1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
|
// Copyright (c) 2015 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "net/ssl/ssl_config.h"
#include "net/cert/cert_verifier.h"
#include "testing/gtest/include/gtest/gtest.h"
namespace net {
namespace {
void CheckCertVerifyFlags(SSLConfig& ssl_config,
bool rev_checking_enabled,
bool verify_ev_cert,
bool cert_io_enabled,
bool rev_checking_required_local_anchors) {
ssl_config.rev_checking_enabled = rev_checking_enabled;
ssl_config.verify_ev_cert = verify_ev_cert;
ssl_config.cert_io_enabled = cert_io_enabled;
ssl_config.rev_checking_required_local_anchors =
rev_checking_required_local_anchors;
int flags = ssl_config.GetCertVerifyFlags();
if (rev_checking_enabled)
EXPECT_TRUE(flags & CertVerifier::VERIFY_REV_CHECKING_ENABLED);
else
EXPECT_FALSE(flags & CertVerifier::VERIFY_REV_CHECKING_ENABLED);
if (verify_ev_cert)
EXPECT_TRUE(flags & CertVerifier::VERIFY_EV_CERT);
else
EXPECT_FALSE(flags & CertVerifier::VERIFY_EV_CERT);
if (cert_io_enabled)
EXPECT_TRUE(flags & CertVerifier::VERIFY_CERT_IO_ENABLED);
else
EXPECT_FALSE(flags & CertVerifier::VERIFY_CERT_IO_ENABLED);
if (rev_checking_required_local_anchors) {
EXPECT_TRUE(flags &
CertVerifier::VERIFY_REV_CHECKING_REQUIRED_LOCAL_ANCHORS);
} else {
EXPECT_FALSE(flags &
CertVerifier::VERIFY_REV_CHECKING_REQUIRED_LOCAL_ANCHORS);
}
}
} // namespace
TEST(SSLConfigTest, GetCertVerifyFlags) {
SSLConfig ssl_config;
CheckCertVerifyFlags(ssl_config,
/*rev_checking_enabled=*/true,
/*verify_ev_cert=*/true,
/*cert_io_enabled=*/true,
/*rev_checking_required_local_anchors=*/true);
CheckCertVerifyFlags(ssl_config,
/*rev_checking_enabled=*/false,
/*verify_ev_cert=*/false,
/*cert_io_enabled=*/false,
/*rev_checking_required_local_anchors=*/false);
CheckCertVerifyFlags(ssl_config,
/*rev_checking_enabled=*/true,
/*verify_ev_cert=*/false,
/*cert_io_enabled=*/false,
/*rev_checking_required_local_anchors=*/false);
CheckCertVerifyFlags(ssl_config,
/*rev_checking_enabled=*/false,
/*verify_ev_cert=*/true,
/*cert_io_enabled=*/false,
/*rev_checking_required_local_anchors=*/false);
CheckCertVerifyFlags(ssl_config,
/*rev_checking_enabled=*/false,
/*verify_ev_cert=*/false,
/*cert_io_enabled=*/true,
/*rev_checking_required_local_anchors=*/false);
CheckCertVerifyFlags(ssl_config,
/*rev_checking_enabled=*/false,
/*verify_ev_cert=*/false,
/*cert_io_enabled=*/false,
/*rev_checking_required_local_anchors=*/true);
}
} // namespace net
|
