cmp_ctx_test.c 30 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885
  1. /*
  2. * Copyright 2007-2021 The OpenSSL Project Authors. All Rights Reserved.
  3. * Copyright Nokia 2007-2019
  4. * Copyright Siemens AG 2015-2019
  5. *
  6. * Licensed under the Apache License 2.0 (the "License"). You may not use
  7. * this file except in compliance with the License. You can obtain a copy
  8. * in the file LICENSE in the source distribution or at
  9. * https://www.openssl.org/source/license.html
  10. */
  11. #include "helpers/cmp_testlib.h"
  12. #include <openssl/x509_vfy.h>
  13. typedef struct test_fixture {
  14. const char *test_case_name;
  15. OSSL_CMP_CTX *ctx;
  16. } OSSL_CMP_CTX_TEST_FIXTURE;
  17. static void tear_down(OSSL_CMP_CTX_TEST_FIXTURE *fixture)
  18. {
  19. if (fixture != NULL)
  20. OSSL_CMP_CTX_free(fixture->ctx);
  21. OPENSSL_free(fixture);
  22. }
  23. static OSSL_CMP_CTX_TEST_FIXTURE *set_up(const char *const test_case_name)
  24. {
  25. OSSL_CMP_CTX_TEST_FIXTURE *fixture;
  26. if (!TEST_ptr(fixture = OPENSSL_zalloc(sizeof(*fixture))))
  27. return NULL;
  28. if (!TEST_ptr(fixture->ctx = OSSL_CMP_CTX_new(NULL, NULL))) {
  29. tear_down(fixture);
  30. return NULL;
  31. }
  32. fixture->test_case_name = test_case_name;
  33. return fixture;
  34. }
  35. static STACK_OF(X509) *sk_X509_new_1(void)
  36. {
  37. STACK_OF(X509) *sk = sk_X509_new_null();
  38. X509 *x = X509_new();
  39. if (x == NULL || !sk_X509_push(sk, x)) {
  40. sk_X509_free(sk);
  41. X509_free(x);
  42. sk = NULL;
  43. }
  44. return sk;
  45. }
  46. static void sk_X509_pop_X509_free(STACK_OF(X509) *sk)
  47. {
  48. OSSL_STACK_OF_X509_free(sk);
  49. }
  50. static int execute_CTX_reinit_test(OSSL_CMP_CTX_TEST_FIXTURE *fixture)
  51. {
  52. OSSL_CMP_CTX *ctx = fixture->ctx;
  53. ASN1_OCTET_STRING *bytes = NULL;
  54. STACK_OF(X509) *certs = NULL;
  55. X509 *cert = X509_new();
  56. int res = 0;
  57. /* set non-default values in all relevant fields */
  58. ctx->status = 1;
  59. ctx->failInfoCode = 1;
  60. if (!ossl_cmp_ctx_set0_statusString(ctx, sk_ASN1_UTF8STRING_new_null())
  61. || !ossl_cmp_ctx_set0_newCert(ctx, X509_new())
  62. || !TEST_ptr(certs = sk_X509_new_1())
  63. || !ossl_cmp_ctx_set1_newChain(ctx, certs)
  64. || !ossl_cmp_ctx_set1_caPubs(ctx, certs)
  65. || !ossl_cmp_ctx_set1_extraCertsIn(ctx, certs)
  66. || !ossl_cmp_ctx_set1_validatedSrvCert(ctx, cert)
  67. || !TEST_ptr(bytes = ASN1_OCTET_STRING_new())
  68. || !OSSL_CMP_CTX_set1_transactionID(ctx, bytes)
  69. || !OSSL_CMP_CTX_set1_senderNonce(ctx, bytes)
  70. || !ossl_cmp_ctx_set1_recipNonce(ctx, bytes))
  71. goto err;
  72. if (!TEST_true(OSSL_CMP_CTX_reinit(ctx)))
  73. goto err;
  74. /* check whether values have been reset to default in all relevant fields */
  75. if (!TEST_true(ctx->status == -1
  76. && ctx->failInfoCode == -1
  77. && ctx->statusString == NULL
  78. && ctx->newCert == NULL
  79. && ctx->newChain == NULL
  80. && ctx->caPubs == NULL
  81. && ctx->extraCertsIn == NULL
  82. && ctx->validatedSrvCert == NULL
  83. && ctx->transactionID == NULL
  84. && ctx->senderNonce == NULL
  85. && ctx->recipNonce == NULL))
  86. goto err;
  87. /* this does not check that all remaining fields are untouched */
  88. res = 1;
  89. err:
  90. X509_free(cert);
  91. sk_X509_pop_X509_free(certs);
  92. ASN1_OCTET_STRING_free(bytes);
  93. return res;
  94. }
  95. static int test_CTX_reinit(void)
  96. {
  97. SETUP_TEST_FIXTURE(OSSL_CMP_CTX_TEST_FIXTURE, set_up);
  98. EXECUTE_TEST(execute_CTX_reinit_test, tear_down);
  99. return result;
  100. }
  101. #if !defined(OPENSSL_NO_ERR) && !defined(OPENSSL_NO_AUTOERRINIT)
  102. static int msg_total_size = 0;
  103. static int msg_total_size_log_cb(const char *func, const char *file, int line,
  104. OSSL_CMP_severity level, const char *msg)
  105. {
  106. msg_total_size += strlen(msg);
  107. TEST_note("total=%d len=%zu msg='%s'\n", msg_total_size, strlen(msg), msg);
  108. return 1;
  109. }
  110. # define STR64 "This is a 64 bytes looooooooooooooooooooooooooooooooong string.\n"
  111. /* max string length ISO C90 compilers are required to support is 509. */
  112. # define STR509 STR64 STR64 STR64 STR64 STR64 STR64 STR64 \
  113. "This is a 61 bytes loooooooooooooooooooooooooooooong string.\n"
  114. static const char *const max_str_literal = STR509;
  115. # define STR_SEP "<SEP>"
  116. static int execute_CTX_print_errors_test(OSSL_CMP_CTX_TEST_FIXTURE *fixture)
  117. {
  118. OSSL_CMP_CTX *ctx = fixture->ctx;
  119. int base_err_msg_size, expected_size;
  120. int res = 1;
  121. if (!TEST_true(OSSL_CMP_CTX_set_log_cb(ctx, NULL)))
  122. res = 0;
  123. if (!TEST_true(ctx->log_cb == NULL))
  124. res = 0;
  125. # ifndef OPENSSL_NO_STDIO
  126. ERR_raise(ERR_LIB_CMP, CMP_R_MULTIPLE_SAN_SOURCES);
  127. OSSL_CMP_CTX_print_errors(ctx); /* should print above error to STDERR */
  128. # endif
  129. /* this should work regardless of OPENSSL_NO_STDIO and OPENSSL_NO_TRACE: */
  130. if (!TEST_true(OSSL_CMP_CTX_set_log_cb(ctx, msg_total_size_log_cb)))
  131. res = 0;
  132. if (!TEST_true(ctx->log_cb == msg_total_size_log_cb)) {
  133. res = 0;
  134. } else {
  135. ERR_raise(ERR_LIB_CMP, CMP_R_INVALID_ARGS);
  136. base_err_msg_size = strlen("INVALID_ARGS");
  137. ERR_raise(ERR_LIB_CMP, CMP_R_NULL_ARGUMENT);
  138. base_err_msg_size += strlen("NULL_ARGUMENT");
  139. expected_size = base_err_msg_size;
  140. ossl_cmp_add_error_data("data1"); /* should prepend separator ":" */
  141. expected_size += strlen(":" "data1");
  142. ossl_cmp_add_error_data("data2"); /* should prepend separator " : " */
  143. expected_size += strlen(" : " "data2");
  144. ossl_cmp_add_error_line("new line"); /* should prepend separator "\n" */
  145. expected_size += strlen("\n" "new line");
  146. OSSL_CMP_CTX_print_errors(ctx);
  147. if (!TEST_int_eq(msg_total_size, expected_size))
  148. res = 0;
  149. ERR_raise(ERR_LIB_CMP, CMP_R_INVALID_ARGS);
  150. base_err_msg_size = strlen("INVALID_ARGS") + strlen(":");
  151. expected_size = base_err_msg_size;
  152. while (expected_size < 4096) { /* force split */
  153. ERR_add_error_txt(STR_SEP, max_str_literal);
  154. expected_size += strlen(STR_SEP) + strlen(max_str_literal);
  155. }
  156. expected_size += base_err_msg_size - 2 * strlen(STR_SEP);
  157. msg_total_size = 0;
  158. OSSL_CMP_CTX_print_errors(ctx);
  159. if (!TEST_int_eq(msg_total_size, expected_size))
  160. res = 0;
  161. }
  162. return res;
  163. }
  164. static int test_CTX_print_errors(void)
  165. {
  166. SETUP_TEST_FIXTURE(OSSL_CMP_CTX_TEST_FIXTURE, set_up);
  167. EXECUTE_TEST(execute_CTX_print_errors_test, tear_down);
  168. return result;
  169. }
  170. #endif
  171. static
  172. int execute_CTX_reqExtensions_have_SAN_test(OSSL_CMP_CTX_TEST_FIXTURE *fixture)
  173. {
  174. OSSL_CMP_CTX *ctx = fixture->ctx;
  175. const int len = 16;
  176. unsigned char str[16 /* = len */];
  177. ASN1_OCTET_STRING *data = NULL;
  178. X509_EXTENSION *ext = NULL;
  179. X509_EXTENSIONS *exts = NULL;
  180. int res = 0;
  181. if (!TEST_false(OSSL_CMP_CTX_reqExtensions_have_SAN(ctx)))
  182. return 0;
  183. if (!TEST_int_eq(1, RAND_bytes(str, len))
  184. || !TEST_ptr(data = ASN1_OCTET_STRING_new())
  185. || !TEST_true(ASN1_OCTET_STRING_set(data, str, len)))
  186. goto err;
  187. ext = X509_EXTENSION_create_by_NID(NULL, NID_subject_alt_name, 0, data);
  188. if (!TEST_ptr(ext)
  189. || !TEST_ptr(exts = sk_X509_EXTENSION_new_null())
  190. || !TEST_true(sk_X509_EXTENSION_push(exts, ext))
  191. || !TEST_true(OSSL_CMP_CTX_set0_reqExtensions(ctx, exts))) {
  192. X509_EXTENSION_free(ext);
  193. sk_X509_EXTENSION_free(exts);
  194. goto err;
  195. }
  196. if (TEST_int_eq(OSSL_CMP_CTX_reqExtensions_have_SAN(ctx), 1)) {
  197. ext = sk_X509_EXTENSION_pop(exts);
  198. res = TEST_false(OSSL_CMP_CTX_reqExtensions_have_SAN(ctx));
  199. X509_EXTENSION_free(ext);
  200. }
  201. err:
  202. ASN1_OCTET_STRING_free(data);
  203. return res;
  204. }
  205. static int test_CTX_reqExtensions_have_SAN(void)
  206. {
  207. SETUP_TEST_FIXTURE(OSSL_CMP_CTX_TEST_FIXTURE, set_up);
  208. EXECUTE_TEST(execute_CTX_reqExtensions_have_SAN_test, tear_down);
  209. return result;
  210. }
  211. static int test_log_line;
  212. static int test_log_cb_res = 0;
  213. static int test_log_cb(const char *func, const char *file, int line,
  214. OSSL_CMP_severity level, const char *msg)
  215. {
  216. test_log_cb_res =
  217. #ifndef PEDANTIC
  218. (TEST_str_eq(func, "execute_cmp_ctx_log_cb_test")
  219. || TEST_str_eq(func, "(unknown function)")) &&
  220. #endif
  221. (TEST_str_eq(file, OPENSSL_FILE)
  222. || TEST_str_eq(file, "(no file)"))
  223. && (TEST_int_eq(line, test_log_line) || TEST_int_eq(line, 0))
  224. && (TEST_int_eq(level, OSSL_CMP_LOG_INFO) || TEST_int_eq(level, -1))
  225. && TEST_str_eq(msg, "ok");
  226. return 1;
  227. }
  228. static int execute_cmp_ctx_log_cb_test(OSSL_CMP_CTX_TEST_FIXTURE *fixture)
  229. {
  230. int res = 1;
  231. OSSL_CMP_CTX *ctx = fixture->ctx;
  232. OSSL_TRACE(ALL, "this general trace message is not shown by default\n");
  233. OSSL_CMP_log_open();
  234. OSSL_CMP_log_open(); /* multiple calls should be harmless */
  235. if (!TEST_true(OSSL_CMP_CTX_set_log_cb(ctx, NULL))) {
  236. res = 0;
  237. } else {
  238. ossl_cmp_err(ctx, "this should be printed as CMP error message");
  239. ossl_cmp_warn(ctx, "this should be printed as CMP warning message");
  240. ossl_cmp_debug(ctx, "this should not be printed");
  241. TEST_true(OSSL_CMP_CTX_set_log_verbosity(ctx, OSSL_CMP_LOG_DEBUG));
  242. ossl_cmp_debug(ctx, "this should be printed as CMP debug message");
  243. TEST_true(OSSL_CMP_CTX_set_log_verbosity(ctx, OSSL_CMP_LOG_INFO));
  244. }
  245. if (!TEST_true(OSSL_CMP_CTX_set_log_cb(ctx, test_log_cb))) {
  246. res = 0;
  247. } else {
  248. test_log_line = OPENSSL_LINE + 1;
  249. ossl_cmp_log2(INFO, ctx, "%s%c", "o", 'k');
  250. if (!TEST_int_eq(test_log_cb_res, 1))
  251. res = 0;
  252. OSSL_CMP_CTX_set_log_verbosity(ctx, OSSL_CMP_LOG_ERR);
  253. test_log_cb_res = -1; /* callback should not be called at all */
  254. test_log_line = OPENSSL_LINE + 1;
  255. ossl_cmp_log2(INFO, ctx, "%s%c", "o", 'k');
  256. if (!TEST_int_eq(test_log_cb_res, -1))
  257. res = 0;
  258. }
  259. OSSL_CMP_log_close();
  260. OSSL_CMP_log_close(); /* multiple calls should be harmless */
  261. return res;
  262. }
  263. static int test_cmp_ctx_log_cb(void)
  264. {
  265. SETUP_TEST_FIXTURE(OSSL_CMP_CTX_TEST_FIXTURE, set_up);
  266. EXECUTE_TEST(execute_cmp_ctx_log_cb_test, tear_down);
  267. return result;
  268. }
  269. static BIO *test_http_cb(BIO *bio, void *arg, int use_ssl, int detail)
  270. {
  271. return NULL;
  272. }
  273. static OSSL_CMP_MSG *test_transfer_cb(OSSL_CMP_CTX *ctx,
  274. const OSSL_CMP_MSG *req)
  275. {
  276. return NULL;
  277. }
  278. static int test_certConf_cb(OSSL_CMP_CTX *ctx, X509 *cert, int fail_info,
  279. const char **txt)
  280. {
  281. return 0;
  282. }
  283. typedef OSSL_CMP_CTX CMP_CTX; /* prevents rewriting type name by below macro */
  284. #define OSSL_CMP_CTX 1 /* name prefix for exported setter functions */
  285. #define ossl_cmp_ctx 0 /* name prefix for internal setter functions */
  286. #define set 0
  287. #define set0 0
  288. #define set1 1
  289. #define get 0
  290. #define get0 0
  291. #define get1 1
  292. #define DEFINE_SET_GET_BASE_TEST(PREFIX, SETN, GETN, DUP, FIELD, TYPE, ERR, \
  293. DEFAULT, NEW, FREE) \
  294. static int \
  295. execute_CTX_##SETN##_##GETN##_##FIELD(OSSL_CMP_CTX_TEST_FIXTURE *fixture) \
  296. { \
  297. CMP_CTX *ctx = fixture->ctx; \
  298. int (*set_fn)(CMP_CTX *ctx, TYPE) = \
  299. (int (*)(CMP_CTX *ctx, TYPE))PREFIX##_##SETN##_##FIELD; \
  300. /* need type cast in above assignment as TYPE arg sometimes is const */ \
  301. TYPE (*get_fn)(const CMP_CTX *ctx) = OSSL_CMP_CTX_##GETN##_##FIELD; \
  302. TYPE val1_to_free = NEW; \
  303. TYPE val1 = val1_to_free; \
  304. TYPE val1_read = 0; /* 0 works for any type */ \
  305. TYPE val2_to_free = NEW; \
  306. TYPE val2 = val2_to_free; \
  307. TYPE val2_read = 0; \
  308. TYPE val3_read = 0; \
  309. int res = 1; \
  310. \
  311. if (!TEST_int_eq(ERR_peek_error(), 0)) \
  312. res = 0; \
  313. if (PREFIX == 1) { /* exported setter functions must test ctx == NULL */ \
  314. if ((*set_fn)(NULL, val1) || ERR_peek_error() == 0) { \
  315. TEST_error("setter did not return error on ctx == NULL"); \
  316. res = 0; \
  317. } \
  318. } \
  319. ERR_clear_error(); \
  320. \
  321. if ((*get_fn)(NULL) != ERR || ERR_peek_error() == 0) { \
  322. TEST_error("getter did not return error on ctx == NULL"); \
  323. res = 0; \
  324. } \
  325. ERR_clear_error(); \
  326. \
  327. val1_read = (*get_fn)(ctx); \
  328. if (!DEFAULT(val1_read)) { \
  329. TEST_error("did not get default value"); \
  330. res = 0; \
  331. } \
  332. if (!(*set_fn)(ctx, val1)) { \
  333. TEST_error("setting first value failed"); \
  334. res = 0; \
  335. } \
  336. if (SETN == 0) \
  337. val1_to_free = 0; /* 0 works for any type */ \
  338. \
  339. if (GETN == 1) \
  340. FREE(val1_read); \
  341. val1_read = (*get_fn)(ctx); \
  342. if (SETN == 0) { \
  343. if (val1_read != val1) { \
  344. TEST_error("set/get first value did not match"); \
  345. res = 0; \
  346. } \
  347. } else { \
  348. if (DUP && val1_read == val1) { \
  349. TEST_error("first set did not dup the value"); \
  350. res = 0; \
  351. } \
  352. if (DEFAULT(val1_read)) { \
  353. TEST_error("first set had no effect"); \
  354. res = 0; \
  355. } \
  356. } \
  357. \
  358. if (!(*set_fn)(ctx, val2)) { \
  359. TEST_error("setting second value failed"); \
  360. res = 0; \
  361. } \
  362. if (SETN == 0) \
  363. val2_to_free = 0; \
  364. \
  365. val2_read = (*get_fn)(ctx); \
  366. if (DEFAULT(val2_read)) { \
  367. TEST_error("second set reset the value"); \
  368. res = 0; \
  369. } \
  370. if (SETN == 0 && GETN == 0) { \
  371. if (val2_read != val2) { \
  372. TEST_error("set/get second value did not match"); \
  373. res = 0; \
  374. } \
  375. } else { \
  376. if (DUP && val2_read == val2) { \
  377. TEST_error("second set did not dup the value"); \
  378. res = 0; \
  379. } \
  380. if (val2 == val1) { \
  381. TEST_error("second value is same as first value"); \
  382. res = 0; \
  383. } \
  384. if (GETN == 1 && val2_read == val1_read) { \
  385. /* \
  386. * Note that if GETN == 0 then possibly val2_read == val1_read \
  387. * because set1 may allocate the new copy at the same location. \
  388. */ \
  389. TEST_error("second get returned same as first get"); \
  390. res = 0; \
  391. } \
  392. } \
  393. \
  394. val3_read = (*get_fn)(ctx); \
  395. if (DEFAULT(val3_read)) { \
  396. TEST_error("third set reset the value"); \
  397. res = 0; \
  398. } \
  399. if (GETN == 0) { \
  400. if (val3_read != val2_read) { \
  401. TEST_error("third get gave different value"); \
  402. res = 0; \
  403. } \
  404. } else { \
  405. if (DUP && val3_read == val2_read) { \
  406. TEST_error("third get did not create a new dup"); \
  407. res = 0; \
  408. } \
  409. } \
  410. /* this does not check that all remaining fields are untouched */ \
  411. \
  412. if (!TEST_int_eq(ERR_peek_error(), 0)) \
  413. res = 0; \
  414. \
  415. FREE(val1_to_free); \
  416. FREE(val2_to_free); \
  417. if (GETN == 1) { \
  418. FREE(val1_read); \
  419. FREE(val2_read); \
  420. FREE(val3_read); \
  421. } \
  422. return TEST_true(res); \
  423. } \
  424. \
  425. static int test_CTX_##SETN##_##GETN##_##FIELD(void) \
  426. { \
  427. SETUP_TEST_FIXTURE(OSSL_CMP_CTX_TEST_FIXTURE, set_up); \
  428. EXECUTE_TEST(execute_CTX_##SETN##_##GETN##_##FIELD, tear_down); \
  429. return result; \
  430. }
  431. static char *char_new(void)
  432. {
  433. return OPENSSL_strdup("test");
  434. }
  435. static void char_free(char *val)
  436. {
  437. OPENSSL_free(val);
  438. }
  439. #define EMPTY_SK_X509(x) ((x) == NULL || sk_X509_num(x) == 0)
  440. static X509_STORE *X509_STORE_new_1(void)
  441. {
  442. X509_STORE *store = X509_STORE_new();
  443. if (store != NULL)
  444. X509_VERIFY_PARAM_set_flags(X509_STORE_get0_param(store), 1);
  445. return store;
  446. }
  447. #define DEFAULT_STORE(x) \
  448. ((x) == NULL || X509_VERIFY_PARAM_get_flags(X509_STORE_get0_param(x)) == 0)
  449. #define IS_NEG(x) ((x) < 0)
  450. #define IS_0(x) ((x) == 0) /* for any type */
  451. #define DROP(x) (void)(x) /* dummy free() for non-pointer and function types */
  452. #define RET_IF_NULL_ARG(ctx, ret) \
  453. if (ctx == NULL) { \
  454. ERR_raise(ERR_LIB_CMP, CMP_R_NULL_ARGUMENT); \
  455. return ret; \
  456. }
  457. /* cannot use PREFIX instead of OSSL_CMP and CTX due to #define OSSL_CMP_CTX */
  458. #define DEFINE_SET_GET_TEST(OSSL_CMP, CTX, N, M, DUP, FIELD, TYPE) \
  459. DEFINE_SET_GET_BASE_TEST(OSSL_CMP##_##CTX, set##N, get##M, DUP, FIELD, \
  460. TYPE *, NULL, IS_0, TYPE##_new(), TYPE##_free)
  461. #define DEFINE_SET_GET_SK_TEST_DEFAULT(OSSL_CMP, CTX, N, M, FIELD, ELEM_TYPE, \
  462. DEFAULT, NEW, FREE) \
  463. DEFINE_SET_GET_BASE_TEST(OSSL_CMP##_##CTX, set##N, get##M, 1, FIELD, \
  464. STACK_OF(ELEM_TYPE)*, NULL, DEFAULT, NEW, FREE)
  465. #define DEFINE_SET_GET_SK_TEST(OSSL_CMP, CTX, N, M, FIELD, T) \
  466. DEFINE_SET_GET_SK_TEST_DEFAULT(OSSL_CMP, CTX, N, M, FIELD, T, \
  467. IS_0, sk_##T##_new_null(), sk_##T##_free)
  468. #define DEFINE_SET_GET_SK_X509_TEST(OSSL_CMP, CTX, N, M, FNAME) \
  469. DEFINE_SET_GET_SK_TEST_DEFAULT(OSSL_CMP, CTX, N, M, FNAME, X509, \
  470. EMPTY_SK_X509, \
  471. sk_X509_new_1(), sk_X509_pop_X509_free)
  472. #define DEFINE_SET_GET_TEST_DEFAULT(OSSL_CMP, CTX, N, M, DUP, FIELD, TYPE, \
  473. DEFAULT) \
  474. DEFINE_SET_GET_BASE_TEST(OSSL_CMP##_##CTX, set##N, get##M, DUP, FIELD, \
  475. TYPE *, NULL, DEFAULT, TYPE##_new(), TYPE##_free)
  476. #define DEFINE_SET_TEST_DEFAULT(OSSL_CMP, CTX, N, DUP, FIELD, TYPE, DEFAULT) \
  477. static TYPE *OSSL_CMP_CTX_get0_##FIELD(const CMP_CTX *ctx) \
  478. { \
  479. RET_IF_NULL_ARG(ctx, NULL); \
  480. return (TYPE *)ctx->FIELD; \
  481. } \
  482. DEFINE_SET_GET_TEST_DEFAULT(OSSL_CMP, CTX, N, 0, DUP, FIELD, TYPE, DEFAULT)
  483. #define DEFINE_SET_TEST(OSSL_CMP, CTX, N, DUP, FIELD, TYPE) \
  484. DEFINE_SET_TEST_DEFAULT(OSSL_CMP, CTX, N, DUP, FIELD, TYPE, IS_0)
  485. #define DEFINE_SET_SK_TEST(OSSL_CMP, CTX, N, FIELD, TYPE) \
  486. static STACK_OF(TYPE) *OSSL_CMP_CTX_get0_##FIELD(const CMP_CTX *ctx) \
  487. { \
  488. RET_IF_NULL_ARG(ctx, NULL); \
  489. return ctx->FIELD; \
  490. } \
  491. DEFINE_SET_GET_BASE_TEST(OSSL_CMP##_##CTX, set##N, get0, 1, FIELD, \
  492. STACK_OF(TYPE)*, NULL, IS_0, \
  493. sk_##TYPE##_new_null(), sk_##TYPE##_free)
  494. typedef OSSL_HTTP_bio_cb_t OSSL_CMP_http_cb_t;
  495. #define DEFINE_SET_CB_TEST(FIELD) \
  496. static OSSL_CMP_##FIELD##_t OSSL_CMP_CTX_get_##FIELD(const CMP_CTX *ctx) \
  497. { \
  498. RET_IF_NULL_ARG(ctx, NULL); \
  499. return ctx->FIELD; \
  500. } \
  501. DEFINE_SET_GET_BASE_TEST(OSSL_CMP_CTX, set, get, 0, FIELD, \
  502. OSSL_CMP_##FIELD##_t, NULL, IS_0, \
  503. test_##FIELD, DROP)
  504. #define DEFINE_SET_GET_P_VOID_TEST(FIELD) \
  505. DEFINE_SET_GET_BASE_TEST(OSSL_CMP_CTX, set, get, 0, FIELD, void *, \
  506. NULL, IS_0, ((void *)1), DROP)
  507. #define DEFINE_SET_GET_INT_TEST_DEFAULT(OSSL_CMP, CTX, FIELD, DEFAULT) \
  508. DEFINE_SET_GET_BASE_TEST(OSSL_CMP##_##CTX, set, get, 0, FIELD, int, -1, \
  509. DEFAULT, 1, DROP)
  510. #define DEFINE_SET_GET_INT_TEST(OSSL_CMP, CTX, FIELD) \
  511. DEFINE_SET_GET_INT_TEST_DEFAULT(OSSL_CMP, CTX, FIELD, IS_NEG)
  512. #define DEFINE_SET_INT_TEST(FIELD) \
  513. static int OSSL_CMP_CTX_get_##FIELD(const CMP_CTX *ctx) \
  514. { \
  515. RET_IF_NULL_ARG(ctx, -1); \
  516. return ctx->FIELD; \
  517. } \
  518. DEFINE_SET_GET_INT_TEST_DEFAULT(OSSL_CMP, CTX, FIELD, IS_0)
  519. #define DEFINE_SET_GET_ARG_FN(SETN, GETN, FIELD, ARG, T) \
  520. static int OSSL_CMP_CTX_##SETN##_##FIELD##_##ARG(CMP_CTX *ctx, T val) \
  521. { \
  522. return OSSL_CMP_CTX_##SETN##_##FIELD(ctx, ARG, val); \
  523. } \
  524. \
  525. static T OSSL_CMP_CTX_##GETN##_##FIELD##_##ARG(const CMP_CTX *ctx) \
  526. { \
  527. return OSSL_CMP_CTX_##GETN##_##FIELD(ctx, ARG); \
  528. }
  529. #define DEFINE_SET_GET1_STR_FN(SETN, FIELD) \
  530. static int OSSL_CMP_CTX_##SETN##_##FIELD##_str(CMP_CTX *ctx, char *val)\
  531. { \
  532. return OSSL_CMP_CTX_##SETN##_##FIELD(ctx, (unsigned char *)val, \
  533. strlen(val)); \
  534. } \
  535. \
  536. static char *OSSL_CMP_CTX_get1_##FIELD##_str(const CMP_CTX *ctx) \
  537. { \
  538. const ASN1_OCTET_STRING *bytes = NULL; \
  539. \
  540. RET_IF_NULL_ARG(ctx, NULL); \
  541. bytes = ctx->FIELD; \
  542. return bytes == NULL ? NULL : \
  543. OPENSSL_strndup((char *)bytes->data, bytes->length); \
  544. }
  545. #define push 0
  546. #define push0 0
  547. #define push1 1
  548. #define DEFINE_PUSH_BASE_TEST(PUSHN, DUP, FIELD, ELEM, TYPE, T, \
  549. DEFAULT, NEW, FREE) \
  550. static TYPE sk_top_##FIELD(const CMP_CTX *ctx) \
  551. { \
  552. return sk_##T##_value(ctx->FIELD, sk_##T##_num(ctx->FIELD) - 1); \
  553. } \
  554. \
  555. static int execute_CTX_##PUSHN##_##ELEM(OSSL_CMP_CTX_TEST_FIXTURE *fixture) \
  556. { \
  557. CMP_CTX *ctx = fixture->ctx; \
  558. int (*push_fn)(CMP_CTX *ctx, TYPE) = \
  559. (int (*)(CMP_CTX *ctx, TYPE))OSSL_CMP_CTX_##PUSHN##_##ELEM; \
  560. /* \
  561. * need type cast in above assignment because TYPE arg sometimes is const \
  562. */ \
  563. int n_elem = sk_##T##_num(ctx->FIELD); \
  564. STACK_OF(TYPE) field_read; \
  565. TYPE val1_to_free = NEW; \
  566. TYPE val1 = val1_to_free; \
  567. TYPE val1_read = 0; /* 0 works for any type */ \
  568. TYPE val2_to_free = NEW; \
  569. TYPE val2 = val2_to_free; \
  570. TYPE val2_read = 0; \
  571. int res = 1; \
  572. \
  573. if (!TEST_int_eq(ERR_peek_error(), 0)) \
  574. res = 0; \
  575. if ((*push_fn)(NULL, val1) || ERR_peek_error() == 0) { \
  576. TEST_error("pusher did not return error on ctx == NULL"); \
  577. res = 0; \
  578. } \
  579. ERR_clear_error(); \
  580. \
  581. if (n_elem < 0) /* can happen for NULL stack */ \
  582. n_elem = 0; \
  583. field_read = ctx->FIELD; \
  584. if (!DEFAULT(field_read)) { \
  585. TEST_error("did not get default value for stack field"); \
  586. res = 0; \
  587. } \
  588. if (!(*push_fn)(ctx, val1)) { \
  589. TEST_error("pushing first value failed"); \
  590. res = 0; \
  591. } \
  592. if (PUSHN == 0) \
  593. val1_to_free = 0; /* 0 works for any type */ \
  594. \
  595. if (sk_##T##_num(ctx->FIELD) != ++n_elem) { \
  596. TEST_error("pushing first value did not increment number"); \
  597. res = 0; \
  598. } \
  599. val1_read = sk_top_##FIELD(ctx); \
  600. if (PUSHN == 0) { \
  601. if (val1_read != val1) { \
  602. TEST_error("push/sk_top first value did not match"); \
  603. res = 0; \
  604. } \
  605. } else { \
  606. if (DUP && val1_read == val1) { \
  607. TEST_error("first push did not dup the value"); \
  608. res = 0; \
  609. } \
  610. } \
  611. \
  612. if (!(*push_fn)(ctx, val2)) { \
  613. TEST_error("pushing second value failed"); \
  614. res = 0; \
  615. } \
  616. if (PUSHN == 0) \
  617. val2_to_free = 0; \
  618. \
  619. if (sk_##T##_num(ctx->FIELD) != ++n_elem) { \
  620. TEST_error("pushing second value did not increment number"); \
  621. res = 0; \
  622. } \
  623. val2_read = sk_top_##FIELD(ctx); \
  624. if (PUSHN == 0) { \
  625. if (val2_read != val2) { \
  626. TEST_error("push/sk_top second value did not match"); \
  627. res = 0; \
  628. } \
  629. } else { \
  630. if (DUP && val2_read == val2) { \
  631. TEST_error("second push did not dup the value"); \
  632. res = 0; \
  633. } \
  634. if (val2 == val1) { \
  635. TEST_error("second value is same as first value"); \
  636. res = 0; \
  637. } \
  638. } \
  639. /* this does not check if all remaining fields and elems are untouched */ \
  640. \
  641. if (!TEST_int_eq(ERR_peek_error(), 0)) \
  642. res = 0; \
  643. \
  644. FREE(val1_to_free); \
  645. FREE(val2_to_free); \
  646. return TEST_true(res); \
  647. } \
  648. \
  649. static int test_CTX_##PUSHN##_##ELEM(void) \
  650. { \
  651. SETUP_TEST_FIXTURE(OSSL_CMP_CTX_TEST_FIXTURE, set_up); \
  652. EXECUTE_TEST(execute_CTX_##PUSHN##_##ELEM, tear_down); \
  653. return result; \
  654. } \
  655. #define DEFINE_PUSH_TEST(N, DUP, FIELD, ELEM, TYPE) \
  656. DEFINE_PUSH_BASE_TEST(push##N, DUP, FIELD, ELEM, TYPE *, TYPE, \
  657. IS_0, TYPE##_new(), TYPE##_free)
  658. void cleanup_tests(void)
  659. {
  660. return;
  661. }
  662. DEFINE_SET_GET_ARG_FN(set, get, option, 35, int) /* OPT_IGNORE_KEYUSAGE */
  663. DEFINE_SET_GET_BASE_TEST(OSSL_CMP_CTX, set, get, 0, option_35, int, -1, IS_0, \
  664. 1 /* true */, DROP)
  665. DEFINE_SET_CB_TEST(log_cb)
  666. DEFINE_SET_TEST_DEFAULT(OSSL_CMP, CTX, 1, 1, serverPath, char, IS_0)
  667. DEFINE_SET_TEST(OSSL_CMP, CTX, 1, 1, server, char)
  668. DEFINE_SET_INT_TEST(serverPort)
  669. DEFINE_SET_TEST(OSSL_CMP, CTX, 1, 1, proxy, char)
  670. DEFINE_SET_TEST(OSSL_CMP, CTX, 1, 1, no_proxy, char)
  671. DEFINE_SET_CB_TEST(http_cb)
  672. DEFINE_SET_GET_P_VOID_TEST(http_cb_arg)
  673. DEFINE_SET_CB_TEST(transfer_cb)
  674. DEFINE_SET_GET_P_VOID_TEST(transfer_cb_arg)
  675. DEFINE_SET_TEST(OSSL_CMP, CTX, 1, 0, srvCert, X509)
  676. DEFINE_SET_GET_TEST(ossl_cmp, ctx, 1, 0, 0, validatedSrvCert, X509)
  677. DEFINE_SET_TEST(OSSL_CMP, CTX, 1, 1, expected_sender, X509_NAME)
  678. DEFINE_SET_GET_BASE_TEST(OSSL_CMP_CTX, set0, get0, 0, trusted,
  679. X509_STORE *, NULL,
  680. DEFAULT_STORE, X509_STORE_new_1(), X509_STORE_free)
  681. DEFINE_SET_GET_SK_X509_TEST(OSSL_CMP, CTX, 1, 0, untrusted)
  682. DEFINE_SET_TEST(OSSL_CMP, CTX, 1, 0, cert, X509)
  683. DEFINE_SET_TEST(OSSL_CMP, CTX, 1, 0, pkey, EVP_PKEY)
  684. DEFINE_SET_TEST(OSSL_CMP, CTX, 1, 1, recipient, X509_NAME)
  685. DEFINE_PUSH_TEST(0, 0, geninfo_ITAVs, geninfo_ITAV, OSSL_CMP_ITAV)
  686. DEFINE_SET_SK_TEST(OSSL_CMP, CTX, 1, extraCertsOut, X509)
  687. DEFINE_SET_GET_ARG_FN(set0, get0, newPkey, 1, EVP_PKEY *) /* priv == 1 */
  688. DEFINE_SET_GET_TEST(OSSL_CMP, CTX, 0, 0, 0, newPkey_1, EVP_PKEY)
  689. DEFINE_SET_GET_ARG_FN(set0, get0, newPkey, 0, EVP_PKEY *) /* priv == 0 */
  690. DEFINE_SET_GET_TEST(OSSL_CMP, CTX, 0, 0, 0, newPkey_0, EVP_PKEY)
  691. DEFINE_SET_GET1_STR_FN(set1, referenceValue)
  692. DEFINE_SET_GET_TEST_DEFAULT(OSSL_CMP, CTX, 1, 1, 1, referenceValue_str, char,
  693. IS_0)
  694. DEFINE_SET_GET1_STR_FN(set1, secretValue)
  695. DEFINE_SET_GET_TEST_DEFAULT(OSSL_CMP, CTX, 1, 1, 1, secretValue_str, char, IS_0)
  696. DEFINE_SET_TEST(OSSL_CMP, CTX, 1, 1, issuer, X509_NAME)
  697. DEFINE_SET_TEST(OSSL_CMP, CTX, 1, 1, subjectName, X509_NAME)
  698. #ifdef ISSUE_9504_RESOLVED
  699. DEFINE_PUSH_TEST(1, 1, subjectAltNames, subjectAltName, GENERAL_NAME)
  700. #endif
  701. DEFINE_SET_SK_TEST(OSSL_CMP, CTX, 0, reqExtensions, X509_EXTENSION)
  702. DEFINE_PUSH_TEST(0, 0, policies, policy, POLICYINFO)
  703. DEFINE_SET_TEST(OSSL_CMP, CTX, 1, 0, oldCert, X509)
  704. #ifdef ISSUE_9504_RESOLVED
  705. DEFINE_SET_TEST(OSSL_CMP, CTX, 1, 1, p10CSR, X509_REQ)
  706. #endif
  707. DEFINE_PUSH_TEST(0, 0, genm_ITAVs, genm_ITAV, OSSL_CMP_ITAV)
  708. DEFINE_SET_CB_TEST(certConf_cb)
  709. DEFINE_SET_GET_P_VOID_TEST(certConf_cb_arg)
  710. DEFINE_SET_GET_INT_TEST(ossl_cmp, ctx, status)
  711. DEFINE_SET_GET_SK_TEST(ossl_cmp, ctx, 0, 0, statusString, ASN1_UTF8STRING)
  712. DEFINE_SET_GET_INT_TEST(ossl_cmp, ctx, failInfoCode)
  713. DEFINE_SET_GET_TEST(ossl_cmp, ctx, 0, 0, 0, newCert, X509)
  714. DEFINE_SET_GET_SK_X509_TEST(ossl_cmp, ctx, 1, 1, newChain)
  715. DEFINE_SET_GET_SK_X509_TEST(ossl_cmp, ctx, 1, 1, caPubs)
  716. DEFINE_SET_GET_SK_X509_TEST(ossl_cmp, ctx, 1, 1, extraCertsIn)
  717. DEFINE_SET_TEST_DEFAULT(OSSL_CMP, CTX, 1, 1, transactionID, ASN1_OCTET_STRING,
  718. IS_0)
  719. DEFINE_SET_TEST(OSSL_CMP, CTX, 1, 1, senderNonce, ASN1_OCTET_STRING)
  720. DEFINE_SET_TEST(ossl_cmp, ctx, 1, 1, recipNonce, ASN1_OCTET_STRING)
  721. int setup_tests(void)
  722. {
  723. if (!test_skip_common_options()) {
  724. TEST_error("Error parsing test options\n");
  725. return 0;
  726. }
  727. /* OSSL_CMP_CTX_new() is tested by set_up() */
  728. /* OSSL_CMP_CTX_free() is tested by tear_down() */
  729. ADD_TEST(test_CTX_reinit);
  730. /* various CMP options: */
  731. ADD_TEST(test_CTX_set_get_option_35);
  732. /* CMP-specific callback for logging and outputting the error queue: */
  733. ADD_TEST(test_CTX_set_get_log_cb);
  734. /*
  735. * also tests OSSL_CMP_log_open(), OSSL_CMP_CTX_set_log_verbosity(),
  736. * ossl_cmp_err(), ossl_cmp_warn(), * ossl_cmp_debug(),
  737. * ossl_cmp_log2(), ossl_cmp_log_parse_metadata(), and OSSL_CMP_log_close()
  738. * with OSSL_CMP_severity OSSL_CMP_LOG_ERR/WARNING/DEBUG/INFO:
  739. */
  740. ADD_TEST(test_cmp_ctx_log_cb);
  741. #if !defined(OPENSSL_NO_ERR) && !defined(OPENSSL_NO_AUTOERRINIT)
  742. /*
  743. * also tests OSSL_CMP_CTX_set_log_cb(), OSSL_CMP_print_errors_cb(),
  744. * and the macros ossl_cmp_add_error_data and ossl_cmp_add_error_line:
  745. */
  746. ADD_TEST(test_CTX_print_errors);
  747. #endif
  748. /* message transfer: */
  749. ADD_TEST(test_CTX_set1_get0_serverPath);
  750. ADD_TEST(test_CTX_set1_get0_server);
  751. ADD_TEST(test_CTX_set_get_serverPort);
  752. ADD_TEST(test_CTX_set1_get0_proxy);
  753. ADD_TEST(test_CTX_set1_get0_no_proxy);
  754. ADD_TEST(test_CTX_set_get_http_cb);
  755. ADD_TEST(test_CTX_set_get_http_cb_arg);
  756. ADD_TEST(test_CTX_set_get_transfer_cb);
  757. ADD_TEST(test_CTX_set_get_transfer_cb_arg);
  758. /* server authentication: */
  759. ADD_TEST(test_CTX_set1_get0_srvCert);
  760. ADD_TEST(test_CTX_set1_get0_validatedSrvCert);
  761. ADD_TEST(test_CTX_set1_get0_expected_sender);
  762. ADD_TEST(test_CTX_set0_get0_trusted);
  763. ADD_TEST(test_CTX_set1_get0_untrusted);
  764. /* client authentication: */
  765. ADD_TEST(test_CTX_set1_get0_cert);
  766. ADD_TEST(test_CTX_set1_get0_pkey);
  767. /* the following two also test ossl_cmp_asn1_octet_string_set1_bytes(): */
  768. ADD_TEST(test_CTX_set1_get1_referenceValue_str);
  769. ADD_TEST(test_CTX_set1_get1_secretValue_str);
  770. /* CMP message header and extra certificates: */
  771. ADD_TEST(test_CTX_set1_get0_recipient);
  772. ADD_TEST(test_CTX_push0_geninfo_ITAV);
  773. ADD_TEST(test_CTX_set1_get0_extraCertsOut);
  774. /* certificate template: */
  775. ADD_TEST(test_CTX_set0_get0_newPkey_1);
  776. ADD_TEST(test_CTX_set0_get0_newPkey_0);
  777. ADD_TEST(test_CTX_set1_get0_issuer);
  778. ADD_TEST(test_CTX_set1_get0_subjectName);
  779. #ifdef ISSUE_9504_RESOLVED
  780. /*
  781. * test currently fails, see https://github.com/openssl/openssl/issues/9504
  782. */
  783. ADD_TEST(test_CTX_push1_subjectAltName);
  784. #endif
  785. ADD_TEST(test_CTX_set0_get0_reqExtensions);
  786. ADD_TEST(test_CTX_reqExtensions_have_SAN);
  787. ADD_TEST(test_CTX_push0_policy);
  788. ADD_TEST(test_CTX_set1_get0_oldCert);
  789. #ifdef ISSUE_9504_RESOLVED
  790. /*
  791. * test currently fails, see https://github.com/openssl/openssl/issues/9504
  792. */
  793. ADD_TEST(test_CTX_set1_get0_p10CSR);
  794. #endif
  795. /* misc body contents: */
  796. ADD_TEST(test_CTX_push0_genm_ITAV);
  797. /* certificate confirmation: */
  798. ADD_TEST(test_CTX_set_get_certConf_cb);
  799. ADD_TEST(test_CTX_set_get_certConf_cb_arg);
  800. /* result fetching: */
  801. ADD_TEST(test_CTX_set_get_status);
  802. ADD_TEST(test_CTX_set0_get0_statusString);
  803. ADD_TEST(test_CTX_set_get_failInfoCode);
  804. ADD_TEST(test_CTX_set0_get0_newCert);
  805. ADD_TEST(test_CTX_set1_get1_newChain);
  806. ADD_TEST(test_CTX_set1_get1_caPubs);
  807. ADD_TEST(test_CTX_set1_get1_extraCertsIn);
  808. /* exported for testing and debugging purposes: */
  809. /* the following three also test ossl_cmp_asn1_octet_string_set1(): */
  810. ADD_TEST(test_CTX_set1_get0_transactionID);
  811. ADD_TEST(test_CTX_set1_get0_senderNonce);
  812. ADD_TEST(test_CTX_set1_get0_recipNonce);
  813. return 1;
  814. }