152 lines
4 KiB
C
152 lines
4 KiB
C
// SPDX-License-Identifier: Apache-2.0 AND MIT
|
|
|
|
#include <openssl/provider.h>
|
|
#include <openssl/ssl.h>
|
|
#include <string.h>
|
|
#include "tlstest_helpers.h"
|
|
#include "test_common.h"
|
|
#include <openssl/core_names.h>
|
|
|
|
#include <openssl/trace.h>
|
|
|
|
static OSSL_LIB_CTX *libctx = NULL;
|
|
static char *modulename = NULL;
|
|
static char *configfile = NULL;
|
|
static char *certsdir = NULL;
|
|
|
|
#ifdef OSSL_CAPABILITY_TLS_SIGALG_NAME
|
|
static int test_oqs_tlssig(const char *sig_name)
|
|
{
|
|
SSL_CTX *cctx = NULL, *sctx = NULL;
|
|
SSL *clientssl = NULL, *serverssl = NULL;
|
|
int ret = 1, testresult = 0;
|
|
char certpath[300];
|
|
char privkeypath[300];
|
|
# ifndef OPENSSL_SYS_VMS
|
|
const char *sep = "/";
|
|
# else
|
|
const char *sep = "";
|
|
# endif
|
|
|
|
if (!alg_is_enabled(sig_name)) {
|
|
printf("Not testing disabled algorithm %s.\n", sig_name);
|
|
return 1;
|
|
}
|
|
|
|
sprintf(certpath, "%s%s%s%s", certsdir, sep, sig_name, "_srv.crt");
|
|
sprintf(privkeypath, "%s%s%s%s", certsdir, sep, sig_name, "_srv.key");
|
|
testresult =
|
|
create_tls1_3_ctx_pair(libctx, &sctx, &cctx, certpath, privkeypath);
|
|
|
|
if (!testresult) {
|
|
ret = -1; goto err;
|
|
}
|
|
|
|
testresult =
|
|
create_tls_objects(sctx, cctx, &serverssl, &clientssl);
|
|
|
|
if (!testresult) {
|
|
ret = -2; goto err;
|
|
}
|
|
|
|
testresult =
|
|
create_tls_connection(serverssl, clientssl, SSL_ERROR_NONE);
|
|
if (!testresult) {
|
|
ret = -5; goto err;
|
|
}
|
|
|
|
err:
|
|
SSL_free(serverssl);
|
|
SSL_free(clientssl);
|
|
SSL_CTX_free(sctx);
|
|
SSL_CTX_free(cctx);
|
|
return ret;
|
|
}
|
|
|
|
static void test_oqs_sigs(EVP_SIGNATURE *evpsig, void *vp) {
|
|
OSSL_PROVIDER* prov = EVP_SIGNATURE_get0_provider(evpsig);
|
|
if (!strcmp(OSSL_PROVIDER_get0_name(prov), "oqsprovider")) {
|
|
printf("Commencing test of %s:\n", EVP_SIGNATURE_get0_name(evpsig));
|
|
test_oqs_tlssig(EVP_SIGNATURE_get0_name(evpsig));
|
|
}
|
|
}
|
|
|
|
static int test_signature(const OSSL_PARAM params[], void *data)
|
|
{
|
|
int ret = 0;
|
|
int *errcnt = (int *) data;
|
|
// Change define over to OSSL... once upstream update is done
|
|
const OSSL_PARAM *p = OSSL_PARAM_locate_const(params, OSSL_CAPABILITY_TLS_SIGALG_NAME);
|
|
if (p == NULL || p->data_type != OSSL_PARAM_UTF8_STRING) {
|
|
ret = -1;
|
|
goto err;
|
|
}
|
|
|
|
char* sigalg_name = OPENSSL_strdup(p->data);
|
|
|
|
if (sigalg_name == NULL) return 0;
|
|
|
|
ret = test_oqs_tlssig(sigalg_name);
|
|
|
|
if (ret >= 0) {
|
|
fprintf(stderr,
|
|
cGREEN " TLS-SIG handshake test succeeded: %s" cNORM "\n",
|
|
sigalg_name);
|
|
} else {
|
|
fprintf(stderr,
|
|
cRED " TLS-SIG handshake test failed: %s, return code: %d" cNORM "\n",
|
|
sigalg_name, ret);
|
|
ERR_print_errors_fp(stderr);
|
|
(*errcnt)++;
|
|
}
|
|
|
|
err:
|
|
OPENSSL_free(sigalg_name);
|
|
return ret;
|
|
}
|
|
|
|
static int test_provider_signatures(OSSL_PROVIDER *provider, void *vctx)
|
|
{
|
|
const char* provname = OSSL_PROVIDER_get0_name(provider);
|
|
|
|
if (!strcmp(provname, PROVIDER_NAME_OQS))
|
|
return OSSL_PROVIDER_get_capabilities(provider, "TLS-SIGALG",
|
|
test_signature, vctx);
|
|
else
|
|
return 1;
|
|
}
|
|
#endif /* OSSL_CAPABILITY_TLS_SIGALG_NAME */
|
|
|
|
int main(int argc, char *argv[])
|
|
{
|
|
size_t i;
|
|
int errcnt = 0, test = 0;
|
|
|
|
#ifndef OPENSSL_NO_TRACE
|
|
fprintf(stderr, "Full tracing enabled via openssl config 'enable-trace'.\n");
|
|
BIO *err = BIO_new_fp(stderr, BIO_NOCLOSE | BIO_FP_TEXT);
|
|
OSSL_trace_set_channel(OSSL_TRACE_CATEGORY_ALL, err);
|
|
#endif
|
|
|
|
T((libctx = OSSL_LIB_CTX_new()) != NULL);
|
|
T(argc == 4);
|
|
modulename = argv[1];
|
|
configfile = argv[2];
|
|
certsdir = argv[3];
|
|
|
|
T(OSSL_LIB_CTX_load_config(libctx, configfile));
|
|
|
|
T(OSSL_PROVIDER_available(libctx, modulename));
|
|
T(OSSL_PROVIDER_available(libctx, "default"));
|
|
|
|
#ifdef OSSL_CAPABILITY_TLS_SIGALG_NAME
|
|
// crashes: EVP_SIGNATURE_do_all_provided(libctx, test_oqs_sigs, &errcnt);
|
|
OSSL_PROVIDER_do_all(libctx, test_provider_signatures, &errcnt);
|
|
#else
|
|
fprintf(stderr, "TLS-SIG handshake test not enabled. Update OpenSSL to more current version.\n");
|
|
#endif
|
|
|
|
OSSL_LIB_CTX_free(libctx);
|
|
TEST_ASSERT(errcnt == 0)
|
|
return !test;
|
|
}
|