yuzu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-12-24 13:25:37 +00:00
Code Issues Packages Projects Releases Wiki Activity
mbedtls/tests/suites/test_suite_x509parse.data

2530 lines
243 KiB
Plaintext
Raw Normal View History

Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information #1
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Start printing extensions in x509_crt_info()
2014-04-01 10:19:09 +00:00
x509_cert_info:"data_files/server1.crt":"cert. version \: 3\nserial number \: 01\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued on \: 2011-02-12 14\:44\:06\nexpires on \: 2021-02-12 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-10 22:38:58 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information #1 (DER)
Add build instructions to generate DER versions of CRTs and keys
2019-03-12 16:49:26 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Rename server1.der to server1.crt.der
2019-03-14 13:33:20 +00:00
x509_cert_info:"data_files/server1.crt.der":"cert. version \: 3\nserial number \: 01\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued on \: 2011-02-12 14\:44\:06\nexpires on \: 2021-02-12 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
Add build instructions to generate DER versions of CRTs and keys
2019-03-12 16:49:26 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information #2
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Start printing extensions in x509_crt_info()
2014-04-01 10:19:09 +00:00
x509_cert_info:"data_files/server2.crt":"cert. version \: 3\nserial number \: 02\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2011-02-12 14\:44\:06\nexpires on \: 2021-02-12 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-10 22:38:58 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information #2 (DER)
Add build instructions to generate DER versions of CRTs and keys
2019-03-12 16:49:26 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
x509_cert_info:"data_files/server2.crt.der":"cert. version \: 3\nserial number \: 02\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2011-02-12 14\:44\:06\nexpires on \: 2021-02-12 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information #3
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Change serial in test-ca.crt from 0 to 3 to circumvent ASN.1 bug As of 2.13.1, mbedtls_asn1_write_mpi() doesn't write 0 correctly. #2166.
2018-11-01 15:07:42 +00:00
x509_cert_info:"data_files/test-ca.crt":"cert. version \: 3\nserial number \: 03\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued on \: 2011-02-12 14\:44\:00\nexpires on \: 2021-02-12 14\:44\:00\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=true\n"
Add build instructions to generate DER versions of CRTs and keys
2019-03-12 16:49:26 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information #3 (DER)
Add build instructions to generate DER versions of CRTs and keys
2019-03-12 16:49:26 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
x509_cert_info:"data_files/test-ca.crt.der":"cert. version \: 3\nserial number \: 03\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued on \: 2011-02-12 14\:44\:00\nexpires on \: 2021-02-12 14\:44\:00\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=true\n"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-10 22:38:58 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information MD2 Digest
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD2_C
Add instructions for MD[245] test CRTs to tests/data_files/Makefile
2019-06-03 13:14:04 +00:00
x509_cert_info:"data_files/cert_md2.crt":"cert. version \: 3\nserial number \: 09\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert MD2\nissued on \: 2000-01-01 12\:12\:12\nexpires on \: 2030-01-01 12\:12\:12\nsigned using \: RSA with MD2\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information MD4 Digest
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD4_C
Add instructions for MD[245] test CRTs to tests/data_files/Makefile
2019-06-03 13:14:04 +00:00
x509_cert_info:"data_files/cert_md4.crt":"cert. version \: 3\nserial number \: 05\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert MD4\nissued on \: 2000-01-01 12\:12\:12\nexpires on \: 2030-01-01 12\:12\:12\nsigned using \: RSA with MD4\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information MD5 Digest
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD5_C
Add instructions for MD[245] test CRTs to tests/data_files/Makefile
2019-06-03 13:14:04 +00:00
x509_cert_info:"data_files/cert_md5.crt":"cert. version \: 3\nserial number \: 06\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert MD5\nissued on \: 2000-01-01 12\:12\:12\nexpires on \: 2030-01-01 12\:12\:12\nsigned using \: RSA with MD5\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information SHA1 Digest
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Start printing extensions in x509_crt_info()
2014-04-01 10:19:09 +00:00
x509_cert_info:"data_files/cert_sha1.crt":"cert. version \: 3\nserial number \: 07\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA1\nissued on \: 2011-02-12 14\:44\:07\nexpires on \: 2021-02-12 14\:44\:07\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information SHA224 Digest
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Start printing extensions in x509_crt_info()
2014-04-01 10:19:09 +00:00
x509_cert_info:"data_files/cert_sha224.crt":"cert. version \: 3\nserial number \: 08\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA224\nissued on \: 2011-02-12 14\:44\:07\nexpires on \: 2021-02-12 14\:44\:07\nsigned using \: RSA with SHA-224\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information SHA256 Digest
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Start printing extensions in x509_crt_info()
2014-04-01 10:19:09 +00:00
x509_cert_info:"data_files/cert_sha256.crt":"cert. version \: 3\nserial number \: 09\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA256\nissued on \: 2011-02-12 14\:44\:07\nexpires on \: 2021-02-12 14\:44\:07\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information SHA384 Digest
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA512_C
Start printing extensions in x509_crt_info()
2014-04-01 10:19:09 +00:00
x509_cert_info:"data_files/cert_sha384.crt":"cert. version \: 3\nserial number \: 0A\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA384\nissued on \: 2011-02-12 14\:44\:07\nexpires on \: 2021-02-12 14\:44\:07\nsigned using \: RSA with SHA-384\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information SHA512 Digest
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA512_C
Start printing extensions in x509_crt_info()
2014-04-01 10:19:09 +00:00
x509_cert_info:"data_files/cert_sha512.crt":"cert. version \: 3\nserial number \: 0B\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA512\nissued on \: 2011-02-12 14\:44\:07\nexpires on \: 2021-02-12 14\:44\:07\nsigned using \: RSA with SHA-512\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information RSA-PSS, SHA1 Digest
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C
Consider trailerField a constant
2014-05-31 15:08:16 +00:00
x509_cert_info:"data_files/server9.crt":"cert. version \: 3\nserial number \: 16\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2014-01-20 13\:38\:16\nexpires on \: 2024-01-18 13\:38\:16\nsigned using \: RSASSA-PSS (SHA1, MGF1-SHA1, 0xEA)\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\n"
Finish parsing RSASSA-PSS parameters
2014-01-23 18:15:29 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information RSA-PSS, SHA224 Digest
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C
Consider trailerField a constant
2014-05-31 15:08:16 +00:00
x509_cert_info:"data_files/server9-sha224.crt":"cert. version \: 3\nserial number \: 17\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2014-01-20 13\:57\:36\nexpires on \: 2024-01-18 13\:57\:36\nsigned using \: RSASSA-PSS (SHA224, MGF1-SHA224, 0xE2)\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\n"
Finish parsing RSASSA-PSS parameters
2014-01-23 18:15:29 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information RSA-PSS, SHA256 Digest
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C
Consider trailerField a constant
2014-05-31 15:08:16 +00:00
x509_cert_info:"data_files/server9-sha256.crt":"cert. version \: 3\nserial number \: 18\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2014-01-20 13\:57\:45\nexpires on \: 2024-01-18 13\:57\:45\nsigned using \: RSASSA-PSS (SHA256, MGF1-SHA256, 0xDE)\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\n"
Finish parsing RSASSA-PSS parameters
2014-01-23 18:15:29 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information RSA-PSS, SHA384 Digest
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C
Consider trailerField a constant
2014-05-31 15:08:16 +00:00
x509_cert_info:"data_files/server9-sha384.crt":"cert. version \: 3\nserial number \: 19\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2014-01-20 13\:57\:58\nexpires on \: 2024-01-18 13\:57\:58\nsigned using \: RSASSA-PSS (SHA384, MGF1-SHA384, 0xCE)\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\n"
Finish parsing RSASSA-PSS parameters
2014-01-23 18:15:29 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information RSA-PSS, SHA512 Digest
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C
Consider trailerField a constant
2014-05-31 15:08:16 +00:00
x509_cert_info:"data_files/server9-sha512.crt":"cert. version \: 3\nserial number \: 1A\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2014-01-20 13\:58\:12\nexpires on \: 2024-01-18 13\:58\:12\nsigned using \: RSASSA-PSS (SHA512, MGF1-SHA512, 0xBE)\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\n"
Basic parsing of certs signed with RSASSA-PSS
2014-01-22 09:12:57 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information EC, SHA1 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Start printing extensions in x509_crt_info()
2014-04-01 10:19:09 +00:00
x509_cert_info:"data_files/server5-sha1.crt":"cert. version \: 3\nserial number \: 12\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-09-24 16\:21\:27\nexpires on \: 2023-09-22 16\:21\:27\nsigned using \: ECDSA with SHA1\nEC key size \: 256 bits\nbasic constraints \: CA=false\n"
Add cert_info tests for EC and mixed certificates
2013-08-10 07:44:43 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information EC, SHA224 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Start printing extensions in x509_crt_info()
2014-04-01 10:19:09 +00:00
x509_cert_info:"data_files/server5-sha224.crt":"cert. version \: 3\nserial number \: 13\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-09-24 16\:21\:27\nexpires on \: 2023-09-22 16\:21\:27\nsigned using \: ECDSA with SHA224\nEC key size \: 256 bits\nbasic constraints \: CA=false\n"
Add cert_info tests for EC and mixed certificates
2013-08-10 07:44:43 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information EC, SHA256 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Start printing extensions in x509_crt_info()
2014-04-01 10:19:09 +00:00
x509_cert_info:"data_files/server5.crt":"cert. version \: 3\nserial number \: 09\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-09-24 15\:52\:04\nexpires on \: 2023-09-22 15\:52\:04\nsigned using \: ECDSA with SHA256\nEC key size \: 256 bits\nbasic constraints \: CA=false\n"
Add cert_info tests for EC and mixed certificates
2013-08-10 07:44:43 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information EC, SHA384 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA512_C
Start printing extensions in x509_crt_info()
2014-04-01 10:19:09 +00:00
x509_cert_info:"data_files/server5-sha384.crt":"cert. version \: 3\nserial number \: 14\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-09-24 16\:21\:27\nexpires on \: 2023-09-22 16\:21\:27\nsigned using \: ECDSA with SHA384\nEC key size \: 256 bits\nbasic constraints \: CA=false\n"
Add cert_info tests for EC and mixed certificates
2013-08-10 07:44:43 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information EC, SHA512 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA512_C
Start printing extensions in x509_crt_info()
2014-04-01 10:19:09 +00:00
x509_cert_info:"data_files/server5-sha512.crt":"cert. version \: 3\nserial number \: 15\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-09-24 16\:21\:27\nexpires on \: 2023-09-22 16\:21\:27\nsigned using \: ECDSA with SHA512\nEC key size \: 256 bits\nbasic constraints \: CA=false\n"
Add cert_info tests for EC and mixed certificates
2013-08-10 07:44:43 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information, NS Cert Type
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Print NS Cert Type in x509_crt_info()
2014-04-01 11:01:11 +00:00
x509_cert_info:"data_files/server1.cert_type.crt":"cert. version \: 3\nserial number \: 01\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued on \: 2011-02-12 14\:44\:06\nexpires on \: 2021-02-12 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\ncert. type \: SSL Server\n"
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information, Key Usage
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
x509_crt_info() list output cosmectics
2014-04-01 16:00:07 +00:00
x509_cert_info:"data_files/server1.key_usage.crt":"cert. version \: 3\nserial number \: 01\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued on \: 2011-02-12 14\:44\:06\nexpires on \: 2021-02-12 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\nkey usage \: Digital Signature, Non Repudiation, Key Encipherment\n"
Print key_usage in x509_crt_info()
2014-04-01 12:12:11 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information, Key Usage with decipherOnly
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Add parsing/printing for new X.509 keyUsage flags
2015-06-23 08:14:36 +00:00
x509_cert_info:"data_files/keyUsage.decipherOnly.crt":"cert. version \: 3\nserial number \: 9B\:13\:CE\:4C\:A5\:6F\:DE\:52\nissuer name \: C=GB, L=Cambridge, O=Default Company Ltd\nsubject name \: C=GB, L=Cambridge, O=Default Company Ltd\nissued on \: 2015-05-12 10\:36\:55\nexpires on \: 2018-05-11 10\:36\:55\nsigned using \: RSA with SHA1\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\nkey usage \: Digital Signature, Non Repudiation, Key Encipherment, Decipher Only\n"
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information, Subject Alt Name
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
x509_crt_info() list output cosmectics
2014-04-01 16:00:07 +00:00
x509_cert_info:"data_files/cert_example_multi.crt":"cert. version \: 3\nserial number \: 11\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=www.example.com\nissued on \: 2012-05-10 13\:23\:41\nexpires on \: 2022-05-11 13\:23\:41\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\nsubject alt name \: example.com, example.net, *.example.org\n"
Print subject alt name in x509_crt_info()
2014-04-01 11:43:28 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information, Subject Alt Name + Key Usage
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
x509_crt_info() list output cosmectics
2014-04-01 16:00:07 +00:00
x509_cert_info:"data_files/cert_example_multi_nocn.crt":"cert. version \: 3\nserial number \: F7\:C6\:7F\:F8\:E9\:A9\:63\:F9\nissuer name \: C=NL\nsubject name \: C=NL\nissued on \: 2014-01-22 10\:04\:33\nexpires on \: 2024-01-22 10\:04\:33\nsigned using \: RSA with SHA1\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\nsubject alt name \: www.shotokan-braunschweig.de, www.massimo-abate.eu\nkey usage \: Digital Signature, Non Repudiation, Key Encipherment\n"
Print key_usage in x509_crt_info()
2014-04-01 12:12:11 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information, Key Usage + Extended Key Usage
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509_crt_info() list output cosmectics
2014-04-01 16:00:07 +00:00
x509_cert_info:"data_files/server1.ext_ku.crt":"cert. version \: 3\nserial number \: 21\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued on \: 2014-04-01 14\:44\:43\nexpires on \: 2024-03-29 14\:44\:43\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\nkey usage \: Digital Signature, Non Repudiation, Key Encipherment\next key usage \: TLS Web Server Authentication\n"
Print extended key usage in x509_crt_info()
2014-04-01 15:32:44 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information RSA signed by EC
Added needed ECDSA dependencies to test_suite_x509parse.data
2016-08-07 08:56:02 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C
Start printing extensions in x509_crt_info()
2014-04-01 10:19:09 +00:00
x509_cert_info:"data_files/server4.crt":"cert. version \: 3\nserial number \: 08\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-09-24 15\:52\:04\nexpires on \: 2023-09-22 15\:52\:04\nsigned using \: ECDSA with SHA256\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
Add cert_info tests for EC and mixed certificates
2013-08-10 07:44:43 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information EC signed by RSA
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP192R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
Start printing extensions in x509_crt_info()
2014-04-01 10:19:09 +00:00
x509_cert_info:"data_files/server3.crt":"cert. version \: 3\nserial number \: 0D\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-08-09 09\:17\:03\nexpires on \: 2023-08-07 09\:17\:03\nsigned using \: RSA with SHA1\nEC key size \: 192 bits\nbasic constraints \: CA=false\n"
Add cert_info tests for EC and mixed certificates
2013-08-10 07:44:43 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT information Bitstring in subject name
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Add test certificate for bitstring in DN
2015-03-27 12:09:21 +00:00
x509_cert_info:"data_files/bitstring-in-dn.pem":"cert. version \: 3\nserial number \: 02\nissuer name \: CN=Test CA 01, ST=Ecnivorp, C=XX, emailAddress=tca@example.com, O=Test CA Authority\nsubject name \: C=XX, O=tca, ST=Ecnivorp, OU=TCA, CN=Client, emailAddress=client@example.com, serialNumber=7101012255, uniqueIdentifier=?7101012255\nissued on \: 2015-03-11 12\:06\:51\nexpires on \: 2025-03-08 12\:06\:51\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\nsubject alt name \: \next key usage \: TLS Web Client Authentication\n"
Support faulty X509 v1 certificates with extensions (POLARSSL_X509_ALLOW_EXTENSIONS_NON_V3)
2013-09-23 13:01:36 +00:00
X509 certificate v1 with extension
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3:MBEDTLS_SHA1_C
Fixed result for test case in test_suite_x509parse
2014-04-17 14:04:33 +00:00
x509_cert_info:"data_files/cert_v1_with_ext.crt":"cert. version \: 1\nserial number \: BD\:ED\:44\:C7\:D2\:3E\:C2\:A4\nissuer name \: C=XX, ST=XX, L=XX, O=XX, OU=XX, emailAddress=admin@identity-check.org, CN=identity-check.org\nsubject name \: C=XX, ST=XX, L=XX, O=XX, OU=XX, emailAddress=admin@identity-check.org, CN=identity-check.org\nissued on \: 2013-07-04 16\:17\:02\nexpires on \: 2014-07-04 16\:17\:02\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nsubject alt name \: identity-check.org, www.identity-check.org\n"
Support faulty X509 v1 certificates with extensions (POLARSSL_X509_ALLOW_EXTENSIONS_NON_V3)
2013-09-23 13:01:36 +00:00
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-10 22:38:58 +00:00
X509 CRL information #1
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_crl_info:"data_files/crl_expired.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-20 10\:24\:19\nnext update \: 2011-02-20 11\:24\:19\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA1\n"
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
X509 CRL Information MD2 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD2_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_crl_info:"data_files/crl_md2.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2009-07-19 19\:56\:37\nnext update \: 2009-09-17 19\:56\:37\nRevoked certificates\:\nserial number\: 01 revocation date\: 2009-02-09 21\:12\:36\nserial number\: 03 revocation date\: 2009-02-09 21\:12\:36\nsigned using \: RSA with MD2\n"
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
X509 CRL Information MD4 Digest
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD4_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_crl_info:"data_files/crl_md4.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with MD4\n"
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
X509 CRL Information MD5 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD5_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_crl_info:"data_files/crl_md5.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with MD5\n"
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
X509 CRL Information SHA1 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_crl_info:"data_files/crl_sha1.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA1\n"
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
X509 CRL Information SHA224 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_crl_info:"data_files/crl_sha224.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA-224\n"
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
X509 CRL Information SHA256 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_crl_info:"data_files/crl_sha256.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA-256\n"
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
X509 CRL Information SHA384 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA512_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_crl_info:"data_files/crl_sha384.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA-384\n"
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
X509 CRL Information SHA512 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA512_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_crl_info:"data_files/crl_sha512.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA-512\n"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-10 22:38:58 +00:00
Parse CRLs signed with RSASSA-PSS
2014-01-24 14:56:20 +00:00
X509 CRL information RSA-PSS, SHA1 Digest
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C
mbedtls_x509_crl_info:"data_files/crl-rsa-pss-sha1.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2014-01-20 13\:46\:35\nnext update \: 2024-01-18 13\:46\:35\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using \: RSASSA-PSS (SHA1, MGF1-SHA1, 0xEA)\n"
Parse CRLs signed with RSASSA-PSS
2014-01-24 14:56:20 +00:00
X509 CRL information RSA-PSS, SHA224 Digest
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C
mbedtls_x509_crl_info:"data_files/crl-rsa-pss-sha224.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2014-01-20 13\:56\:06\nnext update \: 2024-01-18 13\:56\:06\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using \: RSASSA-PSS (SHA224, MGF1-SHA224, 0xE2)\n"
Parse CRLs signed with RSASSA-PSS
2014-01-24 14:56:20 +00:00
X509 CRL information RSA-PSS, SHA256 Digest
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C
mbedtls_x509_crl_info:"data_files/crl-rsa-pss-sha256.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2014-01-20 13\:56\:16\nnext update \: 2024-01-18 13\:56\:16\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using \: RSASSA-PSS (SHA256, MGF1-SHA256, 0xDE)\n"
Parse CRLs signed with RSASSA-PSS
2014-01-24 14:56:20 +00:00
X509 CRL information RSA-PSS, SHA384 Digest
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C
mbedtls_x509_crl_info:"data_files/crl-rsa-pss-sha384.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2014-01-20 13\:56\:28\nnext update \: 2024-01-18 13\:56\:28\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using \: RSASSA-PSS (SHA384, MGF1-SHA384, 0xCE)\n"
Parse CRLs signed with RSASSA-PSS
2014-01-24 14:56:20 +00:00
X509 CRL information RSA-PSS, SHA512 Digest
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C
mbedtls_x509_crl_info:"data_files/crl-rsa-pss-sha512.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2014-01-20 13\:56\:38\nnext update \: 2024-01-18 13\:56\:38\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using \: RSASSA-PSS (SHA512, MGF1-SHA512, 0xBE)\n"
Parse CRLs signed with RSASSA-PSS
2014-01-24 14:56:20 +00:00
Add tests for crl_info with EC CA
2013-08-10 08:19:03 +00:00
X509 CRL Information EC, SHA1 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_ECDSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_crl_info:"data_files/crl-ec-sha1.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update \: 2013-09-24 16\:31\:08\nnext update \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using \: ECDSA with SHA1\n"
Add tests for crl_info with EC CA
2013-08-10 08:19:03 +00:00
X509 CRL Information EC, SHA224 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_crl_info:"data_files/crl-ec-sha224.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update \: 2013-09-24 16\:31\:08\nnext update \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using \: ECDSA with SHA224\n"
Add tests for crl_info with EC CA
2013-08-10 08:19:03 +00:00
X509 CRL Information EC, SHA256 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_crl_info:"data_files/crl-ec-sha256.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update \: 2013-09-24 16\:31\:08\nnext update \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using \: ECDSA with SHA256\n"
Add tests for crl_info with EC CA
2013-08-10 08:19:03 +00:00
X509 CRL Information EC, SHA384 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA512_C:MBEDTLS_ECDSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_crl_info:"data_files/crl-ec-sha384.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update \: 2013-09-24 16\:31\:08\nnext update \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using \: ECDSA with SHA384\n"
Add tests for crl_info with EC CA
2013-08-10 08:19:03 +00:00
X509 CRL Information EC, SHA512 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA512_C:MBEDTLS_ECDSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_crl_info:"data_files/crl-ec-sha512.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update \: 2013-09-24 16\:31\:08\nnext update \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using \: ECDSA with SHA512\n"
Add tests for crl_info with EC CA
2013-08-10 08:19:03 +00:00
Add test for infinite loop in CRL parse
2016-12-08 17:10:38 +00:00
X509 CRL Malformed Input (trailing spaces at end of file)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA512_C:MBEDTLS_ECDSA_C
Add test for infinite loop in CRL parse
2016-12-08 17:10:38 +00:00
mbedtls_x509_crl_parse:"data_files/crl-malformed-trailing-spaces.pem":MBEDTLS_ERR_PEM_NO_HEADER_FOOTER_PRESENT
x509: CRL: reject unsupported critical extensions
2018-03-13 10:53:30 +00:00
X509 CRL Unsupported critical extension (issuingDistributionPoint)
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
mbedtls_x509_crl_parse:"data_files/crl-idp.pem":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
x509: CRL: add tests for non-critical extension The 'critical' boolean can be set to false in two ways: - by leaving it implicit (test data generated by openssl) - by explicitly setting it to false (generated by hand)
2018-03-14 11:23:56 +00:00
X509 CRL Unsupported non-critical extension (issuingDistributionPoint)
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
mbedtls_x509_crl_parse:"data_files/crl-idpnc.pem":0
Add tests for parsing CSRs
2014-01-24 16:34:26 +00:00
X509 CSR Information RSA with MD4
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD4_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_csr_info:"data_files/server1.req.md4":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with MD4\nRSA key size \: 2048 bits\n"
Add tests for parsing CSRs
2014-01-24 16:34:26 +00:00
X509 CSR Information RSA with MD5
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD5_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_csr_info:"data_files/server1.req.md5":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with MD5\nRSA key size \: 2048 bits\n"
Add tests for parsing CSRs
2014-01-24 16:34:26 +00:00
X509 CSR Information RSA with SHA1
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_csr_info:"data_files/server1.req.sha1":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\n"
Add tests for parsing CSRs
2014-01-24 16:34:26 +00:00
X509 CSR Information RSA with SHA224
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_csr_info:"data_files/server1.req.sha224":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with SHA-224\nRSA key size \: 2048 bits\n"
Add tests for parsing CSRs
2014-01-24 16:34:26 +00:00
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
X509 CSR Information RSA with SHA-256
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_csr_info:"data_files/server1.req.sha256":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\n"
Add tests for parsing CSRs
2014-01-24 16:34:26 +00:00
X509 CSR Information RSA with SHA384
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA512_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_csr_info:"data_files/server1.req.sha384":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with SHA-384\nRSA key size \: 2048 bits\n"
Add tests for parsing CSRs
2014-01-24 16:34:26 +00:00
X509 CSR Information RSA with SHA512
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA512_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_csr_info:"data_files/server1.req.sha512":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with SHA-512\nRSA key size \: 2048 bits\n"
Add tests for parsing CSRs
2014-01-24 16:34:26 +00:00
X509 CSR Information EC with SHA1
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_csr_info:"data_files/server5.req.sha1":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: ECDSA with SHA1\nEC key size \: 256 bits\n"
Add tests for parsing CSRs
2014-01-24 16:34:26 +00:00
X509 CSR Information EC with SHA224
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_csr_info:"data_files/server5.req.sha224":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: ECDSA with SHA224\nEC key size \: 256 bits\n"
Add tests for parsing CSRs
2014-01-24 16:34:26 +00:00
X509 CSR Information EC with SHA256
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_csr_info:"data_files/server5.req.sha256":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: ECDSA with SHA256\nEC key size \: 256 bits\n"
Add tests for parsing CSRs
2014-01-24 16:34:26 +00:00
X509 CSR Information EC with SHA384
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA512_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_csr_info:"data_files/server5.req.sha384":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: ECDSA with SHA384\nEC key size \: 256 bits\n"
Add tests for parsing CSRs
2014-01-24 16:34:26 +00:00
X509 CSR Information EC with SHA512
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA512_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_csr_info:"data_files/server5.req.sha512":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: ECDSA with SHA512\nEC key size \: 256 bits\n"
Add tests for parsing CSRs
2014-01-24 16:34:26 +00:00
Parse CSRs signed with RSASSA-PSS
2014-01-24 17:47:17 +00:00
X509 CSR Information RSA-PSS with SHA1
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C
mbedtls_x509_csr_info:"data_files/server9.req.sha1":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: RSASSA-PSS (SHA1, MGF1-SHA1, 0x6A)\nRSA key size \: 1024 bits\n"
Parse CSRs signed with RSASSA-PSS
2014-01-24 17:47:17 +00:00
X509 CSR Information RSA-PSS with SHA224
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C
mbedtls_x509_csr_info:"data_files/server9.req.sha224":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: RSASSA-PSS (SHA224, MGF1-SHA224, 0x62)\nRSA key size \: 1024 bits\n"
Parse CSRs signed with RSASSA-PSS
2014-01-24 17:47:17 +00:00
X509 CSR Information RSA-PSS with SHA256
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C
mbedtls_x509_csr_info:"data_files/server9.req.sha256":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: RSASSA-PSS (SHA256, MGF1-SHA256, 0x5E)\nRSA key size \: 1024 bits\n"
Parse CSRs signed with RSASSA-PSS
2014-01-24 17:47:17 +00:00
X509 CSR Information RSA-PSS with SHA384
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C
mbedtls_x509_csr_info:"data_files/server9.req.sha384":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: RSASSA-PSS (SHA384, MGF1-SHA384, 0x4E)\nRSA key size \: 1024 bits\n"
Parse CSRs signed with RSASSA-PSS
2014-01-24 17:47:17 +00:00
X509 CSR Information RSA-PSS with SHA512
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C
mbedtls_x509_csr_info:"data_files/server9.req.sha512":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: RSASSA-PSS (SHA512, MGF1-SHA512, 0x3E)\nRSA key size \: 1024 bits\n"
Parse CSRs signed with RSASSA-PSS
2014-01-24 17:47:17 +00:00
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
X509 CSR Information RSA with SHA-256 - Microsoft header
Add additional test case for alternative CSR headers Add a test case for alternative headers possible for CSR's, as defined in RFC7468.
2018-10-06 15:24:13 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
mbedtls_x509_csr_info:"data_files/server1-ms.req.sha256":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\n"
manually merge 39a183a add x509_crt_verify_info()
2015-04-20 09:38:13 +00:00
X509 Verify Information: empty
x509_verify_info:0:"":""
X509 Verify Information: one issue
Fix some X509 macro names For some reason, during the great renaming, some names that should have been prefixed with MBEDTLS_X509_ have only been prefixed with MBEDTLS_
2015-04-20 11:19:02 +00:00
x509_verify_info:MBEDTLS_X509_BADCERT_MISSING:"":"Certificate was missing\n"
manually merge 39a183a add x509_crt_verify_info()
2015-04-20 09:38:13 +00:00
X509 Verify Information: two issues
Fix some X509 macro names For some reason, during the great renaming, some names that should have been prefixed with MBEDTLS_X509_ have only been prefixed with MBEDTLS_
2015-04-20 11:19:02 +00:00
x509_verify_info:MBEDTLS_X509_BADCERT_EXPIRED | MBEDTLS_X509_BADCRL_EXPIRED:"":"The certificate validity has expired\nThe CRL is expired\n"
manually merge 39a183a add x509_crt_verify_info()
2015-04-20 09:38:13 +00:00
X509 Verify Information: two issues, one unknown
Create cert profile API (unimplemented yet)
2015-06-15 08:39:46 +00:00
x509_verify_info:MBEDTLS_X509_BADCERT_OTHER | 0x80000000:"":"Other reason (can be used by verify callback)\nUnknown reason (this should not happen)\n"
Add x509_crt_verify_info()
2015-04-17 14:14:32 +00:00
X509 Verify Information: empty, with prefix
x509_verify_info:0:" ! ":""
X509 Verify Information: one issue, with prefix
Fix some X509 macro names For some reason, during the great renaming, some names that should have been prefixed with MBEDTLS_X509_ have only been prefixed with MBEDTLS_
2015-04-20 11:19:02 +00:00
x509_verify_info:MBEDTLS_X509_BADCERT_MISSING:" ! ":" ! Certificate was missing\n"
Add x509_crt_verify_info()
2015-04-17 14:14:32 +00:00
X509 Verify Information: two issues, with prefix
Fix some X509 macro names For some reason, during the great renaming, some names that should have been prefixed with MBEDTLS_X509_ have only been prefixed with MBEDTLS_
2015-04-20 11:19:02 +00:00
x509_verify_info:MBEDTLS_X509_BADCERT_EXPIRED | MBEDTLS_X509_BADCRL_EXPIRED:" ! ":" ! The certificate validity has expired\n ! The CRL is expired\n"
Add x509_crt_verify_info()
2015-04-17 14:14:32 +00:00
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-10 22:38:58 +00:00
X509 Get Distinguished Name #1
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_dn_gets:"data_files/server1.crt":"subject":"C=NL, O=PolarSSL, CN=PolarSSL Server 1"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-10 22:38:58 +00:00
X509 Get Distinguished Name #2
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_dn_gets:"data_files/server1.crt":"issuer":"C=NL, O=PolarSSL, CN=PolarSSL Test CA"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-10 22:38:58 +00:00
X509 Get Distinguished Name #3
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_dn_gets:"data_files/server2.crt":"subject":"C=NL, O=PolarSSL, CN=localhost"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-10 22:38:58 +00:00
X509 Get Distinguished Name #4
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_dn_gets:"data_files/server2.crt":"issuer":"C=NL, O=PolarSSL, CN=PolarSSL Test CA"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-10 22:38:58 +00:00
X509 Time Expired #1
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA1_C
Rename boolean functions to be clearer
2015-06-02 09:38:50 +00:00
mbedtls_x509_time_is_past:"data_files/server1.crt":"valid_from":1
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-10 22:38:58 +00:00
X509 Time Expired #2
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA1_C
Rename boolean functions to be clearer
2015-06-02 09:38:50 +00:00
mbedtls_x509_time_is_past:"data_files/server1.crt":"valid_to":0
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-10 22:38:58 +00:00
X509 Time Expired #3
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA1_C
Rename boolean functions to be clearer
2015-06-02 09:38:50 +00:00
mbedtls_x509_time_is_past:"data_files/server2.crt":"valid_from":1
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-10 22:38:58 +00:00
X509 Time Expired #4
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA1_C
Rename boolean functions to be clearer
2015-06-02 09:38:50 +00:00
mbedtls_x509_time_is_past:"data_files/server2.crt":"valid_to":0
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-10 22:38:58 +00:00
X509 Time Expired #5
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA1_C
Rename boolean functions to be clearer
2015-06-02 09:38:50 +00:00
mbedtls_x509_time_is_past:"data_files/test-ca.crt":"valid_from":1
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-10 22:38:58 +00:00
Add missing depends to some x509parse tests
2013-08-09 08:59:25 +00:00
X509 Time Expired #6
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA1_C
Rename boolean functions to be clearer
2015-06-02 09:38:50 +00:00
mbedtls_x509_time_is_past:"data_files/test-ca.crt":"valid_to":0
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-10 22:38:58 +00:00
Add x509_time_future()
2014-03-10 11:26:11 +00:00
X509 Time Future #1
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA256_C
Rename boolean functions to be clearer
2015-06-02 09:38:50 +00:00
mbedtls_x509_time_is_future:"data_files/server5.crt":"valid_from":0
Add x509_time_future()
2014-03-10 11:26:11 +00:00
X509 Time Future #2
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA256_C
Rename boolean functions to be clearer
2015-06-02 09:38:50 +00:00
mbedtls_x509_time_is_future:"data_files/server5.crt":"valid_to":1
Add x509_time_future()
2014-03-10 11:26:11 +00:00
X509 Time Future #3
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA256_C
Rename boolean functions to be clearer
2015-06-02 09:38:50 +00:00
mbedtls_x509_time_is_future:"data_files/server5-future.crt":"valid_from":1
Add x509_time_future()
2014-03-10 11:26:11 +00:00
X509 Time Future #4
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA256_C
Rename boolean functions to be clearer
2015-06-02 09:38:50 +00:00
mbedtls_x509_time_is_future:"data_files/server5-future.crt":"valid_to":1
Add x509_time_future()
2014-03-10 11:26:11 +00:00
X509 Time Future #5
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA256_C
Rename boolean functions to be clearer
2015-06-02 09:38:50 +00:00
mbedtls_x509_time_is_future:"data_files/test-ca2.crt":"valid_from":0
Add x509_time_future()
2014-03-10 11:26:11 +00:00
X509 Time Future #6
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA256_C
Rename boolean functions to be clearer
2015-06-02 09:38:50 +00:00
mbedtls_x509_time_is_future:"data_files/test-ca2.crt":"valid_to":1
Add x509_time_future()
2014-03-10 11:26:11 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #1 (Revoked Cert, Expired CRL, no CN)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_EXPIRED:"compat":"NULL"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-10 22:38:58 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #1a (Revoked Cert, Future CRL, no CN)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server6.crt":"data_files/test-ca2.crt":"data_files/crl-future.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_FUTURE:"compat":"NULL"
Reject certs and CRLs from the future
2014-03-10 12:15:18 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #2 (Revoked Cert, Expired CRL)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"PolarSSL Server 1":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_EXPIRED:"compat":"NULL"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-10 22:38:58 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #2a (Revoked Cert, Future CRL)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server6.crt":"data_files/test-ca2.crt":"data_files/crl-future.pem":"localhost":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_FUTURE:"compat":"NULL"
Reject certs and CRLs from the future
2014-03-10 12:15:18 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #3 (Revoked Cert, Future CRL, CN Mismatch)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"PolarSSL Wrong CN":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_EXPIRED | MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-10 22:38:58 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #3a (Revoked Cert, Expired CRL, CN Mismatch)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server6.crt":"data_files/test-ca2.crt":"data_files/crl-future.pem":"Wrong CN":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_FUTURE | MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
Reject certs and CRLs from the future
2014-03-10 12:15:18 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #4 (Valid Cert, Expired CRL)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server2.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_EXPIRED:"compat":"NULL"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-10 22:38:58 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #4a (Revoked Cert, Future CRL)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-future.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_FUTURE:"compat":"NULL"
Reject certs and CRLs from the future
2014-03-10 12:15:18 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #5 (Revoked Cert)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 11:11:06 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #5' (Revoked Cert, differing DN string formats #1)
Add tests for relaxed CRL-CA name comparison This commit introduces variants test-ca_utf8.crt, test-ca_printablestring.crt and test-ca_uppercase.crt of tests/data_files/test-ca.crt which differ from test-ca.crt in their choice of string encoding and upper and lower case letters in the DN field. These changes should be immaterial to the recovation check, and three tests are added that crl.pem, which applies to test-ca.crt, is also considered as applying to test-ca_*.crt.
2018-11-02 10:09:48 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
x509_verify:"data_files/server1.crt":"data_files/test-ca_utf8.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #5'' (Revoked Cert, differing DN string formats #2)
Add tests for relaxed CRL-CA name comparison This commit introduces variants test-ca_utf8.crt, test-ca_printablestring.crt and test-ca_uppercase.crt of tests/data_files/test-ca.crt which differ from test-ca.crt in their choice of string encoding and upper and lower case letters in the DN field. These changes should be immaterial to the recovation check, and three tests are added that crl.pem, which applies to test-ca.crt, is also considered as applying to test-ca_*.crt.
2018-11-02 10:09:48 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
x509_verify:"data_files/server1.crt":"data_files/test-ca_printable.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #5''' (Revoked Cert, differing upper and lower case)
Add tests for relaxed CRL-CA name comparison This commit introduces variants test-ca_utf8.crt, test-ca_printablestring.crt and test-ca_uppercase.crt of tests/data_files/test-ca.crt which differ from test-ca.crt in their choice of string encoding and upper and lower case letters in the DN field. These changes should be immaterial to the recovation check, and three tests are added that crl.pem, which applies to test-ca.crt, is also considered as applying to test-ca_*.crt.
2018-11-02 10:09:48 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
x509_verify:"data_files/server1.crt":"data_files/test-ca_uppercase.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #6 (Revoked Cert)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"PolarSSL Server 1":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 11:11:06 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #7 (Revoked Cert, CN Mismatch)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"PolarSSL Wrong CN":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 11:11:06 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #8 (Valid Cert)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
Reject certs and CRLs from the future
2014-03-10 12:15:18 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #8a (Expired Cert)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server5-expired.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_EXPIRED:"compat":"NULL"
Reject certs and CRLs from the future
2014-03-10 12:15:18 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #8b (Future Cert)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server5-future.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_FUTURE:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 11:11:06 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #8c (Expired Cert, longer chain)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Add test for expired cert in longer chain That's two lines that were not covered in verify_child()
2017-06-05 08:20:32 +00:00
x509_verify:"data_files/server7-expired.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_EXPIRED:"compat":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #8d (Future Cert, longer chain)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Add test for expired cert in longer chain That's two lines that were not covered in verify_child()
2017-06-05 08:20:32 +00:00
x509_verify:"data_files/server7-future.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_FUTURE:"compat":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #9 (Not trusted Cert)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 11:11:06 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #10 (Not trusted Cert, Expired CRL)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl_expired.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-10 22:38:58 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #12 (Valid Cert MD2 Digest, MD2 forbidden)
Add test case exercising verification of valid MD2 CRT The X.509 parsing test suite test_suite_x509parse contains a test exercising X.509 verification for a valid MD4/MD5 certificate in a profile which doesn't allow MD4/MD5. This commit adds an analogous test for MD2.
2019-06-03 13:25:18 +00:00
depends_on:MBEDTLS_MD2_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
x509_verify:"data_files/cert_md2.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_MD:"compat":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #12 (Valid Cert MD4 Digest, MD4 forbidden)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_MD4_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/cert_md4.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_MD:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 11:11:06 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #13 (Valid Cert MD5 Digest, MD5 forbidden)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_MD5_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/cert_md5.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_MD:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 11:11:06 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #12 (Valid Cert MD2 Digest, MD2 allowed)
Add test cases exercising successful verification of MD2/MD4/MD5 CRT
2019-06-03 13:27:03 +00:00
depends_on:MBEDTLS_MD2_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
x509_verify:"data_files/cert_md2.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"all":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #12 (Valid Cert MD4 Digest, MD4 allowed)
Add test cases exercising successful verification of MD2/MD4/MD5 CRT
2019-06-03 13:27:03 +00:00
depends_on:MBEDTLS_MD4_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
x509_verify:"data_files/cert_md4.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"all":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #13 (Valid Cert MD5 Digest, MD5 allowed)
Add test cases exercising successful verification of MD2/MD4/MD5 CRT
2019-06-03 13:27:03 +00:00
depends_on:MBEDTLS_MD5_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
x509_verify:"data_files/cert_md5.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"all":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #14 (Valid Cert SHA1 Digest explicitly allowed in profile)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/cert_sha1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 11:11:06 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #14 (Valid Cert SHA1 Digest allowed in compile-time default profile)
SHA-1 deprecation: allow it in key exchange By default, keep allowing SHA-1 in key exchange signatures. Disabling it causes compatibility issues, especially with clients that use TLS1.2 but don't send the signature_algorithms extension. SHA-1 is forbidden in certificates by default, since it's vulnerable to offline collision-based attacks.
2017-05-12 11:16:40 +00:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES
Unify name of default profile in X.509 tests
2017-08-09 08:41:42 +00:00
x509_verify:"data_files/cert_sha1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"":"NULL"
X.509 tests: obey compile-time SHA-1 support option There is now one test case to validate that SHA-1 is rejected in certificates by default, and one test case to validate that SHA-1 is supported if MBEDTLS_TLS_DEFAULT_ALLOW_SHA1 is #defined.
2017-05-11 14:41:25 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #14 (Valid Cert SHA1 Digest forbidden in default profile)
Cleaned up negative test predicate for test case The test infrastructure does support negative predicates for test cases, thanks to Andreas for letting me know.
2017-05-22 14:47:22 +00:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:!MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES
Unify name of default profile in X.509 tests
2017-08-09 08:41:42 +00:00
x509_verify:"data_files/cert_sha1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_BAD_MD | MBEDTLS_X509_BADCERT_BAD_MD:"":"NULL"
Test that X.509 verification rejects SHA-256 by default
2017-05-05 17:00:39 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #15 (Valid Cert SHA224 Digest)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/cert_sha224.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 11:11:06 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #16 (Valid Cert SHA256 Digest)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/cert_sha256.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 11:11:06 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #17 (Valid Cert SHA384 Digest)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_SHA512_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/cert_sha384.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 11:11:06 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #18 (Valid Cert SHA512 Digest)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_SHA512_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/cert_sha512.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
- Added verification callback in certificate verification chain in order to allow external blacklisting
2011-01-13 17:54:59 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #19 (Valid Cert, denying callback)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_SHA512_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/cert_sha512.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_OTHER:"compat":"verify_none"
- Added verification callback in certificate verification chain in order to allow external blacklisting
2011-01-13 17:54:59 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #19 (Not trusted Cert, allowing callback)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl_expired.pem":"NULL":0:0:"compat":"verify_all"
- Added extra certificates and tests
2009-07-12 11:11:06 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #21 (domain matching wildcard certificate, case insensitive)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/cert_example_wildcard.crt":"data_files/test-ca.crt":"data_files/crl.pem":"mail.ExAmPlE.com":0:0:"compat":"NULL"
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 16:09:32 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #22 (domain not matching wildcard certificate)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/cert_example_wildcard.crt":"data_files/test-ca.crt":"data_files/crl.pem":"mail.example.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 16:09:32 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #23 (domain not matching wildcard certificate)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/cert_example_wildcard.crt":"data_files/test-ca.crt":"data_files/crl.pem":"example.com":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 16:09:32 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #24 (domain matching CN of multi certificate)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"www.example.com":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 16:09:32 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #25 (domain matching multi certificate)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"example.net":0:0:"compat":"NULL"
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 16:09:32 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #26 (domain not matching multi certificate)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"www.example.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 16:09:32 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #27 (domain not matching multi certificate)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"xample.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 16:09:32 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #27 (domain not matching multi certificate)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"bexample.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 16:09:32 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #28 (domain not matching wildcard in multi certificate)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"example.org":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Multi-domain certificates support wildcards as well
2012-02-11 17:38:38 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #29 (domain matching wildcard in multi certificate)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"mail.example.org":0:0:"compat":"NULL"
- Multi-domain certificates support wildcards as well
2012-02-11 17:38:38 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #30 (domain matching multi certificate without CN)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/cert_example_multi_nocn.crt":"data_files/test-ca.crt":"data_files/crl.pem":"www.shotokan-braunschweig.de":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
- Added test for no-subject certificates with altSubjectNames
2012-08-23 10:46:54 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #31 (domain not matching multi certificate without CN)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/cert_example_multi_nocn.crt":"data_files/test-ca.crt":"data_files/crl.pem":"www.example.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH + MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
- Added test for no-subject certificates with altSubjectNames
2012-08-23 10:46:54 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #32 (Valid, EC cert, RSA CA)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP192R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server3.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Add tests for EC cert and crl validation
2013-08-09 09:27:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #33 (Valid, RSA cert, EC CA)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server4.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add tests for EC cert and crl validation
2013-08-09 09:27:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #34 (Valid, EC cert, EC CA)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add tests for EC cert and crl validation
2013-08-09 09:27:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #35 (Revoked, EC CA)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server6.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Add tests for EC cert and crl validation
2013-08-09 09:27:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #36 (Valid, EC CA, SHA1 Digest)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server5-sha1.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add tests for EC cert and crl validation
2013-08-09 09:27:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #37 (Valid, EC CA, SHA224 Digest)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server5-sha224.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add tests for EC cert and crl validation
2013-08-09 09:27:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #38 (Valid, EC CA, SHA384 Digest)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_SHA512_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server5-sha384.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add tests for EC cert and crl validation
2013-08-09 09:27:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #39 (Valid, EC CA, SHA512 Digest)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_SHA512_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server5-sha512.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 08:52:01 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #40 (Valid, depth 0, RSA, CA)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/test-ca.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 08:52:01 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #41 (Valid, depth 0, EC, CA)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/test-ca2.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 08:52:01 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #42 (Depth 0, not CA, RSA)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server2.crt":"data_files/server2.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 08:52:01 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #43 (Depth 0, not CA, EC)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server5.crt":"data_files/server5.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 08:52:01 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #44 (Corrupted signature, EC)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 08:52:01 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #45 (Corrupted signature, RSA)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server2-badsign.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 08:52:01 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #45b (Corrupted signature, intermediate CA)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Add test for bad signature with longer chain This is one line that wasn't covered in verify_child()
2017-06-05 09:12:13 +00:00
x509_verify:"data_files/server7-badsign.crt":"data_files/test-ca2.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #46 (Valid, depth 2, EC-RSA-EC)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server7_int-ca.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 08:52:01 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #47 (Untrusted, depth 2, EC-RSA-EC)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server7_int-ca.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 08:52:01 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #48 (Missing intermediate CA, EC-RSA-EC)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server7.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 08:52:01 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #49 (Valid, depth 2, RSA-EC-RSA)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server8_int-ca2.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 08:52:01 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #50 (Valid, multiple CAs)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server2.crt":"data_files/test-ca_cat12.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 08:52:01 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #51 (Valid, multiple CAs, reverse order)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server2.crt":"data_files/test-ca_cat21.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Add tests for EC cert and crl validation
2013-08-09 09:27:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #52 (CA keyUsage valid)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-crt_crl.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add keyUsage checking for CAs
2014-04-08 13:10:07 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #53 (CA keyUsage missing cRLSign)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_X509_CHECK_KEY_USAGE:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-crt.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_NOT_TRUSTED:"compat":"NULL"
Add keyUsage checking for CAs
2014-04-08 13:10:07 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #54 (CA keyUsage missing cRLSign, no CRL)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-crt.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Add keyUsage checking for CAs
2014-04-08 13:10:07 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #55 (CA keyUsage missing keyCertSign)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_X509_CHECK_KEY_USAGE:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-crl.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add keyUsage checking for CAs
2014-04-08 13:10:07 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #56 (CA keyUsage plain wrong)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_X509_CHECK_KEY_USAGE:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-ds.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add keyUsage checking for CAs
2014-04-08 13:10:07 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #57 (Valid, RSASSA-PSS, SHA-1)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server9.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 16:11:07 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #58 (Valid, RSASSA-PSS, SHA-224)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server9-sha224.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha224.pem":"NULL":0:0:"compat":"NULL"
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 16:11:07 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #59 (Valid, RSASSA-PSS, SHA-256)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server9-sha256.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha256.pem":"NULL":0:0:"compat":"NULL"
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 16:11:07 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #60 (Valid, RSASSA-PSS, SHA-384)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server9-sha384.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha384.pem":"NULL":0:0:"compat":"NULL"
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 16:11:07 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #61 (Valid, RSASSA-PSS, SHA-512)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server9-sha512.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha512.pem":"NULL":0:0:"compat":"NULL"
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 16:11:07 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #62 (Revoked, RSASSA-PSS, SHA-1)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server9.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Also verify CRLs signed with RSASSA-PSS
2014-06-05 15:53:52 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #63 (Revoked, RSASSA-PSS, SHA-1, CRL badsign)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server9.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha1-badsign.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_NOT_TRUSTED:"compat":"NULL"
Also verify CRLs signed with RSASSA-PSS
2014-06-05 15:53:52 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #64 (Valid, RSASSA-PSS, SHA-1, not top)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server9-with-ca.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 16:11:07 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #65 (RSASSA-PSS, SHA1, bad cert signature)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server9-badsign.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 16:11:07 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #66 (RSASSA-PSS, SHA1, no RSA CA)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server9.crt":"data_files/test-ca2.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 16:11:07 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #67 (Valid, RSASSA-PSS, all defaults)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server9-defaults.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha1.pem":"NULL":0:0:"compat":"NULL"
Add RSASSA-PSS certificate with all defaults
2014-06-05 16:00:08 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #68 (RSASSA-PSS, wrong salt_len)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server9-bad-saltlen.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add pathological RSASSA-PSS test certificates Certificates announcing different PSS options than the ones actually used for the signature. Makes sure the options are correctly passed to the verification function.
2014-06-06 16:04:09 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #69 (RSASSA-PSS, wrong mgf_hash)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server9-bad-mgfhash.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add pathological RSASSA-PSS test certificates Certificates announcing different PSS options than the ones actually used for the signature. Makes sure the options are correctly passed to the verification function.
2014-06-06 16:04:09 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #70 (v1 trusted CA)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server1-v1.crt":"data_files/test-ca-v1.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Restore ability to use v1 CA if trusted locally
2014-06-19 10:18:08 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #71 (v1 trusted CA, other)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server2-v1.crt":"data_files/server1-v1.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Restore ability to use v1 CA if trusted locally
2014-06-19 10:18:08 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #72 (v1 chain)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server2-v1-chain.crt":"data_files/test-ca-v1.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Restore ability to use v1 CA if trusted locally
2014-06-19 10:18:08 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #73 (selfsigned trusted without CA bit)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Restore ability to trust non-CA selfsigned EE cert
2014-06-24 09:49:16 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #74 (signed by selfsigned trusted without CA bit)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server6-ss-child.crt":"data_files/server5-selfsigned.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Restore ability to trust non-CA selfsigned EE cert
2014-06-24 09:49:16 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #75 (encoding mismatch)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/enco-cert-utf8str.pem":"data_files/enco-ca-prstr.pem":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Add tests for X.509 name encoding mismatch
2014-10-17 10:23:49 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #76 (multiple CRLs, not revoked)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server5.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_ec-rsa.pem":"NULL":0:0:"compat":"NULL"
Add tests for concatenated CRLs
2014-11-19 13:04:09 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #77 (multiple CRLs, revoked)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server6.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_ec-rsa.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Add tests for concatenated CRLs
2014-11-19 13:04:09 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #78 (multiple CRLs, revoked by second)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server6.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_rsa-ec.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Add tests for concatenated CRLs
2014-11-19 13:04:09 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #79 (multiple CRLs, revoked by future)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server6.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_ecfut-rsa.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED|MBEDTLS_X509_BADCRL_FUTURE:"compat":"NULL"
Add tests for concatenated CRLs
2014-11-19 13:04:09 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #80 (multiple CRLs, first future, revoked by second)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server1.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_ecfut-rsa.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Add tests for concatenated CRLs
2014-11-19 13:04:09 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #81 (multiple CRLs, none relevant)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/enco-cert-utf8str.pem":"data_files/enco-ca-prstr.pem":"data_files/crl_cat_rsa-ec.pem":"NULL":0:0:"compat":"NULL"
Add tests for concatenated CRLs
2014-11-19 13:04:09 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #82 (Not yet valid CA and valid CA)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-future-present.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
X509: Future CA among trusted: add unit tests
2016-02-18 17:28:04 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #83 (valid CA and Not yet valid CA)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-present-future.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
X509: Future CA among trusted: add unit tests
2016-02-18 17:28:04 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #84 (valid CA and Not yet valid CA)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-present-past.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
X509: Future CA among trusted: add more tests
2016-02-19 15:57:17 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #85 (Not yet valid CA and valid CA)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-past-present.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
X509: Future CA among trusted: add more tests
2016-02-19 15:57:17 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #86 (Not yet valid CA and invalid CA)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-future-invalid.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_FUTURE:"compat":"NULL"
Add tests for out flags from x509_crt_verify_top() The tests load certificate chains from files. The CA chains contain a past or future certificate and an invalid certificate. The test then checks that the flags set are MBEDTLS_X509_BADCERT_EXPIRED or MBEDTLS_X509_BADCERT_FUTURE.
2016-12-13 09:59:07 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #87 (Expired CA and invalid CA)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 16:59:02 +00:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-past-invalid.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_EXPIRED:"compat":"NULL"
Add tests for out flags from x509_crt_verify_top() The tests load certificate chains from files. The CA chains contain a past or future certificate and an invalid certificate. The test then checks that the flags set are MBEDTLS_X509_BADCERT_EXPIRED or MBEDTLS_X509_BADCERT_FUTURE.
2016-12-13 09:59:07 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #88 (Spurious cert in the chain)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add tests for spurious certs in the chain We have code to skip them but didn't have explicit tests ensuring they are (the corresponding branch was never taken). While at it, remove extra copy of the chain in server10*.crt, which was duplicated for no reason.
2017-06-06 08:25:43 +00:00
x509_verify:"data_files/server7_spurious_int-ca.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #89 (Spurious cert later in the chain)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add tests for spurious certs in the chain We have code to skip them but didn't have explicit tests ensuring they are (the corresponding branch was never taken). While at it, remove extra copy of the chain in server10*.crt, which was duplicated for no reason.
2017-06-06 08:25:43 +00:00
x509_verify:"data_files/server10_int3_spurious_int-ca2.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #90 (EE with same name as trusted root)
Add test for CA forgery attempt As we accept EE certs that are explicitly trusted (in the list of trusted roots) and usually look for parent by subject, and in the future we might want to avoid checking the self-signature on trusted certs, there could a risk that we incorrectly accept a cert that looks like a trusted root except it doesn't have the same key. This test ensures this will never happen.
2017-06-29 07:48:08 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Unify name of default profile in X.509 tests
2017-08-09 08:41:42 +00:00
x509_verify:"data_files/server5-ss-forgeca.crt":"data_files/test-int-ca3.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"":"NULL"
Add test for CA forgery attempt As we accept EE certs that are explicitly trusted (in the list of trusted roots) and usually look for parent by subject, and in the future we might want to avoid checking the self-signature on trusted certs, there could a risk that we incorrectly accept a cert that looks like a trusted root except it doesn't have the same key. This test ensures this will never happen.
2017-06-29 07:48:08 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #91 (same CA with good then bad key)
Add test for same CA with different keys When a trusted CA is rolling its root keys, it could happen that for some users the list of trusted roots contains two versions of the same CA with the same name but different keys. Currently this is supported but wasn't tested. Note: the intermediate file test-ca-alt.csr is commited on purpose, as not commiting intermediate files causes make to regenerate files that we don't want it to touch.
2017-07-03 16:06:38 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C
x509_verify:"data_files/server1.crt":"data_files/test-ca-good-alt.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #91 (same CA with bad then good key)
Add test for same CA with different keys When a trusted CA is rolling its root keys, it could happen that for some users the list of trusted roots contains two versions of the same CA with the same name but different keys. Currently this is supported but wasn't tested. Note: the intermediate file test-ca-alt.csr is commited on purpose, as not commiting intermediate files causes make to regenerate files that we don't want it to touch.
2017-07-03 16:06:38 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C
x509_verify:"data_files/server1.crt":"data_files/test-ca-alt-good.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #92 (bad name, allowing callback)
Add test for bad name and callback This ensures that the callback can actually clear that flag, and that it is seen by the callback at the right level. This flag is not set at the same place than others, and this difference will get bigger in the upcoming refactor, so let's ensure we don't break anything here.
2017-07-05 16:14:38 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Unify name of default profile in X.509 tests
2017-08-09 08:41:42 +00:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"globalhost":0:0:"":"verify_all"
Add test for bad name and callback This ensures that the callback can actually clear that flag, and that it is seen by the callback at the right level. This flag is not set at the same place than others, and this difference will get bigger in the upcoming refactor, so let's ensure we don't break anything here.
2017-07-05 16:14:38 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #93 (Suite B invalid, EC cert, RSA CA)
Add some tests for different available profiles Add tests for suite b profile and for the next profile
2018-02-06 16:47:17 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_ECP_C:MBEDTLS_ECP_DP_SECP192R1_ENABLED:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
x509_verify:"data_files/server3.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_MD|MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY|MBEDTLS_X509_BADCRL_BAD_MD|MBEDTLS_X509_BADCRL_BAD_PK:"suite_b":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #94 (Suite B invalid, RSA cert, EC CA)
Fix remaining issues found by depend-pkalgs
2018-03-12 14:26:59 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_PKCS1_V15:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Add some tests for different available profiles Add tests for suite b profile and for the next profile
2018-02-06 16:47:17 +00:00
x509_verify:"data_files/server4.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_PK:"suite_b":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #95 (Suite B Valid, EC cert, EC CA)
Fix remaining issues found by depend-pkalgs
2018-03-12 14:26:59 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Add some tests for different available profiles Add tests for suite b profile and for the next profile
2018-02-06 16:47:17 +00:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"suite_b":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #96 (next profile Invalid Cert SHA224 Digest)
Fix remaining issues found by depend-hashes
2018-03-12 14:49:35 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Add some tests for different available profiles Add tests for suite b profile and for the next profile
2018-02-06 16:47:17 +00:00
x509_verify:"data_files/cert_sha224.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_MD|MBEDTLS_X509_BADCRL_BAD_MD:"next":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification #97 (next profile Valid Cert SHA256 Digest)
Fix remaining issues found by depend-hashes
2018-03-12 14:49:35 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_SHA1_C
Add some tests for different available profiles Add tests for suite b profile and for the next profile
2018-02-06 16:47:17 +00:00
x509_verify:"data_files/cert_sha256.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"next":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification callback: bad name
Add test for bad name and callback This ensures that the callback can actually clear that flag, and that it is seen by the callback at the right level. This flag is not set at the same place than others, and this difference will get bigger in the upcoming refactor, so let's ensure we don't break anything here.
2017-07-05 16:14:38 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Fix test that didn't check full value of flags
2017-08-21 09:00:22 +00:00
x509_verify_callback:"data_files/server5.crt":"data_files/test-ca2.crt":"globalhost":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 1 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 0 - serial 09 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000004\n"
Add test for bad name and callback This ensures that the callback can actually clear that flag, and that it is seen by the callback at the right level. This flag is not set at the same place than others, and this difference will get bigger in the upcoming refactor, so let's ensure we don't break anything here.
2017-07-05 16:14:38 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification callback: trusted EE cert
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 09:59:24 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Fix test that didn't check full value of flags
2017-08-21 09:00:22 +00:00
x509_verify_callback:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":"NULL":0:"depth 0 - serial 53\:A2\:CB\:4B\:12\:4E\:AD\:83\:7D\:A8\:94\:B2 - subject CN=selfsigned, OU=testing, O=PolarSSL, C=NL - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 09:59:24 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification callback: trusted EE cert, expired
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_HAVE_TIME_DATE
Fix test that didn't check full value of flags
2017-08-21 09:00:22 +00:00
x509_verify_callback:"data_files/server5-ss-expired.crt":"data_files/server5-ss-expired.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 0 - serial D8\:64\:61\:05\:E3\:A3\:CD\:78 - subject C=UK, O=mbed TLS, OU=testsuite, CN=localhost - flags 0x00000001\n"
Add tests for flags passed to f_vrfy The tests cover chains of length 0, 1 and 2, with one error, located at any of the available levels in the chain. This exercises all three call sites of f_vrfy (two in verify_top, one in verify_child). Chains of greater length would not cover any new code path or behaviour that I can see.
2017-06-27 10:51:52 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification callback: simple
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 09:59:24 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Change serial in test-ca.crt from 0 to 3 to circumvent ASN.1 bug As of 2.13.1, mbedtls_asn1_write_mpi() doesn't write 0 correctly. #2166.
2018-11-01 15:07:42 +00:00
x509_verify_callback:"data_files/server1.crt":"data_files/test-ca.crt":"NULL":0:"depth 1 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 0 - serial 01 - subject C=NL, O=PolarSSL, CN=PolarSSL Server 1 - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 09:59:24 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification callback: simple, EE expired
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Fix test that didn't check full value of flags
2017-08-21 09:00:22 +00:00
x509_verify_callback:"data_files/server5-expired.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 1 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 0 - serial 1E - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000001\n"
Add tests for flags passed to f_vrfy The tests cover chains of length 0, 1 and 2, with one error, located at any of the available levels in the chain. This exercises all three call sites of f_vrfy (two in verify_top, one in verify_child). Chains of greater length would not cover any new code path or behaviour that I can see.
2017-06-27 10:51:52 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification callback: simple, root expired
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Fix test that didn't check full value of flags
2017-08-21 09:00:22 +00:00
x509_verify_callback:"data_files/server5.crt":"data_files/test-ca2-expired.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 1 - serial 01 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000001\ndepth 0 - serial 09 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
Add tests for flags passed to f_vrfy The tests cover chains of length 0, 1 and 2, with one error, located at any of the available levels in the chain. This exercises all three call sites of f_vrfy (two in verify_top, one in verify_child). Chains of greater length would not cover any new code path or behaviour that I can see.
2017-06-27 10:51:52 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification callback: two trusted roots
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Change serial in test-ca.crt from 0 to 3 to circumvent ASN.1 bug As of 2.13.1, mbedtls_asn1_write_mpi() doesn't write 0 correctly. #2166.
2018-11-01 15:07:42 +00:00
x509_verify_callback:"data_files/server1.crt":"data_files/test-ca_cat12.crt":"NULL":0:"depth 1 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 0 - serial 01 - subject C=NL, O=PolarSSL, CN=PolarSSL Server 1 - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 09:59:24 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification callback: two trusted roots, reversed order
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Change serial in test-ca.crt from 0 to 3 to circumvent ASN.1 bug As of 2.13.1, mbedtls_asn1_write_mpi() doesn't write 0 correctly. #2166.
2018-11-01 15:07:42 +00:00
x509_verify_callback:"data_files/server1.crt":"data_files/test-ca_cat21.crt":"NULL":0:"depth 1 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 0 - serial 01 - subject C=NL, O=PolarSSL, CN=PolarSSL Server 1 - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 09:59:24 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification callback: root included
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Change serial in test-ca.crt from 0 to 3 to circumvent ASN.1 bug As of 2.13.1, mbedtls_asn1_write_mpi() doesn't write 0 correctly. #2166.
2018-11-01 15:07:42 +00:00
x509_verify_callback:"data_files/server1_ca.crt":"data_files/test-ca_cat21.crt":"NULL":0:"depth 1 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 0 - serial 01 - subject C=NL, O=PolarSSL, CN=PolarSSL Server 1 - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 09:59:24 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification callback: intermediate ca
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Fix test that didn't check full value of flags
2017-08-21 09:00:22 +00:00
x509_verify_callback:"data_files/server7_int-ca.crt":"data_files/test-ca_cat12.crt":"NULL":0:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 09:59:24 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification callback: intermediate ca, root included
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Fix test that didn't check full value of flags
2017-08-21 09:00:22 +00:00
x509_verify_callback:"data_files/server7_int-ca_ca2.crt":"data_files/test-ca_cat12.crt":"NULL":0:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 09:59:24 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification callback: intermediate ca trusted
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C
Fix test that didn't check full value of flags
2017-08-21 09:00:22 +00:00
x509_verify_callback:"data_files/server7_int-ca_ca2.crt":"data_files/test-int-ca.crt":"NULL":0:"depth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
Skip to trusted certs early in the chain This helps in the case where an intermediate certificate is directly trusted. In that case we want to ignore what comes after it in the chain, not only for performance but also to avoid false negatives (eg an old root being no longer trusted while the newer intermediate is directly trusted). closes #220
2015-09-01 14:35:00 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification callback: intermediate ca, EE expired
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Fix test that didn't check full value of flags
2017-08-21 09:00:22 +00:00
x509_verify_callback:"data_files/server7-expired.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000001\n"
Add tests for flags passed to f_vrfy The tests cover chains of length 0, 1 and 2, with one error, located at any of the available levels in the chain. This exercises all three call sites of f_vrfy (two in verify_top, one in verify_child). Chains of greater length would not cover any new code path or behaviour that I can see.
2017-06-27 10:51:52 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification callback: intermediate ca, int expired
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Fix test that didn't check full value of flags
2017-08-21 09:00:22 +00:00
x509_verify_callback:"data_files/server7_int-ca-exp.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000001\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
Add tests for flags passed to f_vrfy The tests cover chains of length 0, 1 and 2, with one error, located at any of the available levels in the chain. This exercises all three call sites of f_vrfy (two in verify_top, one in verify_child). Chains of greater length would not cover any new code path or behaviour that I can see.
2017-06-27 10:51:52 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification callback: intermediate ca, root expired
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 14:50:06 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Fix test that didn't check full value of flags
2017-08-21 09:00:22 +00:00
x509_verify_callback:"data_files/server7_int-ca.crt":"data_files/test-ca2-expired.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 2 - serial 01 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000001\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
Add tests for flags passed to f_vrfy The tests cover chains of length 0, 1 and 2, with one error, located at any of the available levels in the chain. This exercises all three call sites of f_vrfy (two in verify_top, one in verify_child). Chains of greater length would not cover any new code path or behaviour that I can see.
2017-06-27 10:51:52 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification callback: two intermediates
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Change serial in test-ca.crt from 0 to 3 to circumvent ASN.1 bug As of 2.13.1, mbedtls_asn1_write_mpi() doesn't write 0 correctly. #2166.
2018-11-01 15:07:42 +00:00
x509_verify_callback:"data_files/server10_int3_int-ca2.crt":"data_files/test-ca_cat21.crt":"NULL":0:"depth 3 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 2 - serial 0F - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate EC CA - flags 0x00000000\ndepth 1 - serial 4D - subject C=UK, O=mbed TLS, CN=mbed TLS Test intermediate CA 3 - flags 0x00000000\ndepth 0 - serial 4B - subject CN=localhost - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 09:59:24 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification callback: two intermediates, root included
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Change serial in test-ca.crt from 0 to 3 to circumvent ASN.1 bug As of 2.13.1, mbedtls_asn1_write_mpi() doesn't write 0 correctly. #2166.
2018-11-01 15:07:42 +00:00
x509_verify_callback:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca_cat21.crt":"NULL":0:"depth 3 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 2 - serial 0F - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate EC CA - flags 0x00000000\ndepth 1 - serial 4D - subject C=UK, O=mbed TLS, CN=mbed TLS Test intermediate CA 3 - flags 0x00000000\ndepth 0 - serial 4B - subject CN=localhost - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 09:59:24 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification callback: two intermediates, top int trusted
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C
Fix test that didn't check full value of flags
2017-08-21 09:00:22 +00:00
x509_verify_callback:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":"NULL":0:"depth 2 - serial 0F - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate EC CA - flags 0x00000000\ndepth 1 - serial 4D - subject C=UK, O=mbed TLS, CN=mbed TLS Test intermediate CA 3 - flags 0x00000000\ndepth 0 - serial 4B - subject CN=localhost - flags 0x00000000\n"
Skip to trusted certs early in the chain This helps in the case where an intermediate certificate is directly trusted. In that case we want to ignore what comes after it in the chain, not only for performance but also to avoid false negatives (eg an old root being no longer trusted while the newer intermediate is directly trusted). closes #220
2015-09-01 14:35:00 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification callback: two intermediates, low int trusted
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Fix test that didn't check full value of flags
2017-08-21 09:00:22 +00:00
x509_verify_callback:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-int-ca3.crt":"NULL":0:"depth 1 - serial 4D - subject C=UK, O=mbed TLS, CN=mbed TLS Test intermediate CA 3 - flags 0x00000000\ndepth 0 - serial 4B - subject CN=localhost - flags 0x00000000\n"
Skip to trusted certs early in the chain This helps in the case where an intermediate certificate is directly trusted. In that case we want to ignore what comes after it in the chain, not only for performance but also to avoid false negatives (eg an old root being no longer trusted while the newer intermediate is directly trusted). closes #220
2015-09-01 14:35:00 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification callback: no intermediate, bad signature
Add test for callback and bad signatures Our current behaviour is a bit inconsistent here: - when the bad signature is made by a trusted CA, we stop here and don't include the trusted CA in the chain (don't call vrfy on it) - otherwise, we just add NOT_TRUSTED to the flags but keep building the chain and call vrfy on the upper certs
2017-07-14 09:32:38 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Fix test that didn't check full value of flags
2017-08-21 09:00:22 +00:00
x509_verify_callback:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 0 - serial 09 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000008\n"
Add test for callback and bad signatures Our current behaviour is a bit inconsistent here: - when the bad signature is made by a trusted CA, we stop here and don't include the trusted CA in the chain (don't call vrfy on it) - otherwise, we just add NOT_TRUSTED to the flags but keep building the chain and call vrfy on the upper certs
2017-07-14 09:32:38 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verification callback: one intermediate, bad signature
Add test for callback and bad signatures Our current behaviour is a bit inconsistent here: - when the bad signature is made by a trusted CA, we stop here and don't include the trusted CA in the chain (don't call vrfy on it) - otherwise, we just add NOT_TRUSTED to the flags but keep building the chain and call vrfy on the upper certs
2017-07-14 09:32:38 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Fix test that didn't check full value of flags
2017-08-21 09:00:22 +00:00
x509_verify_callback:"data_files/server7-badsign.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000008\n"
Add test for callback and bad signatures Our current behaviour is a bit inconsistent here: - when the bad signature is made by a trusted CA, we stop here and don't include the trusted CA in the chain (don't call vrfy on it) - otherwise, we just add NOT_TRUSTED to the flags but keep building the chain and call vrfy on the upper certs
2017-07-14 09:32:38 +00:00
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-10 22:38:58 +00:00
X509 Parse Selftest
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_CERTS_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-10 22:38:58 +00:00
x509_selftest:
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (Empty Certificate)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
x509parse_crt:"":"":MBEDTLS_ERR_X509_INVALID_FORMAT
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (inv Certificate, bad tag)
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"0500":"":MBEDTLS_ERR_X509_INVALID_FORMAT
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (inv Certificate, no length)
Extend negative testing for X.509 TBS header parsing
2019-06-04 14:19:09 +00:00
x509parse_crt:"30":"":MBEDTLS_ERR_X509_INVALID_FORMAT
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (inv Certificate, bad length encoding)
Extend negative testing for X.509 TBS header parsing
2019-06-04 14:19:09 +00:00
x509parse_crt:"3085":"":MBEDTLS_ERR_X509_INVALID_FORMAT
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (inv Certificate, length data incomplete)
Extend negative testing for X.509 TBS header parsing
2019-06-04 14:19:09 +00:00
x509parse_crt:"308200":"":MBEDTLS_ERR_X509_INVALID_FORMAT
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (inv Certificate, length out of bounds)
Extend negative testing for X.509 TBS header parsing
2019-06-04 14:19:09 +00:00
x509parse_crt:"3001":"":MBEDTLS_ERR_X509_INVALID_FORMAT
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (inv TBS, invalid tag)
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"30020500":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (inv TBS, length missing)
Extend negative testing for X.509 TBS header parsing
2019-06-04 14:19:09 +00:00
x509parse_crt:"300130":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (inv TBS, invalid length encoding)
Extend negative testing for X.509 TBS header parsing
2019-06-04 14:19:09 +00:00
x509parse_crt:"30023085":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (inv TBS, length data incomplete)
Extend negative testing for X.509 TBS header parsing
2019-06-04 14:19:09 +00:00
x509parse_crt:"300430839999":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (inv TBS, length out of bounds)
Extend negative testing for X.509 TBS header parsing
2019-06-04 14:19:09 +00:00
x509parse_crt:"30023003":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS empty)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 TBS header parsing
2019-06-04 14:19:09 +00:00
x509parse_crt:"30153000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
X509 CRT ASN1 (TBS, invalid version tag, serial missing)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"301730020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, valid outer version tag, no outer length)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Version parsing
2019-06-04 14:24:18 +00:00
x509parse_crt:"30163001a0300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv inner version tag)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"30193004a0020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, valid inner version tag, no inner length)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Version parsing
2019-06-04 14:24:18 +00:00
x509parse_crt:"30183003a00102300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, valid inner version tag, inv inner length encoding)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Version parsing
2019-06-04 14:24:18 +00:00
x509parse_crt:"30193004a0020285300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, valid inner version tag, inner length too large for int)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Version parsing
2019-06-04 14:24:18 +00:00
x509parse_crt:"30293014a012021000000000000000000000000000000000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, valid inner version tag, inner vs. outer length mismatch)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Version parsing
2019-06-04 14:24:18 +00:00
x509parse_crt:"301b3006a00402010200300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, valid version tag, length exceeds TBS)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Version parsing
2019-06-04 14:24:18 +00:00
x509parse_crt:"30293014a012021100000000000000000000000000000000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, valid version tag + length, unknown version number 3)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Version parsing
2019-06-04 14:24:18 +00:00
x509parse_crt:"308196308180a0030201038204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, valid version tag + length, unknown version number 4)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Version parsing
2019-06-04 14:24:18 +00:00
x509parse_crt:"308196308180a0030201048204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, valid version tag + length, version number overflow)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Version parsing
2019-06-04 14:24:18 +00:00
x509parse_crt:"308199308183a00602047FFFFFFF8204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, serial missing)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Version parsing
2019-06-04 14:24:18 +00:00
x509parse_crt:"301a3005a003020102300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv serial, tag wrong)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"301c3007a0030201020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv serial, length missing)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Version parsing
2019-06-04 14:24:18 +00:00
x509parse_crt:"301b3006a00302010282300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv serial, inv length encoding)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Serial number parsing
2019-06-04 14:25:00 +00:00
x509parse_crt:"301c3007a0030201028285300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv serial, length out of bounds)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Serial number parsing
2019-06-04 14:25:00 +00:00
x509parse_crt:"301c3007a0030201028201300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, AlgID missing)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Version parsing
2019-06-04 14:24:18 +00:00
x509parse_crt:"3020300ba0030201028204deadbeef300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv AlgID, tag wrong)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"3022300da0030201028204deadbeef0500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv AlgID, OID missing)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 15:04:36 +00:00
x509parse_crt:"307b3073a0030201008204deadbeef3000300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff3000030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra coverage and regression tests
2009-07-20 21:26:07 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv AlgID, OID tag wrong)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 15:04:36 +00:00
x509parse_crt:"307f3075a0030201008204deadbeef30020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff30020500030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv AlgID, OID inv length encoding)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 15:04:36 +00:00
x509parse_crt:"307f3075a0030201008204deadbeef30020685300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff30020685030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added extra coverage and regression tests
2009-07-20 21:26:07 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv AlgID, OID length out of bounds)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 15:04:36 +00:00
x509parse_crt:"307f3075a0030201008204deadbeef30020601300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff30020601030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv AlgID, OID empty)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 15:04:36 +00:00
x509parse_crt:"307f3075a0030201008204deadbeef30020600300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff30020600030200ff":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG + MBEDTLS_ERR_OID_NOT_FOUND
- Added extra coverage and regression tests
2009-07-20 21:26:07 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv AlgID, OID unknown)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 15:04:36 +00:00
x509parse_crt:"3081873079a0030201008204deadbeef30060604deadbeef300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff30060604deadbeef030200ff":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG + MBEDTLS_ERR_OID_NOT_FOUND
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv AlgID, param inv length encoding)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 15:04:36 +00:00
x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0685300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0685030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Extend negative testing for X.509 AlgorithmIdentifier parsing
2019-02-12 13:44:17 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv AlgID, param length out of bounds)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 15:04:36 +00:00
x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0601300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0601030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Extend negative testing for X.509 AlgorithmIdentifier parsing
2019-02-12 13:44:17 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv AlgID, param length mismatch)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 15:04:36 +00:00
x509parse_crt:"30819a308182a0030201008204deadbeef300f06092a864886f70d01010b06010000300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300f06092a864886f70d01010b06010000030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv AlgID, params present but empty)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 15:04:36 +00:00
x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0600300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0600030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv AlgID, bad RSASSA-PSS params)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 15:04:36 +00:00
x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010a3100300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010a3100030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, Issuer missing)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 15:04:36 +00:00
x509parse_crt:"302f301aa0030201008204deadbeef300d06092a864886f70d01010b0500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Issuer, RDNSequence inv tag)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 15:04:36 +00:00
x509parse_crt:"3031301ca0030201008204deadbeef300d06092a864886f70d01010b05000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Issuer, RDNSequence length missing)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 15:04:36 +00:00
x509parse_crt:"3030301ba0030201008204deadbeef300d06092a864886f70d01010b050030300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Issuer, RDNSequence inv length encoding)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 15:04:36 +00:00
x509parse_crt:"3031301ca0030201008204deadbeef300d06092a864886f70d01010b05003085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Issuer, RDNSequence length out of bounds)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 11:51:32 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 15:04:36 +00:00
x509parse_crt:"3031301ca0030201008204deadbeef300d06092a864886f70d01010b05003001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Issuer, RDNSequence empty)
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081893074a0030201028204deadbeef300d06092a864886f70d01010b05003000301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Issuer, RDN inv tag)
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b050030020500301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Issuer, RDN inv length encoding)
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b050030023185301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Issuer, RDN length out of bounds)
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b050030023101301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Issuer, RDN empty)
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b050030023100301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue inv tag)
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300431020500301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue inv length encoding)
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300431023085301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue length out of bounds)
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300431023001301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue empty)
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300431023000301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue type inv tag)
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b05003006310430020500301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue type inv no length data)
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818e3079a0030201028204deadbeef300d06092a864886f70d01010b050030053103300106301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue type inv length encoding)
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b05003006310430020685301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Fix test case name formatting in X.509 parsing suite
2019-03-13 10:36:47 +00:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue type length out of bounds)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
x509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b05003006310430020601301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue value missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
x509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b05003006310430020600301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue value inv tag)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"308191307ca0030201028204deadbeef300d06092a864886f70d01010b050030083106300406000500301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG;
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue value length missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
x509parse_crt:"308190307ba0030201028204deadbeef300d06092a864886f70d01010b050030073105300306000c301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue value inv length encoding)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
x509parse_crt:"308191307ca0030201028204deadbeef300d06092a864886f70d01010b050030083106300406000C85301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue value length out of bounds)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
x509parse_crt:"308191307ca0030201028204deadbeef300d06092a864886f70d01010b050030083106300406000c01301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue value length mismatch)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
x509parse_crt:"308193307ea0030201028204deadbeef300d06092a864886f70d01010b0500300a3108300606000c010000301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added extra coverage and regression tests
2009-07-20 21:26:07 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Issuer, 2nd AttributeTypeValue empty)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Issuer parsing
2019-02-12 15:49:08 +00:00
x509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300e310c300806000c04546573743000301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra coverage and regression tests
2009-07-20 21:26:07 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, Validity missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Validity parsing
2019-02-13 11:22:23 +00:00
x509parse_crt:"303d3028a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c0454657374300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Validity, inv tag)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"303f302aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c04546573740500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Validity, length field missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Validity parsing
2019-02-13 11:22:23 +00:00
x509parse_crt:"303e3029a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c045465737430300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra coverage and regression tests
2009-07-20 21:26:07 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Validity, inv length encoding)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Validity parsing
2019-02-13 11:22:23 +00:00
x509parse_crt:"303f302aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c04546573743085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Validity, length out of bounds)
Extend negative testing for X.509 Validity parsing
2019-02-13 11:22:23 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"303f302aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c04546573743001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Validity, notBefore missing)
Extend negative testing for X.509 Validity parsing
2019-02-13 11:22:23 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30793064a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c04546573743000300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Validity, notBefore inv tag)
Extend negative testing for X.509 Validity parsing
2019-02-13 11:22:23 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"307b3066a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c045465737430020500300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 Validity parsing
2019-02-13 11:22:23 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Validity, notBefore no length)
Extend negative testing for X.509 Validity parsing
2019-02-13 11:22:23 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"307a3065a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c0454657374300117300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Validity, notBefore inv length encoding)
Extend negative testing for X.509 Validity parsing
2019-02-13 11:22:23 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"307b3066a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c04546573743002178f300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Validity, notBefore length out of bounds)
Extend negative testing for X.509 Validity parsing
2019-02-13 11:22:23 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"307b3066a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c045465737430021701300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Validity, notBefore length out of bounds)
Extend negative testing for X.509 Validity parsing
2019-02-13 11:22:23 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"307b3066a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c045465737430021701300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Validity, notBefore empty)
Extend negative testing for X.509 Validity parsing
2019-02-13 11:22:23 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081893074a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a3008060013045465737430101700170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Validity, notBefore invalid)
Extend negative testing for X.509 Validity parsing
2019-02-13 11:22:23 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303000000000170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Validity, notAfter missing)
Extend negative testing for X.509 Validity parsing
2019-02-13 11:22:23 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081873072a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374300e170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Validity, notAfter inv tag)
Extend negative testing for X.509 Validity parsing
2019-02-13 11:22:23 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"3081893074a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a300806001304546573743010170c3039313233313233353935390500300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 Validity parsing
2019-02-13 11:22:23 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Validity, notAfter length missing)
Extend negative testing for X.509 Validity parsing
2019-02-13 11:22:23 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081883073a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374300f170c30393132333132333539353917300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Validity, notAfter inv length encoding)
Extend negative testing for X.509 Validity parsing
2019-02-13 11:22:23 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081893074a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a300806001304546573743010170c3039313233313233353935391785300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Validity, notAfter length out of bounds)
Extend negative testing for X.509 Validity parsing
2019-02-13 11:22:23 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081893074a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a300806001304546573743010170c3039313233313233353935391701300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Validity, notAfter empty)
Extend negative testing for X.509 Validity parsing
2019-02-13 11:22:23 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081893074a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a300806001304546573743010170c3039313233313233353935391700300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Validity, notAfter invalid)
Extend negative testing for X.509 Validity parsing
2019-02-13 11:22:23 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303931323331323335393539170c303930313031303000000000300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Validity, notAfter data remaining)
Extend negative testing for X.509 Validity parsing
2019-02-13 11:22:23 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"308198308182a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301e170c303930313031303030303030170c3039313233313233353935391700300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added extra coverage and regression tests
2009-07-20 21:26:07 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, Subject missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
x509parse_crt:"305b3046a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Subject, RDNSequence inv tag)
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"305c3047a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353900300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Subject, RDNSequence length missing)
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"305c3047a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Subject, RDNSequence inv length encoding)
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"305d3048a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c3039313233313233353935393085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Subject, RDNSequence length out of bounds)
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"305d3048a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c3039313233313233353935393001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Subject, RDN inv tag)
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930020500302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Subject, RDN inv length encoding)
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930023185302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Subject, RDN length out of bounds)
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930023101302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Subject, RDN empty)
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930023100302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue inv tag)
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300431020500302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue inv length encoding)
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300431023085302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue length out of bounds)
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300431023001302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue empty)
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300431023000302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue type inv tag)
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c3039313233313233353935393006310430020500302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue type inv no length data)
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818e3079a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930053103300106302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue type inv length encoding)
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c3039313233313233353935393006310430020685302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue type length out of bounds )
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c3039313233313233353935393006310430020601302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue value missing)
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c3039313233313233353935393006310430020600302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue value inv tag)
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"308191307ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930083106300406000500302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG;
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue value length missing)
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"308190307ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930073105300306000c302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue value inv length encoding)
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"308191307ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930083106300406000C85302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue value length out of bounds)
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"308191307ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930083106300406000c01302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue value length mismatch)
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"308193307ea0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300a3108300606000c010000302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv Subject, 2nd AttributeTypeValue empty)
Extend negative testing for X.509 Subject parsing
2019-02-13 11:59:00 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300e310c300806000c04546573743000302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, SubPubKeyInfo missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 14:38:48 +00:00
x509parse_crt:"30693054a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 10:36:47 +00:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv tag)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"306b3056a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573740500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added extra coverage and regression tests
2009-07-20 21:26:07 +00:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 10:36:47 +00:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, length missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 14:38:48 +00:00
x509parse_crt:"306a3055a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a3008060013045465737430300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 10:36:47 +00:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv length encoding)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 14:38:48 +00:00
x509parse_crt:"306b3056a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 10:36:47 +00:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, length out of bounds)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 14:38:48 +00:00
x509parse_crt:"306b3056a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 10:36:47 +00:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, empty)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 14:38:48 +00:00
x509parse_crt:"306b3056a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 10:36:47 +00:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv algorithm tag)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"306d3058a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a3008060013045465737430020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 10:36:47 +00:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, algorithm length missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 14:38:48 +00:00
x509parse_crt:"306c3057a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374300130300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra coverage and regression tests
2009-07-20 21:26:07 +00:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 10:36:47 +00:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, algorithm inv length encoding)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 14:38:48 +00:00
x509parse_crt:"306d3058a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a3008060013045465737430023085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 10:36:47 +00:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, algorithm length out of bounds)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 14:38:48 +00:00
x509parse_crt:"306d3058a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a3008060013045465737430023001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra coverage and regression tests
2009-07-20 21:26:07 +00:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 10:36:47 +00:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, algorithm empty)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 14:38:48 +00:00
x509parse_crt:"3081883073a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301d300003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 10:36:47 +00:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, algorithm unknown)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 14:38:48 +00:00
x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010100050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_UNKNOWN_PK_ALG
Fix test case name formatting in X.509 parsing suite
2019-03-13 10:36:47 +00:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, bitstring missing)
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 14:38:48 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"307a3065a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374300f300d06092A864886F70D0101010500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Fix test case name formatting in X.509 parsing suite
2019-03-13 10:36:47 +00:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, bitstring inv tag)
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 14:38:48 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"307c3067a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743011300d06092A864886F70D01010105000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 14:38:48 +00:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 10:36:47 +00:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, bitstring length missing)
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 14:38:48 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"307b3066a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743010300d06092A864886F70D010101050003300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Fix test case name formatting in X.509 parsing suite
2019-03-13 10:36:47 +00:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, bitstring inv length encoding)
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 14:38:48 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"307c3067a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743011300d06092A864886F70D01010105000385300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Fix test case name formatting in X.509 parsing suite
2019-03-13 10:36:47 +00:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, bitstring length out of bounds)
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 14:38:48 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"307c3067a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743011300d06092A864886F70D01010105000301300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Fix test case name formatting in X.509 parsing suite
2019-03-13 10:36:47 +00:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, no bitstring data)
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 14:38:48 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"307c3067a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743011300d06092A864886F70D01010105000300300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_INVALID_DATA
Fix test case name formatting in X.509 parsing suite
2019-03-13 10:36:47 +00:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv bitstring start)
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 14:38:48 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"307d3068a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743012300d06092A864886F70D0101010500030101300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_INVALID_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv internal bitstring length)
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 14:38:48 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"308180306ba0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743015300d06092A864886F70D0101010500030400300000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv internal bitstring tag)
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 14:38:48 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"308180306ba0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743015300d06092A864886F70D0101010500030400310000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv RSA modulus)
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 14:38:48 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081873072a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301c300d06092A864886F70D0101010500030b0030080202ffff0302ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, total length mismatch)
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 14:38:48 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081893074a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301e300d06092A864886F70D0101010500030b0030080202ffff0202ffff0500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, check failed)
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 14:38:48 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081873072a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301c300d06092A864886F70D0101010500030b0030080202ffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, check failed, expanded length notation)
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 14:38:48 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210fffffffffffffffffffffffffffffffe0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Extend negative testing for X.509 IssuerID parsing
2019-06-04 14:43:15 +00:00
# We don't expect MBEDTLS_ERR_ASN1_UNEXPECTED_TAG here because the IssuerID is optional;
# the stack is expected to ignore it and will hence end up with a length mismatch.
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv IssuerID, inv tag)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff0500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv IssuerID, length missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 IssuerID parsing
2019-06-04 14:43:15 +00:00
x509parse_crt:"308197308181a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa1300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv IssuerID, inv length encoding)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 IssuerID parsing
2019-06-04 14:43:15 +00:00
x509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa185300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv IssuerID, length out of bounds)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 IssuerID parsing
2019-06-04 14:43:15 +00:00
x509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra coverage and regression tests
2009-07-20 21:26:07 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, no IssuerID, inv SubjectID, length missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 IssuerID parsing
2019-06-04 14:43:15 +00:00
x509parse_crt:"308197308181a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa2300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, no IssuerID, inv SubjectID, inv length encoding)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 IssuerID parsing
2019-06-04 14:43:15 +00:00
x509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa285300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, no IssuerID, inv SubjectID, length out of bounds)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectID parsing
2019-06-04 14:45:45 +00:00
x509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa201300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, valid IssuerID, inv SubjectID, inv tag)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"30819a308184a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa1000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added extra coverage tests
2009-07-27 20:22:10 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, valid IssuerID, inv SubjectID, length missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectID parsing
2019-06-04 14:45:45 +00:00
x509parse_crt:"308199308183a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a2300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Better handling of extension parsing
2009-07-27 21:34:45 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, valid IssuerID, inv SubjectID, inv length encoding)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectID parsing
2019-06-04 14:45:45 +00:00
x509parse_crt:"30819a308184a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a285300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Better handling of extension parsing
2009-07-27 21:34:45 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, valid IssuerID, inv SubjectID, length out of bounds)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectID parsing
2019-06-04 14:45:45 +00:00
x509parse_crt:"30819a308184a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a201300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra coverage tests
2009-07-27 20:22:10 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, inv tag)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"30819c308186a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a2000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added extra coverage tests
2009-07-27 20:22:10 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, outer length missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
x509parse_crt:"30819b308185a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra coverage tests
2009-07-27 20:22:10 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, outer length inv encoding)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
x509parse_crt:"30819c308186a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a385300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added extra coverage tests
2009-07-27 20:22:10 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, outer length out of bounds)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30819c308186a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a301300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, outer length 0)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30819c308186a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a300300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, inner tag invalid)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"30819e308188a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, inner length missing)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30819d308187a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30130300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, inner length inv encoding)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30819e308188a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3023085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, inner length out of bounds)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30819e308188a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3023001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, inner/outer length mismatch)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30819f308189a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a303300000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, first ext inv tag)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"3081a030818aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30430020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Fix uninitialised pointer dereference
2014-11-11 21:17:26 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, first ext length missing)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30819f308189a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a303300130300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, inv first ext length encoding)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a030818aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30430023085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, first ext length out of bounds)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a030818aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30430023001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Forbid repeated X.509 extensions
2014-11-12 16:47:28 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, first ext empty)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a030818aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30430023000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, first ext extnID inv tag)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"3081a230818ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a306300430020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, first ext extnID length missing)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a130818ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3053003300106300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, first ext extnID inv length encoding)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a230818ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a306300430020685300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, first ext extnID length out of bounds)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a230818ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a306300430020601300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, no extnValue)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a230818ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a306300430020600300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, inv critical tag)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"3081a430818ea0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3083006300406000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, critical length missing)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a330818da0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30730053003060001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, critical inv length encoding)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a430818ea0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3083006300406000185300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, critical length out of bounds)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a430818ea0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3083006300406000101300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Fix memory leak with crafted X.509 certs
2014-11-11 22:11:16 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, critical length 0)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a430818ea0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3083006300406000100300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, critical length 2)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a6308190a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30a30083006060001020000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, extnValue inv tag)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"3081a7308191a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30b3009300706000101000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, extnValue length missing)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a6308190a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30a30083006060001010004300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, extnValue length inv encoding)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a7308191a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30b3009300706000101000485300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, extnValue length out of bounds)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a7308191a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30b3009300706000101000401300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, length mismatch)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a9308193a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30d300b3009060001010004000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv extBasicConstraint, no pathlen length)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081b030819aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a314301230100603551d130101010406300402010102300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv extBasicConstraint, pathlen inv length encoding)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d13010101040730050201010285300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv extBasicConstraint, pathlen length out of bounds)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d13010101040730050201010201300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv extBasicConstraint, pathlen empty)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d13010101040730050201010200300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv extBasicConstraint, pathlen length mismatch)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081b430819ea0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a318301630140603551d13010101040a30080201010201010500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, ExtKeyUsage bad second tag)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081bd3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d250416301406082b0601050507030107082b06010505070302300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, SubjectAltName repeated)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081dc3081c6a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a340303e301d0603551d11041630148208666f6f2e7465737482086261722e74657374301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, ExtKeyUsage repeated)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081dc3081c6a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a340303e301d0603551d250416301406082b0601050507030106082b06010505070302301d0603551d250416301406082b0601050507030106082b06010505070302300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, inv v3Ext, SubjectAltName repeated outside Extensions)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081dc3081c6a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (TBS, valid SubjectID, valid IssuerID, inv v3Ext, SubjectAltName repeated outside Extensions, inv SubjectAltNames tag)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 14:51:22 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
x509parse_crt:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (SignatureAlgorithm missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SignatureAlgorithm parsing
2019-06-04 14:54:43 +00:00
x509parse_crt:"3081aa3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (inv SignatureAlgorithm, bad tag)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"3081ac3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e746573740500":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (inv SignatureAlgorithm, length missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SignatureAlgorithm parsing
2019-06-04 14:54:43 +00:00
x509parse_crt:"3081ab3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e7465737430":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (inv SignatureAlgorithm, inv length encoding)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SignatureAlgorithm parsing
2019-06-04 14:54:43 +00:00
x509parse_crt:"3081ac3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e746573743085":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (inv SignatureAlgorithm, length out of bounds)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SignatureAlgorithm parsing
2019-06-04 14:54:43 +00:00
x509parse_crt:"3081ac3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e746573743001":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (inv SignatureAlgorithm, not the same as SignatureAlgorithm in TBS)
Extend negative testing for X.509 SignatureAlgorithm parsing
2019-06-04 14:54:43 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081bd3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010a0500030200ff":"":MBEDTLS_ERR_X509_SIG_MISMATCH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (Signature missing)
Extend negative testing for X.509 Signature parsing
2019-02-14 12:25:03 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081b93081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (inv Signature, bad tag)
Extend negative testing for X.509 Signature parsing
2019-02-14 12:25:03 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 15:13:23 +00:00
x509parse_crt:"3081bb3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b05000500":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 Signature parsing
2019-02-14 12:25:03 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (inv Signature, length missing)
Extend negative testing for X.509 Signature parsing
2019-02-14 12:25:03 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081ba3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b050003":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (inv Signature, inv length encoding)
Extend negative testing for X.509 Signature parsing
2019-02-14 12:25:03 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081bb3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b05000385":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (inv Signature, length out of bounds)
Extend negative testing for X.509 Signature parsing
2019-02-14 12:25:03 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081bb3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b05000301":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (inv Signature, empty)
Extend negative testing for X.509 Signature parsing
2019-02-14 12:25:03 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081bb3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b05000300":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_INVALID_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (inv Signature, inv data)
Extend negative testing for X.509 Signature parsing
2019-02-14 12:25:03 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081bc3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030100":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_INVALID_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (inv Signature, length mismatch)
Extend negative testing for X.509 Signature parsing
2019-02-14 12:25:03 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081be3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030200ff00":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (well-formed)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 19:36:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (GeneralizedTime instead of UTCTime)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509parse_crt:"308198308182a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301e180e3230313030313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2010-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added support for GeneralizedTime in X509 certificates
2010-02-18 21:26:15 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (Name with X520 CN)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b0603550403130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: CN=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (Name with X520 C)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b0603550406130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: C=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (Name with X520 L)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b0603550407130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: L=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (Name with X520 ST)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b0603550408130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ST=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (Name with X520 O)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b060355040a130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: O=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (Name with X520 OU)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b060355040b130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: OU=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (Name with unknown X520 part)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b06035504de130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (Name with composite RDN)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Support composite RDNs in X.509 certs parsing
2015-02-04 17:11:55 +00:00
x509parse_crt:"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":"cert. version \: 3\nserial number \: 4C\:20\:E3\:BD\nissuer name \: C=US, ST=CA, O=Internet Widgits Pty Ltd, CN=Frankencert CA\nsubject name \: C=US, ST=Washington, ??=US, ??=Delaware, O=Authorize.Net LLC, ??=Private Organization, serialNumber=4369191 + CN=www.authorize.net, L=San Francisco\nissued on \: 2013-08-02 15\:14\:37\nexpires on \: 2015-08-17 05\:54\:31\nsigned using \: RSA with SHA1\nRSA key size \: 1024 bits\n":0
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (Name with PKCS9 email)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509parse_crt:"30819f308189a0030201008204deadbeef300d06092a864886f70d01010b050030153113301106092a864886f70d010901130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: emailAddress=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (Name with unknown PKCS9 part)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 13:32:06 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509parse_crt:"30819f308189a0030201008204deadbeef300d06092a864886f70d01010b050030153113301106092a864886f70d0109ab130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 20:30:14 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (ECDSA signature, RSA key)
Added needed ECDSA dependencies to test_suite_x509parse.data
2016-08-07 08:56:02 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_ECDSA_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509parse_crt:"3081e630819e020103300906072a8648ce3d0401300f310d300b0603550403130454657374301e170d3133303731303039343631385a170d3233303730383039343631385a300f310d300b0603550403130454657374304c300d06092a864886f70d0101010500033b003038023100e8f546061d3b49bc2f6b7524b7ea4d73a8d5293ee8c64d9407b70b5d16baebc32b8205591eab4e1eb57e9241883701250203010001300906072a8648ce3d0401033800303502186e18209afbed14a0d9a796efcad68891e3ccd5f75815c833021900e92b4fd460b1994693243b9ffad54729de865381bda41d25":"cert. version \: 1\nserial number \: 03\nissuer name \: CN=Test\nsubject name \: CN=Test\nissued on \: 2013-07-10 09\:46\:18\nexpires on \: 2023-07-08 09\:46\:18\nsigned using \: ECDSA with SHA1\nRSA key size \: 384 bits\n":0
Add test certificate signed with ECDSA
2013-07-10 10:20:54 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (ECDSA signature, EC key)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP192R1_ENABLED:MBEDTLS_SHA1_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509parse_crt:"3081eb3081a3020900f41534662ec7e912300906072a8648ce3d0401300f310d300b0603550403130454657374301e170d3133303731303039343031395a170d3233303730383039343031395a300f310d300b06035504031304546573743049301306072a8648ce3d020106082a8648ce3d030101033200042137969fabd4e370624a0e1a33e379cab950cce00ef8c3c3e2adaeb7271c8f07659d65d3d777dcf21614363ae4b6e617300906072a8648ce3d04010338003035021858cc0f957946fe6a303d92885a456aa74c743c7b708cbd37021900fe293cac21af352d16b82eb8ea54e9410b3abaadd9f05dd6":"cert. version \: 1\nserial number \: F4\:15\:34\:66\:2E\:C7\:E9\:12\nissuer name \: CN=Test\nsubject name \: CN=Test\nissued on \: 2013-07-10 09\:40\:19\nexpires on \: 2023-07-08 09\:40\:19\nsigned using \: ECDSA with SHA1\nEC key size \: 192 bits\n":0
Certificates with EC key and/or sig parsed
2013-07-10 14:54:29 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT ASN1 (RSA signature, EC key)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP192R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509parse_crt:"3081e430819f020104300d06092a864886f70d0101050500300f310d300b0603550403130454657374301e170d3133303731303135303233375a170d3233303730383135303233375a300f310d300b06035504031304546573743049301306072a8648ce3d020106082a8648ce3d03010103320004e962551a325b21b50cf6b990e33d4318fd16677130726357a196e3efe7107bcb6bdc6d9db2a4df7c964acfe81798433d300d06092a864886f70d01010505000331001a6c18cd1e457474b2d3912743f44b571341a7859a0122774a8e19a671680878936949f904c9255bdd6fffdb33a7e6d8":"cert. version \: 1\nserial number \: 04\nissuer name \: CN=Test\nsubject name \: CN=Test\nissued on \: 2013-07-10 15\:02\:37\nexpires on \: 2023-07-08 15\:02\:37\nsigned using \: RSA with SHA1\nEC key size \: 192 bits\n":0
Certificates with EC key and/or sig parsed
2013-07-10 14:54:29 +00:00
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 20:35:41 +00:00
X509 CRL ASN1 (Incorrect first tag)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
x509parse_crl:"":"":MBEDTLS_ERR_X509_INVALID_FORMAT
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 20:35:41 +00:00
X509 CRL ASN1 (Correct first tag, data length does not match)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
x509parse_crl:"300000":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 20:35:41 +00:00
X509 CRL ASN1 (TBSCertList, tag missing)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
x509parse_crl:"3000":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 20:35:41 +00:00
X509 CRL ASN1 (TBSCertList, version tag len missing)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
x509parse_crl:"3003300102":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 20:35:41 +00:00
X509 CRL ASN1 (TBSCertList, version correct, alg missing)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
x509parse_crl:"30053003020100":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 20:35:41 +00:00
X509 CRL ASN1 (TBSCertList, alg correct, incorrect version)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
x509parse_crl:"300b3009020102300406000500":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 20:35:41 +00:00
X509 CRL ASN1 (TBSCertList, correct version, sig_oid1 unknown)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
x509parse_crl:"300b3009020100300406000500":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 20:35:41 +00:00
X509 CRL ASN1 (TBSCertList, sig_oid1 id unknown)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
x509parse_crl:"30143012020100300d06092a864886f70d01010f0500":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 20:35:41 +00:00
X509 CRL ASN1 (TBSCertList, sig_oid1 correct, issuer missing)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
x509parse_crl:"30143012020100300d06092a864886f70d01010e0500":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 20:35:41 +00:00
X509 CRL ASN1 (TBSCertList, issuer set missing)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
x509parse_crl:"30163014020100300d06092a864886f70d01010e05003000":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 20:35:41 +00:00
X509 CRL ASN1 (TBSCertList, correct issuer, thisUpdate missing)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
x509parse_crl:"30253023020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 20:35:41 +00:00
X509 CRL ASN1 (TBSCertList, correct thisUpdate, nextUpdate missing, entries length missing)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
x509parse_crl:"30343032020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c30393031303130303030303030":"":MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra coverage tests
2009-07-27 20:22:10 +00:00
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 20:35:41 +00:00
X509 CRL ASN1 (TBSCertList, entries present, invalid sig_alg)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
x509parse_crl:"304a3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c30383132333132333539353900":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 20:35:41 +00:00
X509 CRL ASN1 (TBSCertList, entries present, date in entry invalid)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
x509parse_crl:"304a3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd190c30383132333132333539353900":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 20:35:41 +00:00
X509 CRL ASN1 (TBSCertList, sig_alg present, sig_alg does not match)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
x509parse_crl:"30583047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010d0500":"":MBEDTLS_ERR_X509_SIG_MISMATCH
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 20:35:41 +00:00
- Added extra coverage tests
2009-07-27 20:22:10 +00:00
X509 CRL ASN1 (TBSCertList, sig present, len mismatch)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
x509parse_crl:"305d3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010e05000302000100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 20:35:41 +00:00
X509 CRL ASN1 (TBSCertList, sig present)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 20:00:46 +00:00
x509parse_crl:"305c3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010e050003020001":"CRL version \: 1\nissuer name \: CN=ABCD\nthis update \: 2009-01-01 00\:00\:00\nnext update \: 0000-00-00 00\:00\:00\nRevoked certificates\:\nserial number\: AB\:CD revocation date\: 2008-12-31 23\:59\:59\nsigned using \: RSA with SHA-224\n":0
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 20:35:41 +00:00
- Added extra coverage tests
2009-07-27 20:22:10 +00:00
X509 CRL ASN1 (TBSCertList, no entries)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 20:00:46 +00:00
x509parse_crl:"30463031020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300d06092a864886f70d01010e050003020001":"CRL version \: 1\nissuer name \: CN=ABCD\nthis update \: 2009-01-01 00\:00\:00\nnext update \: 0000-00-00 00\:00\:00\nRevoked certificates\:\nsigned using \: RSA with SHA-224\n":0
Add tests for x509_crt_parse_path()
2013-11-26 15:43:39 +00:00
Add CRL DER tests with incorrect version
2017-03-07 11:11:12 +00:00
X509 CRL ASN1 (invalid version 2)
x509parse_crl:"30463031020102300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300d06092a864886f70d01010e050003020001":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
X509 CRL ASN1 (invalid version overflow)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509parse_crl:"3049303102047fffffff300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300d06092a864886f70d01010e050003020001":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
Add CRL DER tests with incorrect version
2017-03-07 11:11:12 +00:00
x509: CRL: add tests for malformed extensions This covers all lines added in the previous commit. Coverage was tested using: make CFLAGS='--coverage -g3 -O0' (cd tests && ./test_suite_x509parse) make lcov firefox Coverage/index.html # then visual check Test data was generated by taking a copy of tests/data_files/crl-idp.pem, encoding it as hex, and then manually changing the values of some bytes to achieve the desired errors, using https://lapo.it/asn1js/ for help in locating the desired bytes.
2018-03-14 10:34:29 +00:00
X509 CRL ASN1 (extension seq too long, crl-idp.pem byte 121)
Add missing dependencies in test_suite_x509parse Found by depends-hashes.pl and depends-pkgalgs.pl.
2018-03-22 23:55:57 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509: CRL: add tests for malformed extensions This covers all lines added in the previous commit. Coverage was tested using: make CFLAGS='--coverage -g3 -O0' (cd tests && ./test_suite_x509parse) make lcov firefox Coverage/index.html # then visual check Test data was generated by taking a copy of tests/data_files/crl-idp.pem, encoding it as hex, and then manually changing the values of some bytes to achieve the desired errors, using https://lapo.it/asn1js/ for help in locating the desired bytes.
2018-03-14 10:34:29 +00:00
x509parse_crl:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRL ASN1 (extension oid too long, crl-idp.pem byte 123)
Add missing dependencies in test_suite_x509parse Found by depends-hashes.pl and depends-pkgalgs.pl.
2018-03-22 23:55:57 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509: CRL: add tests for malformed extensions This covers all lines added in the previous commit. Coverage was tested using: make CFLAGS='--coverage -g3 -O0' (cd tests && ./test_suite_x509parse) make lcov firefox Coverage/index.html # then visual check Test data was generated by taking a copy of tests/data_files/crl-idp.pem, encoding it as hex, and then manually changing the values of some bytes to achieve the desired errors, using https://lapo.it/asn1js/ for help in locating the desired bytes.
2018-03-14 10:34:29 +00:00
x509parse_crl:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRL ASN1 (extension critical invalid length, crl-idp.pem byte 128)
Add missing dependencies in test_suite_x509parse Found by depends-hashes.pl and depends-pkgalgs.pl.
2018-03-22 23:55:57 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509: CRL: add tests for malformed extensions This covers all lines added in the previous commit. Coverage was tested using: make CFLAGS='--coverage -g3 -O0' (cd tests && ./test_suite_x509parse) make lcov firefox Coverage/index.html # then visual check Test data was generated by taking a copy of tests/data_files/crl-idp.pem, encoding it as hex, and then manually changing the values of some bytes to achieve the desired errors, using https://lapo.it/asn1js/ for help in locating the desired bytes.
2018-03-14 10:34:29 +00:00
x509parse_crl:"308201b330819c020101300d06092a864886f70d01010b0500303b310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c3119301706035504031310506f6c617253534c2054657374204341170d3138303331343037333134385a170d3238303331343037333134385aa02d302b30290603551d1c0102ff041f301da01ba0198617687474703a2f2f706b692e6578616d706c652e636f6d2f300d06092a864886f70d01010b05000382010100b3fbe9d586eaf4b8ff60cf8edae06a85135db78f78198498719725b5b403c0b803c2c150f52faae7306d6a7871885dc2e9dc83a164bac7263776474ef642b660040b35a1410ac291ac8f6f18ab85e7fd6e22bd1af1c41ca95cf2448f6e2b42a018493dfc03c6b6aa1b9e3fe7b76af2182fb2121db4166bf0167d6f379c5a58adee5082423434d97be2909f5e7488053f996646db10dd49782626da53ad8eada01813c031b2bacdb0203bc017aac1735951a11d013ee4d1d5f7143ccbebf2371e66a1bec6e1febe69148f50784eef8adbb66664c96196d7e0c0bcdc807f447b54e058f37642a3337995bfbcd332208bd6016936705c82263eabd7affdba92fae3":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
X509 CRL ASN1 (extension data too long, crl-idp.pem byte 131)
Add missing dependencies in test_suite_x509parse Found by depends-hashes.pl and depends-pkgalgs.pl.
2018-03-22 23:55:57 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509: CRL: add tests for malformed extensions This covers all lines added in the previous commit. Coverage was tested using: make CFLAGS='--coverage -g3 -O0' (cd tests && ./test_suite_x509parse) make lcov firefox Coverage/index.html # then visual check Test data was generated by taking a copy of tests/data_files/crl-idp.pem, encoding it as hex, and then manually changing the values of some bytes to achieve the desired errors, using https://lapo.it/asn1js/ for help in locating the desired bytes.
2018-03-14 10:34:29 +00:00
x509parse_crl:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRL ASN1 (extension data too short, crl-idp.pem byte 131)
Add missing dependencies in test_suite_x509parse Found by depends-hashes.pl and depends-pkgalgs.pl.
2018-03-22 23:55:57 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509: CRL: add tests for malformed extensions This covers all lines added in the previous commit. Coverage was tested using: make CFLAGS='--coverage -g3 -O0' (cd tests && ./test_suite_x509parse) make lcov firefox Coverage/index.html # then visual check Test data was generated by taking a copy of tests/data_files/crl-idp.pem, encoding it as hex, and then manually changing the values of some bytes to achieve the desired errors, using https://lapo.it/asn1js/ for help in locating the desired bytes.
2018-03-14 10:34:29 +00:00
x509parse_crl:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
x509: CRL: add tests for non-critical extension The 'critical' boolean can be set to false in two ways: - by leaving it implicit (test data generated by openssl) - by explicitly setting it to false (generated by hand)
2018-03-14 11:23:56 +00:00
X509 CRL ASN1 (extension not critical explicit, crl-idp.pem byte 129)
Add missing dependencies in test_suite_x509parse Found by depends-hashes.pl and depends-pkgalgs.pl.
2018-03-22 23:55:57 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509: CRL: add tests for non-critical extension The 'critical' boolean can be set to false in two ways: - by leaving it implicit (test data generated by openssl) - by explicitly setting it to false (generated by hand)
2018-03-14 11:23:56 +00:00
x509parse_crl:"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":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2018-03-14 07\:31\:48\nnext update \: 2028-03-14 07\:31\:48\nRevoked certificates\:\nsigned using \: RSA with SHA-256\n":0
Add tests for x509_crt_parse_path()
2013-11-26 15:43:39 +00:00
X509 CRT parse path #2 (one cert)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
mbedtls_x509_crt_parse_path:"data_files/dir1":0:1
Add tests for x509_crt_parse_path()
2013-11-26 15:43:39 +00:00
X509 CRT parse path #3 (two certs)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
mbedtls_x509_crt_parse_path:"data_files/dir2":0:2
Add tests for x509_crt_parse_path()
2013-11-26 15:43:39 +00:00
X509 CRT parse path #4 (two certs, one non-cert)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
mbedtls_x509_crt_parse_path:"data_files/dir3":1:2
Test and fix x509_oid functions
2014-03-28 15:06:35 +00:00
Add test for limit on intermediate certificates Inspired by test code provided by Nicholas Wilson in PR #351. The test will fail if someone sets MAX_INTERMEDIATE_CA to a value larger than 18 (default is 8), which is hopefully unlikely and can easily be fixed by running long.sh again with a larger value if it ever happens. Current behaviour is suboptimal as flags are not set, but currently the goal is only to document/test existing behaviour.
2017-06-05 11:49:44 +00:00
X509 CRT verify long chain (max intermediate CA, trusted)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
mbedtls_x509_crt_verify_max:"data_files/dir-maxpath/00.crt":"data_files/dir-maxpath":MBEDTLS_X509_MAX_INTERMEDIATE_CA:0:0
X509 CRT verify long chain (max intermediate CA, untrusted)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
mbedtls_x509_crt_verify_max:"data_files/test-ca2.crt":"data_files/dir-maxpath":MBEDTLS_X509_MAX_INTERMEDIATE_CA-1:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED
X509 CRT verify long chain (max intermediate CA + 1)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Only return VERIFY_FAILED from a single point Everything else is a fatal error. Also improve documentation about that for the vrfy callback.
2017-06-26 08:11:49 +00:00
mbedtls_x509_crt_verify_max:"data_files/dir-maxpath/00.crt":"data_files/dir-maxpath":MBEDTLS_X509_MAX_INTERMEDIATE_CA+1:MBEDTLS_ERR_X509_FATAL_ERROR:-1
Add test for limit on intermediate certificates Inspired by test code provided by Nicholas Wilson in PR #351. The test will fail if someone sets MAX_INTERMEDIATE_CA to a value larger than 18 (default is 8), which is hopefully unlikely and can easily be fixed by running long.sh again with a larger value if it ever happens. Current behaviour is suboptimal as flags are not set, but currently the goal is only to document/test existing behaviour.
2017-06-05 11:49:44 +00:00
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 14:17:27 +00:00
X509 CRT verify chain #1 (zero pathlen intermediate)
Added test case for pathlen constrains in intermediate certificates
2015-10-11 08:25:22 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Add ability to test failing vrfy callback
2017-05-23 10:26:58 +00:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert14.crt data_files/dir4/cert13.crt data_files/dir4/cert12.crt":"data_files/dir4/cert11.crt":MBEDTLS_X509_BADCERT_NOT_TRUSTED:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"":0
Added test case for pathlen constrains in intermediate certificates
2015-10-11 08:25:22 +00:00
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 14:17:27 +00:00
X509 CRT verify chain #2 (zero pathlen root)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Add ability to test failing vrfy callback
2017-05-23 10:26:58 +00:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert23.crt data_files/dir4/cert22.crt":"data_files/dir4/cert21.crt":MBEDTLS_X509_BADCERT_NOT_TRUSTED:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"":0
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 14:17:27 +00:00
X509 CRT verify chain #3 (nonzero pathlen root)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Add ability to test failing vrfy callback
2017-05-23 10:26:58 +00:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert34.crt data_files/dir4/cert33.crt data_files/dir4/cert32.crt":"data_files/dir4/cert31.crt":MBEDTLS_X509_BADCERT_NOT_TRUSTED:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"":0
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 14:17:27 +00:00
X509 CRT verify chain #4 (nonzero pathlen intermediate)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Add ability to test failing vrfy callback
2017-05-23 10:26:58 +00:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert45.crt data_files/dir4/cert44.crt data_files/dir4/cert43.crt data_files/dir4/cert42.crt":"data_files/dir4/cert41.crt":MBEDTLS_X509_BADCERT_NOT_TRUSTED:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"":0
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 14:17:27 +00:00
X509 CRT verify chain #5 (nonzero maxpathlen intermediate)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add ability to test failing vrfy callback
2017-05-23 10:26:58 +00:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert54.crt data_files/dir4/cert53.crt data_files/dir4/cert52.crt":"data_files/dir4/cert51.crt":0:0:"":0
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 14:17:27 +00:00
X509 CRT verify chain #6 (nonzero maxpathlen root)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add ability to test failing vrfy callback
2017-05-23 10:26:58 +00:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert63.crt data_files/dir4/cert62.crt":"data_files/dir4/cert61.crt":0:0:"":0
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 14:17:27 +00:00
X509 CRT verify chain #7 (maxpathlen root, self signed in path)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add ability to test failing vrfy callback
2017-05-23 10:26:58 +00:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert74.crt data_files/dir4/cert73.crt data_files/dir4/cert72.crt":"data_files/dir4/cert71.crt":0:0:"":0
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 14:17:27 +00:00
X509 CRT verify chain #8 (self signed maxpathlen root)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add ability to test failing vrfy callback
2017-05-23 10:26:58 +00:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert61.crt data_files/dir4/cert63.crt data_files/dir4/cert62.crt":"data_files/dir4/cert61.crt":0:0:"":0
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 14:17:27 +00:00
Add test case for root with max_pathlen=0 This was already working but not tested so far (Test case from previous commit still failing.) Test certificates generated with: programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert91.key programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert92.key programs/x509/cert_write serial=91 output_file=cert91.crt is_ca=1 \ issuer_key=cert91.key issuer_name="CN=Root 9,O=mbed TLS,C=UK" \ selfsign=1 max_pathlen=0 programs/x509/cert_write serial=92 output_file=cert92.crt \ issuer_key=cert91.key issuer_name="CN=Root 9,O=mbed TLS,C=UK" \ subject_key=cert92.key subject_name="CN=EE 92,O=mbed TLS,C=UK" mv cert9?.crt tests/data_files/dir4 rm cert9?.key
2015-11-19 09:52:12 +00:00
X509 CRT verify chain #9 (zero pathlen first intermediate, valid)
Add test case for first intermediate max_pathlen=0 !!! This test case is currently failing !!! (See fix in next-next commit.) Test certificates generated with the following script: programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert81.key programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert82.key programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert83.key programs/x509/cert_write serial=81 output_file=cert81.crt is_ca=1 \ issuer_key=cert81.key issuer_name="CN=Root 8,O=mbed TLS,C=UK" \ selfsign=1 programs/x509/cert_write serial=82 output_file=cert82.crt is_ca=1 \ issuer_key=cert81.key issuer_name="CN=Root 8,O=mbed TLS,C=UK" \ subject_key=cert82.key subject_name="CN=Int 82,O=mbed TLS,C=UK" \ max_pathlen=0 programs/x509/cert_write serial=83 output_file=cert83.crt \ issuer_key=cert82.key issuer_name="CN=Int 82,O=mbed TLS,C=UK" \ subject_key=cert83.key subject_name="CN=EE 83,O=mbed TLS,C=UK" mv cert8?.crt tests/data_files/dir4 rm cert8?.key
2015-11-19 09:46:07 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Add ability to test failing vrfy callback
2017-05-23 10:26:58 +00:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert83.crt data_files/dir4/cert82.crt":"data_files/dir4/cert81.crt":0:0:"":0
Add test case for first intermediate max_pathlen=0 !!! This test case is currently failing !!! (See fix in next-next commit.) Test certificates generated with the following script: programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert81.key programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert82.key programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert83.key programs/x509/cert_write serial=81 output_file=cert81.crt is_ca=1 \ issuer_key=cert81.key issuer_name="CN=Root 8,O=mbed TLS,C=UK" \ selfsign=1 programs/x509/cert_write serial=82 output_file=cert82.crt is_ca=1 \ issuer_key=cert81.key issuer_name="CN=Root 8,O=mbed TLS,C=UK" \ subject_key=cert82.key subject_name="CN=Int 82,O=mbed TLS,C=UK" \ max_pathlen=0 programs/x509/cert_write serial=83 output_file=cert83.crt \ issuer_key=cert82.key issuer_name="CN=Int 82,O=mbed TLS,C=UK" \ subject_key=cert83.key subject_name="CN=EE 83,O=mbed TLS,C=UK" mv cert8?.crt tests/data_files/dir4 rm cert8?.key
2015-11-19 09:46:07 +00:00
Add test case for root with max_pathlen=0 This was already working but not tested so far (Test case from previous commit still failing.) Test certificates generated with: programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert91.key programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert92.key programs/x509/cert_write serial=91 output_file=cert91.crt is_ca=1 \ issuer_key=cert91.key issuer_name="CN=Root 9,O=mbed TLS,C=UK" \ selfsign=1 max_pathlen=0 programs/x509/cert_write serial=92 output_file=cert92.crt \ issuer_key=cert91.key issuer_name="CN=Root 9,O=mbed TLS,C=UK" \ subject_key=cert92.key subject_name="CN=EE 92,O=mbed TLS,C=UK" mv cert9?.crt tests/data_files/dir4 rm cert9?.key
2015-11-19 09:52:12 +00:00
X509 CRT verify chain #10 (zero pathlen root, valid)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Add ability to test failing vrfy callback
2017-05-23 10:26:58 +00:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert92.crt":"data_files/dir4/cert91.crt":0:0:"":0
Add test case for root with max_pathlen=0 This was already working but not tested so far (Test case from previous commit still failing.) Test certificates generated with: programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert91.key programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert92.key programs/x509/cert_write serial=91 output_file=cert91.crt is_ca=1 \ issuer_key=cert91.key issuer_name="CN=Root 9,O=mbed TLS,C=UK" \ selfsign=1 max_pathlen=0 programs/x509/cert_write serial=92 output_file=cert92.crt \ issuer_key=cert91.key issuer_name="CN=Root 9,O=mbed TLS,C=UK" \ subject_key=cert92.key subject_name="CN=EE 92,O=mbed TLS,C=UK" mv cert9?.crt tests/data_files/dir4 rm cert9?.key
2015-11-19 09:52:12 +00:00
Set deterministic flags for NULL profile Previously flags was left to whatever value it had before. It's cleaner to make sure it has a definite value, and all bits set looks like the safest way for when it went very wrong.
2017-05-23 08:13:40 +00:00
X509 CRT verify chain #11 (valid chain, missing profile)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Add ability to test failing vrfy callback
2017-05-23 10:26:58 +00:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert92.crt":"data_files/dir4/cert91.crt":-1:MBEDTLS_ERR_X509_BAD_INPUT_DATA:"nonesuch":0
Set deterministic flags for NULL profile Previously flags was left to whatever value it had before. It's cleaner to make sure it has a definite value, and all bits set looks like the safest way for when it went very wrong.
2017-05-23 08:13:40 +00:00
Add tests for profile enforcement Now all checks related to profile are covered in: - verify_with_profile() - verify_child() - verify_top() (that's 10 lines that were previously not covered) Leaving aside profile enforcement in CRLs for now, as the focus is on preparing to refactor cert verification.
2017-05-23 09:29:29 +00:00
X509 CRT verify chain #12 (suiteb profile, RSA root)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP192R1_ENABLED:MBEDTLS_SHA1_C
Add ability to test failing vrfy callback
2017-05-23 10:26:58 +00:00
mbedtls_x509_crt_verify_chain:"data_files/server3.crt":"data_files/test-ca.crt":MBEDTLS_X509_BADCERT_BAD_MD|MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"suiteb":0
Add tests for profile enforcement Now all checks related to profile are covered in: - verify_with_profile() - verify_child() - verify_top() (that's 10 lines that were previously not covered) Leaving aside profile enforcement in CRLs for now, as the focus is on preparing to refactor cert verification.
2017-05-23 09:29:29 +00:00
X509 CRT verify chain #13 (RSA only profile, EC root)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Add ability to test failing vrfy callback
2017-05-23 10:26:58 +00:00
mbedtls_x509_crt_verify_chain:"data_files/server4.crt":"data_files/test-ca2.crt":MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"rsa3072":0
Add tests for profile enforcement Now all checks related to profile are covered in: - verify_with_profile() - verify_child() - verify_top() (that's 10 lines that were previously not covered) Leaving aside profile enforcement in CRLs for now, as the focus is on preparing to refactor cert verification.
2017-05-23 09:29:29 +00:00
Add test for profile on trusted EE cert
2017-06-27 11:26:43 +00:00
X509 CRT verify chain #13 (RSA only profile, EC trusted EE)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
mbedtls_x509_crt_verify_chain:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"rsa3072":0
Add tests for profile enforcement Now all checks related to profile are covered in: - verify_with_profile() - verify_child() - verify_top() (that's 10 lines that were previously not covered) Leaving aside profile enforcement in CRLs for now, as the focus is on preparing to refactor cert verification.
2017-05-23 09:29:29 +00:00
X509 CRT verify chain #14 (RSA-3072 profile, root key too small)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Add ability to test failing vrfy callback
2017-05-23 10:26:58 +00:00
mbedtls_x509_crt_verify_chain:"data_files/server1.crt":"data_files/test-ca.crt":MBEDTLS_X509_BADCERT_BAD_MD|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"rsa3072":0
Add tests for profile enforcement Now all checks related to profile are covered in: - verify_with_profile() - verify_child() - verify_top() (that's 10 lines that were previously not covered) Leaving aside profile enforcement in CRLs for now, as the focus is on preparing to refactor cert verification.
2017-05-23 09:29:29 +00:00
X509 CRT verify chain #15 (suiteb profile, rsa intermediate)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Add ability to test failing vrfy callback
2017-05-23 10:26:58 +00:00
mbedtls_x509_crt_verify_chain:"data_files/server7.crt data_files/test-int-ca.crt":"data_files/test-ca2.crt":MBEDTLS_X509_BADCERT_BAD_PK:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"suiteb":0
Add tests for profile enforcement Now all checks related to profile are covered in: - verify_with_profile() - verify_child() - verify_top() (that's 10 lines that were previously not covered) Leaving aside profile enforcement in CRLs for now, as the focus is on preparing to refactor cert verification.
2017-05-23 09:29:29 +00:00
X509 CRT verify chain #16 (RSA-only profile, EC intermediate)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Add ability to test failing vrfy callback
2017-05-23 10:26:58 +00:00
mbedtls_x509_crt_verify_chain:"data_files/server8.crt data_files/test-int-ca2.crt":"data_files/test-ca.crt":MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"rsa3072":0
Add tests for profile enforcement Now all checks related to profile are covered in: - verify_with_profile() - verify_child() - verify_top() (that's 10 lines that were previously not covered) Leaving aside profile enforcement in CRLs for now, as the focus is on preparing to refactor cert verification.
2017-05-23 09:29:29 +00:00
X509 CRT verify chain #17 (SHA-512 profile)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Add ability to test failing vrfy callback
2017-05-23 10:26:58 +00:00
mbedtls_x509_crt_verify_chain:"data_files/server7.crt data_files/test-int-ca.crt":"data_files/test-ca2.crt":MBEDTLS_X509_BADCERT_BAD_MD:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"sha512":0
Add tests for profile enforcement Now all checks related to profile are covered in: - verify_with_profile() - verify_child() - verify_top() (that's 10 lines that were previously not covered) Leaving aside profile enforcement in CRLs for now, as the focus is on preparing to refactor cert verification.
2017-05-23 09:29:29 +00:00
Add tests for fatal error in vrfy callback This shows inconsistencies in how flags are handled when callback fails: - sometimes the flags set by the callback are transmitted, sometimes not - when the cert if not trusted, sometimes BADCERT_NOT_TRUSTED is set, sometimes not This adds coverage for 9 lines and 9 branches. Now all lines related to callback failure are covered.
2017-05-23 10:58:53 +00:00
X509 CRT verify chain #18 (len=1, vrfy fatal on depth 1)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA512_C
mbedtls_x509_crt_verify_chain:"data_files/server5.crt":"data_files/test-ca2.crt":-1:-2:"":2
X509 CRT verify chain #19 (len=0, vrfy fatal on depth 0)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA512_C
mbedtls_x509_crt_verify_chain:"data_files/server5.crt":"data_files/test-ca2.crt":-1:-1:"":1
X509 CRT verify chain #20 (len=1, vrfy fatal on depth 0)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA512_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
mbedtls_x509_crt_verify_chain:"data_files/server5.crt":"data_files/test-ca.crt":-1:-1:"":1
X509 CRT verify chain #21 (len=3, vrfy fatal on depth 3)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
mbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca.crt":-1:-4:"":8
X509 CRT verify chain #22 (len=3, vrfy fatal on depth 2)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
mbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca.crt":-1:-3:"":4
X509 CRT verify chain #23 (len=3, vrfy fatal on depth 1)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
mbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca.crt":-1:-2:"":2
X509 CRT verify chain #24 (len=3, vrfy fatal on depth 0)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
mbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca.crt":-1:-1:"":1
X509 CRT verify chain #25 (len=3, vrfy fatal on depth 3, untrusted)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
mbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca2.crt":-1:-4:"":8
Test and fix x509_oid functions
2014-03-28 15:06:35 +00:00
X509 OID description #1
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_oid_desc:"2b06010505070301":"TLS Web Server Authentication"
Test and fix x509_oid functions
2014-03-28 15:06:35 +00:00
X509 OID description #2
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_oid_desc:"2b0601050507030f":"notfound"
Test and fix x509_oid functions
2014-03-28 15:06:35 +00:00
X509 OID description #3
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_oid_desc:"2b0601050507030100":"notfound"
Test and fix x509_oid functions
2014-03-28 15:06:35 +00:00
X509 OID numstring #1 (wide buffer)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_oid_numstr:"2b06010505070301":"1.3.6.1.5.5.7.3.1":20:17
Test and fix x509_oid functions
2014-03-28 15:06:35 +00:00
X509 OID numstring #2 (buffer just fits)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_oid_numstr:"2b06010505070301":"1.3.6.1.5.5.7.3.1":18:17
Test and fix x509_oid functions
2014-03-28 15:06:35 +00:00
X509 OID numstring #3 (buffer too small)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_oid_numstr:"2b06010505070301":"1.3.6.1.5.5.7.3.1":17:MBEDTLS_ERR_OID_BUF_TOO_SMALL
Test and fix x509_oid functions
2014-03-28 15:06:35 +00:00
X509 OID numstring #4 (larger number)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_oid_numstr:"2a864886f70d":"1.2.840.113549":15:14
Test and fix x509_oid functions
2014-03-28 15:06:35 +00:00
X509 OID numstring #5 (arithmetic overflow)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_oid_numstr:"2a8648f9f8f7f6f5f4f3f2f1f001":"":100:MBEDTLS_ERR_OID_BUF_TOO_SMALL
Add x509_crt_check_key_usage()
2014-04-09 07:50:03 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT keyUsage #1 (no extension, expected KU)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Fix some X509 macro names For some reason, during the great renaming, some names that should have been prefixed with MBEDTLS_X509_ have only been prefixed with MBEDTLS_
2015-04-20 11:19:02 +00:00
x509_check_key_usage:"data_files/server1.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT:0
Add x509_crt_check_key_usage()
2014-04-09 07:50:03 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT keyUsage #2 (no extension, surprising KU)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
x509_check_key_usage:"data_files/server1.crt":MBEDTLS_X509_KU_KEY_CERT_SIGN:0
Add x509_crt_check_key_usage()
2014-04-09 07:50:03 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT keyUsage #3 (extension present, no KU)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Add x509_crt_check_key_usage()
2014-04-09 07:50:03 +00:00
x509_check_key_usage:"data_files/server1.key_usage.crt":0:0
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT keyUsage #4 (extension present, single KU present)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
x509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE:0
Add x509_crt_check_key_usage()
2014-04-09 07:50:03 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT keyUsage #5 (extension present, single KU absent)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
x509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_KEY_CERT_SIGN:MBEDTLS_ERR_X509_BAD_INPUT_DATA
Add x509_crt_check_key_usage()
2014-04-09 07:50:03 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT keyUsage #6 (extension present, combined KU present)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Fix some X509 macro names For some reason, during the great renaming, some names that should have been prefixed with MBEDTLS_X509_ have only been prefixed with MBEDTLS_
2015-04-20 11:19:02 +00:00
x509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT:0
Add x509_crt_check_key_usage()
2014-04-09 07:50:03 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT keyUsage #7 (extension present, combined KU both absent)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
x509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_KEY_CERT_SIGN|MBEDTLS_X509_KU_CRL_SIGN:MBEDTLS_ERR_X509_BAD_INPUT_DATA
Add x509_crt_check_key_usage()
2014-04-09 07:50:03 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT keyUsage #8 (extension present, combined KU one absent)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Fix some X509 macro names For some reason, during the great renaming, some names that should have been prefixed with MBEDTLS_X509_ have only been prefixed with MBEDTLS_
2015-04-20 11:19:02 +00:00
x509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_KEY_ENCIPHERMENT|MBEDTLS_X509_KU_KEY_AGREEMENT:MBEDTLS_ERR_X509_BAD_INPUT_DATA
Add x509_crt_check_key_usage()
2014-04-09 07:50:03 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT keyUsage #9 (extension present, decOnly allowed absent)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Adapt check_key_usage to new weird bits
2015-06-23 08:48:44 +00:00
x509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT|MBEDTLS_X509_KU_DECIPHER_ONLY:0
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT keyUsage #10 (extension present, decOnly non-allowed present)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Adapt check_key_usage to new weird bits
2015-06-23 08:48:44 +00:00
x509_check_key_usage:"data_files/keyUsage.decipherOnly.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT:MBEDTLS_ERR_X509_BAD_INPUT_DATA
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT keyUsage #11 (extension present, decOnly allowed present)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Adapt check_key_usage to new weird bits
2015-06-23 08:48:44 +00:00
x509_check_key_usage:"data_files/keyUsage.decipherOnly.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT|MBEDTLS_X509_KU_DECIPHER_ONLY:0
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT extendedKeyUsage #1 (no extension, serverAuth)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_check_extended_key_usage:"data_files/server5.crt":"2b06010505070301":0
Add x509_crt_check_extended_key_usage()
2014-04-10 15:53:56 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT extendedKeyUsage #2 (single value, present)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_check_extended_key_usage:"data_files/server5.eku-srv.crt":"2b06010505070301":0
Add x509_crt_check_extended_key_usage()
2014-04-10 15:53:56 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT extendedKeyUsage #3 (single value, absent)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_check_extended_key_usage:"data_files/server5.eku-cli.crt":"2b06010505070301":MBEDTLS_ERR_X509_BAD_INPUT_DATA
Add x509_crt_check_extended_key_usage()
2014-04-10 15:53:56 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT extendedKeyUsage #4 (two values, first)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_check_extended_key_usage:"data_files/server5.eku-srv_cli.crt":"2b06010505070301":0
Add x509_crt_check_extended_key_usage()
2014-04-10 15:53:56 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT extendedKeyUsage #5 (two values, second)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_check_extended_key_usage:"data_files/server5.eku-srv_cli.crt":"2b06010505070302":0
Add x509_crt_check_extended_key_usage()
2014-04-10 15:53:56 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT extendedKeyUsage #6 (two values, other)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_check_extended_key_usage:"data_files/server5.eku-srv_cli.crt":"2b06010505070303":MBEDTLS_ERR_X509_BAD_INPUT_DATA
Add x509_crt_check_extended_key_usage()
2014-04-10 15:53:56 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT extendedKeyUsage #7 (any, random)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_check_extended_key_usage:"data_files/server5.eku-cs_any.crt":"2b060105050703ff":0
Add x509_crt_check_extended_key_usage()
2014-04-10 15:53:56 +00:00
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (good, all defaults)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
x509_parse_rsassa_pss_params:"":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (wrong initial tag)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
x509_parse_rsassa_pss_params:"":MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (unknown tag in top-level sequence)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a400":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (good, HashAlg SHA256)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a00d300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA256:MBEDTLS_MD_SHA1:20:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (good, explicit HashAlg = default)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a009300706052b0e03021a":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (HashAlg wrong len #1)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a00a300706052b0e03021a":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (HashAlg wrong len #2)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a00a300706052b0e03021a00":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (HashAlg with parameters)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a00f300d06096086480165030402013000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA256:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_INVALID_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
Fix typos in comments
2014-06-25 12:45:24 +00:00
X509 RSASSA-PSS parameters ASN1 (HashAlg unknown OID)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a00d300b06096086480165030402ff":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA256:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_OID_NOT_FOUND
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (good, MGAlg = MGF1-SHA256)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a11a301806092a864886f70d010108300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (good, explicit MGAlg = default)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a116301406092a864886f70d010108300706052b0e03021a":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (MGAlg wrong len #1)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a11b301806092a864886f70d010108300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (MGAlg wrong len #2)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a11b301806092a864886f70d010108300b060960864801650304020100":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (MGAlg AlgId wrong len #1)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a11a301906092a864886f70d010108300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (MGAlg OID != MGF1)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a11a301806092a864886f70d010109300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_FEATURE_UNAVAILABLE + MBEDTLS_ERR_OID_NOT_FOUND
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong tag)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a11a301806092a864886f70d010108310b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong len #1a)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a10f300d06092a864886f70d0101083000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong len #1b)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a11b301906092a864886f70d010108300c0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params.alg not an OID)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a11a301806092a864886f70d010108300b0709608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params.alg unknown OID)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a11a301806092a864886f70d010108300b06096086480165030402ff":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_OID_NOT_FOUND
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params.params NULL)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a11c301a06092a864886f70d010108300d06096086480165030402010500":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params.params wrong tag)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a11c301a06092a864886f70d010108300d06096086480165030402013000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong len #1c)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a11d301b06092a864886f70d010108300e06096086480165030402010500":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong len #2)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 08:15:29 +00:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a11d301b06092a864886f70d010108300e0609608648016503040201050000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (good, saltLen = 94)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a20302015e":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:94:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (good, explicit saltLen = default)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a203020114":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (saltLen wrong len #1)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a20402015e":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:94:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (saltLen wrong len #2)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a20402015e00":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:94:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (saltLen not an int)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a2023000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:94:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (good, explicit trailerField = default)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a303020101":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (trailerField wrong len #1)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a304020101":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (trailerField wrong len #2)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a30402010100":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (trailerField not an int)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a3023000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
X509 RSASSA-PSS parameters ASN1 (trailerField not 1)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
x509_parse_rsassa_pss_params:"a303020102":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG
Add tests for x509 rsassa_pss params parsing
2014-06-06 12:48:38 +00:00
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (OK)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 10:20:42 +00:00
mbedtls_x509_csr_parse:"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":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: ECDSA with SHA1\nEC key size \: 256 bits\n":0
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (bad first tag)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_csr_parse:"3100":"":MBEDTLS_ERR_X509_INVALID_FORMAT
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (bad sequence: overlong)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_csr_parse:"3001":"":MBEDTLS_ERR_X509_INVALID_FORMAT
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (total length mistmatch)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_csr_parse:"30010000":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (bad CRI: not a sequence)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_csr_parse:"30023100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (bad CRI: overlong)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_csr_parse:"30023001":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (bad CRI.Version: overlong)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_csr_parse:"30053002020100":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (bad CRI.Version: not v1)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_csr_parse:"30053003020101":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (bad CRI.Name: not a sequence)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_csr_parse:"300730050201003100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (bad CRI.Name: overlong)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_csr_parse:"30083005020100300100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (bad CRI.Name payload: not a set)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
mbedtls_x509_csr_parse:"3009300702010030023000":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (bad CRI.Name payload: overlong)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
mbedtls_x509_csr_parse:"300a30080201003002310100":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (bad SubjectPublicKeyInfo: missing)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
mbedtls_x509_csr_parse:"30143012020100300d310b3009060355040613024e4c":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (bad SubjectPublicKeyInfo: not a sequence)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
mbedtls_x509_csr_parse:"30163014020100300d310b3009060355040613024e4c3100":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (bad SubjectPublicKeyInfo: overlong)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
mbedtls_x509_csr_parse:"30173014020100300d310b3009060355040613024e4c300100":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (bad attributes: missing)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 10:20:42 +00:00
mbedtls_x509_csr_parse:"3081973081940201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (bad attributes: bad tag)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 10:20:42 +00:00
mbedtls_x509_csr_parse:"3081993081960201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edff0500":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (bad attributes: overlong)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 10:20:42 +00:00
mbedtls_x509_csr_parse:"30819a3081960201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa00100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (bad sigAlg: missing)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 10:20:42 +00:00
mbedtls_x509_csr_parse:"3081c23081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (bad sigAlg: not a sequence)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 10:20:42 +00:00
mbedtls_x509_csr_parse:"3081c43081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e03100":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (bad sigAlg: overlong)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 10:20:42 +00:00
mbedtls_x509_csr_parse:"3081c43081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e03001":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (bad sigAlg: unknown)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 10:20:42 +00:00
mbedtls_x509_csr_parse:"3081cd3081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0300906072a8648ce3d04ff":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (bad sig: missing)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 10:20:42 +00:00
mbedtls_x509_csr_parse:"3081cd3081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0300906072a8648ce3d0401":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (bad sig: not a bit string)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 10:20:42 +00:00
mbedtls_x509_csr_parse:"3081cf3081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0300906072a8648ce3d04010400":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (bad sig: overlong)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 10:20:42 +00:00
mbedtls_x509_csr_parse:"3081cf3081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0300906072a8648ce3d04010301":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 09:13:15 +00:00
X509 CSR ASN.1 (extra data after signature)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 10:20:42 +00:00
mbedtls_x509_csr_parse:"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":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
x509_crt_parse() did not increase total_failed on PEM error Result was that PEM errors in files with multiple certificates were not detectable by the user.
2014-09-26 12:53:04 +00:00
Add CSR DER tests with incorrect version
2017-03-07 10:57:34 +00:00
X509 CSR ASN.1 (invalid version overflow)
Convert further x509parse tests to use lower-case hex data With emacs: `replace-regexp "\([a-fA-F0-9]*\)" "\,(downcase \1)"`
2019-06-03 15:17:58 +00:00
mbedtls_x509_csr_parse:"3008300602047fffffff":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
Add CSR DER tests with incorrect version
2017-03-07 10:57:34 +00:00
x509_crt_parse() did not increase total_failed on PEM error Result was that PEM errors in files with multiple certificates were not detectable by the user.
2014-09-26 12:53:04 +00:00
X509 File parse (no issues)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
x509_crt_parse() did not increase total_failed on PEM error Result was that PEM errors in files with multiple certificates were not detectable by the user.
2014-09-26 12:53:04 +00:00
x509parse_crt_file:"data_files/server7_int-ca.crt":0
X509 File parse (extra space in one certificate)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
x509_crt_parse() did not increase total_failed on PEM error Result was that PEM errors in files with multiple certificates were not detectable by the user.
2014-09-26 12:53:04 +00:00
x509parse_crt_file:"data_files/server7_pem_space.crt":1
X509 File parse (all certificates fail)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 10:49:31 +00:00
x509parse_crt_file:"data_files/server7_all_space.crt":MBEDTLS_ERR_PEM_INVALID_DATA + MBEDTLS_ERR_BASE64_INVALID_CHARACTER
Accept a trailing space at end of PEM lines With certs being copy-pasted from webmails and all, this will probably become more and more common. closes #226
2015-07-31 09:09:59 +00:00
X509 File parse (trailing spaces, OK)
Fix depends_on:pk_alg in test suites
2017-06-20 07:53:42 +00:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Accept a trailing space at end of PEM lines With certs being copy-pasted from webmails and all, this will probably become more and more common. closes #226
2015-07-31 09:09:59 +00:00
x509parse_crt_file:"data_files/server7_trailing_space.crt":0
Add check for validity of date in x509_get_time()
2016-09-23 12:16:02 +00:00
X509 Get time (UTC no issues)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"500101000000Z":0:1950:1:1:0:0:0
X509 Get time (Generalized Time no issues)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"99991231235959Z":0:9999:12:31:23:59:59
X509 Get time (UTC year without leap day)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"490229121212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC year with leap day)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121212Z":0:2000:2:29:12:12:12
X509 Get time (UTC invalid day of month #1)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"000132121212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid day of month #2)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"001131121212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid hour)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"001130241212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid min)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"001130236012Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid sec)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"001130235960Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
Add unit tests for X509 certificate date parsing
2017-02-08 14:13:02 +00:00
X509 Get time (UTC without time zone)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121212":0:2000:2:29:12:12:12
X509 Get time (UTC with invalid time zone #1)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121212J":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC with invalid time zone #2)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121212+0300":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (Date with invalid tag)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_CONTEXT_SPECIFIC:"000229121212":MBEDTLS_ERR_X509_INVALID_DATE+MBEDTLS_ERR_ASN1_UNEXPECTED_TAG:0:0:0:0:0:0
X509 Get time (UTC, truncated)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (Generalized Time, truncated)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"20000229121":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC without seconds)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0002291212":MBEDTLS_ERR_X509_INVALID_DATE:2000:2:29:12:12:0
X509 Get time (UTC without seconds and with invalid time zone #1)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0002291212J":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC without second and with invalid time zone #2)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0002291212+0300":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid character in year)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0\1130231212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid character in month)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"001%30231212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid character in day)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0011`0231212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid character in hour)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0011302h1212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid character in min)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"00113023u012Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid character in sec)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0011302359n0Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
Improve leap year test names in x509parse.data
2017-10-06 16:05:24 +00:00
X509 Get time (Generalized Time, year multiple of 100 but not 400 is not a leap year)
Correctly handle leap year in x509_date_is_valid() This patch ensures that invalid dates on leap years with 100 or 400 years intervals are handled correctly.
2016-11-21 15:38:02 +00:00
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"19000229000000Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
Improve leap year test names in x509parse.data
2017-10-06 16:05:24 +00:00
X509 Get time (Generalized Time, year multiple of 4 but not 100 is a leap year)
Correctly handle leap year in x509_date_is_valid() This patch ensures that invalid dates on leap years with 100 or 400 years intervals are handled correctly.
2016-11-21 15:38:02 +00:00
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"19920229000000Z":0:1992:2:29:0:0:0
Improve leap year test names in x509parse.data
2017-10-06 16:05:24 +00:00
X509 Get time (Generalized Time, year multiple of 400 is a leap year)
Correctly handle leap year in x509_date_is_valid() This patch ensures that invalid dates on leap years with 100 or 400 years intervals are handled correctly.
2016-11-21 15:38:02 +00:00
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"20000229000000Z":0:2000:2:29:0:0:0
X509 Get time (Generalized Time invalid leap year not multiple of 4, 100 or 400)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"19910229000000Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
Add unit tests for X509 certificate date parsing
2017-02-08 14:13:02 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verify restart: trusted EE, max_ops=0 (disabled)
Add tests for verify_restartable() For selection of test cases, see comments added in the commit. It makes the most sense to test with chains using ECC only, so for the chain of length 2 we use server10 -> int-ca3 -> int-ca2 and trust int-ca2 directly. Note: server10.crt was created by copying server10_int3_int-ca2.crt and manually truncating it to remove the intermediates. That base can now be used to create derived certs (without or with a chain) in a programmatic way.
2017-07-14 09:05:59 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
x509_verify_restart:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":0:0:0:0:0
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verify restart: trusted EE, max_ops=1
Make verify() actually restartable
2017-08-14 16:04:19 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
x509_verify_restart:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":0:0:1:0:0
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verify restart: no intermediate, max_ops=0 (disabled)
Add tests for verify_restartable() For selection of test cases, see comments added in the commit. It makes the most sense to test with chains using ECC only, so for the chain of length 2 we use server10 -> int-ca3 -> int-ca2 and trust int-ca2 directly. Note: server10.crt was created by copying server10_int3_int-ca2.crt and manually truncating it to remove the intermediates. That base can now be used to create derived certs (without or with a chain) in a programmatic way.
2017-07-14 09:05:59 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
x509_verify_restart:"data_files/server5.crt":"data_files/test-ca2.crt":0:0:0:0:0
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verify restart: no intermediate, max_ops=1
Make verify() actually restartable
2017-08-14 16:04:19 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
x509_verify_restart:"data_files/server5.crt":"data_files/test-ca2.crt":0:0:1:100:10000
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verify restart: no intermediate, max_ops=40000
Make verify() actually restartable
2017-08-14 16:04:19 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
x509_verify_restart:"data_files/server5.crt":"data_files/test-ca2.crt":0:0:40000:0:0
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verify restart: no intermediate, max_ops=500
Make verify() actually restartable
2017-08-14 16:04:19 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
x509_verify_restart:"data_files/server5.crt":"data_files/test-ca2.crt":0:0:500:20:80
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verify restart: no intermediate, badsign, max_ops=0 (disabled)
Add tests for verify_restartable() For selection of test cases, see comments added in the commit. It makes the most sense to test with chains using ECC only, so for the chain of length 2 we use server10 -> int-ca3 -> int-ca2 and trust int-ca2 directly. Note: server10.crt was created by copying server10_int3_int-ca2.crt and manually truncating it to remove the intermediates. That base can now be used to create derived certs (without or with a chain) in a programmatic way.
2017-07-14 09:05:59 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
x509_verify_restart:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:0:0:0
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verify restart: no intermediate, badsign, max_ops=1
Make verify() actually restartable
2017-08-14 16:04:19 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
x509_verify_restart:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:1:100:10000
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verify restart: no intermediate, badsign, max_ops=40000
Make verify() actually restartable
2017-08-14 16:04:19 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
x509_verify_restart:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:40000:0:0
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verify restart: no intermediate, badsign, max_ops=500
Make verify() actually restartable
2017-08-14 16:04:19 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
x509_verify_restart:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:500:20:80
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verify restart: one int, max_ops=0 (disabled)
Add tests for verify_restartable() For selection of test cases, see comments added in the commit. It makes the most sense to test with chains using ECC only, so for the chain of length 2 we use server10 -> int-ca3 -> int-ca2 and trust int-ca2 directly. Note: server10.crt was created by copying server10_int3_int-ca2.crt and manually truncating it to remove the intermediates. That base can now be used to create derived certs (without or with a chain) in a programmatic way.
2017-07-14 09:05:59 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":0:0:0:0:0
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verify restart: one int, max_ops=1
Make verify() actually restartable
2017-08-14 16:04:19 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":0:0:1:100:10000
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verify restart: one int, max_ops=30000
Make verify() actually restartable
2017-08-14 16:04:19 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":0:0:30000:0:0
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verify restart: one int, max_ops=500
Make verify() actually restartable
2017-08-14 16:04:19 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":0:0:500:25:100
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verify restart: one int, EE badsign, max_ops=0 (disabled)
Add tests for verify_restartable() For selection of test cases, see comments added in the commit. It makes the most sense to test with chains using ECC only, so for the chain of length 2 we use server10 -> int-ca3 -> int-ca2 and trust int-ca2 directly. Note: server10.crt was created by copying server10_int3_int-ca2.crt and manually truncating it to remove the intermediates. That base can now be used to create derived certs (without or with a chain) in a programmatic way.
2017-07-14 09:05:59 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10-bs_int3.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:0:0:0
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verify restart: one int, EE badsign, max_ops=1
Make verify() actually restartable
2017-08-14 16:04:19 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10-bs_int3.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:1:100:10000
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verify restart: one int, EE badsign, max_ops=30000
Make verify() actually restartable
2017-08-14 16:04:19 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10-bs_int3.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:30000:0:0
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verify restart: one int, EE badsign, max_ops=500
Make verify() actually restartable
2017-08-14 16:04:19 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10-bs_int3.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:500:25:100
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verify restart: one int, int badsign, max_ops=0 (disabled)
Add tests for verify_restartable() For selection of test cases, see comments added in the commit. It makes the most sense to test with chains using ECC only, so for the chain of length 2 we use server10 -> int-ca3 -> int-ca2 and trust int-ca2 directly. Note: server10.crt was created by copying server10_int3_int-ca2.crt and manually truncating it to remove the intermediates. That base can now be used to create derived certs (without or with a chain) in a programmatic way.
2017-07-14 09:05:59 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10_int3-bs.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:0:0:0
Make verify() actually restartable
2017-08-14 16:04:19 +00:00
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verify restart: one int, int badsign, max_ops=1
Make verify() actually restartable
2017-08-14 16:04:19 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10_int3-bs.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:1:100:10000
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verify restart: one int, int badsign, max_ops=30000
Make verify() actually restartable
2017-08-14 16:04:19 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10_int3-bs.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:30000:0:0
Shorten X.509 CRT parsing test names
2019-02-14 12:52:47 +00:00
X509 CRT verify restart: one int, int badsign, max_ops=500
Make verify() actually restartable
2017-08-14 16:04:19 +00:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10_int3-bs.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:500:25:100
Reference in a new issue Copy permalink