/*

 * Copyright 2016-2019 The OpenSSL Project Authors. All Rights Reserved.

 *

 * Licensed under the OpenSSL licenses, (the "License");

 * you may not use this file except in compliance with the License.

 * You may obtain a copy of the License at

 * https://www.openssl.org/source/license.html

 * or in the file LICENSE in the source distribution.

 */

#include <stdio.h>

#include <string.h>

#include <errno.h>

#include <openssl/x509.h>

#include <openssl/pem.h>

#include <openssl/conf.h>

#include <openssl/err.h>

#include "internal/nelem.h"

#include "testutil.h"

static int test_certs(int num)

{

    int c;

    char *name = 0;

    char *header = 0;

    unsigned char *data = 0;

    long len;

    typedef X509 *(*d2i_X509_t)(X509 **, const unsigned char **, long);

    typedef int (*i2d_X509_t)(X509 *, unsigned char **);

    int err = 0;

    BIO *fp = BIO_new_file(test_get_argument(num), "r");

    X509 *reuse = NULL;

    if (!TEST_ptr(fp))

        return 0;

    for (c = 0; !err && PEM_read_bio(fp, &name, &header, &data, &len;; ++c) {

        const int trusted = (strcmp(name, PEM_STRING_X509_TRUSTED) == 0);

        d2i_X509_t d2i = trusted ? d2i_X509_AUX : d2i_X509;

        i2d_X509_t i2d = trusted ? i2d_X509_AUX : i2d_X509;

        X509 *cert = NULL;

        const unsigned char *p = data;

        unsigned char *buf = NULL;

        unsigned char *bufp;

        long enclen;

        if (!trusted

            && strcmp(name, PEM_STRING_X509) != 0

            && strcmp(name, PEM_STRING_X509_OLD) != 0) {

            TEST_error("unexpected PEM object: %s", name);

            err = 1;

            goto next;

        }

        cert = d2i(NULL, &p, len);

        if (cert == NULL || (p - data) != len) {

            TEST_error("error parsing input %s", name);

            err = 1;

            goto next;

        }

        /* Test traditional 2-pass encoding into caller allocated buffer */

        enclen = i2d(cert, NULL);

        if (len != enclen) {

            TEST_error("encoded length %ld of %s != input length %ld",

                       enclen, name, len);

            err = 1;

            goto next;

        }

        if ((buf = bufp = OPENSSL_malloc(len)) == NULL) {

            TEST_perror("malloc");

            err = 1;

            goto next;

        }

        enclen = i2d(cert, &bufp);

        if (len != enclen) {

            TEST_error("encoded length %ld of %s != input length %ld",

                       enclen, name, len);

            err = 1;

            goto next;

        }

        enclen = (long) (bufp - buf);

        if (enclen != len) {

            TEST_error("unexpected buffer position after encoding %s", name);

            err = 1;

            goto next;

        }

        if (memcmp(buf, data, len) != 0) {

            TEST_error("encoded content of %s does not match input", name);

            err = 1;

            goto next;

        }

        p = buf;

        reuse = d2i(&reuse, &p, enclen);

        if (reuse == NULL || X509_cmp (reuse, cert)) {

            TEST_error("X509_cmp does not work with %s", name);

            err = 1;

            goto next;

        }

        OPENSSL_free(buf);

        buf = NULL;

        /* Test 1-pass encoding into library allocated buffer */

        enclen = i2d(cert, &buf;;

        if (len != enclen) {

            TEST_error("encoded length %ld of %s != input length %ld",

                       enclen, name, len);

            err = 1;

            goto next;

        }

        if (memcmp(buf, data, len) != 0) {

            TEST_error("encoded content of %s does not match input", name);

            err = 1;

            goto next;

        }

        if (trusted) {

            /* Encode just the cert and compare with initial encoding */

            OPENSSL_free(buf);

            buf = NULL;

            /* Test 1-pass encoding into library allocated buffer */

            enclen = i2d(cert, &buf;;

            if (enclen > len) {

                TEST_error("encoded length %ld of %s > input length %ld",

                           enclen, name, len);

                err = 1;

                goto next;

            }

            if (memcmp(buf, data, enclen) != 0) {

                TEST_error("encoded cert content does not match input");

                err = 1;

                goto next;

            }

        }

        /*

         * If any of these were null, PEM_read() would have failed.

         */

    next:

        X509_free(cert);

        OPENSSL_free(buf);

        OPENSSL_free(name);

        OPENSSL_free(header);

        OPENSSL_free(data);

    }

    BIO_free(fp);

    X509_free(reuse);

    if (ERR_GET_REASON(ERR_peek_last_error()) == PEM_R_NO_START_LINE) {

        /* Reached end of PEM file */

        if (c > 0) {

            ERR_clear_error();

            return 1;

        }

    }

    /* Some other PEM read error */

    return 0;

}

int setup_tests(void)

{

    size_t n = test_get_argument_count();

    if (n == 0) {

        TEST_error("usage: %s certfile...", test_get_program_name());

        return 0;

    }

    ADD_ALL_TESTS(test_certs, (int)n);

    return 1;

}