summaryrefslogtreecommitdiff
path: root/tests/set_key.c
diff options
context:
space:
mode:
Diffstat (limited to 'tests/set_key.c')
-rw-r--r--tests/set_key.c132
1 files changed, 81 insertions, 51 deletions
diff --git a/tests/set_key.c b/tests/set_key.c
index dcf1322438..0ef21bde03 100644
--- a/tests/set_key.c
+++ b/tests/set_key.c
@@ -22,7 +22,7 @@
/* Parts copied from GnuTLS example programs. */
#ifdef HAVE_CONFIG_H
-#include <config.h>
+# include <config.h>
#endif
#include <stdio.h>
@@ -30,10 +30,10 @@
#include <string.h>
#include <sys/types.h>
#if !defined(_WIN32)
-#include <netinet/in.h>
-#include <sys/socket.h>
-#include <sys/wait.h>
-#include <arpa/inet.h>
+# include <netinet/in.h>
+# include <sys/socket.h>
+# include <sys/wait.h>
+# include <arpa/inet.h>
#endif
#include <unistd.h>
#include <assert.h>
@@ -63,33 +63,39 @@ static time_t mytime(time_t * t)
return then;
}
-static unsigned import_key(gnutls_certificate_credentials_t xcred, const gnutls_datum_t *skey, const gnutls_datum_t *cert)
+static unsigned import_key(gnutls_certificate_credentials_t xcred,
+ const gnutls_datum_t * skey,
+ const gnutls_datum_t * cert)
{
gnutls_pcert_st pcert_list[16];
gnutls_privkey_t key;
unsigned pcert_list_size, idx, i;
gnutls_datum_t tcert;
- const char *names[] = {"localhost", "localhost2"};
+ const char *names[] = { "localhost", "localhost2" };
int ret;
- assert(gnutls_privkey_init(&key)>=0);
+ assert(gnutls_privkey_init(&key) >= 0);
- pcert_list_size = sizeof(pcert_list)/sizeof(pcert_list[0]);
+ pcert_list_size = sizeof(pcert_list) / sizeof(pcert_list[0]);
ret = gnutls_pcert_list_import_x509_raw(pcert_list, &pcert_list_size,
- cert, GNUTLS_X509_FMT_PEM, 0);
+ cert, GNUTLS_X509_FMT_PEM, 0);
if (ret < 0) {
- fail("error in gnutls_pcert_list_import_x509_raw: %s\n", gnutls_strerror(ret));
+ fail("error in gnutls_pcert_list_import_x509_raw: %s\n",
+ gnutls_strerror(ret));
}
- ret = gnutls_privkey_import_x509_raw(key, skey, GNUTLS_X509_FMT_PEM, NULL, 0);
+ ret =
+ gnutls_privkey_import_x509_raw(key, skey, GNUTLS_X509_FMT_PEM, NULL,
+ 0);
if (ret < 0) {
fail("error in key import: %s\n", gnutls_strerror(ret));
}
ret = gnutls_certificate_set_key(xcred, names, 2, pcert_list,
- pcert_list_size, key);
+ pcert_list_size, key);
if (ret < 0) {
- fail("error in gnutls_certificate_set_key: %s\n", gnutls_strerror(ret));
+ fail("error in gnutls_certificate_set_key: %s\n",
+ gnutls_strerror(ret));
exit(1);
}
@@ -97,15 +103,19 @@ static unsigned import_key(gnutls_certificate_credentials_t xcred, const gnutls_
idx = ret;
/* verify whether the stored certificate match the ones we have */
- for (i=0;i<pcert_list_size;i++) {
+ for (i = 0; i < pcert_list_size; i++) {
ret = gnutls_certificate_get_crt_raw(xcred, idx, i, &tcert);
if (ret < 0) {
- fail("error in %d: cert: %d: %s\n", __LINE__, i, gnutls_strerror(ret));
+ fail("error in %d: cert: %d: %s\n", __LINE__, i,
+ gnutls_strerror(ret));
exit(1);
}
- if (tcert.size != pcert_list[i].cert.size || memcmp(tcert.data, pcert_list[i].cert.data, tcert.size) != 0) {
- fail("error in %d: cert %d: %s\n", __LINE__, i, "ca cert don't match");
+ if (tcert.size != pcert_list[i].cert.size
+ || memcmp(tcert.data, pcert_list[i].cert.data,
+ tcert.size) != 0) {
+ fail("error in %d: cert %d: %s\n", __LINE__, i,
+ "ca cert don't match");
exit(1);
}
}
@@ -131,23 +141,26 @@ static void basic(void)
gnutls_global_set_log_level(6);
assert(gnutls_certificate_allocate_credentials(&clicred) >= 0);
- assert(gnutls_certificate_allocate_credentials(&x509_cred)>=0);
+ assert(gnutls_certificate_allocate_credentials(&x509_cred) >= 0);
gnutls_certificate_set_flags(x509_cred, GNUTLS_CERTIFICATE_API_V2);
- ret = gnutls_certificate_set_x509_trust_mem(clicred, &ca_cert, GNUTLS_X509_FMT_PEM);
+ ret =
+ gnutls_certificate_set_x509_trust_mem(clicred, &ca_cert,
+ GNUTLS_X509_FMT_PEM);
if (ret < 0)
fail("set_x509_trust_file failed: %s\n", gnutls_strerror(ret));
idx = import_key(x509_cred, &server_key, &server_cert);
assert(idx == 0);
- test_cli_serv(x509_cred, clicred, "NORMAL", "localhost", NULL, NULL, NULL);
+ test_cli_serv(x509_cred, clicred, "NORMAL", "localhost", NULL, NULL,
+ NULL);
/* verify that we can add certs, and that their index will change */
- for (i=0;i<16;i++) {
+ for (i = 0; i < 16; i++) {
idx = import_key(x509_cred, &server_ecc_key, &server_ecc_cert);
- assert(idx == 1+i);
+ assert(idx == 1 + i);
}
gnutls_certificate_free_credentials(x509_cred);
@@ -165,7 +178,7 @@ static void failure_mode(void)
gnutls_pcert_st pcert_list[16];
gnutls_privkey_t key;
unsigned pcert_list_size;
- const char *names[] = {"localhost", "localhost2"};
+ const char *names[] = { "localhost", "localhost2" };
int ret;
unsigned i;
@@ -177,32 +190,37 @@ static void failure_mode(void)
if (debug)
gnutls_global_set_log_level(6);
- assert(gnutls_certificate_allocate_credentials(&x509_cred)>=0);
- assert(gnutls_privkey_init(&key)>=0);
+ assert(gnutls_certificate_allocate_credentials(&x509_cred) >= 0);
+ assert(gnutls_privkey_init(&key) >= 0);
- pcert_list_size = sizeof(pcert_list)/sizeof(pcert_list[0]);
+ pcert_list_size = sizeof(pcert_list) / sizeof(pcert_list[0]);
ret = gnutls_pcert_list_import_x509_raw(pcert_list, &pcert_list_size,
- &server_cert, GNUTLS_X509_FMT_PEM, 0);
+ &server_cert,
+ GNUTLS_X509_FMT_PEM, 0);
if (ret < 0) {
- fail("error in gnutls_pcert_list_import_x509_raw: %s\n", gnutls_strerror(ret));
+ fail("error in gnutls_pcert_list_import_x509_raw: %s\n",
+ gnutls_strerror(ret));
}
- ret = gnutls_privkey_import_x509_raw(key, &server_ecc_key, GNUTLS_X509_FMT_PEM, NULL, 0);
+ ret =
+ gnutls_privkey_import_x509_raw(key, &server_ecc_key,
+ GNUTLS_X509_FMT_PEM, NULL, 0);
if (ret < 0) {
fail("error in key import: %s\n", gnutls_strerror(ret));
}
ret = gnutls_certificate_set_key(x509_cred, names, 2, pcert_list,
- pcert_list_size, key);
+ pcert_list_size, key);
if (ret < 0) {
- success("expected error in gnutls_certificate_set_key: %s\n", gnutls_strerror(ret));
+ success("expected error in gnutls_certificate_set_key: %s\n",
+ gnutls_strerror(ret));
goto cleanup;
}
fail("gnutls_certificate_set_key succeeded unexpectedly\n");
cleanup:
- for (i=0;i<pcert_list_size;i++) {
+ for (i = 0; i < pcert_list_size; i++) {
gnutls_pcert_deinit(&pcert_list[i]);
}
gnutls_privkey_deinit(key);
@@ -234,59 +252,71 @@ static void auto_parse(void)
if (debug)
gnutls_global_set_log_level(6);
- assert(gnutls_certificate_allocate_credentials(&x509_cred)>=0);
- assert(gnutls_privkey_init(&key)>=0);
+ assert(gnutls_certificate_allocate_credentials(&x509_cred) >= 0);
+ assert(gnutls_privkey_init(&key) >= 0);
assert(gnutls_certificate_allocate_credentials(&clicred) >= 0);
- ret = gnutls_certificate_set_x509_trust_mem(clicred, &ca3_cert, GNUTLS_X509_FMT_PEM);
+ ret =
+ gnutls_certificate_set_x509_trust_mem(clicred, &ca3_cert,
+ GNUTLS_X509_FMT_PEM);
if (ret < 0)
fail("set_x509_trust_file failed: %s\n", gnutls_strerror(ret));
- pcert_list_size = sizeof(pcert_list)/sizeof(pcert_list[0]);
+ pcert_list_size = sizeof(pcert_list) / sizeof(pcert_list[0]);
ret = gnutls_pcert_list_import_x509_raw(pcert_list, &pcert_list_size,
- &server_ca3_localhost_cert_chain, GNUTLS_X509_FMT_PEM, 0);
+ &server_ca3_localhost_cert_chain,
+ GNUTLS_X509_FMT_PEM, 0);
if (ret < 0) {
- fail("error in gnutls_pcert_list_import_x509_raw: %s\n", gnutls_strerror(ret));
+ fail("error in gnutls_pcert_list_import_x509_raw: %s\n",
+ gnutls_strerror(ret));
}
- ret = gnutls_privkey_import_x509_raw(key, &server_ca3_key, GNUTLS_X509_FMT_PEM, NULL, 0);
+ ret =
+ gnutls_privkey_import_x509_raw(key, &server_ca3_key,
+ GNUTLS_X509_FMT_PEM, NULL, 0);
if (ret < 0) {
fail("error in key import: %s\n", gnutls_strerror(ret));
}
ret = gnutls_certificate_set_key(x509_cred, NULL, 0, pcert_list,
- pcert_list_size, key);
+ pcert_list_size, key);
if (ret < 0) {
- fail("error in gnutls_certificate_set_key: %s\n", gnutls_strerror(ret));
+ fail("error in gnutls_certificate_set_key: %s\n",
+ gnutls_strerror(ret));
exit(1);
}
/* set the ECC key */
- assert(gnutls_privkey_init(&second_key)>=0);
+ assert(gnutls_privkey_init(&second_key) >= 0);
pcert_list_size = 2;
ret = gnutls_pcert_list_import_x509_raw(second_pcert, &pcert_list_size,
- &server_ca3_localhost6_cert_chain, GNUTLS_X509_FMT_PEM, 0);
+ &server_ca3_localhost6_cert_chain,
+ GNUTLS_X509_FMT_PEM, 0);
if (ret < 0) {
- fail("error in gnutls_pcert_list_import_x509_raw: %s\n", gnutls_strerror(ret));
+ fail("error in gnutls_pcert_list_import_x509_raw: %s\n",
+ gnutls_strerror(ret));
}
- ret = gnutls_privkey_import_x509_raw(second_key, &server_ca3_key, GNUTLS_X509_FMT_PEM, NULL, 0);
+ ret =
+ gnutls_privkey_import_x509_raw(second_key, &server_ca3_key,
+ GNUTLS_X509_FMT_PEM, NULL, 0);
if (ret < 0) {
fail("error in key import: %s\n", gnutls_strerror(ret));
}
ret = gnutls_certificate_set_key(x509_cred, NULL, 0, second_pcert,
- 2, second_key);
+ 2, second_key);
if (ret < 0) {
- fail("error in gnutls_certificate_set_key: %s\n", gnutls_strerror(ret));
+ fail("error in gnutls_certificate_set_key: %s\n",
+ gnutls_strerror(ret));
exit(1);
}
- test_cli_serv(x509_cred, clicred, "NORMAL", "localhost", NULL, NULL, NULL); /* the DNS name of the first cert */
- test_cli_serv(x509_cred, clicred, "NORMAL", "localhost6", NULL, NULL, NULL); /* the DNS name of ECC cert */
- test_cli_serv(x509_cred, clicred, "NORMAL", "www.none.org", NULL, NULL, NULL); /* the DNS name of ECC cert */
+ test_cli_serv(x509_cred, clicred, "NORMAL", "localhost", NULL, NULL, NULL); /* the DNS name of the first cert */
+ test_cli_serv(x509_cred, clicred, "NORMAL", "localhost6", NULL, NULL, NULL); /* the DNS name of ECC cert */
+ test_cli_serv(x509_cred, clicred, "NORMAL", "www.none.org", NULL, NULL, NULL); /* the DNS name of ECC cert */
gnutls_certificate_free_credentials(x509_cred);
gnutls_certificate_free_credentials(clicred);
View Lorry Controller Status