Lines Matching refs:fixture
43 static void tear_down(CMP_VFY_TEST_FIXTURE *fixture)
45 OSSL_CMP_MSG_free(fixture->msg);
46 OSSL_CMP_CTX_free(fixture->cmp_ctx);
47 OPENSSL_free(fixture);
55 CMP_VFY_TEST_FIXTURE *fixture;
57 if (!TEST_ptr(fixture = OPENSSL_zalloc(sizeof(*fixture))))
61 fixture->test_case_name = test_case_name;
63 || !TEST_ptr(fixture->cmp_ctx = OSSL_CMP_CTX_new(libctx, NULL))
64 || !OSSL_CMP_CTX_set0_trusted(fixture->cmp_ctx, ts)
65 || !OSSL_CMP_CTX_set_log_cb(fixture->cmp_ctx, print_to_bio_out)) {
66 tear_down(fixture);
72 return fixture;
100 static int execute_verify_popo_test(CMP_VFY_TEST_FIXTURE *fixture)
102 if ((fixture->msg = load_pkimsg(ir_protected_f, libctx)) == NULL)
104 if (fixture->expected == 0) {
105 const OSSL_CRMF_MSGS *reqs = fixture->msg->body->value.ir;
111 return TEST_int_eq(fixture->expected,
112 ossl_cmp_verify_popo(fixture->cmp_ctx, fixture->msg,
113 fixture->additional_arg));
119 fixture->expected = 1;
128 fixture->expected = 0;
135 static int execute_validate_msg_test(CMP_VFY_TEST_FIXTURE *fixture)
137 int res = TEST_int_eq(fixture->expected,
138 ossl_cmp_msg_check_update(fixture->cmp_ctx,
139 fixture->msg, NULL, 0));
140 X509 *validated = OSSL_CMP_CTX_get0_validatedSrvCert(fixture->cmp_ctx);
142 return res && (!fixture->expected || TEST_ptr_eq(validated, fixture->cert));
145 static int execute_validate_cert_path_test(CMP_VFY_TEST_FIXTURE *fixture)
147 X509_STORE *ts = OSSL_CMP_CTX_get0_trusted(fixture->cmp_ctx);
148 int res = TEST_int_eq(fixture->expected,
149 OSSL_CMP_validate_cert_path(fixture->cmp_ctx,
150 ts, fixture->cert));
152 OSSL_CMP_CTX_print_errors(fixture->cmp_ctx);
159 fixture->cert = NULL;
161 fixture->expected = !miss && !wrong;
162 if (!TEST_true(miss ? OSSL_CMP_CTX_set0_trusted(fixture->cmp_ctx, NULL)
163 : OSSL_CMP_CTX_set1_secretValue(fixture->cmp_ctx, sec_1,
165 || !TEST_ptr(fixture->msg = load_pkimsg(ip_waiting_f, libctx))) {
166 tear_down(fixture);
167 fixture = NULL;
197 fixture->cert = NULL;
198 fixture->expected = 0;
200 if (!TEST_true(OSSL_CMP_CTX_set1_secretValue(fixture->cmp_ctx, sec_bad,
202 || !TEST_ptr(fixture->msg = load_pkimsg(ip_waiting_f, libctx))) {
203 tear_down(fixture);
204 fixture = NULL;
227 fixture->cert = srvcert;
229 ts = OSSL_CMP_CTX_get0_trusted(fixture->cmp_ctx);
230 fixture->expected = !expired;
232 || !TEST_ptr(fixture->msg = load_pkimsg(ir_protected_f, libctx))
233 || !add_trusted(fixture->cmp_ctx, srvcert)) {
234 tear_down(fixture);
235 fixture = NULL;
262 fixture->cert = srvcert;
263 fixture->expected = !bad_sig && !wrong && !miss;
264 if (!TEST_ptr(fixture->msg = load_pkimsg(ir_protected_f, libctx))
265 || !TEST_true(miss ? OSSL_CMP_CTX_set1_secretValue(fixture->cmp_ctx,
267 : OSSL_CMP_CTX_set1_srvCert(fixture->cmp_ctx,
269 || (bad_sig && !flip_bit(fixture->msg->protection))) {
270 tear_down(fixture);
271 fixture = NULL;
304 fixture->cert = insta_cert;
305 fixture->expected = 1;
306 if (!TEST_ptr(fixture->msg = load_pkimsg(ir_protected_0_extracerts, libctx))
307 || !add_trusted(fixture->cmp_ctx, instaca_cert)
308 || !add_untrusted(fixture->cmp_ctx, insta_cert)) {
309 tear_down(fixture);
310 fixture = NULL;
319 fixture->cert = insta_cert;
320 fixture->expected = 1;
321 if (!TEST_ptr(fixture->msg = load_pkimsg(ir_protected_0_extracerts, libctx))
322 || !add_trusted(fixture->cmp_ctx, instaca_cert)
323 || !add_trusted(fixture->cmp_ctx, insta_cert)) {
324 tear_down(fixture);
325 fixture = NULL;
334 fixture->expected = 1;
335 if (!TEST_ptr(fixture->msg = load_pkimsg(ir_protected_2_extracerts, libctx))
336 || !add_trusted(fixture->cmp_ctx, instaca_cert)) {
337 tear_down(fixture);
338 fixture = NULL;
340 fixture->cert = sk_X509_value(fixture->msg->extraCerts, 1); /* Insta CA */
350 fixture->expected = 0;
351 if (!TEST_ptr(fixture->msg = load_pkimsg(ir_protected_0_extracerts, libctx))) {
352 tear_down(fixture);
353 fixture = NULL;
363 fixture->cert = srvcert;
364 fixture->expected = expected;
365 if (!TEST_ptr(fixture->msg = load_pkimsg(ir_protected_f, libctx))
366 || !TEST_true(OSSL_CMP_CTX_set1_expected_sender(fixture->cmp_ctx, name))
367 || !TEST_true(OSSL_CMP_CTX_set1_srvCert(fixture->cmp_ctx, srvcert))) {
368 tear_down(fixture);
369 fixture = NULL;
389 fixture->expected = 0;
390 if (!TEST_ptr(fixture->msg = load_pkimsg(ir_unprotected_f, libctx))) {
391 tear_down(fixture);
392 fixture = NULL;
399 static void setup_path(CMP_VFY_TEST_FIXTURE **fixture, X509 *wrong, int expired)
401 (*fixture)->cert = endentity2;
402 (*fixture)->expected = wrong == NULL && !expired;
404 X509_STORE *ts = OSSL_CMP_CTX_get0_trusted((*fixture)->cmp_ctx);
409 if (!add_trusted((*fixture)->cmp_ctx, wrong == NULL ? root : wrong)
410 || !add_untrusted((*fixture)->cmp_ctx, endentity1)
411 || !add_untrusted((*fixture)->cmp_ctx, intermediate)) {
412 tear_down((*fixture));
413 (*fixture) = NULL;
420 setup_path(&fixture, NULL, 0);
428 setup_path(&fixture, srvcert /* wrong/non-root cert */, 0);
436 setup_path(&fixture, NULL, 1);
441 static int execute_msg_check_test(CMP_VFY_TEST_FIXTURE *fixture)
443 const OSSL_CMP_PKIHEADER *hdr = OSSL_CMP_MSG_get0_header(fixture->msg);
446 if (!TEST_int_eq(fixture->expected,
447 ossl_cmp_msg_check_update(fixture->cmp_ctx,
448 fixture->msg,
449 fixture->allow_unprotected_cb,
450 fixture->additional_arg)))
453 if (fixture->expected == 0) /* error expected already during above check */
457 fixture->cmp_ctx->recipNonce))
460 fixture->cmp_ctx->transactionID));
469 static void setup_check_update(CMP_VFY_TEST_FIXTURE **fixture, int expected,
474 OSSL_CMP_CTX *ctx = (*fixture)->cmp_ctx;
477 (*fixture)->expected = expected;
478 (*fixture)->allow_unprotected_cb = cb;
479 (*fixture)->additional_arg = arg;
480 (*fixture)->msg = OSSL_CMP_MSG_dup(ir_rmprotection);
481 if ((*fixture)->msg == NULL
485 tear_down((*fixture));
486 (*fixture) = NULL;
494 tear_down((*fixture));
495 (*fixture) = NULL;
505 setup_check_update(&fixture, 0, NULL, 0, NULL, NULL);
513 setup_check_update(&fixture
522 setup_check_update(&fixture, 1, allow_unprotected, 1, NULL, NULL);
536 setup_check_update(&fixture, 1, allow_unprotected, 1, trans_id, NULL);
545 setup_check_update(&fixture, 0, allow_unprotected, 1, rand_data, NULL);
560 setup_check_update(&fixture, 1, allow_unprotected, 1, NULL, rec_nonce);
569 setup_check_update(&fixture, 0, allow_unprotected, 1, NULL, rand_data);