|
Packit Service |
4684c1 |
/*
|
|
Packit Service |
4684c1 |
* Copyright (C) 2008-2014 Free Software Foundation, Inc.
|
|
Packit Service |
4684c1 |
*
|
|
Packit Service |
4684c1 |
* Author: Simon Josefsson, Nikos Mavrogiannopoulos
|
|
Packit Service |
4684c1 |
*
|
|
Packit Service |
4684c1 |
* This file is part of GnuTLS.
|
|
Packit Service |
4684c1 |
*
|
|
Packit Service |
4684c1 |
* GnuTLS is free software; you can redistribute it and/or modify it
|
|
Packit Service |
4684c1 |
* under the terms of the GNU General Public License as published by
|
|
Packit Service |
4684c1 |
* the Free Software Foundation; either version 3 of the License, or
|
|
Packit Service |
4684c1 |
* (at your option) any later version.
|
|
Packit Service |
4684c1 |
*
|
|
Packit Service |
4684c1 |
* GnuTLS is distributed in the hope that it will be useful, but
|
|
Packit Service |
4684c1 |
* WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
Packit Service |
4684c1 |
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
Packit Service |
4684c1 |
* General Public License for more details.
|
|
Packit Service |
4684c1 |
*
|
|
Packit Service |
4684c1 |
* You should have received a copy of the GNU General Public License
|
|
Packit Service |
4684c1 |
* along with GnuTLS; if not, write to the Free Software Foundation,
|
|
Packit Service |
4684c1 |
* Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA
|
|
Packit Service |
4684c1 |
*/
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
#ifdef HAVE_CONFIG_H
|
|
Packit Service |
4684c1 |
#include <config.h>
|
|
Packit Service |
4684c1 |
#endif
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
#include <stdio.h>
|
|
Packit Service |
4684c1 |
#include <stdlib.h>
|
|
Packit Service |
4684c1 |
#include <string.h>
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
#include <gnutls/gnutls.h>
|
|
Packit Service |
4684c1 |
#include <gnutls/x509.h>
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
#include "utils.h"
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
static const char *simple1[] = {
|
|
Packit Service |
4684c1 |
/* CRL */
|
|
Packit Service |
4684c1 |
"-----BEGIN X509 CRL-----\n"
|
|
Packit Service |
4684c1 |
"MIIBmjCBgwIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDEwRDQS0wGA8yMDE0\n"
|
|
Packit Service |
4684c1 |
"MDkxMzA5MDUyM1oYDzIwMTUwOTEzMDkwNTIzWjAAoDowODAfBgNVHSMEGDAWgBTx\n"
|
|
Packit Service |
4684c1 |
"Fcb1FYLbhH9yuqg4wlVJUZnYKTAVBgNVHRQEDgIMVBQI0zeJoFHkLaWNMA0GCSqG\n"
|
|
Packit Service |
4684c1 |
"SIb3DQEBCwUAA4IBAQB6SGYePy1MBmtELyWdnlJHlQ4bBgb4vjuLDSfH0X6b4dAS\n"
|
|
Packit Service |
4684c1 |
"MEZws8iA5SaJFIioIP41s3lfQ1Am7GjSoNccHdrLmEcUSTQLwLYaDL8SgxekP5Au\n"
|
|
Packit Service |
4684c1 |
"w8HTu1cz/mnjBBDURq1RvyGNFm6MXf1Rg/bHSea/EpDkn8KY152BT1/46iQ+Uho6\n"
|
|
Packit Service |
4684c1 |
"hz6UUWsTB4Lj25X8F2hlKwQcb3E63Or2XEPBw4rhaCDFAtSZeBaGUUSJ8CLUKXZf\n"
|
|
Packit Service |
4684c1 |
"5b45MjiZ/osgd81tfn3wdQVjDnaQwNtjeRbK+qU0Z4pIKBvHzRS/fZKwTnrK1DLI\n"
|
|
Packit Service |
4684c1 |
"yY/nqBJT/+Q5zdUx5FXp0bwyZuarJ1GHqcES3Rz1\n"
|
|
Packit Service |
4684c1 |
"-----END X509 CRL-----\n",
|
|
Packit Service |
4684c1 |
/* CA - cert_signing_key only */
|
|
Packit Service |
4684c1 |
"-----BEGIN CERTIFICATE-----\n"
|
|
Packit Service |
4684c1 |
"MIIC4DCCAcigAwIBAgIBADANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDEwRDQS0w\n"
|
|
Packit Service |
4684c1 |
"MCIYDzIwMTQwOTEzMDkwNTIzWhgPOTk5OTEyMzEyMzU5NTlaMA8xDTALBgNVBAMT\n"
|
|
Packit Service |
4684c1 |
"BENBLTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCybbzvQTOmfwlA\n"
|
|
Packit Service |
4684c1 |
"+q8F/4ms42nhl5lo1lK6JCvE7jZdhqZNXE8e1eNACrU6rCxRQynDhOyAOCLQAAul\n"
|
|
Packit Service |
4684c1 |
"ivNMCW+SFN0IkSYXSRM8aWIDOZT8FyWB3yJSyvi3+SMgm7OYHFW8htH8qaIv0xJf\n"
|
|
Packit Service |
4684c1 |
"1h/ADBE62j9uaQIg7qSn6pVHMDHaITAbPg3y6II1iP3W28Vj/rtvK9yoZu4AThSD\n"
|
|
Packit Service |
4684c1 |
"Vdjl8WT4b4VOBbmioSNCDjx2C73+HLM2eUsdumCVcjWD9gkvCKkqTbOVplGRvCzO\n"
|
|
Packit Service |
4684c1 |
"sKNVGJamH9eGOjF2Az9XuYR+m7jWdIyTitLtbliyFiWwFguQ7BAPVnUS3TSKoLKL\n"
|
|
Packit Service |
4684c1 |
"X9WRGDIVAgMBAAGjQzBBMA8GA1UdEwEB/wQFMAMBAf8wDwYDVR0PAQH/BAUDAwcG\n"
|
|
Packit Service |
4684c1 |
"ADAdBgNVHQ4EFgQU8RXG9RWC24R/crqoOMJVSVGZ2CkwDQYJKoZIhvcNAQELBQAD\n"
|
|
Packit Service |
4684c1 |
"ggEBAASDvSD6Gt9E/IANgJ2lq7cvqKHhK/S0crpBHmzouLU1YANAbva8vZ2iVsgP\n"
|
|
Packit Service |
4684c1 |
"ojj5+QKosXgZM67g1u4Vr/Kt7APwYDVV9NlfE7BLSaksaQbh6J464rJ8pXONW6xP\n"
|
|
Packit Service |
4684c1 |
"z6tl/Pm1RqXuxzgnUv700OFuxBnnbglz9aQk5eS7kag8bfUx8MfN5gbW34nB79fn\n"
|
|
Packit Service |
4684c1 |
"5943Z8DmcDfUQZRY66v4S/NAYs7s96ABMB18u9Ct6KqGP/LKfDt2bgeTE/1b68T+\n"
|
|
Packit Service |
4684c1 |
"xmYF8N+JsJ3qP4lqBHgHLUL945nEoG8yDPIiZw3pmw1SyS0ktoVASynAh3W5j//r\n"
|
|
Packit Service |
4684c1 |
"d9Uk2Ojqo2tp/lJ0LCuQ3nWeM2Y=\n"
|
|
Packit Service |
4684c1 |
"-----END CERTIFICATE-----\n"
|
|
Packit Service |
4684c1 |
};
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
static const char *simple1_broken[] = {
|
|
Packit Service |
4684c1 |
/* CRL with some bits flipped */
|
|
Packit Service |
4684c1 |
"-----BEGIN X509 CRL-----\n"
|
|
Packit Service |
4684c1 |
"MIIBmjCBgwIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDEwRDQS0wGA8yMDE0\n"
|
|
Packit Service |
4684c1 |
"MDkxMzA5MDUyM1oYDzIwMTUwOTEzMDkwNTIzWjAAoDowODAfBgNVHSMEGDAWgBTx\n"
|
|
Packit Service |
4684c1 |
"Fcb1FYLbhH9yuqg4wlVJUZnYKTAVBgNVHRQEDgIMVBQI0zeJoFHkLaWNMA0GCSqG\n"
|
|
Packit Service |
4684c1 |
"SIb3DQEBCwUAA4IBAQB6SGYePy1MBmtELyWdnlJHlQ4bBgb4vjuLDSfH0X6b4dAS\n"
|
|
Packit Service |
4684c1 |
"MEZws8iA5SaJFIioIP41s3lfQ1Am7GjSoNccHdrLmEcUSTQLwLYaDL8SgxekP5Au\n"
|
|
Packit Service |
4684c1 |
"w8HTu1cz/mnjBBDURq1RvyGNFm6MXf1Rg/bHSea/EpDkn8KY152BT1/46iQ+Uho6\n"
|
|
Packit Service |
4684c1 |
"hz6UUWsTB4Lj25X8F3hlKwQcb3E63Or2XEPBw4rhaCDFAtSZeBaGUUSJ8CLUKXZf\n"
|
|
Packit Service |
4684c1 |
"5b45MjiZ/osgd81tfn3wdQVjDnaQwNtjeRbK+qU0Z4pIKBvHzRS/fZKwTnrK1DLI\n"
|
|
Packit Service |
4684c1 |
"yY/nqBJT/+Q5zdUx5FXp0bwyZuarJ1GHqcES3Rz1\n"
|
|
Packit Service |
4684c1 |
"-----END X509 CRL-----\n",
|
|
Packit Service |
4684c1 |
/* CA - cert_signing_key only */
|
|
Packit Service |
4684c1 |
"-----BEGIN CERTIFICATE-----\n"
|
|
Packit Service |
4684c1 |
"MIIC4DCCAcigAwIBAgIBADANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDEwRDQS0w\n"
|
|
Packit Service |
4684c1 |
"MCIYDzIwMTQwOTEzMDkwNTIzWhgPOTk5OTEyMzEyMzU5NTlaMA8xDTALBgNVBAMT\n"
|
|
Packit Service |
4684c1 |
"BENBLTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCybbzvQTOmfwlA\n"
|
|
Packit Service |
4684c1 |
"+q8F/4ms42nhl5lo1lK6JCvE7jZdhqZNXE8e1eNACrU6rCxRQynDhOyAOCLQAAul\n"
|
|
Packit Service |
4684c1 |
"ivNMCW+SFN0IkSYXSRM8aWIDOZT8FyWB3yJSyvi3+SMgm7OYHFW8htH8qaIv0xJf\n"
|
|
Packit Service |
4684c1 |
"1h/ADBE62j9uaQIg7qSn6pVHMDHaITAbPg3y6II1iP3W28Vj/rtvK9yoZu4AThSD\n"
|
|
Packit Service |
4684c1 |
"Vdjl8WT4b4VOBbmioSNCDjx2C73+HLM2eUsdumCVcjWD9gkvCKkqTbOVplGRvCzO\n"
|
|
Packit Service |
4684c1 |
"sKNVGJamH9eGOjF2Az9XuYR+m7jWdIyTitLtbliyFiWwFguQ7BAPVnUS3TSKoLKL\n"
|
|
Packit Service |
4684c1 |
"X9WRGDIVAgMBAAGjQzBBMA8GA1UdEwEB/wQFMAMBAf8wDwYDVR0PAQH/BAUDAwcG\n"
|
|
Packit Service |
4684c1 |
"ADAdBgNVHQ4EFgQU8RXG9RWC24R/crqoOMJVSVGZ2CkwDQYJKoZIhvcNAQELBQAD\n"
|
|
Packit Service |
4684c1 |
"ggEBAASDvSD6Gt9E/IANgJ2lq7cvqKHhK/S0crpBHmzouLU1YANAbva8vZ2iVsgP\n"
|
|
Packit Service |
4684c1 |
"ojj5+QKosXgZM67g1u4Vr/Kt7APwYDVV9NlfE7BLSaksaQbh6J464rJ8pXONW6xP\n"
|
|
Packit Service |
4684c1 |
"z6tl/Pm1RqXuxzgnUv700OFuxBnnbglz9aQk5eS7kag8bfUx8MfN5gbW34nB79fn\n"
|
|
Packit Service |
4684c1 |
"5943Z8DmcDfUQZRY66v4S/NAYs7s96ABMB18u9Ct6KqGP/LKfDt2bgeTE/1b68T+\n"
|
|
Packit Service |
4684c1 |
"xmYF8N+JsJ3qP4lqBHgHLUL945nEoG8yDPIiZw3pmw1SyS0ktoVASynAh3W5j//r\n"
|
|
Packit Service |
4684c1 |
"d9Uk2Ojqo2tp/lJ0LCuQ3nWeM2Y=\n"
|
|
Packit Service |
4684c1 |
"-----END CERTIFICATE-----\n"
|
|
Packit Service |
4684c1 |
};
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
static const char *simple1_constraints[] = {
|
|
Packit Service |
4684c1 |
/* CRL */
|
|
Packit Service |
4684c1 |
"-----BEGIN X509 CRL-----\n"
|
|
Packit Service |
4684c1 |
"MIIBmjCBgwIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDEwRDQS0wGA8yMDE0\n"
|
|
Packit Service |
4684c1 |
"MDkxMzA4NTkxNloYDzIwMTUwOTEzMDg1OTE2WjAAoDowODAfBgNVHSMEGDAWgBTn\n"
|
|
Packit Service |
4684c1 |
"sISO6h9leKTKtOh/HG0jV03AMzAVBgNVHRQEDgIMVBQHZC2mj6EAgMPSMA0GCSqG\n"
|
|
Packit Service |
4684c1 |
"SIb3DQEBCwUAA4IBAQBHUgtxpOn8EHwlajVYoOh6DFCwIoxBIeUA4518W1cHoV7J\n"
|
|
Packit Service |
4684c1 |
"KMif6lmJRodrcbienDX781QcOaQcNnuu/oBEcoBdbZa0VICzXekIteSwEgGsbRve\n"
|
|
Packit Service |
4684c1 |
"QQFPnZn83I4btse1ly5fdxMsliSM+qRwIyNR18VHXZz9GWYrr4tYWnI2b9XrDnaC\n"
|
|
Packit Service |
4684c1 |
"1b3Ywt7I9pNi0/O0C0rE/37/VvPx6HghnC+un7LtT0Y0n+FQP7dhlMvzHaR8wVxs\n"
|
|
Packit Service |
4684c1 |
"WAzaNvSiJ1rVPzL21iCmQJsRQeDTSJBlzm0lWiU8Nys3ugM2KlERezfp8DkFGA3y\n"
|
|
Packit Service |
4684c1 |
"9Yzpq6gAi39ZK+LjopgGDkrQjxzBIaoe2bcDqB7X\n"
|
|
Packit Service |
4684c1 |
"-----END X509 CRL-----\n",
|
|
Packit Service |
4684c1 |
/* CA - cert_signing_key only */
|
|
Packit Service |
4684c1 |
"-----BEGIN CERTIFICATE-----\n"
|
|
Packit Service |
4684c1 |
"MIIC4DCCAcigAwIBAgIBADANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDEwRDQS0w\n"
|
|
Packit Service |
4684c1 |
"MCIYDzIwMTQwOTEzMDg1OTE2WhgPOTk5OTEyMzEyMzU5NTlaMA8xDTALBgNVBAMT\n"
|
|
Packit Service |
4684c1 |
"BENBLTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7AVMcGmvenCAt\n"
|
|
Packit Service |
4684c1 |
"14Yi2zi6In2vjNakbzDfUa5xaG8oD73h4P8zP2TQqDmUBAAi5EdXoF5/crpgnGY3\n"
|
|
Packit Service |
4684c1 |
"oyUEFYnT7GTI/FO+RxZz9jCLvY3hpeuJcofsFny8n0ARL9WiFKuAEvrZkg+6V3Fh\n"
|
|
Packit Service |
4684c1 |
"TC9bCOFsGVTaLiUoi/nkD9IUgCkybFTqZM+8tLT4/gCMFNs9e0ANa5F+wtvS0bjy\n"
|
|
Packit Service |
4684c1 |
"LLozq6+XpzEXlL3UNKJq9cf02zHjb9ftlMDykRRkGPzppBSfOCJAMOX/BBNpWznJ\n"
|
|
Packit Service |
4684c1 |
"I1bg0m/6X3+SDO3j0PKLVc7BWWTnXXHb4rznwcRZm8zJiKKFE0GDOijzpT6Dl/gX\n"
|
|
Packit Service |
4684c1 |
"JI0lroeJAgMBAAGjQzBBMA8GA1UdEwEB/wQFMAMBAf8wDwYDVR0PAQH/BAUDAwcE\n"
|
|
Packit Service |
4684c1 |
"ADAdBgNVHQ4EFgQU57CEjuofZXikyrTofxxtI1dNwDMwDQYJKoZIhvcNAQELBQAD\n"
|
|
Packit Service |
4684c1 |
"ggEBALPFKXFauyO0R7Y+zhpiqYe1ms4qU9aprr/x4GMG4ByZ0i0FK8Kh+L5BsNQA\n"
|
|
Packit Service |
4684c1 |
"FsEMeEEmKTHKzkMHfvTJ6y/K6P9rTVY7W2MqlX8IXM02L3fg0zn7Xd9CtCG1nnzh\n"
|
|
Packit Service |
4684c1 |
"fQMf/K/9Xqiotjlrgo8noEZksGPIvDPXXY98dd0clGnBvw2HwiG4h+csr4i9y7CH\n"
|
|
Packit Service |
4684c1 |
"tpnTRJnfzdqDYIh8vnM0tIJbXbe5DBLHnmnx15FQB1apFNa87gdBHAnkHCXrV1vC\n"
|
|
Packit Service |
4684c1 |
"oZXEeUL/zW2ax+ALOglM82dwex2qV9jgcsWfq1Y2JBlVT1QPpbAooCnjvBhmPCjX\n"
|
|
Packit Service |
4684c1 |
"qYkVfApeRr4QAwwkLnyfSKNLHco=\n"
|
|
Packit Service |
4684c1 |
"-----END CERTIFICATE-----\n"
|
|
Packit Service |
4684c1 |
};
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
static const char *simple1_fail[] = {
|
|
Packit Service |
4684c1 |
/* CRL */
|
|
Packit Service |
4684c1 |
"-----BEGIN X509 CRL-----\n"
|
|
Packit Service |
4684c1 |
"MIIBmjCBgwIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDEwRDQS0wGA8yMDE0\n"
|
|
Packit Service |
4684c1 |
"MDkxMzA4NTkxNloYDzIwMTUwOTEzMDg1OTE2WjAAoDowODAfBgNVHSMEGDAWgBTn\n"
|
|
Packit Service |
4684c1 |
"sISO6h9leKTKtOh/HG0jV03AMzAVBgNVHRQEDgIMVBQHZC2mj6EAgMPSMA0GCSqG\n"
|
|
Packit Service |
4684c1 |
"SIb3DQEBCwUAA4IBAQBHUgtxpOn8EHwlajVYoOh6DFCwIoxBIeUA4518W1cHoV7J\n"
|
|
Packit Service |
4684c1 |
"KMif6lmJRodrcbienDX781QcOaQcNnuu/oBEcoBdbZa0VICzXekIteSwEgGsbRve\n"
|
|
Packit Service |
4684c1 |
"QQFPnZn83I4btse1ly5fdxMsliSM+qRwIyNR18VHXZz9GWYrr4tYWnI2b9XrDnaC\n"
|
|
Packit Service |
4684c1 |
"1b3Ywt7I9pNi0/O0C0rE/37/VvPx6HghnC+un7LtT0Y0n+FQP7dhlMvzHaR8wVxs\n"
|
|
Packit Service |
4684c1 |
"WAzaNvSiJ1rVPzL21iCmQJsRQeDTSJBlzm0lWiU8Nys3ugM2KlERezfp8DkFGA3y\n"
|
|
Packit Service |
4684c1 |
"9Yzpq6gAi39ZK+LjopgGDkrQjxzBIaoe2bcDqB7X\n"
|
|
Packit Service |
4684c1 |
"-----END X509 CRL-----\n",
|
|
Packit Service |
4684c1 |
/* CA (unrelated to CRL) */
|
|
Packit Service |
4684c1 |
"-----BEGIN CERTIFICATE-----\n"
|
|
Packit Service |
4684c1 |
"MIIDFTCCAf2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDEwRDQS0w\n"
|
|
Packit Service |
4684c1 |
"MCIYDzIwMTQwODI2MTEwODUyWhgPOTk5OTEyMzEyMzU5NTlaMA8xDTALBgNVBAMT\n"
|
|
Packit Service |
4684c1 |
"BENBLTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+iPUnEs+qmj2U\n"
|
|
Packit Service |
4684c1 |
"Rz8plNAE/CpeUxUfNNVonluu4DzulsxAJMN78g+Oqx+ggdkECZxHLISkzErMgiuv\n"
|
|
Packit Service |
4684c1 |
"bG+nr9yxjyHH2YoOAgzgknar5JkOBkKp1bIvyA950ZSygMFEHX1qoaM+F/1/DKjG\n"
|
|
Packit Service |
4684c1 |
"NmMCNUpR0c4m+K22s72LnrpMLMmCZU0fnqngb1+F+iZE6emhcX5Z5D0QTJTAeiYK\n"
|
|
Packit Service |
4684c1 |
"ArnO0rpVEvU0o3nwe3dDrT0YyoCYrzCsCOKUa2wFtkOzLZKJbMBRMflL+fBmtj/Q\n"
|
|
Packit Service |
4684c1 |
"7xUe7ox62ZEqSD7W+Po48/mIuSOhx7u+yToBZ60wKGz9OkQ/JwykkK5ZgI+nPWGT\n"
|
|
Packit Service |
4684c1 |
"1au1K4V7AgMBAAGjeDB2MA8GA1UdEwEB/wQFMAMBAf8wEgYDVR0eAQH/BAgwBqEE\n"
|
|
Packit Service |
4684c1 |
"MAKCADAPBgNVHQ8BAf8EBQMDBwQAMB0GA1UdDgQWBBSgAJcc9Q5KDpAhkrMORPJS\n"
|
|
Packit Service |
4684c1 |
"boq3vzAfBgNVHSMEGDAWgBQ/lKQpHoyEFz7J+Wn6eT5qxgYQpjANBgkqhkiG9w0B\n"
|
|
Packit Service |
4684c1 |
"AQsFAAOCAQEAoMeZ0cnHes8bWRHLvrGc6wpwVnxYx2CBF9Xd3k4YMNunwBF9oM+T\n"
|
|
Packit Service |
4684c1 |
"ZYSMo4k7C1XZ154avBIyiCne3eU7/oHG1nkqY9ndN5LMyL8KFOniETBY3BdKtlGA\n"
|
|
Packit Service |
4684c1 |
"N+pDiQsrWG6mtqQ+kHFJICnGEDDByGB2eH+oAS+8gNtSfamLuTWYMI6ANjA9OWan\n"
|
|
Packit Service |
4684c1 |
"rkIA7ta97UiH2flvKRctqvZ0n6Vp3n3aUc53FkAbTnxOCBNCBx/veCgD/r74WbcY\n"
|
|
Packit Service |
4684c1 |
"jiwh2RE//3D3Oo7zhUlwQEWQSa/7poG5e6bl7oj4JYjpwSmESCYokT83Iqeb9lwO\n"
|
|
Packit Service |
4684c1 |
"D+dr9zs1tCudW9xz3sUg6IBXhZ4UvegTNg==\n"
|
|
Packit Service |
4684c1 |
"-----END CERTIFICATE-----\n"
|
|
Packit Service |
4684c1 |
};
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
static struct
|
|
Packit Service |
4684c1 |
{
|
|
Packit Service |
4684c1 |
const char *name;
|
|
Packit Service |
4684c1 |
const char **crl;
|
|
Packit Service |
4684c1 |
const char **ca;
|
|
Packit Service |
4684c1 |
unsigned int verify_flags;
|
|
Packit Service |
4684c1 |
unsigned int expected_verify_result;
|
|
Packit Service |
4684c1 |
} crl_list[] =
|
|
Packit Service |
4684c1 |
{
|
|
Packit Service |
4684c1 |
{ "simple-success", &simple1[0], &simple1[1],
|
|
Packit Service |
4684c1 |
0, 0 },
|
|
Packit Service |
4684c1 |
{ "simple-constraints", &simple1_constraints[0], &simple1_constraints[1],
|
|
Packit Service |
4684c1 |
0, GNUTLS_CERT_SIGNER_CONSTRAINTS_FAILURE|GNUTLS_CERT_INVALID },
|
|
Packit Service |
4684c1 |
{ "simple-broken", &simple1_broken[0], &simple1_broken[1],
|
|
Packit Service |
4684c1 |
0, GNUTLS_CERT_INVALID | GNUTLS_CERT_SIGNATURE_FAILURE },
|
|
Packit Service |
4684c1 |
{ "simple-fail", &simple1_fail[0], &simple1_fail[1],
|
|
Packit Service |
4684c1 |
0, GNUTLS_CERT_INVALID | GNUTLS_CERT_SIGNER_NOT_FOUND},
|
|
Packit Service |
4684c1 |
{ NULL, NULL, NULL, 0, 0}
|
|
Packit Service |
4684c1 |
};
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
/* GnuTLS internally calls time() to find out the current time when
|
|
Packit Service |
4684c1 |
verifying certificates. To avoid a time bomb, we hard code the
|
|
Packit Service |
4684c1 |
current time. This should work fine on systems where the library
|
|
Packit Service |
4684c1 |
call to time is resolved at run-time. */
|
|
Packit Service |
4684c1 |
static time_t mytime(time_t * t)
|
|
Packit Service |
4684c1 |
{
|
|
Packit Service |
4684c1 |
time_t then = 1410599367;
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
if (t)
|
|
Packit Service |
4684c1 |
*t = then;
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
return then;
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
static void tls_log_func(int level, const char *str)
|
|
Packit Service |
4684c1 |
{
|
|
Packit Service |
4684c1 |
fprintf(stderr, "|<%d>| %s", level, str);
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
void doit(void)
|
|
Packit Service |
4684c1 |
{
|
|
Packit Service |
4684c1 |
int exit_val = 0;
|
|
Packit Service |
4684c1 |
size_t i;
|
|
Packit Service |
4684c1 |
int ret;
|
|
Packit Service |
4684c1 |
gnutls_x509_trust_list_t tl;
|
|
Packit Service |
4684c1 |
unsigned int verify_status;
|
|
Packit Service |
4684c1 |
gnutls_x509_crl_t crl;
|
|
Packit Service |
4684c1 |
gnutls_x509_crt_t ca;
|
|
Packit Service |
4684c1 |
gnutls_datum_t tmp;
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
/* The overloading of time() seems to work in linux (ELF?)
|
|
Packit Service |
4684c1 |
* systems only. Disable it on windows.
|
|
Packit Service |
4684c1 |
*/
|
|
Packit Service |
4684c1 |
#ifdef _WIN32
|
|
Packit Service |
4684c1 |
exit(77);
|
|
Packit Service |
4684c1 |
#endif
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
ret = global_init();
|
|
Packit Service |
4684c1 |
if (ret != 0) {
|
|
Packit Service |
4684c1 |
fail("%d: %s\n", ret, gnutls_strerror(ret));
|
|
Packit Service |
4684c1 |
exit(1);
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
gnutls_global_set_time_function(mytime);
|
|
Packit Service |
4684c1 |
gnutls_global_set_log_function(tls_log_func);
|
|
Packit Service |
4684c1 |
if (debug)
|
|
Packit Service |
4684c1 |
gnutls_global_set_log_level(4711);
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
for (i = 0; crl_list[i].name; i++) {
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
if (debug)
|
|
Packit Service |
4684c1 |
printf("Chain '%s' (%d)...\n", crl_list[i].name,
|
|
Packit Service |
4684c1 |
(int) i);
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
if (debug > 2)
|
|
Packit Service |
4684c1 |
printf("\tAdding CRL...");
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
ret = gnutls_x509_crl_init(&crl;;
|
|
Packit Service |
4684c1 |
if (ret < 0) {
|
|
Packit Service |
4684c1 |
fprintf(stderr,
|
|
Packit Service |
4684c1 |
"gnutls_x509_crl_init[%d]: %s\n",
|
|
Packit Service |
4684c1 |
(int) i,
|
|
Packit Service |
4684c1 |
gnutls_strerror(ret));
|
|
Packit Service |
4684c1 |
exit(1);
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
tmp.data = (unsigned char *) *crl_list[i].crl;
|
|
Packit Service |
4684c1 |
tmp.size = strlen(*crl_list[i].crl);
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
ret =
|
|
Packit Service |
4684c1 |
gnutls_x509_crl_import(crl, &tmp,
|
|
Packit Service |
4684c1 |
GNUTLS_X509_FMT_PEM);
|
|
Packit Service |
4684c1 |
if (debug > 2)
|
|
Packit Service |
4684c1 |
printf("done\n");
|
|
Packit Service |
4684c1 |
if (ret < 0) {
|
|
Packit Service |
4684c1 |
fprintf(stderr,
|
|
Packit Service |
4684c1 |
"gnutls_x509_crl_import[%s]: %s\n",
|
|
Packit Service |
4684c1 |
crl_list[i].name,
|
|
Packit Service |
4684c1 |
gnutls_strerror(ret));
|
|
Packit Service |
4684c1 |
exit(1);
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
gnutls_x509_crl_print(crl,
|
|
Packit Service |
4684c1 |
GNUTLS_CRT_PRINT_ONELINE,
|
|
Packit Service |
4684c1 |
&tmp);
|
|
Packit Service |
4684c1 |
if (debug)
|
|
Packit Service |
4684c1 |
printf("\tCRL: %.*s\n",
|
|
Packit Service |
4684c1 |
tmp.size, tmp.data);
|
|
Packit Service |
4684c1 |
gnutls_free(tmp.data);
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
if (debug > 2)
|
|
Packit Service |
4684c1 |
printf("\tAdding CA certificate...");
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
ret = gnutls_x509_crt_init(&ca);
|
|
Packit Service |
4684c1 |
if (ret < 0) {
|
|
Packit Service |
4684c1 |
fprintf(stderr, "gnutls_x509_crt_init: %s\n",
|
|
Packit Service |
4684c1 |
gnutls_strerror(ret));
|
|
Packit Service |
4684c1 |
exit(1);
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
tmp.data = (unsigned char *) *crl_list[i].ca;
|
|
Packit Service |
4684c1 |
tmp.size = strlen(*crl_list[i].ca);
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
ret =
|
|
Packit Service |
4684c1 |
gnutls_x509_crt_import(ca, &tmp, GNUTLS_X509_FMT_PEM);
|
|
Packit Service |
4684c1 |
if (ret < 0) {
|
|
Packit Service |
4684c1 |
fprintf(stderr, "gnutls_x509_crt_import: %s\n",
|
|
Packit Service |
4684c1 |
gnutls_strerror(ret));
|
|
Packit Service |
4684c1 |
exit(1);
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
if (debug > 2)
|
|
Packit Service |
4684c1 |
printf("done\n");
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
gnutls_x509_crt_print(ca, GNUTLS_CRT_PRINT_ONELINE, &tmp);
|
|
Packit Service |
4684c1 |
if (debug)
|
|
Packit Service |
4684c1 |
printf("\tCA Certificate: %.*s\n", tmp.size,
|
|
Packit Service |
4684c1 |
tmp.data);
|
|
Packit Service |
4684c1 |
gnutls_free(tmp.data);
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
if (debug)
|
|
Packit Service |
4684c1 |
printf("\tVerifying...");
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
ret = gnutls_x509_crl_verify(crl, &ca, 1, crl_list[i].verify_flags,
|
|
Packit Service |
4684c1 |
&verify_status);
|
|
Packit Service |
4684c1 |
if (ret < 0) {
|
|
Packit Service |
4684c1 |
fprintf(stderr,
|
|
Packit Service |
4684c1 |
"gnutls_x509_crt_list_verify[%d]: %s\n",
|
|
Packit Service |
4684c1 |
(int) i, gnutls_strerror(ret));
|
|
Packit Service |
4684c1 |
exit(1);
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
if (verify_status != crl_list[i].expected_verify_result) {
|
|
Packit Service |
4684c1 |
gnutls_datum_t out1, out2;
|
|
Packit Service |
4684c1 |
gnutls_certificate_verification_status_print
|
|
Packit Service |
4684c1 |
(verify_status, GNUTLS_CRT_X509, &out1, 0);
|
|
Packit Service |
4684c1 |
gnutls_certificate_verification_status_print(crl_list
|
|
Packit Service |
4684c1 |
[i].
|
|
Packit Service |
4684c1 |
expected_verify_result,
|
|
Packit Service |
4684c1 |
GNUTLS_CRT_X509,
|
|
Packit Service |
4684c1 |
&out2,
|
|
Packit Service |
4684c1 |
0);
|
|
Packit Service |
4684c1 |
fail("chain[%s]:\nverify_status: %d: %s\nexpected: %d: %s\n", crl_list[i].name, verify_status, out1.data, crl_list[i].expected_verify_result, out2.data);
|
|
Packit Service |
4684c1 |
gnutls_free(out1.data);
|
|
Packit Service |
4684c1 |
gnutls_free(out2.data);
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
if (!debug)
|
|
Packit Service |
4684c1 |
exit(1);
|
|
Packit Service |
4684c1 |
} else if (debug)
|
|
Packit Service |
4684c1 |
printf("done\n");
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
gnutls_x509_trust_list_init(&tl, 0);
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
ret =
|
|
Packit Service |
4684c1 |
gnutls_x509_trust_list_add_cas(tl, &ca, 1, 0);
|
|
Packit Service |
4684c1 |
if (ret != 1) {
|
|
Packit Service |
4684c1 |
fail("gnutls_x509_trust_list_add_trust_mem\n");
|
|
Packit Service |
4684c1 |
exit(1);
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
/* make sure that the two functions don't diverge */
|
|
Packit Service |
4684c1 |
ret = gnutls_x509_trust_list_add_crls(tl, &crl, 1, GNUTLS_TL_VERIFY_CRL, crl_list[i].verify_flags);
|
|
Packit Service |
4684c1 |
if (crl_list[i].expected_verify_result == 0 && ret < 0) {
|
|
Packit Service |
4684c1 |
fprintf(stderr,
|
|
Packit Service |
4684c1 |
"gnutls_x509_trust_list_add_crls[%d]: %s\n",
|
|
Packit Service |
4684c1 |
(int) i, gnutls_strerror(ret));
|
|
Packit Service |
4684c1 |
exit(1);
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
if (crl_list[i].expected_verify_result != 0 && ret > 0) {
|
|
Packit Service |
4684c1 |
fprintf(stderr,
|
|
Packit Service |
4684c1 |
"gnutls_x509_trust_list_add_crls[%d]: succeeded when it shouldn't\n",
|
|
Packit Service |
4684c1 |
(int) i);
|
|
Packit Service |
4684c1 |
exit(1);
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
if (debug)
|
|
Packit Service |
4684c1 |
printf("\tCleanup...");
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
gnutls_x509_trust_list_deinit(tl, 0);
|
|
Packit Service |
4684c1 |
gnutls_x509_crt_deinit(ca);
|
|
Packit Service |
4684c1 |
gnutls_x509_crl_deinit(crl);
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
if (debug)
|
|
Packit Service |
4684c1 |
printf("done\n\n\n");
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
gnutls_global_deinit();
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
if (debug)
|
|
Packit Service |
4684c1 |
printf("Exit status...%d\n", exit_val);
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
exit(exit_val);
|
|
Packit Service |
4684c1 |
}
|