diff options
author | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2016-10-11 19:12:16 +0200 |
---|---|---|
committer | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2016-10-14 22:55:02 +0200 |
commit | 1494e61a11903fdf9b434792de3f79ce64db3df8 (patch) | |
tree | 51c63849c012aef853826c5c649e3d3217ed5e1e | |
parent | 68124e32acac2a23d2ef969ae81c6ac16b4ef707 (diff) | |
download | gnutls-1494e61a11903fdf9b434792de3f79ce64db3df8.tar.gz |
tests: check gnutls_certificate_set_known_dh_params
-rw-r--r-- | tests/Makefile.am | 2 | ||||
-rw-r--r-- | tests/set_known_dh_params_x509.c | 104 |
2 files changed, 105 insertions, 1 deletions
diff --git a/tests/Makefile.am b/tests/Makefile.am index dc5d202a08..5a42539785 100644 --- a/tests/Makefile.am +++ b/tests/Makefile.am @@ -114,7 +114,7 @@ ctests = mini-record-2 simple gc set_pkcs12_cred certder certuniqueid \ rsa-illegal-import set_x509_key_file_ocsp_multi set_key set_x509_key_file_ocsp_multi2 \ set_key_utf8 set_x509_key_utf8 insecure_key handshake-large-packet \ client_dsa_key server_ecdsa_key tls-session-ext-register tls-session-supplemental \ - multi-alerts naked-alerts pkcs7-cat-parse + multi-alerts naked-alerts pkcs7-cat-parse set_known_dh_params_x509 if HAVE_SECCOMP_TESTS ctests += dtls-with-seccomp tls-with-seccomp dtls-client-with-seccomp tls-client-with-seccomp diff --git a/tests/set_known_dh_params_x509.c b/tests/set_known_dh_params_x509.c new file mode 100644 index 0000000000..11d0892473 --- /dev/null +++ b/tests/set_known_dh_params_x509.c @@ -0,0 +1,104 @@ +/* + * Copyright (C) 2016 Nikos Mavrogiannopoulos + * + * Author: Nikos Mavrogiannopoulos + * + * This file is part of GnuTLS. + * + * GnuTLS is free software; you can redistribute it and/or modify it + * under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 3 of the License, or + * (at your option) any later version. + * + * GnuTLS is distributed in the hope that it will be useful, but + * WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + * General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with GnuTLS; if not, write to the Free Software Foundation, + * Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA + */ + +/* Parts copied from GnuTLS example programs. */ + +#ifdef HAVE_CONFIG_H +#include <config.h> +#endif + +#include <stdio.h> +#include <stdlib.h> +#include <string.h> +#include <sys/types.h> +#if !defined(_WIN32) +#include <netinet/in.h> +#include <sys/socket.h> +#include <sys/wait.h> +#include <arpa/inet.h> +#endif +#include <unistd.h> +#include <assert.h> +#include <gnutls/gnutls.h> +#include <gnutls/x509.h> + +#include "utils.h" +#include "cert-common.h" + +/* Test for gnutls_certificate_set_known_dh_params() + * + */ + +static void tls_log_func(int level, const char *str) +{ + fprintf(stderr, "<%d>| %s", level, str); +} + +void doit(void) +{ + gnutls_certificate_credentials_t x509_cred; + gnutls_certificate_credentials_t clicred; + int ret; + + /* this must be called once in the program + */ + global_init(); + + gnutls_global_set_log_function(tls_log_func); + if (debug) + gnutls_global_set_log_level(6); + + assert(gnutls_certificate_allocate_credentials(&clicred) >= 0); + assert(gnutls_certificate_allocate_credentials(&x509_cred) >= 0); + + ret = gnutls_certificate_set_x509_trust_mem(clicred, &ca3_cert, GNUTLS_X509_FMT_PEM); + if (ret < 0) + fail("set_x509_trust_file failed: %s\n", gnutls_strerror(ret)); + + ret = gnutls_certificate_set_x509_key_mem(x509_cred, &server_ca3_localhost_cert_chain, + &server_ca3_key, + GNUTLS_X509_FMT_PEM); + if (ret < 0) { + fail("error in error code\n"); + exit(1); + } + + assert(gnutls_certificate_set_known_dh_params(x509_cred, GNUTLS_SEC_PARAM_LEGACY) >= 0); + test_cli_serv(x509_cred, clicred, "NORMAL:-KX-ALL:+DHE-RSA", "localhost", NULL, NULL, NULL); + + assert(gnutls_certificate_set_known_dh_params(x509_cred, GNUTLS_SEC_PARAM_NORMAL) >= 0); + test_cli_serv(x509_cred, clicred, "NORMAL:-KX-ALL:+DHE-RSA", "localhost", NULL, NULL, NULL); + + assert(gnutls_certificate_set_known_dh_params(x509_cred, GNUTLS_SEC_PARAM_HIGH) >= 0); + test_cli_serv(x509_cred, clicred, "NORMAL:-KX-ALL:+DHE-RSA", "localhost", NULL, NULL, NULL); + + assert(gnutls_certificate_set_known_dh_params(x509_cred, GNUTLS_SEC_PARAM_ULTRA) >= 0); + test_cli_serv(x509_cred, clicred, "NORMAL:-KX-ALL:+DHE-RSA", "localhost", NULL, NULL, NULL); + + gnutls_certificate_free_credentials(x509_cred); + gnutls_certificate_free_credentials(clicred); + + gnutls_global_deinit(); + + if (debug) + success("success"); +} |