blob: 535807e3a289cad10e99af6ff603be175ad711db [file] [log] [blame]
Paul Bakker33b43f12013-08-20 11:48:36 +02001/* BEGIN_HEADER */
Mohammad Azim Khancf32c452017-06-13 14:55:58 +01002#include "mbedtls/bignum.h"
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00003#include "mbedtls/x509_crt.h"
4#include "mbedtls/x509_csr.h"
5#include "mbedtls/pem.h"
6#include "mbedtls/oid.h"
Hanno Becker418a6222017-09-14 07:51:28 +01007#include "mbedtls/rsa.h"
8
9#if defined(MBEDTLS_RSA_C)
10int mbedtls_rsa_decrypt_func( void *ctx, int mode, size_t *olen,
11 const unsigned char *input, unsigned char *output,
12 size_t output_max_len )
13{
14 return( mbedtls_rsa_pkcs1_decrypt( (mbedtls_rsa_context *) ctx, NULL, NULL, mode, olen,
15 input, output, output_max_len ) );
16}
17int mbedtls_rsa_sign_func( void *ctx,
18 int (*f_rng)(void *, unsigned char *, size_t), void *p_rng,
19 int mode, mbedtls_md_type_t md_alg, unsigned int hashlen,
20 const unsigned char *hash, unsigned char *sig )
21{
22 return( mbedtls_rsa_pkcs1_sign( (mbedtls_rsa_context *) ctx, f_rng, p_rng, mode,
23 md_alg, hashlen, hash, sig ) );
24}
25size_t mbedtls_rsa_key_len_func( void *ctx )
26{
27 return( ((const mbedtls_rsa_context *) ctx)->len );
28}
29#endif /* MBEDTLS_RSA_C */
30
Paul Bakker33b43f12013-08-20 11:48:36 +020031/* END_HEADER */
Paul Bakker6d620502012-02-16 14:09:13 +000032
Paul Bakker33b43f12013-08-20 11:48:36 +020033/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020034 * depends_on:MBEDTLS_BIGNUM_C:MBEDTLS_FS_IO:MBEDTLS_PK_PARSE_C
Paul Bakker33b43f12013-08-20 11:48:36 +020035 * END_DEPENDENCIES
36 */
Paul Bakker6d620502012-02-16 14:09:13 +000037
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020038/* BEGIN_CASE depends_on:MBEDTLS_PEM_WRITE_C:MBEDTLS_X509_CSR_WRITE_C */
Azim Khanf1aaec92017-05-30 14:23:15 +010039void x509_csr_check( char * key_file, char * cert_req_check_file, int md_type,
Andres Amaya Garcia2c0f6f02018-09-26 10:51:16 +010040 int key_usage, int set_key_usage, int cert_type,
41 int set_cert_type )
Paul Bakker6d620502012-02-16 14:09:13 +000042{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020043 mbedtls_pk_context key;
44 mbedtls_x509write_csr req;
Andres AGe0af9952016-09-07 11:09:44 +010045 unsigned char buf[4096];
Paul Bakker6d620502012-02-16 14:09:13 +000046 unsigned char check_buf[4000];
47 int ret;
Paul Bakker77e23fb2013-09-15 20:03:26 +020048 size_t olen = 0, pem_len = 0;
Andres AGe0af9952016-09-07 11:09:44 +010049 int der_len = -1;
Paul Bakker6d620502012-02-16 14:09:13 +000050 FILE *f;
Paul Bakker3a8cb6f2013-12-30 20:41:54 +010051 const char *subject_name = "C=NL,O=PolarSSL,CN=PolarSSL Server 1";
Manuel Pégourié-Gonnardee731792013-09-11 22:48:40 +020052 rnd_pseudo_info rnd_info;
Paul Bakker6d620502012-02-16 14:09:13 +000053
Manuel Pégourié-Gonnardee731792013-09-11 22:48:40 +020054 memset( &rnd_info, 0x2a, sizeof( rnd_pseudo_info ) );
55
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020056 mbedtls_pk_init( &key );
57 TEST_ASSERT( mbedtls_pk_parse_keyfile( &key, key_file, NULL ) == 0 );
Paul Bakker6d620502012-02-16 14:09:13 +000058
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020059 mbedtls_x509write_csr_init( &req );
60 mbedtls_x509write_csr_set_md_alg( &req, md_type );
61 mbedtls_x509write_csr_set_key( &req, &key );
62 TEST_ASSERT( mbedtls_x509write_csr_set_subject_name( &req, subject_name ) == 0 );
Andres Amaya Garcia2c0f6f02018-09-26 10:51:16 +010063 if( set_key_usage != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020064 TEST_ASSERT( mbedtls_x509write_csr_set_key_usage( &req, key_usage ) == 0 );
Andres Amaya Garcia2c0f6f02018-09-26 10:51:16 +010065 if( set_cert_type != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020066 TEST_ASSERT( mbedtls_x509write_csr_set_ns_cert_type( &req, cert_type ) == 0 );
Paul Bakker8eabfc12013-08-25 10:18:25 +020067
Hanno Becker81535d02017-09-13 15:39:59 +010068 ret = mbedtls_x509write_csr_pem( &req, buf, sizeof( buf ),
Manuel Pégourié-Gonnardee731792013-09-11 22:48:40 +020069 rnd_pseudo_rand, &rnd_info );
Paul Bakker77e23fb2013-09-15 20:03:26 +020070 TEST_ASSERT( ret == 0 );
Paul Bakker6d620502012-02-16 14:09:13 +000071
Paul Bakker77e23fb2013-09-15 20:03:26 +020072 pem_len = strlen( (char *) buf );
Paul Bakker6d620502012-02-16 14:09:13 +000073
Paul Bakker33b43f12013-08-20 11:48:36 +020074 f = fopen( cert_req_check_file, "r" );
Paul Bakker6d620502012-02-16 14:09:13 +000075 TEST_ASSERT( f != NULL );
Paul Bakker77e23fb2013-09-15 20:03:26 +020076 olen = fread( check_buf, 1, sizeof( check_buf ), f );
Paul Bakker6d620502012-02-16 14:09:13 +000077 fclose( f );
78
Paul Bakker77e23fb2013-09-15 20:03:26 +020079 TEST_ASSERT( olen >= pem_len - 1 );
80 TEST_ASSERT( memcmp( buf, check_buf, pem_len - 1 ) == 0 );
Paul Bakker58ef6ec2013-01-03 11:33:48 +010081
Andres AGe0af9952016-09-07 11:09:44 +010082 der_len = mbedtls_x509write_csr_der( &req, buf, sizeof( buf ),
83 rnd_pseudo_rand, &rnd_info );
84 TEST_ASSERT( der_len >= 0 );
85
86 if( der_len == 0 )
87 goto exit;
88
89 ret = mbedtls_x509write_csr_der( &req, buf, (size_t)( der_len - 1 ),
90 rnd_pseudo_rand, &rnd_info );
91 TEST_ASSERT( ret == MBEDTLS_ERR_ASN1_BUF_TOO_SMALL );
92
Paul Bakkerbd51b262014-07-10 15:26:12 +020093exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020094 mbedtls_x509write_csr_free( &req );
95 mbedtls_pk_free( &key );
Paul Bakker6d620502012-02-16 14:09:13 +000096}
Paul Bakker33b43f12013-08-20 11:48:36 +020097/* END_CASE */
Paul Bakker2397cf32013-09-08 15:58:15 +020098
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020099/* BEGIN_CASE depends_on:MBEDTLS_PEM_WRITE_C:MBEDTLS_X509_CRT_WRITE_C:MBEDTLS_SHA1_C */
Paul Bakker2397cf32013-09-08 15:58:15 +0200100void x509_crt_check( char *subject_key_file, char *subject_pwd,
101 char *subject_name, char *issuer_key_file,
102 char *issuer_pwd, char *issuer_name,
103 char *serial_str, char *not_before, char *not_after,
Andres Amaya Garcia2c0f6f02018-09-26 10:51:16 +0100104 int md_type, int key_usage, int set_key_usage,
105 int cert_type, int set_cert_type, int auth_ident,
Hanno Becker418a6222017-09-14 07:51:28 +0100106 int ver, char *cert_check_file, int rsa_alt )
Paul Bakker2397cf32013-09-08 15:58:15 +0200107{
Hanno Becker418a6222017-09-14 07:51:28 +0100108 mbedtls_pk_context subject_key, issuer_key, issuer_key_alt;
109 mbedtls_pk_context *key = &issuer_key;
110
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200111 mbedtls_x509write_cert crt;
Andres AGe0af9952016-09-07 11:09:44 +0100112 unsigned char buf[4096];
Paul Bakker2397cf32013-09-08 15:58:15 +0200113 unsigned char check_buf[5000];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200114 mbedtls_mpi serial;
Paul Bakker2397cf32013-09-08 15:58:15 +0200115 int ret;
Paul Bakker77e23fb2013-09-15 20:03:26 +0200116 size_t olen = 0, pem_len = 0;
Andres AGe0af9952016-09-07 11:09:44 +0100117 int der_len = -1;
Paul Bakker2397cf32013-09-08 15:58:15 +0200118 FILE *f;
Manuel Pégourié-Gonnard31e59402013-09-12 05:59:05 +0200119 rnd_pseudo_info rnd_info;
Paul Bakker2397cf32013-09-08 15:58:15 +0200120
Manuel Pégourié-Gonnard31e59402013-09-12 05:59:05 +0200121 memset( &rnd_info, 0x2a, sizeof( rnd_pseudo_info ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200122 mbedtls_mpi_init( &serial );
Hanno Becker418a6222017-09-14 07:51:28 +0100123
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200124 mbedtls_pk_init( &subject_key );
Hanno Becker418a6222017-09-14 07:51:28 +0100125 mbedtls_pk_init( &issuer_key );
126 mbedtls_pk_init( &issuer_key_alt );
127
128 mbedtls_x509write_crt_init( &crt );
Paul Bakker2397cf32013-09-08 15:58:15 +0200129
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200130 TEST_ASSERT( mbedtls_pk_parse_keyfile( &subject_key, subject_key_file,
Paul Bakker2397cf32013-09-08 15:58:15 +0200131 subject_pwd ) == 0 );
Hanno Becker418a6222017-09-14 07:51:28 +0100132
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200133 TEST_ASSERT( mbedtls_pk_parse_keyfile( &issuer_key, issuer_key_file,
Paul Bakker2397cf32013-09-08 15:58:15 +0200134 issuer_pwd ) == 0 );
Hanno Becker418a6222017-09-14 07:51:28 +0100135
Manuel Pégourié-Gonnard147b28e2018-03-12 15:26:59 +0100136#if defined(MBEDTLS_RSA_C)
Hanno Becker418a6222017-09-14 07:51:28 +0100137 /* For RSA PK contexts, create a copy as an alternative RSA context. */
138 if( rsa_alt == 1 && mbedtls_pk_get_type( &issuer_key ) == MBEDTLS_PK_RSA )
139 {
140 TEST_ASSERT( mbedtls_pk_setup_rsa_alt( &issuer_key_alt,
141 mbedtls_pk_rsa( issuer_key ),
142 mbedtls_rsa_decrypt_func,
143 mbedtls_rsa_sign_func,
144 mbedtls_rsa_key_len_func ) == 0 );
145
146 key = &issuer_key_alt;
147 }
Manuel Pégourié-Gonnard147b28e2018-03-12 15:26:59 +0100148#else
149 (void) rsa_alt;
150#endif
Hanno Becker418a6222017-09-14 07:51:28 +0100151
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200152 TEST_ASSERT( mbedtls_mpi_read_string( &serial, 10, serial_str ) == 0 );
Paul Bakker2397cf32013-09-08 15:58:15 +0200153
Manuel Pégourié-Gonnard6c1a73e2014-03-28 14:03:22 +0100154 if( ver != -1 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200155 mbedtls_x509write_crt_set_version( &crt, ver );
Hanno Becker418a6222017-09-14 07:51:28 +0100156
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200157 TEST_ASSERT( mbedtls_x509write_crt_set_serial( &crt, &serial ) == 0 );
158 TEST_ASSERT( mbedtls_x509write_crt_set_validity( &crt, not_before,
Hanno Becker81535d02017-09-13 15:39:59 +0100159 not_after ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200160 mbedtls_x509write_crt_set_md_alg( &crt, md_type );
161 TEST_ASSERT( mbedtls_x509write_crt_set_issuer_name( &crt, issuer_name ) == 0 );
162 TEST_ASSERT( mbedtls_x509write_crt_set_subject_name( &crt, subject_name ) == 0 );
163 mbedtls_x509write_crt_set_subject_key( &crt, &subject_key );
Hanno Becker418a6222017-09-14 07:51:28 +0100164
165 mbedtls_x509write_crt_set_issuer_key( &crt, key );
Paul Bakker2397cf32013-09-08 15:58:15 +0200166
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200167 if( crt.version >= MBEDTLS_X509_CRT_VERSION_3 )
Manuel Pégourié-Gonnard6c1a73e2014-03-28 14:03:22 +0100168 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200169 TEST_ASSERT( mbedtls_x509write_crt_set_basic_constraints( &crt, 0, 0 ) == 0 );
170 TEST_ASSERT( mbedtls_x509write_crt_set_subject_key_identifier( &crt ) == 0 );
Hanno Becker418a6222017-09-14 07:51:28 +0100171 if( auth_ident )
172 TEST_ASSERT( mbedtls_x509write_crt_set_authority_key_identifier( &crt ) == 0 );
Andres Amaya Garcia2c0f6f02018-09-26 10:51:16 +0100173 if( set_key_usage != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200174 TEST_ASSERT( mbedtls_x509write_crt_set_key_usage( &crt, key_usage ) == 0 );
Andres Amaya Garcia2c0f6f02018-09-26 10:51:16 +0100175 if( set_cert_type != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200176 TEST_ASSERT( mbedtls_x509write_crt_set_ns_cert_type( &crt, cert_type ) == 0 );
Manuel Pégourié-Gonnard6c1a73e2014-03-28 14:03:22 +0100177 }
Paul Bakker2397cf32013-09-08 15:58:15 +0200178
Hanno Becker81535d02017-09-13 15:39:59 +0100179 ret = mbedtls_x509write_crt_pem( &crt, buf, sizeof( buf ),
180 rnd_pseudo_rand, &rnd_info );
Paul Bakker77e23fb2013-09-15 20:03:26 +0200181 TEST_ASSERT( ret == 0 );
Paul Bakker2397cf32013-09-08 15:58:15 +0200182
Paul Bakker77e23fb2013-09-15 20:03:26 +0200183 pem_len = strlen( (char *) buf );
Paul Bakker2397cf32013-09-08 15:58:15 +0200184
185 f = fopen( cert_check_file, "r" );
186 TEST_ASSERT( f != NULL );
Hanno Becker81535d02017-09-13 15:39:59 +0100187 olen = fread( check_buf, 1, sizeof( check_buf ), f );
Paul Bakker2397cf32013-09-08 15:58:15 +0200188 fclose( f );
Hanno Becker81535d02017-09-13 15:39:59 +0100189 TEST_ASSERT( olen < sizeof( check_buf ) );
Paul Bakker2397cf32013-09-08 15:58:15 +0200190
Paul Bakker77e23fb2013-09-15 20:03:26 +0200191 TEST_ASSERT( olen >= pem_len - 1 );
192 TEST_ASSERT( memcmp( buf, check_buf, pem_len - 1 ) == 0 );
Paul Bakker2397cf32013-09-08 15:58:15 +0200193
Andres AGe0af9952016-09-07 11:09:44 +0100194 der_len = mbedtls_x509write_crt_der( &crt, buf, sizeof( buf ),
Hanno Becker81535d02017-09-13 15:39:59 +0100195 rnd_pseudo_rand, &rnd_info );
Andres AGe0af9952016-09-07 11:09:44 +0100196 TEST_ASSERT( der_len >= 0 );
197
198 if( der_len == 0 )
199 goto exit;
200
201 ret = mbedtls_x509write_crt_der( &crt, buf, (size_t)( der_len - 1 ),
Hanno Becker81535d02017-09-13 15:39:59 +0100202 rnd_pseudo_rand, &rnd_info );
Andres AGe0af9952016-09-07 11:09:44 +0100203 TEST_ASSERT( ret == MBEDTLS_ERR_ASN1_BUF_TOO_SMALL );
204
Paul Bakkerbd51b262014-07-10 15:26:12 +0200205exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200206 mbedtls_x509write_crt_free( &crt );
Hanno Becker418a6222017-09-14 07:51:28 +0100207 mbedtls_pk_free( &issuer_key_alt );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200208 mbedtls_pk_free( &subject_key );
Hanno Becker418a6222017-09-14 07:51:28 +0100209 mbedtls_pk_free( &issuer_key );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200210 mbedtls_mpi_free( &serial );
Paul Bakker2397cf32013-09-08 15:58:15 +0200211}
212/* END_CASE */
Paul Bakker8dcb2d72014-08-08 12:22:30 +0200213
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200214/* BEGIN_CASE depends_on:MBEDTLS_X509_CREATE_C:MBEDTLS_X509_USE_C */
Azim Khanf1aaec92017-05-30 14:23:15 +0100215void mbedtls_x509_string_to_names( char * name, char * parsed_name, int result
216 )
Paul Bakker8dcb2d72014-08-08 12:22:30 +0200217{
218 int ret;
219 size_t len = 0;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200220 mbedtls_asn1_named_data *names = NULL;
221 mbedtls_x509_name parsed, *parsed_cur, *parsed_prv;
Manuel Pégourié-Gonnard4fd0b252015-06-26 14:15:48 +0200222 unsigned char buf[1024], out[1024], *c;
Paul Bakker8dcb2d72014-08-08 12:22:30 +0200223
224 memset( &parsed, 0, sizeof( parsed ) );
Manuel Pégourié-Gonnard4fd0b252015-06-26 14:15:48 +0200225 memset( out, 0, sizeof( out ) );
Paul Bakker8dcb2d72014-08-08 12:22:30 +0200226 memset( buf, 0, sizeof( buf ) );
227 c = buf + sizeof( buf );
228
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200229 ret = mbedtls_x509_string_to_names( &names, name );
Paul Bakker8dcb2d72014-08-08 12:22:30 +0200230 TEST_ASSERT( ret == result );
231
232 if( ret != 0 )
233 goto exit;
234
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200235 ret = mbedtls_x509_write_names( &c, buf, names );
Paul Bakker8dcb2d72014-08-08 12:22:30 +0200236 TEST_ASSERT( ret > 0 );
237
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200238 TEST_ASSERT( mbedtls_asn1_get_tag( &c, buf + sizeof( buf ), &len,
239 MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE ) == 0 );
240 TEST_ASSERT( mbedtls_x509_get_name( &c, buf + sizeof( buf ), &parsed ) == 0 );
Paul Bakker8dcb2d72014-08-08 12:22:30 +0200241
Manuel Pégourié-Gonnard4fd0b252015-06-26 14:15:48 +0200242 ret = mbedtls_x509_dn_gets( (char *) out, sizeof( out ), &parsed );
Paul Bakker8dcb2d72014-08-08 12:22:30 +0200243 TEST_ASSERT( ret > 0 );
244
Manuel Pégourié-Gonnard4fd0b252015-06-26 14:15:48 +0200245 TEST_ASSERT( strcmp( (char *) out, parsed_name ) == 0 );
Paul Bakker8dcb2d72014-08-08 12:22:30 +0200246
247exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200248 mbedtls_asn1_free_named_data_list( &names );
Paul Bakker8dcb2d72014-08-08 12:22:30 +0200249
250 parsed_cur = parsed.next;
251 while( parsed_cur != 0 )
252 {
253 parsed_prv = parsed_cur;
254 parsed_cur = parsed_cur->next;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200255 mbedtls_free( parsed_prv );
Paul Bakker8dcb2d72014-08-08 12:22:30 +0200256 }
257}
258/* END_CASE */