2
0

60-test_x509_store.t 1.8 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253
  1. #! /usr/bin/env perl
  2. # Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
  3. #
  4. # Licensed under the Apache License 2.0 (the "License"). You may not use
  5. # this file except in compliance with the License. You can obtain a copy
  6. # in the file LICENSE in the source distribution or at
  7. # https://www.openssl.org/source/license.html
  8. use strict;
  9. use warnings;
  10. use File::Copy;
  11. use File::Spec::Functions qw/:DEFAULT canonpath/;
  12. use OpenSSL::Test qw/:DEFAULT srctop_file/;
  13. setup("test_x509_store");
  14. #If "openssl rehash -help" fails it's most likely because we're on a platform
  15. #that doesn't support the rehash command (e.g. Windows)
  16. plan skip_all => "test_rehash is not available on this platform"
  17. unless run(app(["openssl", "rehash", "-help"]));
  18. # We use 'openssl verify' for these tests, as it contains everything
  19. # we need to conduct these tests. The tests here are a subset of the
  20. # ones found in 25-test_verify.t
  21. sub verify {
  22. my ($cert, $purpose, $trustedpath, $untrusted, @opts) = @_;
  23. my @args = qw(openssl verify -auth_level 1 -purpose);
  24. my @path = qw(test certs);
  25. push(@args, "$purpose", @opts);
  26. push(@args, "-CApath", $trustedpath);
  27. for (@$untrusted) { push(@args, "-untrusted", srctop_file(@path, "$_.pem")) }
  28. push(@args, srctop_file(@path, "$cert.pem"));
  29. run(app([@args]));
  30. }
  31. plan tests => 3;
  32. indir "60-test_x509_store" => sub {
  33. for (("root-cert")) {
  34. copy(srctop_file("test", "certs", "$_.pem"), curdir());
  35. }
  36. ok(run(app([qw(openssl rehash), curdir()])), "Rehashing");
  37. # Canonical success
  38. ok(verify("ee-cert", "sslserver", curdir(), ["ca-cert"], "-show_chain"),
  39. "verify ee-cert");
  40. # Failure because root cert not present in CApath
  41. ok(!verify("ca-root2", "any", curdir(), [], "-show_chain"));
  42. }, create => 1, cleanup => 1;