diff options
Diffstat (limited to 'roms/edk2/CryptoPkg/Library/OpensslLib/openssl/test/x509aux.c')
| -rw-r--r-- | roms/edk2/CryptoPkg/Library/OpensslLib/openssl/test/x509aux.c | 175 |
1 files changed, 175 insertions, 0 deletions
diff --git a/roms/edk2/CryptoPkg/Library/OpensslLib/openssl/test/x509aux.c b/roms/edk2/CryptoPkg/Library/OpensslLib/openssl/test/x509aux.c new file mode 100644 index 000000000..e41f1f680 --- /dev/null +++ b/roms/edk2/CryptoPkg/Library/OpensslLib/openssl/test/x509aux.c @@ -0,0 +1,175 @@ +/* + * Copyright 2016-2019 The OpenSSL Project Authors. All Rights Reserved. + * + * Licensed under the OpenSSL licenses, (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * https://www.openssl.org/source/license.html + * or in the file LICENSE in the source distribution. + */ + +#include <stdio.h> +#include <string.h> +#include <errno.h> + +#include <openssl/x509.h> +#include <openssl/pem.h> +#include <openssl/conf.h> +#include <openssl/err.h> +#include "internal/nelem.h" +#include "testutil.h" + +static int test_certs(int num) +{ + int c; + char *name = 0; + char *header = 0; + unsigned char *data = 0; + long len; + typedef X509 *(*d2i_X509_t)(X509 **, const unsigned char **, long); + typedef int (*i2d_X509_t)(X509 *, unsigned char **); + int err = 0; + BIO *fp = BIO_new_file(test_get_argument(num), "r"); + X509 *reuse = NULL; + + if (!TEST_ptr(fp)) + return 0; + + for (c = 0; !err && PEM_read_bio(fp, &name, &header, &data, &len); ++c) { + const int trusted = (strcmp(name, PEM_STRING_X509_TRUSTED) == 0); + + d2i_X509_t d2i = trusted ? d2i_X509_AUX : d2i_X509; + i2d_X509_t i2d = trusted ? i2d_X509_AUX : i2d_X509; + X509 *cert = NULL; + const unsigned char *p = data; + unsigned char *buf = NULL; + unsigned char *bufp; + long enclen; + + if (!trusted + && strcmp(name, PEM_STRING_X509) != 0 + && strcmp(name, PEM_STRING_X509_OLD) != 0) { + TEST_error("unexpected PEM object: %s", name); + err = 1; + goto next; + } + cert = d2i(NULL, &p, len); + + if (cert == NULL || (p - data) != len) { + TEST_error("error parsing input %s", name); + err = 1; + goto next; + } + + /* Test traditional 2-pass encoding into caller allocated buffer */ + enclen = i2d(cert, NULL); + if (len != enclen) { + TEST_error("encoded length %ld of %s != input length %ld", + enclen, name, len); + err = 1; + goto next; + } + if ((buf = bufp = OPENSSL_malloc(len)) == NULL) { + TEST_perror("malloc"); + err = 1; + goto next; + } + enclen = i2d(cert, &bufp); + if (len != enclen) { + TEST_error("encoded length %ld of %s != input length %ld", + enclen, name, len); + err = 1; + goto next; + } + enclen = (long) (bufp - buf); + if (enclen != len) { + TEST_error("unexpected buffer position after encoding %s", name); + err = 1; + goto next; + } + if (memcmp(buf, data, len) != 0) { + TEST_error("encoded content of %s does not match input", name); + err = 1; + goto next; + } + p = buf; + reuse = d2i(&reuse, &p, enclen); + if (reuse == NULL || X509_cmp (reuse, cert)) { + TEST_error("X509_cmp does not work with %s", name); + err = 1; + goto next; + } + OPENSSL_free(buf); + buf = NULL; + + /* Test 1-pass encoding into library allocated buffer */ + enclen = i2d(cert, &buf); + if (len != enclen) { + TEST_error("encoded length %ld of %s != input length %ld", + enclen, name, len); + err = 1; + goto next; + } + if (memcmp(buf, data, len) != 0) { + TEST_error("encoded content of %s does not match input", name); + err = 1; + goto next; + } + + if (trusted) { + /* Encode just the cert and compare with initial encoding */ + OPENSSL_free(buf); + buf = NULL; + + /* Test 1-pass encoding into library allocated buffer */ + enclen = i2d(cert, &buf); + if (enclen > len) { + TEST_error("encoded length %ld of %s > input length %ld", + enclen, name, len); + err = 1; + goto next; + } + if (memcmp(buf, data, enclen) != 0) { + TEST_error("encoded cert content does not match input"); + err = 1; + goto next; + } + } + + /* + * If any of these were null, PEM_read() would have failed. + */ + next: + X509_free(cert); + OPENSSL_free(buf); + OPENSSL_free(name); + OPENSSL_free(header); + OPENSSL_free(data); + } + BIO_free(fp); + X509_free(reuse); + + if (ERR_GET_REASON(ERR_peek_last_error()) == PEM_R_NO_START_LINE) { + /* Reached end of PEM file */ + if (c > 0) { + ERR_clear_error(); + return 1; + } + } + + /* Some other PEM read error */ + return 0; +} + +int setup_tests(void) +{ + size_t n = test_get_argument_count(); + + if (n == 0) { + TEST_error("usage: %s certfile...", test_get_program_name()); + return 0; + } + + ADD_ALL_TESTS(test_certs, (int)n); + return 1; +} |