124 lines
4.0 KiB
C
124 lines
4.0 KiB
C
/**
|
|
* @file pkcs12Test.c
|
|
* @version $Format:%h%d$
|
|
*
|
|
* Test program that tries out the new extensions to pkcs12 parsing.
|
|
*/
|
|
/*
|
|
* Copyright (c) 2020 INSIDE Secure Corporation
|
|
* All Rights Reserved
|
|
*
|
|
* The latest version of this code is available at http://www.matrixssl.org
|
|
*
|
|
* This software is open source; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This General Public License does NOT permit incorporating this software
|
|
* into proprietary programs. If you are unable to comply with the GPL, a
|
|
* commercial license for this software may be purchased from Rambus at
|
|
* http://www.rambus.com/
|
|
*
|
|
* This program is distributed in WITHOUT ANY WARRANTY; without even the
|
|
* implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
|
|
* See the GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
* http://www.gnu.org/copyleft/gpl.html
|
|
*/
|
|
/******************************************************************************/
|
|
#ifndef _POSIX_C_SOURCE
|
|
# define _POSIX_C_SOURCE 200112L
|
|
#endif
|
|
|
|
#include "matrixssl/matrixsslImpl.h"
|
|
#include <stdlib.h>
|
|
|
|
#include "osdep_stdio.h"
|
|
|
|
void test_parse_pfx(int32 expected_rc,
|
|
const char* file,
|
|
const char* pass, int32 passlen,
|
|
const char* mpass, int32 mpasslen)
|
|
{
|
|
sslKeys_t *keys = NULL;
|
|
int32 rc = 0;
|
|
|
|
if (matrixSslNewKeys(&keys, NULL) < 0)
|
|
{
|
|
_psTrace("MatrixSSL library key init failure. Exiting\n");
|
|
return;
|
|
}
|
|
|
|
rc = matrixSslLoadPkcs12(keys,
|
|
(unsigned char*)file,
|
|
(const unsigned char*)pass,
|
|
passlen,
|
|
(const unsigned char*)mpass,
|
|
mpasslen,
|
|
0);
|
|
if (rc == expected_rc)
|
|
{
|
|
Printf("SUCCESS: File %s parsed with expected return value: %d\n", file, rc);
|
|
}
|
|
else
|
|
{
|
|
Printf("FAIL: File %s parsed with return value %d, expected %d\n",
|
|
file, rc, expected_rc);
|
|
}
|
|
|
|
matrixSslDeleteKeys(keys);
|
|
}
|
|
|
|
int main()
|
|
{
|
|
int rc = 0;
|
|
Printf("Parsing self generated files.\n");
|
|
/*
|
|
Generated with:
|
|
openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365
|
|
openssl pkcs12 -export -inkey key.pem -in cert.pem -out test.pfx \
|
|
-keypbe aes-256-cbc -macalg sha256 -certpbe NONE
|
|
*/
|
|
test_parse_pfx(PS_SUCCESS,
|
|
"pfx/test-onepass.pfx", "1234", 4, NULL, 0);
|
|
|
|
/* Test wrong password */
|
|
test_parse_pfx(PS_FAILURE,
|
|
"pfx/test-onepass.pfx", "0000", 4, NULL, 0);
|
|
|
|
/*
|
|
Generated with:
|
|
openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365
|
|
openssl pkcs12 -export -inkey key.pem -in cert.pem -out test.pfx \
|
|
-keypbe aes-256-cbc -macalg sha256 -certpbe NONE -twopass
|
|
*/
|
|
test_parse_pfx(PS_SUCCESS,
|
|
"pfx/test-twopass.pfx", "1234", 4, "2345", 4);
|
|
|
|
/* Test wrong encryption password. */
|
|
test_parse_pfx(PS_FAILURE,
|
|
"pfx/test-twopass.pfx", "0000", 4, "2345", 4);
|
|
|
|
/* Test wrong authentication password. */
|
|
test_parse_pfx(PS_AUTH_FAIL,
|
|
"pfx/test-twopass.pfx", "1234", 4, "0000", 4);
|
|
|
|
/*
|
|
Same as pfx/test-twopass.pfx, but one bit corrupted in integrity hash.
|
|
*/
|
|
test_parse_pfx(PS_AUTH_FAIL,
|
|
"pfx/test-onepass-corrupt.pfx", "1234", 4, NULL, 0);
|
|
|
|
/*
|
|
Same as pfx/test-twopass.pfx, but one bit corrupted in the middle of file.
|
|
*/
|
|
test_parse_pfx(PS_AUTH_FAIL,
|
|
"pfx/test-twopass-corrupt.pfx", "1234", 4, "2345", 4);
|
|
|
|
return rc;
|
|
}
|