| 1 | #! /usr/bin/env perl
|
|---|
| 2 | # Copyright 2015-2022 The OpenSSL Project Authors. All Rights Reserved.
|
|---|
| 3 | #
|
|---|
| 4 | # Licensed under the Apache License 2.0 (the "License"). You may not use
|
|---|
| 5 | # this file except in compliance with the License. You can obtain a copy
|
|---|
| 6 | # in the file LICENSE in the source distribution or at
|
|---|
| 7 | # https://www.openssl.org/source/license.html
|
|---|
| 8 |
|
|---|
| 9 |
|
|---|
| 10 | use strict;
|
|---|
| 11 | use warnings;
|
|---|
| 12 |
|
|---|
| 13 | use File::Spec::Functions qw/canonpath/;
|
|---|
| 14 | use File::Copy;
|
|---|
| 15 | use OpenSSL::Test qw/:DEFAULT srctop_file bldtop_dir ok_nofips with/;
|
|---|
| 16 | use OpenSSL::Test::Utils;
|
|---|
| 17 |
|
|---|
| 18 | setup("test_verify");
|
|---|
| 19 |
|
|---|
| 20 | sub verify {
|
|---|
| 21 | my ($cert, $purpose, $trusted, $untrusted, @opts) = @_;
|
|---|
| 22 | my @path = qw(test certs);
|
|---|
| 23 | my @args = qw(openssl verify -auth_level 1);
|
|---|
| 24 | push(@args, "-purpose", $purpose) if $purpose ne "";
|
|---|
| 25 | push(@args, @opts);
|
|---|
| 26 | for (@$trusted) { push(@args, "-trusted", srctop_file(@path, "$_.pem")) }
|
|---|
| 27 | for (@$untrusted) { push(@args, "-untrusted", srctop_file(@path, "$_.pem")) }
|
|---|
| 28 | push(@args, srctop_file(@path, "$cert.pem"));
|
|---|
| 29 | run(app([@args]));
|
|---|
| 30 | }
|
|---|
| 31 |
|
|---|
| 32 | plan tests => 163;
|
|---|
| 33 |
|
|---|
| 34 | # Canonical success
|
|---|
| 35 | ok(verify("ee-cert", "sslserver", ["root-cert"], ["ca-cert"]),
|
|---|
| 36 | "accept compat trust");
|
|---|
| 37 |
|
|---|
| 38 | # Root CA variants
|
|---|
| 39 | ok(!verify("ee-cert", "sslserver", [qw(root-nonca)], [qw(ca-cert)]),
|
|---|
| 40 | "fail trusted non-ca root");
|
|---|
| 41 | ok(!verify("ee-cert", "sslserver", [qw(nroot+serverAuth)], [qw(ca-cert)]),
|
|---|
| 42 | "fail server trust non-ca root");
|
|---|
| 43 | ok(!verify("ee-cert", "sslserver", [qw(nroot+anyEKU)], [qw(ca-cert)]),
|
|---|
| 44 | "fail wildcard trust non-ca root");
|
|---|
| 45 | ok(!verify("ee-cert", "sslserver", [qw(root-cert2)], [qw(ca-cert)]),
|
|---|
| 46 | "fail wrong root key");
|
|---|
| 47 | ok(!verify("ee-cert", "sslserver", [qw(root-name2)], [qw(ca-cert)]),
|
|---|
| 48 | "fail wrong root DN");
|
|---|
| 49 |
|
|---|
| 50 | # Critical extensions
|
|---|
| 51 |
|
|---|
| 52 | ok(verify("ee-cert-noncrit-unknown-ext", "", ["root-cert"], ["ca-cert"]),
|
|---|
| 53 | "accept non-critical unknown extension");
|
|---|
| 54 | ok(!verify("ee-cert-crit-unknown-ext", "", ["root-cert"], ["ca-cert"]),
|
|---|
| 55 | "reject critical unknown extension");
|
|---|
| 56 | ok(verify("ee-cert-ocsp-nocheck", "", ["root-cert"], ["ca-cert"]),
|
|---|
| 57 | "accept critical OCSP No Check");
|
|---|
| 58 |
|
|---|
| 59 | # Explicit trust/purpose combinations
|
|---|
| 60 | #
|
|---|
| 61 | ok(verify("ee-cert", "sslserver", [qw(sroot-cert)], [qw(ca-cert)]),
|
|---|
| 62 | "accept server purpose");
|
|---|
| 63 | ok(!verify("ee-cert", "sslserver", [qw(croot-cert)], [qw(ca-cert)]),
|
|---|
| 64 | "fail client purpose");
|
|---|
| 65 | ok(verify("ee-cert", "sslserver", [qw(root+serverAuth)], [qw(ca-cert)]),
|
|---|
| 66 | "accept server trust");
|
|---|
| 67 | ok(verify("ee-cert", "sslserver", [qw(sroot+serverAuth)], [qw(ca-cert)]),
|
|---|
| 68 | "accept server trust with server purpose");
|
|---|
| 69 | ok(verify("ee-cert", "sslserver", [qw(croot+serverAuth)], [qw(ca-cert)]),
|
|---|
| 70 | "accept server trust with client purpose");
|
|---|
| 71 | # Wildcard trust
|
|---|
| 72 | ok(verify("ee-cert", "sslserver", [qw(root+anyEKU)], [qw(ca-cert)]),
|
|---|
| 73 | "accept wildcard trust");
|
|---|
| 74 | ok(verify("ee-cert", "sslserver", [qw(sroot+anyEKU)], [qw(ca-cert)]),
|
|---|
| 75 | "accept wildcard trust with server purpose");
|
|---|
| 76 | ok(verify("ee-cert", "sslserver", [qw(croot+anyEKU)], [qw(ca-cert)]),
|
|---|
| 77 | "accept wildcard trust with client purpose");
|
|---|
| 78 | # Inapplicable mistrust
|
|---|
| 79 | ok(verify("ee-cert", "sslserver", [qw(root-clientAuth)], [qw(ca-cert)]),
|
|---|
| 80 | "accept client mistrust");
|
|---|
| 81 | ok(verify("ee-cert", "sslserver", [qw(sroot-clientAuth)], [qw(ca-cert)]),
|
|---|
| 82 | "accept client mistrust with server purpose");
|
|---|
| 83 | ok(!verify("ee-cert", "sslserver", [qw(croot-clientAuth)], [qw(ca-cert)]),
|
|---|
| 84 | "fail client mistrust with client purpose");
|
|---|
| 85 | # Inapplicable trust
|
|---|
| 86 | ok(!verify("ee-cert", "sslserver", [qw(root+clientAuth)], [qw(ca-cert)]),
|
|---|
| 87 | "fail client trust");
|
|---|
| 88 | ok(!verify("ee-cert", "sslserver", [qw(sroot+clientAuth)], [qw(ca-cert)]),
|
|---|
| 89 | "fail client trust with server purpose");
|
|---|
| 90 | ok(!verify("ee-cert", "sslserver", [qw(croot+clientAuth)], [qw(ca-cert)]),
|
|---|
| 91 | "fail client trust with client purpose");
|
|---|
| 92 | # Server mistrust
|
|---|
| 93 | ok(!verify("ee-cert", "sslserver", [qw(root-serverAuth)], [qw(ca-cert)]),
|
|---|
| 94 | "fail rejected EKU");
|
|---|
| 95 | ok(!verify("ee-cert", "sslserver", [qw(sroot-serverAuth)], [qw(ca-cert)]),
|
|---|
| 96 | "fail server mistrust with server purpose");
|
|---|
| 97 | ok(!verify("ee-cert", "sslserver", [qw(croot-serverAuth)], [qw(ca-cert)]),
|
|---|
| 98 | "fail server mistrust with client purpose");
|
|---|
| 99 | # Wildcard mistrust
|
|---|
| 100 | ok(!verify("ee-cert", "sslserver", [qw(root-anyEKU)], [qw(ca-cert)]),
|
|---|
| 101 | "fail wildcard mistrust");
|
|---|
| 102 | ok(!verify("ee-cert", "sslserver", [qw(sroot-anyEKU)], [qw(ca-cert)]),
|
|---|
| 103 | "fail wildcard mistrust with server purpose");
|
|---|
| 104 | ok(!verify("ee-cert", "sslserver", [qw(croot-anyEKU)], [qw(ca-cert)]),
|
|---|
| 105 | "fail wildcard mistrust with client purpose");
|
|---|
| 106 |
|
|---|
| 107 | # Check that trusted-first is on by setting up paths to different roots
|
|---|
| 108 | # depending on whether the intermediate is the trusted or untrusted one.
|
|---|
| 109 | #
|
|---|
| 110 | ok(verify("ee-cert", "sslserver", [qw(root-serverAuth root-cert2 ca-root2)],
|
|---|
| 111 | [qw(ca-cert)]),
|
|---|
| 112 | "accept trusted-first path");
|
|---|
| 113 | ok(verify("ee-cert", "sslserver", [qw(root-cert root2+serverAuth ca-root2)],
|
|---|
| 114 | [qw(ca-cert)]),
|
|---|
| 115 | "accept trusted-first path with server trust");
|
|---|
| 116 | ok(!verify("ee-cert", "sslserver", [qw(root-cert root2-serverAuth ca-root2)],
|
|---|
| 117 | [qw(ca-cert)]),
|
|---|
| 118 | "fail trusted-first path with server mistrust");
|
|---|
| 119 | ok(!verify("ee-cert", "sslserver", [qw(root-cert root2+clientAuth ca-root2)],
|
|---|
| 120 | [qw(ca-cert)]),
|
|---|
| 121 | "fail trusted-first path with client trust");
|
|---|
| 122 |
|
|---|
| 123 | # CA variants
|
|---|
| 124 | ok(!verify("ee-cert", "sslserver", [qw(root-cert)], [qw(ca-nonca)]),
|
|---|
| 125 | "fail non-CA untrusted intermediate");
|
|---|
| 126 | ok(!verify("ee-cert", "sslserver", [qw(root-cert)], [qw(ca-nonbc)]),
|
|---|
| 127 | "fail non-CA untrusted intermediate");
|
|---|
| 128 | ok(!verify("ee-cert", "sslserver", [qw(root-cert ca-nonca)], []),
|
|---|
| 129 | "fail non-CA trust-store intermediate");
|
|---|
| 130 | ok(!verify("ee-cert", "sslserver", [qw(root-cert ca-nonbc)], []),
|
|---|
| 131 | "fail non-CA trust-store intermediate");
|
|---|
| 132 | ok(!verify("ee-cert", "sslserver", [qw(root-cert nca+serverAuth)], []),
|
|---|
| 133 | "fail non-CA server trust intermediate");
|
|---|
| 134 | ok(!verify("ee-cert", "sslserver", [qw(root-cert nca+anyEKU)], []),
|
|---|
| 135 | "fail non-CA wildcard trust intermediate");
|
|---|
| 136 | ok(!verify("ee-cert", "sslserver", [qw(root-cert)], [qw(ca-cert2)]),
|
|---|
| 137 | "fail wrong intermediate CA key");
|
|---|
| 138 | ok(!verify("ee-cert", "sslserver", [qw(root-cert)], [qw(ca-name2)]),
|
|---|
| 139 | "fail wrong intermediate CA DN");
|
|---|
| 140 | ok(!verify("ee-cert", "sslserver", [qw(root-cert)], [qw(ca-root2)]),
|
|---|
| 141 | "fail wrong intermediate CA issuer");
|
|---|
| 142 | ok(!verify("ee-cert", "sslserver", [], [qw(ca-cert)], "-partial_chain"),
|
|---|
| 143 | "fail untrusted partial chain");
|
|---|
| 144 | ok(verify("ee-cert", "sslserver", [qw(ca-cert)], [], "-partial_chain"),
|
|---|
| 145 | "accept trusted partial chain");
|
|---|
| 146 | ok(!verify("ee-cert", "sslserver", [qw(ca-expired)], [], "-partial_chain"),
|
|---|
| 147 | "reject expired trusted partial chain"); # this check is beyond RFC 5280
|
|---|
| 148 | ok(!verify("ee-cert", "sslserver", [qw(root-expired)], [qw(ca-cert)]),
|
|---|
| 149 | "reject expired trusted root"); # this check is beyond RFC 5280
|
|---|
| 150 | ok(verify("ee-cert", "sslserver", [qw(sca-cert)], [], "-partial_chain"),
|
|---|
| 151 | "accept partial chain with server purpose");
|
|---|
| 152 | ok(!verify("ee-cert", "sslserver", [qw(cca-cert)], [], "-partial_chain"),
|
|---|
| 153 | "fail partial chain with client purpose");
|
|---|
| 154 | ok(verify("ee-cert", "sslserver", [qw(ca+serverAuth)], [], "-partial_chain"),
|
|---|
| 155 | "accept server trust partial chain");
|
|---|
| 156 | ok(verify("ee-cert", "sslserver", [qw(cca+serverAuth)], [], "-partial_chain"),
|
|---|
| 157 | "accept server trust client purpose partial chain");
|
|---|
| 158 | ok(verify("ee-cert", "sslserver", [qw(ca-clientAuth)], [], "-partial_chain"),
|
|---|
| 159 | "accept client mistrust partial chain");
|
|---|
| 160 | ok(verify("ee-cert", "sslserver", [qw(ca+anyEKU)], [], "-partial_chain"),
|
|---|
| 161 | "accept wildcard trust partial chain");
|
|---|
| 162 | ok(!verify("ee-cert", "sslserver", [], [qw(ca+serverAuth)], "-partial_chain"),
|
|---|
| 163 | "fail untrusted partial issuer with ignored server trust");
|
|---|
| 164 | ok(!verify("ee-cert", "sslserver", [qw(ca-serverAuth)], [], "-partial_chain"),
|
|---|
| 165 | "fail server mistrust partial chain");
|
|---|
| 166 | ok(!verify("ee-cert", "sslserver", [qw(ca+clientAuth)], [], "-partial_chain"),
|
|---|
| 167 | "fail client trust partial chain");
|
|---|
| 168 | ok(!verify("ee-cert", "sslserver", [qw(ca-anyEKU)], [], "-partial_chain"),
|
|---|
| 169 | "fail wildcard mistrust partial chain");
|
|---|
| 170 |
|
|---|
| 171 | # We now test auxiliary trust even for intermediate trusted certs without
|
|---|
| 172 | # -partial_chain. Note that "-trusted_first" is now always on and cannot
|
|---|
| 173 | # be disabled.
|
|---|
| 174 | ok(verify("ee-cert", "sslserver", [qw(root-cert ca+serverAuth)], [qw(ca-cert)]),
|
|---|
| 175 | "accept server trust");
|
|---|
| 176 | ok(verify("ee-cert", "sslserver", [qw(root-cert ca+anyEKU)], [qw(ca-cert)]),
|
|---|
| 177 | "accept wildcard trust");
|
|---|
| 178 | ok(verify("ee-cert", "sslserver", [qw(root-cert sca-cert)], [qw(ca-cert)]),
|
|---|
| 179 | "accept server purpose");
|
|---|
| 180 | ok(verify("ee-cert", "sslserver", [qw(root-cert sca+serverAuth)], [qw(ca-cert)]),
|
|---|
| 181 | "accept server trust and purpose");
|
|---|
| 182 | ok(verify("ee-cert", "sslserver", [qw(root-cert sca+anyEKU)], [qw(ca-cert)]),
|
|---|
| 183 | "accept wildcard trust and server purpose");
|
|---|
| 184 | ok(verify("ee-cert", "sslserver", [qw(root-cert sca-clientAuth)], [qw(ca-cert)]),
|
|---|
| 185 | "accept client mistrust and server purpose");
|
|---|
| 186 | ok(verify("ee-cert", "sslserver", [qw(root-cert cca+serverAuth)], [qw(ca-cert)]),
|
|---|
| 187 | "accept server trust and client purpose");
|
|---|
| 188 | ok(verify("ee-cert", "sslserver", [qw(root-cert cca+anyEKU)], [qw(ca-cert)]),
|
|---|
| 189 | "accept wildcard trust and client purpose");
|
|---|
| 190 | ok(!verify("ee-cert", "sslserver", [qw(root-cert cca-cert)], [qw(ca-cert)]),
|
|---|
| 191 | "fail client purpose");
|
|---|
| 192 | ok(!verify("ee-cert", "sslserver", [qw(root-cert ca-anyEKU)], [qw(ca-cert)]),
|
|---|
| 193 | "fail wildcard mistrust");
|
|---|
| 194 | ok(!verify("ee-cert", "sslserver", [qw(root-cert ca-serverAuth)], [qw(ca-cert)]),
|
|---|
| 195 | "fail server mistrust");
|
|---|
| 196 | ok(!verify("ee-cert", "sslserver", [qw(root-cert ca+clientAuth)], [qw(ca-cert)]),
|
|---|
| 197 | "fail client trust");
|
|---|
| 198 | ok(!verify("ee-cert", "sslserver", [qw(root-cert sca+clientAuth)], [qw(ca-cert)]),
|
|---|
| 199 | "fail client trust and server purpose");
|
|---|
| 200 | ok(!verify("ee-cert", "sslserver", [qw(root-cert cca+clientAuth)], [qw(ca-cert)]),
|
|---|
| 201 | "fail client trust and client purpose");
|
|---|
| 202 | ok(!verify("ee-cert", "sslserver", [qw(root-cert cca-serverAuth)], [qw(ca-cert)]),
|
|---|
| 203 | "fail server mistrust and client purpose");
|
|---|
| 204 | ok(!verify("ee-cert", "sslserver", [qw(root-cert cca-clientAuth)], [qw(ca-cert)]),
|
|---|
| 205 | "fail client mistrust and client purpose");
|
|---|
| 206 | ok(!verify("ee-cert", "sslserver", [qw(root-cert sca-serverAuth)], [qw(ca-cert)]),
|
|---|
| 207 | "fail server mistrust and server purpose");
|
|---|
| 208 | ok(!verify("ee-cert", "sslserver", [qw(root-cert sca-anyEKU)], [qw(ca-cert)]),
|
|---|
| 209 | "fail wildcard mistrust and server purpose");
|
|---|
| 210 | ok(!verify("ee-cert", "sslserver", [qw(root-cert cca-anyEKU)], [qw(ca-cert)]),
|
|---|
| 211 | "fail wildcard mistrust and client purpose");
|
|---|
| 212 |
|
|---|
| 213 | # EE variants
|
|---|
| 214 | ok(verify("ee-client", "sslclient", [qw(root-cert)], [qw(ca-cert)]),
|
|---|
| 215 | "accept client chain");
|
|---|
| 216 | ok(!verify("ee-client", "sslserver", [qw(root-cert)], [qw(ca-cert)]),
|
|---|
| 217 | "fail server leaf purpose");
|
|---|
| 218 | ok(!verify("ee-cert", "sslclient", [qw(root-cert)], [qw(ca-cert)]),
|
|---|
| 219 | "fail client leaf purpose");
|
|---|
| 220 | ok(!verify("ee-cert2", "sslserver", [qw(root-cert)], [qw(ca-cert)]),
|
|---|
| 221 | "fail wrong intermediate CA key");
|
|---|
| 222 | ok(!verify("ee-name2", "sslserver", [qw(root-cert)], [qw(ca-cert)]),
|
|---|
| 223 | "fail wrong intermediate CA DN");
|
|---|
| 224 | ok(!verify("ee-expired", "sslserver", [qw(root-cert)], [qw(ca-cert)]),
|
|---|
| 225 | "fail expired leaf");
|
|---|
| 226 | ok(verify("ee-cert", "sslserver", [qw(ee-cert)], [], "-partial_chain"),
|
|---|
| 227 | "accept last-resort direct leaf match");
|
|---|
| 228 | ok(verify("ee-client", "sslclient", [qw(ee-client)], [], "-partial_chain"),
|
|---|
| 229 | "accept last-resort direct leaf match");
|
|---|
| 230 | ok(!verify("ee-cert", "sslserver", [qw(ee-client)], [], "-partial_chain"),
|
|---|
| 231 | "fail last-resort direct leaf non-match");
|
|---|
| 232 | ok(verify("ee-cert", "sslserver", [qw(ee+serverAuth)], [], "-partial_chain"),
|
|---|
| 233 | "accept direct match with server trust");
|
|---|
| 234 | ok(!verify("ee-cert", "sslserver", [qw(ee-serverAuth)], [], "-partial_chain"),
|
|---|
| 235 | "fail direct match with server mistrust");
|
|---|
| 236 | ok(verify("ee-client", "sslclient", [qw(ee+clientAuth)], [], "-partial_chain"),
|
|---|
| 237 | "accept direct match with client trust");
|
|---|
| 238 | ok(!verify("ee-client", "sslclient", [qw(ee-clientAuth)], [], "-partial_chain"),
|
|---|
| 239 | "reject direct match with client mistrust");
|
|---|
| 240 | ok(verify("ee-pathlen", "sslserver", [qw(root-cert)], [qw(ca-cert)]),
|
|---|
| 241 | "accept non-ca with pathlen:0 by default");
|
|---|
| 242 | ok(!verify("ee-pathlen", "sslserver", [qw(root-cert)], [qw(ca-cert)], "-x509_strict"),
|
|---|
| 243 | "reject non-ca with pathlen:0 with strict flag");
|
|---|
| 244 |
|
|---|
| 245 | # Proxy certificates
|
|---|
| 246 | ok(!verify("pc1-cert", "sslclient", [qw(root-cert)], [qw(ee-client ca-cert)]),
|
|---|
| 247 | "fail to accept proxy cert without -allow_proxy_certs");
|
|---|
| 248 | ok(verify("pc1-cert", "sslclient", [qw(root-cert)], [qw(ee-client ca-cert)],
|
|---|
| 249 | "-allow_proxy_certs"),
|
|---|
| 250 | "accept proxy cert 1");
|
|---|
| 251 | ok(verify("pc2-cert", "sslclient", [qw(root-cert)], [qw(pc1-cert ee-client ca-cert)],
|
|---|
| 252 | "-allow_proxy_certs"),
|
|---|
| 253 | "accept proxy cert 2");
|
|---|
| 254 | ok(!verify("bad-pc3-cert", "sslclient", [qw(root-cert)], [qw(pc1-cert ee-client ca-cert)],
|
|---|
| 255 | "-allow_proxy_certs"),
|
|---|
| 256 | "fail proxy cert with incorrect subject");
|
|---|
| 257 | ok(!verify("bad-pc4-cert", "sslclient", [qw(root-cert)], [qw(pc1-cert ee-client ca-cert)],
|
|---|
| 258 | "-allow_proxy_certs"),
|
|---|
| 259 | "fail proxy cert with incorrect pathlen");
|
|---|
| 260 | ok(verify("pc5-cert", "sslclient", [qw(root-cert)], [qw(pc1-cert ee-client ca-cert)],
|
|---|
| 261 | "-allow_proxy_certs"),
|
|---|
| 262 | "accept proxy cert missing proxy policy");
|
|---|
| 263 | ok(!verify("pc6-cert", "sslclient", [qw(root-cert)], [qw(pc1-cert ee-client ca-cert)],
|
|---|
| 264 | "-allow_proxy_certs"),
|
|---|
| 265 | "failed proxy cert where last CN was added as a multivalue RDN component");
|
|---|
| 266 |
|
|---|
| 267 | # Security level tests
|
|---|
| 268 | ok(verify("ee-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "2"),
|
|---|
| 269 | "accept RSA 2048 chain at auth level 2");
|
|---|
| 270 | ok(!verify("ee-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "3"),
|
|---|
| 271 | "reject RSA 2048 root at auth level 3");
|
|---|
| 272 | ok(verify("ee-cert", "", ["root-cert-768"], ["ca-cert-768i"], "-auth_level", "0"),
|
|---|
| 273 | "accept RSA 768 root at auth level 0");
|
|---|
| 274 | ok(!verify("ee-cert", "", ["root-cert-768"], ["ca-cert-768i"]),
|
|---|
| 275 | "reject RSA 768 root at auth level 1");
|
|---|
| 276 | ok(verify("ee-cert-768i", "", ["root-cert"], ["ca-cert-768"], "-auth_level", "0"),
|
|---|
| 277 | "accept RSA 768 intermediate at auth level 0");
|
|---|
| 278 | ok(!verify("ee-cert-768i", "", ["root-cert"], ["ca-cert-768"]),
|
|---|
| 279 | "reject RSA 768 intermediate at auth level 1");
|
|---|
| 280 | ok(verify("ee-cert-768", "", ["root-cert"], ["ca-cert"], "-auth_level", "0"),
|
|---|
| 281 | "accept RSA 768 leaf at auth level 0");
|
|---|
| 282 | ok(!verify("ee-cert-768", "", ["root-cert"], ["ca-cert"]),
|
|---|
| 283 | "reject RSA 768 leaf at auth level 1");
|
|---|
| 284 | #
|
|---|
| 285 | ok(verify("ee-cert", "", ["root-cert-md5"], ["ca-cert"], "-auth_level", "2"),
|
|---|
| 286 | "accept md5 self-signed TA at auth level 2");
|
|---|
| 287 | ok(verify("ee-cert", "", ["ca-cert-md5-any"], [], "-auth_level", "2"),
|
|---|
| 288 | "accept md5 intermediate TA at auth level 2");
|
|---|
| 289 | ok(verify("ee-cert", "", ["root-cert"], ["ca-cert-md5"], "-auth_level", "0"),
|
|---|
| 290 | "accept md5 intermediate at auth level 0");
|
|---|
| 291 | ok(!verify("ee-cert", "", ["root-cert"], ["ca-cert-md5"]),
|
|---|
| 292 | "reject md5 intermediate at auth level 1");
|
|---|
| 293 | ok(verify("ee-cert-md5", "", ["root-cert"], ["ca-cert"], "-auth_level", "0"),
|
|---|
| 294 | "accept md5 leaf at auth level 0");
|
|---|
| 295 | ok(!verify("ee-cert-md5", "", ["root-cert"], ["ca-cert"]),
|
|---|
| 296 | "reject md5 leaf at auth level 1");
|
|---|
| 297 |
|
|---|
| 298 | # Explicit vs named curve tests
|
|---|
| 299 | SKIP: {
|
|---|
| 300 | skip "EC is not supported by this OpenSSL build", 3
|
|---|
| 301 | if disabled("ec");
|
|---|
| 302 | ok(!verify("ee-cert-ec-explicit", "", ["root-cert"],
|
|---|
| 303 | ["ca-cert-ec-named"]),
|
|---|
| 304 | "reject explicit curve leaf with named curve intermediate");
|
|---|
| 305 | ok(!verify("ee-cert-ec-named-explicit", "", ["root-cert"],
|
|---|
| 306 | ["ca-cert-ec-explicit"]),
|
|---|
| 307 | "reject named curve leaf with explicit curve intermediate");
|
|---|
| 308 | ok(verify("ee-cert-ec-named-named", "", ["root-cert"],
|
|---|
| 309 | ["ca-cert-ec-named"]),
|
|---|
| 310 | "accept named curve leaf with named curve intermediate");
|
|---|
| 311 | }
|
|---|
| 312 | # Same as above but with base provider used for decoding
|
|---|
| 313 | SKIP: {
|
|---|
| 314 | my $no_fips = disabled('fips') || ($ENV{NO_FIPS} // 0);
|
|---|
| 315 | my $provconf = srctop_file("test", "fips-and-base.cnf");
|
|---|
| 316 | my $provpath = bldtop_dir("providers");
|
|---|
| 317 | my @prov = ("-provider-path", $provpath);
|
|---|
| 318 |
|
|---|
| 319 | skip "EC is not supported or FIPS is disabled", 3
|
|---|
| 320 | if disabled("ec") || $no_fips;
|
|---|
| 321 |
|
|---|
| 322 | run(test(["fips_version_test", "-config", $provconf, ">3.0.0"]),
|
|---|
| 323 | capture => 1, statusvar => \my $exit);
|
|---|
| 324 | skip "FIPS provider version is too old", 3
|
|---|
| 325 | if !$exit;
|
|---|
| 326 |
|
|---|
| 327 | $ENV{OPENSSL_CONF} = $provconf;
|
|---|
| 328 |
|
|---|
| 329 | ok(!verify("ee-cert-ec-explicit", "", ["root-cert"],
|
|---|
| 330 | ["ca-cert-ec-named"], @prov),
|
|---|
| 331 | "reject explicit curve leaf with named curve intermediate w/fips");
|
|---|
| 332 | ok(!verify("ee-cert-ec-named-explicit", "", ["root-cert"],
|
|---|
| 333 | ["ca-cert-ec-explicit"], @prov),
|
|---|
| 334 | "reject named curve leaf with explicit curve intermediate w/fips");
|
|---|
| 335 | ok(verify("ee-cert-ec-named-named", "", ["root-cert"],
|
|---|
| 336 | ["ca-cert-ec-named"], @prov),
|
|---|
| 337 | "accept named curve leaf with named curve intermediate w/fips");
|
|---|
| 338 |
|
|---|
| 339 | delete $ENV{OPENSSL_CONF};
|
|---|
| 340 | }
|
|---|
| 341 |
|
|---|
| 342 | # Depth tests, note the depth limit bounds the number of CA certificates
|
|---|
| 343 | # between the trust-anchor and the leaf, so, for example, with a root->ca->leaf
|
|---|
| 344 | # chain, depth = 1 is sufficient, but depth == 0 is not.
|
|---|
| 345 | #
|
|---|
| 346 | ok(verify("ee-cert", "", ["root-cert"], ["ca-cert"], "-verify_depth", "2"),
|
|---|
| 347 | "accept chain with verify_depth 2");
|
|---|
| 348 | ok(verify("ee-cert", "", ["root-cert"], ["ca-cert"], "-verify_depth", "1"),
|
|---|
| 349 | "accept chain with verify_depth 1");
|
|---|
| 350 | ok(!verify("ee-cert", "", ["root-cert"], ["ca-cert"], "-verify_depth", "0"),
|
|---|
| 351 | "reject chain with verify_depth 0");
|
|---|
| 352 | ok(verify("ee-cert", "", ["ca-cert-md5-any"], [], "-verify_depth", "0"),
|
|---|
| 353 | "accept md5 intermediate TA with verify_depth 0");
|
|---|
| 354 |
|
|---|
| 355 | # Name Constraints tests.
|
|---|
| 356 |
|
|---|
| 357 | ok(verify("alt1-cert", "", ["root-cert"], ["ncca1-cert"], ),
|
|---|
| 358 | "Name Constraints everything permitted");
|
|---|
| 359 |
|
|---|
| 360 | ok(verify("alt2-cert", "", ["root-cert"], ["ncca2-cert"], ),
|
|---|
| 361 | "Name Constraints nothing excluded");
|
|---|
| 362 |
|
|---|
| 363 | ok(verify("alt3-cert", "", ["root-cert"], ["ncca1-cert", "ncca3-cert"], ),
|
|---|
| 364 | "Name Constraints nested test all permitted");
|
|---|
| 365 |
|
|---|
| 366 | ok(verify("goodcn1-cert", "", ["root-cert"], ["ncca1-cert"], ),
|
|---|
| 367 | "Name Constraints CNs permitted");
|
|---|
| 368 |
|
|---|
| 369 | ok(verify("goodcn2-cert", "", ["root-cert"], ["ncca1-cert"], ),
|
|---|
| 370 | "Name Constraints CNs permitted - no SAN extension");
|
|---|
| 371 |
|
|---|
| 372 | ok(!verify("badcn1-cert", "", ["root-cert"], ["ncca1-cert"], ),
|
|---|
| 373 | "Name Constraints CNs not permitted");
|
|---|
| 374 |
|
|---|
| 375 | ok(!verify("badalt1-cert", "", ["root-cert"], ["ncca1-cert"], ),
|
|---|
| 376 | "Name Constraints hostname not permitted");
|
|---|
| 377 |
|
|---|
| 378 | ok(!verify("badalt2-cert", "", ["root-cert"], ["ncca2-cert"], ),
|
|---|
| 379 | "Name Constraints hostname excluded");
|
|---|
| 380 |
|
|---|
| 381 | ok(!verify("badalt3-cert", "", ["root-cert"], ["ncca1-cert"], ),
|
|---|
| 382 | "Name Constraints email address not permitted");
|
|---|
| 383 |
|
|---|
| 384 | ok(!verify("badalt4-cert", "", ["root-cert"], ["ncca1-cert"], ),
|
|---|
| 385 | "Name Constraints subject email address not permitted");
|
|---|
| 386 |
|
|---|
| 387 | ok(!verify("badalt5-cert", "", ["root-cert"], ["ncca1-cert"], ),
|
|---|
| 388 | "Name Constraints IP address not permitted");
|
|---|
| 389 |
|
|---|
| 390 | ok(!verify("badalt6-cert", "", ["root-cert"], ["ncca1-cert"], ),
|
|---|
| 391 | "Name Constraints CN hostname not permitted");
|
|---|
| 392 |
|
|---|
| 393 | ok(!verify("badalt7-cert", "", ["root-cert"], ["ncca1-cert"], ),
|
|---|
| 394 | "Name Constraints CN BMPSTRING hostname not permitted");
|
|---|
| 395 |
|
|---|
| 396 | ok(!verify("badalt8-cert", "", ["root-cert"], ["ncca1-cert", "ncca3-cert"], ),
|
|---|
| 397 | "Name constraints nested DNS name not permitted 1");
|
|---|
| 398 |
|
|---|
| 399 | ok(!verify("badalt9-cert", "", ["root-cert"], ["ncca1-cert", "ncca3-cert"], ),
|
|---|
| 400 | "Name constraints nested DNS name not permitted 2");
|
|---|
| 401 |
|
|---|
| 402 | ok(!verify("badalt10-cert", "", ["root-cert"], ["ncca1-cert", "ncca3-cert"], ),
|
|---|
| 403 | "Name constraints nested DNS name excluded");
|
|---|
| 404 |
|
|---|
| 405 | #Check that we get the expected failure return code
|
|---|
| 406 | with({ exit_checker => sub { return shift == 2; } },
|
|---|
| 407 | sub {
|
|---|
| 408 | ok(verify("bad-othername-namec", "", ["bad-othername-namec-inter"], [],
|
|---|
| 409 | "-partial_chain", "-attime", "1623060000"),
|
|---|
| 410 | "Name constraints bad othername name constraint");
|
|---|
| 411 | });
|
|---|
| 412 |
|
|---|
| 413 | ok(verify("ee-pss-sha1-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "0"),
|
|---|
| 414 | "Accept PSS signature using SHA1 at auth level 0");
|
|---|
| 415 |
|
|---|
| 416 | ok(verify("ee-pss-sha256-cert", "", ["root-cert"], ["ca-cert"], ),
|
|---|
| 417 | "CA with PSS signature using SHA256");
|
|---|
| 418 |
|
|---|
| 419 | ok(!verify("ee-pss-sha1-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "1"),
|
|---|
| 420 | "Reject PSS signature using SHA1 and auth level 1");
|
|---|
| 421 |
|
|---|
| 422 | ok(verify("ee-pss-sha256-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "2"),
|
|---|
| 423 | "PSS signature using SHA256 and auth level 2");
|
|---|
| 424 |
|
|---|
| 425 | ok(verify("ee-pss-cert", "", ["root-cert"], ["ca-pss-cert"], ),
|
|---|
| 426 | "CA PSS signature");
|
|---|
| 427 | ok(!verify("ee-pss-wrong1.5-cert", "", ["root-cert"], ["ca-pss-cert"], ),
|
|---|
| 428 | "CA producing regular PKCS#1 v1.5 signature with PSA-PSS key");
|
|---|
| 429 |
|
|---|
| 430 | ok(!verify("many-names1", "", ["many-constraints"], ["many-constraints"], ),
|
|---|
| 431 | "Too many names and constraints to check (1)");
|
|---|
| 432 | ok(!verify("many-names2", "", ["many-constraints"], ["many-constraints"], ),
|
|---|
| 433 | "Too many names and constraints to check (2)");
|
|---|
| 434 | ok(!verify("many-names3", "", ["many-constraints"], ["many-constraints"], ),
|
|---|
| 435 | "Too many names and constraints to check (3)");
|
|---|
| 436 |
|
|---|
| 437 | ok(verify("some-names1", "", ["many-constraints"], ["many-constraints"], ),
|
|---|
| 438 | "Not too many names and constraints to check (1)");
|
|---|
| 439 | ok(verify("some-names2", "", ["many-constraints"], ["many-constraints"], ),
|
|---|
| 440 | "Not too many names and constraints to check (2)");
|
|---|
| 441 | ok(verify("some-names2", "", ["many-constraints"], ["many-constraints"], ),
|
|---|
| 442 | "Not too many names and constraints to check (3)");
|
|---|
| 443 | ok(verify("root-cert-rsa2", "", ["root-cert-rsa2"], [], "-check_ss_sig"),
|
|---|
| 444 | "Public Key Algorithm rsa instead of rsaEncryption");
|
|---|
| 445 |
|
|---|
| 446 | ok(verify("ee-self-signed", "", ["ee-self-signed"], [], "-attime", "1593565200"),
|
|---|
| 447 | "accept trusted self-signed EE cert excluding key usage keyCertSign");
|
|---|
| 448 | ok(verify("ee-ss-with-keyCertSign", "", ["ee-ss-with-keyCertSign"], []),
|
|---|
| 449 | "accept trusted self-signed EE cert with key usage keyCertSign also when strict");
|
|---|
| 450 |
|
|---|
| 451 | SKIP: {
|
|---|
| 452 | skip "Ed25519 is not supported by this OpenSSL build", 6
|
|---|
| 453 | if disabled("ec");
|
|---|
| 454 |
|
|---|
| 455 | # ED25519 certificate from draft-ietf-curdle-pkix-04
|
|---|
| 456 | ok(verify("ee-ed25519", "", ["root-ed25519"], []),
|
|---|
| 457 | "accept X25519 EE cert issued by trusted Ed25519 self-signed CA cert");
|
|---|
| 458 |
|
|---|
| 459 | ok(!verify("ee-ed25519", "", ["root-ed25519"], [], "-x509_strict"),
|
|---|
| 460 | "reject X25519 EE cert in strict mode since AKID is missing");
|
|---|
| 461 |
|
|---|
| 462 | ok(!verify("root-ed25519", "", ["ee-ed25519"], []),
|
|---|
| 463 | "fail Ed25519 CA and EE certs swapped");
|
|---|
| 464 |
|
|---|
| 465 | ok(verify("root-ed25519", "", ["root-ed25519"], []),
|
|---|
| 466 | "accept trusted Ed25519 self-signed CA cert");
|
|---|
| 467 |
|
|---|
| 468 | ok(!verify("ee-ed25519", "", ["ee-ed25519"], []),
|
|---|
| 469 | "fail trusted Ed25519-signed self-issued X25519 cert");
|
|---|
| 470 |
|
|---|
| 471 | ok(verify("ee-ed25519", "", ["ee-ed25519"], [], "-partial_chain"),
|
|---|
| 472 | "accept last-resort direct leaf match Ed25519-signed self-issued cert");
|
|---|
| 473 |
|
|---|
| 474 | }
|
|---|
| 475 |
|
|---|
| 476 | SKIP: {
|
|---|
| 477 | skip "SM2 is not supported by this OpenSSL build", 2 if disabled("sm2");
|
|---|
| 478 |
|
|---|
| 479 | ok_nofips(verify("sm2", "", ["sm2-ca-cert"], [], "-vfyopt", "distid:1234567812345678"),
|
|---|
| 480 | "SM2 ID test");
|
|---|
| 481 | ok_nofips(verify("sm2", "", ["sm2-ca-cert"], [], "-vfyopt", "hexdistid:31323334353637383132333435363738"),
|
|---|
| 482 | "SM2 hex ID test");
|
|---|
| 483 | }
|
|---|
| 484 |
|
|---|
| 485 | # Mixed content tests
|
|---|
| 486 | my $cert_file = srctop_file('test', 'certs', 'root-cert.pem');
|
|---|
| 487 | my $rsa_file = srctop_file('test', 'certs', 'key-pass-12345.pem');
|
|---|
| 488 |
|
|---|
| 489 | SKIP: {
|
|---|
| 490 | my $certplusrsa_file = 'certplusrsa.pem';
|
|---|
| 491 | my $certplusrsa;
|
|---|
| 492 |
|
|---|
| 493 | skip "Couldn't create certplusrsa.pem", 1
|
|---|
| 494 | unless ( open $certplusrsa, '>', $certplusrsa_file
|
|---|
| 495 | and copy($cert_file, $certplusrsa)
|
|---|
| 496 | and copy($rsa_file, $certplusrsa)
|
|---|
| 497 | and close $certplusrsa );
|
|---|
| 498 |
|
|---|
| 499 | ok(run(app([ qw(openssl verify -trusted), $certplusrsa_file, $cert_file ])),
|
|---|
| 500 | 'Mixed cert + key file test');
|
|---|
| 501 | }
|
|---|
| 502 |
|
|---|
| 503 | SKIP: {
|
|---|
| 504 | my $rsapluscert_file = 'rsapluscert.pem';
|
|---|
| 505 | my $rsapluscert;
|
|---|
| 506 |
|
|---|
| 507 | skip "Couldn't create rsapluscert.pem", 1
|
|---|
| 508 | unless ( open $rsapluscert, '>', $rsapluscert_file
|
|---|
| 509 | and copy($rsa_file, $rsapluscert)
|
|---|
| 510 | and copy($cert_file, $rsapluscert)
|
|---|
| 511 | and close $rsapluscert );
|
|---|
| 512 |
|
|---|
| 513 | ok(run(app([ qw(openssl verify -trusted), $rsapluscert_file, $cert_file ])),
|
|---|
| 514 | 'Mixed key + cert file test');
|
|---|
| 515 | }
|
|---|
