yuzu-emu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-12-02 06:14:16 +01:00
Code Issues Packages Projects Releases Wiki Activity
e8ee0f1a94
mbedtls/tests/suites/test_suite_x509parse.data

2082 lines
188 KiB
Plaintext
Raw Normal View History

- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Certificate information #1
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/server1.crt":"cert. version \: 3\nserial number \: 01\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Add build instructions to generate DER versions of CRTs and keys
2019-03-12 17:49:26 +01:00
X509 Certificate information #1 (DER)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Rename server1.der to server1.crt.der
2019-03-14 14:33:20 +01:00
x509_cert_info:"data_files/server1.crt.der":"cert. version \: 3\nserial number \: 01\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued on \: 2011-02-12 14\:44\:06\nexpires on \: 2021-02-12 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
Add build instructions to generate DER versions of CRTs and keys
2019-03-12 17:49:26 +01:00
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Certificate information #2
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/server2.crt":"cert. version \: 3\nserial number \: 02\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Add build instructions to generate DER versions of CRTs and keys
2019-03-12 17:49:26 +01:00
X509 Certificate information #2 (DER)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/server2.crt.der":"cert. version \: 3\nserial number \: 02\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
Add build instructions to generate DER versions of CRTs and keys
2019-03-12 17:49:26 +01:00
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate information #3
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/test-ca.crt":"cert. version \: 3\nserial number \: 03\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued on \: 2019-02-10 14\:44\:00\nexpires on \: 2029-02-10 14\:44\:00\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=true\n"
Add build instructions to generate DER versions of CRTs and keys
2019-03-12 17:49:26 +01:00
X509 Certificate information #3 (DER)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
x509_cert_info:"data_files/test-ca.crt.der":"cert. version \: 3\nserial number \: 03\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued on \: 2011-02-12 14\:44\:00\nexpires on \: 2021-02-12 14\:44\:00\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=true\n"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate information MD2 Digest
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD2_C
Add instructions for MD[245] test CRTs to tests/data_files/Makefile
2019-06-03 15:14:04 +02:00
x509_cert_info:"data_files/cert_md2.crt":"cert. version \: 3\nserial number \: 09\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert MD2\nissued on \: 2000-01-01 12\:12\:12\nexpires on \: 2030-01-01 12\:12\:12\nsigned using \: RSA with MD2\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate information MD4 Digest
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD4_C
Add instructions for MD[245] test CRTs to tests/data_files/Makefile
2019-06-03 15:14:04 +02:00
x509_cert_info:"data_files/cert_md4.crt":"cert. version \: 3\nserial number \: 05\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert MD4\nissued on \: 2000-01-01 12\:12\:12\nexpires on \: 2030-01-01 12\:12\:12\nsigned using \: RSA with MD4\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate information MD5 Digest
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD5_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/cert_md5.crt":"cert. version \: 3\nserial number \: 06\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert MD5\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with MD5\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate information SHA1 Digest
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/cert_sha1.crt":"cert. version \: 3\nserial number \: 07\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA1\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate information SHA224 Digest
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/cert_sha224.crt":"cert. version \: 3\nserial number \: 08\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA224\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA-224\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate information SHA256 Digest
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/cert_sha256.crt":"cert. version \: 3\nserial number \: 09\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA256\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate information SHA384 Digest
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA512_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/cert_sha384.crt":"cert. version \: 3\nserial number \: 0A\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA384\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA-384\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate information SHA512 Digest
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA512_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/cert_sha512.crt":"cert. version \: 3\nserial number \: 0B\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA512\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA-512\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Basic parsing of certs signed with RSASSA-PSS
2014-01-22 10:12:57 +01:00
X509 Certificate information RSA-PSS, SHA1 Digest
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C
Consider trailerField a constant
2014-05-31 17:08:16 +02:00
x509_cert_info:"data_files/server9.crt":"cert. version \: 3\nserial number \: 16\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2014-01-20 13\:38\:16\nexpires on \: 2024-01-18 13\:38\:16\nsigned using \: RSASSA-PSS (SHA1, MGF1-SHA1, 0xEA)\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\n"
Finish parsing RSASSA-PSS parameters
2014-01-23 19:15:29 +01:00
X509 Certificate information RSA-PSS, SHA224 Digest
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C
Consider trailerField a constant
2014-05-31 17:08:16 +02:00
x509_cert_info:"data_files/server9-sha224.crt":"cert. version \: 3\nserial number \: 17\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2014-01-20 13\:57\:36\nexpires on \: 2024-01-18 13\:57\:36\nsigned using \: RSASSA-PSS (SHA224, MGF1-SHA224, 0xE2)\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\n"
Finish parsing RSASSA-PSS parameters
2014-01-23 19:15:29 +01:00
X509 Certificate information RSA-PSS, SHA256 Digest
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C
Consider trailerField a constant
2014-05-31 17:08:16 +02:00
x509_cert_info:"data_files/server9-sha256.crt":"cert. version \: 3\nserial number \: 18\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2014-01-20 13\:57\:45\nexpires on \: 2024-01-18 13\:57\:45\nsigned using \: RSASSA-PSS (SHA256, MGF1-SHA256, 0xDE)\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\n"
Finish parsing RSASSA-PSS parameters
2014-01-23 19:15:29 +01:00
X509 Certificate information RSA-PSS, SHA384 Digest
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C
Consider trailerField a constant
2014-05-31 17:08:16 +02:00
x509_cert_info:"data_files/server9-sha384.crt":"cert. version \: 3\nserial number \: 19\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2014-01-20 13\:57\:58\nexpires on \: 2024-01-18 13\:57\:58\nsigned using \: RSASSA-PSS (SHA384, MGF1-SHA384, 0xCE)\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\n"
Finish parsing RSASSA-PSS parameters
2014-01-23 19:15:29 +01:00
X509 Certificate information RSA-PSS, SHA512 Digest
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C
Consider trailerField a constant
2014-05-31 17:08:16 +02:00
x509_cert_info:"data_files/server9-sha512.crt":"cert. version \: 3\nserial number \: 1A\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2014-01-20 13\:58\:12\nexpires on \: 2024-01-18 13\:58\:12\nsigned using \: RSASSA-PSS (SHA512, MGF1-SHA512, 0xBE)\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\n"
Basic parsing of certs signed with RSASSA-PSS
2014-01-22 10:12:57 +01:00
Add cert_info tests for EC and mixed certificates
2013-08-10 09:44:43 +02:00
X509 Certificate information EC, SHA1 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Start printing extensions in x509_crt_info()
2014-04-01 12:19:09 +02:00
x509_cert_info:"data_files/server5-sha1.crt":"cert. version \: 3\nserial number \: 12\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-09-24 16\:21\:27\nexpires on \: 2023-09-22 16\:21\:27\nsigned using \: ECDSA with SHA1\nEC key size \: 256 bits\nbasic constraints \: CA=false\n"
Add cert_info tests for EC and mixed certificates
2013-08-10 09:44:43 +02:00
X509 Certificate information EC, SHA224 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Start printing extensions in x509_crt_info()
2014-04-01 12:19:09 +02:00
x509_cert_info:"data_files/server5-sha224.crt":"cert. version \: 3\nserial number \: 13\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-09-24 16\:21\:27\nexpires on \: 2023-09-22 16\:21\:27\nsigned using \: ECDSA with SHA224\nEC key size \: 256 bits\nbasic constraints \: CA=false\n"
Add cert_info tests for EC and mixed certificates
2013-08-10 09:44:43 +02:00
X509 Certificate information EC, SHA256 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Start printing extensions in x509_crt_info()
2014-04-01 12:19:09 +02:00
x509_cert_info:"data_files/server5.crt":"cert. version \: 3\nserial number \: 09\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-09-24 15\:52\:04\nexpires on \: 2023-09-22 15\:52\:04\nsigned using \: ECDSA with SHA256\nEC key size \: 256 bits\nbasic constraints \: CA=false\n"
Add cert_info tests for EC and mixed certificates
2013-08-10 09:44:43 +02:00
X509 Certificate information EC, SHA384 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA512_C
Start printing extensions in x509_crt_info()
2014-04-01 12:19:09 +02:00
x509_cert_info:"data_files/server5-sha384.crt":"cert. version \: 3\nserial number \: 14\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-09-24 16\:21\:27\nexpires on \: 2023-09-22 16\:21\:27\nsigned using \: ECDSA with SHA384\nEC key size \: 256 bits\nbasic constraints \: CA=false\n"
Add cert_info tests for EC and mixed certificates
2013-08-10 09:44:43 +02:00
X509 Certificate information EC, SHA512 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA512_C
Start printing extensions in x509_crt_info()
2014-04-01 12:19:09 +02:00
x509_cert_info:"data_files/server5-sha512.crt":"cert. version \: 3\nserial number \: 15\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-09-24 16\:21\:27\nexpires on \: 2023-09-22 16\:21\:27\nsigned using \: ECDSA with SHA512\nEC key size \: 256 bits\nbasic constraints \: CA=false\n"
Add cert_info tests for EC and mixed certificates
2013-08-10 09:44:43 +02:00
Print NS Cert Type in x509_crt_info()
2014-04-01 13:01:11 +02:00
X509 Certificate information, NS Cert Type
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/server1.cert_type.crt":"cert. version \: 3\nserial number \: 01\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\ncert. type \: SSL Server\n"
Print NS Cert Type in x509_crt_info()
2014-04-01 13:01:11 +02:00
Print key_usage in x509_crt_info()
2014-04-01 14:12:11 +02:00
X509 Certificate information, Key Usage
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/server1.key_usage.crt":"cert. version \: 3\nserial number \: 01\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\nkey usage \: Digital Signature, Non Repudiation, Key Encipherment\n"
Print key_usage in x509_crt_info()
2014-04-01 14:12:11 +02:00
Add parsing/printing for new X.509 keyUsage flags
2015-06-23 10:14:36 +02:00
X509 Certificate information, Key Usage with decipherOnly
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Add parsing/printing for new X.509 keyUsage flags
2015-06-23 10:14:36 +02:00
x509_cert_info:"data_files/keyUsage.decipherOnly.crt":"cert. version \: 3\nserial number \: 9B\:13\:CE\:4C\:A5\:6F\:DE\:52\nissuer name \: C=GB, L=Cambridge, O=Default Company Ltd\nsubject name \: C=GB, L=Cambridge, O=Default Company Ltd\nissued on \: 2015-05-12 10\:36\:55\nexpires on \: 2018-05-11 10\:36\:55\nsigned using \: RSA with SHA1\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\nkey usage \: Digital Signature, Non Repudiation, Key Encipherment, Decipher Only\n"
Print key_usage in x509_crt_info()
2014-04-01 14:12:11 +02:00
X509 Certificate information, Subject Alt Name
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509_cert_info:"data_files/cert_example_multi.crt":"cert. version \: 3\nserial number \: 11\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=www.example.com\nissued on \: 2019-07-10 11\:27\:52\nexpires on \: 2029-07-10 11\:27\:52\nsigned using \: RSA with SHA-256\nRSA key size \: 1024 bits\nsubject alt name \: example.com, example.net, *.example.org\n"
Print subject alt name in x509_crt_info()
2014-04-01 13:43:28 +02:00
Print key_usage in x509_crt_info()
2014-04-01 14:12:11 +02:00
X509 Certificate information, Subject Alt Name + Key Usage
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
x509_crt_info() list output cosmectics
2014-04-01 18:00:07 +02:00
x509_cert_info:"data_files/cert_example_multi_nocn.crt":"cert. version \: 3\nserial number \: F7\:C6\:7F\:F8\:E9\:A9\:63\:F9\nissuer name \: C=NL\nsubject name \: C=NL\nissued on \: 2014-01-22 10\:04\:33\nexpires on \: 2024-01-22 10\:04\:33\nsigned using \: RSA with SHA1\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\nsubject alt name \: www.shotokan-braunschweig.de, www.massimo-abate.eu\nkey usage \: Digital Signature, Non Repudiation, Key Encipherment\n"
Print key_usage in x509_crt_info()
2014-04-01 14:12:11 +02:00
Print extended key usage in x509_crt_info()
2014-04-01 17:32:44 +02:00
X509 Certificate information, Key Usage + Extended Key Usage
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509_crt_info() list output cosmectics
2014-04-01 18:00:07 +02:00
x509_cert_info:"data_files/server1.ext_ku.crt":"cert. version \: 3\nserial number \: 21\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued on \: 2014-04-01 14\:44\:43\nexpires on \: 2024-03-29 14\:44\:43\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\nkey usage \: Digital Signature, Non Repudiation, Key Encipherment\next key usage \: TLS Web Server Authentication\n"
Print extended key usage in x509_crt_info()
2014-04-01 17:32:44 +02:00
Add cert_info tests for EC and mixed certificates
2013-08-10 09:44:43 +02:00
X509 Certificate information RSA signed by EC
Added needed ECDSA dependencies to test_suite_x509parse.data
2016-08-07 10:56:02 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C
Start printing extensions in x509_crt_info()
2014-04-01 12:19:09 +02:00
x509_cert_info:"data_files/server4.crt":"cert. version \: 3\nserial number \: 08\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-09-24 15\:52\:04\nexpires on \: 2023-09-22 15\:52\:04\nsigned using \: ECDSA with SHA256\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
Add cert_info tests for EC and mixed certificates
2013-08-10 09:44:43 +02:00
X509 Certificate information EC signed by RSA
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP192R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
Start printing extensions in x509_crt_info()
2014-04-01 12:19:09 +02:00
x509_cert_info:"data_files/server3.crt":"cert. version \: 3\nserial number \: 0D\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-08-09 09\:17\:03\nexpires on \: 2023-08-07 09\:17\:03\nsigned using \: RSA with SHA1\nEC key size \: 192 bits\nbasic constraints \: CA=false\n"
Add cert_info tests for EC and mixed certificates
2013-08-10 09:44:43 +02:00
Add test certificate for bitstring in DN
2015-03-27 13:09:21 +01:00
X509 Certificate information Bitstring in subject name
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Add test certificate for bitstring in DN
2015-03-27 13:09:21 +01:00
x509_cert_info:"data_files/bitstring-in-dn.pem":"cert. version \: 3\nserial number \: 02\nissuer name \: CN=Test CA 01, ST=Ecnivorp, C=XX, emailAddress=tca@example.com, O=Test CA Authority\nsubject name \: C=XX, O=tca, ST=Ecnivorp, OU=TCA, CN=Client, emailAddress=client@example.com, serialNumber=7101012255, uniqueIdentifier=?7101012255\nissued on \: 2015-03-11 12\:06\:51\nexpires on \: 2025-03-08 12\:06\:51\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\nsubject alt name \: \next key usage \: TLS Web Client Authentication\n"
Support faulty X509 v1 certificates with extensions (POLARSSL_X509_ALLOW_EXTENSIONS_NON_V3)
2013-09-23 15:01:36 +02:00
X509 certificate v1 with extension
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3:MBEDTLS_SHA1_C
Fixed result for test case in test_suite_x509parse
2014-04-17 16:04:33 +02:00
x509_cert_info:"data_files/cert_v1_with_ext.crt":"cert. version \: 1\nserial number \: BD\:ED\:44\:C7\:D2\:3E\:C2\:A4\nissuer name \: C=XX, ST=XX, L=XX, O=XX, OU=XX, emailAddress=admin@identity-check.org, CN=identity-check.org\nsubject name \: C=XX, ST=XX, L=XX, O=XX, OU=XX, emailAddress=admin@identity-check.org, CN=identity-check.org\nissued on \: 2013-07-04 16\:17\:02\nexpires on \: 2014-07-04 16\:17\:02\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nsubject alt name \: identity-check.org, www.identity-check.org\n"
Support faulty X509 v1 certificates with extensions (POLARSSL_X509_ALLOW_EXTENSIONS_NON_V3)
2013-09-23 15:01:36 +02:00
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 CRL information #1
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl_expired.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-20 10\:24\:19\nnext update \: 2011-02-20 11\:24\:19\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA1\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 CRL Information MD2 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD2_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl_md2.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2009-07-19 19\:56\:37\nnext update \: 2009-09-17 19\:56\:37\nRevoked certificates\:\nserial number\: 01 revocation date\: 2009-02-09 21\:12\:36\nserial number\: 03 revocation date\: 2009-02-09 21\:12\:36\nsigned using \: RSA with MD2\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 CRL Information MD4 Digest
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD4_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl_md4.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with MD4\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 CRL Information MD5 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD5_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl_md5.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with MD5\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 CRL Information SHA1 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl_sha1.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA1\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 CRL Information SHA224 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl_sha224.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA-224\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 CRL Information SHA256 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl_sha256.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA-256\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 CRL Information SHA384 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA512_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl_sha384.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA-384\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 CRL Information SHA512 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA512_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl_sha512.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA-512\n"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Parse CRLs signed with RSASSA-PSS
2014-01-24 15:56:20 +01:00
X509 CRL information RSA-PSS, SHA1 Digest
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C
mbedtls_x509_crl_info:"data_files/crl-rsa-pss-sha1.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2014-01-20 13\:46\:35\nnext update \: 2024-01-18 13\:46\:35\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using \: RSASSA-PSS (SHA1, MGF1-SHA1, 0xEA)\n"
Parse CRLs signed with RSASSA-PSS
2014-01-24 15:56:20 +01:00
X509 CRL information RSA-PSS, SHA224 Digest
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C
mbedtls_x509_crl_info:"data_files/crl-rsa-pss-sha224.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2014-01-20 13\:56\:06\nnext update \: 2024-01-18 13\:56\:06\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using \: RSASSA-PSS (SHA224, MGF1-SHA224, 0xE2)\n"
Parse CRLs signed with RSASSA-PSS
2014-01-24 15:56:20 +01:00
X509 CRL information RSA-PSS, SHA256 Digest
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C
mbedtls_x509_crl_info:"data_files/crl-rsa-pss-sha256.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2014-01-20 13\:56\:16\nnext update \: 2024-01-18 13\:56\:16\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using \: RSASSA-PSS (SHA256, MGF1-SHA256, 0xDE)\n"
Parse CRLs signed with RSASSA-PSS
2014-01-24 15:56:20 +01:00
X509 CRL information RSA-PSS, SHA384 Digest
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C
mbedtls_x509_crl_info:"data_files/crl-rsa-pss-sha384.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2014-01-20 13\:56\:28\nnext update \: 2024-01-18 13\:56\:28\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using \: RSASSA-PSS (SHA384, MGF1-SHA384, 0xCE)\n"
Parse CRLs signed with RSASSA-PSS
2014-01-24 15:56:20 +01:00
X509 CRL information RSA-PSS, SHA512 Digest
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C
mbedtls_x509_crl_info:"data_files/crl-rsa-pss-sha512.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2014-01-20 13\:56\:38\nnext update \: 2024-01-18 13\:56\:38\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using \: RSASSA-PSS (SHA512, MGF1-SHA512, 0xBE)\n"
Parse CRLs signed with RSASSA-PSS
2014-01-24 15:56:20 +01:00
Add tests for crl_info with EC CA
2013-08-10 10:19:03 +02:00
X509 CRL Information EC, SHA1 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_ECDSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl-ec-sha1.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update \: 2013-09-24 16\:31\:08\nnext update \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using \: ECDSA with SHA1\n"
Add tests for crl_info with EC CA
2013-08-10 10:19:03 +02:00
X509 CRL Information EC, SHA224 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl-ec-sha224.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update \: 2013-09-24 16\:31\:08\nnext update \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using \: ECDSA with SHA224\n"
Add tests for crl_info with EC CA
2013-08-10 10:19:03 +02:00
X509 CRL Information EC, SHA256 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl-ec-sha256.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update \: 2013-09-24 16\:31\:08\nnext update \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using \: ECDSA with SHA256\n"
Add tests for crl_info with EC CA
2013-08-10 10:19:03 +02:00
X509 CRL Information EC, SHA384 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA512_C:MBEDTLS_ECDSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl-ec-sha384.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update \: 2013-09-24 16\:31\:08\nnext update \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using \: ECDSA with SHA384\n"
Add tests for crl_info with EC CA
2013-08-10 10:19:03 +02:00
X509 CRL Information EC, SHA512 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA512_C:MBEDTLS_ECDSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl-ec-sha512.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update \: 2013-09-24 16\:31\:08\nnext update \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using \: ECDSA with SHA512\n"
Add tests for crl_info with EC CA
2013-08-10 10:19:03 +02:00
Add test for infinite loop in CRL parse
2016-12-08 18:10:38 +01:00
X509 CRL Malformed Input (trailing spaces at end of file)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA512_C:MBEDTLS_ECDSA_C
Add test for infinite loop in CRL parse
2016-12-08 18:10:38 +01:00
mbedtls_x509_crl_parse:"data_files/crl-malformed-trailing-spaces.pem":MBEDTLS_ERR_PEM_NO_HEADER_FOOTER_PRESENT
x509: CRL: reject unsupported critical extensions
2018-03-13 11:53:30 +01:00
X509 CRL Unsupported critical extension (issuingDistributionPoint)
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
mbedtls_x509_crl_parse:"data_files/crl-idp.pem":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
x509: CRL: add tests for non-critical extension The 'critical' boolean can be set to false in two ways: - by leaving it implicit (test data generated by openssl) - by explicitly setting it to false (generated by hand)
2018-03-14 12:23:56 +01:00
X509 CRL Unsupported non-critical extension (issuingDistributionPoint)
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
mbedtls_x509_crl_parse:"data_files/crl-idpnc.pem":0
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
X509 CSR Information RSA with MD4
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD4_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server1.req.md4":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with MD4\nRSA key size \: 2048 bits\n"
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
X509 CSR Information RSA with MD5
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD5_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server1.req.md5":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with MD5\nRSA key size \: 2048 bits\n"
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
X509 CSR Information RSA with SHA1
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server1.req.sha1":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\n"
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
X509 CSR Information RSA with SHA224
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server1.req.sha224":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with SHA-224\nRSA key size \: 2048 bits\n"
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
X509 CSR Information RSA with SHA-256
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server1.req.sha256":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\n"
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
X509 CSR Information RSA with SHA384
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA512_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server1.req.sha384":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with SHA-384\nRSA key size \: 2048 bits\n"
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
X509 CSR Information RSA with SHA512
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA512_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server1.req.sha512":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with SHA-512\nRSA key size \: 2048 bits\n"
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
X509 CSR Information EC with SHA1
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server5.req.sha1":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: ECDSA with SHA1\nEC key size \: 256 bits\n"
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
X509 CSR Information EC with SHA224
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server5.req.sha224":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: ECDSA with SHA224\nEC key size \: 256 bits\n"
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
X509 CSR Information EC with SHA256
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server5.req.sha256":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: ECDSA with SHA256\nEC key size \: 256 bits\n"
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
X509 CSR Information EC with SHA384
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA512_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server5.req.sha384":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: ECDSA with SHA384\nEC key size \: 256 bits\n"
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
X509 CSR Information EC with SHA512
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA512_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server5.req.sha512":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: ECDSA with SHA512\nEC key size \: 256 bits\n"
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
Parse CSRs signed with RSASSA-PSS
2014-01-24 18:47:17 +01:00
X509 CSR Information RSA-PSS with SHA1
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C
mbedtls_x509_csr_info:"data_files/server9.req.sha1":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: RSASSA-PSS (SHA1, MGF1-SHA1, 0x6A)\nRSA key size \: 1024 bits\n"
Parse CSRs signed with RSASSA-PSS
2014-01-24 18:47:17 +01:00
X509 CSR Information RSA-PSS with SHA224
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C
mbedtls_x509_csr_info:"data_files/server9.req.sha224":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: RSASSA-PSS (SHA224, MGF1-SHA224, 0x62)\nRSA key size \: 1024 bits\n"
Parse CSRs signed with RSASSA-PSS
2014-01-24 18:47:17 +01:00
X509 CSR Information RSA-PSS with SHA256
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C
mbedtls_x509_csr_info:"data_files/server9.req.sha256":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: RSASSA-PSS (SHA256, MGF1-SHA256, 0x5E)\nRSA key size \: 1024 bits\n"
Parse CSRs signed with RSASSA-PSS
2014-01-24 18:47:17 +01:00
X509 CSR Information RSA-PSS with SHA384
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C
mbedtls_x509_csr_info:"data_files/server9.req.sha384":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: RSASSA-PSS (SHA384, MGF1-SHA384, 0x4E)\nRSA key size \: 1024 bits\n"
Parse CSRs signed with RSASSA-PSS
2014-01-24 18:47:17 +01:00
X509 CSR Information RSA-PSS with SHA512
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C
mbedtls_x509_csr_info:"data_files/server9.req.sha512":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: RSASSA-PSS (SHA512, MGF1-SHA512, 0x3E)\nRSA key size \: 1024 bits\n"
Parse CSRs signed with RSASSA-PSS
2014-01-24 18:47:17 +01:00
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
X509 CSR Information RSA with SHA-256 - Microsoft header
Add additional test case for alternative CSR headers Add a test case for alternative headers possible for CSR's, as defined in RFC7468.
2018-10-06 17:24:13 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
mbedtls_x509_csr_info:"data_files/server1-ms.req.sha256":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\n"
manually merge 39a183a add x509_crt_verify_info()
2015-04-20 11:38:13 +02:00
X509 Verify Information: empty
x509_verify_info:0:"":""
X509 Verify Information: one issue
Fix some X509 macro names For some reason, during the great renaming, some names that should have been prefixed with MBEDTLS_X509_ have only been prefixed with MBEDTLS_
2015-04-20 13:19:02 +02:00
x509_verify_info:MBEDTLS_X509_BADCERT_MISSING:"":"Certificate was missing\n"
manually merge 39a183a add x509_crt_verify_info()
2015-04-20 11:38:13 +02:00
X509 Verify Information: two issues
Fix some X509 macro names For some reason, during the great renaming, some names that should have been prefixed with MBEDTLS_X509_ have only been prefixed with MBEDTLS_
2015-04-20 13:19:02 +02:00
x509_verify_info:MBEDTLS_X509_BADCERT_EXPIRED | MBEDTLS_X509_BADCRL_EXPIRED:"":"The certificate validity has expired\nThe CRL is expired\n"
manually merge 39a183a add x509_crt_verify_info()
2015-04-20 11:38:13 +02:00
X509 Verify Information: two issues, one unknown
Create cert profile API (unimplemented yet)
2015-06-15 10:39:46 +02:00
x509_verify_info:MBEDTLS_X509_BADCERT_OTHER | 0x80000000:"":"Other reason (can be used by verify callback)\nUnknown reason (this should not happen)\n"
Add x509_crt_verify_info()
2015-04-17 16:14:32 +02:00
X509 Verify Information: empty, with prefix
x509_verify_info:0:" ! ":""
X509 Verify Information: one issue, with prefix
Fix some X509 macro names For some reason, during the great renaming, some names that should have been prefixed with MBEDTLS_X509_ have only been prefixed with MBEDTLS_
2015-04-20 13:19:02 +02:00
x509_verify_info:MBEDTLS_X509_BADCERT_MISSING:" ! ":" ! Certificate was missing\n"
Add x509_crt_verify_info()
2015-04-17 16:14:32 +02:00
X509 Verify Information: two issues, with prefix
Fix some X509 macro names For some reason, during the great renaming, some names that should have been prefixed with MBEDTLS_X509_ have only been prefixed with MBEDTLS_
2015-04-20 13:19:02 +02:00
x509_verify_info:MBEDTLS_X509_BADCERT_EXPIRED | MBEDTLS_X509_BADCRL_EXPIRED:" ! ":" ! The certificate validity has expired\n ! The CRL is expired\n"
Add x509_crt_verify_info()
2015-04-17 16:14:32 +02:00
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Get Distinguished Name #1
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_dn_gets:"data_files/server1.crt":"subject":"C=NL, O=PolarSSL, CN=PolarSSL Server 1"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Get Distinguished Name #2
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_dn_gets:"data_files/server1.crt":"issuer":"C=NL, O=PolarSSL, CN=PolarSSL Test CA"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Get Distinguished Name #3
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_dn_gets:"data_files/server2.crt":"subject":"C=NL, O=PolarSSL, CN=localhost"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Get Distinguished Name #4
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_dn_gets:"data_files/server2.crt":"issuer":"C=NL, O=PolarSSL, CN=PolarSSL Test CA"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Time Expired #1
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA1_C
Rename boolean functions to be clearer
2015-06-02 11:38:50 +02:00
mbedtls_x509_time_is_past:"data_files/server1.crt":"valid_from":1
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Time Expired #2
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA1_C
Rename boolean functions to be clearer
2015-06-02 11:38:50 +02:00
mbedtls_x509_time_is_past:"data_files/server1.crt":"valid_to":0
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Time Expired #3
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA1_C
Rename boolean functions to be clearer
2015-06-02 11:38:50 +02:00
mbedtls_x509_time_is_past:"data_files/server2.crt":"valid_from":1
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Time Expired #4
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA1_C
Rename boolean functions to be clearer
2015-06-02 11:38:50 +02:00
mbedtls_x509_time_is_past:"data_files/server2.crt":"valid_to":0
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Time Expired #5
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA1_C
Rename boolean functions to be clearer
2015-06-02 11:38:50 +02:00
mbedtls_x509_time_is_past:"data_files/test-ca.crt":"valid_from":1
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Add missing depends to some x509parse tests
2013-08-09 10:59:25 +02:00
X509 Time Expired #6
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA1_C
Rename boolean functions to be clearer
2015-06-02 11:38:50 +02:00
mbedtls_x509_time_is_past:"data_files/test-ca.crt":"valid_to":0
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Add x509_time_future()
2014-03-10 12:26:11 +01:00
X509 Time Future #1
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA256_C
Rename boolean functions to be clearer
2015-06-02 11:38:50 +02:00
mbedtls_x509_time_is_future:"data_files/server5.crt":"valid_from":0
Add x509_time_future()
2014-03-10 12:26:11 +01:00
X509 Time Future #2
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA256_C
Rename boolean functions to be clearer
2015-06-02 11:38:50 +02:00
mbedtls_x509_time_is_future:"data_files/server5.crt":"valid_to":1
Add x509_time_future()
2014-03-10 12:26:11 +01:00
X509 Time Future #3
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA256_C
Rename boolean functions to be clearer
2015-06-02 11:38:50 +02:00
mbedtls_x509_time_is_future:"data_files/server5-future.crt":"valid_from":1
Add x509_time_future()
2014-03-10 12:26:11 +01:00
X509 Time Future #4
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA256_C
Rename boolean functions to be clearer
2015-06-02 11:38:50 +02:00
mbedtls_x509_time_is_future:"data_files/server5-future.crt":"valid_to":1
Add x509_time_future()
2014-03-10 12:26:11 +01:00
X509 Time Future #5
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA256_C
Rename boolean functions to be clearer
2015-06-02 11:38:50 +02:00
mbedtls_x509_time_is_future:"data_files/test-ca2.crt":"valid_from":0
Add x509_time_future()
2014-03-10 12:26:11 +01:00
X509 Time Future #6
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA256_C
Rename boolean functions to be clearer
2015-06-02 11:38:50 +02:00
mbedtls_x509_time_is_future:"data_files/test-ca2.crt":"valid_to":1
Add x509_time_future()
2014-03-10 12:26:11 +01:00
Reject certs and CRLs from the future
2014-03-10 13:15:18 +01:00
X509 Certificate verification #1 (Revoked Cert, Expired CRL, no CN)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_EXPIRED:"compat":"NULL"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Reject certs and CRLs from the future
2014-03-10 13:15:18 +01:00
X509 Certificate verification #1a (Revoked Cert, Future CRL, no CN)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server6.crt":"data_files/test-ca2.crt":"data_files/crl-future.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_FUTURE:"compat":"NULL"
Reject certs and CRLs from the future
2014-03-10 13:15:18 +01:00
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #2 (Revoked Cert, Expired CRL)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"PolarSSL Server 1":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_EXPIRED:"compat":"NULL"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Reject certs and CRLs from the future
2014-03-10 13:15:18 +01:00
X509 Certificate verification #2a (Revoked Cert, Future CRL)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server6.crt":"data_files/test-ca2.crt":"data_files/crl-future.pem":"localhost":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_FUTURE:"compat":"NULL"
Reject certs and CRLs from the future
2014-03-10 13:15:18 +01:00
X509 Certificate verification #3 (Revoked Cert, Future CRL, CN Mismatch)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"PolarSSL Wrong CN":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_EXPIRED | MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Reject certs and CRLs from the future
2014-03-10 13:15:18 +01:00
X509 Certificate verification #3a (Revoked Cert, Expired CRL, CN Mismatch)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server6.crt":"data_files/test-ca2.crt":"data_files/crl-future.pem":"Wrong CN":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_FUTURE | MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
Reject certs and CRLs from the future
2014-03-10 13:15:18 +01:00
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #4 (Valid Cert, Expired CRL)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server2.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_EXPIRED:"compat":"NULL"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Reject certs and CRLs from the future
2014-03-10 13:15:18 +01:00
X509 Certificate verification #4a (Revoked Cert, Future CRL)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-future.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_FUTURE:"compat":"NULL"
Reject certs and CRLs from the future
2014-03-10 13:15:18 +01:00
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #5 (Revoked Cert)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
Add tests for relaxed CRL-CA name comparison This commit introduces variants test-ca_utf8.crt, test-ca_printablestring.crt and test-ca_uppercase.crt of tests/data_files/test-ca.crt which differ from test-ca.crt in their choice of string encoding and upper and lower case letters in the DN field. These changes should be immaterial to the recovation check, and three tests are added that crl.pem, which applies to test-ca.crt, is also considered as applying to test-ca_*.crt.
2018-11-02 11:09:48 +01:00
X509 Certificate verification #5' (Revoked Cert, differing DN string formats #1)
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
x509_verify:"data_files/server1.crt":"data_files/test-ca_utf8.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
X509 Certificate verification #5'' (Revoked Cert, differing DN string formats #2)
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
x509_verify:"data_files/server1.crt":"data_files/test-ca_printable.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
X509 Certificate verification #5''' (Revoked Cert, differing upper and lower case)
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
x509_verify:"data_files/server1.crt":"data_files/test-ca_uppercase.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #6 (Revoked Cert)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"PolarSSL Server 1":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #7 (Revoked Cert, CN Mismatch)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"PolarSSL Wrong CN":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #8 (Valid Cert)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
Reject certs and CRLs from the future
2014-03-10 13:15:18 +01:00
X509 Certificate verification #8a (Expired Cert)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5-expired.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_EXPIRED:"compat":"NULL"
Reject certs and CRLs from the future
2014-03-10 13:15:18 +01:00
X509 Certificate verification #8b (Future Cert)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5-future.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_FUTURE:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
Add test for expired cert in longer chain That's two lines that were not covered in verify_child()
2017-06-05 10:20:32 +02:00
X509 Certificate verification #8c (Expired Cert, longer chain)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Add test for expired cert in longer chain That's two lines that were not covered in verify_child()
2017-06-05 10:20:32 +02:00
x509_verify:"data_files/server7-expired.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_EXPIRED:"compat":"NULL"
X509 Certificate verification #8d (Future Cert, longer chain)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Add test for expired cert in longer chain That's two lines that were not covered in verify_child()
2017-06-05 10:20:32 +02:00
x509_verify:"data_files/server7-future.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_FUTURE:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #9 (Not trusted Cert)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #10 (Not trusted Cert, Expired CRL)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl_expired.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Add test case exercising verification of valid MD2 CRT The X.509 parsing test suite test_suite_x509parse contains a test exercising X.509 verification for a valid MD4/MD5 certificate in a profile which doesn't allow MD4/MD5. This commit adds an analogous test for MD2.
2019-06-03 15:25:18 +02:00
X509 Certificate verification #12 (Valid Cert MD2 Digest, MD2 forbidden)
depends_on:MBEDTLS_MD2_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
x509_verify:"data_files/cert_md2.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_MD:"compat":"NULL"
X509 Certificate verification #12 (Valid Cert MD4 Digest, MD4 forbidden)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_MD4_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_md4.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_MD:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
Add test case exercising verification of valid MD2 CRT The X.509 parsing test suite test_suite_x509parse contains a test exercising X.509 verification for a valid MD4/MD5 certificate in a profile which doesn't allow MD4/MD5. This commit adds an analogous test for MD2.
2019-06-03 15:25:18 +02:00
X509 Certificate verification #13 (Valid Cert MD5 Digest, MD5 forbidden)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_MD5_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_md5.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_MD:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
Add test cases exercising successful verification of MD2/MD4/MD5 CRT
2019-06-03 15:27:03 +02:00
X509 Certificate verification #12 (Valid Cert MD2 Digest, MD2 allowed)
depends_on:MBEDTLS_MD2_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
x509_verify:"data_files/cert_md2.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"all":"NULL"
X509 Certificate verification #12 (Valid Cert MD4 Digest, MD4 allowed)
depends_on:MBEDTLS_MD4_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
x509_verify:"data_files/cert_md4.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"all":"NULL"
X509 Certificate verification #13 (Valid Cert MD5 Digest, MD5 allowed)
depends_on:MBEDTLS_MD5_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
x509_verify:"data_files/cert_md5.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"all":"NULL"
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
X509 Certificate verification #14 (Valid Cert SHA1 Digest explicitly allowed in profile)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_sha1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X.509 tests: obey compile-time SHA-1 support option There is now one test case to validate that SHA-1 is rejected in certificates by default, and one test case to validate that SHA-1 is supported if MBEDTLS_TLS_DEFAULT_ALLOW_SHA1 is #defined.
2017-05-11 16:41:25 +02:00
X509 Certificate verification #14 (Valid Cert SHA1 Digest allowed in compile-time default profile)
SHA-1 deprecation: allow it in key exchange By default, keep allowing SHA-1 in key exchange signatures. Disabling it causes compatibility issues, especially with clients that use TLS1.2 but don't send the signature_algorithms extension. SHA-1 is forbidden in certificates by default, since it's vulnerable to offline collision-based attacks.
2017-05-12 13:16:40 +02:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES
Unify name of default profile in X.509 tests
2017-08-09 10:41:42 +02:00
x509_verify:"data_files/cert_sha1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"":"NULL"
X.509 tests: obey compile-time SHA-1 support option There is now one test case to validate that SHA-1 is rejected in certificates by default, and one test case to validate that SHA-1 is supported if MBEDTLS_TLS_DEFAULT_ALLOW_SHA1 is #defined.
2017-05-11 16:41:25 +02:00
Test that X.509 verification rejects SHA-256 by default
2017-05-05 19:00:39 +02:00
X509 Certificate verification #14 (Valid Cert SHA1 Digest forbidden in default profile)
Cleaned up negative test predicate for test case The test infrastructure does support negative predicates for test cases, thanks to Andreas for letting me know.
2017-05-22 16:47:22 +02:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:!MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES
Unify name of default profile in X.509 tests
2017-08-09 10:41:42 +02:00
x509_verify:"data_files/cert_sha1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_BAD_MD | MBEDTLS_X509_BADCERT_BAD_MD:"":"NULL"
Test that X.509 verification rejects SHA-256 by default
2017-05-05 19:00:39 +02:00
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #15 (Valid Cert SHA224 Digest)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_sha224.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #16 (Valid Cert SHA256 Digest)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_sha256.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #17 (Valid Cert SHA384 Digest)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA512_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_sha384.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #18 (Valid Cert SHA512 Digest)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA512_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_sha512.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
- Added verification callback in certificate verification chain in order to allow external blacklisting
2011-01-13 18:54:59 +01:00
X509 Certificate verification #19 (Valid Cert, denying callback)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA512_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_sha512.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_OTHER:"compat":"verify_none"
- Added verification callback in certificate verification chain in order to allow external blacklisting
2011-01-13 18:54:59 +01:00
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
X509 Certificate verification #19 (Not trusted Cert, allowing callback)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl_expired.pem":"NULL":0:0:"compat":"verify_all"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
x509_verify() now case insensitive for cn (RFC 6125 6.4)
2013-09-09 17:21:45 +02:00
X509 Certificate verification #21 (domain matching wildcard certificate, case insensitive)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_example_wildcard.crt":"data_files/test-ca.crt":"data_files/crl.pem":"mail.ExAmPlE.com":0:0:"compat":"NULL"
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 17:09:32 +01:00
X509 Certificate verification #22 (domain not matching wildcard certificate)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_example_wildcard.crt":"data_files/test-ca.crt":"data_files/crl.pem":"mail.example.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 17:09:32 +01:00
X509 Certificate verification #23 (domain not matching wildcard certificate)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_example_wildcard.crt":"data_files/test-ca.crt":"data_files/crl.pem":"example.com":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 17:09:32 +01:00
- Changed certificate verify behaviour to comply with RFC 6125 section 6.3 to not match CN if subjectAltName extension is present.
2012-05-10 16:12:46 +02:00
X509 Certificate verification #24 (domain matching CN of multi certificate)
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"www.example.com":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 17:09:32 +01:00
X509 Certificate verification #25 (domain matching multi certificate)
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"example.net":0:0:"compat":"NULL"
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 17:09:32 +01:00
X509 Certificate verification #26 (domain not matching multi certificate)
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"www.example.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 17:09:32 +01:00
X509 Certificate verification #27 (domain not matching multi certificate)
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"xample.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 17:09:32 +01:00
X509 Certificate verification #27 (domain not matching multi certificate)
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"bexample.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 17:09:32 +01:00
- Multi-domain certificates support wildcards as well
2012-02-11 18:38:38 +01:00
X509 Certificate verification #28 (domain not matching wildcard in multi certificate)
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"example.org":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Multi-domain certificates support wildcards as well
2012-02-11 18:38:38 +01:00
X509 Certificate verification #29 (domain matching wildcard in multi certificate)
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"mail.example.org":0:0:"compat":"NULL"
- Multi-domain certificates support wildcards as well
2012-02-11 18:38:38 +01:00
- Added test for no-subject certificates with altSubjectNames
2012-08-23 12:46:54 +02:00
X509 Certificate verification #30 (domain matching multi certificate without CN)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_example_multi_nocn.crt":"data_files/test-ca.crt":"data_files/crl.pem":"www.shotokan-braunschweig.de":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
- Added test for no-subject certificates with altSubjectNames
2012-08-23 12:46:54 +02:00
X509 Certificate verification #31 (domain not matching multi certificate without CN)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_example_multi_nocn.crt":"data_files/test-ca.crt":"data_files/crl.pem":"www.example.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH + MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
- Added test for no-subject certificates with altSubjectNames
2012-08-23 12:46:54 +02:00
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
X509 Certificate verification #32 (Valid, EC cert, RSA CA)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP192R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server3.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Add tests for EC cert and crl validation
2013-08-09 11:27:14 +02:00
X509 Certificate verification #33 (Valid, RSA cert, EC CA)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server4.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add tests for EC cert and crl validation
2013-08-09 11:27:14 +02:00
X509 Certificate verification #34 (Valid, EC cert, EC CA)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add tests for EC cert and crl validation
2013-08-09 11:27:14 +02:00
X509 Certificate verification #35 (Revoked, EC CA)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server6.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Add tests for EC cert and crl validation
2013-08-09 11:27:14 +02:00
Adapt test cases to new certs and file names
2013-09-24 18:57:09 +02:00
X509 Certificate verification #36 (Valid, EC CA, SHA1 Digest)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5-sha1.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add tests for EC cert and crl validation
2013-08-09 11:27:14 +02:00
Adapt test cases to new certs and file names
2013-09-24 18:57:09 +02:00
X509 Certificate verification #37 (Valid, EC CA, SHA224 Digest)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5-sha224.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add tests for EC cert and crl validation
2013-08-09 11:27:14 +02:00
X509 Certificate verification #38 (Valid, EC CA, SHA384 Digest)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_SHA512_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5-sha384.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add tests for EC cert and crl validation
2013-08-09 11:27:14 +02:00
X509 Certificate verification #39 (Valid, EC CA, SHA512 Digest)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_SHA512_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5-sha512.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
X509 Certificate verification #40 (Valid, depth 0, RSA, CA)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/test-ca.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
X509 Certificate verification #41 (Valid, depth 0, EC, CA)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/test-ca2.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
X509 Certificate verification #42 (Depth 0, not CA, RSA)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server2.crt":"data_files/server2.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
X509 Certificate verification #43 (Depth 0, not CA, EC)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/server5.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
X509 Certificate verification #44 (Corrupted signature, EC)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
X509 Certificate verification #45 (Corrupted signature, RSA)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server2-badsign.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
Add test for bad signature with longer chain This is one line that wasn't covered in verify_child()
2017-06-05 11:12:13 +02:00
X509 Certificate verification #45b (Corrupted signature, intermediate CA)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Add test for bad signature with longer chain This is one line that wasn't covered in verify_child()
2017-06-05 11:12:13 +02:00
x509_verify:"data_files/server7-badsign.crt":"data_files/test-ca2.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
X509 Certificate verification #46 (Valid, depth 2, EC-RSA-EC)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server7_int-ca.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
X509 Certificate verification #47 (Untrusted, depth 2, EC-RSA-EC)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server7_int-ca.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
X509 Certificate verification #48 (Missing intermediate CA, EC-RSA-EC)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server7.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
X509 Certificate verification #49 (Valid, depth 2, RSA-EC-RSA)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server8_int-ca2.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
X509 Certificate verification #50 (Valid, multiple CAs)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server2.crt":"data_files/test-ca_cat12.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
X509 Certificate verification #51 (Valid, multiple CAs, reverse order)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server2.crt":"data_files/test-ca_cat21.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Add tests for EC cert and crl validation
2013-08-09 11:27:14 +02:00
Add keyUsage checking for CAs
2014-04-08 15:10:07 +02:00
X509 Certificate verification #52 (CA keyUsage valid)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-crt_crl.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add keyUsage checking for CAs
2014-04-08 15:10:07 +02:00
X509 Certificate verification #53 (CA keyUsage missing cRLSign)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_X509_CHECK_KEY_USAGE:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-crt.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_NOT_TRUSTED:"compat":"NULL"
Add keyUsage checking for CAs
2014-04-08 15:10:07 +02:00
X509 Certificate verification #54 (CA keyUsage missing cRLSign, no CRL)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-crt.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Add keyUsage checking for CAs
2014-04-08 15:10:07 +02:00
X509 Certificate verification #55 (CA keyUsage missing keyCertSign)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_X509_CHECK_KEY_USAGE:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-crl.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add keyUsage checking for CAs
2014-04-08 15:10:07 +02:00
Fix curve dependencies in *keyusage tests
2014-04-29 14:06:23 +02:00
X509 Certificate verification #56 (CA keyUsage plain wrong)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_X509_CHECK_KEY_USAGE:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-ds.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add keyUsage checking for CAs
2014-04-08 15:10:07 +02:00
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 18:11:07 +02:00
X509 Certificate verification #57 (Valid, RSASSA-PSS, SHA-1)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 18:11:07 +02:00
X509 Certificate verification #58 (Valid, RSASSA-PSS, SHA-224)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9-sha224.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha224.pem":"NULL":0:0:"compat":"NULL"
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 18:11:07 +02:00
X509 Certificate verification #59 (Valid, RSASSA-PSS, SHA-256)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9-sha256.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha256.pem":"NULL":0:0:"compat":"NULL"
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 18:11:07 +02:00
X509 Certificate verification #60 (Valid, RSASSA-PSS, SHA-384)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9-sha384.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha384.pem":"NULL":0:0:"compat":"NULL"
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 18:11:07 +02:00
X509 Certificate verification #61 (Valid, RSASSA-PSS, SHA-512)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9-sha512.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha512.pem":"NULL":0:0:"compat":"NULL"
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 18:11:07 +02:00
Also verify CRLs signed with RSASSA-PSS
2014-06-05 17:53:52 +02:00
X509 Certificate verification #62 (Revoked, RSASSA-PSS, SHA-1)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Also verify CRLs signed with RSASSA-PSS
2014-06-05 17:53:52 +02:00
X509 Certificate verification #63 (Revoked, RSASSA-PSS, SHA-1, CRL badsign)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha1-badsign.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_NOT_TRUSTED:"compat":"NULL"
Also verify CRLs signed with RSASSA-PSS
2014-06-05 17:53:52 +02:00
X509 Certificate verification #64 (Valid, RSASSA-PSS, SHA-1, not top)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9-with-ca.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 18:11:07 +02:00
Also verify CRLs signed with RSASSA-PSS
2014-06-05 17:53:52 +02:00
X509 Certificate verification #65 (RSASSA-PSS, SHA1, bad cert signature)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9-badsign.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 18:11:07 +02:00
Also verify CRLs signed with RSASSA-PSS
2014-06-05 17:53:52 +02:00
X509 Certificate verification #66 (RSASSA-PSS, SHA1, no RSA CA)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9.crt":"data_files/test-ca2.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 18:11:07 +02:00
Add RSASSA-PSS certificate with all defaults
2014-06-05 18:00:08 +02:00
X509 Certificate verification #67 (Valid, RSASSA-PSS, all defaults)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9-defaults.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha1.pem":"NULL":0:0:"compat":"NULL"
Add RSASSA-PSS certificate with all defaults
2014-06-05 18:00:08 +02:00
Add pathological RSASSA-PSS test certificates Certificates announcing different PSS options than the ones actually used for the signature. Makes sure the options are correctly passed to the verification function.
2014-06-06 18:04:09 +02:00
X509 Certificate verification #68 (RSASSA-PSS, wrong salt_len)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9-bad-saltlen.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add pathological RSASSA-PSS test certificates Certificates announcing different PSS options than the ones actually used for the signature. Makes sure the options are correctly passed to the verification function.
2014-06-06 18:04:09 +02:00
X509 Certificate verification #69 (RSASSA-PSS, wrong mgf_hash)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9-bad-mgfhash.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add pathological RSASSA-PSS test certificates Certificates announcing different PSS options than the ones actually used for the signature. Makes sure the options are correctly passed to the verification function.
2014-06-06 18:04:09 +02:00
Restore ability to use v1 CA if trusted locally
2014-06-19 12:18:08 +02:00
X509 Certificate verification #70 (v1 trusted CA)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server1-v1.crt":"data_files/test-ca-v1.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Restore ability to use v1 CA if trusted locally
2014-06-19 12:18:08 +02:00
X509 Certificate verification #71 (v1 trusted CA, other)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server2-v1.crt":"data_files/server1-v1.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Restore ability to use v1 CA if trusted locally
2014-06-19 12:18:08 +02:00
X509 Certificate verification #72 (v1 chain)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server2-v1-chain.crt":"data_files/test-ca-v1.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Restore ability to use v1 CA if trusted locally
2014-06-19 12:18:08 +02:00
Restore ability to trust non-CA selfsigned EE cert
2014-06-24 11:49:16 +02:00
X509 Certificate verification #73 (selfsigned trusted without CA bit)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Restore ability to trust non-CA selfsigned EE cert
2014-06-24 11:49:16 +02:00
X509 Certificate verification #74 (signed by selfsigned trusted without CA bit)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server6-ss-child.crt":"data_files/server5-selfsigned.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Restore ability to trust non-CA selfsigned EE cert
2014-06-24 11:49:16 +02:00
Add tests for X.509 name encoding mismatch
2014-10-17 12:23:49 +02:00
X509 Certificate verification #75 (encoding mismatch)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/enco-cert-utf8str.pem":"data_files/enco-ca-prstr.pem":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Add tests for X.509 name encoding mismatch
2014-10-17 12:23:49 +02:00
Add tests for concatenated CRLs
2014-11-19 14:04:09 +01:00
X509 Certificate verification #76 (multiple CRLs, not revoked)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_ec-rsa.pem":"NULL":0:0:"compat":"NULL"
Add tests for concatenated CRLs
2014-11-19 14:04:09 +01:00
X509 Certificate verification #77 (multiple CRLs, revoked)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server6.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_ec-rsa.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Add tests for concatenated CRLs
2014-11-19 14:04:09 +01:00
X509 Certificate verification #78 (multiple CRLs, revoked by second)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server6.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_rsa-ec.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Add tests for concatenated CRLs
2014-11-19 14:04:09 +01:00
X509 Certificate verification #79 (multiple CRLs, revoked by future)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server6.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_ecfut-rsa.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED|MBEDTLS_X509_BADCRL_FUTURE:"compat":"NULL"
Add tests for concatenated CRLs
2014-11-19 14:04:09 +01:00
X509 Certificate verification #80 (multiple CRLs, first future, revoked by second)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server1.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_ecfut-rsa.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Add tests for concatenated CRLs
2014-11-19 14:04:09 +01:00
X509 Certificate verification #81 (multiple CRLs, none relevant)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/enco-cert-utf8str.pem":"data_files/enco-ca-prstr.pem":"data_files/crl_cat_rsa-ec.pem":"NULL":0:0:"compat":"NULL"
Add tests for concatenated CRLs
2014-11-19 14:04:09 +01:00
X509: Future CA among trusted: add unit tests
2016-02-18 18:28:04 +01:00
X509 Certificate verification #82 (Not yet valid CA and valid CA)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-future-present.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
X509: Future CA among trusted: add unit tests
2016-02-18 18:28:04 +01:00
X509 Certificate verification #83 (valid CA and Not yet valid CA)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-present-future.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
X509: Future CA among trusted: add unit tests
2016-02-18 18:28:04 +01:00
X509: Future CA among trusted: add more tests
2016-02-19 16:57:17 +01:00
X509 Certificate verification #84 (valid CA and Not yet valid CA)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-present-past.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
X509: Future CA among trusted: add more tests
2016-02-19 16:57:17 +01:00
X509 Certificate verification #85 (Not yet valid CA and valid CA)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-past-present.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
X509: Future CA among trusted: add more tests
2016-02-19 16:57:17 +01:00
Add tests for out flags from x509_crt_verify_top() The tests load certificate chains from files. The CA chains contain a past or future certificate and an invalid certificate. The test then checks that the flags set are MBEDTLS_X509_BADCERT_EXPIRED or MBEDTLS_X509_BADCERT_FUTURE.
2016-12-13 10:59:07 +01:00
X509 Certificate verification #86 (Not yet valid CA and invalid CA)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-future-invalid.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_FUTURE:"compat":"NULL"
Add tests for out flags from x509_crt_verify_top() The tests load certificate chains from files. The CA chains contain a past or future certificate and an invalid certificate. The test then checks that the flags set are MBEDTLS_X509_BADCERT_EXPIRED or MBEDTLS_X509_BADCERT_FUTURE.
2016-12-13 10:59:07 +01:00
X509 Certificate verification #87 (Expired CA and invalid CA)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-past-invalid.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_EXPIRED:"compat":"NULL"
Add tests for out flags from x509_crt_verify_top() The tests load certificate chains from files. The CA chains contain a past or future certificate and an invalid certificate. The test then checks that the flags set are MBEDTLS_X509_BADCERT_EXPIRED or MBEDTLS_X509_BADCERT_FUTURE.
2016-12-13 10:59:07 +01:00
Add tests for spurious certs in the chain We have code to skip them but didn't have explicit tests ensuring they are (the corresponding branch was never taken). While at it, remove extra copy of the chain in server10*.crt, which was duplicated for no reason.
2017-06-06 10:25:43 +02:00
X509 Certificate verification #88 (Spurious cert in the chain)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add tests for spurious certs in the chain We have code to skip them but didn't have explicit tests ensuring they are (the corresponding branch was never taken). While at it, remove extra copy of the chain in server10*.crt, which was duplicated for no reason.
2017-06-06 10:25:43 +02:00
x509_verify:"data_files/server7_spurious_int-ca.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
X509 Certificate verification #89 (Spurious cert later in the chain)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add tests for spurious certs in the chain We have code to skip them but didn't have explicit tests ensuring they are (the corresponding branch was never taken). While at it, remove extra copy of the chain in server10*.crt, which was duplicated for no reason.
2017-06-06 10:25:43 +02:00
x509_verify:"data_files/server10_int3_spurious_int-ca2.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
Add test for CA forgery attempt As we accept EE certs that are explicitly trusted (in the list of trusted roots) and usually look for parent by subject, and in the future we might want to avoid checking the self-signature on trusted certs, there could a risk that we incorrectly accept a cert that looks like a trusted root except it doesn't have the same key. This test ensures this will never happen.
2017-06-29 09:48:08 +02:00
X509 Certificate verification #90 (EE with same name as trusted root)
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Unify name of default profile in X.509 tests
2017-08-09 10:41:42 +02:00
x509_verify:"data_files/server5-ss-forgeca.crt":"data_files/test-int-ca3.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"":"NULL"
Add test for CA forgery attempt As we accept EE certs that are explicitly trusted (in the list of trusted roots) and usually look for parent by subject, and in the future we might want to avoid checking the self-signature on trusted certs, there could a risk that we incorrectly accept a cert that looks like a trusted root except it doesn't have the same key. This test ensures this will never happen.
2017-06-29 09:48:08 +02:00
Add test for same CA with different keys When a trusted CA is rolling its root keys, it could happen that for some users the list of trusted roots contains two versions of the same CA with the same name but different keys. Currently this is supported but wasn't tested. Note: the intermediate file test-ca-alt.csr is commited on purpose, as not commiting intermediate files causes make to regenerate files that we don't want it to touch.
2017-07-03 18:06:38 +02:00
X509 Certificate verification #91 (same CA with good then bad key)
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C
x509_verify:"data_files/server1.crt":"data_files/test-ca-good-alt.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
X509 Certificate verification #91 (same CA with bad then good key)
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C
x509_verify:"data_files/server1.crt":"data_files/test-ca-alt-good.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add test for bad name and callback This ensures that the callback can actually clear that flag, and that it is seen by the callback at the right level. This flag is not set at the same place than others, and this difference will get bigger in the upcoming refactor, so let's ensure we don't break anything here.
2017-07-05 18:14:38 +02:00
X509 Certificate verification #92 (bad name, allowing callback)
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Unify name of default profile in X.509 tests
2017-08-09 10:41:42 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"globalhost":0:0:"":"verify_all"
Add test for bad name and callback This ensures that the callback can actually clear that flag, and that it is seen by the callback at the right level. This flag is not set at the same place than others, and this difference will get bigger in the upcoming refactor, so let's ensure we don't break anything here.
2017-07-05 18:14:38 +02:00
Merge branch 'development' into iotssl-1381-x509-verify-refactor-restricted * development: (557 commits) Add attribution for #1351 report Adapt version_features.c Note incompatibility of truncated HMAC extension in ChangeLog Add LinkLibraryDependencies to VS2010 app template Add ChangeLog entry for PR #1382 MD: Make deprecated functions not inline Add ChangeLog entry for PR #1384 Have Visual Studio handle linking to mbedTLS.lib internally Mention in ChangeLog that this fixes #1351 Add issue number to ChangeLog Note in the changelog that this fixes an interoperability issue. Style fix in ChangeLog Add ChangeLog entries for PR #1168 and #1362 Add ChangeLog entry for PR #1165 ctr_drbg: Typo fix in the file description comment. dhm: Fix typo in RFC 5114 constants tests_suite_pkparse: new PKCS8-v2 keys with PRF != SHA1 data_files/pkcs8-v2: add keys generated with PRF != SHA1 tests/pkcs5/pbkdf2_hmac: extend array to accommodate longer results tests/pkcs5/pbkdf2_hmac: add unit tests for additional SHA algorithms ...
2018-03-05 11:55:38 +01:00
X509 Certificate verification #93 (Suite B invalid, EC cert, RSA CA)
Add some tests for different available profiles Add tests for suite b profile and for the next profile
2018-02-06 17:47:17 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_ECP_C:MBEDTLS_ECP_DP_SECP192R1_ENABLED:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
x509_verify:"data_files/server3.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_MD|MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY|MBEDTLS_X509_BADCRL_BAD_MD|MBEDTLS_X509_BADCRL_BAD_PK:"suite_b":"NULL"
Merge branch 'development' into iotssl-1381-x509-verify-refactor-restricted * development: (557 commits) Add attribution for #1351 report Adapt version_features.c Note incompatibility of truncated HMAC extension in ChangeLog Add LinkLibraryDependencies to VS2010 app template Add ChangeLog entry for PR #1382 MD: Make deprecated functions not inline Add ChangeLog entry for PR #1384 Have Visual Studio handle linking to mbedTLS.lib internally Mention in ChangeLog that this fixes #1351 Add issue number to ChangeLog Note in the changelog that this fixes an interoperability issue. Style fix in ChangeLog Add ChangeLog entries for PR #1168 and #1362 Add ChangeLog entry for PR #1165 ctr_drbg: Typo fix in the file description comment. dhm: Fix typo in RFC 5114 constants tests_suite_pkparse: new PKCS8-v2 keys with PRF != SHA1 data_files/pkcs8-v2: add keys generated with PRF != SHA1 tests/pkcs5/pbkdf2_hmac: extend array to accommodate longer results tests/pkcs5/pbkdf2_hmac: add unit tests for additional SHA algorithms ...
2018-03-05 11:55:38 +01:00
X509 Certificate verification #94 (Suite B invalid, RSA cert, EC CA)
Fix remaining issues found by depend-pkalgs
2018-03-12 15:26:59 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_PKCS1_V15:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Add some tests for different available profiles Add tests for suite b profile and for the next profile
2018-02-06 17:47:17 +01:00
x509_verify:"data_files/server4.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_PK:"suite_b":"NULL"
Merge branch 'development' into iotssl-1381-x509-verify-refactor-restricted * development: (557 commits) Add attribution for #1351 report Adapt version_features.c Note incompatibility of truncated HMAC extension in ChangeLog Add LinkLibraryDependencies to VS2010 app template Add ChangeLog entry for PR #1382 MD: Make deprecated functions not inline Add ChangeLog entry for PR #1384 Have Visual Studio handle linking to mbedTLS.lib internally Mention in ChangeLog that this fixes #1351 Add issue number to ChangeLog Note in the changelog that this fixes an interoperability issue. Style fix in ChangeLog Add ChangeLog entries for PR #1168 and #1362 Add ChangeLog entry for PR #1165 ctr_drbg: Typo fix in the file description comment. dhm: Fix typo in RFC 5114 constants tests_suite_pkparse: new PKCS8-v2 keys with PRF != SHA1 data_files/pkcs8-v2: add keys generated with PRF != SHA1 tests/pkcs5/pbkdf2_hmac: extend array to accommodate longer results tests/pkcs5/pbkdf2_hmac: add unit tests for additional SHA algorithms ...
2018-03-05 11:55:38 +01:00
X509 Certificate verification #95 (Suite B Valid, EC cert, EC CA)
Fix remaining issues found by depend-pkalgs
2018-03-12 15:26:59 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Add some tests for different available profiles Add tests for suite b profile and for the next profile
2018-02-06 17:47:17 +01:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"suite_b":"NULL"
Merge branch 'development' into iotssl-1381-x509-verify-refactor-restricted * development: (557 commits) Add attribution for #1351 report Adapt version_features.c Note incompatibility of truncated HMAC extension in ChangeLog Add LinkLibraryDependencies to VS2010 app template Add ChangeLog entry for PR #1382 MD: Make deprecated functions not inline Add ChangeLog entry for PR #1384 Have Visual Studio handle linking to mbedTLS.lib internally Mention in ChangeLog that this fixes #1351 Add issue number to ChangeLog Note in the changelog that this fixes an interoperability issue. Style fix in ChangeLog Add ChangeLog entries for PR #1168 and #1362 Add ChangeLog entry for PR #1165 ctr_drbg: Typo fix in the file description comment. dhm: Fix typo in RFC 5114 constants tests_suite_pkparse: new PKCS8-v2 keys with PRF != SHA1 data_files/pkcs8-v2: add keys generated with PRF != SHA1 tests/pkcs5/pbkdf2_hmac: extend array to accommodate longer results tests/pkcs5/pbkdf2_hmac: add unit tests for additional SHA algorithms ...
2018-03-05 11:55:38 +01:00
X509 Certificate verification #96 (next profile Invalid Cert SHA224 Digest)
Fix remaining issues found by depend-hashes
2018-03-12 15:49:35 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Add some tests for different available profiles Add tests for suite b profile and for the next profile
2018-02-06 17:47:17 +01:00
x509_verify:"data_files/cert_sha224.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_MD|MBEDTLS_X509_BADCRL_BAD_MD:"next":"NULL"
Merge branch 'development' into iotssl-1381-x509-verify-refactor-restricted * development: (557 commits) Add attribution for #1351 report Adapt version_features.c Note incompatibility of truncated HMAC extension in ChangeLog Add LinkLibraryDependencies to VS2010 app template Add ChangeLog entry for PR #1382 MD: Make deprecated functions not inline Add ChangeLog entry for PR #1384 Have Visual Studio handle linking to mbedTLS.lib internally Mention in ChangeLog that this fixes #1351 Add issue number to ChangeLog Note in the changelog that this fixes an interoperability issue. Style fix in ChangeLog Add ChangeLog entries for PR #1168 and #1362 Add ChangeLog entry for PR #1165 ctr_drbg: Typo fix in the file description comment. dhm: Fix typo in RFC 5114 constants tests_suite_pkparse: new PKCS8-v2 keys with PRF != SHA1 data_files/pkcs8-v2: add keys generated with PRF != SHA1 tests/pkcs5/pbkdf2_hmac: extend array to accommodate longer results tests/pkcs5/pbkdf2_hmac: add unit tests for additional SHA algorithms ...
2018-03-05 11:55:38 +01:00
X509 Certificate verification #97 (next profile Valid Cert SHA256 Digest)
Fix remaining issues found by depend-hashes
2018-03-12 15:49:35 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_SHA1_C
Add some tests for different available profiles Add tests for suite b profile and for the next profile
2018-02-06 17:47:17 +01:00
x509_verify:"data_files/cert_sha256.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"next":"NULL"
Add test: DNS names should not match IP addresses Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-23 12:39:53 +02:00
X509 Certificate verification: domain identical to IPv4 in SubjectAltName
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C
x509_verify:"data_files/server5-tricky-ip-san.crt":"data_files/server5-tricky-ip-san.crt":"data_files/crl_sha256.pem":"abcd":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"":"NULL"
X509 Certificate verification: domain identical to IPv6 in SubjectAltName
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C
x509_verify:"data_files/server5-tricky-ip-san.crt":"data_files/server5-tricky-ip-san.crt":"data_files/crl_sha256.pem":"abcd.example.com":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"":"NULL"
Add test for bad name and callback This ensures that the callback can actually clear that flag, and that it is seen by the callback at the right level. This flag is not set at the same place than others, and this difference will get bigger in the upcoming refactor, so let's ensure we don't break anything here.
2017-07-05 18:14:38 +02:00
X509 Certificate verification callback: bad name
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server5.crt":"data_files/test-ca2.crt":"globalhost":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 1 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 0 - serial 09 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000004\n"
Add test for bad name and callback This ensures that the callback can actually clear that flag, and that it is seen by the callback at the right level. This flag is not set at the same place than others, and this difference will get bigger in the upcoming refactor, so let's ensure we don't break anything here.
2017-07-05 18:14:38 +02:00
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 11:59:24 +02:00
X509 Certificate verification callback: trusted EE cert
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":"NULL":0:"depth 0 - serial 53\:A2\:CB\:4B\:12\:4E\:AD\:83\:7D\:A8\:94\:B2 - subject CN=selfsigned, OU=testing, O=PolarSSL, C=NL - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 11:59:24 +02:00
Add tests for flags passed to f_vrfy The tests cover chains of length 0, 1 and 2, with one error, located at any of the available levels in the chain. This exercises all three call sites of f_vrfy (two in verify_top, one in verify_child). Chains of greater length would not cover any new code path or behaviour that I can see.
2017-06-27 12:51:52 +02:00
X509 Certificate verification callback: trusted EE cert, expired
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_HAVE_TIME_DATE
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server5-ss-expired.crt":"data_files/server5-ss-expired.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 0 - serial D8\:64\:61\:05\:E3\:A3\:CD\:78 - subject C=UK, O=mbed TLS, OU=testsuite, CN=localhost - flags 0x00000001\n"
Add tests for flags passed to f_vrfy The tests cover chains of length 0, 1 and 2, with one error, located at any of the available levels in the chain. This exercises all three call sites of f_vrfy (two in verify_top, one in verify_child). Chains of greater length would not cover any new code path or behaviour that I can see.
2017-06-27 12:51:52 +02:00
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 11:59:24 +02:00
X509 Certificate verification callback: simple
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Change serial in test-ca.crt from 0 to 3 to circumvent ASN.1 bug As of 2.13.1, mbedtls_asn1_write_mpi() doesn't write 0 correctly. #2166.
2018-11-01 16:07:42 +01:00
x509_verify_callback:"data_files/server1.crt":"data_files/test-ca.crt":"NULL":0:"depth 1 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 0 - serial 01 - subject C=NL, O=PolarSSL, CN=PolarSSL Server 1 - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 11:59:24 +02:00
Add tests for flags passed to f_vrfy The tests cover chains of length 0, 1 and 2, with one error, located at any of the available levels in the chain. This exercises all three call sites of f_vrfy (two in verify_top, one in verify_child). Chains of greater length would not cover any new code path or behaviour that I can see.
2017-06-27 12:51:52 +02:00
X509 Certificate verification callback: simple, EE expired
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server5-expired.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 1 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 0 - serial 1E - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000001\n"
Add tests for flags passed to f_vrfy The tests cover chains of length 0, 1 and 2, with one error, located at any of the available levels in the chain. This exercises all three call sites of f_vrfy (two in verify_top, one in verify_child). Chains of greater length would not cover any new code path or behaviour that I can see.
2017-06-27 12:51:52 +02:00
X509 Certificate verification callback: simple, root expired
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server5.crt":"data_files/test-ca2-expired.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 1 - serial 01 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000001\ndepth 0 - serial 09 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
Add tests for flags passed to f_vrfy The tests cover chains of length 0, 1 and 2, with one error, located at any of the available levels in the chain. This exercises all three call sites of f_vrfy (two in verify_top, one in verify_child). Chains of greater length would not cover any new code path or behaviour that I can see.
2017-06-27 12:51:52 +02:00
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 11:59:24 +02:00
X509 Certificate verification callback: two trusted roots
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Change serial in test-ca.crt from 0 to 3 to circumvent ASN.1 bug As of 2.13.1, mbedtls_asn1_write_mpi() doesn't write 0 correctly. #2166.
2018-11-01 16:07:42 +01:00
x509_verify_callback:"data_files/server1.crt":"data_files/test-ca_cat12.crt":"NULL":0:"depth 1 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 0 - serial 01 - subject C=NL, O=PolarSSL, CN=PolarSSL Server 1 - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 11:59:24 +02:00
X509 Certificate verification callback: two trusted roots, reversed order
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Change serial in test-ca.crt from 0 to 3 to circumvent ASN.1 bug As of 2.13.1, mbedtls_asn1_write_mpi() doesn't write 0 correctly. #2166.
2018-11-01 16:07:42 +01:00
x509_verify_callback:"data_files/server1.crt":"data_files/test-ca_cat21.crt":"NULL":0:"depth 1 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 0 - serial 01 - subject C=NL, O=PolarSSL, CN=PolarSSL Server 1 - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 11:59:24 +02:00
X509 Certificate verification callback: root included
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Change serial in test-ca.crt from 0 to 3 to circumvent ASN.1 bug As of 2.13.1, mbedtls_asn1_write_mpi() doesn't write 0 correctly. #2166.
2018-11-01 16:07:42 +01:00
x509_verify_callback:"data_files/server1_ca.crt":"data_files/test-ca_cat21.crt":"NULL":0:"depth 1 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 0 - serial 01 - subject C=NL, O=PolarSSL, CN=PolarSSL Server 1 - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 11:59:24 +02:00
X509 Certificate verification callback: intermediate ca
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server7_int-ca.crt":"data_files/test-ca_cat12.crt":"NULL":0:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 11:59:24 +02:00
X509 Certificate verification callback: intermediate ca, root included
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server7_int-ca_ca2.crt":"data_files/test-ca_cat12.crt":"NULL":0:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 11:59:24 +02:00
Skip to trusted certs early in the chain This helps in the case where an intermediate certificate is directly trusted. In that case we want to ignore what comes after it in the chain, not only for performance but also to avoid false negatives (eg an old root being no longer trusted while the newer intermediate is directly trusted). closes #220
2015-09-01 16:35:00 +02:00
X509 Certificate verification callback: intermediate ca trusted
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server7_int-ca_ca2.crt":"data_files/test-int-ca.crt":"NULL":0:"depth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
Skip to trusted certs early in the chain This helps in the case where an intermediate certificate is directly trusted. In that case we want to ignore what comes after it in the chain, not only for performance but also to avoid false negatives (eg an old root being no longer trusted while the newer intermediate is directly trusted). closes #220
2015-09-01 16:35:00 +02:00
Add tests for flags passed to f_vrfy The tests cover chains of length 0, 1 and 2, with one error, located at any of the available levels in the chain. This exercises all three call sites of f_vrfy (two in verify_top, one in verify_child). Chains of greater length would not cover any new code path or behaviour that I can see.
2017-06-27 12:51:52 +02:00
X509 Certificate verification callback: intermediate ca, EE expired
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server7-expired.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000001\n"
Add tests for flags passed to f_vrfy The tests cover chains of length 0, 1 and 2, with one error, located at any of the available levels in the chain. This exercises all three call sites of f_vrfy (two in verify_top, one in verify_child). Chains of greater length would not cover any new code path or behaviour that I can see.
2017-06-27 12:51:52 +02:00
X509 Certificate verification callback: intermediate ca, int expired
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server7_int-ca-exp.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000001\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
Add tests for flags passed to f_vrfy The tests cover chains of length 0, 1 and 2, with one error, located at any of the available levels in the chain. This exercises all three call sites of f_vrfy (two in verify_top, one in verify_child). Chains of greater length would not cover any new code path or behaviour that I can see.
2017-06-27 12:51:52 +02:00
X509 Certificate verification callback: intermediate ca, root expired
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server7_int-ca.crt":"data_files/test-ca2-expired.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 2 - serial 01 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000001\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
Add tests for flags passed to f_vrfy The tests cover chains of length 0, 1 and 2, with one error, located at any of the available levels in the chain. This exercises all three call sites of f_vrfy (two in verify_top, one in verify_child). Chains of greater length would not cover any new code path or behaviour that I can see.
2017-06-27 12:51:52 +02:00
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 11:59:24 +02:00
X509 Certificate verification callback: two intermediates
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Change serial in test-ca.crt from 0 to 3 to circumvent ASN.1 bug As of 2.13.1, mbedtls_asn1_write_mpi() doesn't write 0 correctly. #2166.
2018-11-01 16:07:42 +01:00
x509_verify_callback:"data_files/server10_int3_int-ca2.crt":"data_files/test-ca_cat21.crt":"NULL":0:"depth 3 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 2 - serial 0F - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate EC CA - flags 0x00000000\ndepth 1 - serial 4D - subject C=UK, O=mbed TLS, CN=mbed TLS Test intermediate CA 3 - flags 0x00000000\ndepth 0 - serial 4B - subject CN=localhost - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 11:59:24 +02:00
X509 Certificate verification callback: two intermediates, root included
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Change serial in test-ca.crt from 0 to 3 to circumvent ASN.1 bug As of 2.13.1, mbedtls_asn1_write_mpi() doesn't write 0 correctly. #2166.
2018-11-01 16:07:42 +01:00
x509_verify_callback:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca_cat21.crt":"NULL":0:"depth 3 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 2 - serial 0F - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate EC CA - flags 0x00000000\ndepth 1 - serial 4D - subject C=UK, O=mbed TLS, CN=mbed TLS Test intermediate CA 3 - flags 0x00000000\ndepth 0 - serial 4B - subject CN=localhost - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 11:59:24 +02:00
Skip to trusted certs early in the chain This helps in the case where an intermediate certificate is directly trusted. In that case we want to ignore what comes after it in the chain, not only for performance but also to avoid false negatives (eg an old root being no longer trusted while the newer intermediate is directly trusted). closes #220
2015-09-01 16:35:00 +02:00
X509 Certificate verification callback: two intermediates, top int trusted
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":"NULL":0:"depth 2 - serial 0F - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate EC CA - flags 0x00000000\ndepth 1 - serial 4D - subject C=UK, O=mbed TLS, CN=mbed TLS Test intermediate CA 3 - flags 0x00000000\ndepth 0 - serial 4B - subject CN=localhost - flags 0x00000000\n"
Skip to trusted certs early in the chain This helps in the case where an intermediate certificate is directly trusted. In that case we want to ignore what comes after it in the chain, not only for performance but also to avoid false negatives (eg an old root being no longer trusted while the newer intermediate is directly trusted). closes #220
2015-09-01 16:35:00 +02:00
X509 Certificate verification callback: two intermediates, low int trusted
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-int-ca3.crt":"NULL":0:"depth 1 - serial 4D - subject C=UK, O=mbed TLS, CN=mbed TLS Test intermediate CA 3 - flags 0x00000000\ndepth 0 - serial 4B - subject CN=localhost - flags 0x00000000\n"
Skip to trusted certs early in the chain This helps in the case where an intermediate certificate is directly trusted. In that case we want to ignore what comes after it in the chain, not only for performance but also to avoid false negatives (eg an old root being no longer trusted while the newer intermediate is directly trusted). closes #220
2015-09-01 16:35:00 +02:00
Add test for callback and bad signatures Our current behaviour is a bit inconsistent here: - when the bad signature is made by a trusted CA, we stop here and don't include the trusted CA in the chain (don't call vrfy on it) - otherwise, we just add NOT_TRUSTED to the flags but keep building the chain and call vrfy on the upper certs
2017-07-14 11:32:38 +02:00
X509 Certificate verification callback: no intermediate, bad signature
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 0 - serial 09 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000008\n"
Add test for callback and bad signatures Our current behaviour is a bit inconsistent here: - when the bad signature is made by a trusted CA, we stop here and don't include the trusted CA in the chain (don't call vrfy on it) - otherwise, we just add NOT_TRUSTED to the flags but keep building the chain and call vrfy on the upper certs
2017-07-14 11:32:38 +02:00
X509 Certificate verification callback: one intermediate, bad signature
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server7-badsign.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000008\n"
Add test for callback and bad signatures Our current behaviour is a bit inconsistent here: - when the bad signature is made by a trusted CA, we stop here and don't include the trusted CA in the chain (don't call vrfy on it) - otherwise, we just add NOT_TRUSTED to the flags but keep building the chain and call vrfy on the upper certs
2017-07-14 11:32:38 +02:00
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Parse Selftest
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_CERTS_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
x509_selftest:
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (Incorrect first tag)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"":"":MBEDTLS_ERR_X509_INVALID_FORMAT
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (Correct first tag, data length does not match)
x509: trailing bytes in DER: correct a unit test One of the unit test was failing, because it was testing behavior that was part of the bug. Updated the return value to the correct one
2016-02-17 15:24:28 +01:00
x509parse_crt:"300000":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (Correct first tag, no more data)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"3000":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
- Updated tests to reflect recent changes
2011-10-12 13:53:52 +02:00
X509 Certificate ASN1 (Correct first tag, length data incorrect)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"30023085":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Updated tests to reflect recent changes
2011-10-12 13:53:52 +02:00
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate ASN1 (Correct first tag, length data incomplete)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"30023083":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate ASN1 (Correct first tag, length data incomplete)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"30023081":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate ASN1 (Correct first tag, length data incomplete)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"3003308200":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (Correct first tag, second tag no TBSCertificate)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"300100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, no version tag, serial missing)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"3003300100":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, invalid version tag)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"30053003a00101":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, valid version tag, no length)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"30053003a00102":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, valid version tag, invalid length)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"30163014a012021000000000000000000000000000000000":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, valid version tag, no serial)
Fix whitespace at EOL issues
2015-10-30 09:23:19 +01:00
x509parse_crt:"30073005a003020104":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, invalid length version tag)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"30083006a00402010400":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, incorrect serial tag)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"30083006a00302010400":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, incorrect serial length)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"30083006a00302010482":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, correct serial, no alg)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"300d300ba0030201048204deadbeef":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, correct serial, no alg oid)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"300e300ca0030201048204deadbeef00":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
X509 Certificate ASN1 (TBSCertificate, alg oid no data in sequence)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"300f300da0030201048204deadbeef3000":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
X509 Certificate ASN1 (TBSCertificate, alg with params)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"30163014a0030201048204deadbeef30070604cafed00d01":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
X509 Certificate ASN1 (TBSCertificate, correct alg data, no params unknown version)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"30153013a0030201048204deadbeef30060604cafed00d":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, correct alg data, unknown version)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"30173015a0030201048204deadbeef30080604cafed00d0500":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
X509 Certificate ASN1 (TBSCertificate, correct alg data, length mismatch)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"30183016a0030201048204deadbeef30090604cafed00d050000":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, correct alg, unknown alg_id)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"30173015a0030201028204deadbeef30080604cafed00d0500":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG + MBEDTLS_ERR_OID_NOT_FOUND
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, correct alg, specific alg_id)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"301c301aa0030201028204deadbeef300d06092a864886f70d01010b0500":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, correct alg, unknown specific alg_id)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"301c301aa0030201028204deadbeef300d06092a864886f70d0101010500":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG + MBEDTLS_ERR_OID_NOT_FOUND
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 Certificate ASN1 (TBSCertificate, correct alg, bad RSASSA-PSS params)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_X509_RSASSA_PSS_SUPPORT
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
x509parse_crt:"30193017a003020102020118300d06092a864886f70d01010a3100":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, issuer no set data)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"301e301ca0030201028204deadbeef300d06092a864886f70d01010b05003000":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, issuer no inner seq data)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3020301ea0030201028204deadbeef300d06092a864886f70d01010b050030023100":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, issuer no inner set data)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30223020a0030201028204deadbeef300d06092a864886f70d01010b0500300431023000":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, issuer two inner set datas)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Obey bounds of ASN.1 substructures When parsing a substructure of an ASN.1 structure, no field within the substructure must exceed the bounds of the substructure. Concretely, the `end` pointer passed to the ASN.1 parsing routines must be updated to point to the end of the substructure while parsing the latter. This was previously not the case for the routines - x509_get_attr_type_and_value(), - mbedtls_x509_get_crt_ext(), - mbedtls_x509_get_crl_ext(). These functions kept using the end of the parent structure as the `end` pointer and would hence allow substructure fields to cross the substructure boundary. This could lead to successful parsing of ill-formed X.509 CRTs. This commit fixes this. Care has to be taken when adapting `mbedtls_x509_get_crt_ext()` and `mbedtls_x509_get_crl_ext()`, as the underlying function `mbedtls_x509_get_ext()` returns `0` if no extensions are present but doesn't set the variable which holds the bounds of the Extensions structure in case the latter is present. This commit addresses this by returning early from `mbedtls_x509_get_crt_ext()` and `mbedtls_x509_get_crl_ext()` if parsing has reached the end of the input buffer. The following X.509 parsing tests need to be adapted: - "TBSCertificate, issuer two inner set datas" This test exercises the X.509 CRT parser with a Subject name which has two empty `AttributeTypeAndValue` structures. This is supposed to fail with `MBEDTLS_ERR_ASN1_OUT_OF_DATA` because the parser should attempt to parse the first structure and fail because of a lack of data. Previously, it failed to obey the (0-length) bounds of the first AttributeTypeAndValue structure and would try to interpret the beginning of the second AttributeTypeAndValue structure as the first field of the first AttributeTypeAndValue structure, returning an UNEXPECTED_TAG error. - "TBSCertificate, issuer, no full following string" This test exercises the parser's behaviour on an AttributeTypeAndValue structure which contains more data than expected; it should therefore fail with MBEDTLS_ERR_ASN1_LENGTH_MISMATCH. Because of the missing bounds check, it previously failed with UNEXPECTED_TAG because it interpreted the remaining byte in the first AttributeTypeAndValue structure as the first byte in the second AttributeTypeAndValue structure. - "SubjectAltName repeated" This test should exercise two SubjectAltNames extensions in succession, but a wrong length values makes the second SubjectAltNames extension appear outside of the Extensions structure. With the new bounds in place, this therefore fails with a LENGTH_MISMATCH error. This commit adapts the test data to put the 2nd SubjectAltNames extension inside the Extensions structure, too.
2019-02-12 18:22:36 +01:00
x509parse_crt:"30243022a0030201028204deadbeef300d06092a864886f70d01010b05003006310430003000":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, issuer no oid data)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30243022a0030201028204deadbeef300d06092a864886f70d01010b05003006310430020600":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, issuer invalid tag)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"302a3028a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600060454657374":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
X509 Certificate ASN1 (TBSCertificate, issuer, no string data)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30253023a0030201028204deadbeef300d06092a864886f70d01010b0500300731053003060013":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
- Corrected parsing of UTCTime dates before 1990 and after 1950 - Support more exotic OID's when parsing certificates - Support more exotic name representations when parsing certificates - Replaced the expired test certificates
2011-02-20 11:40:16 +01:00
X509 Certificate ASN1 (TBSCertificate, issuer, no full following string)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Obey bounds of ASN.1 substructures When parsing a substructure of an ASN.1 structure, no field within the substructure must exceed the bounds of the substructure. Concretely, the `end` pointer passed to the ASN.1 parsing routines must be updated to point to the end of the substructure while parsing the latter. This was previously not the case for the routines - x509_get_attr_type_and_value(), - mbedtls_x509_get_crt_ext(), - mbedtls_x509_get_crl_ext(). These functions kept using the end of the parent structure as the `end` pointer and would hence allow substructure fields to cross the substructure boundary. This could lead to successful parsing of ill-formed X.509 CRTs. This commit fixes this. Care has to be taken when adapting `mbedtls_x509_get_crt_ext()` and `mbedtls_x509_get_crl_ext()`, as the underlying function `mbedtls_x509_get_ext()` returns `0` if no extensions are present but doesn't set the variable which holds the bounds of the Extensions structure in case the latter is present. This commit addresses this by returning early from `mbedtls_x509_get_crt_ext()` and `mbedtls_x509_get_crl_ext()` if parsing has reached the end of the input buffer. The following X.509 parsing tests need to be adapted: - "TBSCertificate, issuer two inner set datas" This test exercises the X.509 CRT parser with a Subject name which has two empty `AttributeTypeAndValue` structures. This is supposed to fail with `MBEDTLS_ERR_ASN1_OUT_OF_DATA` because the parser should attempt to parse the first structure and fail because of a lack of data. Previously, it failed to obey the (0-length) bounds of the first AttributeTypeAndValue structure and would try to interpret the beginning of the second AttributeTypeAndValue structure as the first field of the first AttributeTypeAndValue structure, returning an UNEXPECTED_TAG error. - "TBSCertificate, issuer, no full following string" This test exercises the parser's behaviour on an AttributeTypeAndValue structure which contains more data than expected; it should therefore fail with MBEDTLS_ERR_ASN1_LENGTH_MISMATCH. Because of the missing bounds check, it previously failed with UNEXPECTED_TAG because it interpreted the remaining byte in the first AttributeTypeAndValue structure as the first byte in the second AttributeTypeAndValue structure. - "SubjectAltName repeated" This test should exercise two SubjectAltNames extensions in succession, but a wrong length values makes the second SubjectAltNames extension appear outside of the Extensions structure. With the new bounds in place, this therefore fails with a LENGTH_MISMATCH error. This commit adapts the test data to put the 2nd SubjectAltNames extension inside the Extensions structure, too.
2019-02-12 18:22:36 +01:00
x509parse_crt:"302b3029a0030201028204deadbeef300d06092a864886f70d01010b0500300d310b3009060013045465737400":"":MBEDTLS_ERR_X509_INVALID_NAME+MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, valid issuer, no validity)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"302a3028a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, too much date data)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30493047a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301d170c303930313031303030303030170c30393132333132333539353900":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
X509 Certificate ASN1 (TBSCertificate, invalid from date)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30483046a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303000000000170c303931323331323300000000":"":MBEDTLS_ERR_X509_INVALID_DATE
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
X509 Certificate ASN1 (TBSCertificate, invalid to date)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30483046a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323300000000":"":MBEDTLS_ERR_X509_INVALID_DATE
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, valid validity, no subject)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30493047a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, valid subject, no pubkeyinfo)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30563054a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
X509 Certificate ASN1 (TBSCertificate, pubkey, no alg)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30583056a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743000":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, valid subject, unknown pk alg)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"30673065a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374300f300d06092a864886f70d0101000500":"":MBEDTLS_ERR_PK_UNKNOWN_PK_ALG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, pubkey, no bitstring)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"30673065a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374300f300d06092a864886f70d0101010500":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, pubkey, no bitstring data)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"30693067a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743011300d06092a864886f70d01010105000300":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_INVALID_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, pubkey, invalid bitstring start)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"306a3068a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743012300d06092a864886f70d0101010500030101":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_INVALID_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, pubkey, invalid internal bitstring length)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"306d306ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743015300d06092a864886f70d0101010500030400300000":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
X509 Certificate ASN1 (TBSCertificate, pubkey, invalid internal bitstring tag)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"306d306ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743015300d06092a864886f70d0101010500030400310000":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
X509 Certificate ASN1 (TBSCertificate, pubkey, invalid mbedtls_mpi)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"30743072a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301c300d06092a864886f70d0101010500030b0030080202ffff0302ffff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
X509 Certificate ASN1 (TBSCertificate, pubkey, total length mismatch)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"30753073a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301d300d06092a864886f70d0101010500030b0030080202ffff0202ffff00":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, pubkey, check failed)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"30743072a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301c300d06092a864886f70d0101010500030b0030080202ffff0202ffff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, pubkey, check failed, expanded length notation)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"308183308180a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210fffffffffffffffffffffffffffffffe0202ffff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate v3, Optional UIDs, Extensions not present)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"308183308180a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate v3, issuerID wrong tag)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Always return a high-level error code from X.509 module Some functions within the X.509 module return an ASN.1 low level error code where instead this error code should be wrapped by a high-level X.509 error code as in the bulk of the module. Specifically, the following functions are affected: - mbedtls_x509_get_ext() - x509_get_version() - x509_get_uid() This commit modifies these functions to always return an X.509 high level error code. Care has to be taken when adapting `mbetls_x509_get_ext()`: Currently, the callers `mbedtls_x509_crt_ext()` treat the return code `MBEDTLS_ERR_ASN1_UNEXPECTED_TAG` specially to gracefully detect and continue if the extension structure is not present. Wrapping the ASN.1 error with `MBEDTLS_ERR_X509_INVALID_EXTENSIONS` and adapting the check accordingly would mean that an unexpected tag somewhere down the extension parsing would be ignored by the caller. The way out of this is the following: Luckily, the extension structure is always the last field in the surrounding structure, so if there is some data remaining, it must be an Extension structure, so we don't need to deal with a tag mismatch gracefully in the first place. We may therefore wrap the return code from the initial call to `mbedtls_asn1_get_tag()` in `mbedtls_x509_get_ext()` by `MBEDTLS_ERR_X509_INVALID_EXTENSIONS` and simply remove the special treatment of `MBEDTLS_ERR_ASN1_UNEXPECTED_TAG` in the callers `x509_crl_get_ext()` and `x509_crt_get_ext()`. This renders `mbedtls_x509_get_ext()` unsuitable if it ever happened that an Extension structure is optional and does not occur at the end of its surrounding structure, but for CRTs and CRLs, it's fine. The following tests need to be adapted: - "TBSCertificate v3, issuerID wrong tag" The issuerID is optional, so if we look for its presence but find a different tag, we silently continue and try parsing the subjectID, and then the extensions. The tag '00' used in this test doesn't match either of these, and the previous code would hence return LENGTH_MISMATCH after unsucessfully trying issuerID, subjectID and Extensions. With the new code, any data remaining after issuerID and subjectID _must_ be Extension data, so we fail with UNEXPECTED_TAG when trying to parse the Extension data. - "TBSCertificate v3, UIDs, invalid length" The test hardcodes the expectation of MBEDTLS_ERR_ASN1_INVALID_LENGTH, which needs to be wrapped in MBEDTLS_ERR_X509_INVALID_FORMAT now. Fixes #2431.
2019-02-12 12:52:10 +01:00
x509parse_crt:"308184308181a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff00":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate v3, UIDs, no ext)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"308189308186a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bb":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
X509 Certificate ASN1 (TBSCertificate v3, UIDs, invalid length)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Always return a high-level error code from X.509 module Some functions within the X.509 module return an ASN.1 low level error code where instead this error code should be wrapped by a high-level X.509 error code as in the bulk of the module. Specifically, the following functions are affected: - mbedtls_x509_get_ext() - x509_get_version() - x509_get_uid() This commit modifies these functions to always return an X.509 high level error code. Care has to be taken when adapting `mbetls_x509_get_ext()`: Currently, the callers `mbedtls_x509_crt_ext()` treat the return code `MBEDTLS_ERR_ASN1_UNEXPECTED_TAG` specially to gracefully detect and continue if the extension structure is not present. Wrapping the ASN.1 error with `MBEDTLS_ERR_X509_INVALID_EXTENSIONS` and adapting the check accordingly would mean that an unexpected tag somewhere down the extension parsing would be ignored by the caller. The way out of this is the following: Luckily, the extension structure is always the last field in the surrounding structure, so if there is some data remaining, it must be an Extension structure, so we don't need to deal with a tag mismatch gracefully in the first place. We may therefore wrap the return code from the initial call to `mbedtls_asn1_get_tag()` in `mbedtls_x509_get_ext()` by `MBEDTLS_ERR_X509_INVALID_EXTENSIONS` and simply remove the special treatment of `MBEDTLS_ERR_ASN1_UNEXPECTED_TAG` in the callers `x509_crl_get_ext()` and `x509_crt_get_ext()`. This renders `mbedtls_x509_get_ext()` unsuitable if it ever happened that an Extension structure is optional and does not occur at the end of its surrounding structure, but for CRTs and CRLs, it's fine. The following tests need to be adapted: - "TBSCertificate v3, issuerID wrong tag" The issuerID is optional, so if we look for its presence but find a different tag, we silently continue and try parsing the subjectID, and then the extensions. The tag '00' used in this test doesn't match either of these, and the previous code would hence return LENGTH_MISMATCH after unsucessfully trying issuerID, subjectID and Extensions. With the new code, any data remaining after issuerID and subjectID _must_ be Extension data, so we fail with UNEXPECTED_TAG when trying to parse the Extension data. - "TBSCertificate v3, UIDs, invalid length" The test hardcodes the expectation of MBEDTLS_ERR_ASN1_INVALID_LENGTH, which needs to be wrapped in MBEDTLS_ERR_X509_INVALID_FORMAT now. Fixes #2431.
2019-02-12 12:52:10 +01:00
x509parse_crt:"308189308186a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa185aaa201bb":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate v3, ext empty)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"30818b308188a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba300":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate v3, ext length mismatch)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"30818e30818ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba303300000":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate v3, first ext invalid)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"30818f30818ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba30330023000":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
X509 Certificate ASN1 (TBSCertificate v3, first ext invalid tag)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"30819030818da0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba3043002310000":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
- Better handling of extension parsing
2009-07-27 23:34:45 +02:00
X509 Certificate ASN1 (TBSCertificate v3, ext BasicContraint tag, bool len missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"308198308195a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba30c300a30060603551d1301010100":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Better handling of extension parsing
2009-07-27 23:34:45 +02:00
X509 Certificate ASN1 (TBSCertificate v3, ext BasicContraint tag, data missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"308198308195a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba30c300a30080603551d1301010100":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Better handling of extension parsing
2009-07-27 23:34:45 +02:00
X509 Certificate ASN1 (TBSCertificate v3, ext BasicContraint tag, no octet present)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"308198308195a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba30d300b30090603551d1301010100":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
X509 Certificate ASN1 (TBSCertificate v3, ext BasicContraint tag, octet data missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"30819c308199a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba311300f300d0603551d130101010403300100":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
X509 Certificate ASN1 (TBSCertificate v3, ext BasicContraint tag, no pathlen)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"30819f30819ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba314301230100603551d130101010406300402010102":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
Guard from undefined behaviour in case of an INT_MAX max_pathlen When parsing a certificate with the basic constraints extension the max_pathlen that was read from it was incremented regardless of its value. However, if the max_pathlen is equal to INT_MAX (which is highly unlikely), an undefined behaviour would occur. This commit adds a check to ensure that such value is not accepted as valid. Relevant tests for INT_MAX and INT_MAX-1 are also introduced. Certificates added in this commit were generated using the test_suite_x509write, function test_x509_crt_check. Input data taken from the "Certificate write check Server1 SHA1" test case, so the generated files are like the "server1.crt", but with the "is_ca" field set to 1 and max_pathlen as described by the file name. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com> Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-04-14 15:49:52 +02:00
X509 Certificate ASN1 (inv extBasicConstraint, pathlen is INT_MAX)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
x509parse_crt_file:"data_files/server1_pathlen_int_max.crt":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
X509 Certificate ASN1 (pathlen is INT_MAX-1)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
x509parse_crt_file:"data_files/server1_pathlen_int_max-1.crt":0
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
X509 Certificate ASN1 (TBSCertificate v3, ext BasicContraint tag, octet len mismatch)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"3081a230819fa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba317301530130603551d130101010409300702010102010100":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
Fix uninitialised pointer dereference
2014-11-11 22:17:26 +01:00
X509 Certificate ASN1 (ExtKeyUsage, bad second tag)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"3081de3081dba003020102020900ebdbcd14105e1839300906072a8648ce3d0401300f310d300b0603550403130454657374301e170d3134313131313230353935345a170d3234313130383230353935345a300f310d300b06035504031304546573743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa321301f301d0603551d250416301406082b0601050507030107082b06010505070302":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Fix uninitialised pointer dereference
2014-11-11 22:17:26 +01:00
Fix memory leak with crafted X.509 certs
2014-11-11 23:11:16 +01:00
X509 Certificate ASN1 (SubjectAltName repeated)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Obey bounds of ASN.1 substructures When parsing a substructure of an ASN.1 structure, no field within the substructure must exceed the bounds of the substructure. Concretely, the `end` pointer passed to the ASN.1 parsing routines must be updated to point to the end of the substructure while parsing the latter. This was previously not the case for the routines - x509_get_attr_type_and_value(), - mbedtls_x509_get_crt_ext(), - mbedtls_x509_get_crl_ext(). These functions kept using the end of the parent structure as the `end` pointer and would hence allow substructure fields to cross the substructure boundary. This could lead to successful parsing of ill-formed X.509 CRTs. This commit fixes this. Care has to be taken when adapting `mbedtls_x509_get_crt_ext()` and `mbedtls_x509_get_crl_ext()`, as the underlying function `mbedtls_x509_get_ext()` returns `0` if no extensions are present but doesn't set the variable which holds the bounds of the Extensions structure in case the latter is present. This commit addresses this by returning early from `mbedtls_x509_get_crt_ext()` and `mbedtls_x509_get_crl_ext()` if parsing has reached the end of the input buffer. The following X.509 parsing tests need to be adapted: - "TBSCertificate, issuer two inner set datas" This test exercises the X.509 CRT parser with a Subject name which has two empty `AttributeTypeAndValue` structures. This is supposed to fail with `MBEDTLS_ERR_ASN1_OUT_OF_DATA` because the parser should attempt to parse the first structure and fail because of a lack of data. Previously, it failed to obey the (0-length) bounds of the first AttributeTypeAndValue structure and would try to interpret the beginning of the second AttributeTypeAndValue structure as the first field of the first AttributeTypeAndValue structure, returning an UNEXPECTED_TAG error. - "TBSCertificate, issuer, no full following string" This test exercises the parser's behaviour on an AttributeTypeAndValue structure which contains more data than expected; it should therefore fail with MBEDTLS_ERR_ASN1_LENGTH_MISMATCH. Because of the missing bounds check, it previously failed with UNEXPECTED_TAG because it interpreted the remaining byte in the first AttributeTypeAndValue structure as the first byte in the second AttributeTypeAndValue structure. - "SubjectAltName repeated" This test should exercise two SubjectAltNames extensions in succession, but a wrong length values makes the second SubjectAltNames extension appear outside of the Extensions structure. With the new bounds in place, this therefore fails with a LENGTH_MISMATCH error. This commit adapts the test data to put the 2nd SubjectAltNames extension inside the Extensions structure, too.
2019-02-12 18:22:36 +01:00
x509parse_crt:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS
Forbid repeated X.509 extensions
2014-11-12 17:47:28 +01:00
X509 Certificate ASN1 (ExtKeyUsage repeated)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"3081fd3081faa003020102020900ebdbcd14105e1839300906072a8648ce3d0401300f310d300b0603550403130454657374301e170d3134313131313230353935345a170d3234313130383230353935345a300f310d300b06035504031304546573743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa340303e301d0603551d250416301406082b0601050507030106082b06010505070302301d0603551d250416301406082b0601050507030106082b06010505070302":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS
Fix memory leak with crafted X.509 certs
2014-11-11 23:11:16 +01:00
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (correct pubkey, no sig_alg)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"308183308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (sig_alg mismatch)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"308192308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0102020500":"":MBEDTLS_ERR_X509_SIG_MISMATCH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (sig_alg, no sig)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"308192308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (signature, invalid sig data)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"308195308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030100":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_INVALID_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (signature, data left)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"308197308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff00":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Correct name of X.509 parsing test for well-formed, ill-signed CRT
2019-06-03 15:28:43 +02:00
X509 Certificate ASN1 (well-formed)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
- Added support for GeneralizedTime in X509 certificates
2010-02-18 22:26:15 +01:00
X509 Certificate ASN1 (GeneralizedTime instead of UTCTime)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"308198308182a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301e180e3230313030313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2010-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added support for GeneralizedTime in X509 certificates
2010-02-18 22:26:15 +01:00
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate ASN1 (Name with X520 CN)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b0603550403130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: CN=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate ASN1 (Name with X520 C)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b0603550406130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: C=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate ASN1 (Name with X520 L)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b0603550407130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: L=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate ASN1 (Name with X520 ST)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b0603550408130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ST=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate ASN1 (Name with X520 O)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b060355040a130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: O=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate ASN1 (Name with X520 OU)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b060355040b130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: OU=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate ASN1 (Name with unknown X520 part)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b06035504de130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Support composite RDNs in X.509 certs parsing
2015-02-04 18:11:55 +01:00
X509 Certificate ASN1 (Name with composite RDN)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Support composite RDNs in X.509 certs parsing
2015-02-04 18:11:55 +01:00
x509parse_crt:"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":"cert. version \: 3\nserial number \: 4C\:20\:E3\:BD\nissuer name \: C=US, ST=CA, O=Internet Widgits Pty Ltd, CN=Frankencert CA\nsubject name \: C=US, ST=Washington, ??=US, ??=Delaware, O=Authorize.Net LLC, ??=Private Organization, serialNumber=4369191 + CN=www.authorize.net, L=San Francisco\nissued on \: 2013-08-02 15\:14\:37\nexpires on \: 2015-08-17 05\:54\:31\nsigned using \: RSA with SHA1\nRSA key size \: 1024 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate ASN1 (Name with PKCS9 email)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"30819f308189a0030201008204deadbeef300d06092a864886f70d01010b050030153113301106092a864886f70d010901130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: emailAddress=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate ASN1 (Name with unknown PKCS9 part)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"30819f308189a0030201008204deadbeef300d06092a864886f70d01010b050030153113301106092a864886f70d0109ab130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Certificates with EC key and/or sig parsed
2013-07-10 16:54:29 +02:00
X509 Certificate ASN1 (ECDSA signature, RSA key)
Added needed ECDSA dependencies to test_suite_x509parse.data
2016-08-07 10:56:02 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_ECDSA_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"3081e630819e020103300906072a8648ce3d0401300f310d300b0603550403130454657374301e170d3133303731303039343631385a170d3233303730383039343631385a300f310d300b0603550403130454657374304c300d06092a864886f70d0101010500033b003038023100e8f546061d3b49bc2f6b7524b7ea4d73a8d5293ee8c64d9407b70b5d16baebc32b8205591eab4e1eb57e9241883701250203010001300906072a8648ce3d0401033800303502186e18209afbed14a0d9a796efcad68891e3ccd5f75815c833021900e92b4fd460b1994693243b9ffad54729de865381bda41d25":"cert. version \: 1\nserial number \: 03\nissuer name \: CN=Test\nsubject name \: CN=Test\nissued on \: 2013-07-10 09\:46\:18\nexpires on \: 2023-07-08 09\:46\:18\nsigned using \: ECDSA with SHA1\nRSA key size \: 384 bits\n":0
Add test certificate signed with ECDSA
2013-07-10 12:20:54 +02:00
Certificates with EC key and/or sig parsed
2013-07-10 16:54:29 +02:00
X509 Certificate ASN1 (ECDSA signature, EC key)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP192R1_ENABLED:MBEDTLS_SHA1_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"3081eb3081a3020900f41534662ec7e912300906072a8648ce3d0401300f310d300b0603550403130454657374301e170d3133303731303039343031395a170d3233303730383039343031395a300f310d300b06035504031304546573743049301306072a8648ce3d020106082a8648ce3d030101033200042137969fabd4e370624a0e1a33e379cab950cce00ef8c3c3e2adaeb7271c8f07659d65d3d777dcf21614363ae4b6e617300906072a8648ce3d04010338003035021858cc0f957946fe6a303d92885a456aa74c743c7b708cbd37021900fe293cac21af352d16b82eb8ea54e9410b3abaadd9f05dd6":"cert. version \: 1\nserial number \: F4\:15\:34\:66\:2E\:C7\:E9\:12\nissuer name \: CN=Test\nsubject name \: CN=Test\nissued on \: 2013-07-10 09\:40\:19\nexpires on \: 2023-07-08 09\:40\:19\nsigned using \: ECDSA with SHA1\nEC key size \: 192 bits\n":0
Certificates with EC key and/or sig parsed
2013-07-10 16:54:29 +02:00
X509 Certificate ASN1 (RSA signature, EC key)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP192R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"3081e430819f020104300d06092a864886f70d0101050500300f310d300b0603550403130454657374301e170d3133303731303135303233375a170d3233303730383135303233375a300f310d300b06035504031304546573743049301306072a8648ce3d020106082a8648ce3d03010103320004e962551a325b21b50cf6b990e33d4318fd16677130726357a196e3efe7107bcb6bdc6d9db2a4df7c964acfe81798433d300d06092a864886f70d01010505000331001a6c18cd1e457474b2d3912743f44b571341a7859a0122774a8e19a671680878936949f904c9255bdd6fffdb33a7e6d8":"cert. version \: 1\nserial number \: 04\nissuer name \: CN=Test\nsubject name \: CN=Test\nissued on \: 2013-07-10 15\:02\:37\nexpires on \: 2023-07-08 15\:02\:37\nsigned using \: RSA with SHA1\nEC key size \: 192 bits\n":0
Certificates with EC key and/or sig parsed
2013-07-10 16:54:29 +02:00
Add CRT DER tests with incorrect version
2017-03-09 16:29:07 +01:00
X509 Certificate ASN1 (invalid version 3)
x509parse_crt:"30173015a0030201038204deadbeef30080604cafed00d0500":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
X509 Certificate ASN1 (invalid version overflow)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crt:"301a3018a00602047fffffff8204deadbeef30080604cafed00d0500":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
Add CRT DER tests with incorrect version
2017-03-09 16:29:07 +01:00
Add regression test for parsing subjectAltNames
2017-11-07 21:16:19 +01:00
X509 Certificate ASN1 (invalid SubjectAltNames tag)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
x509parse_crt:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add regression test for parsing subjectAltNames
2017-11-07 21:16:19 +01:00
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (Incorrect first tag)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"":"":MBEDTLS_ERR_X509_INVALID_FORMAT
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (Correct first tag, data length does not match)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"300000":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, tag missing)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"3000":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, version tag len missing)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"3003300102":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, version correct, alg missing)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"30053003020100":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, alg correct, incorrect version)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"300b3009020102300406000500":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, correct version, sig_oid1 unknown)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"300b3009020100300406000500":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, sig_oid1 id unknown)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"30143012020100300d06092a864886f70d01010f0500":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, sig_oid1 correct, issuer missing)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"30143012020100300d06092a864886f70d01010e0500":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, issuer set missing)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"30163014020100300d06092a864886f70d01010e05003000":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, correct issuer, thisUpdate missing)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"30253023020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, correct thisUpdate, nextUpdate missing, entries length missing)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"30343032020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c30393031303130303030303030":"":MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, entries present, invalid sig_alg)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"304a3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c30383132333132333539353900":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, entries present, date in entry invalid)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"304a3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd190c30383132333132333539353900":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, sig_alg present, sig_alg does not match)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"30583047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010d0500":"":MBEDTLS_ERR_X509_SIG_MISMATCH
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
X509 CRL ASN1 (TBSCertList, sig present, len mismatch)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"305d3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010e05000302000100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
Add the decomposition of the base case as a comment Put the base good case first, then the bad cases derived from it. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-08-06 16:05:35 +02:00
# 305c
# 3047 tbsCertList TBSCertList
# 020100 version INTEGER OPTIONAL
# 300d signatureAlgorithm AlgorithmIdentifi
# 06092a864886f70d01010e
# 0500
# 300f issuer Name
# 310d300b0603550403130441424344
# 170c303930313031303030303030 thisUpdate Time
# 3014 revokedCertificates
# 3012 entry 1
# 8202abcd userCertificate CertificateSerialNum
# 170c303831323331323335393539 revocationDate Time
# 300d signatureAlgorithm AlgorithmIdentifi
# 06092a864886f70d01010e
# 0500
# 03020001 signatureValue BIT STRING
# The subsequent TBSCertList negative tests remove or modify some elements.
X509 CRL ASN1 (TBSCertList, sig present)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crl:"305c3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010e050003020001":"CRL version \: 1\nissuer name \: CN=ABCD\nthis update \: 2009-01-01 00\:00\:00\nnext update \: 0000-00-00 00\:00\:00\nRevoked certificates\:\nserial number\: AB\:CD revocation date\: 2008-12-31 23\:59\:59\nsigned using \: RSA with SHA-224\n":0
x509parse_crl: more negative test cases Add a few more negative test cases for mbedtls_x509_crl_parse. The test data is manually adapted from the existing positive test case "X509 CRL ASN1 (TBSCertList, sig present)" which decomposes as 305c 3047 tbsCertList TBSCertList 020100 version INTEGER OPTIONAL 300d signatureAlgorithm AlgorithmIdentifier 06092a864886f70d01010e 0500 300f issuer Name 310d300b0603550403130441424344 170c303930313031303030303030 thisUpdate Time 3014 revokedCertificates 3012 entry 1 8202abcd userCertificate CertificateSerialNumber 170c303831323331323335393539 revocationDate Time 300d signatureAlgorithm AlgorithmIdentifier 06092a864886f70d01010e 0500 03020001 signatureValue BIT STRING Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-07-16 18:18:22 +02:00
X509 CRL ASN1 (TBSCertList, signatureValue missing)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crl:"30583047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010e0500":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRL ASN1 (TBSCertList, signatureAlgorithm missing)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crl:"30493047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRL ASN1 (TBSCertList, single empty entry at end)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crl:"30373035020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c30393031303130303030303030023000":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRL ASN1 (TBSCertList, good entry then empty entry at end)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crl:"304b3049020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301630128202abcd170c3038313233313233353935393000":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRL ASN1 (TBSCertList, missing time in entry)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crl:"304e3039020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300630048202abcd300d06092a864886f70d01010e050003020001":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRL ASN1 (TBSCertList, missing time in entry at end)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crl:"303b3039020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300630048202abcd":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRL ASN1 (TBSCertList, invalid tag for time in entry)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crl:"305c3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd190c303831323331323335393539300d06092a864886f70d01010e050003020001":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
X509 CRL ASN1 (TBSCertList, invalid tag for serial)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crl:"305c3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128402abcd170c303831323331323335393539300d06092a864886f70d01010e050003020001":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
X509 CRL ASN1 (TBSCertList, no entries)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509parse_crl:"30463031020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300d06092a864886f70d01010e050003020001":"CRL version \: 1\nissuer name \: CN=ABCD\nthis update \: 2009-01-01 00\:00\:00\nnext update \: 0000-00-00 00\:00\:00\nRevoked certificates\:\nsigned using \: RSA with SHA-224\n":0
Add tests for x509_crt_parse_path()
2013-11-26 16:43:39 +01:00
Add CRL DER tests with incorrect version
2017-03-07 12:11:12 +01:00
X509 CRL ASN1 (invalid version 2)
x509parse_crl:"30463031020102300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300d06092a864886f70d01010e050003020001":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
X509 CRL ASN1 (invalid version overflow)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509parse_crl:"3049303102047fffffff300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300d06092a864886f70d01010e050003020001":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
Add CRL DER tests with incorrect version
2017-03-07 12:11:12 +01:00
x509: CRL: add tests for malformed extensions This covers all lines added in the previous commit. Coverage was tested using: make CFLAGS='--coverage -g3 -O0' (cd tests && ./test_suite_x509parse) make lcov firefox Coverage/index.html # then visual check Test data was generated by taking a copy of tests/data_files/crl-idp.pem, encoding it as hex, and then manually changing the values of some bytes to achieve the desired errors, using https://lapo.it/asn1js/ for help in locating the desired bytes.
2018-03-14 11:34:29 +01:00
X509 CRL ASN1 (extension seq too long, crl-idp.pem byte 121)
Add missing dependencies in test_suite_x509parse Found by depends-hashes.pl and depends-pkgalgs.pl.
2018-03-23 00:55:57 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509: CRL: add tests for malformed extensions This covers all lines added in the previous commit. Coverage was tested using: make CFLAGS='--coverage -g3 -O0' (cd tests && ./test_suite_x509parse) make lcov firefox Coverage/index.html # then visual check Test data was generated by taking a copy of tests/data_files/crl-idp.pem, encoding it as hex, and then manually changing the values of some bytes to achieve the desired errors, using https://lapo.it/asn1js/ for help in locating the desired bytes.
2018-03-14 11:34:29 +01:00
x509parse_crl:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRL ASN1 (extension oid too long, crl-idp.pem byte 123)
Add missing dependencies in test_suite_x509parse Found by depends-hashes.pl and depends-pkgalgs.pl.
2018-03-23 00:55:57 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509: CRL: add tests for malformed extensions This covers all lines added in the previous commit. Coverage was tested using: make CFLAGS='--coverage -g3 -O0' (cd tests && ./test_suite_x509parse) make lcov firefox Coverage/index.html # then visual check Test data was generated by taking a copy of tests/data_files/crl-idp.pem, encoding it as hex, and then manually changing the values of some bytes to achieve the desired errors, using https://lapo.it/asn1js/ for help in locating the desired bytes.
2018-03-14 11:34:29 +01:00
x509parse_crl:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRL ASN1 (extension critical invalid length, crl-idp.pem byte 128)
Add missing dependencies in test_suite_x509parse Found by depends-hashes.pl and depends-pkgalgs.pl.
2018-03-23 00:55:57 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509: CRL: add tests for malformed extensions This covers all lines added in the previous commit. Coverage was tested using: make CFLAGS='--coverage -g3 -O0' (cd tests && ./test_suite_x509parse) make lcov firefox Coverage/index.html # then visual check Test data was generated by taking a copy of tests/data_files/crl-idp.pem, encoding it as hex, and then manually changing the values of some bytes to achieve the desired errors, using https://lapo.it/asn1js/ for help in locating the desired bytes.
2018-03-14 11:34:29 +01:00
x509parse_crl:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
X509 CRL ASN1 (extension data too long, crl-idp.pem byte 131)
Add missing dependencies in test_suite_x509parse Found by depends-hashes.pl and depends-pkgalgs.pl.
2018-03-23 00:55:57 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509: CRL: add tests for malformed extensions This covers all lines added in the previous commit. Coverage was tested using: make CFLAGS='--coverage -g3 -O0' (cd tests && ./test_suite_x509parse) make lcov firefox Coverage/index.html # then visual check Test data was generated by taking a copy of tests/data_files/crl-idp.pem, encoding it as hex, and then manually changing the values of some bytes to achieve the desired errors, using https://lapo.it/asn1js/ for help in locating the desired bytes.
2018-03-14 11:34:29 +01:00
x509parse_crl:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRL ASN1 (extension data too short, crl-idp.pem byte 131)
Add missing dependencies in test_suite_x509parse Found by depends-hashes.pl and depends-pkgalgs.pl.
2018-03-23 00:55:57 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509: CRL: add tests for malformed extensions This covers all lines added in the previous commit. Coverage was tested using: make CFLAGS='--coverage -g3 -O0' (cd tests && ./test_suite_x509parse) make lcov firefox Coverage/index.html # then visual check Test data was generated by taking a copy of tests/data_files/crl-idp.pem, encoding it as hex, and then manually changing the values of some bytes to achieve the desired errors, using https://lapo.it/asn1js/ for help in locating the desired bytes.
2018-03-14 11:34:29 +01:00
x509parse_crl:"308201b330819c020101300d06092a864886f70d01010b0500303b310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c3119301706035504031310506f6c617253534c2054657374204341170d3138303331343037333134385a170d3238303331343037333134385aa02d302b30290603551d1c0101ff041e301da01ba0198617687474703a2f2f706b692e6578616d706c652e636f6d2f300d06092a864886f70d01010b05000382010100b3fbe9d586eaf4b8ff60cf8edae06a85135db78f78198498719725b5b403c0b803c2c150f52faae7306d6a7871885dc2e9dc83a164bac7263776474ef642b660040b35a1410ac291ac8f6f18ab85e7fd6e22bd1af1c41ca95cf2448f6e2b42a018493dfc03c6b6aa1b9e3fe7b76af2182fb2121db4166bf0167d6f379c5a58adee5082423434d97be2909f5e7488053f996646db10dd49782626da53ad8eada01813c031b2bacdb0203bc017aac1735951a11d013ee4d1d5f7143ccbebf2371e66a1bec6e1febe69148f50784eef8adbb66664c96196d7e0c0bcdc807f447b54e058f37642a3337995bfbcd332208bd6016936705c82263eabd7affdba92fae3":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
x509: CRL: add tests for non-critical extension The 'critical' boolean can be set to false in two ways: - by leaving it implicit (test data generated by openssl) - by explicitly setting it to false (generated by hand)
2018-03-14 12:23:56 +01:00
X509 CRL ASN1 (extension not critical explicit, crl-idp.pem byte 129)
Add missing dependencies in test_suite_x509parse Found by depends-hashes.pl and depends-pkgalgs.pl.
2018-03-23 00:55:57 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509: CRL: add tests for non-critical extension The 'critical' boolean can be set to false in two ways: - by leaving it implicit (test data generated by openssl) - by explicitly setting it to false (generated by hand)
2018-03-14 12:23:56 +01:00
x509parse_crl:"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":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2018-03-14 07\:31\:48\nnext update \: 2028-03-14 07\:31\:48\nRevoked certificates\:\nsigned using \: RSA with SHA-256\n":0
Add tests for x509_crt_parse_path()
2013-11-26 16:43:39 +01:00
X509 CRT parse path #2 (one cert)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
mbedtls_x509_crt_parse_path:"data_files/dir1":0:1
Add tests for x509_crt_parse_path()
2013-11-26 16:43:39 +01:00
X509 CRT parse path #3 (two certs)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
mbedtls_x509_crt_parse_path:"data_files/dir2":0:2
Add tests for x509_crt_parse_path()
2013-11-26 16:43:39 +01:00
X509 CRT parse path #4 (two certs, one non-cert)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
mbedtls_x509_crt_parse_path:"data_files/dir3":1:2
Test and fix x509_oid functions
2014-03-28 16:06:35 +01:00
Add test for limit on intermediate certificates Inspired by test code provided by Nicholas Wilson in PR #351. The test will fail if someone sets MAX_INTERMEDIATE_CA to a value larger than 18 (default is 8), which is hopefully unlikely and can easily be fixed by running long.sh again with a larger value if it ever happens. Current behaviour is suboptimal as flags are not set, but currently the goal is only to document/test existing behaviour.
2017-06-05 13:49:44 +02:00
X509 CRT verify long chain (max intermediate CA, trusted)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
mbedtls_x509_crt_verify_max:"data_files/dir-maxpath/00.crt":"data_files/dir-maxpath":MBEDTLS_X509_MAX_INTERMEDIATE_CA:0:0
X509 CRT verify long chain (max intermediate CA, untrusted)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
mbedtls_x509_crt_verify_max:"data_files/test-ca2.crt":"data_files/dir-maxpath":MBEDTLS_X509_MAX_INTERMEDIATE_CA-1:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED
X509 CRT verify long chain (max intermediate CA + 1)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Only return VERIFY_FAILED from a single point Everything else is a fatal error. Also improve documentation about that for the vrfy callback.
2017-06-26 10:11:49 +02:00
mbedtls_x509_crt_verify_max:"data_files/dir-maxpath/00.crt":"data_files/dir-maxpath":MBEDTLS_X509_MAX_INTERMEDIATE_CA+1:MBEDTLS_ERR_X509_FATAL_ERROR:-1
Add test for limit on intermediate certificates Inspired by test code provided by Nicholas Wilson in PR #351. The test will fail if someone sets MAX_INTERMEDIATE_CA to a value larger than 18 (default is 8), which is hopefully unlikely and can easily be fixed by running long.sh again with a larger value if it ever happens. Current behaviour is suboptimal as flags are not set, but currently the goal is only to document/test existing behaviour.
2017-06-05 13:49:44 +02:00
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 16:17:27 +02:00
X509 CRT verify chain #1 (zero pathlen intermediate)
Added test case for pathlen constrains in intermediate certificates
2015-10-11 10:25:22 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert14.crt data_files/dir4/cert13.crt data_files/dir4/cert12.crt":"data_files/dir4/cert11.crt":MBEDTLS_X509_BADCERT_NOT_TRUSTED:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"":0
Added test case for pathlen constrains in intermediate certificates
2015-10-11 10:25:22 +02:00
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 16:17:27 +02:00
X509 CRT verify chain #2 (zero pathlen root)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert23.crt data_files/dir4/cert22.crt":"data_files/dir4/cert21.crt":MBEDTLS_X509_BADCERT_NOT_TRUSTED:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"":0
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 16:17:27 +02:00
X509 CRT verify chain #3 (nonzero pathlen root)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert34.crt data_files/dir4/cert33.crt data_files/dir4/cert32.crt":"data_files/dir4/cert31.crt":MBEDTLS_X509_BADCERT_NOT_TRUSTED:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"":0
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 16:17:27 +02:00
X509 CRT verify chain #4 (nonzero pathlen intermediate)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert45.crt data_files/dir4/cert44.crt data_files/dir4/cert43.crt data_files/dir4/cert42.crt":"data_files/dir4/cert41.crt":MBEDTLS_X509_BADCERT_NOT_TRUSTED:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"":0
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 16:17:27 +02:00
X509 CRT verify chain #5 (nonzero maxpathlen intermediate)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert54.crt data_files/dir4/cert53.crt data_files/dir4/cert52.crt":"data_files/dir4/cert51.crt":0:0:"":0
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 16:17:27 +02:00
X509 CRT verify chain #6 (nonzero maxpathlen root)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert63.crt data_files/dir4/cert62.crt":"data_files/dir4/cert61.crt":0:0:"":0
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 16:17:27 +02:00
X509 CRT verify chain #7 (maxpathlen root, self signed in path)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert74.crt data_files/dir4/cert73.crt data_files/dir4/cert72.crt":"data_files/dir4/cert71.crt":0:0:"":0
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 16:17:27 +02:00
X509 CRT verify chain #8 (self signed maxpathlen root)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert61.crt data_files/dir4/cert63.crt data_files/dir4/cert62.crt":"data_files/dir4/cert61.crt":0:0:"":0
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 16:17:27 +02:00
Add test case for root with max_pathlen=0 This was already working but not tested so far (Test case from previous commit still failing.) Test certificates generated with: programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert91.key programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert92.key programs/x509/cert_write serial=91 output_file=cert91.crt is_ca=1 \ issuer_key=cert91.key issuer_name="CN=Root 9,O=mbed TLS,C=UK" \ selfsign=1 max_pathlen=0 programs/x509/cert_write serial=92 output_file=cert92.crt \ issuer_key=cert91.key issuer_name="CN=Root 9,O=mbed TLS,C=UK" \ subject_key=cert92.key subject_name="CN=EE 92,O=mbed TLS,C=UK" mv cert9?.crt tests/data_files/dir4 rm cert9?.key
2015-11-19 10:52:12 +01:00
X509 CRT verify chain #9 (zero pathlen first intermediate, valid)
Add test case for first intermediate max_pathlen=0 !!! This test case is currently failing !!! (See fix in next-next commit.) Test certificates generated with the following script: programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert81.key programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert82.key programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert83.key programs/x509/cert_write serial=81 output_file=cert81.crt is_ca=1 \ issuer_key=cert81.key issuer_name="CN=Root 8,O=mbed TLS,C=UK" \ selfsign=1 programs/x509/cert_write serial=82 output_file=cert82.crt is_ca=1 \ issuer_key=cert81.key issuer_name="CN=Root 8,O=mbed TLS,C=UK" \ subject_key=cert82.key subject_name="CN=Int 82,O=mbed TLS,C=UK" \ max_pathlen=0 programs/x509/cert_write serial=83 output_file=cert83.crt \ issuer_key=cert82.key issuer_name="CN=Int 82,O=mbed TLS,C=UK" \ subject_key=cert83.key subject_name="CN=EE 83,O=mbed TLS,C=UK" mv cert8?.crt tests/data_files/dir4 rm cert8?.key
2015-11-19 10:46:07 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert83.crt data_files/dir4/cert82.crt":"data_files/dir4/cert81.crt":0:0:"":0
Add test case for first intermediate max_pathlen=0 !!! This test case is currently failing !!! (See fix in next-next commit.) Test certificates generated with the following script: programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert81.key programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert82.key programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert83.key programs/x509/cert_write serial=81 output_file=cert81.crt is_ca=1 \ issuer_key=cert81.key issuer_name="CN=Root 8,O=mbed TLS,C=UK" \ selfsign=1 programs/x509/cert_write serial=82 output_file=cert82.crt is_ca=1 \ issuer_key=cert81.key issuer_name="CN=Root 8,O=mbed TLS,C=UK" \ subject_key=cert82.key subject_name="CN=Int 82,O=mbed TLS,C=UK" \ max_pathlen=0 programs/x509/cert_write serial=83 output_file=cert83.crt \ issuer_key=cert82.key issuer_name="CN=Int 82,O=mbed TLS,C=UK" \ subject_key=cert83.key subject_name="CN=EE 83,O=mbed TLS,C=UK" mv cert8?.crt tests/data_files/dir4 rm cert8?.key
2015-11-19 10:46:07 +01:00
Add test case for root with max_pathlen=0 This was already working but not tested so far (Test case from previous commit still failing.) Test certificates generated with: programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert91.key programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert92.key programs/x509/cert_write serial=91 output_file=cert91.crt is_ca=1 \ issuer_key=cert91.key issuer_name="CN=Root 9,O=mbed TLS,C=UK" \ selfsign=1 max_pathlen=0 programs/x509/cert_write serial=92 output_file=cert92.crt \ issuer_key=cert91.key issuer_name="CN=Root 9,O=mbed TLS,C=UK" \ subject_key=cert92.key subject_name="CN=EE 92,O=mbed TLS,C=UK" mv cert9?.crt tests/data_files/dir4 rm cert9?.key
2015-11-19 10:52:12 +01:00
X509 CRT verify chain #10 (zero pathlen root, valid)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert92.crt":"data_files/dir4/cert91.crt":0:0:"":0
Add test case for root with max_pathlen=0 This was already working but not tested so far (Test case from previous commit still failing.) Test certificates generated with: programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert91.key programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert92.key programs/x509/cert_write serial=91 output_file=cert91.crt is_ca=1 \ issuer_key=cert91.key issuer_name="CN=Root 9,O=mbed TLS,C=UK" \ selfsign=1 max_pathlen=0 programs/x509/cert_write serial=92 output_file=cert92.crt \ issuer_key=cert91.key issuer_name="CN=Root 9,O=mbed TLS,C=UK" \ subject_key=cert92.key subject_name="CN=EE 92,O=mbed TLS,C=UK" mv cert9?.crt tests/data_files/dir4 rm cert9?.key
2015-11-19 10:52:12 +01:00
Set deterministic flags for NULL profile Previously flags was left to whatever value it had before. It's cleaner to make sure it has a definite value, and all bits set looks like the safest way for when it went very wrong.
2017-05-23 10:13:40 +02:00
X509 CRT verify chain #11 (valid chain, missing profile)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert92.crt":"data_files/dir4/cert91.crt":-1:MBEDTLS_ERR_X509_BAD_INPUT_DATA:"nonesuch":0
Set deterministic flags for NULL profile Previously flags was left to whatever value it had before. It's cleaner to make sure it has a definite value, and all bits set looks like the safest way for when it went very wrong.
2017-05-23 10:13:40 +02:00
Add tests for profile enforcement Now all checks related to profile are covered in: - verify_with_profile() - verify_child() - verify_top() (that's 10 lines that were previously not covered) Leaving aside profile enforcement in CRLs for now, as the focus is on preparing to refactor cert verification.
2017-05-23 11:29:29 +02:00
X509 CRT verify chain #12 (suiteb profile, RSA root)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP192R1_ENABLED:MBEDTLS_SHA1_C
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/server3.crt":"data_files/test-ca.crt":MBEDTLS_X509_BADCERT_BAD_MD|MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"suiteb":0
Add tests for profile enforcement Now all checks related to profile are covered in: - verify_with_profile() - verify_child() - verify_top() (that's 10 lines that were previously not covered) Leaving aside profile enforcement in CRLs for now, as the focus is on preparing to refactor cert verification.
2017-05-23 11:29:29 +02:00
X509 CRT verify chain #13 (RSA only profile, EC root)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/server4.crt":"data_files/test-ca2.crt":MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"rsa3072":0
Add tests for profile enforcement Now all checks related to profile are covered in: - verify_with_profile() - verify_child() - verify_top() (that's 10 lines that were previously not covered) Leaving aside profile enforcement in CRLs for now, as the focus is on preparing to refactor cert verification.
2017-05-23 11:29:29 +02:00
Add test for profile on trusted EE cert
2017-06-27 13:26:43 +02:00
X509 CRT verify chain #13 (RSA only profile, EC trusted EE)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
mbedtls_x509_crt_verify_chain:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"rsa3072":0
Add tests for profile enforcement Now all checks related to profile are covered in: - verify_with_profile() - verify_child() - verify_top() (that's 10 lines that were previously not covered) Leaving aside profile enforcement in CRLs for now, as the focus is on preparing to refactor cert verification.
2017-05-23 11:29:29 +02:00
X509 CRT verify chain #14 (RSA-3072 profile, root key too small)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/server1.crt":"data_files/test-ca.crt":MBEDTLS_X509_BADCERT_BAD_MD|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"rsa3072":0
Add tests for profile enforcement Now all checks related to profile are covered in: - verify_with_profile() - verify_child() - verify_top() (that's 10 lines that were previously not covered) Leaving aside profile enforcement in CRLs for now, as the focus is on preparing to refactor cert verification.
2017-05-23 11:29:29 +02:00
X509 CRT verify chain #15 (suiteb profile, rsa intermediate)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/server7.crt data_files/test-int-ca.crt":"data_files/test-ca2.crt":MBEDTLS_X509_BADCERT_BAD_PK:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"suiteb":0
Add tests for profile enforcement Now all checks related to profile are covered in: - verify_with_profile() - verify_child() - verify_top() (that's 10 lines that were previously not covered) Leaving aside profile enforcement in CRLs for now, as the focus is on preparing to refactor cert verification.
2017-05-23 11:29:29 +02:00
X509 CRT verify chain #16 (RSA-only profile, EC intermediate)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/server8.crt data_files/test-int-ca2.crt":"data_files/test-ca.crt":MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"rsa3072":0
Add tests for profile enforcement Now all checks related to profile are covered in: - verify_with_profile() - verify_child() - verify_top() (that's 10 lines that were previously not covered) Leaving aside profile enforcement in CRLs for now, as the focus is on preparing to refactor cert verification.
2017-05-23 11:29:29 +02:00
X509 CRT verify chain #17 (SHA-512 profile)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/server7.crt data_files/test-int-ca.crt":"data_files/test-ca2.crt":MBEDTLS_X509_BADCERT_BAD_MD:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"sha512":0
Add tests for profile enforcement Now all checks related to profile are covered in: - verify_with_profile() - verify_child() - verify_top() (that's 10 lines that were previously not covered) Leaving aside profile enforcement in CRLs for now, as the focus is on preparing to refactor cert verification.
2017-05-23 11:29:29 +02:00
Add tests for fatal error in vrfy callback This shows inconsistencies in how flags are handled when callback fails: - sometimes the flags set by the callback are transmitted, sometimes not - when the cert if not trusted, sometimes BADCERT_NOT_TRUSTED is set, sometimes not This adds coverage for 9 lines and 9 branches. Now all lines related to callback failure are covered.
2017-05-23 12:58:53 +02:00
X509 CRT verify chain #18 (len=1, vrfy fatal on depth 1)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA512_C
mbedtls_x509_crt_verify_chain:"data_files/server5.crt":"data_files/test-ca2.crt":-1:-2:"":2
X509 CRT verify chain #19 (len=0, vrfy fatal on depth 0)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA512_C
mbedtls_x509_crt_verify_chain:"data_files/server5.crt":"data_files/test-ca2.crt":-1:-1:"":1
X509 CRT verify chain #20 (len=1, vrfy fatal on depth 0)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA512_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
mbedtls_x509_crt_verify_chain:"data_files/server5.crt":"data_files/test-ca.crt":-1:-1:"":1
X509 CRT verify chain #21 (len=3, vrfy fatal on depth 3)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
mbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca.crt":-1:-4:"":8
X509 CRT verify chain #22 (len=3, vrfy fatal on depth 2)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
mbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca.crt":-1:-3:"":4
X509 CRT verify chain #23 (len=3, vrfy fatal on depth 1)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
mbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca.crt":-1:-2:"":2
X509 CRT verify chain #24 (len=3, vrfy fatal on depth 0)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
mbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca.crt":-1:-1:"":1
X509 CRT verify chain #25 (len=3, vrfy fatal on depth 3, untrusted)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
mbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca2.crt":-1:-4:"":8
Test and fix x509_oid functions
2014-03-28 16:06:35 +01:00
X509 OID description #1
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_oid_desc:"2b06010505070301":"TLS Web Server Authentication"
Test and fix x509_oid functions
2014-03-28 16:06:35 +01:00
X509 OID description #2
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_oid_desc:"2b0601050507030f":"notfound"
Test and fix x509_oid functions
2014-03-28 16:06:35 +01:00
X509 OID description #3
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_oid_desc:"2b0601050507030100":"notfound"
Test and fix x509_oid functions
2014-03-28 16:06:35 +01:00
X509 OID numstring #1 (wide buffer)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_oid_numstr:"2b06010505070301":"1.3.6.1.5.5.7.3.1":20:17
Test and fix x509_oid functions
2014-03-28 16:06:35 +01:00
X509 OID numstring #2 (buffer just fits)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_oid_numstr:"2b06010505070301":"1.3.6.1.5.5.7.3.1":18:17
Test and fix x509_oid functions
2014-03-28 16:06:35 +01:00
X509 OID numstring #3 (buffer too small)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_oid_numstr:"2b06010505070301":"1.3.6.1.5.5.7.3.1":17:MBEDTLS_ERR_OID_BUF_TOO_SMALL
Test and fix x509_oid functions
2014-03-28 16:06:35 +01:00
X509 OID numstring #4 (larger number)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_oid_numstr:"2a864886f70d":"1.2.840.113549":15:14
Test and fix x509_oid functions
2014-03-28 16:06:35 +01:00
X509 OID numstring #5 (arithmetic overflow)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_oid_numstr:"2a8648f9f8f7f6f5f4f3f2f1f001":"":100:MBEDTLS_ERR_OID_BUF_TOO_SMALL
Add x509_crt_check_key_usage()
2014-04-09 09:50:03 +02:00
X509 crt keyUsage #1 (no extension, expected KU)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Fix some X509 macro names For some reason, during the great renaming, some names that should have been prefixed with MBEDTLS_X509_ have only been prefixed with MBEDTLS_
2015-04-20 13:19:02 +02:00
x509_check_key_usage:"data_files/server1.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT:0
Add x509_crt_check_key_usage()
2014-04-09 09:50:03 +02:00
Fix typos
2014-05-22 15:47:58 +02:00
X509 crt keyUsage #2 (no extension, surprising KU)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509_check_key_usage:"data_files/server1.crt":MBEDTLS_X509_KU_KEY_CERT_SIGN:0
Add x509_crt_check_key_usage()
2014-04-09 09:50:03 +02:00
X509 crt keyUsage #3 (extension present, no KU)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Add x509_crt_check_key_usage()
2014-04-09 09:50:03 +02:00
x509_check_key_usage:"data_files/server1.key_usage.crt":0:0
X509 crt keyUsage #4 (extension present, single KU present)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE:0
Add x509_crt_check_key_usage()
2014-04-09 09:50:03 +02:00
X509 crt keyUsage #5 (extension present, single KU absent)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_KEY_CERT_SIGN:MBEDTLS_ERR_X509_BAD_INPUT_DATA
Add x509_crt_check_key_usage()
2014-04-09 09:50:03 +02:00
X509 crt keyUsage #6 (extension present, combined KU present)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Fix some X509 macro names For some reason, during the great renaming, some names that should have been prefixed with MBEDTLS_X509_ have only been prefixed with MBEDTLS_
2015-04-20 13:19:02 +02:00
x509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT:0
Add x509_crt_check_key_usage()
2014-04-09 09:50:03 +02:00
X509 crt keyUsage #7 (extension present, combined KU both absent)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_KEY_CERT_SIGN|MBEDTLS_X509_KU_CRL_SIGN:MBEDTLS_ERR_X509_BAD_INPUT_DATA
Add x509_crt_check_key_usage()
2014-04-09 09:50:03 +02:00
X509 crt keyUsage #8 (extension present, combined KU one absent)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Fix some X509 macro names For some reason, during the great renaming, some names that should have been prefixed with MBEDTLS_X509_ have only been prefixed with MBEDTLS_
2015-04-20 13:19:02 +02:00
x509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_KEY_ENCIPHERMENT|MBEDTLS_X509_KU_KEY_AGREEMENT:MBEDTLS_ERR_X509_BAD_INPUT_DATA
Add x509_crt_check_key_usage()
2014-04-09 09:50:03 +02:00
Adapt check_key_usage to new weird bits
2015-06-23 10:48:44 +02:00
X509 crt keyUsage #9 (extension present, decOnly allowed absent)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Adapt check_key_usage to new weird bits
2015-06-23 10:48:44 +02:00
x509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT|MBEDTLS_X509_KU_DECIPHER_ONLY:0
X509 crt keyUsage #10 (extension present, decOnly non-allowed present)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Adapt check_key_usage to new weird bits
2015-06-23 10:48:44 +02:00
x509_check_key_usage:"data_files/keyUsage.decipherOnly.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT:MBEDTLS_ERR_X509_BAD_INPUT_DATA
X509 crt keyUsage #11 (extension present, decOnly allowed present)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Adapt check_key_usage to new weird bits
2015-06-23 10:48:44 +02:00
x509_check_key_usage:"data_files/keyUsage.decipherOnly.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT|MBEDTLS_X509_KU_DECIPHER_ONLY:0
Add x509_crt_check_extended_key_usage()
2014-04-10 17:53:56 +02:00
X509 crt extendedKeyUsage #1 (no extension, serverAuth)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_check_extended_key_usage:"data_files/server5.crt":"2b06010505070301":0
Add x509_crt_check_extended_key_usage()
2014-04-10 17:53:56 +02:00
X509 crt extendedKeyUsage #2 (single value, present)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_check_extended_key_usage:"data_files/server5.eku-srv.crt":"2b06010505070301":0
Add x509_crt_check_extended_key_usage()
2014-04-10 17:53:56 +02:00
X509 crt extendedKeyUsage #3 (single value, absent)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_check_extended_key_usage:"data_files/server5.eku-cli.crt":"2b06010505070301":MBEDTLS_ERR_X509_BAD_INPUT_DATA
Add x509_crt_check_extended_key_usage()
2014-04-10 17:53:56 +02:00
X509 crt extendedKeyUsage #4 (two values, first)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_check_extended_key_usage:"data_files/server5.eku-srv_cli.crt":"2b06010505070301":0
Add x509_crt_check_extended_key_usage()
2014-04-10 17:53:56 +02:00
X509 crt extendedKeyUsage #5 (two values, second)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_check_extended_key_usage:"data_files/server5.eku-srv_cli.crt":"2b06010505070302":0
Add x509_crt_check_extended_key_usage()
2014-04-10 17:53:56 +02:00
X509 crt extendedKeyUsage #6 (two values, other)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_check_extended_key_usage:"data_files/server5.eku-srv_cli.crt":"2b06010505070303":MBEDTLS_ERR_X509_BAD_INPUT_DATA
Add x509_crt_check_extended_key_usage()
2014-04-10 17:53:56 +02:00
X509 crt extendedKeyUsage #7 (any, random)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_check_extended_key_usage:"data_files/server5.eku-cs_any.crt":"2b060105050703ff":0
Add x509_crt_check_extended_key_usage()
2014-04-10 17:53:56 +02:00
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (good, all defaults)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509_parse_rsassa_pss_params:"":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (wrong initial tag)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509_parse_rsassa_pss_params:"":MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (unknown tag in top-level sequence)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a400":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (good, HashAlg SHA256)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a00d300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA256:MBEDTLS_MD_SHA1:20:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (good, explicit HashAlg = default)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a009300706052b0e03021a":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (HashAlg wrong len #1)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a00a300706052b0e03021a":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (HashAlg wrong len #2)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a00a300706052b0e03021a00":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (HashAlg with parameters)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a00f300d06096086480165030402013000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA256:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_INVALID_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
Fix typos in comments
2014-06-25 14:45:24 +02:00
X509 RSASSA-PSS parameters ASN1 (HashAlg unknown OID)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a00d300b06096086480165030402ff":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA256:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_OID_NOT_FOUND
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (good, MGAlg = MGF1-SHA256)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a11a301806092a864886f70d010108300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (good, explicit MGAlg = default)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a116301406092a864886f70d010108300706052b0e03021a":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg wrong len #1)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a11b301806092a864886f70d010108300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg wrong len #2)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a11b301806092a864886f70d010108300b060960864801650304020100":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg AlgId wrong len #1)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a11a301906092a864886f70d010108300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg OID != MGF1)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a11a301806092a864886f70d010109300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_FEATURE_UNAVAILABLE + MBEDTLS_ERR_OID_NOT_FOUND
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong tag)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a11a301806092a864886f70d010108310b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong len #1a)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a10f300d06092a864886f70d0101083000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong len #1b)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a11b301906092a864886f70d010108300c0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params.alg not an OID)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a11a301806092a864886f70d010108300b0709608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params.alg unknown OID)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a11a301806092a864886f70d010108300b06096086480165030402ff":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_OID_NOT_FOUND
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params.params NULL)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a11c301a06092a864886f70d010108300d06096086480165030402010500":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params.params wrong tag)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a11c301a06092a864886f70d010108300d06096086480165030402013000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong len #1c)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a11d301b06092a864886f70d010108300e06096086480165030402010500":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong len #2)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a11d301b06092a864886f70d010108300e0609608648016503040201050000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (good, saltLen = 94)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a20302015e":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:94:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (good, explicit saltLen = default)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a203020114":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (saltLen wrong len #1)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a20402015e":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:94:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (saltLen wrong len #2)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a20402015e00":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:94:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (saltLen not an int)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a2023000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:94:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (good, explicit trailerField = default)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a303020101":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (trailerField wrong len #1)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a304020101":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (trailerField wrong len #2)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a30402010100":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (trailerField not an int)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a3023000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (trailerField not 1)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
x509_parse_rsassa_pss_params:"a303020102":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (OK)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
mbedtls_x509_csr_parse:"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":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: ECDSA with SHA1\nEC key size \: 256 bits\n":0
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad first tag)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_parse:"3100":"":MBEDTLS_ERR_X509_INVALID_FORMAT
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad sequence: overlong)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_parse:"3001":"":MBEDTLS_ERR_X509_INVALID_FORMAT
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (total length mistmatch)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_parse:"30010000":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad CRI: not a sequence)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_parse:"30023100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad CRI: overlong)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_parse:"30023001":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad CRI.Version: overlong)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_parse:"30053002020100":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad CRI.Version: not v1)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_parse:"30053003020101":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad CRI.Name: not a sequence)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_parse:"300730050201003100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad CRI.Name: overlong)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_parse:"30083005020100300100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad CRI.Name payload: not a set)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_parse:"3009300702010030023000":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad CRI.Name payload: overlong)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
mbedtls_x509_csr_parse:"300a30080201003002310100":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad SubjectPublicKeyInfo: missing)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
mbedtls_x509_csr_parse:"30143012020100300d310b3009060355040613024e4c":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad SubjectPublicKeyInfo: not a sequence)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
mbedtls_x509_csr_parse:"30163014020100300d310b3009060355040613024e4c3100":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad SubjectPublicKeyInfo: overlong)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
mbedtls_x509_csr_parse:"30173014020100300d310b3009060355040613024e4c300100":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad attributes: missing)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
mbedtls_x509_csr_parse:"3081973081940201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad attributes: bad tag)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
mbedtls_x509_csr_parse:"3081993081960201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edff0500":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad attributes: overlong)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
mbedtls_x509_csr_parse:"30819a3081960201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa00100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad sigAlg: missing)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
mbedtls_x509_csr_parse:"3081c23081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad sigAlg: not a sequence)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
mbedtls_x509_csr_parse:"3081c43081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e03100":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad sigAlg: overlong)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
mbedtls_x509_csr_parse:"3081c43081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e03001":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad sigAlg: unknown)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
mbedtls_x509_csr_parse:"3081cd3081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0300906072a8648ce3d04ff":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad sig: missing)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
mbedtls_x509_csr_parse:"3081cd3081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0300906072a8648ce3d0401":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad sig: not a bit string)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
mbedtls_x509_csr_parse:"3081cf3081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0300906072a8648ce3d04010400":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad sig: overlong)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
mbedtls_x509_csr_parse:"3081cf3081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0300906072a8648ce3d04010301":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (extra data after signature)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
mbedtls_x509_csr_parse:"308201193081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0300906072a8648ce3d04010349003046022100b49fd8c8f77abfa871908dfbe684a08a793d0f490a43d86fcf2086e4f24bb0c2022100f829d5ccd3742369299e6294394717c4b723a0f68b44e831b6e6c3bcabf9724300":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
x509_crt_parse() did not increase total_failed on PEM error Result was that PEM errors in files with multiple certificates were not detectable by the user.
2014-09-26 14:53:04 +02:00
Add CSR DER tests with incorrect version
2017-03-07 11:57:34 +01:00
X509 CSR ASN.1 (invalid version overflow)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 17:17:58 +02:00
mbedtls_x509_csr_parse:"3008300602047fffffff":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
Add CSR DER tests with incorrect version
2017-03-07 11:57:34 +01:00
x509_crt_parse() did not increase total_failed on PEM error Result was that PEM errors in files with multiple certificates were not detectable by the user.
2014-09-26 14:53:04 +02:00
X509 File parse (no issues)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
x509_crt_parse() did not increase total_failed on PEM error Result was that PEM errors in files with multiple certificates were not detectable by the user.
2014-09-26 14:53:04 +02:00
x509parse_crt_file:"data_files/server7_int-ca.crt":0
X509 File parse (extra space in one certificate)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
x509_crt_parse() did not increase total_failed on PEM error Result was that PEM errors in files with multiple certificates were not detectable by the user.
2014-09-26 14:53:04 +02:00
x509parse_crt_file:"data_files/server7_pem_space.crt":1
X509 File parse (all certificates fail)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt_file:"data_files/server7_all_space.crt":MBEDTLS_ERR_PEM_INVALID_DATA + MBEDTLS_ERR_BASE64_INVALID_CHARACTER
Accept a trailing space at end of PEM lines With certs being copy-pasted from webmails and all, this will probably become more and more common. closes #226
2015-07-31 11:09:59 +02:00
X509 File parse (trailing spaces, OK)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Accept a trailing space at end of PEM lines With certs being copy-pasted from webmails and all, this will probably become more and more common. closes #226
2015-07-31 11:09:59 +02:00
x509parse_crt_file:"data_files/server7_trailing_space.crt":0
Add check for validity of date in x509_get_time()
2016-09-23 14:16:02 +02:00
Add tag check to cert algorithm check Add missing tag check for algorithm parameters when comparing the signature in the description part of the cert against the actual signature whilst loading a certificate. This was found by a certificate (created by fuzzing) that openssl would not verify, but mbedtls would. Regression test added (one of the client certs modified accordingly) Signed-off-by: Paul Elliott <paul.elliott@arm.com>
2020-11-24 18:30:18 +01:00
X509 File parse (Algorithm Params Tag mismatch)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
x509parse_crt_file:"data_files/cli-rsa-sha256-badalg.crt.der":MBEDTLS_ERR_X509_SIG_MISMATCH
Add check for validity of date in x509_get_time()
2016-09-23 14:16:02 +02:00
X509 Get time (UTC no issues)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"500101000000Z":0:1950:1:1:0:0:0
X509 Get time (Generalized Time no issues)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"99991231235959Z":0:9999:12:31:23:59:59
X509 Get time (UTC year without leap day)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"490229121212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC year with leap day)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121212Z":0:2000:2:29:12:12:12
X509 Get time (UTC invalid day of month #1)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"000132121212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid day of month #2)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"001131121212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid hour)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"001130241212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid min)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"001130236012Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid sec)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"001130235960Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
Add unit tests for X509 certificate date parsing
2017-02-08 15:13:02 +01:00
X509 Get time (UTC without time zone)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121212":0:2000:2:29:12:12:12
X509 Get time (UTC with invalid time zone #1)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121212J":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC with invalid time zone #2)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121212+0300":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (Date with invalid tag)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_CONTEXT_SPECIFIC:"000229121212":MBEDTLS_ERR_X509_INVALID_DATE+MBEDTLS_ERR_ASN1_UNEXPECTED_TAG:0:0:0:0:0:0
X509 Get time (UTC, truncated)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (Generalized Time, truncated)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"20000229121":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC without seconds)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0002291212":MBEDTLS_ERR_X509_INVALID_DATE:2000:2:29:12:12:0
X509 Get time (UTC without seconds and with invalid time zone #1)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0002291212J":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC without second and with invalid time zone #2)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0002291212+0300":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid character in year)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0\1130231212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid character in month)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"001%30231212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid character in day)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0011`0231212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid character in hour)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0011302h1212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid character in min)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"00113023u012Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid character in sec)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0011302359n0Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
Improve leap year test names in x509parse.data
2017-10-06 18:05:24 +02:00
X509 Get time (Generalized Time, year multiple of 100 but not 400 is not a leap year)
Correctly handle leap year in x509_date_is_valid() This patch ensures that invalid dates on leap years with 100 or 400 years intervals are handled correctly.
2016-11-21 16:38:02 +01:00
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"19000229000000Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
Improve leap year test names in x509parse.data
2017-10-06 18:05:24 +02:00
X509 Get time (Generalized Time, year multiple of 4 but not 100 is a leap year)
Correctly handle leap year in x509_date_is_valid() This patch ensures that invalid dates on leap years with 100 or 400 years intervals are handled correctly.
2016-11-21 16:38:02 +01:00
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"19920229000000Z":0:1992:2:29:0:0:0
Improve leap year test names in x509parse.data
2017-10-06 18:05:24 +02:00
X509 Get time (Generalized Time, year multiple of 400 is a leap year)
Correctly handle leap year in x509_date_is_valid() This patch ensures that invalid dates on leap years with 100 or 400 years intervals are handled correctly.
2016-11-21 16:38:02 +01:00
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"20000229000000Z":0:2000:2:29:0:0:0
X509 Get time (Generalized Time invalid leap year not multiple of 4, 100 or 400)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"19910229000000Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
Add unit tests for X509 certificate date parsing
2017-02-08 15:13:02 +01:00
Clarify & uniformise test comments
2017-08-17 10:25:18 +02:00
X509 cert verify restart: trusted EE, max_ops=0 (disabled)
Add tests for verify_restartable() For selection of test cases, see comments added in the commit. It makes the most sense to test with chains using ECC only, so for the chain of length 2 we use server10 -> int-ca3 -> int-ca2 and trust int-ca2 directly. Note: server10.crt was created by copying server10_int3_int-ca2.crt and manually truncating it to remove the intermediates. That base can now be used to create derived certs (without or with a chain) in a programmatic way.
2017-07-14 11:05:59 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
x509_verify_restart:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":0:0:0:0:0
Make verify() actually restartable
2017-08-14 18:04:19 +02:00
X509 cert verify restart: trusted EE, max_ops=1
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
x509_verify_restart:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":0:0:1:0:0
Clarify & uniformise test comments
2017-08-17 10:25:18 +02:00
X509 cert verify restart: no intermediate, max_ops=0 (disabled)
Add tests for verify_restartable() For selection of test cases, see comments added in the commit. It makes the most sense to test with chains using ECC only, so for the chain of length 2 we use server10 -> int-ca3 -> int-ca2 and trust int-ca2 directly. Note: server10.crt was created by copying server10_int3_int-ca2.crt and manually truncating it to remove the intermediates. That base can now be used to create derived certs (without or with a chain) in a programmatic way.
2017-07-14 11:05:59 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
x509_verify_restart:"data_files/server5.crt":"data_files/test-ca2.crt":0:0:0:0:0
Make verify() actually restartable
2017-08-14 18:04:19 +02:00
X509 cert verify restart: no intermediate, max_ops=1
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
x509_verify_restart:"data_files/server5.crt":"data_files/test-ca2.crt":0:0:1:100:10000
X509 cert verify restart: no intermediate, max_ops=40000
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
x509_verify_restart:"data_files/server5.crt":"data_files/test-ca2.crt":0:0:40000:0:0
X509 cert verify restart: no intermediate, max_ops=500
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
x509_verify_restart:"data_files/server5.crt":"data_files/test-ca2.crt":0:0:500:20:80
Clarify & uniformise test comments
2017-08-17 10:25:18 +02:00
X509 cert verify restart: no intermediate, badsign, max_ops=0 (disabled)
Add tests for verify_restartable() For selection of test cases, see comments added in the commit. It makes the most sense to test with chains using ECC only, so for the chain of length 2 we use server10 -> int-ca3 -> int-ca2 and trust int-ca2 directly. Note: server10.crt was created by copying server10_int3_int-ca2.crt and manually truncating it to remove the intermediates. That base can now be used to create derived certs (without or with a chain) in a programmatic way.
2017-07-14 11:05:59 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
x509_verify_restart:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:0:0:0
Make verify() actually restartable
2017-08-14 18:04:19 +02:00
X509 cert verify restart: no intermediate, badsign, max_ops=1
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
x509_verify_restart:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:1:100:10000
X509 cert verify restart: no intermediate, badsign, max_ops=40000
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
x509_verify_restart:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:40000:0:0
X509 cert verify restart: no intermediate, badsign, max_ops=500
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
x509_verify_restart:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:500:20:80
Clarify & uniformise test comments
2017-08-17 10:25:18 +02:00
X509 cert verify restart: one int, max_ops=0 (disabled)
Add tests for verify_restartable() For selection of test cases, see comments added in the commit. It makes the most sense to test with chains using ECC only, so for the chain of length 2 we use server10 -> int-ca3 -> int-ca2 and trust int-ca2 directly. Note: server10.crt was created by copying server10_int3_int-ca2.crt and manually truncating it to remove the intermediates. That base can now be used to create derived certs (without or with a chain) in a programmatic way.
2017-07-14 11:05:59 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":0:0:0:0:0
Make verify() actually restartable
2017-08-14 18:04:19 +02:00
X509 cert verify restart: one int, max_ops=1
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":0:0:1:100:10000
X509 cert verify restart: one int, max_ops=30000
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":0:0:30000:0:0
X509 cert verify restart: one int, max_ops=500
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":0:0:500:25:100
Clarify & uniformise test comments
2017-08-17 10:25:18 +02:00
X509 cert verify restart: one int, EE badsign, max_ops=0 (disabled)
Add tests for verify_restartable() For selection of test cases, see comments added in the commit. It makes the most sense to test with chains using ECC only, so for the chain of length 2 we use server10 -> int-ca3 -> int-ca2 and trust int-ca2 directly. Note: server10.crt was created by copying server10_int3_int-ca2.crt and manually truncating it to remove the intermediates. That base can now be used to create derived certs (without or with a chain) in a programmatic way.
2017-07-14 11:05:59 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10-bs_int3.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:0:0:0
Make verify() actually restartable
2017-08-14 18:04:19 +02:00
X509 cert verify restart: one int, EE badsign, max_ops=1
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10-bs_int3.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:1:100:10000
X509 cert verify restart: one int, EE badsign, max_ops=30000
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10-bs_int3.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:30000:0:0
X509 cert verify restart: one int, EE badsign, max_ops=500
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10-bs_int3.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:500:25:100
Clarify & uniformise test comments
2017-08-17 10:25:18 +02:00
X509 cert verify restart: one int, int badsign, max_ops=0 (disabled)
Add tests for verify_restartable() For selection of test cases, see comments added in the commit. It makes the most sense to test with chains using ECC only, so for the chain of length 2 we use server10 -> int-ca3 -> int-ca2 and trust int-ca2 directly. Note: server10.crt was created by copying server10_int3_int-ca2.crt and manually truncating it to remove the intermediates. That base can now be used to create derived certs (without or with a chain) in a programmatic way.
2017-07-14 11:05:59 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10_int3-bs.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:0:0:0
Make verify() actually restartable
2017-08-14 18:04:19 +02:00
X509 cert verify restart: one int, int badsign, max_ops=1
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10_int3-bs.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:1:100:10000
X509 cert verify restart: one int, int badsign, max_ops=30000
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10_int3-bs.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:30000:0:0
X509 cert verify restart: one int, int badsign, max_ops=500
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10_int3-bs.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:500:25:100
Reference in New Issue Copy Permalink