yuzu-emu/mbedtls
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
mbedtls/tests/suites/test_suite_x509parse.data

2830 lines
289 KiB
Text
Raw Normal View History

Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information #1
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/server1.crt":"cert. version \: 3\nserial number \: 01\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information #1 (DER)
Add test for mbedtls_x509_parse_file() with DER encoded CRT
2019-01-31 11:55:42 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/server1.crt.der":"cert. version \: 3\nserial number \: 01\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
Add test for mbedtls_x509_parse_file() with DER encoded CRT
2019-01-31 11:55:42 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information #2
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/server2.crt":"cert. version \: 3\nserial number \: 02\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information #2 (DER)
Add test for mbedtls_x509_parse_file() with DER encoded CRT
2019-01-31 11:55:42 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/server2.crt.der":"cert. version \: 3\nserial number \: 02\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
Add test for mbedtls_x509_parse_file() with DER encoded CRT
2019-01-31 11:55:42 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information #3
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/test-ca.crt":"cert. version \: 3\nserial number \: 03\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued on \: 2019-02-10 14\:44\:00\nexpires on \: 2029-02-10 14\:44\:00\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=true\n"
Add test for mbedtls_x509_parse_file() with DER encoded CRT
2019-01-31 11:55:42 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information #3 (DER)
Add test for mbedtls_x509_parse_file() with DER encoded CRT
2019-01-31 11:55:42 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/test-ca.crt.der":"cert. version \: 3\nserial number \: 03\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued on \: 2019-02-10 14\:44\:00\nexpires on \: 2029-02-10 14\:44\:00\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=true\n"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information MD2 Digest
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD2_C
Add instructions for MD[245] test CRTs to tests/data_files/Makefile
2019-06-03 15:14:04 +02:00
x509_cert_info:"data_files/cert_md2.crt":"cert. version \: 3\nserial number \: 09\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert MD2\nissued on \: 2000-01-01 12\:12\:12\nexpires on \: 2030-01-01 12\:12\:12\nsigned using \: RSA with MD2\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information MD4 Digest
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD4_C
Add instructions for MD[245] test CRTs to tests/data_files/Makefile
2019-06-03 15:14:04 +02:00
x509_cert_info:"data_files/cert_md4.crt":"cert. version \: 3\nserial number \: 05\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert MD4\nissued on \: 2000-01-01 12\:12\:12\nexpires on \: 2030-01-01 12\:12\:12\nsigned using \: RSA with MD4\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information MD5 Digest
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD5_C
Add instructions for MD[245] test CRTs to tests/data_files/Makefile
2019-06-03 15:14:04 +02:00
x509_cert_info:"data_files/cert_md5.crt":"cert. version \: 3\nserial number \: 06\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert MD5\nissued on \: 2000-01-01 12\:12\:12\nexpires on \: 2030-01-01 12\:12\:12\nsigned using \: RSA with MD5\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information SHA1 Digest
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/cert_sha1.crt":"cert. version \: 3\nserial number \: 07\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA1\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information SHA224 Digest
Fix SHA definitions and their dependencies in library and test suites. Rework SHA224 and SHA283 documentation. Define MBEDTLS_SHAxxx_C options in alphabetic order. Fix SHA224 and SHA384 dependencies in test suites. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-05-10 13:51:53 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA224_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/cert_sha224.crt":"cert. version \: 3\nserial number \: 08\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA224\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA-224\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information SHA256 Digest
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/cert_sha256.crt":"cert. version \: 3\nserial number \: 09\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA256\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information SHA384 Digest
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA384_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/cert_sha384.crt":"cert. version \: 3\nserial number \: 0A\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA384\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA-384\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information SHA512 Digest
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA512_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/cert_sha512.crt":"cert. version \: 3\nserial number \: 0B\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA512\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA-512\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information RSA-PSS, SHA1 Digest
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C
Consider trailerField a constant
2014-05-31 17:08:16 +02:00
x509_cert_info:"data_files/server9.crt":"cert. version \: 3\nserial number \: 16\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2014-01-20 13\:38\:16\nexpires on \: 2024-01-18 13\:38\:16\nsigned using \: RSASSA-PSS (SHA1, MGF1-SHA1, 0xEA)\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\n"
Finish parsing RSASSA-PSS parameters
2014-01-23 19:15:29 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information RSA-PSS, SHA224 Digest
Fix SHA definitions and their dependencies in library and test suites. Rework SHA224 and SHA283 documentation. Define MBEDTLS_SHAxxx_C options in alphabetic order. Fix SHA224 and SHA384 dependencies in test suites. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-05-10 13:51:53 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA224_C
Consider trailerField a constant
2014-05-31 17:08:16 +02:00
x509_cert_info:"data_files/server9-sha224.crt":"cert. version \: 3\nserial number \: 17\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2014-01-20 13\:57\:36\nexpires on \: 2024-01-18 13\:57\:36\nsigned using \: RSASSA-PSS (SHA224, MGF1-SHA224, 0xE2)\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\n"
Finish parsing RSASSA-PSS parameters
2014-01-23 19:15:29 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information RSA-PSS, SHA256 Digest
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C
Consider trailerField a constant
2014-05-31 17:08:16 +02:00
x509_cert_info:"data_files/server9-sha256.crt":"cert. version \: 3\nserial number \: 18\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2014-01-20 13\:57\:45\nexpires on \: 2024-01-18 13\:57\:45\nsigned using \: RSASSA-PSS (SHA256, MGF1-SHA256, 0xDE)\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\n"
Finish parsing RSASSA-PSS parameters
2014-01-23 19:15:29 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information RSA-PSS, SHA384 Digest
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA384_C
Consider trailerField a constant
2014-05-31 17:08:16 +02:00
x509_cert_info:"data_files/server9-sha384.crt":"cert. version \: 3\nserial number \: 19\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2014-01-20 13\:57\:58\nexpires on \: 2024-01-18 13\:57\:58\nsigned using \: RSASSA-PSS (SHA384, MGF1-SHA384, 0xCE)\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\n"
Finish parsing RSASSA-PSS parameters
2014-01-23 19:15:29 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information RSA-PSS, SHA512 Digest
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C
Consider trailerField a constant
2014-05-31 17:08:16 +02:00
x509_cert_info:"data_files/server9-sha512.crt":"cert. version \: 3\nserial number \: 1A\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2014-01-20 13\:58\:12\nexpires on \: 2024-01-18 13\:58\:12\nsigned using \: RSASSA-PSS (SHA512, MGF1-SHA512, 0xBE)\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\n"
Basic parsing of certs signed with RSASSA-PSS
2014-01-22 10:12:57 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information EC, SHA1 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Start printing extensions in x509_crt_info()
2014-04-01 12:19:09 +02:00
x509_cert_info:"data_files/server5-sha1.crt":"cert. version \: 3\nserial number \: 12\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-09-24 16\:21\:27\nexpires on \: 2023-09-22 16\:21\:27\nsigned using \: ECDSA with SHA1\nEC key size \: 256 bits\nbasic constraints \: CA=false\n"
Add cert_info tests for EC and mixed certificates
2013-08-10 09:44:43 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information EC, SHA224 Digest
Fix SHA definitions and their dependencies in library and test suites. Rework SHA224 and SHA283 documentation. Define MBEDTLS_SHAxxx_C options in alphabetic order. Fix SHA224 and SHA384 dependencies in test suites. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-05-10 13:51:53 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA224_C
Start printing extensions in x509_crt_info()
2014-04-01 12:19:09 +02:00
x509_cert_info:"data_files/server5-sha224.crt":"cert. version \: 3\nserial number \: 13\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-09-24 16\:21\:27\nexpires on \: 2023-09-22 16\:21\:27\nsigned using \: ECDSA with SHA224\nEC key size \: 256 bits\nbasic constraints \: CA=false\n"
Add cert_info tests for EC and mixed certificates
2013-08-10 09:44:43 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information EC, SHA256 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Start printing extensions in x509_crt_info()
2014-04-01 12:19:09 +02:00
x509_cert_info:"data_files/server5.crt":"cert. version \: 3\nserial number \: 09\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-09-24 15\:52\:04\nexpires on \: 2023-09-22 15\:52\:04\nsigned using \: ECDSA with SHA256\nEC key size \: 256 bits\nbasic constraints \: CA=false\n"
Add cert_info tests for EC and mixed certificates
2013-08-10 09:44:43 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information EC, SHA384 Digest
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA384_C
Start printing extensions in x509_crt_info()
2014-04-01 12:19:09 +02:00
x509_cert_info:"data_files/server5-sha384.crt":"cert. version \: 3\nserial number \: 14\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-09-24 16\:21\:27\nexpires on \: 2023-09-22 16\:21\:27\nsigned using \: ECDSA with SHA384\nEC key size \: 256 bits\nbasic constraints \: CA=false\n"
Add cert_info tests for EC and mixed certificates
2013-08-10 09:44:43 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information EC, SHA512 Digest
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA512_C
Start printing extensions in x509_crt_info()
2014-04-01 12:19:09 +02:00
x509_cert_info:"data_files/server5-sha512.crt":"cert. version \: 3\nserial number \: 15\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-09-24 16\:21\:27\nexpires on \: 2023-09-22 16\:21\:27\nsigned using \: ECDSA with SHA512\nEC key size \: 256 bits\nbasic constraints \: CA=false\n"
Add cert_info tests for EC and mixed certificates
2013-08-10 09:44:43 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information EC, SHA256 Digest, hardware module name SAN
Suppport otherName of type hardware module name Add support of parsing of subject alternative name, of type otherName. Currently supports only hardware module name, as defined in rfc 4108.
2019-03-21 12:40:13 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
x509_cert_info:"data_files/server5-othername.crt":"cert. version \: 3\nserial number \: 4D\nissuer name \: C=UK, O=Mbed TLS, CN=Mbed TLS othername SAN\nsubject name \: C=UK, O=Mbed TLS, CN=Mbed TLS othername SAN\nissued on \: 2019-03-24 09\:06\:02\nexpires on \: 2029-03-21 09\:06\:02\nsigned using \: ECDSA with SHA256\nEC key size \: 256 bits\nsubject alt name \:\n otherName \:\n hardware module name \:\n hardware type \: 1.3.6.1.4.1.17.3\n hardware serial number \: 123456\n"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information EC, SHA256 Digest, Wisun Fan device
Add Wisun Fan device certificate Add certificate with Wisun fan device extended key usage, support parsing it and add tests.
2019-03-25 13:05:23 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
x509_cert_info:"data_files/server5-fan.crt":"cert. version \: 3\nserial number \: 4D\nissuer name \: C=UK, O=Mbed TLS, CN=Mbed TLS FAN\nsubject name \: C=UK, O=Mbed TLS, CN=Mbed TLS FAN\nissued on \: 2019-03-25 09\:03\:46\nexpires on \: 2029-03-22 09\:03\:46\nsigned using \: ECDSA with SHA256\nEC key size \: 256 bits\next key usage \: Wi-SUN Alliance Field Area Network (FAN)\n"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information, NS Cert Type
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/server1.cert_type.crt":"cert. version \: 3\nserial number \: 01\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\ncert. type \: SSL Server\n"
Print NS Cert Type in x509_crt_info()
2014-04-01 13:01:11 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information, Key Usage
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
x509_cert_info:"data_files/server1.key_usage.crt":"cert. version \: 3\nserial number \: 01\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\nkey usage \: Digital Signature, Non Repudiation, Key Encipherment\n"
Print key_usage in x509_crt_info()
2014-04-01 14:12:11 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information, Key Usage with decipherOnly
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Add parsing/printing for new X.509 keyUsage flags
2015-06-23 10:14:36 +02:00
x509_cert_info:"data_files/keyUsage.decipherOnly.crt":"cert. version \: 3\nserial number \: 9B\:13\:CE\:4C\:A5\:6F\:DE\:52\nissuer name \: C=GB, L=Cambridge, O=Default Company Ltd\nsubject name \: C=GB, L=Cambridge, O=Default Company Ltd\nissued on \: 2015-05-12 10\:36\:55\nexpires on \: 2018-05-11 10\:36\:55\nsigned using \: RSA with SHA1\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\nkey usage \: Digital Signature, Non Repudiation, Key Encipherment, Decipher Only\n"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information, Subject Alt Name
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509_cert_info:"data_files/cert_example_multi.crt":"cert. version \: 3\nserial number \: 11\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=www.example.com\nissued on \: 2019-07-10 11\:27\:52\nexpires on \: 2029-07-10 11\:27\:52\nsigned using \: RSA with SHA-256\nRSA key size \: 1024 bits\nsubject alt name \:\n dNSName \: example.com\n dNSName \: example.net\n dNSName \: *.example.org\n"
Suppport otherName of type hardware module name Add support of parsing of subject alternative name, of type otherName. Currently supports only hardware module name, as defined in rfc 4108.
2019-03-21 12:40:13 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information, Multiple different Subject Alt Name
Suppport otherName of type hardware module name Add support of parsing of subject alternative name, of type otherName. Currently supports only hardware module name, as defined in rfc 4108.
2019-03-21 12:40:13 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
x509_cert_info:"data_files/multiple_san.crt":"cert. version \: 3\nserial number \: 04\nissuer name \: C=UK, O=Mbed TLS, CN=Mbed TLS multiple othername SAN\nsubject name \: C=UK, O=Mbed TLS, CN=Mbed TLS multiple othername SAN\nissued on \: 2019-04-22 16\:10\:48\nexpires on \: 2029-04-19 16\:10\:48\nsigned using \: ECDSA with SHA256\nEC key size \: 256 bits\nsubject alt name \:\n dNSName \: example.com\n otherName \:\n hardware module name \:\n hardware type \: 1.3.6.1.4.1.17.3\n hardware serial number \: 123456\n dNSName \: example.net\n dNSName \: *.example.org\n"
Print subject alt name in x509_crt_info()
2014-04-01 13:43:28 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information, Subject Alt Name + Key Usage
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Print unparseable SubjectAlternativeNames In x509_info_subject_alt_name() we silently dropped names that we couldn't parse because they are not supported or are malformed. (Being malformed might mean damaged file, but can be a sign of incompatibility between applications.) This commit adds code notifying the user that there is something, but we can't parse it.
2019-05-10 11:37:17 +02:00
x509_cert_info:"data_files/cert_example_multi_nocn.crt":"cert. version \: 3\nserial number \: F7\:C6\:7F\:F8\:E9\:A9\:63\:F9\nissuer name \: C=NL\nsubject name \: C=NL\nissued on \: 2014-01-22 10\:04\:33\nexpires on \: 2024-01-22 10\:04\:33\nsigned using \: RSA with SHA1\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\nsubject alt name \:\n dNSName \: www.shotokan-braunschweig.de\n dNSName \: www.massimo-abate.eu\n <unsupported>\n <unsupported>\nkey usage \: Digital Signature, Non Repudiation, Key Encipherment\n"
Print key_usage in x509_crt_info()
2014-04-01 14:12:11 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information, RSA Certificate Policy any
Add support for certificate policies extension Add support for certificate policies, as defined in rfc 5280. Currently support only `anyPolicy` policy.
2019-03-21 13:00:03 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509_cert_info:"data_files/test-ca-any_policy.crt":"cert. version \: 3\nserial number \: 00\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued on \: 2019-03-21 16\:40\:59\nexpires on \: 2029-03-21 16\:40\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\nbasic constraints \: CA=true\ncertificate policies \: Any Policy\n"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information, ECDSA Certificate Policy any
Add support for certificate policies extension Add support for certificate policies, as defined in rfc 5280. Currently support only `anyPolicy` policy.
2019-03-21 13:00:03 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
x509_cert_info:"data_files/test-ca-any_policy_ec.crt":"cert. version \: 3\nserial number \: 00\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nissued on \: 2019-03-25 09\:02\:45\nexpires on \: 2029-03-25 09\:02\:45\nsigned using \: ECDSA with SHA256\nEC key size \: 384 bits\nbasic constraints \: CA=true\ncertificate policies \: Any Policy\n"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information, RSA Certificate Policy any with qualifier
Add support for certificate policies extension Add support for certificate policies, as defined in rfc 5280. Currently support only `anyPolicy` policy.
2019-03-21 13:00:03 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509_cert_info:"data_files/test-ca-any_policy_with_qualifier.crt":"cert. version \: 3\nserial number \: 00\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued on \: 2019-04-28 13\:14\:31\nexpires on \: 2029-04-28 13\:14\:31\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\nbasic constraints \: CA=true\ncertificate policies \: Any Policy\n"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information, ECDSA Certificate Policy any with qualifier
Add support for certificate policies extension Add support for certificate policies, as defined in rfc 5280. Currently support only `anyPolicy` policy.
2019-03-21 13:00:03 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
x509_cert_info:"data_files/test-ca-any_policy_with_qualifier_ec.crt":"cert. version \: 3\nserial number \: 00\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nissued on \: 2019-04-28 10\:16\:05\nexpires on \: 2029-04-28 10\:16\:05\nsigned using \: ECDSA with SHA256\nEC key size \: 384 bits\nbasic constraints \: CA=true\ncertificate policies \: Any Policy\n"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information, RSA Certificate multiple Policies
Add support for certificate policies extension Add support for certificate policies, as defined in rfc 5280. Currently support only `anyPolicy` policy.
2019-03-21 13:00:03 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509_cert_info:"data_files/test-ca-multi_policy.crt":"cert. version \: 3\nserial number \: 00\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued on \: 2019-04-28 12\:59\:19\nexpires on \: 2029-04-28 12\:59\:19\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\nbasic constraints \: CA=true\ncertificate policies \: ???, Any Policy\n"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information, ECDSA Certificate multiple Policies
Add support for certificate policies extension Add support for certificate policies, as defined in rfc 5280. Currently support only `anyPolicy` policy.
2019-03-21 13:00:03 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
x509_cert_info:"data_files/test-ca-multi_policy_ec.crt":"cert. version \: 3\nserial number \: 00\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nissued on \: 2019-04-28 12\:59\:51\nexpires on \: 2029-04-28 12\:59\:51\nsigned using \: ECDSA with SHA256\nEC key size \: 384 bits\nbasic constraints \: CA=true\ncertificate policies \: ???, Any Policy\n"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information, RSA Certificate unsupported policy
Add support for certificate policies extension Add support for certificate policies, as defined in rfc 5280. Currently support only `anyPolicy` policy.
2019-03-21 13:00:03 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509_cert_info:"data_files/test-ca-unsupported_policy.crt":"cert. version \: 3\nserial number \: 00\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued on \: 2019-04-28 13\:00\:13\nexpires on \: 2029-04-28 13\:00\:13\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\nbasic constraints \: CA=true\ncertificate policies \: ???\n"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information, ECDSA Certificate unsupported policy
Add support for certificate policies extension Add support for certificate policies, as defined in rfc 5280. Currently support only `anyPolicy` policy.
2019-03-21 13:00:03 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
x509_cert_info:"data_files/test-ca-unsupported_policy_ec.crt":"cert. version \: 3\nserial number \: 00\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nissued on \: 2019-04-28 13\:00\:19\nexpires on \: 2029-04-28 13\:00\:19\nsigned using \: ECDSA with SHA256\nEC key size \: 384 bits\nbasic constraints \: CA=true\ncertificate policies \: ???\n"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information, Key Usage + Extended Key Usage
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509_crt_info() list output cosmectics
2014-04-01 18:00:07 +02:00
x509_cert_info:"data_files/server1.ext_ku.crt":"cert. version \: 3\nserial number \: 21\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued on \: 2014-04-01 14\:44\:43\nexpires on \: 2024-03-29 14\:44\:43\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\nkey usage \: Digital Signature, Non Repudiation, Key Encipherment\next key usage \: TLS Web Server Authentication\n"
Print extended key usage in x509_crt_info()
2014-04-01 17:32:44 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information RSA signed by EC
Added needed ECDSA dependencies to test_suite_x509parse.data
2016-08-07 10:56:02 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C
Start printing extensions in x509_crt_info()
2014-04-01 12:19:09 +02:00
x509_cert_info:"data_files/server4.crt":"cert. version \: 3\nserial number \: 08\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-09-24 15\:52\:04\nexpires on \: 2023-09-22 15\:52\:04\nsigned using \: ECDSA with SHA256\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
Add cert_info tests for EC and mixed certificates
2013-08-10 09:44:43 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information EC signed by RSA
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP192R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
Start printing extensions in x509_crt_info()
2014-04-01 12:19:09 +02:00
x509_cert_info:"data_files/server3.crt":"cert. version \: 3\nserial number \: 0D\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-08-09 09\:17\:03\nexpires on \: 2023-08-07 09\:17\:03\nsigned using \: RSA with SHA1\nEC key size \: 192 bits\nbasic constraints \: CA=false\n"
Add cert_info tests for EC and mixed certificates
2013-08-10 09:44:43 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT information Bitstring in subject name
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Print unparseable SubjectAlternativeNames In x509_info_subject_alt_name() we silently dropped names that we couldn't parse because they are not supported or are malformed. (Being malformed might mean damaged file, but can be a sign of incompatibility between applications.) This commit adds code notifying the user that there is something, but we can't parse it.
2019-05-10 11:37:17 +02:00
x509_cert_info:"data_files/bitstring-in-dn.pem":"cert. version \: 3\nserial number \: 02\nissuer name \: CN=Test CA 01, ST=Ecnivorp, C=XX, emailAddress=tca@example.com, O=Test CA Authority\nsubject name \: C=XX, O=tca, ST=Ecnivorp, OU=TCA, CN=Client, emailAddress=client@example.com, serialNumber=7101012255, uniqueIdentifier=?7101012255\nissued on \: 2015-03-11 12\:06\:51\nexpires on \: 2025-03-08 12\:06\:51\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\nsubject alt name \:\n <unsupported>\next key usage \: TLS Web Client Authentication\n"
Add test certificate for bitstring in DN
2015-03-27 13:09:21 +01:00
fix mbedtls_x509_dn_gets to escape non-ASCII characters Signed-off-by: Koh M. Nakagawa <tsunekou1019@gmail.com>
2020-05-16 03:08:09 +02:00
X509 CRT information Non-ASCII string in issuer name and subject name
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509_cert_info:"data_files/non-ascii-string-in-issuer.crt":"cert. version \: 3\nserial number \: 05\:E6\:53\:E7\:1B\:74\:F0\:B5\:D3\:84\:6D\:0C\:6D\:DC\:FA\:3F\:A4\:5A\:2B\:E0\nissuer name \: C=JP, ST=Tokyo, O=?????????????????? Ltd, CN=?????????????????? CA\nsubject name \: C=JP, ST=Tokyo, O=?????????????????? Ltd, CN=?????????????????? CA\nissued on \: 2020-05-20 16\:17\:23\nexpires on \: 2020-06-19 16\:17\:23\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\nbasic constraints \: CA=true\n"
Suppport otherName of type hardware module name Add support of parsing of subject alternative name, of type otherName. Currently supports only hardware module name, as defined in rfc 4108.
2019-03-21 12:40:13 +01:00
X509 SAN parsing otherName
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
x509_parse_san:"data_files/server5-othername.crt":"type \: 0\notherName \: hardware module name \: hardware type \: 1.3.6.1.4.1.17.3, hardware serial number \: 123456\n"
X509 SAN parsing dNSName
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Suppport otherName of type hardware module name Add support of parsing of subject alternative name, of type otherName. Currently supports only hardware module name, as defined in rfc 4108.
2019-03-21 12:40:13 +01:00
x509_parse_san:"data_files/cert_example_multi.crt":"type \: 2\ndNSName \: example.com\ntype \: 2\ndNSName \: example.net\ntype \: 2\ndNSName \: *.example.org\n"
X509 SAN parsing Multiple different types
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
x509_parse_san:"data_files/multiple_san.crt":"type \: 2\ndNSName \: example.com\ntype \: 0\notherName \: hardware module name \: hardware type \: 1.3.6.1.4.1.17.3, hardware serial number \: 123456\ntype \: 2\ndNSName \: example.net\ntype \: 2\ndNSName \: *.example.org\n"
X509 SAN parsing, no subject alt name
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C
x509_parse_san:"data_files/server4.crt":""
X509 SAN parsing, unsupported otherName name
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
x509_parse_san:"data_files/server5-unsupported_othername.crt":""
Support faulty X509 v1 certificates with extensions (POLARSSL_X509_ALLOW_EXTENSIONS_NON_V3)
2013-09-23 15:01:36 +02:00
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 CRL information #1
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl_expired.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-20 10\:24\:19\nnext update \: 2011-02-20 11\:24\:19\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA1\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 CRL Information MD2 Digest
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD2_C:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl_md2.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2009-07-19 19\:56\:37\nnext update \: 2009-09-17 19\:56\:37\nRevoked certificates\:\nserial number\: 01 revocation date\: 2009-02-09 21\:12\:36\nserial number\: 03 revocation date\: 2009-02-09 21\:12\:36\nsigned using \: RSA with MD2\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 CRL Information MD4 Digest
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD4_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl_md4.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with MD4\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 CRL Information MD5 Digest
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD5_C:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl_md5.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with MD5\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 CRL Information SHA1 Digest
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl_sha1.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA1\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 CRL Information SHA224 Digest
Merge branch 'development' into convert_NO_SHA384_to_positive Conflicts: * configs/config-psa-crypto.h: modified here, removed in development * tests/suites/test_suite_x509parse.data: all conflicts are in depends_on lines where development made a change unrelated to MBEDTLS_SHAxxx and our branch either changed `MBEDTLS_SHA256_C` to `MBEDTLS_SHA224_C` or `MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384` to ``MBEDTLS_SHA384_C`, with no change to what the test does. Pick the other branch's dependency changes then apply our SHA dpeendency change.
2021-05-10 15:18:08 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA224_C:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl_sha224.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA-224\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 CRL Information SHA256 Digest
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl_sha256.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA-256\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 CRL Information SHA384 Digest
Merge branch 'development' into convert_NO_SHA384_to_positive Conflicts: * configs/config-psa-crypto.h: modified here, removed in development * tests/suites/test_suite_x509parse.data: all conflicts are in depends_on lines where development made a change unrelated to MBEDTLS_SHAxxx and our branch either changed `MBEDTLS_SHA256_C` to `MBEDTLS_SHA224_C` or `MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384` to ``MBEDTLS_SHA384_C`, with no change to what the test does. Pick the other branch's dependency changes then apply our SHA dpeendency change.
2021-05-10 15:18:08 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA384_C:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl_sha384.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA-384\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 CRL Information SHA512 Digest
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA512_C:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl_sha512.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA-512\n"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Parse CRLs signed with RSASSA-PSS
2014-01-24 15:56:20 +01:00
X509 CRL information RSA-PSS, SHA1 Digest
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl-rsa-pss-sha1.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2014-01-20 13\:46\:35\nnext update \: 2024-01-18 13\:46\:35\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using \: RSASSA-PSS (SHA1, MGF1-SHA1, 0xEA)\n"
Parse CRLs signed with RSASSA-PSS
2014-01-24 15:56:20 +01:00
X509 CRL information RSA-PSS, SHA224 Digest
Merge branch 'development' into convert_NO_SHA384_to_positive Conflicts: * configs/config-psa-crypto.h: modified here, removed in development * tests/suites/test_suite_x509parse.data: all conflicts are in depends_on lines where development made a change unrelated to MBEDTLS_SHAxxx and our branch either changed `MBEDTLS_SHA256_C` to `MBEDTLS_SHA224_C` or `MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384` to ``MBEDTLS_SHA384_C`, with no change to what the test does. Pick the other branch's dependency changes then apply our SHA dpeendency change.
2021-05-10 15:18:08 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA224_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl-rsa-pss-sha224.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2014-01-20 13\:56\:06\nnext update \: 2024-01-18 13\:56\:06\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using \: RSASSA-PSS (SHA224, MGF1-SHA224, 0xE2)\n"
Parse CRLs signed with RSASSA-PSS
2014-01-24 15:56:20 +01:00
X509 CRL information RSA-PSS, SHA256 Digest
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl-rsa-pss-sha256.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2014-01-20 13\:56\:16\nnext update \: 2024-01-18 13\:56\:16\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using \: RSASSA-PSS (SHA256, MGF1-SHA256, 0xDE)\n"
Parse CRLs signed with RSASSA-PSS
2014-01-24 15:56:20 +01:00
X509 CRL information RSA-PSS, SHA384 Digest
Merge branch 'development' into convert_NO_SHA384_to_positive Conflicts: * configs/config-psa-crypto.h: modified here, removed in development * tests/suites/test_suite_x509parse.data: all conflicts are in depends_on lines where development made a change unrelated to MBEDTLS_SHAxxx and our branch either changed `MBEDTLS_SHA256_C` to `MBEDTLS_SHA224_C` or `MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384` to ``MBEDTLS_SHA384_C`, with no change to what the test does. Pick the other branch's dependency changes then apply our SHA dpeendency change.
2021-05-10 15:18:08 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA384_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl-rsa-pss-sha384.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2014-01-20 13\:56\:28\nnext update \: 2024-01-18 13\:56\:28\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using \: RSASSA-PSS (SHA384, MGF1-SHA384, 0xCE)\n"
Parse CRLs signed with RSASSA-PSS
2014-01-24 15:56:20 +01:00
X509 CRL information RSA-PSS, SHA512 Digest
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl-rsa-pss-sha512.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2014-01-20 13\:56\:38\nnext update \: 2024-01-18 13\:56\:38\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using \: RSASSA-PSS (SHA512, MGF1-SHA512, 0xBE)\n"
Parse CRLs signed with RSASSA-PSS
2014-01-24 15:56:20 +01:00
Add tests for crl_info with EC CA
2013-08-10 10:19:03 +02:00
X509 CRL Information EC, SHA1 Digest
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_ECDSA_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl-ec-sha1.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update \: 2013-09-24 16\:31\:08\nnext update \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using \: ECDSA with SHA1\n"
Add tests for crl_info with EC CA
2013-08-10 10:19:03 +02:00
X509 CRL Information EC, SHA224 Digest
Merge branch 'development' into convert_NO_SHA384_to_positive Conflicts: * configs/config-psa-crypto.h: modified here, removed in development * tests/suites/test_suite_x509parse.data: all conflicts are in depends_on lines where development made a change unrelated to MBEDTLS_SHAxxx and our branch either changed `MBEDTLS_SHA256_C` to `MBEDTLS_SHA224_C` or `MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384` to ``MBEDTLS_SHA384_C`, with no change to what the test does. Pick the other branch's dependency changes then apply our SHA dpeendency change.
2021-05-10 15:18:08 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA224_C:MBEDTLS_ECDSA_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl-ec-sha224.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update \: 2013-09-24 16\:31\:08\nnext update \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using \: ECDSA with SHA224\n"
Add tests for crl_info with EC CA
2013-08-10 10:19:03 +02:00
X509 CRL Information EC, SHA256 Digest
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl-ec-sha256.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update \: 2013-09-24 16\:31\:08\nnext update \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using \: ECDSA with SHA256\n"
Add tests for crl_info with EC CA
2013-08-10 10:19:03 +02:00
X509 CRL Information EC, SHA384 Digest
Merge branch 'development' into convert_NO_SHA384_to_positive Conflicts: * configs/config-psa-crypto.h: modified here, removed in development * tests/suites/test_suite_x509parse.data: all conflicts are in depends_on lines where development made a change unrelated to MBEDTLS_SHAxxx and our branch either changed `MBEDTLS_SHA256_C` to `MBEDTLS_SHA224_C` or `MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384` to ``MBEDTLS_SHA384_C`, with no change to what the test does. Pick the other branch's dependency changes then apply our SHA dpeendency change.
2021-05-10 15:18:08 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA384_C:MBEDTLS_ECDSA_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl-ec-sha384.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update \: 2013-09-24 16\:31\:08\nnext update \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using \: ECDSA with SHA384\n"
Add tests for crl_info with EC CA
2013-08-10 10:19:03 +02:00
X509 CRL Information EC, SHA512 Digest
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA512_C:MBEDTLS_ECDSA_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_crl_info:"data_files/crl-ec-sha512.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update \: 2013-09-24 16\:31\:08\nnext update \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using \: ECDSA with SHA512\n"
Add tests for crl_info with EC CA
2013-08-10 10:19:03 +02:00
Add test for infinite loop in CRL parse
2016-12-08 18:10:38 +01:00
X509 CRL Malformed Input (trailing spaces at end of file)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA512_C:MBEDTLS_ECDSA_C
Add test for infinite loop in CRL parse
2016-12-08 18:10:38 +01:00
mbedtls_x509_crl_parse:"data_files/crl-malformed-trailing-spaces.pem":MBEDTLS_ERR_PEM_NO_HEADER_FOOTER_PRESENT
x509: CRL: reject unsupported critical extensions
2018-03-13 11:53:30 +01:00
X509 CRL Unsupported critical extension (issuingDistributionPoint)
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
mbedtls_x509_crl_parse:"data_files/crl-idp.pem":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
x509: CRL: add tests for non-critical extension The 'critical' boolean can be set to false in two ways: - by leaving it implicit (test data generated by openssl) - by explicitly setting it to false (generated by hand)
2018-03-14 12:23:56 +01:00
X509 CRL Unsupported non-critical extension (issuingDistributionPoint)
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
mbedtls_x509_crl_parse:"data_files/crl-idpnc.pem":0
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
X509 CSR Information RSA with MD4
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD4_C:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server1.req.md4":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with MD4\nRSA key size \: 2048 bits\n"
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
X509 CSR Information RSA with MD5
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD5_C:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server1.req.md5":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with MD5\nRSA key size \: 2048 bits\n"
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
X509 CSR Information RSA with SHA1
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server1.req.sha1":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\n"
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
X509 CSR Information RSA with SHA224
Merge branch 'development' into convert_NO_SHA384_to_positive Conflicts: * configs/config-psa-crypto.h: modified here, removed in development * tests/suites/test_suite_x509parse.data: all conflicts are in depends_on lines where development made a change unrelated to MBEDTLS_SHAxxx and our branch either changed `MBEDTLS_SHA256_C` to `MBEDTLS_SHA224_C` or `MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384` to ``MBEDTLS_SHA384_C`, with no change to what the test does. Pick the other branch's dependency changes then apply our SHA dpeendency change.
2021-05-10 15:18:08 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA224_C:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server1.req.sha224":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with SHA-224\nRSA key size \: 2048 bits\n"
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
X509 CSR Information RSA with SHA-256
Reduce code size when mbedtls_x509_*_info() unused Introduce MBEDTLS_X509_INFO to indicate the availability of the mbedtls_x509_*_info() function and closely related APIs. When this is not defined, also omit name and description from mbedtls_oid_descriptor_t, and omit OID arrays, macros, and types that are entirely unused. This saves several KB of code space. Signed-off-by: Hanno Becker <hanno.becker@arm.com> Signed-off-by: Chris Jones <christopher.jones@arm.com>
2018-12-11 20:55:56 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTS_X509_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server1.req.sha256":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\n"
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
X509 CSR Information RSA with SHA384
Merge branch 'development' into convert_NO_SHA384_to_positive Conflicts: * configs/config-psa-crypto.h: modified here, removed in development * tests/suites/test_suite_x509parse.data: all conflicts are in depends_on lines where development made a change unrelated to MBEDTLS_SHAxxx and our branch either changed `MBEDTLS_SHA256_C` to `MBEDTLS_SHA224_C` or `MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384` to ``MBEDTLS_SHA384_C`, with no change to what the test does. Pick the other branch's dependency changes then apply our SHA dpeendency change.
2021-05-10 15:18:08 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA384_C:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server1.req.sha384":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with SHA-384\nRSA key size \: 2048 bits\n"
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
X509 CSR Information RSA with SHA512
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA512_C:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server1.req.sha512":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with SHA-512\nRSA key size \: 2048 bits\n"
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
X509 CSR Information EC with SHA1
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server5.req.sha1":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: ECDSA with SHA1\nEC key size \: 256 bits\n"
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
X509 CSR Information EC with SHA224
Merge branch 'development' into convert_NO_SHA384_to_positive Conflicts: * configs/config-psa-crypto.h: modified here, removed in development * tests/suites/test_suite_x509parse.data: all conflicts are in depends_on lines where development made a change unrelated to MBEDTLS_SHAxxx and our branch either changed `MBEDTLS_SHA256_C` to `MBEDTLS_SHA224_C` or `MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384` to ``MBEDTLS_SHA384_C`, with no change to what the test does. Pick the other branch's dependency changes then apply our SHA dpeendency change.
2021-05-10 15:18:08 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA224_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server5.req.sha224":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: ECDSA with SHA224\nEC key size \: 256 bits\n"
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
X509 CSR Information EC with SHA256
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server5.req.sha256":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: ECDSA with SHA256\nEC key size \: 256 bits\n"
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
X509 CSR Information EC with SHA384
Merge branch 'development' into convert_NO_SHA384_to_positive Conflicts: * configs/config-psa-crypto.h: modified here, removed in development * tests/suites/test_suite_x509parse.data: all conflicts are in depends_on lines where development made a change unrelated to MBEDTLS_SHAxxx and our branch either changed `MBEDTLS_SHA256_C` to `MBEDTLS_SHA224_C` or `MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384` to ``MBEDTLS_SHA384_C`, with no change to what the test does. Pick the other branch's dependency changes then apply our SHA dpeendency change.
2021-05-10 15:18:08 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA384_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server5.req.sha384":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: ECDSA with SHA384\nEC key size \: 256 bits\n"
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
X509 CSR Information EC with SHA512
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA512_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server5.req.sha512":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: ECDSA with SHA512\nEC key size \: 256 bits\n"
Add tests for parsing CSRs
2014-01-24 17:34:26 +01:00
Parse CSRs signed with RSASSA-PSS
2014-01-24 18:47:17 +01:00
X509 CSR Information RSA-PSS with SHA1
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server9.req.sha1":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: RSASSA-PSS (SHA1, MGF1-SHA1, 0x6A)\nRSA key size \: 1024 bits\n"
Parse CSRs signed with RSASSA-PSS
2014-01-24 18:47:17 +01:00
X509 CSR Information RSA-PSS with SHA224
Merge branch 'development' into convert_NO_SHA384_to_positive Conflicts: * configs/config-psa-crypto.h: modified here, removed in development * tests/suites/test_suite_x509parse.data: all conflicts are in depends_on lines where development made a change unrelated to MBEDTLS_SHAxxx and our branch either changed `MBEDTLS_SHA256_C` to `MBEDTLS_SHA224_C` or `MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384` to ``MBEDTLS_SHA384_C`, with no change to what the test does. Pick the other branch's dependency changes then apply our SHA dpeendency change.
2021-05-10 15:18:08 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA224_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server9.req.sha224":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: RSASSA-PSS (SHA224, MGF1-SHA224, 0x62)\nRSA key size \: 1024 bits\n"
Parse CSRs signed with RSASSA-PSS
2014-01-24 18:47:17 +01:00
X509 CSR Information RSA-PSS with SHA256
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server9.req.sha256":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: RSASSA-PSS (SHA256, MGF1-SHA256, 0x5E)\nRSA key size \: 1024 bits\n"
Parse CSRs signed with RSASSA-PSS
2014-01-24 18:47:17 +01:00
X509 CSR Information RSA-PSS with SHA384
Merge branch 'development' into convert_NO_SHA384_to_positive Conflicts: * configs/config-psa-crypto.h: modified here, removed in development * tests/suites/test_suite_x509parse.data: all conflicts are in depends_on lines where development made a change unrelated to MBEDTLS_SHAxxx and our branch either changed `MBEDTLS_SHA256_C` to `MBEDTLS_SHA224_C` or `MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384` to ``MBEDTLS_SHA384_C`, with no change to what the test does. Pick the other branch's dependency changes then apply our SHA dpeendency change.
2021-05-10 15:18:08 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA384_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server9.req.sha384":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: RSASSA-PSS (SHA384, MGF1-SHA384, 0x4E)\nRSA key size \: 1024 bits\n"
Parse CSRs signed with RSASSA-PSS
2014-01-24 18:47:17 +01:00
X509 CSR Information RSA-PSS with SHA512
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C:!MBEDTLS_X509_REMOVE_INFO
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_info:"data_files/server9.req.sha512":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: RSASSA-PSS (SHA512, MGF1-SHA512, 0x3E)\nRSA key size \: 1024 bits\n"
Parse CSRs signed with RSASSA-PSS
2014-01-24 18:47:17 +01:00
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
X509 CSR Information RSA with SHA-256 - Microsoft header
Add additional test case for alternative CSR headers Add a test case for alternative headers possible for CSR's, as defined in RFC7468.
2018-10-06 17:24:13 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
mbedtls_x509_csr_info:"data_files/server1-ms.req.sha256":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\n"
manually merge 39a183a add x509_crt_verify_info()
2015-04-20 11:38:13 +02:00
X509 Verify Information: empty
x509_verify_info:0:"":""
X509 Verify Information: one issue
Fix some X509 macro names For some reason, during the great renaming, some names that should have been prefixed with MBEDTLS_X509_ have only been prefixed with MBEDTLS_
2015-04-20 13:19:02 +02:00
x509_verify_info:MBEDTLS_X509_BADCERT_MISSING:"":"Certificate was missing\n"
manually merge 39a183a add x509_crt_verify_info()
2015-04-20 11:38:13 +02:00
X509 Verify Information: two issues
Fix some X509 macro names For some reason, during the great renaming, some names that should have been prefixed with MBEDTLS_X509_ have only been prefixed with MBEDTLS_
2015-04-20 13:19:02 +02:00
x509_verify_info:MBEDTLS_X509_BADCERT_EXPIRED | MBEDTLS_X509_BADCRL_EXPIRED:"":"The certificate validity has expired\nThe CRL is expired\n"
manually merge 39a183a add x509_crt_verify_info()
2015-04-20 11:38:13 +02:00
X509 Verify Information: two issues, one unknown
Create cert profile API (unimplemented yet)
2015-06-15 10:39:46 +02:00
x509_verify_info:MBEDTLS_X509_BADCERT_OTHER | 0x80000000:"":"Other reason (can be used by verify callback)\nUnknown reason (this should not happen)\n"
Add x509_crt_verify_info()
2015-04-17 16:14:32 +02:00
X509 Verify Information: empty, with prefix
x509_verify_info:0:" ! ":""
X509 Verify Information: one issue, with prefix
Fix some X509 macro names For some reason, during the great renaming, some names that should have been prefixed with MBEDTLS_X509_ have only been prefixed with MBEDTLS_
2015-04-20 13:19:02 +02:00
x509_verify_info:MBEDTLS_X509_BADCERT_MISSING:" ! ":" ! Certificate was missing\n"
Add x509_crt_verify_info()
2015-04-17 16:14:32 +02:00
X509 Verify Information: two issues, with prefix
Fix some X509 macro names For some reason, during the great renaming, some names that should have been prefixed with MBEDTLS_X509_ have only been prefixed with MBEDTLS_
2015-04-20 13:19:02 +02:00
x509_verify_info:MBEDTLS_X509_BADCERT_EXPIRED | MBEDTLS_X509_BADCRL_EXPIRED:" ! ":" ! The certificate validity has expired\n ! The CRL is expired\n"
Add x509_crt_verify_info()
2015-04-17 16:14:32 +02:00
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Get Distinguished Name #1
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_dn_gets:"data_files/server1.crt":"subject":"C=NL, O=PolarSSL, CN=PolarSSL Server 1"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Get Distinguished Name #2
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_dn_gets:"data_files/server1.crt":"issuer":"C=NL, O=PolarSSL, CN=PolarSSL Test CA"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Get Distinguished Name #3
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_dn_gets:"data_files/server2.crt":"subject":"C=NL, O=PolarSSL, CN=localhost"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Get Distinguished Name #4
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_dn_gets:"data_files/server2.crt":"issuer":"C=NL, O=PolarSSL, CN=PolarSSL Test CA"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Time Expired #1
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA1_C
Rename boolean functions to be clearer
2015-06-02 11:38:50 +02:00
mbedtls_x509_time_is_past:"data_files/server1.crt":"valid_from":1
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Time Expired #2
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA1_C
Rename boolean functions to be clearer
2015-06-02 11:38:50 +02:00
mbedtls_x509_time_is_past:"data_files/server1.crt":"valid_to":0
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Time Expired #3
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA1_C
Rename boolean functions to be clearer
2015-06-02 11:38:50 +02:00
mbedtls_x509_time_is_past:"data_files/server2.crt":"valid_from":1
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Time Expired #4
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA1_C
Rename boolean functions to be clearer
2015-06-02 11:38:50 +02:00
mbedtls_x509_time_is_past:"data_files/server2.crt":"valid_to":0
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Time Expired #5
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA1_C
Rename boolean functions to be clearer
2015-06-02 11:38:50 +02:00
mbedtls_x509_time_is_past:"data_files/test-ca.crt":"valid_from":1
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Add missing depends to some x509parse tests
2013-08-09 10:59:25 +02:00
X509 Time Expired #6
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA1_C
Rename boolean functions to be clearer
2015-06-02 11:38:50 +02:00
mbedtls_x509_time_is_past:"data_files/test-ca.crt":"valid_to":0
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Add x509_time_future()
2014-03-10 12:26:11 +01:00
X509 Time Future #1
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA256_C
Rename boolean functions to be clearer
2015-06-02 11:38:50 +02:00
mbedtls_x509_time_is_future:"data_files/server5.crt":"valid_from":0
Add x509_time_future()
2014-03-10 12:26:11 +01:00
X509 Time Future #2
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA256_C
Rename boolean functions to be clearer
2015-06-02 11:38:50 +02:00
mbedtls_x509_time_is_future:"data_files/server5.crt":"valid_to":1
Add x509_time_future()
2014-03-10 12:26:11 +01:00
X509 Time Future #3
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA256_C
Rename boolean functions to be clearer
2015-06-02 11:38:50 +02:00
mbedtls_x509_time_is_future:"data_files/server5-future.crt":"valid_from":1
Add x509_time_future()
2014-03-10 12:26:11 +01:00
X509 Time Future #4
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA256_C
Rename boolean functions to be clearer
2015-06-02 11:38:50 +02:00
mbedtls_x509_time_is_future:"data_files/server5-future.crt":"valid_to":1
Add x509_time_future()
2014-03-10 12:26:11 +01:00
X509 Time Future #5
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA256_C
Rename boolean functions to be clearer
2015-06-02 11:38:50 +02:00
mbedtls_x509_time_is_future:"data_files/test-ca2.crt":"valid_from":0
Add x509_time_future()
2014-03-10 12:26:11 +01:00
X509 Time Future #6
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA256_C
Rename boolean functions to be clearer
2015-06-02 11:38:50 +02:00
mbedtls_x509_time_is_future:"data_files/test-ca2.crt":"valid_to":1
Add x509_time_future()
2014-03-10 12:26:11 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #1 (Revoked Cert, Expired CRL, no CN)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_EXPIRED:"compat":"NULL"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #1a (Revoked Cert, Future CRL, no CN)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server6.crt":"data_files/test-ca2.crt":"data_files/crl-future.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_FUTURE:"compat":"NULL"
Reject certs and CRLs from the future
2014-03-10 13:15:18 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #2 (Revoked Cert, Expired CRL)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"PolarSSL Server 1":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_EXPIRED:"compat":"NULL"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #2a (Revoked Cert, Future CRL)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server6.crt":"data_files/test-ca2.crt":"data_files/crl-future.pem":"localhost":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_FUTURE:"compat":"NULL"
Reject certs and CRLs from the future
2014-03-10 13:15:18 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #3 (Revoked Cert, Future CRL, CN Mismatch)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"PolarSSL Wrong CN":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_EXPIRED | MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #3a (Revoked Cert, Expired CRL, CN Mismatch)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server6.crt":"data_files/test-ca2.crt":"data_files/crl-future.pem":"Wrong CN":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_FUTURE | MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
Reject certs and CRLs from the future
2014-03-10 13:15:18 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #4 (Valid Cert, Expired CRL)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server2.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_EXPIRED:"compat":"NULL"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #4a (Revoked Cert, Future CRL)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-future.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_FUTURE:"compat":"NULL"
Reject certs and CRLs from the future
2014-03-10 13:15:18 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #5 (Revoked Cert)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #5' (Revoked Cert, differing DN string formats #1)
Add tests for relaxed CRL-CA name comparison This commit introduces variants test-ca_utf8.crt, test-ca_printablestring.crt and test-ca_uppercase.crt of tests/data_files/test-ca.crt which differ from test-ca.crt in their choice of string encoding and upper and lower case letters in the DN field. These changes should be immaterial to the recovation check, and three tests are added that crl.pem, which applies to test-ca.crt, is also considered as applying to test-ca_*.crt.
2018-11-02 11:09:48 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
x509_verify:"data_files/server1.crt":"data_files/test-ca_utf8.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #5'' (Revoked Cert, differing DN string formats #2)
Add tests for relaxed CRL-CA name comparison This commit introduces variants test-ca_utf8.crt, test-ca_printablestring.crt and test-ca_uppercase.crt of tests/data_files/test-ca.crt which differ from test-ca.crt in their choice of string encoding and upper and lower case letters in the DN field. These changes should be immaterial to the recovation check, and three tests are added that crl.pem, which applies to test-ca.crt, is also considered as applying to test-ca_*.crt.
2018-11-02 11:09:48 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
x509_verify:"data_files/server1.crt":"data_files/test-ca_printable.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #5''' (Revoked Cert, differing upper and lower case)
Add tests for relaxed CRL-CA name comparison This commit introduces variants test-ca_utf8.crt, test-ca_printablestring.crt and test-ca_uppercase.crt of tests/data_files/test-ca.crt which differ from test-ca.crt in their choice of string encoding and upper and lower case letters in the DN field. These changes should be immaterial to the recovation check, and three tests are added that crl.pem, which applies to test-ca.crt, is also considered as applying to test-ca_*.crt.
2018-11-02 11:09:48 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
x509_verify:"data_files/server1.crt":"data_files/test-ca_uppercase.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #6 (Revoked Cert)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"PolarSSL Server 1":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #7 (Revoked Cert, CN Mismatch)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"PolarSSL Wrong CN":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #8 (Valid Cert)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
Reject certs and CRLs from the future
2014-03-10 13:15:18 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #8a (Expired Cert)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5-expired.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_EXPIRED:"compat":"NULL"
Reject certs and CRLs from the future
2014-03-10 13:15:18 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #8b (Future Cert)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5-future.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_FUTURE:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #8c (Expired Cert, longer chain)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Add test for expired cert in longer chain That's two lines that were not covered in verify_child()
2017-06-05 10:20:32 +02:00
x509_verify:"data_files/server7-expired.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_EXPIRED:"compat":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #8d (Future Cert, longer chain)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Add test for expired cert in longer chain That's two lines that were not covered in verify_child()
2017-06-05 10:20:32 +02:00
x509_verify:"data_files/server7-future.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_FUTURE:"compat":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #9 (Not trusted Cert)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #10 (Not trusted Cert, Expired CRL)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl_expired.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #12 (Valid Cert MD2 Digest, MD2 forbidden)
Add test case exercising verification of valid MD2 CRT The X.509 parsing test suite test_suite_x509parse contains a test exercising X.509 verification for a valid MD4/MD5 certificate in a profile which doesn't allow MD4/MD5. This commit adds an analogous test for MD2.
2019-06-03 15:25:18 +02:00
depends_on:MBEDTLS_MD2_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
x509_verify:"data_files/cert_md2.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_MD:"compat":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #12 (Valid Cert MD4 Digest, MD4 forbidden)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_MD4_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_md4.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_MD:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #13 (Valid Cert MD5 Digest, MD5 forbidden)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_MD5_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_md5.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_MD:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #12 (Valid Cert MD2 Digest, MD2 allowed)
Add test cases exercising successful verification of MD2/MD4/MD5 CRT
2019-06-03 15:27:03 +02:00
depends_on:MBEDTLS_MD2_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
x509_verify:"data_files/cert_md2.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"all":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #12 (Valid Cert MD4 Digest, MD4 allowed)
Add test cases exercising successful verification of MD2/MD4/MD5 CRT
2019-06-03 15:27:03 +02:00
depends_on:MBEDTLS_MD4_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
x509_verify:"data_files/cert_md4.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"all":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #13 (Valid Cert MD5 Digest, MD5 allowed)
Add test cases exercising successful verification of MD2/MD4/MD5 CRT
2019-06-03 15:27:03 +02:00
depends_on:MBEDTLS_MD5_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
x509_verify:"data_files/cert_md5.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"all":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #14 (Valid Cert SHA1 Digest explicitly allowed in profile)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_sha1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #14 (Valid Cert SHA1 Digest forbidden in default profile)
Remove optional SHA-1 in the default TLS configuration. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-03-29 17:46:57 +02:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Unify name of default profile in X.509 tests
2017-08-09 10:41:42 +02:00
x509_verify:"data_files/cert_sha1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_BAD_MD | MBEDTLS_X509_BADCERT_BAD_MD:"":"NULL"
Test that X.509 verification rejects SHA-256 by default
2017-05-05 19:00:39 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #15 (Valid Cert SHA224 Digest)
Fix SHA definitions and their dependencies in library and test suites. Rework SHA224 and SHA283 documentation. Define MBEDTLS_SHAxxx_C options in alphabetic order. Fix SHA224 and SHA384 dependencies in test suites. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-05-10 13:51:53 +02:00
depends_on:MBEDTLS_SHA224_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_sha224.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #16 (Valid Cert SHA256 Digest)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_sha256.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #17 (Valid Cert SHA384 Digest)
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_sha384.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #18 (Valid Cert SHA512 Digest)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA512_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_sha512.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
- Added verification callback in certificate verification chain in order to allow external blacklisting
2011-01-13 18:54:59 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #19 (Valid Cert, denying callback)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA512_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_sha512.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_OTHER:"compat":"verify_none"
- Added verification callback in certificate verification chain in order to allow external blacklisting
2011-01-13 18:54:59 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #19 (Not trusted Cert, allowing callback)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl_expired.pem":"NULL":0:0:"compat":"verify_all"
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #21 (domain matching wildcard certificate, case insensitive)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_example_wildcard.crt":"data_files/test-ca.crt":"data_files/crl.pem":"mail.ExAmPlE.com":0:0:"compat":"NULL"
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 17:09:32 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #22 (domain not matching wildcard certificate)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_example_wildcard.crt":"data_files/test-ca.crt":"data_files/crl.pem":"mail.example.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 17:09:32 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #23 (domain not matching wildcard certificate)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_example_wildcard.crt":"data_files/test-ca.crt":"data_files/crl.pem":"example.com":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 17:09:32 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #24 (domain matching CN of multi certificate)
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"www.example.com":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 17:09:32 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #25 (domain matching multi certificate)
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"example.net":0:0:"compat":"NULL"
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 17:09:32 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #26 (domain not matching multi certificate)
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"www.example.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 17:09:32 +01:00
Make test case descriptions unique Remove one test case which was an exact duplicate. Tweak the description of two test cases that had the same description.
2019-09-16 19:54:10 +02:00
X509 CRT verification #27.1 (domain not matching multi certificate: suffix)
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"xample.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 17:09:32 +01:00
Make test case descriptions unique Remove one test case which was an exact duplicate. Tweak the description of two test cases that had the same description.
2019-09-16 19:54:10 +02:00
X509 CRT verification #27.2 (domain not matching multi certificate: head junk)
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"bexample.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 17:09:32 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #28 (domain not matching wildcard in multi certificate)
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"example.org":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
- Multi-domain certificates support wildcards as well
2012-02-11 18:38:38 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #29 (domain matching wildcard in multi certificate)
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"mail.example.org":0:0:"compat":"NULL"
- Multi-domain certificates support wildcards as well
2012-02-11 18:38:38 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #30 (domain matching multi certificate without CN)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_example_multi_nocn.crt":"data_files/test-ca.crt":"data_files/crl.pem":"www.shotokan-braunschweig.de":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
- Added test for no-subject certificates with altSubjectNames
2012-08-23 12:46:54 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #31 (domain not matching multi certificate without CN)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/cert_example_multi_nocn.crt":"data_files/test-ca.crt":"data_files/crl.pem":"www.example.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH + MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
- Added test for no-subject certificates with altSubjectNames
2012-08-23 12:46:54 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #32 (Valid, EC cert, RSA CA)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP192R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server3.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Add tests for EC cert and crl validation
2013-08-09 11:27:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #33 (Valid, RSA cert, EC CA)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server4.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add tests for EC cert and crl validation
2013-08-09 11:27:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #34 (Valid, EC cert, EC CA)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add tests for EC cert and crl validation
2013-08-09 11:27:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #35 (Revoked, EC CA)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server6.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Add tests for EC cert and crl validation
2013-08-09 11:27:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #36 (Valid, EC CA, SHA1 Digest)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5-sha1.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add tests for EC cert and crl validation
2013-08-09 11:27:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #37 (Valid, EC CA, SHA224 Digest)
Fix SHA definitions and their dependencies in library and test suites. Rework SHA224 and SHA283 documentation. Define MBEDTLS_SHAxxx_C options in alphabetic order. Fix SHA224 and SHA384 dependencies in test suites. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-05-10 13:51:53 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA224_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5-sha224.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add tests for EC cert and crl validation
2013-08-09 11:27:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #38 (Valid, EC CA, SHA384 Digest)
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_SHA384_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5-sha384.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add tests for EC cert and crl validation
2013-08-09 11:27:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #39 (Valid, EC CA, SHA512 Digest)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_SHA512_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5-sha512.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #40 (Valid, depth 0, RSA, CA)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/test-ca.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #41 (Valid, depth 0, EC, CA)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/test-ca2.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #42 (Depth 0, not CA, RSA)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server2.crt":"data_files/server2.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #43 (Depth 0, not CA, EC)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/server5.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #44 (Corrupted signature, EC)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #45 (Corrupted signature, RSA)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server2-badsign.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #45b (Corrupted signature, intermediate CA)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Add test for bad signature with longer chain This is one line that wasn't covered in verify_child()
2017-06-05 11:12:13 +02:00
x509_verify:"data_files/server7-badsign.crt":"data_files/test-ca2.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #46 (Valid, depth 2, EC-RSA-EC)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server7_int-ca.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #47 (Untrusted, depth 2, EC-RSA-EC)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server7_int-ca.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #48 (Missing intermediate CA, EC-RSA-EC)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server7.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #49 (Valid, depth 2, RSA-EC-RSA)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server8_int-ca2.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #50 (Valid, multiple CAs)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server2.crt":"data_files/test-ca_cat12.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Add some more x509_verify tests - trust chain of depth 0 - invalid signature - trust chain of depth 2 - multiple trusted CA's
2013-08-10 10:52:01 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #51 (Valid, multiple CAs, reverse order)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server2.crt":"data_files/test-ca_cat21.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Add tests for EC cert and crl validation
2013-08-09 11:27:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #52 (CA keyUsage valid)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-crt_crl.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Add keyUsage checking for CAs
2014-04-08 15:10:07 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #53 (CA keyUsage missing cRLSign)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_X509_CHECK_KEY_USAGE:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-crt.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_NOT_TRUSTED:"compat":"NULL"
Add keyUsage checking for CAs
2014-04-08 15:10:07 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #54 (CA keyUsage missing cRLSign, no CRL)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-crt.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Add keyUsage checking for CAs
2014-04-08 15:10:07 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #55 (CA keyUsage missing keyCertSign)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_X509_CHECK_KEY_USAGE:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-crl.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add keyUsage checking for CAs
2014-04-08 15:10:07 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #56 (CA keyUsage plain wrong)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_X509_CHECK_KEY_USAGE:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-ds.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add keyUsage checking for CAs
2014-04-08 15:10:07 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #57 (Valid, RSASSA-PSS, SHA-1)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 18:11:07 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #58 (Valid, RSASSA-PSS, SHA-224)
Fix SHA definitions and their dependencies in library and test suites. Rework SHA224 and SHA283 documentation. Define MBEDTLS_SHAxxx_C options in alphabetic order. Fix SHA224 and SHA384 dependencies in test suites. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-05-10 13:51:53 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA224_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9-sha224.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha224.pem":"NULL":0:0:"compat":"NULL"
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 18:11:07 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #59 (Valid, RSASSA-PSS, SHA-256)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9-sha256.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha256.pem":"NULL":0:0:"compat":"NULL"
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 18:11:07 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #60 (Valid, RSASSA-PSS, SHA-384)
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA384_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9-sha384.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha384.pem":"NULL":0:0:"compat":"NULL"
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 18:11:07 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #61 (Valid, RSASSA-PSS, SHA-512)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9-sha512.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha512.pem":"NULL":0:0:"compat":"NULL"
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 18:11:07 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #62 (Revoked, RSASSA-PSS, SHA-1)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Also verify CRLs signed with RSASSA-PSS
2014-06-05 17:53:52 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #63 (Revoked, RSASSA-PSS, SHA-1, CRL badsign)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha1-badsign.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_NOT_TRUSTED:"compat":"NULL"
Also verify CRLs signed with RSASSA-PSS
2014-06-05 17:53:52 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #64 (Valid, RSASSA-PSS, SHA-1, not top)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9-with-ca.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 18:11:07 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #65 (RSASSA-PSS, SHA1, bad cert signature)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9-badsign.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 18:11:07 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #66 (RSASSA-PSS, SHA1, no RSA CA)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9.crt":"data_files/test-ca2.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add basic PSS cert verification Still todo: - handle MGF-hash != sign-hash - check effective salt len == announced salt len - add support in the PK layer so that we don't have to bypass it here
2014-06-02 18:11:07 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #67 (Valid, RSASSA-PSS, all defaults)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9-defaults.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha1.pem":"NULL":0:0:"compat":"NULL"
Add RSASSA-PSS certificate with all defaults
2014-06-05 18:00:08 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #68 (RSASSA-PSS, wrong salt_len)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9-bad-saltlen.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add pathological RSASSA-PSS test certificates Certificates announcing different PSS options than the ones actually used for the signature. Makes sure the options are correctly passed to the verification function.
2014-06-06 18:04:09 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #69 (RSASSA-PSS, wrong mgf_hash)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server9-bad-mgfhash.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Add pathological RSASSA-PSS test certificates Certificates announcing different PSS options than the ones actually used for the signature. Makes sure the options are correctly passed to the verification function.
2014-06-06 18:04:09 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #70 (v1 trusted CA)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server1-v1.crt":"data_files/test-ca-v1.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Restore ability to use v1 CA if trusted locally
2014-06-19 12:18:08 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #71 (v1 trusted CA, other)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server2-v1.crt":"data_files/server1-v1.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Restore ability to use v1 CA if trusted locally
2014-06-19 12:18:08 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #72 (v1 chain)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server2-v1-chain.crt":"data_files/test-ca-v1.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Restore ability to use v1 CA if trusted locally
2014-06-19 12:18:08 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #73 (selfsigned trusted without CA bit)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Restore ability to trust non-CA selfsigned EE cert
2014-06-24 11:49:16 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #74 (signed by selfsigned trusted without CA bit)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server6-ss-child.crt":"data_files/server5-selfsigned.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Restore ability to trust non-CA selfsigned EE cert
2014-06-24 11:49:16 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #75 (encoding mismatch)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/enco-cert-utf8str.pem":"data_files/enco-ca-prstr.pem":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Add tests for X.509 name encoding mismatch
2014-10-17 12:23:49 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #76 (multiple CRLs, not revoked)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_ec-rsa.pem":"NULL":0:0:"compat":"NULL"
Add tests for concatenated CRLs
2014-11-19 14:04:09 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #77 (multiple CRLs, revoked)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server6.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_ec-rsa.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Add tests for concatenated CRLs
2014-11-19 14:04:09 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #78 (multiple CRLs, revoked by second)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server6.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_rsa-ec.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Add tests for concatenated CRLs
2014-11-19 14:04:09 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #79 (multiple CRLs, revoked by future)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server6.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_ecfut-rsa.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED|MBEDTLS_X509_BADCRL_FUTURE:"compat":"NULL"
Add tests for concatenated CRLs
2014-11-19 14:04:09 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #80 (multiple CRLs, first future, revoked by second)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server1.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_ecfut-rsa.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Add tests for concatenated CRLs
2014-11-19 14:04:09 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #81 (multiple CRLs, none relevant)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/enco-cert-utf8str.pem":"data_files/enco-ca-prstr.pem":"data_files/crl_cat_rsa-ec.pem":"NULL":0:0:"compat":"NULL"
Add tests for concatenated CRLs
2014-11-19 14:04:09 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #82 (Not yet valid CA and valid CA)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-future-present.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
X509: Future CA among trusted: add unit tests
2016-02-18 18:28:04 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #83 (valid CA and Not yet valid CA)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-present-future.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
X509: Future CA among trusted: add unit tests
2016-02-18 18:28:04 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #84 (valid CA and Not yet valid CA)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-present-past.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
X509: Future CA among trusted: add more tests
2016-02-19 16:57:17 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #85 (Not yet valid CA and valid CA)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-past-present.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
X509: Future CA among trusted: add more tests
2016-02-19 16:57:17 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #86 (Not yet valid CA and invalid CA)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-future-invalid.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_FUTURE:"compat":"NULL"
Add tests for out flags from x509_crt_verify_top() The tests load certificate chains from files. The CA chains contain a past or future certificate and an invalid certificate. The test then checks that the flags set are MBEDTLS_X509_BADCERT_EXPIRED or MBEDTLS_X509_BADCERT_FUTURE.
2016-12-13 10:59:07 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #87 (Expired CA and invalid CA)
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_HAVE_TIME_DATE
Allow SHA-1 in X.509 and TLS tests SHA-1 is now disabled by default in the X.509 layer. Explicitly enable it in our tests for now. Updating all the test data to SHA-256 should be done over time.
2017-05-05 18:59:02 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-past-invalid.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_EXPIRED:"compat":"NULL"
Add tests for out flags from x509_crt_verify_top() The tests load certificate chains from files. The CA chains contain a past or future certificate and an invalid certificate. The test then checks that the flags set are MBEDTLS_X509_BADCERT_EXPIRED or MBEDTLS_X509_BADCERT_FUTURE.
2016-12-13 10:59:07 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #88 (Spurious cert in the chain)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add tests for spurious certs in the chain We have code to skip them but didn't have explicit tests ensuring they are (the corresponding branch was never taken). While at it, remove extra copy of the chain in server10*.crt, which was duplicated for no reason.
2017-06-06 10:25:43 +02:00
x509_verify:"data_files/server7_spurious_int-ca.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #89 (Spurious cert later in the chain)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add tests for spurious certs in the chain We have code to skip them but didn't have explicit tests ensuring they are (the corresponding branch was never taken). While at it, remove extra copy of the chain in server10*.crt, which was duplicated for no reason.
2017-06-06 10:25:43 +02:00
x509_verify:"data_files/server10_int3_spurious_int-ca2.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #90 (EE with same name as trusted root)
Add test for CA forgery attempt As we accept EE certs that are explicitly trusted (in the list of trusted roots) and usually look for parent by subject, and in the future we might want to avoid checking the self-signature on trusted certs, there could a risk that we incorrectly accept a cert that looks like a trusted root except it doesn't have the same key. This test ensures this will never happen.
2017-06-29 09:48:08 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Unify name of default profile in X.509 tests
2017-08-09 10:41:42 +02:00
x509_verify:"data_files/server5-ss-forgeca.crt":"data_files/test-int-ca3.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"":"NULL"
Add test for CA forgery attempt As we accept EE certs that are explicitly trusted (in the list of trusted roots) and usually look for parent by subject, and in the future we might want to avoid checking the self-signature on trusted certs, there could a risk that we incorrectly accept a cert that looks like a trusted root except it doesn't have the same key. This test ensures this will never happen.
2017-06-29 09:48:08 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #91 (same CA with good then bad key)
Add test for same CA with different keys When a trusted CA is rolling its root keys, it could happen that for some users the list of trusted roots contains two versions of the same CA with the same name but different keys. Currently this is supported but wasn't tested. Note: the intermediate file test-ca-alt.csr is commited on purpose, as not commiting intermediate files causes make to regenerate files that we don't want it to touch.
2017-07-03 18:06:38 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C
x509_verify:"data_files/server1.crt":"data_files/test-ca-good-alt.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #91 (same CA with bad then good key)
Add test for same CA with different keys When a trusted CA is rolling its root keys, it could happen that for some users the list of trusted roots contains two versions of the same CA with the same name but different keys. Currently this is supported but wasn't tested. Note: the intermediate file test-ca-alt.csr is commited on purpose, as not commiting intermediate files causes make to regenerate files that we don't want it to touch.
2017-07-03 18:06:38 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C
x509_verify:"data_files/server1.crt":"data_files/test-ca-alt-good.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #92 (bad name, allowing callback)
Add test for bad name and callback This ensures that the callback can actually clear that flag, and that it is seen by the callback at the right level. This flag is not set at the same place than others, and this difference will get bigger in the upcoming refactor, so let's ensure we don't break anything here.
2017-07-05 18:14:38 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Unify name of default profile in X.509 tests
2017-08-09 10:41:42 +02:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"globalhost":0:0:"":"verify_all"
Add test for bad name and callback This ensures that the callback can actually clear that flag, and that it is seen by the callback at the right level. This flag is not set at the same place than others, and this difference will get bigger in the upcoming refactor, so let's ensure we don't break anything here.
2017-07-05 18:14:38 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #93 (Suite B invalid, EC cert, RSA CA)
Add some tests for different available profiles Add tests for suite b profile and for the next profile
2018-02-06 17:47:17 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_ECP_C:MBEDTLS_ECP_DP_SECP192R1_ENABLED:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
x509_verify:"data_files/server3.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_MD|MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY|MBEDTLS_X509_BADCRL_BAD_MD|MBEDTLS_X509_BADCRL_BAD_PK:"suite_b":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #94 (Suite B invalid, RSA cert, EC CA)
Fix remaining issues found by depend-pkalgs
2018-03-12 15:26:59 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_PKCS1_V15:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Add some tests for different available profiles Add tests for suite b profile and for the next profile
2018-02-06 17:47:17 +01:00
x509_verify:"data_files/server4.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_PK:"suite_b":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #95 (Suite B Valid, EC cert, EC CA)
Fix remaining issues found by depend-pkalgs
2018-03-12 15:26:59 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Add some tests for different available profiles Add tests for suite b profile and for the next profile
2018-02-06 17:47:17 +01:00
x509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"suite_b":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #96 (next profile Invalid Cert SHA224 Digest)
Fix SHA definitions and their dependencies in library and test suites. Rework SHA224 and SHA283 documentation. Define MBEDTLS_SHAxxx_C options in alphabetic order. Fix SHA224 and SHA384 dependencies in test suites. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-05-10 13:51:53 +02:00
depends_on:MBEDTLS_SHA224_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Add some tests for different available profiles Add tests for suite b profile and for the next profile
2018-02-06 17:47:17 +01:00
x509_verify:"data_files/cert_sha224.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_MD|MBEDTLS_X509_BADCRL_BAD_MD:"next":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification #97 (next profile Valid Cert SHA256 Digest)
Fix remaining issues found by depend-hashes
2018-03-12 15:49:35 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_SHA1_C
Add some tests for different available profiles Add tests for suite b profile and for the next profile
2018-02-06 17:47:17 +01:00
x509_verify:"data_files/cert_sha256.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"next":"NULL"
Always revoke certificate on CRL RFC5280 does not state that the `revocationDate` should be checked. In addition, when no time source is available (i.e., when MBEDTLS_HAVE_TIME_DATE is not defined), `mbedtls_x509_time_is_past` always returns 0. This results in the CRL not being checked at all. https://tools.ietf.org/html/rfc5280 Signed-off-by: Raoul Strackx <raoul.strackx@fortanix.com>
2020-06-15 17:03:13 +02:00
X509 CRT verification #98 (Revoked Cert, revocation date in the future, _with_ MBEDTLS_HAVE_TIME_DATE)
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl-futureRevocationDate.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED|MBEDTLS_X509_BADCRL_FUTURE:"compat":"NULL"
X509 CRT verification #99 (Revoked Cert, revocation date in the future, _without_ MBEDTLS_HAVE_TIME_DATE)
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:!MBEDTLS_HAVE_TIME_DATE
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl-futureRevocationDate.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Add some tests for different available profiles Add tests for suite b profile and for the next profile
2018-02-06 17:47:17 +01:00
Add test: DNS names should not match IP addresses Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-23 12:39:53 +02:00
X509 CRT verification: domain identical to IPv4 in SubjectAltName
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C
x509_verify:"data_files/server5-tricky-ip-san.crt":"data_files/server5-tricky-ip-san.crt":"data_files/crl_sha256.pem":"abcd":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"":"NULL"
X509 CRT verification: domain identical to IPv6 in SubjectAltName
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C
x509_verify:"data_files/server5-tricky-ip-san.crt":"data_files/server5-tricky-ip-san.crt":"data_files/crl_sha256.pem":"abcd.example.com":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"":"NULL"
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification with ca callback: failure
Add a failure testcase for ca callback
2019-03-27 16:08:29 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
Minor fixes to CA callback tests
2019-03-28 15:14:22 +01:00
x509_verify_ca_cb_failure:"data_files/server1.crt":"data_files/test-ca.crt":"NULL":MBEDTLS_ERR_X509_FATAL_ERROR
Add a failure testcase for ca callback
2019-03-27 16:08:29 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification callback: bad name
Add test for bad name and callback This ensures that the callback can actually clear that flag, and that it is seen by the callback at the right level. This flag is not set at the same place than others, and this difference will get bigger in the upcoming refactor, so let's ensure we don't break anything here.
2017-07-05 18:14:38 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server5.crt":"data_files/test-ca2.crt":"globalhost":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 1 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 0 - serial 09 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000004\n"
Add test for bad name and callback This ensures that the callback can actually clear that flag, and that it is seen by the callback at the right level. This flag is not set at the same place than others, and this difference will get bigger in the upcoming refactor, so let's ensure we don't break anything here.
2017-07-05 18:14:38 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification callback: trusted EE cert
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 11:59:24 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":"NULL":0:"depth 0 - serial 53\:A2\:CB\:4B\:12\:4E\:AD\:83\:7D\:A8\:94\:B2 - subject CN=selfsigned, OU=testing, O=PolarSSL, C=NL - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 11:59:24 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification callback: trusted EE cert, expired
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_HAVE_TIME_DATE
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server5-ss-expired.crt":"data_files/server5-ss-expired.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 0 - serial D8\:64\:61\:05\:E3\:A3\:CD\:78 - subject C=UK, O=mbed TLS, OU=testsuite, CN=localhost - flags 0x00000001\n"
Add tests for flags passed to f_vrfy The tests cover chains of length 0, 1 and 2, with one error, located at any of the available levels in the chain. This exercises all three call sites of f_vrfy (two in verify_top, one in verify_child). Chains of greater length would not cover any new code path or behaviour that I can see.
2017-06-27 12:51:52 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification callback: simple
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 11:59:24 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Change serial in test-ca.crt from 0 to 3 to circumvent ASN.1 bug As of 2.13.1, mbedtls_asn1_write_mpi() doesn't write 0 correctly. #2166.
2018-11-01 16:07:42 +01:00
x509_verify_callback:"data_files/server1.crt":"data_files/test-ca.crt":"NULL":0:"depth 1 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 0 - serial 01 - subject C=NL, O=PolarSSL, CN=PolarSSL Server 1 - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 11:59:24 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification callback: simple, EE expired
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server5-expired.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 1 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 0 - serial 1E - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000001\n"
Add tests for flags passed to f_vrfy The tests cover chains of length 0, 1 and 2, with one error, located at any of the available levels in the chain. This exercises all three call sites of f_vrfy (two in verify_top, one in verify_child). Chains of greater length would not cover any new code path or behaviour that I can see.
2017-06-27 12:51:52 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification callback: simple, root expired
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server5.crt":"data_files/test-ca2-expired.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 1 - serial 01 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000001\ndepth 0 - serial 09 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
Add tests for flags passed to f_vrfy The tests cover chains of length 0, 1 and 2, with one error, located at any of the available levels in the chain. This exercises all three call sites of f_vrfy (two in verify_top, one in verify_child). Chains of greater length would not cover any new code path or behaviour that I can see.
2017-06-27 12:51:52 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification callback: two trusted roots
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Change serial in test-ca.crt from 0 to 3 to circumvent ASN.1 bug As of 2.13.1, mbedtls_asn1_write_mpi() doesn't write 0 correctly. #2166.
2018-11-01 16:07:42 +01:00
x509_verify_callback:"data_files/server1.crt":"data_files/test-ca_cat12.crt":"NULL":0:"depth 1 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 0 - serial 01 - subject C=NL, O=PolarSSL, CN=PolarSSL Server 1 - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 11:59:24 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification callback: two trusted roots, reversed order
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Change serial in test-ca.crt from 0 to 3 to circumvent ASN.1 bug As of 2.13.1, mbedtls_asn1_write_mpi() doesn't write 0 correctly. #2166.
2018-11-01 16:07:42 +01:00
x509_verify_callback:"data_files/server1.crt":"data_files/test-ca_cat21.crt":"NULL":0:"depth 1 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 0 - serial 01 - subject C=NL, O=PolarSSL, CN=PolarSSL Server 1 - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 11:59:24 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification callback: root included
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Change serial in test-ca.crt from 0 to 3 to circumvent ASN.1 bug As of 2.13.1, mbedtls_asn1_write_mpi() doesn't write 0 correctly. #2166.
2018-11-01 16:07:42 +01:00
x509_verify_callback:"data_files/server1_ca.crt":"data_files/test-ca_cat21.crt":"NULL":0:"depth 1 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 0 - serial 01 - subject C=NL, O=PolarSSL, CN=PolarSSL Server 1 - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 11:59:24 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification callback: intermediate ca
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server7_int-ca.crt":"data_files/test-ca_cat12.crt":"NULL":0:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 11:59:24 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification callback: intermediate ca, root included
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server7_int-ca_ca2.crt":"data_files/test-ca_cat12.crt":"NULL":0:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 11:59:24 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification callback: intermediate ca trusted
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server7_int-ca_ca2.crt":"data_files/test-int-ca.crt":"NULL":0:"depth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
Skip to trusted certs early in the chain This helps in the case where an intermediate certificate is directly trusted. In that case we want to ignore what comes after it in the chain, not only for performance but also to avoid false negatives (eg an old root being no longer trusted while the newer intermediate is directly trusted). closes #220
2015-09-01 16:35:00 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification callback: intermediate ca, EE expired
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server7-expired.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000001\n"
Add tests for flags passed to f_vrfy The tests cover chains of length 0, 1 and 2, with one error, located at any of the available levels in the chain. This exercises all three call sites of f_vrfy (two in verify_top, one in verify_child). Chains of greater length would not cover any new code path or behaviour that I can see.
2017-06-27 12:51:52 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification callback: intermediate ca, int expired
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server7_int-ca-exp.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000001\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
Add tests for flags passed to f_vrfy The tests cover chains of length 0, 1 and 2, with one error, located at any of the available levels in the chain. This exercises all three call sites of f_vrfy (two in verify_top, one in verify_child). Chains of greater length would not cover any new code path or behaviour that I can see.
2017-06-27 12:51:52 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification callback: intermediate ca, root expired
Fix some test deps * Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`. * Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually. Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2016-11-27 15:50:06 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server7_int-ca.crt":"data_files/test-ca2-expired.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 2 - serial 01 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000001\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
Add tests for flags passed to f_vrfy The tests cover chains of length 0, 1 and 2, with one error, located at any of the available levels in the chain. This exercises all three call sites of f_vrfy (two in verify_top, one in verify_child). Chains of greater length would not cover any new code path or behaviour that I can see.
2017-06-27 12:51:52 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification callback: two intermediates
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Change serial in test-ca.crt from 0 to 3 to circumvent ASN.1 bug As of 2.13.1, mbedtls_asn1_write_mpi() doesn't write 0 correctly. #2166.
2018-11-01 16:07:42 +01:00
x509_verify_callback:"data_files/server10_int3_int-ca2.crt":"data_files/test-ca_cat21.crt":"NULL":0:"depth 3 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 2 - serial 0F - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate EC CA - flags 0x00000000\ndepth 1 - serial 4D - subject C=UK, O=mbed TLS, CN=mbed TLS Test intermediate CA 3 - flags 0x00000000\ndepth 0 - serial 4B - subject CN=localhost - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 11:59:24 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification callback: two intermediates, root included
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Change serial in test-ca.crt from 0 to 3 to circumvent ASN.1 bug As of 2.13.1, mbedtls_asn1_write_mpi() doesn't write 0 correctly. #2166.
2018-11-01 16:07:42 +01:00
x509_verify_callback:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca_cat21.crt":"NULL":0:"depth 3 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 2 - serial 0F - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate EC CA - flags 0x00000000\ndepth 1 - serial 4D - subject C=UK, O=mbed TLS, CN=mbed TLS Test intermediate CA 3 - flags 0x00000000\ndepth 0 - serial 4B - subject CN=localhost - flags 0x00000000\n"
Add tests for verify callback As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.
2015-09-01 11:59:24 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification callback: two intermediates, top int trusted
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":"NULL":0:"depth 2 - serial 0F - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate EC CA - flags 0x00000000\ndepth 1 - serial 4D - subject C=UK, O=mbed TLS, CN=mbed TLS Test intermediate CA 3 - flags 0x00000000\ndepth 0 - serial 4B - subject CN=localhost - flags 0x00000000\n"
Skip to trusted certs early in the chain This helps in the case where an intermediate certificate is directly trusted. In that case we want to ignore what comes after it in the chain, not only for performance but also to avoid false negatives (eg an old root being no longer trusted while the newer intermediate is directly trusted). closes #220
2015-09-01 16:35:00 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification callback: two intermediates, low int trusted
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-int-ca3.crt":"NULL":0:"depth 1 - serial 4D - subject C=UK, O=mbed TLS, CN=mbed TLS Test intermediate CA 3 - flags 0x00000000\ndepth 0 - serial 4B - subject CN=localhost - flags 0x00000000\n"
Skip to trusted certs early in the chain This helps in the case where an intermediate certificate is directly trusted. In that case we want to ignore what comes after it in the chain, not only for performance but also to avoid false negatives (eg an old root being no longer trusted while the newer intermediate is directly trusted). closes #220
2015-09-01 16:35:00 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification callback: no intermediate, bad signature
Add test for callback and bad signatures Our current behaviour is a bit inconsistent here: - when the bad signature is made by a trusted CA, we stop here and don't include the trusted CA in the chain (don't call vrfy on it) - otherwise, we just add NOT_TRUSTED to the flags but keep building the chain and call vrfy on the upper certs
2017-07-14 11:32:38 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 0 - serial 09 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000008\n"
Add test for callback and bad signatures Our current behaviour is a bit inconsistent here: - when the bad signature is made by a trusted CA, we stop here and don't include the trusted CA in the chain (don't call vrfy on it) - otherwise, we just add NOT_TRUSTED to the flags but keep building the chain and call vrfy on the upper certs
2017-07-14 11:32:38 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verification callback: one intermediate, bad signature
Add test for callback and bad signatures Our current behaviour is a bit inconsistent here: - when the bad signature is made by a trusted CA, we stop here and don't include the trusted CA in the chain (don't call vrfy on it) - otherwise, we just add NOT_TRUSTED to the flags but keep building the chain and call vrfy on the upper certs
2017-07-14 11:32:38 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Fix test that didn't check full value of flags
2017-08-21 11:00:22 +02:00
x509_verify_callback:"data_files/server7-badsign.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000008\n"
Add test for callback and bad signatures Our current behaviour is a bit inconsistent here: - when the bad signature is made by a trusted CA, we stop here and don't include the trusted CA in the chain (don't call vrfy on it) - otherwise, we just add NOT_TRUSTED to the flags but keep building the chain and call vrfy on the upper certs
2017-07-14 11:32:38 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (Empty Certificate)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"":"":MBEDTLS_ERR_X509_INVALID_FORMAT
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (inv Certificate, bad tag)
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"0500":"":MBEDTLS_ERR_X509_INVALID_FORMAT
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (inv Certificate, no length)
Extend negative testing for X.509 TBS header parsing
2019-06-04 16:19:09 +02:00
x509parse_crt:"30":"":MBEDTLS_ERR_X509_INVALID_FORMAT
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (inv Certificate, bad length encoding)
Extend negative testing for X.509 TBS header parsing
2019-06-04 16:19:09 +02:00
x509parse_crt:"3085":"":MBEDTLS_ERR_X509_INVALID_FORMAT
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (inv Certificate, length data incomplete)
Extend negative testing for X.509 TBS header parsing
2019-06-04 16:19:09 +02:00
x509parse_crt:"308200":"":MBEDTLS_ERR_X509_INVALID_FORMAT
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (inv Certificate, length out of bounds)
Extend negative testing for X.509 TBS header parsing
2019-06-04 16:19:09 +02:00
x509parse_crt:"3001":"":MBEDTLS_ERR_X509_INVALID_FORMAT
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (inv TBS, invalid tag)
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"30020500":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (inv TBS, length missing)
Extend negative testing for X.509 TBS header parsing
2019-06-04 16:19:09 +02:00
x509parse_crt:"300130":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (inv TBS, invalid length encoding)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt:"30023085":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Updated tests to reflect recent changes
2011-10-12 13:53:52 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (inv TBS, length data incomplete)
Extend negative testing for X.509 TBS header parsing
2019-06-04 16:19:09 +02:00
x509parse_crt:"300430839999":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (inv TBS, length out of bounds)
Extend negative testing for X.509 TBS header parsing
2019-06-04 16:19:09 +02:00
x509parse_crt:"30023003":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS empty)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 TBS header parsing
2019-06-04 16:19:09 +02:00
x509parse_crt:"30153000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
X509 CRT ASN1 (TBS, invalid version tag, serial missing)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"301730020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, valid outer version tag, no outer length)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Version parsing
2019-06-04 16:24:18 +02:00
x509parse_crt:"30163001a0300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv inner version tag)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"30193004a0020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, valid inner version tag, no inner length)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Version parsing
2019-06-04 16:24:18 +02:00
x509parse_crt:"30183003a00102300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, valid inner version tag, inv inner length encoding)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Version parsing
2019-06-04 16:24:18 +02:00
x509parse_crt:"30193004a0020285300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, valid inner version tag, inner length too large for int)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Change X.509 test cases to not rely on asn1parse limitations Tweak test data for one test case to not rely on mbedtls_asn1_get_int lacking support for leading zeros. Instead, use a number that is actually out of range for int. Tweak test data for one test case to not rely on mbedtls_asn1_get_bitstring_null rejecting bitstrings shorter than two octets. Instead, try bit strings that are genuinely invalid, or have a nonzero number of unused bits. Add a test case with a correct empty signature. This is commented out because asn1parse currently does not support this. Uncomment it when asn1parse is updated to support this.
2019-09-11 17:23:07 +02:00
# tbsCertificate.version = 0x01000000000000000000000000000000 rejected by mbedtls_asn1_get_int
x509parse_crt:"30293014a012021001000000000000000000000000000000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Extend negative testing for X.509 Version parsing
2019-06-04 16:24:18 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, valid inner version tag, inner vs. outer length mismatch)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Version parsing
2019-06-04 16:24:18 +02:00
x509parse_crt:"301b3006a00402010200300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, valid version tag, length exceeds TBS)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Version parsing
2019-06-04 16:24:18 +02:00
x509parse_crt:"30293014a012021100000000000000000000000000000000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, valid version tag + length, unknown version number 3)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Version parsing
2019-06-04 16:24:18 +02:00
x509parse_crt:"308196308180a0030201038204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, valid version tag + length, unknown version number 4)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Version parsing
2019-06-04 16:24:18 +02:00
x509parse_crt:"308196308180a0030201048204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, valid version tag + length, version number overflow)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Version parsing
2019-06-04 16:24:18 +02:00
x509parse_crt:"308199308183a00602047FFFFFFF8204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, serial missing)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Version parsing
2019-06-04 16:24:18 +02:00
x509parse_crt:"301a3005a003020102300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv serial, tag wrong)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"301c3007a0030201020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv serial, length missing)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Version parsing
2019-06-04 16:24:18 +02:00
x509parse_crt:"301b3006a00302010282300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv serial, inv length encoding)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Serial number parsing
2019-06-04 16:25:00 +02:00
x509parse_crt:"301c3007a0030201028285300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv serial, length out of bounds)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Serial number parsing
2019-06-04 16:25:00 +02:00
x509parse_crt:"301c3007a0030201028201300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, AlgID missing)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Extend negative testing for X.509 Version parsing
2019-06-04 16:24:18 +02:00
x509parse_crt:"3020300ba0030201028204deadbeef300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv AlgID, tag wrong)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"3022300da0030201028204deadbeef0500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv AlgID, OID missing)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 17:04:36 +02:00
x509parse_crt:"307b3073a0030201008204deadbeef3000300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff3000030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv AlgID, OID tag wrong)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 17:04:36 +02:00
x509parse_crt:"307f3075a0030201008204deadbeef30020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff30020500030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv AlgID, OID inv length encoding)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 17:04:36 +02:00
x509parse_crt:"307f3075a0030201008204deadbeef30020685300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff30020685030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv AlgID, OID length out of bounds)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 17:04:36 +02:00
x509parse_crt:"307f3075a0030201008204deadbeef30020601300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff30020601030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv AlgID, OID empty)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 17:04:36 +02:00
x509parse_crt:"307f3075a0030201008204deadbeef30020600300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff30020600030200ff":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG + MBEDTLS_ERR_OID_NOT_FOUND
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv AlgID, OID unknown)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 17:04:36 +02:00
x509parse_crt:"3081873079a0030201008204deadbeef30060604deadbeef300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff30060604deadbeef030200ff":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG + MBEDTLS_ERR_OID_NOT_FOUND
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv AlgID, param inv length encoding)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 17:04:36 +02:00
x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0685300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0685030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Extend negative testing for X.509 AlgorithmIdentifier parsing
2019-02-12 14:44:17 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv AlgID, param length out of bounds)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 17:04:36 +02:00
x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0601300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0601030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Extend negative testing for X.509 AlgorithmIdentifier parsing
2019-02-12 14:44:17 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv AlgID, param length mismatch)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 17:04:36 +02:00
x509parse_crt:"30819a308182a0030201008204deadbeef300f06092a864886f70d01010b06010000300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300f06092a864886f70d01010b06010000030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv AlgID, params present but empty)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 17:04:36 +02:00
x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0600300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0600030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv AlgID, bad RSASSA-PSS params)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 17:04:36 +02:00
x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010a3100300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010a3100030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, Issuer missing)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 17:04:36 +02:00
x509parse_crt:"302f301aa0030201008204deadbeef300d06092a864886f70d01010b0500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Issuer, RDNSequence inv tag)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 17:04:36 +02:00
x509parse_crt:"3031301ca0030201008204deadbeef300d06092a864886f70d01010b05000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Issuer, RDNSequence length missing)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 17:04:36 +02:00
x509parse_crt:"3030301ba0030201008204deadbeef300d06092a864886f70d01010b050030300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Issuer, RDNSequence inv length encoding)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 17:04:36 +02:00
x509parse_crt:"3031301ca0030201008204deadbeef300d06092a864886f70d01010b05003085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Issuer, RDNSequence length out of bounds)
Fix test dependencies in X.509 CRT parsing suite Most tests use an sha256WithRSAEncryption OID which isn't recognized unless RSA and SHA-256 are enabled.
2019-02-15 12:51:32 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Always use the same X.509 alg structure inside and outside of TBS
2019-06-04 17:04:36 +02:00
x509parse_crt:"3031301ca0030201008204deadbeef300d06092a864886f70d01010b05003001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Issuer, RDNSequence empty)
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081893074a0030201028204deadbeef300d06092a864886f70d01010b05003000301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Issuer, RDN inv tag)
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b050030020500301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Issuer, RDN inv length encoding)
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b050030023185301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Issuer, RDN length out of bounds)
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b050030023101301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Issuer, RDN empty)
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b050030023100301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue inv tag)
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300431020500301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue inv length encoding)
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300431023085301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue length out of bounds)
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300431023001301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue empty)
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300431023000301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue type inv tag)
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b05003006310430020500301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue type inv no length data)
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818e3079a0030201028204deadbeef300d06092a864886f70d01010b050030053103300106301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue type inv length encoding)
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b05003006310430020685301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Fix test case name formatting in X.509 parsing suite
2019-03-13 11:36:47 +01:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue type length out of bounds)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
x509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b05003006310430020601301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue value missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
x509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b05003006310430020600301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue value inv tag)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"308191307ca0030201028204deadbeef300d06092a864886f70d01010b050030083106300406000500301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG;
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue value length missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
x509parse_crt:"308190307ba0030201028204deadbeef300d06092a864886f70d01010b050030073105300306000c301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue value inv length encoding)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
x509parse_crt:"308191307ca0030201028204deadbeef300d06092a864886f70d01010b050030083106300406000C85301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue value length out of bounds)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
x509parse_crt:"308191307ca0030201028204deadbeef300d06092a864886f70d01010b050030083106300406000c01301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue value length mismatch)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
x509parse_crt:"308193307ea0030201028204deadbeef300d06092a864886f70d01010b0500300a3108300606000c010000301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Issuer, 2nd AttributeTypeValue empty)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Issuer parsing
2019-02-12 16:49:08 +01:00
x509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300e310c300806000c04546573743000301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, Validity missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Validity parsing
2019-02-13 12:22:23 +01:00
x509parse_crt:"303d3028a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c0454657374300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Validity, inv tag)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"303f302aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c04546573740500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Validity, length field missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Validity parsing
2019-02-13 12:22:23 +01:00
x509parse_crt:"303e3029a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c045465737430300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Validity, inv length encoding)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Validity parsing
2019-02-13 12:22:23 +01:00
x509parse_crt:"303f302aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c04546573743085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Validity, length out of bounds)
Extend negative testing for X.509 Validity parsing
2019-02-13 12:22:23 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"303f302aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c04546573743001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Validity, notBefore missing)
Extend negative testing for X.509 Validity parsing
2019-02-13 12:22:23 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30793064a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c04546573743000300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Validity, notBefore inv tag)
Extend negative testing for X.509 Validity parsing
2019-02-13 12:22:23 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"307b3066a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c045465737430020500300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 Validity parsing
2019-02-13 12:22:23 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Validity, notBefore no length)
Extend negative testing for X.509 Validity parsing
2019-02-13 12:22:23 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"307a3065a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c0454657374300117300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Validity, notBefore inv length encoding)
Extend negative testing for X.509 Validity parsing
2019-02-13 12:22:23 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"307b3066a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c04546573743002178f300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Validity, notBefore length out of bounds)
Extend negative testing for X.509 Validity parsing
2019-02-13 12:22:23 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"307b3066a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c045465737430021701300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Validity, notBefore empty)
Extend negative testing for X.509 Validity parsing
2019-02-13 12:22:23 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081893074a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a3008060013045465737430101700170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Validity, notBefore invalid)
Extend negative testing for X.509 Validity parsing
2019-02-13 12:22:23 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303000000000170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Validity, notAfter missing)
Extend negative testing for X.509 Validity parsing
2019-02-13 12:22:23 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081873072a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374300e170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Validity, notAfter inv tag)
Extend negative testing for X.509 Validity parsing
2019-02-13 12:22:23 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"3081893074a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a300806001304546573743010170c3039313233313233353935390500300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 Validity parsing
2019-02-13 12:22:23 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Validity, notAfter length missing)
Extend negative testing for X.509 Validity parsing
2019-02-13 12:22:23 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081883073a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374300f170c30393132333132333539353917300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Validity, notAfter inv length encoding)
Extend negative testing for X.509 Validity parsing
2019-02-13 12:22:23 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081893074a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a300806001304546573743010170c3039313233313233353935391785300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Validity, notAfter length out of bounds)
Extend negative testing for X.509 Validity parsing
2019-02-13 12:22:23 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081893074a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a300806001304546573743010170c3039313233313233353935391701300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Validity, notAfter empty)
Extend negative testing for X.509 Validity parsing
2019-02-13 12:22:23 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081893074a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a300806001304546573743010170c3039313233313233353935391700300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Validity, notAfter invalid)
Extend negative testing for X.509 Validity parsing
2019-02-13 12:22:23 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303931323331323335393539170c303930313031303000000000300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Improve name of X.509 CRT parsing test
2019-03-13 11:14:00 +01:00
X509 CRT ASN1 (TBS, inv Validity, data remaining after 'notAfter')
Extend negative testing for X.509 Validity parsing
2019-02-13 12:22:23 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"308198308182a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301e170c303930313031303030303030170c3039313233313233353935391700300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, Subject missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Subject parsing
2019-02-13 12:59:00 +01:00
x509parse_crt:"305b3046a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Subject, RDNSequence inv tag)
Extend negative testing for X.509 Subject parsing
2019-02-13 12:59:00 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"305c3047a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353900300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Subject, RDNSequence length missing)
Extend negative testing for X.509 Subject parsing
2019-02-13 12:59:00 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"305c3047a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Subject, RDNSequence inv length encoding)
Extend negative testing for X.509 Subject parsing
2019-02-13 12:59:00 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"305d3048a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c3039313233313233353935393085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Subject, RDNSequence length out of bounds)
Extend negative testing for X.509 Subject parsing
2019-02-13 12:59:00 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"305d3048a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c3039313233313233353935393001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Subject, RDN inv tag)
Extend negative testing for X.509 Subject parsing
2019-02-13 12:59:00 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930020500302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Subject, RDN inv length encoding)
Extend negative testing for X.509 Subject parsing
2019-02-13 12:59:00 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930023185302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Subject, RDN length out of bounds)
Extend negative testing for X.509 Subject parsing
2019-02-13 12:59:00 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930023101302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Subject, RDN empty)
Extend negative testing for X.509 Subject parsing
2019-02-13 12:59:00 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930023100302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue inv tag)
Extend negative testing for X.509 Subject parsing
2019-02-13 12:59:00 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300431020500302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue inv length encoding)
Extend negative testing for X.509 Subject parsing
2019-02-13 12:59:00 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300431023085302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue length out of bounds)
Extend negative testing for X.509 Subject parsing
2019-02-13 12:59:00 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300431023001302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue empty)
Extend negative testing for X.509 Subject parsing
2019-02-13 12:59:00 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300431023000302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue type inv tag)
Extend negative testing for X.509 Subject parsing
2019-02-13 12:59:00 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c3039313233313233353935393006310430020500302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 Subject parsing
2019-02-13 12:59:00 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue type inv no length data)
Extend negative testing for X.509 Subject parsing
2019-02-13 12:59:00 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818e3079a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930053103300106302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue type inv length encoding)
Extend negative testing for X.509 Subject parsing
2019-02-13 12:59:00 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c3039313233313233353935393006310430020685302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue type length out of bounds )
Extend negative testing for X.509 Subject parsing
2019-02-13 12:59:00 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c3039313233313233353935393006310430020601302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue value missing)
Extend negative testing for X.509 Subject parsing
2019-02-13 12:59:00 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c3039313233313233353935393006310430020600302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue value inv tag)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"308191307ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930083106300406000500302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG;
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue value length missing)
Extend negative testing for X.509 Subject parsing
2019-02-13 12:59:00 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"308190307ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930073105300306000c302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue value inv length encoding)
Extend negative testing for X.509 Subject parsing
2019-02-13 12:59:00 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"308191307ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930083106300406000C85302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue value length out of bounds)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Subject parsing
2019-02-13 12:59:00 +01:00
x509parse_crt:"308191307ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930083106300406000c01302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue value length mismatch)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Subject parsing
2019-02-13 12:59:00 +01:00
x509parse_crt:"308193307ea0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300a3108300606000c010000302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv Subject, 2nd AttributeTypeValue empty)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 Subject parsing
2019-02-13 12:59:00 +01:00
x509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300e310c300806000c04546573743000302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, SubPubKeyInfo missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 16:38:48 +02:00
x509parse_crt:"30693054a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 11:36:47 +01:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv tag)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"306b3056a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573740500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 11:36:47 +01:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, length missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 16:38:48 +02:00
x509parse_crt:"306a3055a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a3008060013045465737430300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 11:36:47 +01:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv length encoding)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 16:38:48 +02:00
x509parse_crt:"306b3056a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 11:36:47 +01:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, length out of bounds)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 16:38:48 +02:00
x509parse_crt:"306b3056a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 11:36:47 +01:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, empty)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 16:38:48 +02:00
x509parse_crt:"306b3056a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 11:36:47 +01:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv algorithm tag)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"306d3058a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a3008060013045465737430020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 11:36:47 +01:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, algorithm length missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 16:38:48 +02:00
x509parse_crt:"306c3057a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374300130300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 11:36:47 +01:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, algorithm inv length encoding)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 16:38:48 +02:00
x509parse_crt:"306d3058a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a3008060013045465737430023085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 11:36:47 +01:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, algorithm length out of bounds)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 16:38:48 +02:00
x509parse_crt:"306d3058a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a3008060013045465737430023001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 11:36:47 +01:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, algorithm empty)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 16:38:48 +02:00
x509parse_crt:"3081883073a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301d300003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 11:36:47 +01:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, algorithm unknown)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 16:38:48 +02:00
x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010100050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_UNKNOWN_PK_ALG
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 11:36:47 +01:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, bitstring missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 16:38:48 +02:00
x509parse_crt:"307a3065a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374300f300d06092A864886F70D0101010500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 11:36:47 +01:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, bitstring inv tag)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"307c3067a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743011300d06092A864886F70D01010105000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 11:36:47 +01:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, bitstring length missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 16:38:48 +02:00
x509parse_crt:"307b3066a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743010300d06092A864886F70D010101050003300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 11:36:47 +01:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, bitstring inv length encoding)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 16:38:48 +02:00
x509parse_crt:"307c3067a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743011300d06092A864886F70D01010105000385300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 11:36:47 +01:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, bitstring length out of bounds)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 16:38:48 +02:00
x509parse_crt:"307c3067a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743011300d06092A864886F70D01010105000301300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 11:36:47 +01:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, no bitstring data)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 16:38:48 +02:00
x509parse_crt:"307c3067a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743011300d06092A864886F70D01010105000300300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_INVALID_DATA
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
Fix test case name formatting in X.509 parsing suite
2019-03-13 11:36:47 +01:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv bitstring start)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 16:38:48 +02:00
x509parse_crt:"307d3068a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743012300d06092A864886F70D0101010500030101300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_INVALID_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv internal bitstring length)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 16:38:48 +02:00
x509parse_crt:"308180306ba0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743015300d06092A864886F70D0101010500030400300000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv internal bitstring tag)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 16:38:48 +02:00
x509parse_crt:"308180306ba0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743015300d06092A864886F70D0101010500030400310000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv RSA modulus)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 16:38:48 +02:00
x509parse_crt:"3081873072a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301c300d06092A864886F70D0101010500030b0030080202ffff0302ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, total length mismatch)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 16:38:48 +02:00
x509parse_crt:"3081893074a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301e300d06092A864886F70D0101010500030b0030080202ffff0202ffff0500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, check failed)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 16:38:48 +02:00
x509parse_crt:"3081873072a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301c300d06092A864886F70D0101010500030b0030080202ffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv SubPubKeyInfo, check failed, expanded length notation)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectPublicKeyInfo parsing
2019-06-04 16:38:48 +02:00
x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210fffffffffffffffffffffffffffffffe0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Fix documentation of X.509 parsing test
2019-06-13 14:32:44 +02:00
# We expect an extension parsing error here because the IssuerID is optional.
# Hence, if we find an ASN.1 tag doesn't match the IssuerID, we assume the
# IssuerID is skipped and that the tag should hence belong to the next field,
# namely the v3 extensions. However, the tag the test exercises is a NULL tag,
# and hence we obtain an INVALID_TAG error during extension parsing.
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv IssuerID, inv tag)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff0500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv IssuerID, length missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 IssuerID parsing
2019-06-04 16:43:15 +02:00
x509parse_crt:"308197308181a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa1300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv IssuerID, inv length encoding)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 IssuerID parsing
2019-06-04 16:43:15 +02:00
x509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa185300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv IssuerID, length out of bounds)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 IssuerID parsing
2019-06-04 16:43:15 +02:00
x509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, no IssuerID, inv SubjectID, length missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 IssuerID parsing
2019-06-04 16:43:15 +02:00
x509parse_crt:"308197308181a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa2300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, no IssuerID, inv SubjectID, inv length encoding)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 IssuerID parsing
2019-06-04 16:43:15 +02:00
x509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa285300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, no IssuerID, inv SubjectID, length out of bounds)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectID parsing
2019-06-04 16:45:45 +02:00
x509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa201300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, valid IssuerID, inv SubjectID, inv tag)
Remove MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3 option Remove define Add ChangeLog file and migration guide entry Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
2021-05-28 15:27:01 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"30819a308184a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa1000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBSCertificate v3, ext SubjectAlternativeName malformed)
Add negative test for malformed SAN Add a negative test for a malformed SAN extension.
2019-05-22 16:21:08 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
x509parse_crt:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, valid IssuerID, inv SubjectID, length missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectID parsing
2019-06-04 16:45:45 +02:00
x509parse_crt:"308199308183a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a2300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Better handling of extension parsing
2009-07-27 23:34:45 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, valid IssuerID, inv SubjectID, inv length encoding)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectID parsing
2019-06-04 16:45:45 +02:00
x509parse_crt:"30819a308184a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a285300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Better handling of extension parsing
2009-07-27 23:34:45 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, valid IssuerID, inv SubjectID, length out of bounds)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SubjectID parsing
2019-06-04 16:45:45 +02:00
x509parse_crt:"30819a308184a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a201300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
Add negative X.509 parsing tests for IssuerID/SubjectID in v1 CRT
2019-03-13 16:18:57 +01:00
X509 CRT ASN1 (TBS, IssuerID unsupported in v1 CRT)
Remove MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3 option Remove define Add ChangeLog file and migration guide entry Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
2021-05-28 15:27:01 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Add negative X.509 parsing tests for IssuerID/SubjectID in v1 CRT
2019-03-13 16:18:57 +01:00
x509parse_crt:"30819a308184a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a201300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
Add negative X.509 parsing tests for IssuerID/SubjectID in v1 CRT
2019-03-13 16:18:57 +01:00
X509 CRT ASN1 (TBS, SubjectID unsupported in v1 CRT)
Remove MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3 option Remove define Add ChangeLog file and migration guide entry Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
2021-05-28 15:27:01 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Add negative X.509 parsing tests for IssuerID/SubjectID in v1 CRT
2019-03-13 16:18:57 +01:00
x509parse_crt:"30819a308184a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa200a201300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, inv tag)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"30819c308186a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a2000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, outer length missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
x509parse_crt:"30819b308185a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Fix uninitialised pointer dereference
2014-11-11 22:17:26 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, outer length inv encoding)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
x509parse_crt:"30819c308186a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a385300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Forbid repeated X.509 extensions
2014-11-12 17:47:28 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, outer length out of bounds)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30819c308186a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a301300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, outer length 0)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30819c308186a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a300300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, inner tag invalid)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"30819e308188a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, inner length missing)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30819d308187a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30130300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, inner length inv encoding)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30819e308188a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3023085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, inner length out of bounds)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30819e308188a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3023001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, inner/outer length mismatch)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30819f308189a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a303300000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, first ext inv tag)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"3081a030818aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30430020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Fix uninitialised pointer dereference
2014-11-11 22:17:26 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, first ext length missing)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"30819f308189a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a303300130300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, inv first ext length encoding)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a030818aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30430023085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, first ext length out of bounds)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a030818aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30430023001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Forbid repeated X.509 extensions
2014-11-12 17:47:28 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, first ext empty)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a030818aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30430023000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, first ext extnID inv tag)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"3081a230818ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a306300430020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, first ext extnID length missing)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a130818ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3053003300106300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, first ext extnID inv length encoding)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a230818ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a306300430020685300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, first ext extnID length out of bounds)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a230818ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a306300430020601300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, no extnValue)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a230818ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a306300430020600300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, inv critical tag)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"3081a430818ea0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3083006300406000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, critical length missing)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a330818da0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30730053003060001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, critical inv length encoding)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a430818ea0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3083006300406000185300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, critical length out of bounds)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a430818ea0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3083006300406000101300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Fix memory leak with crafted X.509 certs
2014-11-11 23:11:16 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, critical length 0)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a430818ea0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3083006300406000100300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, critical length 2)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a6308190a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30a30083006060001020000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, extnValue inv tag)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"3081a7308191a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30b3009300706000101000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, extnValue length missing)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a6308190a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30a30083006060001010004300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, extnValue length inv encoding)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a7308191a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30b3009300706000101000485300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Fix memory leak with crafted X.509 certs
2014-11-11 23:11:16 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, extnValue length out of bounds)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
x509parse_crt:"3081a7308191a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30b3009300706000101000401300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Improve X.509 CRT parsing test names
2019-03-14 09:22:51 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, data remaining after extnValue)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
x509parse_crt:"3081a9308193a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30d300b3009060001010004000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X.509: Move negative tests for CertificatePolicy parsing This commit moves the X.509 negative parsing tests for the CertificatePolicy extension to the place where negative testing of other extensions happens.
2019-09-12 15:06:33 +02:00
X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, data missing)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
X.509: Adapt negative parsing test for no data in CrtPolicy ext This commit modifies the test X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, data missing) which exercises the behaviour of the X.509 CRT parser when facing a CertificatePolicy extension with empty data field. The following adaptations are made: - The subject ID and issuer ID are modified to have length 0. The previous values `aa` and `bb` are OK, but a generic ASN.1 parser will try to interpret them as ASN.1 tags and fail. For maintainability, it's therefore better to use something that can be parsed as ASN.1, and an empty ID is the easiest solution here. - The TBS part of the certificate wasn't followed by signature algorithm and signature fields, which makes the test incompatible with future changes swapping to breadth-first parsing of certificates.
2019-09-12 15:21:57 +02:00
x509parse_crt:"3081a7308191a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30b300930070603551d200400300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X.509: Move negative tests for CertificatePolicy parsing This commit moves the X.509 negative parsing tests for the CertificatePolicy extension to the place where negative testing of other extensions happens.
2019-09-12 15:06:33 +02:00
X.509: Add numerous negative parsing tests for CertificatePolicy ext This commit adds multiple test cases to the X.509 CRT parsing test suite exercising the stack's behaviour when facing CertificatePolicy extensions that are malformed for a variety of reasons. It follows the same scheme as in other negative parsing tests: For each ASN.1 component, have test cases for (a) unexpected tag, (b) missing length, (c) invalid length encoding, (d) length out of bounds.
2019-09-12 17:03:08 +02:00
X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, invalid outer tag)
X.509: Move negative tests for CertificatePolicy parsing This commit moves the X.509 negative parsing tests for the CertificatePolicy extension to the place where negative testing of other extensions happens.
2019-09-12 15:06:33 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
X.509: Add numerous negative parsing tests for CertificatePolicy ext This commit adds multiple test cases to the X.509 CRT parsing test suite exercising the stack's behaviour when facing CertificatePolicy extensions that are malformed for a variety of reasons. It follows the same scheme as in other negative parsing tests: For each ASN.1 component, have test cases for (a) unexpected tag, (b) missing length, (c) invalid length encoding, (d) length out of bounds.
2019-09-12 17:03:08 +02:00
x509parse_crt:"3081a9308193a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30d300b30090603551d2004020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
X.509: Move negative tests for CertificatePolicy parsing This commit moves the X.509 negative parsing tests for the CertificatePolicy extension to the place where negative testing of other extensions happens.
2019-09-12 15:06:33 +02:00
X.509: Add numerous negative parsing tests for CertificatePolicy ext This commit adds multiple test cases to the X.509 CRT parsing test suite exercising the stack's behaviour when facing CertificatePolicy extensions that are malformed for a variety of reasons. It follows the same scheme as in other negative parsing tests: For each ASN.1 component, have test cases for (a) unexpected tag, (b) missing length, (c) invalid length encoding, (d) length out of bounds.
2019-09-12 17:03:08 +02:00
X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, outer length missing)
X.509: Move negative tests for CertificatePolicy parsing This commit moves the X.509 negative parsing tests for the CertificatePolicy extension to the place where negative testing of other extensions happens.
2019-09-12 15:06:33 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
X.509: Add numerous negative parsing tests for CertificatePolicy ext This commit adds multiple test cases to the X.509 CRT parsing test suite exercising the stack's behaviour when facing CertificatePolicy extensions that are malformed for a variety of reasons. It follows the same scheme as in other negative parsing tests: For each ASN.1 component, have test cases for (a) unexpected tag, (b) missing length, (c) invalid length encoding, (d) length out of bounds.
2019-09-12 17:03:08 +02:00
x509parse_crt:"3081a8308192a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30c300a30080603551d20040130300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, outer length inv encoding)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a9308193a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30d300b30090603551d2004023085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, outer length out of bounds)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a9308193a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30d300b30090603551d2004023001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, no policies)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081a9308193a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30d300b30090603551d2004023000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy invalid tag)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081ab308195a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30f300d300b0603551d20040430020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy length missing)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081aa308194a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30e300c300a0603551d200403300130300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy length inv encoding)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081ab308195a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30f300d300b0603551d20040430023085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy length out of bounds)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081ab308195a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30f300d300b0603551d20040430023001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, empty policy)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081ab308195a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30f300d300b0603551d20040430023000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy invalid OID tag)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081ad308197a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a311300f300d0603551d200406300430020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy no OID length)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081ac308196a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a310300e300c0603551d2004053003300106300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy OID length inv encoding)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081ad308197a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a311300f300d0603551d200406300430020685300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy OID length out of bounds)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081ad308197a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a311300f300d0603551d200406300430020601300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, unknown critical policy)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:!MBEDTLS_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION
x509parse_crt:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d20010101040730053003060100300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_FEATURE_UNAVAILABLE
X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy qualifier invalid tag)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081b030819aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a314301230100603551d200409300730050601000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy qualifier no length)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081af308199a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3133011300f0603551d2004083006300406010030300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy qualifier inv length encoding)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081b030819aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a314301230100603551d200409300730050601003085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy qualifier length out of bounds)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081b030819aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a314301230100603551d200409300730050601003001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X.509: Move negative tests for CertificatePolicy parsing This commit moves the X.509 negative parsing tests for the CertificatePolicy extension to the place where negative testing of other extensions happens.
2019-09-12 15:06:33 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv extBasicConstraint, no pathlen length)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
x509parse_crt:"3081b030819aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a314301230100603551d130101010406300402010102300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Guard from undefined behaviour in case of an INT_MAX max_pathlen When parsing a certificate with the basic constraints extension the max_pathlen that was read from it was incremented regardless of its value. However, if the max_pathlen is equal to INT_MAX (which is highly unlikely), an undefined behaviour would occur. This commit adds a check to ensure that such value is not accepted as valid. Relevant tests for INT_MAX and INT_MAX-1 are also introduced. Certificates added in this commit were generated using the test_suite_x509write, function test_x509_crt_check. Input data taken from the "Certificate write check Server1 SHA1" test case, so the generated files are like the "server1.crt", but with the "is_ca" field set to 1 and max_pathlen as described by the file name. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-14 15:49:52 +02:00
X509 CRT ASN1 (inv extBasicConstraint, pathlen is INT_MAX)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
x509parse_crt_file:"data_files/server1_pathlen_int_max.crt":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
X509 CRT ASN1 (pathlen is INT_MAX-1)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
x509parse_crt_file:"data_files/server1_pathlen_int_max-1.crt":0
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv extBasicConstraint, pathlen inv length encoding)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
x509parse_crt:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d13010101040730050201010285300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv extBasicConstraint, pathlen length out of bounds)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
x509parse_crt:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d13010101040730050201010201300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv extBasicConstraint, pathlen empty)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d13010101040730050201010200300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv extBasicConstraint, pathlen length mismatch)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081b430819ea0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a318301630140603551d13010101040a30080201010201010500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, ExtKeyUsage bad second tag)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081bd3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d250416301406082b0601050507030107082b06010505070302300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, SubjectAltName repeated)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081dc3081c6a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a340303e301d0603551d11041630148208666f6f2e7465737482086261722e74657374301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, ExtKeyUsage repeated)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081dc3081c6a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a340303e301d0603551d250416301406082b0601050507030106082b06010505070302301d0603551d250416301406082b0601050507030106082b06010505070302300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, inv v3Ext, SubjectAltName repeated outside Extensions)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081dc3081c6a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Enable X509_ALLOW_EXTENSIONS_NON_V3 in config full and fix tests Enable MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3 in the full config. There's no reason to keep it out. We weren't testing it at all on the CI. Add a missing dependency on !MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3 to some test cases that either were testing that v3 extensions are only accepted in v3 certificates, or where parsing returns a different error when MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3 is enabled. Add a few positive and negative test cases with MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3 enabled. Fix one test case with MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3 where the intended output of mbedtls_x509_crt_info had changed in 890819a597bd7a67f0b8185a4409733504f792b3 but the test case was missed because it was never executed. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-12 14:21:30 +02:00
X509 CRT (TBS, valid v3Ext in v3 CRT)
Add negative X.509 parsing tests for v3Ext in v1/v2 CRT
2019-03-13 16:19:28 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Enable X509_ALLOW_EXTENSIONS_NON_V3 in config full and fix tests Enable MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3 in the full config. There's no reason to keep it out. We weren't testing it at all on the CI. Add a missing dependency on !MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3 to some test cases that either were testing that v3 extensions are only accepted in v3 certificates, or where parsing returns a different error when MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3 is enabled. Add a few positive and negative test cases with MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3 enabled. Fix one test case with MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3 where the intended output of mbedtls_x509_crt_info had changed in 890819a597bd7a67f0b8185a4409733504f792b3 but the test case was missed because it was never executed. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-12 14:21:30 +02:00
x509parse_crt:"3081b93081a3a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030200ff":"cert. version \: 3\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ??=Test\nsubject name \: ??=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\nsubject alt name \:\n dNSName \: foo.test\n dNSName \: bar.test\n":0
X509 CRT ASN1 (TBS, valid v3Ext in v1 CRT)
Remove MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3 option Remove define Add ChangeLog file and migration guide entry Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
2021-05-28 15:27:01 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Add negative X.509 parsing tests for v3Ext in v1/v2 CRT
2019-03-13 16:19:28 +01:00
x509parse_crt:"3081b93081a3a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
X509 CRT ASN1 (TBS, valid v3Ext in v2 CRT)
Remove MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3 option Remove define Add ChangeLog file and migration guide entry Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
2021-05-28 15:27:01 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Add negative X.509 parsing tests for v3Ext in v1/v2 CRT
2019-03-13 16:19:28 +01:00
x509parse_crt:"3081b93081a3a0030201018204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (TBS, valid SubjectID, valid IssuerID, inv v3Ext, SubjectAltName repeated outside Extensions, inv SubjectAltNames tag)
Extend negative testing for X.509 v3 Extension parsing
2019-06-04 16:51:22 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
x509parse_crt:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (SignatureAlgorithm missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SignatureAlgorithm parsing
2019-06-04 16:54:43 +02:00
x509parse_crt:"3081aa3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (inv SignatureAlgorithm, bad tag)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"3081ac3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e746573740500":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (inv SignatureAlgorithm, length missing)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SignatureAlgorithm parsing
2019-06-04 16:54:43 +02:00
x509parse_crt:"3081ab3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e7465737430":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (inv SignatureAlgorithm, inv length encoding)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SignatureAlgorithm parsing
2019-06-04 16:54:43 +02:00
x509parse_crt:"3081ac3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e746573743085":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_INVALID_LENGTH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (inv SignatureAlgorithm, length out of bounds)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Extend negative testing for X.509 SignatureAlgorithm parsing
2019-06-04 16:54:43 +02:00
x509parse_crt:"3081ac3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e746573743001":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (inv SignatureAlgorithm, not the same as SignatureAlgorithm in TBS)
Extend negative testing for X.509 SignatureAlgorithm parsing
2019-06-04 16:54:43 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081bd3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010a0500030200ff":"":MBEDTLS_ERR_X509_SIG_MISMATCH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (Signature missing)
Extend negative testing for X.509 Signature parsing
2019-02-14 13:25:03 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081b93081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (inv Signature, bad tag)
Extend negative testing for X.509 Signature parsing
2019-02-14 13:25:03 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Use ASN.1 NULL TLVs when testing invalid tags Previously, a test exercising the X.509 CRT parser's behaviour on unexpected tags would use a '00' byte in place of the tag for the expected structure. This makes reviewing the examples harder because the binary data isn't valid DER-encoded ASN.1. This commit uses the ASN.1 NULL TLV '05 00' to test invalid tags, and adapts surrounding structures' length values accordingly. This eases reviewing because now the ASN.1 structures are still well-formed at the place where the mismatch occurs.
2019-06-04 17:13:23 +02:00
x509parse_crt:"3081bb3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b05000500":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Extend negative testing for X.509 Signature parsing
2019-02-14 13:25:03 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (inv Signature, length missing)
Extend negative testing for X.509 Signature parsing
2019-02-14 13:25:03 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081ba3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b050003":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (inv Signature, inv length encoding)
Extend negative testing for X.509 Signature parsing
2019-02-14 13:25:03 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081bb3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b05000385":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (inv Signature, length out of bounds)
Extend negative testing for X.509 Signature parsing
2019-02-14 13:25:03 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081bb3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b05000301":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Change X.509 test cases to not rely on asn1parse limitations Tweak test data for one test case to not rely on mbedtls_asn1_get_int lacking support for leading zeros. Instead, use a number that is actually out of range for int. Tweak test data for one test case to not rely on mbedtls_asn1_get_bitstring_null rejecting bitstrings shorter than two octets. Instead, try bit strings that are genuinely invalid, or have a nonzero number of unused bits. Add a test case with a correct empty signature. This is commented out because asn1parse currently does not support this. Uncomment it when asn1parse is updated to support this.
2019-09-11 17:23:07 +02:00
X509 CRT ASN1 (inv Signature, inv data #1)
Extend negative testing for X.509 Signature parsing
2019-02-14 13:25:03 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Change X.509 test cases to not rely on asn1parse limitations Tweak test data for one test case to not rely on mbedtls_asn1_get_int lacking support for leading zeros. Instead, use a number that is actually out of range for int. Tweak test data for one test case to not rely on mbedtls_asn1_get_bitstring_null rejecting bitstrings shorter than two octets. Instead, try bit strings that are genuinely invalid, or have a nonzero number of unused bits. Add a test case with a correct empty signature. This is commented out because asn1parse currently does not support this. Uncomment it when asn1parse is updated to support this.
2019-09-11 17:23:07 +02:00
# signature = bit string with invalid encoding (missing number of unused bits)
Extend negative testing for X.509 Signature parsing
2019-02-14 13:25:03 +01:00
x509parse_crt:"3081bb3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b05000300":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_INVALID_DATA
Change X.509 test cases to not rely on asn1parse limitations Tweak test data for one test case to not rely on mbedtls_asn1_get_int lacking support for leading zeros. Instead, use a number that is actually out of range for int. Tweak test data for one test case to not rely on mbedtls_asn1_get_bitstring_null rejecting bitstrings shorter than two octets. Instead, try bit strings that are genuinely invalid, or have a nonzero number of unused bits. Add a test case with a correct empty signature. This is commented out because asn1parse currently does not support this. Uncomment it when asn1parse is updated to support this.
2019-09-11 17:23:07 +02:00
X509 CRT ASN1 (inv Signature, inv data #2)
Extend negative testing for X.509 Signature parsing
2019-02-14 13:25:03 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Change X.509 test cases to not rely on asn1parse limitations Tweak test data for one test case to not rely on mbedtls_asn1_get_int lacking support for leading zeros. Instead, use a number that is actually out of range for int. Tweak test data for one test case to not rely on mbedtls_asn1_get_bitstring_null rejecting bitstrings shorter than two octets. Instead, try bit strings that are genuinely invalid, or have a nonzero number of unused bits. Add a test case with a correct empty signature. This is commented out because asn1parse currently does not support this. Uncomment it when asn1parse is updated to support this.
2019-09-11 17:23:07 +02:00
# signature = bit string with invalid encoding (number of unused bits too large)
x509parse_crt:"3081bc3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030108":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_INVALID_DATA
Uncomment X509 test that now works The test failed due to an ASN.1 bug that the latest crypto submodule update fixed.
2019-10-04 19:24:06 +02:00
X509 CRT ASN1 (empty Signature)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
# signature = empty bit string in DER encoding
x509parse_crt:"3081bc3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030100":"cert. version \: 3\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ??=Test\nsubject name \: ??=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\nsubject alt name \:\n dNSName \: foo.test\n dNSName \: bar.test\n":0
Change X.509 test cases to not rely on asn1parse limitations Tweak test data for one test case to not rely on mbedtls_asn1_get_int lacking support for leading zeros. Instead, use a number that is actually out of range for int. Tweak test data for one test case to not rely on mbedtls_asn1_get_bitstring_null rejecting bitstrings shorter than two octets. Instead, try bit strings that are genuinely invalid, or have a nonzero number of unused bits. Add a test case with a correct empty signature. This is commented out because asn1parse currently does not support this. Uncomment it when asn1parse is updated to support this.
2019-09-11 17:23:07 +02:00
X509 CRT ASN1 (dummy 24-bit Signature)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
# signature = bit string "011001100110111101101111"
x509parse_crt:"3081bf3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030400666f6f":"cert. version \: 3\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ??=Test\nsubject name \: ??=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\nsubject alt name \:\n dNSName \: foo.test\n dNSName \: bar.test\n":0
# The ASN.1 module rejects non-octet-aligned bit strings.
X509 CRT ASN1 (inv Signature: not octet-aligned)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
# signature = bit string "01100110011011110110111"
x509parse_crt:"3081bf3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030401666f6e":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_INVALID_DATA
Extend negative testing for X.509 Signature parsing
2019-02-14 13:25:03 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (inv Signature, length mismatch)
Extend negative testing for X.509 Signature parsing
2019-02-14 13:25:03 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"3081be3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030200ff00":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (well-formed)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
Improve X.509 CRT parsing test names
2019-03-14 09:22:51 +01:00
X509 CRT ASN1 (GeneralizedTime in notBefore, UTCTime in notAfter)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509parse_crt:"308198308182a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301e180e3230313030313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2010-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added support for GeneralizedTime in X509 certificates
2010-02-18 22:26:15 +01:00
Add X.509 CRT parsing test for mixed time-encodings
2019-03-14 09:28:42 +01:00
X509 CRT ASN1 (UTCTime in notBefore, GeneralizedTime in notAfter)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt:"308198308182a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301e170c303931323331323335393539180e3230313030313031303030303030300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2009-12-31 23\:59\:59\nexpires on \: 2010-01-01 00\:00\:00\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (Name with X520 CN)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b0603550403130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: CN=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (Name with X520 C)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b0603550406130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: C=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (Name with X520 L)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b0603550407130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: L=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (Name with X520 ST)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b0603550408130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ST=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (Name with X520 O)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b060355040a130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: O=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (Name with X520 OU)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b060355040b130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: OU=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (Name with unknown X520 part)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b06035504de130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (Name with composite RDN)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Support composite RDNs in X.509 certs parsing
2015-02-04 18:11:55 +01:00
x509parse_crt:"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":"cert. version \: 3\nserial number \: 4C\:20\:E3\:BD\nissuer name \: C=US, ST=CA, O=Internet Widgits Pty Ltd, CN=Frankencert CA\nsubject name \: C=US, ST=Washington, ??=US, ??=Delaware, O=Authorize.Net LLC, ??=Private Organization, serialNumber=4369191 + CN=www.authorize.net, L=San Francisco\nissued on \: 2013-08-02 15\:14\:37\nexpires on \: 2015-08-17 05\:54\:31\nsigned using \: RSA with SHA1\nRSA key size \: 1024 bits\n":0
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (Name with PKCS9 email)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509parse_crt:"30819f308189a0030201008204deadbeef300d06092a864886f70d01010b050030153113301106092a864886f70d010901130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: emailAddress=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (Name with unknown PKCS9 part)
Use SHA-256 instead of MD2 in X.509 CRT parsing tests - Replace 'RSA with MD2' OID '2a864886f70d010102' by 'RSA with SHA-256' OID '2a864886f70d01010b': Only the last byte determines the hash, and `MBEDTLS_OID_PKCS1_MD2 == MBEDTLS_OID_PKCS1 "\x02"` `MBEDTLS_OID_PKCS1_SHA256 == MBEDTLS_OID_PKCS1 "\x0b"` See oid.h. - Replace MD2 dependency by SHA256 dependency. - Adapt expected CRT info output.
2019-02-12 14:32:06 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509parse_crt:"30819f308189a0030201008204deadbeef300d06092a864886f70d01010b050030153113301106092a864886f70d0109ab130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (ECDSA signature, RSA key)
Added needed ECDSA dependencies to test_suite_x509parse.data
2016-08-07 10:56:02 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_ECDSA_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509parse_crt:"3081e630819e020103300906072a8648ce3d0401300f310d300b0603550403130454657374301e170d3133303731303039343631385a170d3233303730383039343631385a300f310d300b0603550403130454657374304c300d06092a864886f70d0101010500033b003038023100e8f546061d3b49bc2f6b7524b7ea4d73a8d5293ee8c64d9407b70b5d16baebc32b8205591eab4e1eb57e9241883701250203010001300906072a8648ce3d0401033800303502186e18209afbed14a0d9a796efcad68891e3ccd5f75815c833021900e92b4fd460b1994693243b9ffad54729de865381bda41d25":"cert. version \: 1\nserial number \: 03\nissuer name \: CN=Test\nsubject name \: CN=Test\nissued on \: 2013-07-10 09\:46\:18\nexpires on \: 2023-07-08 09\:46\:18\nsigned using \: ECDSA with SHA1\nRSA key size \: 384 bits\n":0
Add test certificate signed with ECDSA
2013-07-10 12:20:54 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (ECDSA signature, EC key)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP192R1_ENABLED:MBEDTLS_SHA1_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509parse_crt:"3081eb3081a3020900f41534662ec7e912300906072a8648ce3d0401300f310d300b0603550403130454657374301e170d3133303731303039343031395a170d3233303730383039343031395a300f310d300b06035504031304546573743049301306072a8648ce3d020106082a8648ce3d030101033200042137969fabd4e370624a0e1a33e379cab950cce00ef8c3c3e2adaeb7271c8f07659d65d3d777dcf21614363ae4b6e617300906072a8648ce3d04010338003035021858cc0f957946fe6a303d92885a456aa74c743c7b708cbd37021900fe293cac21af352d16b82eb8ea54e9410b3abaadd9f05dd6":"cert. version \: 1\nserial number \: F4\:15\:34\:66\:2E\:C7\:E9\:12\nissuer name \: CN=Test\nsubject name \: CN=Test\nissued on \: 2013-07-10 09\:40\:19\nexpires on \: 2023-07-08 09\:40\:19\nsigned using \: ECDSA with SHA1\nEC key size \: 192 bits\n":0
Certificates with EC key and/or sig parsed
2013-07-10 16:54:29 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT ASN1 (RSA signature, EC key)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP192R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509parse_crt:"3081e430819f020104300d06092a864886f70d0101050500300f310d300b0603550403130454657374301e170d3133303731303135303233375a170d3233303730383135303233375a300f310d300b06035504031304546573743049301306072a8648ce3d020106082a8648ce3d03010103320004e962551a325b21b50cf6b990e33d4318fd16677130726357a196e3efe7107bcb6bdc6d9db2a4df7c964acfe81798433d300d06092a864886f70d01010505000331001a6c18cd1e457474b2d3912743f44b571341a7859a0122774a8e19a671680878936949f904c9255bdd6fffdb33a7e6d8":"cert. version \: 1\nserial number \: 04\nissuer name \: CN=Test\nsubject name \: CN=Test\nissued on \: 2013-07-10 15\:02\:37\nexpires on \: 2023-07-08 15\:02\:37\nsigned using \: RSA with SHA1\nEC key size \: 192 bits\n":0
Certificates with EC key and/or sig parsed
2013-07-10 16:54:29 +02:00
Tests for mbedtls_x509_crt_parse_der_with_ext_cb Signed-off-by: Nicola Di Lieto <nicola.dilieto@gmail.com>
2020-05-28 23:04:15 +02:00
X509 CRT ASN1 (Unsupported critical extension)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:!MBEDTLS_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION
x509parse_crt:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Unsupported extension tests in test_suite_x509parse All combinations of critical or not, recognized or not by the callback are now tested as requested in https://github.com/ARMmbed/mbedtls/pull/3243#discussion_r432647880 In addition pass the OID of the unsupported extension to be parsed to the callback using the opaque pointer, which makes the tests fail if the library forwards the wrong pointer to the callback, as requested in https://github.com/ARMmbed/mbedtls/pull/3243#discussion_r432647392 Signed-off-by: Nicola Di Lieto <nicola.dilieto@gmail.com>
2020-05-29 22:58:25 +02:00
X509 CRT ASN1 (Unsupported critical extension recognized by callback)
Tests for mbedtls_x509_crt_parse_der_with_ext_cb Signed-off-by: Nicola Di Lieto <nicola.dilieto@gmail.com>
2020-05-28 23:04:15 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt_cb:"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":"cert. version \: 3\nserial number \: 4D\:3E\:BB\:B8\:A8\:70\:F9\:C7\:8C\:55\:A8\:A7\:E1\:2F\:D5\:16\nissuer name \: CN=dummy\nsubject name \: CN=dummy\nissued on \: 2020-04-28 17\:42\:43\nexpires on \: 2020-06-27 17\:42\:43\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\nbasic constraints \: CA=true\nsubject alt name \:\n dNSName \: dummy\nkey usage \: Digital Signature, Key Cert Sign\n":0
Unsupported extension tests in test_suite_x509parse All combinations of critical or not, recognized or not by the callback are now tested as requested in https://github.com/ARMmbed/mbedtls/pull/3243#discussion_r432647880 In addition pass the OID of the unsupported extension to be parsed to the callback using the opaque pointer, which makes the tests fail if the library forwards the wrong pointer to the callback, as requested in https://github.com/ARMmbed/mbedtls/pull/3243#discussion_r432647392 Signed-off-by: Nicola Di Lieto <nicola.dilieto@gmail.com>
2020-05-29 22:58:25 +02:00
X509 CRT ASN1 (Unsupported critical extension not recognized by callback)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt_cb:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
X509 CRT ASN1 (Unsupported non critical extension recognized by callback)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt_cb:"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":"cert. version \: 3\nserial number \: 4D\:3E\:BB\:B8\:A8\:70\:F9\:C7\:8C\:55\:A8\:A7\:E1\:2F\:D5\:16\nissuer name \: CN=dummy\nsubject name \: CN=dummy\nissued on \: 2020-04-28 17\:42\:43\nexpires on \: 2020-06-27 17\:42\:43\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\nbasic constraints \: CA=true\nsubject alt name \:\n dNSName \: dummy\nkey usage \: Digital Signature, Key Cert Sign\n":0
X509 CRT ASN1 (Unsupported non critical extension not recognized by callback)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt_cb:"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":"cert. version \: 3\nserial number \: 4D\:3E\:BB\:B8\:A8\:70\:F9\:C7\:8C\:55\:A8\:A7\:E1\:2F\:D5\:16\nissuer name \: CN=dummy\nsubject name \: CN=dummy\nissued on \: 2020-04-28 17\:42\:43\nexpires on \: 2020-06-27 17\:42\:43\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\nbasic constraints \: CA=true\nsubject alt name \:\n dNSName \: dummy\nkey usage \: Digital Signature, Key Cert Sign\n":0
Tests for mbedtls_x509_crt_parse_der_with_ext_cb Signed-off-by: Nicola Di Lieto <nicola.dilieto@gmail.com>
2020-05-28 23:04:15 +02:00
Pass "certificate policies" extension to callback Pass the "certificate policies" extension to the callback supplied to mbedtls_x509_crt_parse_der_with_ext_cb() if it contains unsupported policies. This allows the callback to fully replicate the behaviour of the deprecated MBEDTLS_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION configuration. Signed-off-by: Nicola Di Lieto <nicola.dilieto@gmail.com>
2020-06-13 11:08:16 +02:00
X509 CRT ASN1 (Unsupported critical policy recognized by callback)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt_cb:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d20010101040730053003060101300d06092a864886f70d01010b0500030200ff":"cert. version \: 3\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ??=Test\nsubject name \: ??=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\ncertificate policies \: ???\n":0
X509 CRT ASN1 (Unsupported critical policy not recognized by callback)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt_cb:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d20010101040730053003060100300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_FEATURE_UNAVAILABLE
X509 CRT ASN1 (Unsupported non critical policy recognized by callback)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt_cb:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d20010100040730053003060101300d06092a864886f70d01010b0500030200ff":"cert. version \: 3\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ??=Test\nsubject name \: ??=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\ncertificate policies \: ???\n":0
X509 CRT ASN1 (Unsupported non critical policy not recognized by callback)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crt_cb:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d20010100040730053003060100300d06092a864886f70d01010b0500030200ff":"cert. version \: 3\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ??=Test\nsubject name \: ??=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\ncertificate policies \: ???\n":0
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (Incorrect first tag)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"":"":MBEDTLS_ERR_X509_INVALID_FORMAT
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (Correct first tag, data length does not match)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"300000":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, tag missing)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"3000":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, version tag len missing)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"3003300102":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, version correct, alg missing)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"30053003020100":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, alg correct, incorrect version)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"300b3009020102300406000500":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, correct version, sig_oid1 unknown)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"300b3009020100300406000500":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, sig_oid1 id unknown)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"30143012020100300d06092a864886f70d01010f0500":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, sig_oid1 correct, issuer missing)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"30143012020100300d06092a864886f70d01010e0500":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, issuer set missing)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"30163014020100300d06092a864886f70d01010e05003000":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, correct issuer, thisUpdate missing)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"30253023020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, correct thisUpdate, nextUpdate missing, entries length missing)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"30343032020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c30393031303130303030303030":"":MBEDTLS_ERR_ASN1_OUT_OF_DATA
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, entries present, invalid sig_alg)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"304a3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c30383132333132333539353900":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, entries present, date in entry invalid)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"304a3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd190c30383132333132333539353900":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, sig_alg present, sig_alg does not match)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"30583047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010d0500":"":MBEDTLS_ERR_X509_SIG_MISMATCH
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
X509 CRL ASN1 (TBSCertList, sig present, len mismatch)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crl:"305d3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010e05000302000100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
Add the decomposition of the base case as a comment Put the base good case first, then the bad cases derived from it. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-08-06 16:05:35 +02:00
# 305c
# 3047 tbsCertList TBSCertList
# 020100 version INTEGER OPTIONAL
# 300d signatureAlgorithm AlgorithmIdentifi
# 06092a864886f70d01010e
# 0500
# 300f issuer Name
# 310d300b0603550403130441424344
# 170c303930313031303030303030 thisUpdate Time
# 3014 revokedCertificates
# 3012 entry 1
# 8202abcd userCertificate CertificateSerialNum
# 170c303831323331323335393539 revocationDate Time
# 300d signatureAlgorithm AlgorithmIdentifi
# 06092a864886f70d01010e
# 0500
# 03020001 signatureValue BIT STRING
# The subsequent TBSCertList negative tests remove or modify some elements.
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, sig present)
Merge branch 'development' into convert_NO_SHA384_to_positive Conflicts: * configs/config-psa-crypto.h: modified here, removed in development * tests/suites/test_suite_x509parse.data: all conflicts are in depends_on lines where development made a change unrelated to MBEDTLS_SHAxxx and our branch either changed `MBEDTLS_SHA256_C` to `MBEDTLS_SHA224_C` or `MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384` to ``MBEDTLS_SHA384_C`, with no change to what the test does. Pick the other branch's dependency changes then apply our SHA dpeendency change.
2021-05-10 15:18:08 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA224_C:!MBEDTLS_X509_REMOVE_INFO
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509parse_crl:"305c3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010e050003020001":"CRL version \: 1\nissuer name \: CN=ABCD\nthis update \: 2009-01-01 00\:00\:00\nnext update \: 0000-00-00 00\:00\:00\nRevoked certificates\:\nserial number\: AB\:CD revocation date\: 2008-12-31 23\:59\:59\nsigned using \: RSA with SHA-224\n":0
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
x509parse_crl: more negative test cases Add a few more negative test cases for mbedtls_x509_crl_parse. The test data is manually adapted from the existing positive test case "X509 CRL ASN1 (TBSCertList, sig present)" which decomposes as 305c 3047 tbsCertList TBSCertList 020100 version INTEGER OPTIONAL 300d signatureAlgorithm AlgorithmIdentifier 06092a864886f70d01010e 0500 300f issuer Name 310d300b0603550403130441424344 170c303930313031303030303030 thisUpdate Time 3014 revokedCertificates 3012 entry 1 8202abcd userCertificate CertificateSerialNumber 170c303831323331323335393539 revocationDate Time 300d signatureAlgorithm AlgorithmIdentifier 06092a864886f70d01010e 0500 03020001 signatureValue BIT STRING Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-07-16 18:18:22 +02:00
X509 CRL ASN1 (TBSCertList, signatureValue missing)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crl:"30583047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010e0500":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRL ASN1 (TBSCertList, signatureAlgorithm missing)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crl:"30493047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRL ASN1 (TBSCertList, single empty entry at end)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crl:"30373035020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c30393031303130303030303030023000":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRL ASN1 (TBSCertList, good entry then empty entry at end)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crl:"304b3049020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301630128202abcd170c3038313233313233353935393000":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRL ASN1 (TBSCertList, missing time in entry)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crl:"304e3039020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300630048202abcd300d06092a864886f70d01010e050003020001":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRL ASN1 (TBSCertList, missing time in entry at end)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crl:"303b3039020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300630048202abcd":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRL ASN1 (TBSCertList, invalid tag for time in entry)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crl:"305c3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd190c303831323331323335393539300d06092a864886f70d01010e050003020001":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
X509 CRL ASN1 (TBSCertList, invalid tag for serial)
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509parse_crl:"305c3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128402abcd170c303831323331323335393539300d06092a864886f70d01010e050003020001":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
X509 CRL ASN1 (TBSCertList, no entries)
Merge branch 'development' into convert_NO_SHA384_to_positive Conflicts: * configs/config-psa-crypto.h: modified here, removed in development * tests/suites/test_suite_x509parse.data: all conflicts are in depends_on lines where development made a change unrelated to MBEDTLS_SHAxxx and our branch either changed `MBEDTLS_SHA256_C` to `MBEDTLS_SHA224_C` or `MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384` to ``MBEDTLS_SHA384_C`, with no change to what the test does. Pick the other branch's dependency changes then apply our SHA dpeendency change.
2021-05-10 15:18:08 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA224_C:!MBEDTLS_X509_REMOVE_INFO
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509parse_crl:"30463031020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300d06092a864886f70d01010e050003020001":"CRL version \: 1\nissuer name \: CN=ABCD\nthis update \: 2009-01-01 00\:00\:00\nnext update \: 0000-00-00 00\:00\:00\nRevoked certificates\:\nsigned using \: RSA with SHA-224\n":0
Add tests for x509_crt_parse_path()
2013-11-26 16:43:39 +01:00
Add CRL DER tests with incorrect version
2017-03-07 12:11:12 +01:00
X509 CRL ASN1 (invalid version 2)
x509parse_crl:"30463031020102300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300d06092a864886f70d01010e050003020001":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
X509 CRL ASN1 (invalid version overflow)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509parse_crl:"3049303102047fffffff300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300d06092a864886f70d01010e050003020001":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
Add CRL DER tests with incorrect version
2017-03-07 12:11:12 +01:00
x509: CRL: add tests for malformed extensions This covers all lines added in the previous commit. Coverage was tested using: make CFLAGS='--coverage -g3 -O0' (cd tests && ./test_suite_x509parse) make lcov firefox Coverage/index.html # then visual check Test data was generated by taking a copy of tests/data_files/crl-idp.pem, encoding it as hex, and then manually changing the values of some bytes to achieve the desired errors, using https://lapo.it/asn1js/ for help in locating the desired bytes.
2018-03-14 11:34:29 +01:00
X509 CRL ASN1 (extension seq too long, crl-idp.pem byte 121)
Add missing dependencies in test_suite_x509parse Found by depends-hashes.pl and depends-pkgalgs.pl.
2018-03-23 00:55:57 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509: CRL: add tests for malformed extensions This covers all lines added in the previous commit. Coverage was tested using: make CFLAGS='--coverage -g3 -O0' (cd tests && ./test_suite_x509parse) make lcov firefox Coverage/index.html # then visual check Test data was generated by taking a copy of tests/data_files/crl-idp.pem, encoding it as hex, and then manually changing the values of some bytes to achieve the desired errors, using https://lapo.it/asn1js/ for help in locating the desired bytes.
2018-03-14 11:34:29 +01:00
x509parse_crl:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRL ASN1 (extension oid too long, crl-idp.pem byte 123)
Add missing dependencies in test_suite_x509parse Found by depends-hashes.pl and depends-pkgalgs.pl.
2018-03-23 00:55:57 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509: CRL: add tests for malformed extensions This covers all lines added in the previous commit. Coverage was tested using: make CFLAGS='--coverage -g3 -O0' (cd tests && ./test_suite_x509parse) make lcov firefox Coverage/index.html # then visual check Test data was generated by taking a copy of tests/data_files/crl-idp.pem, encoding it as hex, and then manually changing the values of some bytes to achieve the desired errors, using https://lapo.it/asn1js/ for help in locating the desired bytes.
2018-03-14 11:34:29 +01:00
x509parse_crl:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRL ASN1 (extension critical invalid length, crl-idp.pem byte 128)
Add missing dependencies in test_suite_x509parse Found by depends-hashes.pl and depends-pkgalgs.pl.
2018-03-23 00:55:57 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509: CRL: add tests for malformed extensions This covers all lines added in the previous commit. Coverage was tested using: make CFLAGS='--coverage -g3 -O0' (cd tests && ./test_suite_x509parse) make lcov firefox Coverage/index.html # then visual check Test data was generated by taking a copy of tests/data_files/crl-idp.pem, encoding it as hex, and then manually changing the values of some bytes to achieve the desired errors, using https://lapo.it/asn1js/ for help in locating the desired bytes.
2018-03-14 11:34:29 +01:00
x509parse_crl:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
X509 CRL ASN1 (extension data too long, crl-idp.pem byte 131)
Add missing dependencies in test_suite_x509parse Found by depends-hashes.pl and depends-pkgalgs.pl.
2018-03-23 00:55:57 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509: CRL: add tests for malformed extensions This covers all lines added in the previous commit. Coverage was tested using: make CFLAGS='--coverage -g3 -O0' (cd tests && ./test_suite_x509parse) make lcov firefox Coverage/index.html # then visual check Test data was generated by taking a copy of tests/data_files/crl-idp.pem, encoding it as hex, and then manually changing the values of some bytes to achieve the desired errors, using https://lapo.it/asn1js/ for help in locating the desired bytes.
2018-03-14 11:34:29 +01:00
x509parse_crl:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
X509 CRL ASN1 (extension data too short, crl-idp.pem byte 131)
Add missing dependencies in test_suite_x509parse Found by depends-hashes.pl and depends-pkgalgs.pl.
2018-03-23 00:55:57 +01:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
x509: CRL: add tests for malformed extensions This covers all lines added in the previous commit. Coverage was tested using: make CFLAGS='--coverage -g3 -O0' (cd tests && ./test_suite_x509parse) make lcov firefox Coverage/index.html # then visual check Test data was generated by taking a copy of tests/data_files/crl-idp.pem, encoding it as hex, and then manually changing the values of some bytes to achieve the desired errors, using https://lapo.it/asn1js/ for help in locating the desired bytes.
2018-03-14 11:34:29 +01:00
x509parse_crl:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
x509: CRL: add tests for non-critical extension The 'critical' boolean can be set to false in two ways: - by leaving it implicit (test data generated by openssl) - by explicitly setting it to false (generated by hand)
2018-03-14 12:23:56 +01:00
X509 CRL ASN1 (extension not critical explicit, crl-idp.pem byte 129)
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:!MBEDTLS_X509_REMOVE_INFO
x509: CRL: add tests for non-critical extension The 'critical' boolean can be set to false in two ways: - by leaving it implicit (test data generated by openssl) - by explicitly setting it to false (generated by hand)
2018-03-14 12:23:56 +01:00
x509parse_crl:"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":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2018-03-14 07\:31\:48\nnext update \: 2028-03-14 07\:31\:48\nRevoked certificates\:\nsigned using \: RSA with SHA-256\n":0
Add tests for x509_crt_parse_path()
2013-11-26 16:43:39 +01:00
X509 CRT parse path #2 (one cert)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
mbedtls_x509_crt_parse_path:"data_files/dir1":0:1
Add tests for x509_crt_parse_path()
2013-11-26 16:43:39 +01:00
X509 CRT parse path #3 (two certs)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
mbedtls_x509_crt_parse_path:"data_files/dir2":0:2
Add tests for x509_crt_parse_path()
2013-11-26 16:43:39 +01:00
X509 CRT parse path #4 (two certs, one non-cert)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
mbedtls_x509_crt_parse_path:"data_files/dir3":1:2
Test and fix x509_oid functions
2014-03-28 16:06:35 +01:00
Add test for limit on intermediate certificates Inspired by test code provided by Nicholas Wilson in PR #351. The test will fail if someone sets MAX_INTERMEDIATE_CA to a value larger than 18 (default is 8), which is hopefully unlikely and can easily be fixed by running long.sh again with a larger value if it ever happens. Current behaviour is suboptimal as flags are not set, but currently the goal is only to document/test existing behaviour.
2017-06-05 13:49:44 +02:00
X509 CRT verify long chain (max intermediate CA, trusted)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
mbedtls_x509_crt_verify_max:"data_files/dir-maxpath/00.crt":"data_files/dir-maxpath":MBEDTLS_X509_MAX_INTERMEDIATE_CA:0:0
X509 CRT verify long chain (max intermediate CA, untrusted)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
mbedtls_x509_crt_verify_max:"data_files/test-ca2.crt":"data_files/dir-maxpath":MBEDTLS_X509_MAX_INTERMEDIATE_CA-1:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED
X509 CRT verify long chain (max intermediate CA + 1)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Only return VERIFY_FAILED from a single point Everything else is a fatal error. Also improve documentation about that for the vrfy callback.
2017-06-26 10:11:49 +02:00
mbedtls_x509_crt_verify_max:"data_files/dir-maxpath/00.crt":"data_files/dir-maxpath":MBEDTLS_X509_MAX_INTERMEDIATE_CA+1:MBEDTLS_ERR_X509_FATAL_ERROR:-1
Add test for limit on intermediate certificates Inspired by test code provided by Nicholas Wilson in PR #351. The test will fail if someone sets MAX_INTERMEDIATE_CA to a value larger than 18 (default is 8), which is hopefully unlikely and can easily be fixed by running long.sh again with a larger value if it ever happens. Current behaviour is suboptimal as flags are not set, but currently the goal is only to document/test existing behaviour.
2017-06-05 13:49:44 +02:00
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 16:17:27 +02:00
X509 CRT verify chain #1 (zero pathlen intermediate)
Added test case for pathlen constrains in intermediate certificates
2015-10-11 10:25:22 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert14.crt data_files/dir4/cert13.crt data_files/dir4/cert12.crt":"data_files/dir4/cert11.crt":MBEDTLS_X509_BADCERT_NOT_TRUSTED:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"":0
Added test case for pathlen constrains in intermediate certificates
2015-10-11 10:25:22 +02:00
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 16:17:27 +02:00
X509 CRT verify chain #2 (zero pathlen root)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert23.crt data_files/dir4/cert22.crt":"data_files/dir4/cert21.crt":MBEDTLS_X509_BADCERT_NOT_TRUSTED:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"":0
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 16:17:27 +02:00
X509 CRT verify chain #3 (nonzero pathlen root)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert34.crt data_files/dir4/cert33.crt data_files/dir4/cert32.crt":"data_files/dir4/cert31.crt":MBEDTLS_X509_BADCERT_NOT_TRUSTED:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"":0
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 16:17:27 +02:00
X509 CRT verify chain #4 (nonzero pathlen intermediate)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert45.crt data_files/dir4/cert44.crt data_files/dir4/cert43.crt data_files/dir4/cert42.crt":"data_files/dir4/cert41.crt":MBEDTLS_X509_BADCERT_NOT_TRUSTED:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"":0
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 16:17:27 +02:00
X509 CRT verify chain #5 (nonzero maxpathlen intermediate)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert54.crt data_files/dir4/cert53.crt data_files/dir4/cert52.crt":"data_files/dir4/cert51.crt":0:0:"":0
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 16:17:27 +02:00
X509 CRT verify chain #6 (nonzero maxpathlen root)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert63.crt data_files/dir4/cert62.crt":"data_files/dir4/cert61.crt":0:0:"":0
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 16:17:27 +02:00
X509 CRT verify chain #7 (maxpathlen root, self signed in path)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert74.crt data_files/dir4/cert73.crt data_files/dir4/cert72.crt":"data_files/dir4/cert71.crt":0:0:"":0
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 16:17:27 +02:00
X509 CRT verify chain #8 (self signed maxpathlen root)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert61.crt data_files/dir4/cert63.crt data_files/dir4/cert62.crt":"data_files/dir4/cert61.crt":0:0:"":0
Additional corner cases for testing pathlen constrains. Just in case.
2015-10-11 16:17:27 +02:00
Add test case for root with max_pathlen=0 This was already working but not tested so far (Test case from previous commit still failing.) Test certificates generated with: programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert91.key programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert92.key programs/x509/cert_write serial=91 output_file=cert91.crt is_ca=1 \ issuer_key=cert91.key issuer_name="CN=Root 9,O=mbed TLS,C=UK" \ selfsign=1 max_pathlen=0 programs/x509/cert_write serial=92 output_file=cert92.crt \ issuer_key=cert91.key issuer_name="CN=Root 9,O=mbed TLS,C=UK" \ subject_key=cert92.key subject_name="CN=EE 92,O=mbed TLS,C=UK" mv cert9?.crt tests/data_files/dir4 rm cert9?.key
2015-11-19 10:52:12 +01:00
X509 CRT verify chain #9 (zero pathlen first intermediate, valid)
Add test case for first intermediate max_pathlen=0 !!! This test case is currently failing !!! (See fix in next-next commit.) Test certificates generated with the following script: programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert81.key programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert82.key programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert83.key programs/x509/cert_write serial=81 output_file=cert81.crt is_ca=1 \ issuer_key=cert81.key issuer_name="CN=Root 8,O=mbed TLS,C=UK" \ selfsign=1 programs/x509/cert_write serial=82 output_file=cert82.crt is_ca=1 \ issuer_key=cert81.key issuer_name="CN=Root 8,O=mbed TLS,C=UK" \ subject_key=cert82.key subject_name="CN=Int 82,O=mbed TLS,C=UK" \ max_pathlen=0 programs/x509/cert_write serial=83 output_file=cert83.crt \ issuer_key=cert82.key issuer_name="CN=Int 82,O=mbed TLS,C=UK" \ subject_key=cert83.key subject_name="CN=EE 83,O=mbed TLS,C=UK" mv cert8?.crt tests/data_files/dir4 rm cert8?.key
2015-11-19 10:46:07 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert83.crt data_files/dir4/cert82.crt":"data_files/dir4/cert81.crt":0:0:"":0
Add test case for first intermediate max_pathlen=0 !!! This test case is currently failing !!! (See fix in next-next commit.) Test certificates generated with the following script: programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert81.key programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert82.key programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert83.key programs/x509/cert_write serial=81 output_file=cert81.crt is_ca=1 \ issuer_key=cert81.key issuer_name="CN=Root 8,O=mbed TLS,C=UK" \ selfsign=1 programs/x509/cert_write serial=82 output_file=cert82.crt is_ca=1 \ issuer_key=cert81.key issuer_name="CN=Root 8,O=mbed TLS,C=UK" \ subject_key=cert82.key subject_name="CN=Int 82,O=mbed TLS,C=UK" \ max_pathlen=0 programs/x509/cert_write serial=83 output_file=cert83.crt \ issuer_key=cert82.key issuer_name="CN=Int 82,O=mbed TLS,C=UK" \ subject_key=cert83.key subject_name="CN=EE 83,O=mbed TLS,C=UK" mv cert8?.crt tests/data_files/dir4 rm cert8?.key
2015-11-19 10:46:07 +01:00
Add test case for root with max_pathlen=0 This was already working but not tested so far (Test case from previous commit still failing.) Test certificates generated with: programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert91.key programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert92.key programs/x509/cert_write serial=91 output_file=cert91.crt is_ca=1 \ issuer_key=cert91.key issuer_name="CN=Root 9,O=mbed TLS,C=UK" \ selfsign=1 max_pathlen=0 programs/x509/cert_write serial=92 output_file=cert92.crt \ issuer_key=cert91.key issuer_name="CN=Root 9,O=mbed TLS,C=UK" \ subject_key=cert92.key subject_name="CN=EE 92,O=mbed TLS,C=UK" mv cert9?.crt tests/data_files/dir4 rm cert9?.key
2015-11-19 10:52:12 +01:00
X509 CRT verify chain #10 (zero pathlen root, valid)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert92.crt":"data_files/dir4/cert91.crt":0:0:"":0
Add test case for root with max_pathlen=0 This was already working but not tested so far (Test case from previous commit still failing.) Test certificates generated with: programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert91.key programs/pkey/gen_key type=ec ec_curve=secp256r1 filename=cert92.key programs/x509/cert_write serial=91 output_file=cert91.crt is_ca=1 \ issuer_key=cert91.key issuer_name="CN=Root 9,O=mbed TLS,C=UK" \ selfsign=1 max_pathlen=0 programs/x509/cert_write serial=92 output_file=cert92.crt \ issuer_key=cert91.key issuer_name="CN=Root 9,O=mbed TLS,C=UK" \ subject_key=cert92.key subject_name="CN=EE 92,O=mbed TLS,C=UK" mv cert9?.crt tests/data_files/dir4 rm cert9?.key
2015-11-19 10:52:12 +01:00
Set deterministic flags for NULL profile Previously flags was left to whatever value it had before. It's cleaner to make sure it has a definite value, and all bits set looks like the safest way for when it went very wrong.
2017-05-23 10:13:40 +02:00
X509 CRT verify chain #11 (valid chain, missing profile)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/dir4/cert92.crt":"data_files/dir4/cert91.crt":-1:MBEDTLS_ERR_X509_BAD_INPUT_DATA:"nonesuch":0
Set deterministic flags for NULL profile Previously flags was left to whatever value it had before. It's cleaner to make sure it has a definite value, and all bits set looks like the safest way for when it went very wrong.
2017-05-23 10:13:40 +02:00
Add tests for profile enforcement Now all checks related to profile are covered in: - verify_with_profile() - verify_child() - verify_top() (that's 10 lines that were previously not covered) Leaving aside profile enforcement in CRLs for now, as the focus is on preparing to refactor cert verification.
2017-05-23 11:29:29 +02:00
X509 CRT verify chain #12 (suiteb profile, RSA root)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP192R1_ENABLED:MBEDTLS_SHA1_C
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/server3.crt":"data_files/test-ca.crt":MBEDTLS_X509_BADCERT_BAD_MD|MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"suiteb":0
Add tests for profile enforcement Now all checks related to profile are covered in: - verify_with_profile() - verify_child() - verify_top() (that's 10 lines that were previously not covered) Leaving aside profile enforcement in CRLs for now, as the focus is on preparing to refactor cert verification.
2017-05-23 11:29:29 +02:00
X509 CRT verify chain #13 (RSA only profile, EC root)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/server4.crt":"data_files/test-ca2.crt":MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"rsa3072":0
Add tests for profile enforcement Now all checks related to profile are covered in: - verify_with_profile() - verify_child() - verify_top() (that's 10 lines that were previously not covered) Leaving aside profile enforcement in CRLs for now, as the focus is on preparing to refactor cert verification.
2017-05-23 11:29:29 +02:00
Add test for profile on trusted EE cert
2017-06-27 13:26:43 +02:00
X509 CRT verify chain #13 (RSA only profile, EC trusted EE)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
mbedtls_x509_crt_verify_chain:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"rsa3072":0
Add tests for profile enforcement Now all checks related to profile are covered in: - verify_with_profile() - verify_child() - verify_top() (that's 10 lines that were previously not covered) Leaving aside profile enforcement in CRLs for now, as the focus is on preparing to refactor cert verification.
2017-05-23 11:29:29 +02:00
X509 CRT verify chain #14 (RSA-3072 profile, root key too small)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/server1.crt":"data_files/test-ca.crt":MBEDTLS_X509_BADCERT_BAD_MD|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"rsa3072":0
Add tests for profile enforcement Now all checks related to profile are covered in: - verify_with_profile() - verify_child() - verify_top() (that's 10 lines that were previously not covered) Leaving aside profile enforcement in CRLs for now, as the focus is on preparing to refactor cert verification.
2017-05-23 11:29:29 +02:00
X509 CRT verify chain #15 (suiteb profile, rsa intermediate)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/server7.crt data_files/test-int-ca.crt":"data_files/test-ca2.crt":MBEDTLS_X509_BADCERT_BAD_PK:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"suiteb":0
Add tests for profile enforcement Now all checks related to profile are covered in: - verify_with_profile() - verify_child() - verify_top() (that's 10 lines that were previously not covered) Leaving aside profile enforcement in CRLs for now, as the focus is on preparing to refactor cert verification.
2017-05-23 11:29:29 +02:00
X509 CRT verify chain #16 (RSA-only profile, EC intermediate)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/server8.crt data_files/test-int-ca2.crt":"data_files/test-ca.crt":MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"rsa3072":0
Add tests for profile enforcement Now all checks related to profile are covered in: - verify_with_profile() - verify_child() - verify_top() (that's 10 lines that were previously not covered) Leaving aside profile enforcement in CRLs for now, as the focus is on preparing to refactor cert verification.
2017-05-23 11:29:29 +02:00
X509 CRT verify chain #17 (SHA-512 profile)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Add ability to test failing vrfy callback
2017-05-23 12:26:58 +02:00
mbedtls_x509_crt_verify_chain:"data_files/server7.crt data_files/test-int-ca.crt":"data_files/test-ca2.crt":MBEDTLS_X509_BADCERT_BAD_MD:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"sha512":0
Add tests for profile enforcement Now all checks related to profile are covered in: - verify_with_profile() - verify_child() - verify_top() (that's 10 lines that were previously not covered) Leaving aside profile enforcement in CRLs for now, as the focus is on preparing to refactor cert verification.
2017-05-23 11:29:29 +02:00
Add tests for fatal error in vrfy callback This shows inconsistencies in how flags are handled when callback fails: - sometimes the flags set by the callback are transmitted, sometimes not - when the cert if not trusted, sometimes BADCERT_NOT_TRUSTED is set, sometimes not This adds coverage for 9 lines and 9 branches. Now all lines related to callback failure are covered.
2017-05-23 12:58:53 +02:00
X509 CRT verify chain #18 (len=1, vrfy fatal on depth 1)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA512_C
mbedtls_x509_crt_verify_chain:"data_files/server5.crt":"data_files/test-ca2.crt":-1:-2:"":2
X509 CRT verify chain #19 (len=0, vrfy fatal on depth 0)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA512_C
mbedtls_x509_crt_verify_chain:"data_files/server5.crt":"data_files/test-ca2.crt":-1:-1:"":1
X509 CRT verify chain #20 (len=1, vrfy fatal on depth 0)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA512_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
mbedtls_x509_crt_verify_chain:"data_files/server5.crt":"data_files/test-ca.crt":-1:-1:"":1
X509 CRT verify chain #21 (len=3, vrfy fatal on depth 3)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
mbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca.crt":-1:-4:"":8
X509 CRT verify chain #22 (len=3, vrfy fatal on depth 2)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
mbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca.crt":-1:-3:"":4
X509 CRT verify chain #23 (len=3, vrfy fatal on depth 1)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
mbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca.crt":-1:-2:"":2
X509 CRT verify chain #24 (len=3, vrfy fatal on depth 0)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
mbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca.crt":-1:-1:"":1
X509 CRT verify chain #25 (len=3, vrfy fatal on depth 3, untrusted)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
mbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca2.crt":-1:-4:"":8
Test and fix x509_oid functions
2014-03-28 16:06:35 +01:00
X509 OID description #1
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_oid_desc:"2b06010505070301":"TLS Web Server Authentication"
Test and fix x509_oid functions
2014-03-28 16:06:35 +01:00
X509 OID description #2
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_oid_desc:"2b0601050507030f":"notfound"
Test and fix x509_oid functions
2014-03-28 16:06:35 +01:00
X509 OID description #3
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_oid_desc:"2b0601050507030100":"notfound"
Test and fix x509_oid functions
2014-03-28 16:06:35 +01:00
X509 OID numstring #1 (wide buffer)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_oid_numstr:"2b06010505070301":"1.3.6.1.5.5.7.3.1":20:17
Test and fix x509_oid functions
2014-03-28 16:06:35 +01:00
X509 OID numstring #2 (buffer just fits)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_oid_numstr:"2b06010505070301":"1.3.6.1.5.5.7.3.1":18:17
Test and fix x509_oid functions
2014-03-28 16:06:35 +01:00
X509 OID numstring #3 (buffer too small)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_oid_numstr:"2b06010505070301":"1.3.6.1.5.5.7.3.1":17:MBEDTLS_ERR_OID_BUF_TOO_SMALL
Test and fix x509_oid functions
2014-03-28 16:06:35 +01:00
X509 OID numstring #4 (larger number)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_oid_numstr:"2a864886f70d":"1.2.840.113549":15:14
Test and fix x509_oid functions
2014-03-28 16:06:35 +01:00
X509 OID numstring #5 (arithmetic overflow)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_oid_numstr:"2a8648f9f8f7f6f5f4f3f2f1f001":"":100:MBEDTLS_ERR_OID_BUF_TOO_SMALL
Add x509_crt_check_key_usage()
2014-04-09 09:50:03 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT keyUsage #1 (no extension, expected KU)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Fix some X509 macro names For some reason, during the great renaming, some names that should have been prefixed with MBEDTLS_X509_ have only been prefixed with MBEDTLS_
2015-04-20 13:19:02 +02:00
x509_check_key_usage:"data_files/server1.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT:0
Add x509_crt_check_key_usage()
2014-04-09 09:50:03 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT keyUsage #2 (no extension, surprising KU)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509_check_key_usage:"data_files/server1.crt":MBEDTLS_X509_KU_KEY_CERT_SIGN:0
Add x509_crt_check_key_usage()
2014-04-09 09:50:03 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT keyUsage #3 (extension present, no KU)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Add x509_crt_check_key_usage()
2014-04-09 09:50:03 +02:00
x509_check_key_usage:"data_files/server1.key_usage.crt":0:0
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT keyUsage #4 (extension present, single KU present)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE:0
Add x509_crt_check_key_usage()
2014-04-09 09:50:03 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT keyUsage #5 (extension present, single KU absent)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_KEY_CERT_SIGN:MBEDTLS_ERR_X509_BAD_INPUT_DATA
Add x509_crt_check_key_usage()
2014-04-09 09:50:03 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT keyUsage #6 (extension present, combined KU present)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Fix some X509 macro names For some reason, during the great renaming, some names that should have been prefixed with MBEDTLS_X509_ have only been prefixed with MBEDTLS_
2015-04-20 13:19:02 +02:00
x509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT:0
Add x509_crt_check_key_usage()
2014-04-09 09:50:03 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT keyUsage #7 (extension present, combined KU both absent)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_KEY_CERT_SIGN|MBEDTLS_X509_KU_CRL_SIGN:MBEDTLS_ERR_X509_BAD_INPUT_DATA
Add x509_crt_check_key_usage()
2014-04-09 09:50:03 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT keyUsage #8 (extension present, combined KU one absent)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Fix some X509 macro names For some reason, during the great renaming, some names that should have been prefixed with MBEDTLS_X509_ have only been prefixed with MBEDTLS_
2015-04-20 13:19:02 +02:00
x509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_KEY_ENCIPHERMENT|MBEDTLS_X509_KU_KEY_AGREEMENT:MBEDTLS_ERR_X509_BAD_INPUT_DATA
Add x509_crt_check_key_usage()
2014-04-09 09:50:03 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT keyUsage #9 (extension present, decOnly allowed absent)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Adapt check_key_usage to new weird bits
2015-06-23 10:48:44 +02:00
x509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT|MBEDTLS_X509_KU_DECIPHER_ONLY:0
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT keyUsage #10 (extension present, decOnly non-allowed present)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Adapt check_key_usage to new weird bits
2015-06-23 10:48:44 +02:00
x509_check_key_usage:"data_files/keyUsage.decipherOnly.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT:MBEDTLS_ERR_X509_BAD_INPUT_DATA
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT keyUsage #11 (extension present, decOnly allowed present)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Adapt check_key_usage to new weird bits
2015-06-23 10:48:44 +02:00
x509_check_key_usage:"data_files/keyUsage.decipherOnly.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT|MBEDTLS_X509_KU_DECIPHER_ONLY:0
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT extendedKeyUsage #1 (no extension, serverAuth)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_check_extended_key_usage:"data_files/server5.crt":"2b06010505070301":0
Add x509_crt_check_extended_key_usage()
2014-04-10 17:53:56 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT extendedKeyUsage #2 (single value, present)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_check_extended_key_usage:"data_files/server5.eku-srv.crt":"2b06010505070301":0
Add x509_crt_check_extended_key_usage()
2014-04-10 17:53:56 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT extendedKeyUsage #3 (single value, absent)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_check_extended_key_usage:"data_files/server5.eku-cli.crt":"2b06010505070301":MBEDTLS_ERR_X509_BAD_INPUT_DATA
Add x509_crt_check_extended_key_usage()
2014-04-10 17:53:56 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT extendedKeyUsage #4 (two values, first)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_check_extended_key_usage:"data_files/server5.eku-srv_cli.crt":"2b06010505070301":0
Add x509_crt_check_extended_key_usage()
2014-04-10 17:53:56 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT extendedKeyUsage #5 (two values, second)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_check_extended_key_usage:"data_files/server5.eku-srv_cli.crt":"2b06010505070302":0
Add x509_crt_check_extended_key_usage()
2014-04-10 17:53:56 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT extendedKeyUsage #6 (two values, other)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_check_extended_key_usage:"data_files/server5.eku-srv_cli.crt":"2b06010505070303":MBEDTLS_ERR_X509_BAD_INPUT_DATA
Add x509_crt_check_extended_key_usage()
2014-04-10 17:53:56 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT extendedKeyUsage #7 (any, random)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_check_extended_key_usage:"data_files/server5.eku-cs_any.crt":"2b060105050703ff":0
Add x509_crt_check_extended_key_usage()
2014-04-10 17:53:56 +02:00
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (good, all defaults)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509_parse_rsassa_pss_params:"":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (wrong initial tag)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509_parse_rsassa_pss_params:"":MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (unknown tag in top-level sequence)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a400":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (good, HashAlg SHA256)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a00d300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA256:MBEDTLS_MD_SHA1:20:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (good, explicit HashAlg = default)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a009300706052b0e03021a":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (HashAlg wrong len #1)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a00a300706052b0e03021a":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (HashAlg wrong len #2)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a00a300706052b0e03021a00":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (HashAlg with parameters)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a00f300d06096086480165030402013000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA256:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_INVALID_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
Fix typos in comments
2014-06-25 14:45:24 +02:00
X509 RSASSA-PSS parameters ASN1 (HashAlg unknown OID)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a00d300b06096086480165030402ff":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA256:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_OID_NOT_FOUND
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (good, MGAlg = MGF1-SHA256)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a11a301806092a864886f70d010108300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (good, explicit MGAlg = default)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a116301406092a864886f70d010108300706052b0e03021a":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg wrong len #1)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a11b301806092a864886f70d010108300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg wrong len #2)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a11b301806092a864886f70d010108300b060960864801650304020100":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg AlgId wrong len #1)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a11a301906092a864886f70d010108300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg OID != MGF1)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a11a301806092a864886f70d010109300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_FEATURE_UNAVAILABLE + MBEDTLS_ERR_OID_NOT_FOUND
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong tag)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a11a301806092a864886f70d010108310b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong len #1a)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a10f300d06092a864886f70d0101083000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong len #1b)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a11b301906092a864886f70d010108300c0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params.alg not an OID)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a11a301806092a864886f70d010108300b0709608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params.alg unknown OID)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a11a301806092a864886f70d010108300b06096086480165030402ff":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_OID_NOT_FOUND
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params.params NULL)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a11c301a06092a864886f70d010108300d06096086480165030402010500":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params.params wrong tag)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a11c301a06092a864886f70d010108300d06096086480165030402013000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong len #1c)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a11d301b06092a864886f70d010108300e06096086480165030402010500":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong len #2)
Added needed HASH dependencies to test_suite_x509parse.data
2016-08-07 10:15:29 +02:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a11d301b06092a864886f70d010108300e0609608648016503040201050000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (good, saltLen = 94)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a20302015e":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:94:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (good, explicit saltLen = default)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a203020114":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (saltLen wrong len #1)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a20402015e":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:94:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (saltLen wrong len #2)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a20402015e00":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:94:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (saltLen not an int)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a2023000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:94:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (good, explicit trailerField = default)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a303020101":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (trailerField wrong len #1)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a304020101":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (trailerField wrong len #2)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a30402010100":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (trailerField not an int)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a3023000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
X509 RSASSA-PSS parameters ASN1 (trailerField not 1)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
x509_parse_rsassa_pss_params:"a303020102":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG
Add tests for x509 rsassa_pss params parsing
2014-06-06 14:48:38 +02:00
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (OK)
Rename MBEDTLS_X509_INFO to !MBEDTLS_X509_REMOVE_INFO The introduction of positive options to control the presence of pre-existing functionality breaks the build for users of handwritten configurations. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-10-09 10:19:39 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C:!MBEDTLS_X509_REMOVE_INFO
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
mbedtls_x509_csr_parse:"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":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: ECDSA with SHA1\nEC key size \: 256 bits\n":0
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad first tag)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_parse:"3100":"":MBEDTLS_ERR_X509_INVALID_FORMAT
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad sequence: overlong)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_parse:"3001":"":MBEDTLS_ERR_X509_INVALID_FORMAT
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (total length mistmatch)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_parse:"30010000":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad CRI: not a sequence)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_parse:"30023100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad CRI: overlong)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_parse:"30023001":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad CRI.Version: overlong)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_parse:"30053002020100":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad CRI.Version: not v1)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_parse:"30053003020101":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad CRI.Name: not a sequence)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_parse:"300730050201003100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad CRI.Name: overlong)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_parse:"30083005020100300100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad CRI.Name payload: not a set)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_csr_parse:"3009300702010030023000":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad CRI.Name payload: overlong)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
mbedtls_x509_csr_parse:"300a30080201003002310100":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad SubjectPublicKeyInfo: missing)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
mbedtls_x509_csr_parse:"30143012020100300d310b3009060355040613024e4c":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad SubjectPublicKeyInfo: not a sequence)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
mbedtls_x509_csr_parse:"30163014020100300d310b3009060355040613024e4c3100":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad SubjectPublicKeyInfo: overlong)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
mbedtls_x509_csr_parse:"30173014020100300d310b3009060355040613024e4c300100":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad attributes: missing)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
mbedtls_x509_csr_parse:"3081973081940201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad attributes: bad tag)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
mbedtls_x509_csr_parse:"3081993081960201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edff0500":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad attributes: overlong)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
mbedtls_x509_csr_parse:"30819a3081960201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa00100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad sigAlg: missing)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
mbedtls_x509_csr_parse:"3081c23081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad sigAlg: not a sequence)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
mbedtls_x509_csr_parse:"3081c43081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e03100":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad sigAlg: overlong)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
mbedtls_x509_csr_parse:"3081c43081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e03001":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad sigAlg: unknown)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
mbedtls_x509_csr_parse:"3081cd3081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0300906072a8648ce3d04ff":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad sig: missing)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
mbedtls_x509_csr_parse:"3081cd3081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0300906072a8648ce3d0401":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad sig: not a bit string)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
mbedtls_x509_csr_parse:"3081cf3081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0300906072a8648ce3d04010400":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (bad sig: overlong)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
mbedtls_x509_csr_parse:"3081cf3081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0300906072a8648ce3d04010301":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Add tests for x509_csr_parse
2014-06-13 11:13:15 +02:00
X509 CSR ASN.1 (extra data after signature)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Consistently use lower case hex data in X.509 parsing tests
2019-02-12 11:20:42 +01:00
mbedtls_x509_csr_parse:"308201193081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0300906072a8648ce3d04010349003046022100b49fd8c8f77abfa871908dfbe684a08a793d0f490a43d86fcf2086e4f24bb0c2022100f829d5ccd3742369299e6294394717c4b723a0f68b44e831b6e6c3bcabf9724300":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
x509_crt_parse() did not increase total_failed on PEM error Result was that PEM errors in files with multiple certificates were not detectable by the user.
2014-09-26 14:53:04 +02:00
Add CSR DER tests with incorrect version
2017-03-07 11:57:34 +01:00
X509 CSR ASN.1 (invalid version overflow)
Convert further x509parse tests to use lower-case hex data
2019-06-03 10:48:09 +02:00
mbedtls_x509_csr_parse:"3008300602047fffffff":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
Add CSR DER tests with incorrect version
2017-03-07 11:57:34 +01:00
x509_crt_parse() did not increase total_failed on PEM error Result was that PEM errors in files with multiple certificates were not detectable by the user.
2014-09-26 14:53:04 +02:00
X509 File parse (no issues)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
x509_crt_parse() did not increase total_failed on PEM error Result was that PEM errors in files with multiple certificates were not detectable by the user.
2014-09-26 14:53:04 +02:00
x509parse_crt_file:"data_files/server7_int-ca.crt":0
X509 File parse (extra space in one certificate)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
x509_crt_parse() did not increase total_failed on PEM error Result was that PEM errors in files with multiple certificates were not detectable by the user.
2014-09-26 14:53:04 +02:00
x509parse_crt_file:"data_files/server7_pem_space.crt":1
X509 File parse (all certificates fail)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
x509parse_crt_file:"data_files/server7_all_space.crt":MBEDTLS_ERR_PEM_INVALID_DATA + MBEDTLS_ERR_BASE64_INVALID_CHARACTER
Accept a trailing space at end of PEM lines With certs being copy-pasted from webmails and all, this will probably become more and more common. closes #226
2015-07-31 11:09:59 +02:00
X509 File parse (trailing spaces, OK)
Fix depends_on:pk_alg in test suites
2017-06-20 09:53:42 +02:00
depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Accept a trailing space at end of PEM lines With certs being copy-pasted from webmails and all, this will probably become more and more common. closes #226
2015-07-31 11:09:59 +02:00
x509parse_crt_file:"data_files/server7_trailing_space.crt":0
Add check for validity of date in x509_get_time()
2016-09-23 14:16:02 +02:00
Add tag check to cert algorithm check Add missing tag check for algorithm parameters when comparing the signature in the description part of the cert against the actual signature whilst loading a certificate. This was found by a certificate (created by fuzzing) that openssl would not verify, but mbedtls would. Regression test added (one of the client certs modified accordingly) Signed-off-by: Paul Elliott <paul.elliott@arm.com>
2020-11-24 18:30:18 +01:00
X509 File parse (Algorithm Params Tag mismatch)
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
x509parse_crt_file:"data_files/cli-rsa-sha256-badalg.crt.der":MBEDTLS_ERR_X509_SIG_MISMATCH
Add check for validity of date in x509_get_time()
2016-09-23 14:16:02 +02:00
X509 Get time (UTC no issues)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"500101000000Z":0:1950:1:1:0:0:0
X509 Get time (Generalized Time no issues)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"99991231235959Z":0:9999:12:31:23:59:59
X509 Get time (UTC year without leap day)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"490229121212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC year with leap day)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121212Z":0:2000:2:29:12:12:12
X509 Get time (UTC invalid day of month #1)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"000132121212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid day of month #2)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"001131121212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid hour)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"001130241212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid min)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"001130236012Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid sec)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"001130235960Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
Add unit tests for X509 certificate date parsing
2017-02-08 15:13:02 +01:00
X509 Get time (UTC without time zone)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121212":0:2000:2:29:12:12:12
X509 Get time (UTC with invalid time zone #1)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121212J":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC with invalid time zone #2)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121212+0300":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (Date with invalid tag)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_CONTEXT_SPECIFIC:"000229121212":MBEDTLS_ERR_X509_INVALID_DATE+MBEDTLS_ERR_ASN1_UNEXPECTED_TAG:0:0:0:0:0:0
X509 Get time (UTC, truncated)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (Generalized Time, truncated)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"20000229121":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC without seconds)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0002291212":MBEDTLS_ERR_X509_INVALID_DATE:2000:2:29:12:12:0
X509 Get time (UTC without seconds and with invalid time zone #1)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0002291212J":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC without second and with invalid time zone #2)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0002291212+0300":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid character in year)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0\1130231212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid character in month)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"001%30231212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid character in day)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0011`0231212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid character in hour)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0011302h1212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid character in min)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"00113023u012Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
X509 Get time (UTC invalid character in sec)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0011302359n0Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
Improve leap year test names in x509parse.data
2017-10-06 18:05:24 +02:00
X509 Get time (Generalized Time, year multiple of 100 but not 400 is not a leap year)
Correctly handle leap year in x509_date_is_valid() This patch ensures that invalid dates on leap years with 100 or 400 years intervals are handled correctly.
2016-11-21 16:38:02 +01:00
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"19000229000000Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
Improve leap year test names in x509parse.data
2017-10-06 18:05:24 +02:00
X509 Get time (Generalized Time, year multiple of 4 but not 100 is a leap year)
Correctly handle leap year in x509_date_is_valid() This patch ensures that invalid dates on leap years with 100 or 400 years intervals are handled correctly.
2016-11-21 16:38:02 +01:00
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"19920229000000Z":0:1992:2:29:0:0:0
Improve leap year test names in x509parse.data
2017-10-06 18:05:24 +02:00
X509 Get time (Generalized Time, year multiple of 400 is a leap year)
Correctly handle leap year in x509_date_is_valid() This patch ensures that invalid dates on leap years with 100 or 400 years intervals are handled correctly.
2016-11-21 16:38:02 +01:00
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"20000229000000Z":0:2000:2:29:0:0:0
X509 Get time (Generalized Time invalid leap year not multiple of 4, 100 or 400)
depends_on:MBEDTLS_X509_USE_C
x509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"19910229000000Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
Add unit tests for X509 certificate date parsing
2017-02-08 15:13:02 +01:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verify restart: trusted EE, max_ops=0 (disabled)
Add tests for verify_restartable() For selection of test cases, see comments added in the commit. It makes the most sense to test with chains using ECC only, so for the chain of length 2 we use server10 -> int-ca3 -> int-ca2 and trust int-ca2 directly. Note: server10.crt was created by copying server10_int3_int-ca2.crt and manually truncating it to remove the intermediates. That base can now be used to create derived certs (without or with a chain) in a programmatic way.
2017-07-14 11:05:59 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
x509_verify_restart:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":0:0:0:0:0
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verify restart: trusted EE, max_ops=1
Make verify() actually restartable
2017-08-14 18:04:19 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
x509_verify_restart:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":0:0:1:0:0
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verify restart: no intermediate, max_ops=0 (disabled)
Add tests for verify_restartable() For selection of test cases, see comments added in the commit. It makes the most sense to test with chains using ECC only, so for the chain of length 2 we use server10 -> int-ca3 -> int-ca2 and trust int-ca2 directly. Note: server10.crt was created by copying server10_int3_int-ca2.crt and manually truncating it to remove the intermediates. That base can now be used to create derived certs (without or with a chain) in a programmatic way.
2017-07-14 11:05:59 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
x509_verify_restart:"data_files/server5.crt":"data_files/test-ca2.crt":0:0:0:0:0
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verify restart: no intermediate, max_ops=1
Make verify() actually restartable
2017-08-14 18:04:19 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
x509_verify_restart:"data_files/server5.crt":"data_files/test-ca2.crt":0:0:1:100:10000
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verify restart: no intermediate, max_ops=40000
Make verify() actually restartable
2017-08-14 18:04:19 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
x509_verify_restart:"data_files/server5.crt":"data_files/test-ca2.crt":0:0:40000:0:0
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verify restart: no intermediate, max_ops=500
Make verify() actually restartable
2017-08-14 18:04:19 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
x509_verify_restart:"data_files/server5.crt":"data_files/test-ca2.crt":0:0:500:20:80
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verify restart: no intermediate, badsign, max_ops=0 (disabled)
Add tests for verify_restartable() For selection of test cases, see comments added in the commit. It makes the most sense to test with chains using ECC only, so for the chain of length 2 we use server10 -> int-ca3 -> int-ca2 and trust int-ca2 directly. Note: server10.crt was created by copying server10_int3_int-ca2.crt and manually truncating it to remove the intermediates. That base can now be used to create derived certs (without or with a chain) in a programmatic way.
2017-07-14 11:05:59 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
x509_verify_restart:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:0:0:0
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verify restart: no intermediate, badsign, max_ops=1
Make verify() actually restartable
2017-08-14 18:04:19 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
x509_verify_restart:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:1:100:10000
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verify restart: no intermediate, badsign, max_ops=40000
Make verify() actually restartable
2017-08-14 18:04:19 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
x509_verify_restart:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:40000:0:0
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verify restart: no intermediate, badsign, max_ops=500
Make verify() actually restartable
2017-08-14 18:04:19 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
x509_verify_restart:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:500:20:80
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verify restart: one int, max_ops=0 (disabled)
Add tests for verify_restartable() For selection of test cases, see comments added in the commit. It makes the most sense to test with chains using ECC only, so for the chain of length 2 we use server10 -> int-ca3 -> int-ca2 and trust int-ca2 directly. Note: server10.crt was created by copying server10_int3_int-ca2.crt and manually truncating it to remove the intermediates. That base can now be used to create derived certs (without or with a chain) in a programmatic way.
2017-07-14 11:05:59 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":0:0:0:0:0
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verify restart: one int, max_ops=1
Make verify() actually restartable
2017-08-14 18:04:19 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":0:0:1:100:10000
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verify restart: one int, max_ops=30000
Make verify() actually restartable
2017-08-14 18:04:19 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":0:0:30000:0:0
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verify restart: one int, max_ops=500
Make verify() actually restartable
2017-08-14 18:04:19 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":0:0:500:25:100
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verify restart: one int, EE badsign, max_ops=0 (disabled)
Add tests for verify_restartable() For selection of test cases, see comments added in the commit. It makes the most sense to test with chains using ECC only, so for the chain of length 2 we use server10 -> int-ca3 -> int-ca2 and trust int-ca2 directly. Note: server10.crt was created by copying server10_int3_int-ca2.crt and manually truncating it to remove the intermediates. That base can now be used to create derived certs (without or with a chain) in a programmatic way.
2017-07-14 11:05:59 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10-bs_int3.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:0:0:0
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verify restart: one int, EE badsign, max_ops=1
Make verify() actually restartable
2017-08-14 18:04:19 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10-bs_int3.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:1:100:10000
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verify restart: one int, EE badsign, max_ops=30000
Make verify() actually restartable
2017-08-14 18:04:19 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10-bs_int3.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:30000:0:0
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verify restart: one int, EE badsign, max_ops=500
Make verify() actually restartable
2017-08-14 18:04:19 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10-bs_int3.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:500:25:100
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verify restart: one int, int badsign, max_ops=0 (disabled)
Add tests for verify_restartable() For selection of test cases, see comments added in the commit. It makes the most sense to test with chains using ECC only, so for the chain of length 2 we use server10 -> int-ca3 -> int-ca2 and trust int-ca2 directly. Note: server10.crt was created by copying server10_int3_int-ca2.crt and manually truncating it to remove the intermediates. That base can now be used to create derived certs (without or with a chain) in a programmatic way.
2017-07-14 11:05:59 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10_int3-bs.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:0:0:0
Make verify() actually restartable
2017-08-14 18:04:19 +02:00
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verify restart: one int, int badsign, max_ops=1
Make verify() actually restartable
2017-08-14 18:04:19 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10_int3-bs.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:1:100:10000
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verify restart: one int, int badsign, max_ops=30000
Make verify() actually restartable
2017-08-14 18:04:19 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10_int3-bs.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:30000:0:0
Shorten X.509 CRT parsing test names
2019-02-14 13:52:47 +01:00
X509 CRT verify restart: one int, int badsign, max_ops=500
Make verify() actually restartable
2017-08-14 18:04:19 +02:00
depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
x509_verify_restart:"data_files/server10_int3-bs.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:500:25:100
Reference in a new issue Copy permalink