aboutsummaryrefslogtreecommitdiff
path: root/test/x509_internal_test.c
diff options
context:
space:
mode:
Diffstat (limited to 'test/x509_internal_test.c')
-rw-r--r--test/x509_internal_test.c136
1 files changed, 128 insertions, 8 deletions
diff --git a/test/x509_internal_test.c b/test/x509_internal_test.c
index be43537329bb..7cd04d84f6a4 100644
--- a/test/x509_internal_test.c
+++ b/test/x509_internal_test.c
@@ -1,5 +1,5 @@
/*
- * Copyright 2016-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2025 The OpenSSL Project Authors. All Rights Reserved.
*
* Licensed under the Apache License 2.0 (the "License"). You may not use
* this file except in compliance with the License. You can obtain a copy
@@ -58,22 +58,92 @@ static IP_TESTDATA a2i_ipaddress_tests[] = {
{"127.0.0.1", "\x7f\x00\x00\x01", 4},
{"1.2.3.4", "\x01\x02\x03\x04", 4},
{"1.2.3.255", "\x01\x02\x03\xff", 4},
- {"1.2.3", NULL, 0},
- {"1.2.3 .4", NULL, 0},
+ {"255.255.255.255", "\xff\xff\xff\xff", 4},
+ {"::", "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16},
{"::1", "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01", 16},
+ {"::01", "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01", 16},
+ {"::0001", "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01", 16},
+ {"ffff::", "\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16},
+ {"ffff::1", "\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01", 16},
+ {"1::2", "\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02", 16},
{"1:1:1:1:1:1:1:1", "\x00\x01\x00\x01\x00\x01\x00\x01\x00\x01\x00\x01\x00\x01\x00\x01", 16},
{"2001:db8::ff00:42:8329", "\x20\x01\x0d\xb8\x00\x00\x00\x00\x00\x00\xff\x00\x00\x42\x83\x29", 16},
+ {"::1.2.3.4", "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x02\x03\x04", 16},
+ {"ffff:ffff:ffff:ffff:ffff:ffff:1.2.3.4", "\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\x01\x02\x03\x04", 16},
+
{"1:1:1:1:1:1:1:1.test", NULL, 0},
{":::1", NULL, 0},
{"2001::123g", NULL, 0},
- {"example.test", NULL, 0},
+ /* Too few IPv4 components. */
+ {"1", NULL, 0 },
+ {"1.", NULL, 0 },
+ {"1.2", NULL, 0 },
+ {"1.2.", NULL, 0 },
+ {"1.2.3", NULL, 0 },
+ {"1.2.3.", NULL, 0 },
+
+ /* Invalid embedded IPv4 address. */
+ {"::1.2.3", NULL, 0 },
+
+ /* IPv4 literals take the place of two IPv6 components. */
+ {"1:2:3:4:5:6:7:1.2.3.4", NULL, 0 },
+
+ /* '::' should have fewer than 16 components or it is redundant. */
+ {"1:2:3:4:5:6:7::8", NULL, 0 },
+
+ /* Embedded IPv4 addresses must be at the end. */
+ {"::1.2.3.4:1", NULL, 0 },
+
+ /* Too many components. */
+ {"1.2.3.4.5", NULL, 0 },
+ {"1:2:3:4:5:6:7:8:9", NULL, 0 },
+ {"1:2:3:4:5::6:7:8:9", NULL, 0 },
+
+ /* Stray whitespace or other invalid characters. */
+ {"1.2.3.4 ", NULL, 0 },
+ {"1.2.3 .4", NULL, 0 },
+ {"1.2.3. 4", NULL, 0 },
+ {" 1.2.3.4", NULL, 0 },
+ {"1.2.3.4.", NULL, 0 },
+ {"1.2.3.+4", NULL, 0 },
+ {"1.2.3.-4", NULL, 0 },
+ {"1.2.3.4.example.test", NULL, 0 },
+ {"::1 ", NULL, 0 },
+ {" ::1", NULL, 0 },
+ {":: 1", NULL, 0 },
+ {": :1", NULL, 0 },
+ {"1.2.3.nope", NULL, 0 },
+ {"::nope", NULL, 0 },
+
+ /* Components too large. */
+ {"1.2.3.256", NULL, 0}, /* Overflows when adding */
+ {"1.2.3.260", NULL, 0}, /* Overflows when multiplying by 10 */
+ {"1.2.3.999999999999999999999999999999999999999999", NULL, 0 },
+ {"::fffff", NULL, 0 },
+
+ /* Although not an overflow, more than four hex digits is an error. */
+ {"::00000", NULL, 0 },
+
+ /* Too many colons. */
+ {":::", NULL, 0 },
+ {"1:::", NULL, 0 },
+ {":::2", NULL, 0 },
+ {"1:::2", NULL, 0 },
+
+ /* Only one group of zeros may be elided. */
+ {"1::2::3", NULL, 0 },
+
+ /* We only support decimal. */
+ {"1.2.3.01", NULL, 0 },
+ {"1.2.3.0x1", NULL, 0 },
+
+ /* Random garbage. */
+ {"example.test", NULL, 0 },
{"", NULL, 0},
-
- {"1.2.3.4 ", "\x01\x02\x03\x04", 4},
- {" 1.2.3.4", "\x01\x02\x03\x04", 4},
- {" 1.2.3.4 ", "\x01\x02\x03\x04", 4},
+ {" 1.2.3.4", NULL, 0},
+ {" 1.2.3.4 ", NULL, 0},
{"1.2.3.4.example.test", NULL, 0},
};
@@ -102,9 +172,59 @@ static int test_a2i_ipaddress(int idx)
return good;
}
+static int ck_purp(ossl_unused const X509_PURPOSE *purpose,
+ ossl_unused const X509 *x, int ca)
+{
+ return 1;
+}
+
+static int tests_X509_PURPOSE(void)
+{
+ OSSL_LIB_CTX *libctx = NULL;
+ int id, idx, *p;
+ X509_PURPOSE *xp;
+
+#undef LN
+#define LN "LN_test"
+#undef SN
+#define SN "SN_test"
+#undef ARGS
+#define ARGS(id, sn) id, X509_TRUST_MAX, 0, ck_purp, LN, sn, NULL
+ return TEST_int_gt((id = X509_PURPOSE_get_unused_id(libctx)), X509_PURPOSE_MAX)
+ && TEST_int_eq(X509_PURPOSE_get_count() + 1, id)
+ && TEST_int_eq(X509_PURPOSE_get_by_id(id), -1)
+ && TEST_int_eq(X509_PURPOSE_get_by_sname(SN), -1)
+
+ /* add new entry with fresh id and fresh sname: */
+ && TEST_int_eq(X509_PURPOSE_add(ARGS(id, SN)), 1)
+ && TEST_int_ne((idx = X509_PURPOSE_get_by_sname(SN)), -1)
+ && TEST_int_eq(X509_PURPOSE_get_by_id(id), idx)
+
+ /* overwrite same entry, should be idempotent: */
+ && TEST_int_eq(X509_PURPOSE_add(ARGS(id, SN)), 1)
+ && TEST_int_eq(X509_PURPOSE_get_by_sname(SN), idx)
+ && TEST_int_eq(X509_PURPOSE_get_by_id(id), idx)
+
+ /* fail adding entry with same sname but existing conflicting id: */
+ && TEST_int_eq(X509_PURPOSE_add(ARGS(X509_PURPOSE_MAX, SN)), 0)
+ /* fail adding entry with same existing id but conflicting sname: */
+ && TEST_int_eq(X509_PURPOSE_add(ARGS(id, SN"_different")), 0)
+
+ && TEST_ptr((xp = X509_PURPOSE_get0(idx)))
+ && TEST_int_eq(X509_PURPOSE_get_id(xp), id)
+ && TEST_str_eq(X509_PURPOSE_get0_name(xp), LN)
+ && TEST_str_eq(X509_PURPOSE_get0_sname(xp), SN)
+ && TEST_int_eq(X509_PURPOSE_get_trust(xp), X509_TRUST_MAX)
+
+ && TEST_int_eq(*(p = &xp->purpose), id)
+ && TEST_int_eq(X509_PURPOSE_set(p, X509_PURPOSE_DEFAULT_ANY), 1)
+ && TEST_int_eq(X509_PURPOSE_get_id(xp), X509_PURPOSE_DEFAULT_ANY);
+}
+
int setup_tests(void)
{
ADD_TEST(test_standard_exts);
ADD_ALL_TESTS(test_a2i_ipaddress, OSSL_NELEM(a2i_ipaddress_tests));
+ ADD_TEST(tests_X509_PURPOSE);
return 1;
}
generated by cgit v1.2.3 (git 2.25.1) at 2025-10-09 11:35:22 +0000