blob: c52af76f54abbe5d2b88dbd90e982d0b8ed09775 [file] [log] [blame]
Paul Bakker33b43f12013-08-20 11:48:36 +02001/* BEGIN_HEADER */
Azim Khand30ca132017-06-09 04:32:58 +01002#include "mbedtls/bignum.h"
Andres AG4b76aec2016-09-23 13:16:02 +01003#include "mbedtls/x509.h"
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00004#include "mbedtls/x509_crt.h"
5#include "mbedtls/x509_crl.h"
6#include "mbedtls/x509_csr.h"
7#include "mbedtls/pem.h"
8#include "mbedtls/oid.h"
9#include "mbedtls/base64.h"
Mohammad Azim Khan67735d52017-04-06 11:55:43 +010010#include "string.h"
Paul Bakkerb63b0af2011-01-13 17:54:59 +000011
Simon Butcher9e24b512017-07-28 12:15:13 +010012#if MBEDTLS_X509_MAX_INTERMEDIATE_CA > 19
Hanno Becker3b1422e2017-07-26 13:38:02 +010013#error "The value of MBEDTLS_X509_MAX_INTERMEDIATE_C is larger \
14than the current threshold 19. To test larger values, please \
15adapt the script tests/data_files/dir-max/long.sh."
16#endif
17
Hanno Becker20a4ade2019-06-03 14:27:03 +010018/* Test-only profile allowing all digests, PK algorithms, and curves. */
19const mbedtls_x509_crt_profile profile_all =
20{
21 0xFFFFFFFF, /* Any MD */
22 0xFFFFFFFF, /* Any PK alg */
23 0xFFFFFFFF, /* Any curve */
24 1024,
25};
26
Gilles Peskineef86ab22017-05-05 18:59:02 +020027/* Profile for backward compatibility. Allows SHA-1, unlike the default
28 profile. */
Manuel Pégourié-Gonnard65eefc82015-10-23 14:08:48 +020029const mbedtls_x509_crt_profile compat_profile =
30{
31 MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA1 ) |
32 MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_RIPEMD160 ) |
33 MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA224 ) |
34 MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA256 ) |
35 MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA384 ) |
36 MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA512 ),
37 0xFFFFFFF, /* Any PK alg */
38 0xFFFFFFF, /* Any curve */
39 1024,
40};
41
Manuel Pégourié-Gonnard6622fed2017-05-23 11:29:29 +020042const mbedtls_x509_crt_profile profile_rsa3072 =
43{
44 MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA256 ) |
45 MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA384 ) |
46 MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA512 ),
47 MBEDTLS_X509_ID_FLAG( MBEDTLS_PK_RSA ),
48 0,
49 3072,
50};
51
52const mbedtls_x509_crt_profile profile_sha512 =
53{
54 MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA512 ),
55 0xFFFFFFF, /* Any PK alg */
56 0xFFFFFFF, /* Any curve */
57 1024,
58};
59
Manuel Pégourié-Gonnarde6ef16f2015-05-11 19:54:43 +020060int verify_none( void *data, mbedtls_x509_crt *crt, int certificate_depth, uint32_t *flags )
Paul Bakkerb63b0af2011-01-13 17:54:59 +000061{
Paul Bakker5a624082011-01-18 16:31:52 +000062 ((void) data);
63 ((void) crt);
64 ((void) certificate_depth);
Manuel Pégourié-Gonnarde6028c92015-04-20 12:19:02 +010065 *flags |= MBEDTLS_X509_BADCERT_OTHER;
Paul Bakkerddf26b42013-09-18 13:46:23 +020066
Paul Bakker915275b2012-09-28 07:10:55 +000067 return 0;
Paul Bakkerb63b0af2011-01-13 17:54:59 +000068}
69
Manuel Pégourié-Gonnarde6ef16f2015-05-11 19:54:43 +020070int verify_all( void *data, mbedtls_x509_crt *crt, int certificate_depth, uint32_t *flags )
Paul Bakkerb63b0af2011-01-13 17:54:59 +000071{
Paul Bakker5a624082011-01-18 16:31:52 +000072 ((void) data);
73 ((void) crt);
74 ((void) certificate_depth);
Paul Bakker915275b2012-09-28 07:10:55 +000075 *flags = 0;
Paul Bakker5a624082011-01-18 16:31:52 +000076
Paul Bakkerb63b0af2011-01-13 17:54:59 +000077 return 0;
78}
79
Jarno Lamsa03cd1202019-03-27 15:45:04 +020080#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
Janos Follathd7ecbd62019-04-05 14:52:17 +010081int ca_callback_fail( void *data, mbedtls_x509_crt const *child, mbedtls_x509_crt **candidates )
Jarno Lamsa557426a2019-03-27 17:08:29 +020082{
83 ((void) data);
84 ((void) child);
85 ((void) candidates);
86
87 return -1;
88}
89
Hanno Beckercbb59032019-03-28 14:14:22 +000090int ca_callback( void *data, mbedtls_x509_crt const *child,
Janos Follathd7ecbd62019-04-05 14:52:17 +010091 mbedtls_x509_crt **candidates )
Jarno Lamsa03cd1202019-03-27 15:45:04 +020092{
Hanno Beckercbb59032019-03-28 14:14:22 +000093 int ret = 0;
Jarno Lamsa03cd1202019-03-27 15:45:04 +020094 mbedtls_x509_crt *ca = (mbedtls_x509_crt *) data;
Hanno Beckercbb59032019-03-28 14:14:22 +000095 mbedtls_x509_crt *first;
96
97 /* This is a test-only implementation of the CA callback
98 * which always returns the entire list of trusted certificates.
99 * Production implementations managing a large number of CAs
100 * should use an efficient presentation and lookup for the
101 * set of trusted certificates (such as a hashtable) and only
102 * return those trusted certificates which satisfy basic
103 * parental checks, such as the matching of child `Issuer`
104 * and parent `Subject` field. */
105 ((void) child);
106
107 first = mbedtls_calloc( 1, sizeof( mbedtls_x509_crt ) );
108 if( first == NULL )
109 {
110 ret = -1;
111 goto exit;
112 }
113 mbedtls_x509_crt_init( first );
114
115 if( mbedtls_x509_crt_parse_der( first, ca->raw.p, ca->raw.len ) != 0 )
116 {
117 ret = -1;
118 goto exit;
119 }
120
Jarno Lamsa03cd1202019-03-27 15:45:04 +0200121 while( ca->next != NULL )
122 {
123 ca = ca->next;
Hanno Beckercbb59032019-03-28 14:14:22 +0000124 if( mbedtls_x509_crt_parse_der( first, ca->raw.p, ca->raw.len ) != 0 )
125 {
126 ret = -1;
127 goto exit;
128 }
Jarno Lamsa03cd1202019-03-27 15:45:04 +0200129 }
Hanno Beckercbb59032019-03-28 14:14:22 +0000130
131exit:
132
133 if( ret != 0 )
134 {
135 mbedtls_x509_crt_free( first );
136 mbedtls_free( first );
137 first = NULL;
138 }
139
Jarno Lamsa03cd1202019-03-27 15:45:04 +0200140 *candidates = first;
Hanno Beckercbb59032019-03-28 14:14:22 +0000141 return( ret );
Jarno Lamsa03cd1202019-03-27 15:45:04 +0200142}
143#endif /* MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK */
144
Manuel Pégourié-Gonnard6b9d53f2017-05-23 12:26:58 +0200145int verify_fatal( void *data, mbedtls_x509_crt *crt, int certificate_depth, uint32_t *flags )
146{
147 int *levels = (int *) data;
148
149 ((void) crt);
150 ((void) certificate_depth);
151
152 /* Simulate a fatal error in the callback */
153 if( *levels & ( 1 << certificate_depth ) )
154 {
155 *flags |= ( 1 << certificate_depth );
Manuel Pégourié-Gonnard41859782017-05-23 12:58:53 +0200156 return( -1 - certificate_depth );
Manuel Pégourié-Gonnard6b9d53f2017-05-23 12:26:58 +0200157 }
158
159 return( 0 );
160}
161
Manuel Pégourié-Gonnarda8838af2015-11-02 06:34:46 +0900162/* strsep() not available on Windows */
163char *mystrsep(char **stringp, const char *delim)
164{
165 const char *p;
166 char *ret = *stringp;
167
168 if( *stringp == NULL )
169 return( NULL );
170
171 for( ; ; (*stringp)++ )
172 {
173 if( **stringp == '\0' )
174 {
175 *stringp = NULL;
176 goto done;
177 }
178
179 for( p = delim; *p != '\0'; p++ )
180 if( **stringp == *p )
181 {
182 **stringp = '\0';
183 (*stringp)++;
184 goto done;
185 }
186 }
187
188done:
189 return( ret );
190}
191
Manuel Pégourié-Gonnard560fea32015-09-01 11:59:24 +0200192#if defined(MBEDTLS_X509_CRT_PARSE_C)
193typedef struct {
194 char buf[512];
195 char *p;
196} verify_print_context;
197
198void verify_print_init( verify_print_context *ctx )
199{
200 memset( ctx, 0, sizeof( verify_print_context ) );
201 ctx->p = ctx->buf;
202}
203
204int verify_print( void *data, mbedtls_x509_crt *crt, int certificate_depth, uint32_t *flags )
205{
206 int ret;
207 verify_print_context *ctx = (verify_print_context *) data;
208 char *p = ctx->p;
209 size_t n = ctx->buf + sizeof( ctx->buf ) - ctx->p;
210 ((void) flags);
211
212 ret = mbedtls_snprintf( p, n, "depth %d - serial ", certificate_depth );
213 MBEDTLS_X509_SAFE_SNPRINTF;
214
215 ret = mbedtls_x509_serial_gets( p, n, &crt->serial );
216 MBEDTLS_X509_SAFE_SNPRINTF;
217
218 ret = mbedtls_snprintf( p, n, " - subject " );
219 MBEDTLS_X509_SAFE_SNPRINTF;
220
221 ret = mbedtls_x509_dn_gets( p, n, &crt->subject );
222 MBEDTLS_X509_SAFE_SNPRINTF;
223
Manuel Pégourié-Gonnardbe2f0b52017-08-21 11:00:22 +0200224 ret = mbedtls_snprintf( p, n, " - flags 0x%08x\n", *flags );
Manuel Pégourié-Gonnard560fea32015-09-01 11:59:24 +0200225 MBEDTLS_X509_SAFE_SNPRINTF;
226
227 ctx->p = p;
228
229 return( 0 );
230}
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200231
232int verify_parse_san( mbedtls_x509_subject_alternative_name *san,
233 char **buf, size_t *size )
234{
235 int ret;
236 size_t i;
237 char *p = *buf;
238 size_t n = *size;
239
Kenneth Soerensen518d4352020-04-01 17:22:45 +0200240 ret = mbedtls_snprintf( p, n, "type : %d", san->type );
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200241 MBEDTLS_X509_SAFE_SNPRINTF;
242
243 switch( san->type )
244 {
245 case( MBEDTLS_X509_SAN_OTHER_NAME ):
246 ret = mbedtls_snprintf( p, n, "\notherName :");
247 MBEDTLS_X509_SAFE_SNPRINTF;
248
249 if( MBEDTLS_OID_CMP( MBEDTLS_OID_ON_HW_MODULE_NAME,
250 &san->san.other_name.value.hardware_module_name.oid ) != 0 )
251 {
252 ret = mbedtls_snprintf( p, n, " hardware module name :" );
253 MBEDTLS_X509_SAFE_SNPRINTF;
254 ret = mbedtls_snprintf( p, n, " hardware type : " );
255 MBEDTLS_X509_SAFE_SNPRINTF;
256
257 ret = mbedtls_oid_get_numeric_string( p, n,
258 &san->san.other_name.value.hardware_module_name.oid );
259 MBEDTLS_X509_SAFE_SNPRINTF;
260
261 ret = mbedtls_snprintf( p, n, ", hardware serial number : " );
262 MBEDTLS_X509_SAFE_SNPRINTF;
263
264 if( san->san.other_name.value.hardware_module_name.val.len >= n )
265 {
266 *p = '\0';
267 return( MBEDTLS_ERR_X509_BUFFER_TOO_SMALL );
268 }
269
270 for( i=0; i < san->san.other_name.value.hardware_module_name.val.len; i++ )
271 {
272 *p++ = san->san.other_name.value.hardware_module_name.val.p[i];
273 }
274 n -= san->san.other_name.value.hardware_module_name.val.len;
275 }
276 break;/* MBEDTLS_OID_ON_HW_MODULE_NAME */
277 case( MBEDTLS_X509_SAN_DNS_NAME ):
278 ret = mbedtls_snprintf( p, n, "\ndNSName : " );
279 MBEDTLS_X509_SAFE_SNPRINTF;
280 if( san->san.unstructured_name.len >= n )
281 {
282 *p = '\0';
283 return( MBEDTLS_ERR_X509_BUFFER_TOO_SMALL );
284 }
285 n -= san->san.unstructured_name.len;
286 for( i = 0; i < san->san.unstructured_name.len; i++ )
287 *p++ = san->san.unstructured_name.p[i];
288 break;/* MBEDTLS_X509_SAN_DNS_NAME */
289
290 default:
291 /*
292 * Should not happen.
293 */
294 return( -1 );
295 }
296 ret = mbedtls_snprintf( p, n, "\n" );
297 MBEDTLS_X509_SAFE_SNPRINTF;
298
299 *size = n;
300 *buf = p;
301
302 return( 0 );
303}
Nicola Di Lieto17bb60c2020-05-28 23:04:15 +0200304
305int parse_crt_ext_cb( mbedtls_x509_crt const *crt, mbedtls_x509_buf const *oid, int critical,
306 const unsigned char *p, const unsigned char *end )
307{
308 ( void ) crt;
309 ( void ) p;
310 ( void ) end;
311 if( MBEDTLS_OID_CMP( MBEDTLS_OID_PKIX "\x01\x1F", oid ) != 0 && critical != 0 )
312 return( MBEDTLS_ERR_ASN1_UNEXPECTED_TAG );
313 return( 0 );
314}
Manuel Pégourié-Gonnard560fea32015-09-01 11:59:24 +0200315#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakker33b43f12013-08-20 11:48:36 +0200316/* END_HEADER */
Paul Bakker37940d9f2009-07-10 22:38:58 +0000317
Paul Bakker33b43f12013-08-20 11:48:36 +0200318/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200319 * depends_on:MBEDTLS_BIGNUM_C
Paul Bakker33b43f12013-08-20 11:48:36 +0200320 * END_DEPENDENCIES
321 */
Paul Bakker5690efc2011-05-26 13:16:06 +0000322
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200323/* BEGIN_CASE depends_on:MBEDTLS_FS_IO:MBEDTLS_X509_CRT_PARSE_C */
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200324void x509_parse_san( char * crt_file, char * result_str )
325{
Ron Eldor890819a2019-05-13 19:03:04 +0300326 int ret;
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200327 mbedtls_x509_crt crt;
Ron Eldor890819a2019-05-13 19:03:04 +0300328 mbedtls_x509_subject_alternative_name san;
329 mbedtls_x509_sequence *cur = NULL;
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200330 char buf[2000];
331 char *p = buf;
332 size_t n = sizeof( buf );
333
334 mbedtls_x509_crt_init( &crt );
335 memset( buf, 0, 2000 );
336
337 TEST_ASSERT( mbedtls_x509_crt_parse_file( &crt, crt_file ) == 0 );
Ron Eldor890819a2019-05-13 19:03:04 +0300338
339 if( crt.ext_types & MBEDTLS_X509_EXT_SUBJECT_ALT_NAME )
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200340 {
Ron Eldor890819a2019-05-13 19:03:04 +0300341 cur = &crt.subject_alt_names;
342 while( cur != NULL )
343 {
344 ret = mbedtls_x509_parse_subject_alt_name( &cur->buf, &san );
345 TEST_ASSERT( ret == 0 || ret == MBEDTLS_ERR_X509_FEATURE_UNAVAILABLE );
346 /*
347 * If san type not supported, ignore.
348 */
349 if( ret == 0)
350 TEST_ASSERT( verify_parse_san( &san, &p, &n ) == 0 );
351 cur = cur->next;
352 }
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200353 }
354
355 TEST_ASSERT( strcmp( buf, result_str ) == 0 );
356
357exit:
358
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200359 mbedtls_x509_crt_free( &crt );
360}
361/* END_CASE */
362
363/* BEGIN_CASE depends_on:MBEDTLS_FS_IO:MBEDTLS_X509_CRT_PARSE_C */
Azim Khanf1aaec92017-05-30 14:23:15 +0100364void x509_cert_info( char * crt_file, char * result_str )
Paul Bakker37940d9f2009-07-10 22:38:58 +0000365{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200366 mbedtls_x509_crt crt;
Paul Bakker37940d9f2009-07-10 22:38:58 +0000367 char buf[2000];
Paul Bakker69998dd2009-07-11 19:15:20 +0000368 int res;
Paul Bakker37940d9f2009-07-10 22:38:58 +0000369
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200370 mbedtls_x509_crt_init( &crt );
Paul Bakker37940d9f2009-07-10 22:38:58 +0000371 memset( buf, 0, 2000 );
372
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200373 TEST_ASSERT( mbedtls_x509_crt_parse_file( &crt, crt_file ) == 0 );
374 res = mbedtls_x509_crt_info( buf, 2000, "", &crt );
Paul Bakker37940d9f2009-07-10 22:38:58 +0000375
376 TEST_ASSERT( res != -1 );
377 TEST_ASSERT( res != -2 );
378
Paul Bakker33b43f12013-08-20 11:48:36 +0200379 TEST_ASSERT( strcmp( buf, result_str ) == 0 );
Paul Bakkerbd51b262014-07-10 15:26:12 +0200380
381exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200382 mbedtls_x509_crt_free( &crt );
Paul Bakker37940d9f2009-07-10 22:38:58 +0000383}
Paul Bakker33b43f12013-08-20 11:48:36 +0200384/* END_CASE */
Paul Bakker37940d9f2009-07-10 22:38:58 +0000385
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200386/* BEGIN_CASE depends_on:MBEDTLS_FS_IO:MBEDTLS_X509_CRL_PARSE_C */
Azim Khanf1aaec92017-05-30 14:23:15 +0100387void mbedtls_x509_crl_info( char * crl_file, char * result_str )
Paul Bakker37940d9f2009-07-10 22:38:58 +0000388{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200389 mbedtls_x509_crl crl;
Paul Bakker37940d9f2009-07-10 22:38:58 +0000390 char buf[2000];
Paul Bakker69998dd2009-07-11 19:15:20 +0000391 int res;
Paul Bakker37940d9f2009-07-10 22:38:58 +0000392
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200393 mbedtls_x509_crl_init( &crl );
Paul Bakker37940d9f2009-07-10 22:38:58 +0000394 memset( buf, 0, 2000 );
395
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200396 TEST_ASSERT( mbedtls_x509_crl_parse_file( &crl, crl_file ) == 0 );
397 res = mbedtls_x509_crl_info( buf, 2000, "", &crl );
Paul Bakker37940d9f2009-07-10 22:38:58 +0000398
399 TEST_ASSERT( res != -1 );
400 TEST_ASSERT( res != -2 );
401
Paul Bakker33b43f12013-08-20 11:48:36 +0200402 TEST_ASSERT( strcmp( buf, result_str ) == 0 );
Paul Bakkerbd51b262014-07-10 15:26:12 +0200403
404exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200405 mbedtls_x509_crl_free( &crl );
Paul Bakker37940d9f2009-07-10 22:38:58 +0000406}
Paul Bakker33b43f12013-08-20 11:48:36 +0200407/* END_CASE */
Paul Bakker37940d9f2009-07-10 22:38:58 +0000408
Andres AGa39db392016-12-08 17:10:38 +0000409/* BEGIN_CASE depends_on:MBEDTLS_FS_IO:MBEDTLS_X509_CRL_PARSE_C */
Azim Khanf1aaec92017-05-30 14:23:15 +0100410void mbedtls_x509_crl_parse( char * crl_file, int result )
Andres AGa39db392016-12-08 17:10:38 +0000411{
412 mbedtls_x509_crl crl;
413 char buf[2000];
414
415 mbedtls_x509_crl_init( &crl );
416 memset( buf, 0, 2000 );
417
418 TEST_ASSERT( mbedtls_x509_crl_parse_file( &crl, crl_file ) == result );
419
420exit:
421 mbedtls_x509_crl_free( &crl );
422}
423/* END_CASE */
424
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200425/* BEGIN_CASE depends_on:MBEDTLS_FS_IO:MBEDTLS_X509_CSR_PARSE_C */
Azim Khanf1aaec92017-05-30 14:23:15 +0100426void mbedtls_x509_csr_info( char * csr_file, char * result_str )
Manuel Pégourié-Gonnard2a8d7fd2014-01-24 17:34:26 +0100427{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200428 mbedtls_x509_csr csr;
Manuel Pégourié-Gonnard2a8d7fd2014-01-24 17:34:26 +0100429 char buf[2000];
430 int res;
431
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200432 mbedtls_x509_csr_init( &csr );
Manuel Pégourié-Gonnard2a8d7fd2014-01-24 17:34:26 +0100433 memset( buf, 0, 2000 );
434
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200435 TEST_ASSERT( mbedtls_x509_csr_parse_file( &csr, csr_file ) == 0 );
436 res = mbedtls_x509_csr_info( buf, 2000, "", &csr );
Manuel Pégourié-Gonnard2a8d7fd2014-01-24 17:34:26 +0100437
Manuel Pégourié-Gonnard2a8d7fd2014-01-24 17:34:26 +0100438 TEST_ASSERT( res != -1 );
439 TEST_ASSERT( res != -2 );
440
441 TEST_ASSERT( strcmp( buf, result_str ) == 0 );
Paul Bakkerbd51b262014-07-10 15:26:12 +0200442
443exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200444 mbedtls_x509_csr_free( &csr );
Manuel Pégourié-Gonnard2a8d7fd2014-01-24 17:34:26 +0100445}
446/* END_CASE */
447
Manuel Pégourié-Gonnardb5f48ad2015-04-20 10:38:13 +0100448/* BEGIN_CASE depends_on:MBEDTLS_X509_CRT_PARSE_C */
Azim Khanf1aaec92017-05-30 14:23:15 +0100449void x509_verify_info( int flags, char * prefix, char * result_str )
Manuel Pégourié-Gonnardb5f48ad2015-04-20 10:38:13 +0100450{
451 char buf[2000];
452 int res;
453
454 memset( buf, 0, sizeof( buf ) );
455
456 res = mbedtls_x509_crt_verify_info( buf, sizeof( buf ), prefix, flags );
457
458 TEST_ASSERT( res >= 0 );
459
460 TEST_ASSERT( strcmp( buf, result_str ) == 0 );
461}
462/* END_CASE */
463
Manuel Pégourié-Gonnardd19a41d2017-07-14 11:05:59 +0200464/* BEGIN_CASE depends_on:MBEDTLS_FS_IO:MBEDTLS_X509_CRT_PARSE_C:MBEDTLS_X509_CRL_PARSE_C:MBEDTLS_ECP_RESTARTABLE:MBEDTLS_ECDSA_C */
465void x509_verify_restart( char *crt_file, char *ca_file,
466 int result, int flags_result,
467 int max_ops, int min_restart, int max_restart )
468{
469 int ret, cnt_restart;
470 mbedtls_x509_crt_restart_ctx rs_ctx;
471 mbedtls_x509_crt crt;
472 mbedtls_x509_crt ca;
473 uint32_t flags = 0;
474
Manuel Pégourié-Gonnard8b590492017-08-14 18:04:19 +0200475 /*
476 * See comments on ecp_test_vect_restart() for op count precision.
477 *
478 * For reference, with mbed TLS 2.6 and default settings:
479 * - ecdsa_verify() for P-256: ~ 6700
480 * - ecdsa_verify() for P-384: ~ 18800
481 * - x509_verify() for server5 -> test-ca2: ~ 18800
482 * - x509_verify() for server10 -> int-ca3 -> int-ca2: ~ 25500
483 */
484
Manuel Pégourié-Gonnardd19a41d2017-07-14 11:05:59 +0200485 mbedtls_x509_crt_restart_init( &rs_ctx );
486 mbedtls_x509_crt_init( &crt );
487 mbedtls_x509_crt_init( &ca );
488
489 TEST_ASSERT( mbedtls_x509_crt_parse_file( &crt, crt_file ) == 0 );
490 TEST_ASSERT( mbedtls_x509_crt_parse_file( &ca, ca_file ) == 0 );
491
492 mbedtls_ecp_set_max_ops( max_ops );
493
494 cnt_restart = 0;
495 do {
496 ret = mbedtls_x509_crt_verify_restartable( &crt, &ca, NULL,
497 &mbedtls_x509_crt_profile_default, NULL, &flags,
498 NULL, NULL, &rs_ctx );
499 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restart );
500
501 TEST_ASSERT( ret == result );
502 TEST_ASSERT( flags == (uint32_t) flags_result );
503
504 TEST_ASSERT( cnt_restart >= min_restart );
505 TEST_ASSERT( cnt_restart <= max_restart );
506
507 /* Do we leak memory when aborting? */
508 ret = mbedtls_x509_crt_verify_restartable( &crt, &ca, NULL,
509 &mbedtls_x509_crt_profile_default, NULL, &flags,
510 NULL, NULL, &rs_ctx );
511 TEST_ASSERT( ret == result || ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
512
513exit:
514 mbedtls_x509_crt_restart_free( &rs_ctx );
515 mbedtls_x509_crt_free( &crt );
516 mbedtls_x509_crt_free( &ca );
517}
518/* END_CASE */
519
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200520/* BEGIN_CASE depends_on:MBEDTLS_FS_IO:MBEDTLS_X509_CRT_PARSE_C:MBEDTLS_X509_CRL_PARSE_C */
Paul Bakker33b43f12013-08-20 11:48:36 +0200521void x509_verify( char *crt_file, char *ca_file, char *crl_file,
522 char *cn_name_str, int result, int flags_result,
Gilles Peskineef86ab22017-05-05 18:59:02 +0200523 char *profile_str,
Paul Bakker33b43f12013-08-20 11:48:36 +0200524 char *verify_callback )
Paul Bakker37940d9f2009-07-10 22:38:58 +0000525{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200526 mbedtls_x509_crt crt;
527 mbedtls_x509_crt ca;
528 mbedtls_x509_crl crl;
Manuel Pégourié-Gonnarde6ef16f2015-05-11 19:54:43 +0200529 uint32_t flags = 0;
Paul Bakker69998dd2009-07-11 19:15:20 +0000530 int res;
Manuel Pégourié-Gonnarde6ef16f2015-05-11 19:54:43 +0200531 int (*f_vrfy)(void *, mbedtls_x509_crt *, int, uint32_t *) = NULL;
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200532 char * cn_name = NULL;
Gilles Peskineef86ab22017-05-05 18:59:02 +0200533 const mbedtls_x509_crt_profile *profile;
Paul Bakker37940d9f2009-07-10 22:38:58 +0000534
Jaeden Amero3ea26872019-02-13 11:30:22 +0000535#if defined(MBEDTLS_USE_PSA_CRYPTO)
536 TEST_ASSERT( psa_crypto_init() == 0 );
537#endif
538
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200539 mbedtls_x509_crt_init( &crt );
540 mbedtls_x509_crt_init( &ca );
541 mbedtls_x509_crl_init( &crl );
Paul Bakker37940d9f2009-07-10 22:38:58 +0000542
Paul Bakker33b43f12013-08-20 11:48:36 +0200543 if( strcmp( cn_name_str, "NULL" ) != 0 )
544 cn_name = cn_name_str;
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200545
Manuel Pégourié-Gonnarda54f6cc2017-08-09 10:41:42 +0200546 if( strcmp( profile_str, "" ) == 0 )
Gilles Peskineef86ab22017-05-05 18:59:02 +0200547 profile = &mbedtls_x509_crt_profile_default;
Ron Eldorc1539982018-02-06 18:47:17 +0200548 else if( strcmp( profile_str, "next" ) == 0 )
549 profile = &mbedtls_x509_crt_profile_next;
550 else if( strcmp( profile_str, "suite_b" ) == 0 )
551 profile = &mbedtls_x509_crt_profile_suiteb;
Gilles Peskineef86ab22017-05-05 18:59:02 +0200552 else if( strcmp( profile_str, "compat" ) == 0 )
553 profile = &compat_profile;
Hanno Becker20a4ade2019-06-03 14:27:03 +0100554 else if( strcmp( profile_str, "all" ) == 0 )
555 profile = &profile_all;
Gilles Peskineef86ab22017-05-05 18:59:02 +0200556 else
557 TEST_ASSERT( "Unknown algorithm profile" == 0 );
558
Paul Bakker33b43f12013-08-20 11:48:36 +0200559 if( strcmp( verify_callback, "NULL" ) == 0 )
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200560 f_vrfy = NULL;
Paul Bakker33b43f12013-08-20 11:48:36 +0200561 else if( strcmp( verify_callback, "verify_none" ) == 0 )
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200562 f_vrfy = verify_none;
Paul Bakker33b43f12013-08-20 11:48:36 +0200563 else if( strcmp( verify_callback, "verify_all" ) == 0 )
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200564 f_vrfy = verify_all;
565 else
566 TEST_ASSERT( "No known verify callback selected" == 0 );
567
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200568 TEST_ASSERT( mbedtls_x509_crt_parse_file( &crt, crt_file ) == 0 );
569 TEST_ASSERT( mbedtls_x509_crt_parse_file( &ca, ca_file ) == 0 );
570 TEST_ASSERT( mbedtls_x509_crl_parse_file( &crl, crl_file ) == 0 );
Paul Bakker37940d9f2009-07-10 22:38:58 +0000571
Gilles Peskineef86ab22017-05-05 18:59:02 +0200572 res = mbedtls_x509_crt_verify_with_profile( &crt, &ca, &crl, profile, cn_name, &flags, f_vrfy, NULL );
Manuel Pégourié-Gonnard65eefc82015-10-23 14:08:48 +0200573
Paul Bakkerbd51b262014-07-10 15:26:12 +0200574 TEST_ASSERT( res == ( result ) );
Manuel Pégourié-Gonnarde6ef16f2015-05-11 19:54:43 +0200575 TEST_ASSERT( flags == (uint32_t)( flags_result ) );
Paul Bakkerbd51b262014-07-10 15:26:12 +0200576
Jarno Lamsa03cd1202019-03-27 15:45:04 +0200577#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
Hanno Becker0350d562019-03-28 14:23:36 +0000578 /* CRLs aren't supported with CA callbacks, so skip the CA callback
Jarno Lamsadfd22c42019-04-01 15:18:53 +0300579 * version of the test if CRLs are in use. */
Hanno Becker0350d562019-03-28 14:23:36 +0000580 if( crl_file == NULL || strcmp( crl_file, "" ) == 0 )
581 {
582 flags = 0;
Jarno Lamsa03cd1202019-03-27 15:45:04 +0200583
Jarno Lamsa31d9db62019-04-01 14:33:49 +0300584 res = mbedtls_x509_crt_verify_with_ca_cb( &crt, ca_callback, &ca, profile, cn_name, &flags, f_vrfy, NULL );
Jarno Lamsa03cd1202019-03-27 15:45:04 +0200585
Hanno Becker0350d562019-03-28 14:23:36 +0000586 TEST_ASSERT( res == ( result ) );
587 TEST_ASSERT( flags == (uint32_t)( flags_result ) );
588 }
Jarno Lamsa03cd1202019-03-27 15:45:04 +0200589#endif /* MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK */
Paul Bakkerbd51b262014-07-10 15:26:12 +0200590exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200591 mbedtls_x509_crt_free( &crt );
592 mbedtls_x509_crt_free( &ca );
593 mbedtls_x509_crl_free( &crl );
Paul Bakker37940d9f2009-07-10 22:38:58 +0000594}
Paul Bakker33b43f12013-08-20 11:48:36 +0200595/* END_CASE */
Paul Bakker37940d9f2009-07-10 22:38:58 +0000596
Jarno Lamsa557426a2019-03-27 17:08:29 +0200597/* BEGIN_CASE depends_on:MBEDTLS_FS_IO:MBEDTLS_X509_CRT_PARSE_C:MBEDTLS_X509_CRL_PARSE_C:MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK */
598void x509_verify_ca_cb_failure( char *crt_file, char *ca_file, char *name,
Hanno Beckercbb59032019-03-28 14:14:22 +0000599 int exp_ret )
Jarno Lamsa557426a2019-03-27 17:08:29 +0200600{
601 int ret;
602 mbedtls_x509_crt crt;
603 mbedtls_x509_crt ca;
604 uint32_t flags = 0;
Hanno Becker3f932bb2019-03-28 17:06:47 +0000605
Jarno Lamsa557426a2019-03-27 17:08:29 +0200606 mbedtls_x509_crt_init( &crt );
607 mbedtls_x509_crt_init( &ca );
608
609 TEST_ASSERT( mbedtls_x509_crt_parse_file( &crt, crt_file ) == 0 );
610 TEST_ASSERT( mbedtls_x509_crt_parse_file( &ca, ca_file ) == 0 );
611
612 if( strcmp( name, "NULL" ) == 0 )
613 name = NULL;
Hanno Beckercbb59032019-03-28 14:14:22 +0000614
Jarno Lamsa31d9db62019-04-01 14:33:49 +0300615 ret = mbedtls_x509_crt_verify_with_ca_cb( &crt, ca_callback_fail, &ca,
Janos Follathd7ecbd62019-04-05 14:52:17 +0100616 &compat_profile, name, &flags,
617 NULL, NULL );
Jarno Lamsa557426a2019-03-27 17:08:29 +0200618
619 TEST_ASSERT( ret == exp_ret );
Janos Follath846ae7a2019-04-05 16:45:01 +0100620 TEST_ASSERT( flags == (uint32_t)( -1 ) );
Jarno Lamsa557426a2019-03-27 17:08:29 +0200621exit:
622 mbedtls_x509_crt_free( &crt );
623 mbedtls_x509_crt_free( &ca );
624}
625/* END_CASE */
626
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200627/* BEGIN_CASE depends_on:MBEDTLS_FS_IO:MBEDTLS_X509_CRT_PARSE_C */
Manuel Pégourié-Gonnarda6568252017-07-05 18:14:38 +0200628void x509_verify_callback( char *crt_file, char *ca_file, char *name,
Manuel Pégourié-Gonnard560fea32015-09-01 11:59:24 +0200629 int exp_ret, char *exp_vrfy_out )
630{
631 int ret;
632 mbedtls_x509_crt crt;
633 mbedtls_x509_crt ca;
634 uint32_t flags = 0;
635 verify_print_context vrfy_ctx;
636
Jaeden Amero3ea26872019-02-13 11:30:22 +0000637#if defined(MBEDTLS_USE_PSA_CRYPTO)
638 TEST_ASSERT( psa_crypto_init() == 0 );
639#endif
640
Manuel Pégourié-Gonnard560fea32015-09-01 11:59:24 +0200641 mbedtls_x509_crt_init( &crt );
642 mbedtls_x509_crt_init( &ca );
643 verify_print_init( &vrfy_ctx );
644
645 TEST_ASSERT( mbedtls_x509_crt_parse_file( &crt, crt_file ) == 0 );
646 TEST_ASSERT( mbedtls_x509_crt_parse_file( &ca, ca_file ) == 0 );
647
Manuel Pégourié-Gonnarda6568252017-07-05 18:14:38 +0200648 if( strcmp( name, "NULL" ) == 0 )
649 name = NULL;
650
Gilles Peskineef86ab22017-05-05 18:59:02 +0200651 ret = mbedtls_x509_crt_verify_with_profile( &crt, &ca, NULL,
652 &compat_profile,
Manuel Pégourié-Gonnarda6568252017-07-05 18:14:38 +0200653 name, &flags,
Gilles Peskineef86ab22017-05-05 18:59:02 +0200654 verify_print, &vrfy_ctx );
Manuel Pégourié-Gonnard560fea32015-09-01 11:59:24 +0200655
656 TEST_ASSERT( ret == exp_ret );
657 TEST_ASSERT( strcmp( vrfy_ctx.buf, exp_vrfy_out ) == 0 );
658
659exit:
660 mbedtls_x509_crt_free( &crt );
661 mbedtls_x509_crt_free( &ca );
662}
663/* END_CASE */
664
665/* BEGIN_CASE depends_on:MBEDTLS_FS_IO:MBEDTLS_X509_CRT_PARSE_C */
Azim Khanf1aaec92017-05-30 14:23:15 +0100666void mbedtls_x509_dn_gets( char * crt_file, char * entity, char * result_str )
Paul Bakker37940d9f2009-07-10 22:38:58 +0000667{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200668 mbedtls_x509_crt crt;
Paul Bakker37940d9f2009-07-10 22:38:58 +0000669 char buf[2000];
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200670 int res = 0;
Paul Bakker37940d9f2009-07-10 22:38:58 +0000671
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200672 mbedtls_x509_crt_init( &crt );
Paul Bakker37940d9f2009-07-10 22:38:58 +0000673 memset( buf, 0, 2000 );
674
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200675 TEST_ASSERT( mbedtls_x509_crt_parse_file( &crt, crt_file ) == 0 );
Paul Bakker33b43f12013-08-20 11:48:36 +0200676 if( strcmp( entity, "subject" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200677 res = mbedtls_x509_dn_gets( buf, 2000, &crt.subject );
Paul Bakker33b43f12013-08-20 11:48:36 +0200678 else if( strcmp( entity, "issuer" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200679 res = mbedtls_x509_dn_gets( buf, 2000, &crt.issuer );
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200680 else
681 TEST_ASSERT( "Unknown entity" == 0 );
Paul Bakker37940d9f2009-07-10 22:38:58 +0000682
683 TEST_ASSERT( res != -1 );
684 TEST_ASSERT( res != -2 );
685
Paul Bakker33b43f12013-08-20 11:48:36 +0200686 TEST_ASSERT( strcmp( buf, result_str ) == 0 );
Paul Bakkerbd51b262014-07-10 15:26:12 +0200687
688exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200689 mbedtls_x509_crt_free( &crt );
Paul Bakker37940d9f2009-07-10 22:38:58 +0000690}
Paul Bakker33b43f12013-08-20 11:48:36 +0200691/* END_CASE */
Paul Bakker37940d9f2009-07-10 22:38:58 +0000692
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200693/* BEGIN_CASE depends_on:MBEDTLS_FS_IO:MBEDTLS_X509_CRT_PARSE_C */
Azim Khanf1aaec92017-05-30 14:23:15 +0100694void mbedtls_x509_time_is_past( char * crt_file, char * entity, int result )
Paul Bakker37940d9f2009-07-10 22:38:58 +0000695{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200696 mbedtls_x509_crt crt;
Paul Bakker37940d9f2009-07-10 22:38:58 +0000697
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200698 mbedtls_x509_crt_init( &crt );
Paul Bakker37940d9f2009-07-10 22:38:58 +0000699
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200700 TEST_ASSERT( mbedtls_x509_crt_parse_file( &crt, crt_file ) == 0 );
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200701
Paul Bakker33b43f12013-08-20 11:48:36 +0200702 if( strcmp( entity, "valid_from" ) == 0 )
Manuel Pégourié-Gonnardc730ed32015-06-02 10:38:50 +0100703 TEST_ASSERT( mbedtls_x509_time_is_past( &crt.valid_from ) == result );
Paul Bakker33b43f12013-08-20 11:48:36 +0200704 else if( strcmp( entity, "valid_to" ) == 0 )
Manuel Pégourié-Gonnardc730ed32015-06-02 10:38:50 +0100705 TEST_ASSERT( mbedtls_x509_time_is_past( &crt.valid_to ) == result );
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200706 else
707 TEST_ASSERT( "Unknown entity" == 0 );
Paul Bakkerb08e6842012-02-11 18:43:20 +0000708
Paul Bakkerbd51b262014-07-10 15:26:12 +0200709exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200710 mbedtls_x509_crt_free( &crt );
Paul Bakker37940d9f2009-07-10 22:38:58 +0000711}
Paul Bakker33b43f12013-08-20 11:48:36 +0200712/* END_CASE */
Paul Bakker37940d9f2009-07-10 22:38:58 +0000713
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200714/* BEGIN_CASE depends_on:MBEDTLS_FS_IO:MBEDTLS_X509_CRT_PARSE_C */
Azim Khanf1aaec92017-05-30 14:23:15 +0100715void mbedtls_x509_time_is_future( char * crt_file, char * entity, int result )
Manuel Pégourié-Gonnard6304f782014-03-10 12:26:11 +0100716{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200717 mbedtls_x509_crt crt;
Manuel Pégourié-Gonnard6304f782014-03-10 12:26:11 +0100718
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200719 mbedtls_x509_crt_init( &crt );
Manuel Pégourié-Gonnard6304f782014-03-10 12:26:11 +0100720
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200721 TEST_ASSERT( mbedtls_x509_crt_parse_file( &crt, crt_file ) == 0 );
Manuel Pégourié-Gonnard6304f782014-03-10 12:26:11 +0100722
723 if( strcmp( entity, "valid_from" ) == 0 )
Manuel Pégourié-Gonnardc730ed32015-06-02 10:38:50 +0100724 TEST_ASSERT( mbedtls_x509_time_is_future( &crt.valid_from ) == result );
Manuel Pégourié-Gonnard6304f782014-03-10 12:26:11 +0100725 else if( strcmp( entity, "valid_to" ) == 0 )
Manuel Pégourié-Gonnardc730ed32015-06-02 10:38:50 +0100726 TEST_ASSERT( mbedtls_x509_time_is_future( &crt.valid_to ) == result );
Manuel Pégourié-Gonnard6304f782014-03-10 12:26:11 +0100727 else
728 TEST_ASSERT( "Unknown entity" == 0 );
729
Paul Bakkerbd51b262014-07-10 15:26:12 +0200730exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200731 mbedtls_x509_crt_free( &crt );
Manuel Pégourié-Gonnard6304f782014-03-10 12:26:11 +0100732}
733/* END_CASE */
734
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200735/* BEGIN_CASE depends_on:MBEDTLS_X509_CRT_PARSE_C:MBEDTLS_FS_IO */
Azim Khanf1aaec92017-05-30 14:23:15 +0100736void x509parse_crt_file( char * crt_file, int result )
Paul Bakker5a5fa922014-09-26 14:53:04 +0200737{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200738 mbedtls_x509_crt crt;
Paul Bakker5a5fa922014-09-26 14:53:04 +0200739
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200740 mbedtls_x509_crt_init( &crt );
Paul Bakker5a5fa922014-09-26 14:53:04 +0200741
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200742 TEST_ASSERT( mbedtls_x509_crt_parse_file( &crt, crt_file ) == result );
Paul Bakker5a5fa922014-09-26 14:53:04 +0200743
744exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200745 mbedtls_x509_crt_free( &crt );
Paul Bakker5a5fa922014-09-26 14:53:04 +0200746}
747/* END_CASE */
748
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200749/* BEGIN_CASE depends_on:MBEDTLS_X509_CRT_PARSE_C */
Azim Khan5fcca462018-06-29 11:05:32 +0100750void x509parse_crt( data_t * buf, char * result_str, int result )
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000751{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200752 mbedtls_x509_crt crt;
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000753 unsigned char output[2000];
Azim Khanf1aaec92017-05-30 14:23:15 +0100754 int res;
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000755
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200756 mbedtls_x509_crt_init( &crt );
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000757 memset( output, 0, 2000 );
758
Hanno Becker2d8a2c02019-01-31 09:15:53 +0000759 TEST_ASSERT( mbedtls_x509_crt_parse_der( &crt, buf->x, buf->len ) == ( result ) );
760 if( ( result ) == 0 )
761 {
762 res = mbedtls_x509_crt_info( (char *) output, 2000, "", &crt );
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000763
Hanno Becker2d8a2c02019-01-31 09:15:53 +0000764 TEST_ASSERT( res != -1 );
765 TEST_ASSERT( res != -2 );
766
767 TEST_ASSERT( strcmp( (char *) output, result_str ) == 0 );
768 }
769
770 mbedtls_x509_crt_free( &crt );
771 mbedtls_x509_crt_init( &crt );
772 memset( output, 0, 2000 );
773
774 TEST_ASSERT( mbedtls_x509_crt_parse_der_nocopy( &crt, buf->x, buf->len ) == ( result ) );
Paul Bakker33b43f12013-08-20 11:48:36 +0200775 if( ( result ) == 0 )
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000776 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200777 res = mbedtls_x509_crt_info( (char *) output, 2000, "", &crt );
Paul Bakker33b43f12013-08-20 11:48:36 +0200778
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000779 TEST_ASSERT( res != -1 );
780 TEST_ASSERT( res != -2 );
781
Paul Bakker33b43f12013-08-20 11:48:36 +0200782 TEST_ASSERT( strcmp( (char *) output, result_str ) == 0 );
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000783 }
Paul Bakkerb08e6842012-02-11 18:43:20 +0000784
Nicola Di Lieto17bb60c2020-05-28 23:04:15 +0200785 mbedtls_x509_crt_free( &crt );
786 mbedtls_x509_crt_init( &crt );
787 memset( output, 0, 2000 );
788
789 TEST_ASSERT( mbedtls_x509_crt_parse_der_with_ext_cb( &crt, buf->x, buf->len, 0, NULL ) == ( result ) );
790 if( ( result ) == 0 )
791 {
792 res = mbedtls_x509_crt_info( (char *) output, 2000, "", &crt );
793
794 TEST_ASSERT( res != -1 );
795 TEST_ASSERT( res != -2 );
796
797 TEST_ASSERT( strcmp( (char *) output, result_str ) == 0 );
798 }
799
800 mbedtls_x509_crt_free( &crt );
801 mbedtls_x509_crt_init( &crt );
802 memset( output, 0, 2000 );
803
804 TEST_ASSERT( mbedtls_x509_crt_parse_der_with_ext_cb( &crt, buf->x, buf->len, 1, NULL ) == ( result ) );
805 if( ( result ) == 0 )
806 {
807 res = mbedtls_x509_crt_info( (char *) output, 2000, "", &crt );
808
809 TEST_ASSERT( res != -1 );
810 TEST_ASSERT( res != -2 );
811
812 TEST_ASSERT( strcmp( (char *) output, result_str ) == 0 );
813 }
814
815exit:
816 mbedtls_x509_crt_free( &crt );
817}
818/* END_CASE */
819
820/* BEGIN_CASE depends_on:MBEDTLS_X509_CRT_PARSE_C */
821void x509parse_crt_cb( data_t * buf, char * result_str, int result )
822{
823 mbedtls_x509_crt crt;
824 unsigned char output[2000];
825 int res;
826
827 mbedtls_x509_crt_init( &crt );
828 memset( output, 0, 2000 );
829
830 TEST_ASSERT( mbedtls_x509_crt_parse_der_with_ext_cb( &crt, buf->x, buf->len, 0, parse_crt_ext_cb ) == ( result ) );
831 if( ( result ) == 0 )
832 {
833 res = mbedtls_x509_crt_info( (char *) output, 2000, "", &crt );
834
835 TEST_ASSERT( res != -1 );
836 TEST_ASSERT( res != -2 );
837
838 TEST_ASSERT( strcmp( (char *) output, result_str ) == 0 );
839 }
840
841 mbedtls_x509_crt_free( &crt );
842 mbedtls_x509_crt_init( &crt );
843 memset( output, 0, 2000 );
844
845 TEST_ASSERT( mbedtls_x509_crt_parse_der_with_ext_cb( &crt, buf->x, buf->len, 1, parse_crt_ext_cb ) == ( result ) );
846 if( ( result ) == 0 )
847 {
848 res = mbedtls_x509_crt_info( (char *) output, 2000, "", &crt );
849
850 TEST_ASSERT( res != -1 );
851 TEST_ASSERT( res != -2 );
852
853 TEST_ASSERT( strcmp( (char *) output, result_str ) == 0 );
854 }
855
Paul Bakkerbd51b262014-07-10 15:26:12 +0200856exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200857 mbedtls_x509_crt_free( &crt );
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000858}
Paul Bakker33b43f12013-08-20 11:48:36 +0200859/* END_CASE */
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000860
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200861/* BEGIN_CASE depends_on:MBEDTLS_X509_CRL_PARSE_C */
Azim Khan5fcca462018-06-29 11:05:32 +0100862void x509parse_crl( data_t * buf, char * result_str, int result )
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000863{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200864 mbedtls_x509_crl crl;
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000865 unsigned char output[2000];
Azim Khanf1aaec92017-05-30 14:23:15 +0100866 int res;
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000867
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200868 mbedtls_x509_crl_init( &crl );
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000869 memset( output, 0, 2000 );
870
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000871
Azim Khand30ca132017-06-09 04:32:58 +0100872 TEST_ASSERT( mbedtls_x509_crl_parse( &crl, buf->x, buf->len ) == ( result ) );
Paul Bakker33b43f12013-08-20 11:48:36 +0200873 if( ( result ) == 0 )
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000874 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200875 res = mbedtls_x509_crl_info( (char *) output, 2000, "", &crl );
Paul Bakker33b43f12013-08-20 11:48:36 +0200876
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000877 TEST_ASSERT( res != -1 );
878 TEST_ASSERT( res != -2 );
879
Paul Bakker33b43f12013-08-20 11:48:36 +0200880 TEST_ASSERT( strcmp( (char *) output, result_str ) == 0 );
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000881 }
Paul Bakkerb08e6842012-02-11 18:43:20 +0000882
Paul Bakkerbd51b262014-07-10 15:26:12 +0200883exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200884 mbedtls_x509_crl_free( &crl );
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000885}
Paul Bakker33b43f12013-08-20 11:48:36 +0200886/* END_CASE */
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000887
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200888/* BEGIN_CASE depends_on:MBEDTLS_X509_CSR_PARSE_C */
Azim Khan5fcca462018-06-29 11:05:32 +0100889void mbedtls_x509_csr_parse( data_t * csr_der, char * ref_out, int ref_ret )
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200890{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200891 mbedtls_x509_csr csr;
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200892 char my_out[1000];
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200893 int my_ret;
894
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200895 mbedtls_x509_csr_init( &csr );
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200896 memset( my_out, 0, sizeof( my_out ) );
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200897
Azim Khand30ca132017-06-09 04:32:58 +0100898 my_ret = mbedtls_x509_csr_parse_der( &csr, csr_der->x, csr_der->len );
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200899 TEST_ASSERT( my_ret == ref_ret );
900
901 if( ref_ret == 0 )
902 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200903 size_t my_out_len = mbedtls_x509_csr_info( my_out, sizeof( my_out ), "", &csr );
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200904 TEST_ASSERT( my_out_len == strlen( ref_out ) );
905 TEST_ASSERT( strcmp( my_out, ref_out ) == 0 );
906 }
907
Paul Bakkerbd51b262014-07-10 15:26:12 +0200908exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200909 mbedtls_x509_csr_free( &csr );
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200910}
911/* END_CASE */
912
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200913/* BEGIN_CASE depends_on:MBEDTLS_FS_IO:MBEDTLS_X509_CRT_PARSE_C */
Azim Khanf1aaec92017-05-30 14:23:15 +0100914void mbedtls_x509_crt_parse_path( char * crt_path, int ret, int nb_crt )
Manuel Pégourié-Gonnardfbae2a12013-11-26 16:43:39 +0100915{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200916 mbedtls_x509_crt chain, *cur;
Manuel Pégourié-Gonnardfbae2a12013-11-26 16:43:39 +0100917 int i;
918
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200919 mbedtls_x509_crt_init( &chain );
Manuel Pégourié-Gonnardfbae2a12013-11-26 16:43:39 +0100920
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200921 TEST_ASSERT( mbedtls_x509_crt_parse_path( &chain, crt_path ) == ret );
Manuel Pégourié-Gonnardfbae2a12013-11-26 16:43:39 +0100922
923 /* Check how many certs we got */
924 for( i = 0, cur = &chain; cur != NULL; cur = cur->next )
925 if( cur->raw.p != NULL )
926 i++;
927
928 TEST_ASSERT( i == nb_crt );
929
Paul Bakkerbd51b262014-07-10 15:26:12 +0200930exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200931 mbedtls_x509_crt_free( &chain );
Manuel Pégourié-Gonnardfbae2a12013-11-26 16:43:39 +0100932}
933/* END_CASE */
934
Janos Follath822b2c32015-10-11 10:25:22 +0200935/* BEGIN_CASE depends_on:MBEDTLS_FS_IO:MBEDTLS_X509_CRT_PARSE_C */
Manuel Pégourié-Gonnard1beb0482017-06-05 13:49:44 +0200936void mbedtls_x509_crt_verify_max( char *ca_file, char *chain_dir, int nb_int,
937 int ret_chk, int flags_chk )
938{
939 char file_buf[128];
940 int ret;
941 uint32_t flags;
942 mbedtls_x509_crt trusted, chain;
943
Jaeden Amero3ea26872019-02-13 11:30:22 +0000944#if defined(MBEDTLS_USE_PSA_CRYPTO)
945 TEST_ASSERT( psa_crypto_init() == 0 );
946#endif
947
Manuel Pégourié-Gonnard1beb0482017-06-05 13:49:44 +0200948 /*
949 * We expect chain_dir to contain certificates 00.crt, 01.crt, etc.
950 * with NN.crt signed by NN-1.crt
951 */
952
953 mbedtls_x509_crt_init( &trusted );
954 mbedtls_x509_crt_init( &chain );
955
956 /* Load trusted root */
957 TEST_ASSERT( mbedtls_x509_crt_parse_file( &trusted, ca_file ) == 0 );
958
959 /* Load a chain with nb_int intermediates (from 01 to nb_int),
960 * plus one "end-entity" cert (nb_int + 1) */
961 ret = mbedtls_snprintf( file_buf, sizeof file_buf, "%s/c%02d.pem", chain_dir,
962 nb_int + 1 );
963 TEST_ASSERT( ret > 0 && (size_t) ret < sizeof file_buf );
964 TEST_ASSERT( mbedtls_x509_crt_parse_file( &chain, file_buf ) == 0 );
965
966 /* Try to verify that chain */
967 ret = mbedtls_x509_crt_verify( &chain, &trusted, NULL, NULL, &flags,
968 NULL, NULL );
969 TEST_ASSERT( ret == ret_chk );
970 TEST_ASSERT( flags == (uint32_t) flags_chk );
971
972exit:
973 mbedtls_x509_crt_free( &chain );
974 mbedtls_x509_crt_free( &trusted );
975}
976/* END_CASE */
977
978/* BEGIN_CASE depends_on:MBEDTLS_FS_IO:MBEDTLS_X509_CRT_PARSE_C */
Manuel Pégourié-Gonnarde54931f2017-05-22 12:04:25 +0200979void mbedtls_x509_crt_verify_chain( char *chain_paths, char *trusted_ca,
980 int flags_result, int result,
Manuel Pégourié-Gonnard6b9d53f2017-05-23 12:26:58 +0200981 char *profile_name, int vrfy_fatal_lvls )
Janos Follath822b2c32015-10-11 10:25:22 +0200982{
983 char* act;
984 uint32_t flags;
Manuel Pégourié-Gonnarde54931f2017-05-22 12:04:25 +0200985 int res;
Manuel Pégourié-Gonnarde670f902015-10-30 09:23:19 +0100986 mbedtls_x509_crt trusted, chain;
Manuel Pégourié-Gonnarde54931f2017-05-22 12:04:25 +0200987 const mbedtls_x509_crt_profile *profile = NULL;
Janos Follathef4f2582015-10-11 16:17:27 +0200988
Jaeden Amero3ea26872019-02-13 11:30:22 +0000989#if defined(MBEDTLS_USE_PSA_CRYPTO)
990 TEST_ASSERT( psa_crypto_init() == 0 );
991#endif
992
Janos Follath822b2c32015-10-11 10:25:22 +0200993 mbedtls_x509_crt_init( &chain );
994 mbedtls_x509_crt_init( &trusted );
995
Manuel Pégourié-Gonnarda8838af2015-11-02 06:34:46 +0900996 while( ( act = mystrsep( &chain_paths, " " ) ) != NULL )
Manuel Pégourié-Gonnarde670f902015-10-30 09:23:19 +0100997 TEST_ASSERT( mbedtls_x509_crt_parse_file( &chain, act ) == 0 );
998 TEST_ASSERT( mbedtls_x509_crt_parse_file( &trusted, trusted_ca ) == 0 );
Janos Follath822b2c32015-10-11 10:25:22 +0200999
Manuel Pégourié-Gonnardea2dc142017-08-08 11:10:37 +02001000 if( strcmp( profile_name, "" ) == 0 )
Manuel Pégourié-Gonnarde54931f2017-05-22 12:04:25 +02001001 profile = &mbedtls_x509_crt_profile_default;
Manuel Pégourié-Gonnardea2dc142017-08-08 11:10:37 +02001002 else if( strcmp( profile_name, "next" ) == 0 )
Manuel Pégourié-Gonnarde54931f2017-05-22 12:04:25 +02001003 profile = &mbedtls_x509_crt_profile_next;
Manuel Pégourié-Gonnardea2dc142017-08-08 11:10:37 +02001004 else if( strcmp( profile_name, "suiteb" ) == 0 )
Manuel Pégourié-Gonnarde54931f2017-05-22 12:04:25 +02001005 profile = &mbedtls_x509_crt_profile_suiteb;
Manuel Pégourié-Gonnardea2dc142017-08-08 11:10:37 +02001006 else if( strcmp( profile_name, "rsa3072" ) == 0 )
Manuel Pégourié-Gonnard6622fed2017-05-23 11:29:29 +02001007 profile = &profile_rsa3072;
Manuel Pégourié-Gonnardea2dc142017-08-08 11:10:37 +02001008 else if( strcmp( profile_name, "sha512" ) == 0 )
Manuel Pégourié-Gonnard6622fed2017-05-23 11:29:29 +02001009 profile = &profile_sha512;
Manuel Pégourié-Gonnarde54931f2017-05-22 12:04:25 +02001010
1011 res = mbedtls_x509_crt_verify_with_profile( &chain, &trusted, NULL, profile,
Manuel Pégourié-Gonnard6b9d53f2017-05-23 12:26:58 +02001012 NULL, &flags, verify_fatal, &vrfy_fatal_lvls );
Janos Follathef4f2582015-10-11 16:17:27 +02001013
1014 TEST_ASSERT( res == ( result ) );
1015 TEST_ASSERT( flags == (uint32_t)( flags_result ) );
Janos Follath822b2c32015-10-11 10:25:22 +02001016
1017exit:
1018 mbedtls_x509_crt_free( &trusted );
1019 mbedtls_x509_crt_free( &chain );
1020}
1021/* END_CASE */
1022
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001023/* BEGIN_CASE depends_on:MBEDTLS_X509_USE_C */
Azim Khan5fcca462018-06-29 11:05:32 +01001024void x509_oid_desc( data_t * buf, char * ref_desc )
Manuel Pégourié-Gonnard7afdb882014-03-28 16:06:35 +01001025{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001026 mbedtls_x509_buf oid;
Manuel Pégourié-Gonnard48d3cef2015-03-20 18:14:26 +00001027 const char *desc = NULL;
Manuel Pégourié-Gonnard48d3cef2015-03-20 18:14:26 +00001028 int ret;
Manuel Pégourié-Gonnard7afdb882014-03-28 16:06:35 +01001029
Manuel Pégourié-Gonnard7afdb882014-03-28 16:06:35 +01001030
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001031 oid.tag = MBEDTLS_ASN1_OID;
Azim Khand30ca132017-06-09 04:32:58 +01001032 oid.p = buf->x;
1033 oid.len = buf->len;
Manuel Pégourié-Gonnard7afdb882014-03-28 16:06:35 +01001034
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001035 ret = mbedtls_oid_get_extended_key_usage( &oid, &desc );
Manuel Pégourié-Gonnard7afdb882014-03-28 16:06:35 +01001036
1037 if( strcmp( ref_desc, "notfound" ) == 0 )
Manuel Pégourié-Gonnard48d3cef2015-03-20 18:14:26 +00001038 {
1039 TEST_ASSERT( ret != 0 );
Manuel Pégourié-Gonnard7afdb882014-03-28 16:06:35 +01001040 TEST_ASSERT( desc == NULL );
Manuel Pégourié-Gonnard48d3cef2015-03-20 18:14:26 +00001041 }
Manuel Pégourié-Gonnard7afdb882014-03-28 16:06:35 +01001042 else
1043 {
Manuel Pégourié-Gonnard48d3cef2015-03-20 18:14:26 +00001044 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard7afdb882014-03-28 16:06:35 +01001045 TEST_ASSERT( desc != NULL );
1046 TEST_ASSERT( strcmp( desc, ref_desc ) == 0 );
1047 }
1048}
1049/* END_CASE */
1050
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001051/* BEGIN_CASE depends_on:MBEDTLS_X509_USE_C */
Azim Khan5fcca462018-06-29 11:05:32 +01001052void x509_oid_numstr( data_t * oid_buf, char * numstr, int blen, int ret )
Manuel Pégourié-Gonnard7afdb882014-03-28 16:06:35 +01001053{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001054 mbedtls_x509_buf oid;
Manuel Pégourié-Gonnard7afdb882014-03-28 16:06:35 +01001055 char num_buf[100];
1056
Manuel Pégourié-Gonnard7afdb882014-03-28 16:06:35 +01001057 memset( num_buf, 0x2a, sizeof num_buf );
1058
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001059 oid.tag = MBEDTLS_ASN1_OID;
Azim Khand30ca132017-06-09 04:32:58 +01001060 oid.p = oid_buf->x;
1061 oid.len = oid_buf->len;
Manuel Pégourié-Gonnard7afdb882014-03-28 16:06:35 +01001062
1063 TEST_ASSERT( (size_t) blen <= sizeof num_buf );
1064
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001065 TEST_ASSERT( mbedtls_oid_get_numeric_string( num_buf, blen, &oid ) == ret );
Manuel Pégourié-Gonnard7afdb882014-03-28 16:06:35 +01001066
1067 if( ret >= 0 )
1068 {
1069 TEST_ASSERT( num_buf[ret] == 0 );
1070 TEST_ASSERT( strcmp( num_buf, numstr ) == 0 );
1071 }
1072}
1073/* END_CASE */
1074
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001075/* BEGIN_CASE depends_on:MBEDTLS_FS_IO:MBEDTLS_X509_CRT_PARSE_C:MBEDTLS_X509_CHECK_KEY_USAGE */
Azim Khanf1aaec92017-05-30 14:23:15 +01001076void x509_check_key_usage( char * crt_file, int usage, int ret )
Manuel Pégourié-Gonnard603116c2014-04-09 09:50:03 +02001077{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001078 mbedtls_x509_crt crt;
Manuel Pégourié-Gonnard603116c2014-04-09 09:50:03 +02001079
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001080 mbedtls_x509_crt_init( &crt );
Manuel Pégourié-Gonnard603116c2014-04-09 09:50:03 +02001081
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001082 TEST_ASSERT( mbedtls_x509_crt_parse_file( &crt, crt_file ) == 0 );
Manuel Pégourié-Gonnard603116c2014-04-09 09:50:03 +02001083
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001084 TEST_ASSERT( mbedtls_x509_crt_check_key_usage( &crt, usage ) == ret );
Manuel Pégourié-Gonnard603116c2014-04-09 09:50:03 +02001085
Paul Bakkerbd51b262014-07-10 15:26:12 +02001086exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001087 mbedtls_x509_crt_free( &crt );
Manuel Pégourié-Gonnard603116c2014-04-09 09:50:03 +02001088}
1089/* END_CASE */
1090
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001091/* BEGIN_CASE depends_on:MBEDTLS_FS_IO:MBEDTLS_X509_CRT_PARSE_C:MBEDTLS_X509_CHECK_EXTENDED_KEY_USAGE */
Azim Khan5fcca462018-06-29 11:05:32 +01001092void x509_check_extended_key_usage( char * crt_file, data_t * oid, int ret
Azim Khand30ca132017-06-09 04:32:58 +01001093 )
Manuel Pégourié-Gonnard7afb8a02014-04-10 17:53:56 +02001094{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001095 mbedtls_x509_crt crt;
Manuel Pégourié-Gonnard7afb8a02014-04-10 17:53:56 +02001096
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001097 mbedtls_x509_crt_init( &crt );
Manuel Pégourié-Gonnard7afb8a02014-04-10 17:53:56 +02001098
Manuel Pégourié-Gonnard7afb8a02014-04-10 17:53:56 +02001099
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001100 TEST_ASSERT( mbedtls_x509_crt_parse_file( &crt, crt_file ) == 0 );
Manuel Pégourié-Gonnard7afb8a02014-04-10 17:53:56 +02001101
Azim Khand30ca132017-06-09 04:32:58 +01001102 TEST_ASSERT( mbedtls_x509_crt_check_extended_key_usage( &crt, (const char *)oid->x, oid->len ) == ret );
Manuel Pégourié-Gonnard7afb8a02014-04-10 17:53:56 +02001103
Paul Bakkerbd51b262014-07-10 15:26:12 +02001104exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001105 mbedtls_x509_crt_free( &crt );
Manuel Pégourié-Gonnard7afb8a02014-04-10 17:53:56 +02001106}
1107/* END_CASE */
1108
Andres AG4b76aec2016-09-23 13:16:02 +01001109/* BEGIN_CASE depends_on:MBEDTLS_X509_USE_C */
Azim Khanf1aaec92017-05-30 14:23:15 +01001110void x509_get_time( int tag, char * time_str, int ret, int year, int mon,
1111 int day, int hour, int min, int sec )
Andres AG4b76aec2016-09-23 13:16:02 +01001112{
1113 mbedtls_x509_time time;
Janos Follathea7054a2017-02-08 14:13:02 +00001114 unsigned char buf[21];
Andres AG4b76aec2016-09-23 13:16:02 +01001115 unsigned char* start = buf;
1116 unsigned char* end = buf;
1117
1118 memset( &time, 0x00, sizeof( time ) );
1119 *end = (unsigned char)tag; end++;
Janos Follathea7054a2017-02-08 14:13:02 +00001120 *end = strlen( time_str );
1121 TEST_ASSERT( *end < 20 );
Andres AG4b76aec2016-09-23 13:16:02 +01001122 end++;
1123 memcpy( end, time_str, (size_t)*(end - 1) );
1124 end += *(end - 1);
1125
1126 TEST_ASSERT( mbedtls_x509_get_time( &start, end, &time ) == ret );
1127 if( ret == 0 )
1128 {
1129 TEST_ASSERT( year == time.year );
1130 TEST_ASSERT( mon == time.mon );
1131 TEST_ASSERT( day == time.day );
1132 TEST_ASSERT( hour == time.hour );
1133 TEST_ASSERT( min == time.min );
1134 TEST_ASSERT( sec == time.sec );
1135 }
1136}
1137/* END_CASE */
1138
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001139/* BEGIN_CASE depends_on:MBEDTLS_X509_CRT_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT */
Azim Khan5fcca462018-06-29 11:05:32 +01001140void x509_parse_rsassa_pss_params( data_t * hex_params, int params_tag,
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +02001141 int ref_msg_md, int ref_mgf_md,
1142 int ref_salt_len, int ref_ret )
1143{
1144 int my_ret;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001145 mbedtls_x509_buf params;
1146 mbedtls_md_type_t my_msg_md, my_mgf_md;
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +02001147 int my_salt_len;
1148
Azim Khand30ca132017-06-09 04:32:58 +01001149 params.p = hex_params->x;
1150 params.len = hex_params->len;
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +02001151 params.tag = params_tag;
1152
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001153 my_ret = mbedtls_x509_get_rsassa_pss_params( &params, &my_msg_md, &my_mgf_md,
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +02001154 &my_salt_len );
1155
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +02001156 TEST_ASSERT( my_ret == ref_ret );
1157
1158 if( ref_ret == 0 )
1159 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001160 TEST_ASSERT( my_msg_md == (mbedtls_md_type_t) ref_msg_md );
1161 TEST_ASSERT( my_mgf_md == (mbedtls_md_type_t) ref_mgf_md );
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +02001162 TEST_ASSERT( my_salt_len == ref_salt_len );
1163 }
1164
Paul Bakkerbd51b262014-07-10 15:26:12 +02001165exit:
Azim Khand30ca132017-06-09 04:32:58 +01001166 ;;
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +02001167}
1168/* END_CASE */
1169
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001170/* BEGIN_CASE depends_on:MBEDTLS_X509_CRT_PARSE_C:MBEDTLS_SELF_TEST */
Azim Khanf1aaec92017-05-30 14:23:15 +01001171void x509_selftest( )
Paul Bakker37940d9f2009-07-10 22:38:58 +00001172{
Andres AG93012e82016-09-09 09:10:28 +01001173 TEST_ASSERT( mbedtls_x509_self_test( 1 ) == 0 );
Paul Bakker37940d9f2009-07-10 22:38:58 +00001174}
Paul Bakker33b43f12013-08-20 11:48:36 +02001175/* END_CASE */