/* This Source Code Form is subject to the terms of the Mozilla Public * License, v. 2.0. If a copy of the MPL was not distributed with this http://mozilla.org/MPL/2.0/. */
/* * test_cert.c * * Test Cert Type *
#include "testutil.h"
#include "testutil_nss.h"
static PKIX_PL_Cert *altNameNoneCert = NULL;
static PKIX_PL_Cert *altNameOtherCert = NULL;
static PKIX_PL_Cert *altNameOtherCert_diff = NULL;
static PKIX_PL_Cert *altNameRfc822Cert = NULL;
static PKIX_PL_Cert *altNameRfc822Cert_diff = NULL;
static PKIX_PL_Cert *altNameDnsCert = NULL;
static PKIX_PL_Cert *altNameDnsCert_diff = NULL;
static PKIX_PL_Cert *altNameX400Cert = NULL;
static PKIX_PL_Cert *altNameX400Cert_diff = NULL;
static PKIX_PL_Cert *altNameDnCert = NULL;
static PKIX_PL_Cert *altNameDnCert_diff = NULL;
static PKIX_PL_Cert *altNameEdiCert = NULL;
static PKIX_PL_Cert *altNameEdiCert_diff = NULL;
static PKIX_PL_Cert *altNameUriCert = NULL;
static PKIX_PL_Cert *altNameUriCert_diff = NULL;
static PKIX_PL_Cert *altNameIpCert = NULL;
static PKIX_PL_Cert *altNameIpCert_diff = NULL;
static PKIX_PL_Cert *altNameOidCert = NULL;
static PKIX_PL_Cert *altNameOidCert_diff = NULL;
static PKIX_PL_Cert *altNameMultipleCert = NULL;
static void *plContext = NULL;
static void
createCerts(
char *dataCentralDir,
char *goodInput,
char *diffInput,
PKIX_PL_Cert **goodObject,
PKIX_PL_Cert **equalObject,
PKIX_PL_Cert **diffObject)
{
subTest(
"PKIX_PL_Cert_Create " );
*goodObject = createCert(dataCentralDir, goodInput, plContext);
subTest(
"PKIX_PL_Cert_Create " );
*equalObject = createCert(dataCentralDir, goodInput, plContext);
subTest(
"PKIX_PL_Cert_Create " );
*diffObject = createCert(dataCentralDir, diffInput, plContext);
}
static void
createCertsWithSubjectAltNames(
char *dataCentralDir)
{
subTest(
"PKIX_PL_Cert_Create " );
altNameDnsCert = createCert(dataCentralDir,
"generalName/altNameDnsCert" , plContext)
;"PKIX_PL_Cert_Create " );"generalName/altNameDnsCert_diff" , plContext);"PKIX_PL_Cert_Create " );"generalName/altNameRfc822Cert" , plContext);"PKIX_PL_Cert_Create " );"generalName/altNameRfc822Cert_diff" , plContext);"PKIX_PL_Cert_Create " );"generalName/altNameX400Cert" , plContext);"PKIX_PL_Cert_Create " );"generalName/altNameX400Cert_diff" , plContext);"PKIX_PL_Cert_Create " );"generalName/altNameDnCert" , plContext);"PKIX_PL_Cert_Create " );"generalName/altNameDnCert_diff" , plContext);"PKIX_PL_Cert_Create " );"generalName/altNameEdiCert" , plContext);"PKIX_PL_Cert_Create " );"generalName/altNameEdiCert_diff" , plContext);"PKIX_PL_Cert_Create " );"generalName/altNameUriCert" , plContext);"PKIX_PL_Cert_Create " );"generalName/altNameUriCert_diff" , plContext);"PKIX_PL_Cert_Create " );"generalName/altNameIpCert" , plContext);"PKIX_PL_Cert_Create " );"generalName/altNameIpCert_diff" , plContext);"PKIX_PL_Cert_Create " );"generalName/altNameOidCert" , plContext);"PKIX_PL_Cert_Create " );"generalName/altNameOidCert_diff" , plContext);"PKIX_PL_Cert_Create " );"generalName/altNameOtherCert" , plContext);"PKIX_PL_Cert_Create " );"generalName/altNameOtherCert_diff" , plContext);"PKIX_PL_Cert_Create " );"generalName/altNameNoneCert" , plContext);"PKIX_PL_Cert_Create " );"generalName/altNameRfc822DnsCert" , plContext);static void "PKIX_PL_Cert_GetVersion" );if (goodVersion != 2) {"unexpected mismatch" );void )printf("Actual value:\t%d\n" , goodVersion);void )printf("Expected value:\t2\n" );goto cleanup;static void char *expectedAscii = "37bc66ec" ;"PKIX_PL_Cert_GetSerialNumber" );));t));)););static void char *expectedAscii = "OU=bcn,OU=east,O=sun,C=us" ;"PKIX_PL_Cert_GetSubject" );if (!goodSubject) {"Certificate Subject should not be NULL" );goto cleanup;if (!equalSubject) {"Certificate Subject should not be NULL" );goto cleanup;if (!diffSubject) {"Certificate Subject should not be NULL" );goto cleanup;static void char *expectedAscii = "CN=yassir,OU=bcn,OU=east,O=sun,C=us" ;"PKIX_PL_Cert_GetIssuer" );static void char *expectedAscii)t));t));static void if (altNames != NULL) {"unexpected mismatch" );void )printf("Actual value:\t%p\n" , (void *)altNames);void )printf("Expected value:\tNULL\n" );goto cleanup;static void char *expectedAscii ="[\n" "\tVersion: v3\n" "\tSerialNumber: 2d\n" "\tIssuer: OU=labs,O=sun,C=us\n" "\tSubject: CN=yassir,OU=labs,O=sun,C=us\n" "\tValidity: [From: Mon Feb 09, 2004\n" /* "\tValidity: [From: Mon Feb 09 14:43:52 2004\n" */ "\t To: Mon Feb 09, 2004]\n" /* "\t To: Mon Feb 09 14:43:52 2004]\n" */ "\tSubjectAltNames: (yassir@sun.com, sunray.sun.com)\n" "\tAuthorityKeyId: (null)\n" "\tSubjectKeyId: (null)\n" "\tSubjPubKeyAlgId: ANSI X9.57 DSA Signature\n" "\tCritExtOIDs: (EMPTY)\n" "\tExtKeyUsages: (null)\n" "\tBasicConstraint: (null)\n" "\tCertPolicyInfo: (null)\n" "\tPolicyMappings: (null)\n" "\tExplicitPolicy: -1\n" "\tInhibitMapping: -1\n" "\tInhibitAnyPolicy:-1\n" "\tNameConstraints: (null)\n" "\tAuthorityInfoAccess: (null)\n" "\tSubjectInfoAccess: (null)\n" "\tCacheFlag: 0\n" "]\n" ;sp;plContext));Context));if (firstAltName->type != firstExpectedType) {"unexpected mismatch" );void )printf("Actual value:\t%d\n" , firstAltName->type);void )printf("Expected value:\t%d\n" , firstExpectedType);goto cleanup;Context));if (secondAltName->type != secondExpectedType) {"unexpected mismatch" );void )printf("Actual value:\t%d\n" , secondAltName->type);void )printf("Expected value:\t%d\n" , secondExpectedType);goto cleanup;static void char *dataCentralDir)char *expectedAscii = NULL;"PKIX_PL_Cert_GetSubjectAltNames " );"east.sun.com" ;"PKIX_PL_Cert_GetSubjectAltNames " );"alice.barnes@bcn.east.sun.com" ;/* *this should work once bugzilla bug #233586 is fixed. *subTest("PKIX_PL_Cert_GetSubjectAltNames <X400Address>"); *expectedAscii = "X400Address: <DER-encoded value>"; *testAltNames(altNameX400Cert, altNameX400Cert_diff, expectedAscii); "PKIX_PL_Cert_GetSubjectAltNames " );"CN=elley,OU=labs,O=sun,C=us" ;/* * this should work once bugzilla bug #233586 is fixed. * subTest("PKIX_PL_Cert_GetSubjectAltNames <EdiPartyName>"); * expectedAscii = "EDIPartyName: <DER-encoded value>"; * testAltNames(altNameEdiCert, altNameEdiCert_diff, expectedAscii); "PKIX_PL_Cert_GetSubjectAltNames " );"http://www.sun.com "; "PKIX_PL_Cert_GetSubjectAltNames " );"1.2.3.4" ;"PKIX_PL_Cert_GetSubjectAltNames " );"1.2.39" ;"PKIX_PL_Cert_GetSubjectAltNames " );"1.7.26.97" ;"PKIX_PL_Cert_GetSubjectAltNames " );"PKIX_PL_Cert_GetSubjectAltNames " );static void char *expectedAscii = "ANSI X9.57 DSA Signature" ;"PKIX_PL_Cert_GetSubjectPublicKey" );text));ntext));text));static void char *expectedAscii = "1.2.840.10040.4.1" ;"PKIX_PL_Cert_GetSubjectPublicKeyAlgId" );plContext));static void char *firstOIDAscii = "2.5.29.15" ;char *secondOIDAscii = "2.5.29.19" ;ext));;plContext));;plContext));static void ext));if (!empty) {"unexpected mismatch" ;static void char *dataCentralDir)"PKIX_PL_Cert_Create " );"noExtensionsCert" , plContext);ext));if (!empty) {"unexpected mismatch" ;static void char *dataCentralDir, PKIX_PL_Cert *goodObject)"PKIX_PL_Cert_GetCriticalExtensionOIDs " "" );"PKIX_PL_Cert_GetCriticalExtensionOIDs " "" );"PKIX_PL_Cert_GetCriticalExtensionOIDs " "" );static void char *dataCentralDir)char *expectedAscii ="[116, 021, 213, 036, 028, 189, 094, 101, 136, 031, 225," " 139, 009, 126, 127, 234, 025, 072, 078, 097]" ;"PKIX_PL_Cert_Create " );"keyIdentifier/subjKeyIDCert" , plContext);"PKIX_PL_Cert_Create " );"keyIdentifier/authKeyIDCert" , plContext);"PKIX_PL_Cert_GetSubjectKeyIdentifier " );p;plContext));"PKIX_PL_Cert_GetAuthorityKeyIdentifier " );bsp;plContext));"PKIX_PL_Cert_GetSubjectKeyIdentifier " );p;plContext));static void xt));if (subjKeyID != NULL) {"unexpected mismatch" ;text));if (authKeyID != NULL) {"unexpected mismatch" ;static void char *dataCentralDir, PKIX_PL_Cert *goodObject)static void char *dataCentralDir,char *dataDir,"PKIX_PL_Cert_Create " );"keyUsage/encipherOnlyCert" , plContext);"PKIX_PL_Cert_Create " );"keyUsage/decipherOnlyCert" , plContext);"PKIX_PL_Cert_Create " );"keyUsage/noKeyUsagesCert" , plContext);"PKIX_PL_Cert_VerifyKeyUsage " );Y_CERT_SIGN, plContext));"PKIX_PL_Cert_VerifyKeyUsage " );"PKIX_PL_Cert_VerifyKeyUsage " );PHER_ONLY, plContext));"PKIX_PL_Cert_VerifyKeyUsage " );HER_ONLY, plContext));"PKIX_PL_Cert_VerifyKeyUsage " );R_ONLY, plContext));static void char *dataCentralDir)char *oidAscii = "1.3.6.1.5.5.7.3.3" ;char *secondOIDAscii = "1.3.6.1.5.5.7.3.1" ;char *thirdOIDAscii = "1.3.6.1.5.5.7.3.2" ;"PKIX_PL_Cert_Create " );"extKeyUsage/codeSigningEKUCert" , plContext);"PKIX_PL_Cert_Create " );"extKeyUsage/multiEKUCert" , plContext);"PKIX_PL_Cert_Create " );"extKeyUsage/noEKUCert" , plContext);"PKIX_PL_Cert_ExtendedKeyUsage " );sp;plContext));)&firstOID, plContext));"PKIX_PL_Cert_ExtendedKeyUsage " );ontext));;if (length != 3) {"unexpected mismatch" );void )printf("Actual value:\t%d\n" , length);void )printf("Expected value:\t3\n" );goto cleanup;"PKIX_PL_Cert_ExtendedKeyUsage " );ext));if (thirdExtKeyUsage != NULL) {"unexpected mismatch" );void )printf("Actual value:\t%p\n" , (void *)thirdExtKeyUsage);void )printf("Expected value:\tNULL\n" );goto cleanup;static void char *dataCentralDir)"PKIX_PL_Cert_Create " );"publicKey/dsaWithoutParams" , plContext);"PKIX_PL_Cert_Create " );"publicKey/dsaWithParams" , plContext);"PKIX_PL_Cert_GetSubjectPublicKey " );ext));"PKIX_PL_Cert_GetSubjectPublicKey " );text));"PKIX_PL_PublicKey_MakeInheritedDSAPublicKey " );econdKey, &resultKeyPositive, plContext));if (resultKeyPositive == NULL) {"PKIX_PL_PublicKey_MakeInheritedDSAPublicKey failed" );"PKIX_PL_PublicKey_MakeInheritedDSAPublicKey " );tKey, &resultKeyNegative, plContext));static void char *dataCentralDir)"PKIX_PL_Cert_Create " );"publicKey/labs2yassir" , plContext);"PKIX_PL_Cert_Create " );"publicKey/yassir2labs" , plContext);"PKIX_PL_Cert_GetSubjectPublicKey " );ext));"PKIX_PL_Cert_GetSubjectPublicKey " );text));"PKIX_PL_Cert_VerifySignature " );Context));"PKIX_PL_Cert_VerifySignature " );ntext));static void /* * olderCert has the following Validity: * notBefore = August 19, 1999: 20:19:56 GMT * notAfter = August 18, 2000: 20:19:56 GMT * * newerCert has the following Validity: * notBefore = November 13, 2003: 16:46:03 GMT * notAfter = February 13, 2009: 16:46:03 GMT /* olderDateAscii = March 29, 2000: 13:48:47 GMT */ char *olderAscii = "000329134847Z" ;/* newerDateAscii = March 29, 2004: 13:48:47 GMT */ char *newerAscii = "040329134847Z" ;"PKIX_PL_Cert_CheckValidity " );/* create newer date when newer cert is valid but older cert is not */ plContext));));/* create older date when older cert is valid but newer cert is not */ plContext));));/* check validity of both certificates using olderDate */ "PKIX_PL_Cert_CheckValidity " );xt));"PKIX_PL_Cert_CheckValidity " ););/* check validity of both certificates using newerDate */ "PKIX_PL_Cert_CheckValidity " );xt));"PKIX_PL_Cert_CheckValidity " ););/* * check validity of both certificates using current time * NOTE: these "now" tests will not work when the current * time is after newerCert.notAfter (~ February 13, 2009) "PKIX_PL_Cert_CheckValidity " );"PKIX_PL_Cert_CheckValidity " );static void char *dataDir,char *goodCertName,char *diffCertName,/* * Warning: pointer will be NULL if BasicConstraints straints, plContext));onstraints, plContext));straints, plContext));static void char *dataDir,char *goodCertName,char *diffCertName,char *expectedAscii)/* * The standard test macro is applicable only * if BasicConstraint extension is present * in the certificate. Otherwise some * pointers will be null. if ((goodBasicConstraints) &&else {/* Test what we can */ if (goodBasicConstraints) {if (!equalBasicConstraints) {"Unexpected NULL value of equalBasicConstraints" );goto cleanup;"PKIX_PL_BasicConstraints_Equals " );"PKIX_PL_BasicConstraints_Hashcode " );if (diffBasicConstraints) {"PKIX_PL_BasicConstraints_Equals " );"PKIX_PL_BasicConstraints_Hashcode " );"PKIX_PL_BasicConstraints_Duplicate" );if (expectedAscii) {"PKIX_PL_BasicConstraints_ToString" );static void char *dataCentralDir)/* * XXX When we have a certificate with a non-null Basic * Constraints field and a value of FALSE for CAFlag, * this test should be modified to use that * certificate for diffCertName, and to verify that * GetCAFlag returns a FALSE value. But our certificates for * non-CAs are created with no BasicConstraints extension. char *goodCertName = "yassir2yassir" ;char *diffCertName = "nss2alice" ;"PKIX_PL_BasicConstraints_GetCAFlag" );s, &goodCAFlag, plContext));if (!goodCAFlag) {"BasicConstraint CAFlag unexpectedly FALSE" );goto cleanup;if (diffBasicConstraints) {s, &diffCAFlag, plContext));if (diffCAFlag) {"BasicConstraint CAFlag unexpectedly TRUE" );goto cleanup;static void char *dataCentralDir)char *goodCertName = "yassir2yassir" ;char *diffCertName = "sun2sun" ;"PKIX_PL_BasicConstraints_GetPathLenConstraint" );cConstraints, &goodPathLen, plContext));if (0 != goodPathLen) {"unexpected basicConstraint pathLen" );void )printf("Actual value:\t%d\n" , goodPathLen);void )printf("Expected value:\t0\n" );goto cleanup;cConstraints, &diffPathLen, plContext));if (1 != diffPathLen) {"unexpected basicConstraint pathLen" );void )printf("Actual value:\t%d\n" , diffPathLen);void )printf("Expected value:\t1\n" );goto cleanup;static void char *dataCentralDir)char *goodCertName = NULL;char *diffCertName = NULL;"PKIX_PL_Cert_GetBasicConstraints " );"yassir2yassir" ;"nss2alice" ;"CA(0)" );"PKIX_PL_Cert_GetBasicConstraints " );"nss2alice" ;"sun2sun" ;"PKIX_PL_Cert_GetBasicConstraints " );"yassir2bcn" ;"sun2sun" ;"CA(0)" );"PKIX_PL_Cert_GetBasicConstraints " );"anchor2dsa" ;"sun2sun" ;"CA(-1)" );static void char *dataDir)char *goodCertName ="UserNoticeQualifierTest15EE.crt" ;char *equalCertName ="UserNoticeQualifierTest15EE.crt" ;char *diffCertName ="UserNoticeQualifierTest17EE.crt" ;"PKIX_PL_Cert_GetPolicyInformation" );/* * Get the cert, then the list of policyInfos. * Take the first policyInfo from the list. /* Get the PolicyInfo objects */ ext));bsp;plContext));text));ext));bsp;plContext));if (isImmutable != PKIX_TRUE) {"PolicyInfo List is not immutable" );static void char *dataDir)char *goodCertName ="UserNoticeQualifierTest15EE.crt" ;char *equalCertName ="UserNoticeQualifierTest16EE.crt" ;char *diffCertName ="UserNoticeQualifierTest17EE.crt" ;"PKIX_PL_CertPolicyInfo_GetPolicyId" );/* * Get the cert, then the list of policyInfos. * Take the first policyInfo from the list. * Finally, get the policyInfo's ID. /* Get the PolicyInfo objects */ ext));bsp;plContext));ontext));text));Context));ext));bsp;plContext));ontext));static void char *dataDir)char *goodCertName ="UserNoticeQualifierTest15EE.crt" ;char *equalCertName ="UserNoticeQualifierTest16EE.crt" ;char *diffCertName ="UserNoticeQualifierTest18EE.crt" ;"PKIX_PL_CertPolicyInfo_GetPolQualifiers" );/* * Get the cert, then the list of policyInfos. * Take the first policyInfo from the list. * Get its list of PolicyQualifiers. /* Get the PolicyInfo objects */ ext));bsp;plContext));p;plContext));text));sp;plContext));ext));bsp;plContext));p;plContext));if (isImmutable != PKIX_TRUE) {"PolicyQualifier List is not immutable" );static void char *dataDir)char *goodCertName ="UserNoticeQualifierTest15EE.crt" ;char *equalCertName ="UserNoticeQualifierTest16EE.crt" ;char *diffCertName ="UserNoticeQualifierTest18EE.crt" ;"PKIX_PL_PolicyQualifier_GetQualifier" );/* * Get the cert, then the list of policyInfos. * Take the first policyInfo from the list. * Get its list of PolicyQualifiers. * Take the first policyQualifier from the list. * Finally, get the policyQualifier's ByteArray. /* Get the PolicyInfo objects */ ext));bsp;plContext));p;plContext));nbsp;plContext));text));sp;plContext));, &equalArray, plContext));ext));bsp;plContext));p;plContext));nbsp;plContext));ALSE);static void char *dataDir)char *goodCertName ="UserNoticeQualifierTest15EE.crt" ;char *equalCertName ="UserNoticeQualifierTest16EE.crt" ;char *diffCertName ="CPSPointerQualifierTest20EE.crt" ;"PKIX_PL_PolicyQualifier_GetPolicyQualifierId" );/* * Get the cert, then the list of policyInfos. * Take the first policyInfo from the list. * Get its list of PolicyQualifiers. * Take the first policyQualifier from the list. * Finally, get the policyQualifier's ID. /* Get the PolicyQualifier objects */ ext));bsp;plContext));p;plContext));alifier, &goodID, plContext));text));sp;plContext));ualifier, &equalID, plContext));ext));bsp;plContext));p;plContext));alifier, &diffID, plContext));static void char *dataCentralDir, char *dataDir)char *trueCertName = "CertificatePoliciesCritical.crt" ;char *falseCertName = "UserNoticeQualifierTest15EE.crt" ;"PKIX_PL_Cert_AreCertPoliciesCritical - " );ontext));if (trueVal != PKIX_TRUE) {"unexpected mismatch" );void )printf("Actual value:\t%d\n" , trueVal);void )printf("Expected value:\t1\n" );goto cleanup;"PKIX_PL_Cert_AreCertPoliciesCritical - " );Context));if (falseVal != PKIX_FALSE) {"unexpected mismatch" );void )printf("Actual value:\t%d\n" , falseVal);void )printf("Expected value:\t0\n" );goto cleanup;static void char *dataDir)char *requireExplicitPolicy2CertName ="requireExplicitPolicy2CACert.crt" ;char *inhibitPolicyMapping5CertName ="inhibitPolicyMapping5CACert.crt" ;char *inhibitAnyPolicy5CertName ="inhibitAnyPolicy5CACert.crt" ;char *inhibitAnyPolicy0CertName ="inhibitAnyPolicy0CACert.crt" ;"PKIX_PL_Cert_GetRequireExplicitPolicy" );ontext);olicy2Cert, &skipCerts, NULL));"PKIX_PL_Cert_GetPolicyMappingInhibited" );text);pping5Cert, &skipCerts, NULL));"PKIX_PL_Cert_GetInhibitAnyPolicy" );, &skipCerts, NULL));, &skipCerts, NULL));static void char *dataDir)char *policyMappingsCertName ="P1Mapping1to234CACert.crt" ;char *expectedAscii ="2.16.840.1.101.3.2.1.48.1=>2.16.840.1.101.3.2.1.48.2" ;"PKIX_PL_Cert_GetPolicyMappings" );;NULL));LL));LL));LL));"PKIX_PL_CertPolicyMap_GetIssuerDomainPolicy" );sp;NULL));sp;NULL));"PKIX_PL_CertPolicyMap_GetSubjectDomainPolicy" );bsp;NULL)); Messung V0.5 C=93 H=98 G=95
¤ Die Informationen auf dieser Webseite wurden
nach bestem Wissen sorgfältig zusammengestellt. Es wird jedoch weder Vollständigkeit, noch Richtigkeit,
noch Qualität der bereit gestellten Informationen zugesichert.0.22Bemerkung:
(vorverarbeitet)
¤ *Bot Zugriff
