Hakase/openssl-custom
1
0 Fork 0
Code Issues Pull Requests Releases Wiki Activity

Latest update.

Browse Source
This commit is contained in:
Hakase
2020-04-25 19:56:17 +09:00
parent 2015c00c43
commit 80ef640063
5977 changed files with 13451 additions and 5979 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/recipes/02-test_internal_provider.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2019 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2019-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/03-test_fipsinstall.t
+24 -15
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2019 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2019-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
@@ -101,19 +101,28 @@ ok(!run(app(['openssl', 'fipsinstall', '-out', 'fips.cnf', '-module', $infile,
"fipsinstall fails when the DRBG CTR result is corrupted");
# corrupt a KAS test
ok(!run(app(['openssl', 'fipsinstall', '-out', 'fips.conf', '-module', $infile,
'-provider_name', 'fips', '-mac_name', 'HMAC',
'-macopt', 'digest:SHA256', '-macopt', 'hexkey:00',
'-section_name', 'fips_install',
'-corrupt_desc', 'DH',
'-corrupt_type', 'KAT_KA'])),
"fipsinstall fails when the kas result is corrupted");
SKIP: {
skip "Skipping KAS DH corruption test because of no dh in this build", 1
if disabled("dh");
ok(!run(app(['openssl', 'fipsinstall', '-out', 'fips.conf', '-module', $infile,
'-provider_name', 'fips', '-mac_name', 'HMAC',
'-macopt', 'digest:SHA256', '-macopt', 'hexkey:00',
'-section_name', 'fips_install',
'-corrupt_desc', 'DH',
'-corrupt_type', 'KAT_KA'])),
"fipsinstall fails when the kas result is corrupted");
}
# corrupt a Signature test
ok(!run(app(['openssl', 'fipsinstall', '-out', 'fips.conf', '-module', $infile,
'-provider_name', 'fips', '-mac_name', 'HMAC',
'-macopt', 'digest:SHA256', '-macopt', 'hexkey:00',
'-section_name', 'fips_install',
'-corrupt_desc', 'DSA',
'-corrupt_type', 'KAT_Signature'])),
"fipsinstall fails when the signature result is corrupted");
SKIP: {
skip "Skipping Signature DSA corruption test because of no dsa in this build", 1
if disabled("dsa");
ok(!run(app(['openssl', 'fipsinstall', '-out', 'fips.conf', '-module', $infile,
'-provider_name', 'fips', '-mac_name', 'HMAC',
'-macopt', 'digest:SHA256', '-macopt', 'hexkey:00',
'-section_name', 'fips_install',
'-corrupt_desc', 'DSA',
'-corrupt_type', 'KAT_Signature'])),
"fipsinstall fails when the signature result is corrupted");
}
test/recipes/04-test_conf.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2017-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/05-test_bf.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/05-test_cast.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/05-test_rand.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/15-test_dsa.t
+11 -21
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
@@ -21,27 +21,17 @@ plan tests => 7;
require_ok(srctop_file('test','recipes','tconversion.pl'));
SKIP: {
skip "Skipping initial dsa tests", 2
if disabled('deprecated-3.0');
ok(run(test(["dsatest"])), "running dsatest");
ok(run(test(["dsa_no_digest_size_test"])),
"running dsa_no_digest_size_test");
ok(run(test(["dsatest"])), "running dsatest");
ok(run(test(["dsa_no_digest_size_test"])),
"running dsa_no_digest_size_test");
}
SKIP: {
skip "Skipping dsa conversion test using 'openssl dsa'", 2
if disabled('deprecated-3.0');
subtest "dsa conversions using 'openssl dsa' -- private key" => sub {
tconversion("dsa", srctop_file("test","testdsa.pem"));
};
subtest "dsa conversions using 'openssl dsa' -- public key" => sub {
tconversion("msb", srctop_file("test","testdsapub.pem"), "dsa",
"-pubin", "-pubout");
};
}
subtest "dsa conversions using 'openssl dsa' -- private key" => sub {
tconversion("dsa", srctop_file("test","testdsa.pem"));
};
subtest "dsa conversions using 'openssl dsa' -- public key" => sub {
tconversion("msb", srctop_file("test","testdsapub.pem"), "dsa",
"-pubin", "-pubout");
};
subtest "dsa conversions using 'openssl pkey' -- private key PKCS#8" => sub {
tconversion("dsa", srctop_file("test","testdsa.pem"), "pkey");
test/recipes/15-test_ec.t
+2 -2
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
@@ -27,7 +27,7 @@ ok(run(test(["ectest"])), "running ectest");
# the command line tool in addition to the algorithm.
SKIP: {
skip "Skipping EC conversion test", 3
if disabled("ec") || disabled('deprecated-3.0');
if disabled("ec");
subtest 'EC conversions -- private key' => sub {
tconversion("ec", srctop_file("test","testec-p256.pem"));
test/recipes/15-test_ecparam.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2017-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/15-test_gendh.t
+98
View File
@@ -0,0 +1,98 @@
#! /usr/bin/env perl
# Copyright 2017-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
# in the file LICENSE in the source distribution or at
# https://www.openssl.org/source/license.html
use strict;
use warnings;
use File::Spec;
use OpenSSL::Test qw/:DEFAULT srctop_file/;
use OpenSSL::Test::Utils;
setup("test_gendh");
plan skip_all => "This test is unsupported in a no-dh build" if disabled("dh");
plan tests => 13;
ok(run(app([ 'openssl', 'genpkey', '-genparam',
'-algorithm', 'DH',
'-pkeyopt', 'gindex:1',
'-pkeyopt', 'type:fips186_4',
'-text'])),
"genpkey DH params fips186_4 with verifiable g");
ok(run(app([ 'openssl', 'genpkey', '-genparam',
'-algorithm', 'DH',
'-pkeyopt', 'type:fips186_4',
'-text'])),
"genpkey DH params fips186_4 with unverifiable g");
ok(run(app([ 'openssl', 'genpkey', '-genparam',
'-algorithm', 'DH',
'-pkeyopt', 'type:fips186_2',
'-text'])),
"genpkey DH params fips186_2");
ok(run(app([ 'openssl', 'genpkey', '-algorithm', 'DH',
'-pkeyopt', 'type:group',
'-text'])),
"genpkey DH default group");
ok(run(app([ 'openssl', 'genpkey', '-algorithm', 'DH',
'-pkeyopt', 'type:group',
'-pkeyopt', 'group:ffdhe2048',
'-text'])),
"genpkey DH group ffdhe2048");
ok(run(app([ 'openssl', 'genpkey', '-genparam',
'-algorithm', 'DH',
'-pkeyopt', 'gindex:1',
'-pkeyopt', 'type:fips186_4',
'-out', 'dhgen.pem'])),
"genpkey DH params fips186_4 PEM");
ok(run(app([ 'openssl', 'genpkey', '-genparam',
'-algorithm', 'DH',
'-pkeyopt', 'gindex:1',
'-pkeyopt', 'pbits:2048',
'-pkeyopt', 'qbits:256',
'-pkeyopt', 'type:fips186_4',
'-outform', 'DER',
'-out', 'dhgen.der'])),
"genpkey DH params fips186_4 DER");
# The seed and counter should be the ones generated from the param generation
# Just put some dummy ones in to show it works.
ok(run(app([ 'openssl', 'genpkey',
'-paramfile', 'dhgen.der',
'-pkeyopt', 'gindex:1',
'-pkeyopt', 'hexseed:0102030405060708090A0B0C0D0E0F1011121314',
'-pkeyopt', 'pcounter:25',
'-text'])),
"genpkey DH fips186_4 with DER params");
ok(!run(app([ 'openssl', 'genpkey',
'-algorithm', 'DH'])),
"genpkey DH with no params should fail");
ok(!run(app([ 'openssl', 'genpkey', '-algorithm', 'DH', '-pkeyopt',
'group:ffdhe3072', '-pkeyopt', 'priv_len:255', '-text'])),
'genpkey DH with a small private len should fail');
ok(!run(app([ 'openssl', 'genpkey', '-algorithm', 'DH', '-pkeyopt',
'group:ffdhe3072', '-pkeyopt', 'priv_len:3072', '-text'])),
'genpkey DH with a large private len should fail');
ok(run(app([ 'openssl', 'genpkey', '-algorithm', 'DH', '-pkeyopt',
'group:ffdhe3072', '-pkeyopt', 'priv_len:256', '-text'])),
'genpkey DH with a minimum strength private len');
ok(run(app([ 'openssl', 'genpkey', '-algorithm', 'DH', '-pkeyopt',
'group:ffdhe2048', '-pkeyopt', 'priv_len:224', '-text'])),
'genpkey 2048 DH with a minimum strength private len');
test/recipes/15-test_gendsa.t
+77
View File
@@ -0,0 +1,77 @@
#! /usr/bin/env perl
# Copyright 2017-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
# in the file LICENSE in the source distribution or at
# https://www.openssl.org/source/license.html
use strict;
use warnings;
use File::Spec;
use OpenSSL::Test qw/:DEFAULT srctop_file/;
use OpenSSL::Test::Utils;
setup("test_gendsa");
plan skip_all => "This test is unsupported in a no-dsa build"
if disabled("dsa");
plan tests => 8;
ok(run(app([ 'openssl', 'genpkey', '-genparam',
'-algorithm', 'DSA',
'-pkeyopt', 'gindex:1',
'-pkeyopt', 'type:fips186_4',
'-text'])),
"genpkey DSA params fips186_4 with verifiable g");
ok(run(app([ 'openssl', 'genpkey', '-genparam',
'-algorithm', 'DSA',
'-pkeyopt', 'type:fips186_4',
'-text'])),
"genpkey DSA params fips186_4 with unverifiable g");
ok(run(app([ 'openssl', 'genpkey', '-genparam',
'-algorithm', 'DSA',
'-pkeyopt', 'type:fips186_2',
'-text'])),
"genpkey DSA params fips186_2");
ok(!run(app([ 'openssl', 'genpkey', '-algorithm', 'DSA',
'-pkeyopt', 'type:group',
'-text'])),
"genpkey DSA does not support groups");
ok(run(app([ 'openssl', 'genpkey', '-genparam',
'-algorithm', 'DSA',
'-pkeyopt', 'gindex:1',
'-pkeyopt', 'type:fips186_4',
'-out', 'dsagen.pem'])),
"genpkey DSA params fips186_4 PEM");
ok(run(app([ 'openssl', 'genpkey', '-genparam',
'-algorithm', 'DSA',
'-pkeyopt', 'gindex:1',
'-pkeyopt', 'pbits:2048',
'-pkeyopt', 'qbits:256',
'-pkeyopt', 'type:fips186_4',
'-outform', 'DER',
'-out', 'dsagen.der'])),
"genpkey DSA params fips186_4 DER");
# The seed and counter should be the ones generated from the param generation
# Just put some dummy ones in to show it works.
ok(run(app([ 'openssl', 'genpkey',
'-paramfile', 'dsagen.der',
'-pkeyopt', 'gindex:1',
'-pkeyopt', 'hexseed:0102030405060708090A0B0C0D0E0F1011121314',
'-pkeyopt', 'pcounter:25',
'-text'])),
"genpkey DSA fips186_4 with DER params");
ok(!run(app([ 'openssl', 'genpkey',
'-algorithm', 'DSA'])),
"genpkey DSA with no params should fail");
test/recipes/15-test_genrsa.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2017-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/15-test_mp_rsa.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2017-2020 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2017 BaishanCloud. All rights reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
test/recipes/15-test_rsa.t
+32 -23
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
@@ -16,32 +16,41 @@ use OpenSSL::Test::Utils;
setup("test_rsa");
plan tests => 6;
plan tests => 10;
require_ok(srctop_file('test','recipes','tconversion.pl'));
require_ok(srctop_file('test', 'recipes', 'tconversion.pl'));
ok(run(test(["rsa_test"])), "running rsatest");
ok(run(app([ 'openssl', 'rsa', '-check', '-in', srctop_file('test', 'testrsa.pem'), '-noout'])), "rsa -check");
run_rsa_tests("pkey");
SKIP: {
skip "Skipping rsa conversion test", 3
if disabled("rsa");
run_rsa_tests("rsa");
subtest 'rsa conversions -- private key' => sub {
tconversion("rsa", srctop_file("test","testrsa.pem"));
};
subtest 'rsa conversions -- private key PKCS#8' => sub {
tconversion("rsa", srctop_file("test","testrsa.pem"), "pkey");
};
}
SKIP: {
skip "Skipping msblob conversion test", 1
if disabled("rsa") || disabled("dsa");
subtest 'rsa conversions -- public key' => sub {
tconversion("msb", srctop_file("test","testrsapub.pem"), "rsa",
"-pubin", "-pubout");
};
sub run_rsa_tests {
my $cmd = shift;
ok(run(app([ 'openssl', $cmd, '-check', '-in', srctop_file('test', 'testrsa.pem'), '-noout'])),
"$cmd -check" );
SKIP: {
skip "Skipping $cmd conversion test", 3
if disabled("rsa");
subtest "$cmd conversions -- private key" => sub {
tconversion($cmd, srctop_file("test", "testrsa.pem"));
};
subtest "$cmd conversions -- private key PKCS#8" => sub {
tconversion($cmd, srctop_file("test", "testrsa.pem"), "pkey");
};
}
SKIP: {
skip "Skipping msblob conversion test", 1
if disabled($cmd) || disabled("dsa") || $cmd == 'pkey';
subtest "$cmd conversions -- public key" => sub {
tconversion("msb", srctop_file("test", "testrsapub.pem"), "rsa",
"-pubin", "-pubout");
};
}
}
test/recipes/15-test_rsapss.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2017-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/20-test_dgst.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2017-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/20-test_enc.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/20-test_enc_more.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2017-2020 The OpenSSL Project Authors. All Rights Reserved.
# Copyright (c) 2017, Oracle and/or its affiliates. All rights reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
test/recipes/20-test_passwd.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/20-test_pkeyutl.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2018 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2018-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/20-test_provider.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2019 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2019-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/25-test_crl.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/25-test_req.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/25-test_verify.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/25-test_x509.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/30-test_evp.t
+2 -2
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
@@ -84,7 +84,7 @@ unless ($no_fips) {
$ENV{OPENSSL_CONF_INCLUDE} = bldtop_dir("providers");
ok(run(app(['openssl', 'fipsinstall',
'-out', bldtop_file('providers', 'fipsinstall.cnf'),
'-out', bldtop_file('providers', 'fipsmodule.cnf'),
'-module', $infile,
'-provider_name', 'fips', '-mac_name', 'HMAC',
'-macopt', 'digest:SHA256', '-macopt', 'hexkey:00',
test/recipes/30-test_evp_data/evpciph.txt
+2 -2
View File
@@ -1,5 +1,5 @@
#
# Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2001-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
@@ -37,7 +37,7 @@ Plaintext = "Hello World"
Ciphertext = 3CF55D656E9C0664513358
Cipher = DESX-CBC
Availablein = default
Availablein = legacy
Key = 0123456789abcdeff1e0d3c2b5a49786fedcba9876543210
IV = fedcba9876543210
Plaintext = 37363534333231204E6F77206973207468652074696D6520666F722000000000
test/recipes/30-test_evp_data/evpmac.txt
+1 -1
View File
@@ -1,5 +1,5 @@
#
# Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2001-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/30-test_evp_data/evppkey.txt
+1 -1
View File
@@ -1,5 +1,5 @@
#
# Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2001-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/30-test_evp_fetch_prov.t
+2 -2
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
@@ -48,7 +48,7 @@ my @testdata = (
unless ($no_fips) {
push @setups, {
cmd => app(['openssl', 'fipsinstall',
'-out', bldtop_file('providers', 'fipsinstall.cnf'),
'-out', bldtop_file('providers', 'fipsmodule.cnf'),
'-module', bldtop_file('providers', platform->dso('fips')),
'-provider_name', 'fips', '-mac_name', 'HMAC',
'-macopt', 'digest:SHA256', '-macopt', 'hexkey:00',
test/recipes/30-test_evp_pkey_provided/DH.priv.der
BIN
View File
Binary file not shown.
test/recipes/30-test_evp_pkey_provided/DH.priv.pem
+7 -1
View File
@@ -1,3 +1,9 @@
-----BEGIN PRIVATE KEY-----
MCQCAQAwFwYJKoZIhvcNAQMBMAoCBQCLtF9TAgECBAYCBGZsKwY=
MIIBQwIBADCCARsGCSqGSIb3DQEDATCCAQwCggEBAP//////////rfhUWKK7Spqv
3FYgJz088di5xYPOLTaVqeE2QRRkM/vMk53OJJs++X0v42NjDHXY9oGyAq7EYXrT
3x7V1f1lYSQz9R9fBm7QhWNlVT3tGvO1VxNef1fJNZhPDHDg5ot34qaJ2vPv6HId
8VihNq3nNTCsyk9IOnl6vAqxgrMk+2HRCKlLssjj+7lq2rdg1/RoHU9Co945TfSu
Vu3nY3K7GQsHp8juCm1wngL84c334uzANATNKDQvYZFy/pzphYP/jk8SMu7ygYPD
/jsbTG+tczu1/LwuwiAFxY7xg30Wg7LG80omwbLv+ohrQjhhKFyX//////////8C
AQICAgDgBB8CHQCIheef7m3FfHivY104KtDtVktHISv6VfqH6Kl7
-----END PRIVATE KEY-----
test/recipes/30-test_evp_pkey_provided/DH.priv.txt
+24 -5
View File
@@ -1,5 +1,24 @@
DH Private-Key: (32 bit)
private-key: 1718364934 (0x666c2b06)
public-key: 1873206864 (0x6fa6de50)
prime: 2343853907 (0x8bb45f53)
generator: 2 (0x2)
DH Private-Key: (2048 bit)
private-key:
00:88:85:e7:9f:ee:6d:c5:7c:78:af:63:5d:38:2a:
d0:ed:56:4b:47:21:2b:fa:55:fa:87:e8:a9:7b
public-key:
00:d6:2d:77:e0:d3:7d:f8:eb:98:50:a1:82:22:65:
d5:d9:fe:c9:3f:be:16:83:bd:33:e9:c6:93:cf:08:
af:83:fa:80:8a:6c:64:df:70:64:d5:0a:7c:5a:72:
da:66:e6:f9:f5:31:21:92:b0:60:1a:b5:d3:f0:a5:
fa:48:95:2e:38:d9:c5:e6:da:fb:6c:03:9d:4b:69:
b7:95:e4:5c:c0:93:4f:48:d9:7e:06:22:b2:de:f3:
79:24:ed:e1:d1:4a:57:f1:40:86:70:42:25:c5:27:
68:c9:fa:e5:8e:62:7e:ff:49:6c:5b:b5:ba:f9:ef:
9a:1a:10:d4:81:53:cf:83:04:18:1c:e1:db:e1:65:
a9:7f:e1:33:eb:c3:4f:e3:b7:22:f7:1c:09:4f:ed:
c6:07:8e:78:05:8f:7c:96:d9:12:e0:81:74:1a:e9:
13:c0:20:82:65:bb:42:3b:ed:08:6a:84:4f:ea:77:
14:32:f9:ed:c2:12:d6:c5:c6:b3:e5:f2:6e:f6:16:
7f:37:de:bc:09:c7:06:6b:12:bc:ad:2d:49:25:d5:
dc:f4:18:14:d2:f0:f1:1d:1f:3a:aa:15:55:bb:0d:
7f:be:67:a1:a7:f0:aa:b3:fb:41:82:39:49:93:bc:
a8:ee:72:13:45:65:15:42:17:aa:d8:ab:cf:33:42:
83:42
GROUP: ffdhe2048
test/recipes/30-test_evp_pkey_provided/DH.pub.der
BIN
View File
Binary file not shown.
test/recipes/30-test_evp_pkey_provided/DH.pub.pem
+12 -1
View File
@@ -1,3 +1,14 @@
-----BEGIN PUBLIC KEY-----
MCIwFwYJKoZIhvcNAQMBMAoCBQCLtF9TAgECAwcAAgRvpt5Q
MIICKTCCARsGCSqGSIb3DQEDATCCAQwCggEBAP//////////rfhUWKK7Spqv3FYg
Jz088di5xYPOLTaVqeE2QRRkM/vMk53OJJs++X0v42NjDHXY9oGyAq7EYXrT3x7V
1f1lYSQz9R9fBm7QhWNlVT3tGvO1VxNef1fJNZhPDHDg5ot34qaJ2vPv6HId8Vih
Nq3nNTCsyk9IOnl6vAqxgrMk+2HRCKlLssjj+7lq2rdg1/RoHU9Co945TfSuVu3n
Y3K7GQsHp8juCm1wngL84c334uzANATNKDQvYZFy/pzphYP/jk8SMu7ygYPD/jsb
TG+tczu1/LwuwiAFxY7xg30Wg7LG80omwbLv+ohrQjhhKFyX//////////8CAQIC
AgDgA4IBBgACggEBANYtd+DTffjrmFChgiJl1dn+yT++FoO9M+nGk88Ir4P6gIps
ZN9wZNUKfFpy2mbm+fUxIZKwYBq10/Cl+kiVLjjZxeba+2wDnUtpt5XkXMCTT0jZ
fgYist7zeSTt4dFKV/FAhnBCJcUnaMn65Y5ifv9JbFu1uvnvmhoQ1IFTz4MEGBzh
2+FlqX/hM+vDT+O3IvccCU/txgeOeAWPfJbZEuCBdBrpE8AggmW7QjvtCGqET+p3
FDL57cIS1sXGs+XybvYWfzfevAnHBmsSvK0tSSXV3PQYFNLw8R0fOqoVVbsNf75n
oafwqrP7QYI5SZO8qO5yE0VlFUIXqtirzzNCg0I=
-----END PUBLIC KEY-----
test/recipes/30-test_evp_pkey_provided/DH.pub.txt
+21 -4
View File
@@ -1,4 +1,21 @@
DH Public-Key: (32 bit)
public-key: 1873206864 (0x6fa6de50)
prime: 2343853907 (0x8bb45f53)
generator: 2 (0x2)
DH Public-Key: (2048 bit)
public-key:
00:d6:2d:77:e0:d3:7d:f8:eb:98:50:a1:82:22:65:
d5:d9:fe:c9:3f:be:16:83:bd:33:e9:c6:93:cf:08:
af:83:fa:80:8a:6c:64:df:70:64:d5:0a:7c:5a:72:
da:66:e6:f9:f5:31:21:92:b0:60:1a:b5:d3:f0:a5:
fa:48:95:2e:38:d9:c5:e6:da:fb:6c:03:9d:4b:69:
b7:95:e4:5c:c0:93:4f:48:d9:7e:06:22:b2:de:f3:
79:24:ed:e1:d1:4a:57:f1:40:86:70:42:25:c5:27:
68:c9:fa:e5:8e:62:7e:ff:49:6c:5b:b5:ba:f9:ef:
9a:1a:10:d4:81:53:cf:83:04:18:1c:e1:db:e1:65:
a9:7f:e1:33:eb:c3:4f:e3:b7:22:f7:1c:09:4f:ed:
c6:07:8e:78:05:8f:7c:96:d9:12:e0:81:74:1a:e9:
13:c0:20:82:65:bb:42:3b:ed:08:6a:84:4f:ea:77:
14:32:f9:ed:c2:12:d6:c5:c6:b3:e5:f2:6e:f6:16:
7f:37:de:bc:09:c7:06:6b:12:bc:ad:2d:49:25:d5:
dc:f4:18:14:d2:f0:f1:1d:1f:3a:aa:15:55:bb:0d:
7f:be:67:a1:a7:f0:aa:b3:fb:41:82:39:49:93:bc:
a8:ee:72:13:45:65:15:42:17:aa:d8:ab:cf:33:42:
83:42
GROUP: ffdhe2048
test/recipes/30-test_evp_pkey_provided/DSA.priv.der
BIN
View File
Binary file not shown.
test/recipes/30-test_evp_pkey_provided/DSA.priv.pem
+15
View File
@@ -0,0 +1,15 @@
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----
test/recipes/30-test_evp_pkey_provided/DSA.priv.txt
+72
View File
@@ -0,0 +1,72 @@
Private-Key: (2048 bit)
priv:
00:8f:c5:9e:d0:f7:2a:0b:66:f1:32:73:ae:f6:d9:
d4:db:2d:96:55:89:ff:ef:a8:5f:47:8f:ca:02:8a:
e1:35:90
pub:
44:19:c9:46:45:57:c1:a9:d8:30:99:29:6a:4b:63:
71:69:96:35:17:b2:62:9b:80:0a:95:9d:6a:c0:32:
0d:07:5f:19:44:02:f1:bd:ce:df:10:f8:02:5d:7d:
98:8a:73:89:00:b6:24:d6:33:e7:cf:8b:49:2a:af:
13:1c:b2:52:15:fd:9b:d5:40:4a:1a:da:29:4c:92:
7e:66:06:db:61:86:ac:b5:da:3c:7d:73:7e:54:32:
68:a5:02:bc:59:47:84:d3:87:71:5f:eb:43:45:24:
d3:ec:08:52:c2:89:2d:9c:1a:cc:91:65:5d:a3:a1:
35:31:10:1c:3a:a8:4d:18:d5:06:af:b2:ec:5c:89:
9e:90:86:10:01:eb:51:d5:1b:9c:cb:66:07:3f:c4:
6e:0a:1b:73:a0:4b:5f:4d:ab:35:28:fa:da:3a:0c:
08:e8:f3:ef:42:67:bc:21:f2:c2:b8:ff:1a:81:05:
68:73:62:df:d7:ab:0f:22:89:57:96:d4:93:af:a1:
21:a3:48:e9:f0:97:47:a0:27:ba:87:b8:15:5f:ff:
2c:50:41:f1:7e:c6:81:c4:51:f1:fd:d6:86:f7:69:
97:f1:49:c9:f9:f4:9b:f4:e8:85:a7:bd:36:55:4a:
3d:e8:65:09:7b:b7:12:64:d2:0a:53:60:48:d1:8a:
bd
P:
00:a0:b7:02:c4:ac:a6:42:ab:f2:34:0b:22:47:1f:
33:cf:d5:04:e4:3e:ec:a1:21:c8:41:2b:ef:b8:1f:
0b:5b:88:8b:67:f8:68:6d:7c:4d:96:5f:3c:66:ef:
58:34:d7:f6:a2:1b:ad:c8:12:52:b8:e8:2a:63:cc:
ea:e7:4e:c8:34:4c:58:59:0a:c2:4a:e4:b4:64:20:
f4:f6:0a:cf:86:01:6c:7f:23:4a:51:07:99:42:28:
7a:ff:18:67:52:64:f2:9a:62:30:c3:00:de:23:e9:
11:95:7e:d1:3d:8d:b4:0e:9f:9e:b1:30:03:f0:73:
a8:40:48:42:7b:60:a0:c4:f2:3b:2d:0a:0c:b8:19:
fb:b4:f8:e0:2a:c7:f1:c0:c6:86:14:60:12:0f:c0:
de:4a:67:ec:c7:de:76:21:1a:55:7f:86:c3:97:98:
ce:f5:cd:f0:e7:12:d6:93:ee:1b:9b:61:ef:05:8c:
45:46:d9:64:6f:be:27:aa:67:01:cc:71:b1:60:ce:
21:d8:51:17:27:0d:90:3d:18:7c:87:15:8e:48:4c:
6c:c5:72:eb:b7:56:f5:6b:60:8f:c2:fd:3f:46:5c:
00:91:85:79:45:5b:1c:82:c4:87:50:79:ba:cc:1c:
32:7e:2e:b8:2e:c5:4e:d1:9b:db:66:79:7c:fe:af:
6a:05
Q:
00:a8:cd:f4:33:7b:13:0a:24:c1:de:4a:04:7b:4b:
71:51:32:e9:47:74:bd:0c:21:40:84:12:0a:17:73:
db:29:c7
G:
6c:c6:a4:3e:61:84:c1:ff:6f:4a:1a:6b:b0:24:4b:
d2:92:5b:29:5c:61:b8:c9:2b:d6:f7:59:fd:d8:70:
66:77:fc:c1:a4:d4:b0:1e:d5:bf:59:98:b3:66:8b:
f4:2e:e6:12:3e:cc:f8:02:b8:c6:c3:47:d2:f5:aa:
0c:5f:51:f5:d0:4c:55:3d:07:73:a6:57:ce:5a:ad:
42:0c:13:0f:e2:31:25:8e:72:12:73:10:db:7f:79:
eb:59:fc:fe:f7:0c:1a:81:53:96:22:b8:e7:58:d8:
67:80:60:ad:8b:55:1c:91:f0:72:9a:7e:ad:37:f1:
77:18:96:8a:68:70:fc:71:a9:a2:e8:35:27:78:f2:
ef:59:36:6d:7c:b6:98:d8:1e:fa:25:73:97:45:58:
e3:ae:bd:52:54:05:d8:26:26:ba:ba:05:b5:e9:e5:
76:ae:25:dd:fc:10:89:5a:a9:ee:59:c5:79:8b:eb:
1e:2c:61:ab:0d:d1:10:04:91:32:77:4a:a6:64:53:
da:4c:d7:3a:29:d4:f3:82:25:1d:6f:4a:7f:d3:08:
3b:42:30:10:d8:d0:97:3a:eb:92:63:ec:93:2b:6f:
32:d8:cd:80:d3:c0:4c:03:d5:ca:bc:8f:c7:43:53:
64:66:1c:82:2d:fb:ff:39:ba:d6:42:62:02:6f:96:
36
SEED:
64:46:07:32:8d:70:9c:b3:8a:35:de:62:00:f2:6d:
52:37:4d:b3:84:e1:9d:41:04:da:7b:dc:0d:8b:5e:
e0:84
gindex: 1
pcounter: 53
test/recipes/30-test_evp_pkey_provided/DSA.pub.der
BIN
View File
Binary file not shown.
test/recipes/30-test_evp_pkey_provided/DSA.pub.pem
+20
View File
@@ -0,0 +1,20 @@
-----BEGIN PUBLIC KEY-----
MIIDRjCCAjkGByqGSM44BAEwggIsAoIBAQCgtwLErKZCq/I0CyJHHzPP1QTkPuyh
IchBK++4HwtbiItn+GhtfE2WXzxm71g01/aiG63IElK46CpjzOrnTsg0TFhZCsJK
5LRkIPT2Cs+GAWx/I0pRB5lCKHr/GGdSZPKaYjDDAN4j6RGVftE9jbQOn56xMAPw
c6hASEJ7YKDE8jstCgy4Gfu0+OAqx/HAxoYUYBIPwN5KZ+zH3nYhGlV/hsOXmM71
zfDnEtaT7hubYe8FjEVG2WRvvieqZwHMcbFgziHYURcnDZA9GHyHFY5ITGzFcuu3
VvVrYI/C/T9GXACRhXlFWxyCxIdQebrMHDJ+LrguxU7Rm9tmeXz+r2oFAiEAqM30
M3sTCiTB3koEe0txUTLpR3S9DCFAhBIKF3PbKccCggEAbMakPmGEwf9vShprsCRL
0pJbKVxhuMkr1vdZ/dhwZnf8waTUsB7Vv1mYs2aL9C7mEj7M+AK4xsNH0vWqDF9R
9dBMVT0Hc6ZXzlqtQgwTD+IxJY5yEnMQ239561n8/vcMGoFTliK451jYZ4BgrYtV
HJHwcpp+rTfxdxiWimhw/HGpoug1J3jy71k2bXy2mNge+iVzl0VY4669UlQF2CYm
uroFtenldq4l3fwQiVqp7lnFeYvrHixhqw3REASRMndKpmRT2kzXOinU84IlHW9K
f9MIO0IwENjQlzrrkmPskytvMtjNgNPATAPVyryPx0NTZGYcgi37/zm61kJiAm+W
NgOCAQUAAoIBAEQZyUZFV8Gp2DCZKWpLY3FpljUXsmKbgAqVnWrAMg0HXxlEAvG9
zt8Q+AJdfZiKc4kAtiTWM+fPi0kqrxMcslIV/ZvVQEoa2ilMkn5mBtthhqy12jx9
c35UMmilArxZR4TTh3Ff60NFJNPsCFLCiS2cGsyRZV2joTUxEBw6qE0Y1Qavsuxc
iZ6QhhAB61HVG5zLZgc/xG4KG3OgS19NqzUo+to6DAjo8+9CZ7wh8sK4/xqBBWhz
Yt/Xqw8iiVeW1JOvoSGjSOnwl0egJ7qHuBVf/yxQQfF+xoHEUfH91ob3aZfxScn5
9Jv06IWnvTZVSj3oZQl7txJk0gpTYEjRir0=
-----END PUBLIC KEY-----
test/recipes/30-test_evp_pkey_provided/DSA.pub.txt
+72
View File
@@ -0,0 +1,72 @@
Private-Key: (2048 bit)
priv:
00:8f:c5:9e:d0:f7:2a:0b:66:f1:32:73:ae:f6:d9:
d4:db:2d:96:55:89:ff:ef:a8:5f:47:8f:ca:02:8a:
e1:35:90
pub:
44:19:c9:46:45:57:c1:a9:d8:30:99:29:6a:4b:63:
71:69:96:35:17:b2:62:9b:80:0a:95:9d:6a:c0:32:
0d:07:5f:19:44:02:f1:bd:ce:df:10:f8:02:5d:7d:
98:8a:73:89:00:b6:24:d6:33:e7:cf:8b:49:2a:af:
13:1c:b2:52:15:fd:9b:d5:40:4a:1a:da:29:4c:92:
7e:66:06:db:61:86:ac:b5:da:3c:7d:73:7e:54:32:
68:a5:02:bc:59:47:84:d3:87:71:5f:eb:43:45:24:
d3:ec:08:52:c2:89:2d:9c:1a:cc:91:65:5d:a3:a1:
35:31:10:1c:3a:a8:4d:18:d5:06:af:b2:ec:5c:89:
9e:90:86:10:01:eb:51:d5:1b:9c:cb:66:07:3f:c4:
6e:0a:1b:73:a0:4b:5f:4d:ab:35:28:fa:da:3a:0c:
08:e8:f3:ef:42:67:bc:21:f2:c2:b8:ff:1a:81:05:
68:73:62:df:d7:ab:0f:22:89:57:96:d4:93:af:a1:
21:a3:48:e9:f0:97:47:a0:27:ba:87:b8:15:5f:ff:
2c:50:41:f1:7e:c6:81:c4:51:f1:fd:d6:86:f7:69:
97:f1:49:c9:f9:f4:9b:f4:e8:85:a7:bd:36:55:4a:
3d:e8:65:09:7b:b7:12:64:d2:0a:53:60:48:d1:8a:
bd
P:
00:a0:b7:02:c4:ac:a6:42:ab:f2:34:0b:22:47:1f:
33:cf:d5:04:e4:3e:ec:a1:21:c8:41:2b:ef:b8:1f:
0b:5b:88:8b:67:f8:68:6d:7c:4d:96:5f:3c:66:ef:
58:34:d7:f6:a2:1b:ad:c8:12:52:b8:e8:2a:63:cc:
ea:e7:4e:c8:34:4c:58:59:0a:c2:4a:e4:b4:64:20:
f4:f6:0a:cf:86:01:6c:7f:23:4a:51:07:99:42:28:
7a:ff:18:67:52:64:f2:9a:62:30:c3:00:de:23:e9:
11:95:7e:d1:3d:8d:b4:0e:9f:9e:b1:30:03:f0:73:
a8:40:48:42:7b:60:a0:c4:f2:3b:2d:0a:0c:b8:19:
fb:b4:f8:e0:2a:c7:f1:c0:c6:86:14:60:12:0f:c0:
de:4a:67:ec:c7:de:76:21:1a:55:7f:86:c3:97:98:
ce:f5:cd:f0:e7:12:d6:93:ee:1b:9b:61:ef:05:8c:
45:46:d9:64:6f:be:27:aa:67:01:cc:71:b1:60:ce:
21:d8:51:17:27:0d:90:3d:18:7c:87:15:8e:48:4c:
6c:c5:72:eb:b7:56:f5:6b:60:8f:c2:fd:3f:46:5c:
00:91:85:79:45:5b:1c:82:c4:87:50:79:ba:cc:1c:
32:7e:2e:b8:2e:c5:4e:d1:9b:db:66:79:7c:fe:af:
6a:05
Q:
00:a8:cd:f4:33:7b:13:0a:24:c1:de:4a:04:7b:4b:
71:51:32:e9:47:74:bd:0c:21:40:84:12:0a:17:73:
db:29:c7
G:
6c:c6:a4:3e:61:84:c1:ff:6f:4a:1a:6b:b0:24:4b:
d2:92:5b:29:5c:61:b8:c9:2b:d6:f7:59:fd:d8:70:
66:77:fc:c1:a4:d4:b0:1e:d5:bf:59:98:b3:66:8b:
f4:2e:e6:12:3e:cc:f8:02:b8:c6:c3:47:d2:f5:aa:
0c:5f:51:f5:d0:4c:55:3d:07:73:a6:57:ce:5a:ad:
42:0c:13:0f:e2:31:25:8e:72:12:73:10:db:7f:79:
eb:59:fc:fe:f7:0c:1a:81:53:96:22:b8:e7:58:d8:
67:80:60:ad:8b:55:1c:91:f0:72:9a:7e:ad:37:f1:
77:18:96:8a:68:70:fc:71:a9:a2:e8:35:27:78:f2:
ef:59:36:6d:7c:b6:98:d8:1e:fa:25:73:97:45:58:
e3:ae:bd:52:54:05:d8:26:26:ba:ba:05:b5:e9:e5:
76:ae:25:dd:fc:10:89:5a:a9:ee:59:c5:79:8b:eb:
1e:2c:61:ab:0d:d1:10:04:91:32:77:4a:a6:64:53:
da:4c:d7:3a:29:d4:f3:82:25:1d:6f:4a:7f:d3:08:
3b:42:30:10:d8:d0:97:3a:eb:92:63:ec:93:2b:6f:
32:d8:cd:80:d3:c0:4c:03:d5:ca:bc:8f:c7:43:53:
64:66:1c:82:2d:fb:ff:39:ba:d6:42:62:02:6f:96:
36
SEED:
64:46:07:32:8d:70:9c:b3:8a:35:de:62:00:f2:6d:
52:37:4d:b3:84:e1:9d:41:04:da:7b:dc:0d:8b:5e:
e0:84
gindex: 1
pcounter: 53
test/recipes/65-test_cmp_client.t
+3 -3
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2007-2019 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2007-2020 The OpenSSL Project Authors. All Rights Reserved.
# Copyright Nokia 2007-2019
# Copyright Siemens AG 2015-2019
#
@@ -14,8 +14,8 @@ use OpenSSL::Test::Utils;
setup("test_cmp_client");
plan skip_all => "This test is not supported in a no-cmp build"
if disabled("cmp");
plan skip_all => "This test is not supported in a no-cmp or no-ec build"
if disabled("cmp") || disabled("ec");
plan tests => 1;
test/recipes/65-test_cmp_vfy.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2007-2019 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2007-2020 The OpenSSL Project Authors. All Rights Reserved.
# Copyright Nokia 2007-2019
# Copyright Siemens AG 2015-2019
#
test/recipes/70-test_comp.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2017-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/70-test_sslmessages.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/70-test_sslsigalgs.t
+65 -3
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2016-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
@@ -44,7 +44,9 @@ use constant {
COMPAT_SIGALGS => 6,
SIGALGS_CERT_ALL => 7,
SIGALGS_CERT_PKCS => 8,
SIGALGS_CERT_INVALID => 9
SIGALGS_CERT_INVALID => 9,
UNRECOGNIZED_SIGALGS_CERT => 10,
UNRECOGNIZED_SIGALG => 11
};
#Note: Throughout this test we override the default ciphersuites where TLSv1.2
@@ -53,7 +55,7 @@ use constant {
#Test 1: Default sig algs should succeed
$proxy->start() or plan skip_all => "Unable to start up Proxy for tests";
plan tests => 24;
plan tests => 26;
ok(TLSProxy::Message->success, "Default sigalgs");
my $testtype;
@@ -282,6 +284,39 @@ SKIP: {
ok(TLSProxy::Message->fail, "No matching certificate for sigalgs_cert");
}
SKIP: {
skip "TLS 1.3 disabled", 2 if disabled("tls1_3");
#Test 25: Send an unrecognized signature_algorithms_cert
# We should be able to skip over the unrecognized value and use a
# valid one that appears later in the list.
$proxy->clear();
$proxy->filter(\&inject_unrecognized_sigalg);
$proxy->clientflags("-tls1_3");
# Use -xcert to get SSL_check_chain() to run in the cert_cb. This is
# needed to trigger (e.g.) CVE-2020-1967
$proxy->serverflags("" .
" -xcert " . srctop_file("test", "certs", "servercert.pem") .
" -xkey " . srctop_file("test", "certs", "serverkey.pem") .
" -xchain " . srctop_file("test", "certs", "rootcert.pem"));
$testtype = UNRECOGNIZED_SIGALGS_CERT;
$proxy->start();
ok(TLSProxy::Message->success(), "Unrecognized sigalg_cert in ClientHello");
#Test 26: Send an unrecognized signature_algorithms
# We should be able to skip over the unrecognized value and use a
# valid one that appears later in the list.
$proxy->clear();
$proxy->filter(\&inject_unrecognized_sigalg);
$proxy->clientflags("-tls1_3");
$proxy->serverflags("" .
" -xcert " . srctop_file("test", "certs", "servercert.pem") .
" -xkey " . srctop_file("test", "certs", "serverkey.pem") .
" -xchain " . srctop_file("test", "certs", "rootcert.pem"));
$testtype = UNRECOGNIZED_SIGALG;
$proxy->start();
ok(TLSProxy::Message->success(), "Unrecognized sigalg in ClientHello");
}
sub sigalgs_filter
@@ -427,3 +462,30 @@ sub modify_cert_verify_sigalg
}
}
}
sub inject_unrecognized_sigalg
{
my $proxy = shift;
my $type;
# We're only interested in the initial ClientHello
if ($proxy->flight != 0) {
return;
}
if ($testtype == UNRECOGNIZED_SIGALGS_CERT) {
$type = TLSProxy::Message::EXT_SIG_ALGS_CERT;
} elsif ($testtype == UNRECOGNIZED_SIGALG) {
$type = TLSProxy::Message::EXT_SIG_ALGS;
} else {
return;
}
my $ext = pack "C8",
0x00, 0x06, #Extension length
0xfe, 0x18, #private use
0x04, 0x01, #rsa_pkcs1_sha256
0x08, 0x04; #rsa_pss_rsae_sha256;
my $message = ${$proxy->message_list}[0];
$message->set_extension($type, $ext);
$message->repack;
}
test/recipes/70-test_sslversions.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/70-test_tls13kexmodes.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2017-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/70-test_tls13messages.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/70-test_tls13psk.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2017-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/80-test_ca.t
+5 -5
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
@@ -32,12 +32,12 @@ plan tests => 6;
$ENV{OPENSSL_CONFIG} = '-config "'.srctop_file("test", "Uss.cnf").'"';
skip "failed creating new certificate request", 3
if !ok(run(perlapp(["CA.pl","-newreq"])),
if !ok(run(perlapp(["CA.pl","-newreq",
"-extra-req","-outform DER"])),
'creating certificate request');
$ENV{OPENSSL_CONFIG} = '-rand_serial -config "'.$std_openssl_cnf.'"';
$ENV{OPENSSL_CONFIG} = '-rand_serial -inform DER -config "'.$std_openssl_cnf.'"';
skip "failed to sign certificate request", 2
if !is(yes(cmdstr(perlapp(["CA.pl", "-sign"]))), 0,
if !is(yes(cmdstr(perlapp(["CA.pl", "-sign", "-extra-ca"]))), 0,
'signing certificate request');
ok(run(perlapp(["CA.pl", "-verify", "newcert.pem"])),
test/recipes/80-test_cms.t
+3 -3
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
@@ -640,8 +640,8 @@ subtest "CMS Decrypt message encrypted with OpenSSL 1.1.1\n" => sub {
plan tests => 1;
SKIP: {
skip "EC isn't supported in this build", 1
if disabled("ec");
skip "EC or DES isn't supported in this build", 1
if disabled("ec") || disabled("des");
my $out = "smtst.txt";
test/recipes/80-test_ct.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/80-test_ocsp.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/80-test_ssl_new.t
+46 -10
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
@@ -13,11 +13,21 @@ use warnings;
use File::Basename;
use File::Compare qw/compare_text/;
use OpenSSL::Glob;
use OpenSSL::Test qw/:DEFAULT srctop_dir srctop_file/;
use OpenSSL::Test qw/:DEFAULT srctop_dir srctop_file bldtop_file bldtop_dir/;
use OpenSSL::Test::Utils qw/disabled alldisabled available_protocols/;
BEGIN {
setup("test_ssl_new");
}
use lib srctop_dir('Configurations');
use lib bldtop_dir('.');
use platform;
my $no_fips = disabled('fips') || ($ENV{NO_FIPS} // 0);
$ENV{OPENSSL_MODULES} = bldtop_dir("providers");
$ENV{OPENSSL_CONF_INCLUDE} = bldtop_dir("providers");
$ENV{TEST_CERTS_DIR} = srctop_dir("test", "certs");
$ENV{CTLOG_FILE} = srctop_file("test", "ct", "log_list.cnf");
@@ -28,7 +38,8 @@ map { s/\^// } @conf_files if $^O eq "VMS";
# We hard-code the number of tests to double-check that the globbing above
# finds all files as expected.
plan tests => 30; # = scalar @conf_srcs
plan tests => 30 # = scalar @conf_srcs
+ ($no_fips ? 0 : 1); # fipsinstall
# Some test results depend on the configuration of enabled protocols. We only
# verify generated sources in the default configuration.
@@ -106,28 +117,46 @@ my %skip = (
"29-dtls-sctp-label-bug.cnf" => disabled("sctp") || disabled("sock"),
);
unless ($no_fips) {
ok(run(app(['openssl', 'fipsinstall',
'-out', bldtop_file('providers', 'fipsmodule.cnf'),
'-module', bldtop_file('providers', platform->dso('fips')),
'-provider_name', 'fips', '-mac_name', 'HMAC',
'-macopt', 'digest:SHA256', '-macopt', 'hexkey:00',
'-section_name', 'fips_sect'])),
"fipsinstall");
}
foreach my $conf (@conf_files) {
subtest "Test configuration $conf" => sub {
plan tests => 6 + ($no_fips ? 0 : 3);
test_conf($conf,
$conf_dependent_tests{$conf} || $^O eq "VMS" ? 0 : 1,
defined($skip{$conf}) ? $skip{$conf} : $no_tls);
defined($skip{$conf}) ? $skip{$conf} : $no_tls,
"none");
test_conf($conf,
0,
defined($skip{$conf}) ? $skip{$conf} : $no_tls,
"default");
test_conf($conf,
0,
defined($skip{$conf}) ? $skip{$conf} : $no_tls,
"fips") unless $no_fips;
}
}
sub test_conf {
plan tests => 3;
my ($conf, $check_source, $skip) = @_;
my ($conf, $check_source, $skip, $provider) = @_;
my $conf_file = srctop_file("test", "ssl-tests", $conf);
my $input_file = $conf_file . ".in";
my $output_file = $conf;
my $output_file = $conf . "." . $provider;
my $run_test = 1;
SKIP: {
# "Test" 1. Generate the source.
skip 'failure', 2 unless
ok(run(perltest(["generate_ssl_tests.pl", $input_file],
ok(run(perltest(["generate_ssl_tests.pl", $input_file, $provider],
interpreter_args => [ "-I", srctop_dir("util", "perl")],
stdout => $output_file)),
"Getting output from generate_ssl_tests.pl.");
@@ -145,7 +174,14 @@ sub test_conf {
skip "No tests available; skipping tests", 1 if $skip;
skip "Stale sources; skipping tests", 1 if !$run_test;
ok(run(test(["ssl_test", $output_file])), "running ssl_test $conf");
if ($provider eq "fips") {
ok(run(test(["ssl_test", $output_file, $provider,
srctop_file("test", "fips.cnf")])),
"running ssl_test $conf");
} else {
ok(run(test(["ssl_test", $output_file, $provider])),
"running ssl_test $conf");
}
}
}
test/recipes/80-test_ssl_old.t
+43 -14
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
@@ -13,13 +13,22 @@ use warnings;
use POSIX;
use File::Basename;
use File::Copy;
use OpenSSL::Test qw/:DEFAULT with bldtop_file srctop_file cmdstr/;
use OpenSSL::Test qw/:DEFAULT with bldtop_file bldtop_dir srctop_file srctop_dir cmdstr/;
use OpenSSL::Test::Utils;
BEGIN {
setup("test_ssl");
}
use lib srctop_dir('Configurations');
use lib bldtop_dir('.');
use platform;
$ENV{CTLOG_FILE} = srctop_file("test", "ct", "log_list.cnf");
$ENV{OPENSSL_MODULES} = bldtop_dir("providers");
$ENV{OPENSSL_CONF_INCLUDE} = bldtop_dir("providers");
my $no_fips = disabled('fips') || ($ENV{NO_FIPS} // 0);
my ($no_rsa, $no_dsa, $no_dh, $no_ec, $no_psk,
$no_ssl3, $no_tls1, $no_tls1_1, $no_tls1_2, $no_tls1_3,
$no_dtls, $no_dtls1, $no_dtls1_2, $no_ct) =
@@ -78,10 +87,21 @@ my $client_sess="client.ss";
# If you're adding tests here, you probably want to convert them to the
# new format in ssl_test.c and add recipes to 80-test_ssl_new.t instead.
plan tests =>
1 # For testss
+5 # For the first testssl
($no_fips ? 0 : 1 + 5) # For fipsinstall + testssl with fips provider
+ 1 # For testss
+ 5 # For the testssl with default provider
;
unless ($no_fips) {
ok(run(app(['openssl', 'fipsinstall',
'-out', bldtop_file('providers', 'fipsmodule.cnf'),
'-module', bldtop_file('providers', platform->dso('fips')),
'-provider_name', 'fips', '-mac_name', 'HMAC',
'-macopt', 'digest:SHA256', '-macopt', 'hexkey:00',
'-section_name', 'fips_sect'])),
"fipsinstall");
}
subtest 'test_ss' => sub {
if (testss()) {
open OUT, ">", "intP1.ss";
@@ -95,7 +115,10 @@ subtest 'test_ss' => sub {
};
note('test_ssl -- key U');
testssl("keyU.ss", $Ucert, $CAcert);
testssl("keyU.ss", $Ucert, $CAcert, "default", srctop_file("test","default.cnf"));
unless ($no_fips) {
testssl("keyU.ss", $Ucert, $CAcert, "fips", srctop_file("test","fips.cnf"));
}
# -----------
# subtest functions
@@ -310,12 +333,14 @@ sub testss {
}
sub testssl {
my ($key, $cert, $CAtmp) = @_;
my ($key, $cert, $CAtmp, $provider, $configfile) = @_;
my @CA = $CAtmp ? ("-CAfile", $CAtmp) : ("-CApath", bldtop_dir("certs"));
my @ssltest = ("ssltest_old",
"-s_key", $key, "-s_cert", $cert,
"-c_key", $key, "-c_cert", $cert);
"-c_key", $key, "-c_cert", $cert,
"-provider", $provider,
"-config", $configfile);
my $serverinfo = srctop_file("test","serverinfo.pem");
@@ -336,6 +361,9 @@ sub testssl {
skip "SSLv3 is not supported by this OpenSSL build", 4
if disabled("ssl3");
skip "SSLv3 is not supported by the FIPS provider", 4
if $provider eq "fips";
ok(run(test([@ssltest, "-bio_pair", "-ssl3"])),
'test sslv3 via BIO pair');
ok(run(test([@ssltest, "-bio_pair", "-ssl3", "-server_auth", @CA])),
@@ -409,8 +437,8 @@ sub testssl {
# We only use the flags that ssltest_old understands
push @protocols, "-tls1_3" unless $no_tls1_3;
push @protocols, "-tls1_2" unless $no_tls1_2;
push @protocols, "-tls1" unless $no_tls1;
push @protocols, "-ssl3" unless $no_ssl3;
push @protocols, "-tls1" unless $no_tls1 || $provider eq "fips";
push @protocols, "-ssl3" unless $no_ssl3 || $provider eq "fips";
my $protocolciphersuitecount = 0;
my %ciphersuites = ();
my %ciphersstatus = ();
@@ -419,6 +447,7 @@ sub testssl {
my @ciphers = run(app(["openssl", "ciphers", "-s", $protocol,
"ALL:$ciphers"]),
capture => 1, statusvar => \$ciphersstatus);
@ciphers = grep {!/CAMELLIA|ARIA|CHACHA/} @ciphers;
$ciphersstatus{$protocol} = $ciphersstatus;
if ($ciphersstatus) {
$ciphersuites{$protocol} = [ map { s|\R||; split(/:/, $_) }
@@ -479,7 +508,7 @@ sub testssl {
SKIP: {
skip "TLSv1.0 is not supported by this OpenSSL build", 5
if $no_tls1;
if $no_tls1 || $provider eq "fips";
SKIP: {
skip "skipping anonymous DH tests", 1
@@ -493,13 +522,13 @@ sub testssl {
skip "skipping RSA tests", 2
if $no_rsa;
ok(run(test(["ssltest_old", "-v", "-bio_pair", "-tls1", "-s_cert", srctop_file("apps","server2.pem"), "-no_dhe", "-no_ecdhe", "-num", "10", "-f", "-time"])),
ok(run(test(["ssltest_old", "-provider", "default", "-v", "-bio_pair", "-tls1", "-s_cert", srctop_file("apps","server2.pem"), "-no_dhe", "-no_ecdhe", "-num", "10", "-f", "-time"])),
'test tlsv1 with 1024bit RSA, no (EC)DHE, multiple handshakes');
skip "skipping RSA+DHE tests", 1
if $no_dh;
ok(run(test(["ssltest_old", "-v", "-bio_pair", "-tls1", "-s_cert", srctop_file("apps","server2.pem"), "-dhe1024dsa", "-num", "10", "-f", "-time"])),
ok(run(test(["ssltest_old", "-provider", "default", "-v", "-bio_pair", "-tls1", "-s_cert", srctop_file("apps","server2.pem"), "-dhe1024dsa", "-num", "10", "-f", "-time"])),
'test tlsv1 with 1024bit RSA, 1024bit DHE, multiple handshakes');
}
@@ -524,7 +553,7 @@ sub testssl {
SKIP: {
skip "TLSv1.0 is not supported by this OpenSSL build", 1
if $no_tls1;
if $no_tls1 || $provider eq "fips";
ok(run(test([@ssltest, "-bio_pair", "-tls1", "-custom_ext"])),
'test tls1 with custom extensions');
@@ -538,7 +567,7 @@ sub testssl {
SKIP: {
skip "TLSv1.0 is not supported by this OpenSSL build", 5
if $no_tls1;
if $no_tls1 || $provider eq "fips";
note('echo test tls1 with serverinfo');
ok(run(test([@ssltest, "-bio_pair", "-tls1", "-serverinfo_file", $serverinfo])));
test/recipes/80-test_ssl_test_ctx.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/90-test_gost.t
+4 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2018 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2018-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
@@ -24,6 +24,9 @@ plan skip_all => "TLSv1.3 or TLSv1.2 are disabled in this OpenSSL build"
plan skip_all => "EC is disabled in this OpenSSL build"
if disabled("ec");
#Gost engine uses some deprecated functions
plan skip_all => "Deprecated functions are disabled in this OpenSSL build"
if disabled("deprecated");
plan skip_all => "No test GOST engine found"
if !$ENV{OPENSSL_GOST_ENGINE_SO};
test/recipes/90-test_ige.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/90-test_sslapi.t
+34 -4
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2016-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
@@ -8,21 +8,51 @@
use OpenSSL::Test::Utils;
use OpenSSL::Test qw/:DEFAULT srctop_file srctop_dir/;
use OpenSSL::Test qw/:DEFAULT srctop_file srctop_dir bldtop_dir bldtop_file/;
use File::Temp qw(tempfile);
BEGIN {
setup("test_sslapi");
}
use lib srctop_dir('Configurations');
use lib bldtop_dir('.');
use platform;
my $no_fips = disabled('fips') || ($ENV{NO_FIPS} // 0);
plan skip_all => "No TLS/SSL protocols are supported by this OpenSSL build"
if alldisabled(grep { $_ ne "ssl3" } available_protocols("tls"));
plan tests => 1;
plan tests =>
($no_fips ? 0 : 2) # FIPS install test + sslapitest with fips
+ 1; # sslapitest with default provider
(undef, my $tmpfilename) = tempfile();
$ENV{OPENSSL_MODULES} = bldtop_dir("providers");
$ENV{OPENSSL_CONF_INCLUDE} = bldtop_dir("providers");
ok(run(test(["sslapitest", srctop_dir("test", "certs"),
srctop_file("test", "recipes", "90-test_sslapi_data",
"passwd.txt"), $tmpfilename])),
"passwd.txt"), $tmpfilename, "default",
srctop_file("test", "default.cnf")])),
"running sslapitest");
unless ($no_fips) {
ok(run(app(['openssl', 'fipsinstall',
'-out', bldtop_file('providers', 'fipsmodule.cnf'),
'-module', bldtop_file('providers', platform->dso('fips')),
'-provider_name', 'fips', '-mac_name', 'HMAC',
'-macopt', 'digest:SHA256', '-macopt', 'hexkey:00',
'-section_name', 'fips_sect'])),
"fipsinstall");
ok(run(test(["sslapitest", srctop_dir("test", "certs"),
srctop_file("test", "recipes", "90-test_sslapi_data",
"passwd.txt"), $tmpfilename, "fips",
srctop_file("test", "fips.cnf")])),
"running sslapitest");
}
unlink $tmpfilename;
test/recipes/90-test_sslprovider.t
+2 -2
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2016-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
@@ -31,7 +31,7 @@ SKIP: {
if disabled("fips");
ok(run(app(['openssl', 'fipsinstall',
'-out', bldtop_file('providers', 'fipsinstall.cnf'),
'-out', bldtop_file('providers', 'fipsmodule.cnf'),
'-module', bldtop_file('providers', platform->dso('fips')),
'-provider_name', 'fips', '-mac_name', 'HMAC',
'-macopt', 'digest:SHA256', '-macopt', 'hexkey:00',
test/recipes/95-test_external_krb5.t
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2017-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
test/recipes/99-test_fuzz.t
+4 -1
View File
@@ -1,5 +1,5 @@
#!/usr/bin/env perl
# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2016-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
@@ -16,6 +16,9 @@ use OpenSSL::Test::Utils;
setup("test_fuzz");
my @fuzzers = ('asn1', 'asn1parse', 'bignum', 'bndiv', 'client', 'conf', 'crl', 'server', 'x509');
if (!disabled("cmp")) {
push @fuzzers, 'cmp';
}
if (!disabled("cms")) {
push @fuzzers, 'cms';
}
test/recipes/tconversion.pl
+1 -1
View File
@@ -1,5 +1,5 @@
#! /usr/bin/env perl
# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy