Add regress for Signed TAL (.tak) files
authorjob <job@openbsd.org>
Wed, 2 Nov 2022 12:56:38 +0000 (12:56 +0000)
committerjob <job@openbsd.org>
Wed, 2 Nov 2022 12:56:38 +0000 (12:56 +0000)
regress/usr.sbin/rpki-client/Makefile.inc
regress/usr.sbin/rpki-client/openssl11/Makefile
regress/usr.sbin/rpki-client/tak/05F53BCE4DAA11EDB9AC0C5B9E174E93.tak [new file with mode: 0644]
regress/usr.sbin/rpki-client/tak/42AE70A64DA711EDB37796549E174E93.tak [new file with mode: 0644]
regress/usr.sbin/rpki-client/tak/B7C2334E4DA911EDAF862D5A9E174E93.tak [new file with mode: 0644]
regress/usr.sbin/rpki-client/test-tak.c [new file with mode: 0644]

index e35dcf6..9a690df 100644 (file)
@@ -1,4 +1,4 @@
-# $OpenBSD: Makefile.inc,v 1.25 2022/08/30 22:48:16 job Exp $
+# $OpenBSD: Makefile.inc,v 1.26 2022/11/02 12:56:38 job Exp $
 
 .PATH:         ${.CURDIR}/../../../../usr.sbin/rpki-client
 
@@ -11,6 +11,7 @@ PROGS += test-rsc
 PROGS += test-tal
 PROGS += test-rrdp
 PROGS += test-aspa
+PROGS += test-tak
 
 .for p in ${PROGS}
 REGRESS_TARGETS += run-regress-$p
@@ -65,6 +66,11 @@ SRCS_test-aspa+=     test-aspa.c aspa.c cms.c x509.c ip.c as.c io.c log.c \
 run-regress-test-aspa: test-aspa
        ./test-aspa -v ${.CURDIR}/../aspa/*.asa
 
+SRCS_test-tak+=        test-tak.c tak.c cms.c x509.c ip.c as.c io.c log.c \
+               encoding.c print.c validate.c cert.c mft.c
+run-regress-test-tak: test-tak
+       ./test-tak -v ${.CURDIR}/../tak/*.tak
+
 SRCS_test-rrdp+=       test-rrdp.c rrdp_delta.c rrdp_notification.c \
                        rrdp_snapshot.c rrdp_util.c \
                        log.c encoding.c ip.c validate.c dummy.c x509.c
index 0df7364..4080e51 100644 (file)
@@ -1,4 +1,4 @@
-# $OpenBSD: Makefile,v 1.12 2022/10/14 17:17:13 tb Exp $
+# $OpenBSD: Makefile,v 1.13 2022/11/02 12:56:38 job Exp $
 
 LDADD +=       -Wl,-rpath,/usr/local/lib/eopenssl11 -L/usr/local/lib/eopenssl11
 CFLAGS +=      -I${.CURDIR}/ -I/usr/local/include/eopenssl11/
@@ -26,6 +26,7 @@ SRCS_test-bgpsec =    a_time_tm_gen.c o_time.c bs_ber.c bs_cbb.c bs_cbs.c
 SRCS_test-rrdp =       a_time_tm_gen.c o_time.c bs_ber.c bs_cbb.c bs_cbs.c
 SRCS_test-rsc =                a_time_tm_gen.c o_time.c bs_ber.c bs_cbb.c bs_cbs.c
 SRCS_test-aspa =       a_time_tm_gen.c o_time.c bs_ber.c bs_cbb.c bs_cbs.c
+SRCS_test-tak =                a_time_tm_gen.c o_time.c bs_ber.c bs_cbb.c bs_cbs.c
 CFLAGS +=      -I${.CURDIR}/../../../../lib/libcrypto/
 CFLAGS +=      -I${.CURDIR}/../../../../lib/libcrypto/bytestring
 
diff --git a/regress/usr.sbin/rpki-client/tak/05F53BCE4DAA11EDB9AC0C5B9E174E93.tak b/regress/usr.sbin/rpki-client/tak/05F53BCE4DAA11EDB9AC0C5B9E174E93.tak
new file mode 100644 (file)
index 0000000..71a01ed
Binary files /dev/null and b/regress/usr.sbin/rpki-client/tak/05F53BCE4DAA11EDB9AC0C5B9E174E93.tak differ
diff --git a/regress/usr.sbin/rpki-client/tak/42AE70A64DA711EDB37796549E174E93.tak b/regress/usr.sbin/rpki-client/tak/42AE70A64DA711EDB37796549E174E93.tak
new file mode 100644 (file)
index 0000000..cc4e89f
Binary files /dev/null and b/regress/usr.sbin/rpki-client/tak/42AE70A64DA711EDB37796549E174E93.tak differ
diff --git a/regress/usr.sbin/rpki-client/tak/B7C2334E4DA911EDAF862D5A9E174E93.tak b/regress/usr.sbin/rpki-client/tak/B7C2334E4DA911EDAF862D5A9E174E93.tak
new file mode 100644 (file)
index 0000000..c1b87b8
Binary files /dev/null and b/regress/usr.sbin/rpki-client/tak/B7C2334E4DA911EDAF862D5A9E174E93.tak differ
diff --git a/regress/usr.sbin/rpki-client/test-tak.c b/regress/usr.sbin/rpki-client/test-tak.c
new file mode 100644 (file)
index 0000000..ee47512
--- /dev/null
@@ -0,0 +1,97 @@
+/*     $Id: test-tak.c,v 1.1 2022/11/02 12:56:38 job Exp $ */
+/*
+ * Copyright (c) 2022 Job Snijders <job@fastly.com>
+ * Copyright (c) 2019 Kristaps Dzonsons <kristaps@bsd.lv>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#include <assert.h>
+#include <err.h>
+#include <inttypes.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <unistd.h>
+
+#include <openssl/err.h>
+#include <openssl/evp.h>
+#include <openssl/pem.h>
+#include <openssl/x509v3.h>
+
+#include "extern.h"
+
+int outformats;
+int verbose;
+
+int
+main(int argc, char *argv[])
+{
+       int              c, i, ppem = 0, verb = 0;
+       X509            *xp = NULL;
+       struct tak      *p;
+       unsigned char   *buf;
+       size_t           len;
+
+       ERR_load_crypto_strings();
+       OpenSSL_add_all_ciphers();
+       OpenSSL_add_all_digests();
+       x509_init_oid();
+
+       while ((c = getopt(argc, argv, "pv")) != -1)
+               switch (c) {
+               case 'p':
+                       if (ppem)
+                               break;
+                       ppem = 1;
+                       break;
+               case 'v':
+                       verb++;
+                       break;
+               default:
+                       errx(1, "bad argument %c", c);
+               }
+
+       argv += optind;
+       argc -= optind;
+
+       if (argc == 0)
+               errx(1, "argument missing");
+
+       for (i = 0; i < argc; i++) {
+               buf = load_file(argv[i], &len);
+               if ((p = tak_parse(&xp, argv[i], buf, len)) == NULL) {
+                       free(buf);
+                       break;
+               }
+               if (verb)
+                       tak_print(xp, p);
+               if (ppem) {
+                       if (!PEM_write_X509(stdout, xp))
+                               errx(1, "PEM_write_X509: unable to write cert");
+               }
+               free(buf);
+               tak_free(p);
+               X509_free(xp);
+       }
+
+       EVP_cleanup();
+       CRYPTO_cleanup_all_ex_data();
+       ERR_free_strings();
+
+       if (i < argc)
+               errx(1, "test failed for %s", argv[i]);
+
+       printf("OK\n");
+       return 0;
+}