efb6c0f1485671..ef72c0a1c49924ed0cb836c6dc6f81af26a0b501 100644 (file)
--- a/tests/cert-tests/pkcs12-pbmac1.sh
+++ b/tests/cert-tests/pkcs12-pbmac1.sh
@@ -54,6 +54,8 @@ pbmac1_256_256.bad-iter.p12
 pbmac1_256_256.bad-salt.p12
 pbmac1_256_256.no-len.p12
 pbmac1_256_256.short-len.p12
+pbmac1_256_256.extended-mac.p12
+pbmac1_256_256.truncated-len.p12
 "
 
 for p12 in $GOOD; do