1#! /usr/bin/env perl 2# Copyright 2015-2023 The OpenSSL Project Authors. All Rights Reserved. 3# 4# Licensed under the Apache License 2.0 (the "License"). You may not use 5# this file except in compliance with the License. You can obtain a copy 6# in the file LICENSE in the source distribution or at 7# https://www.openssl.org/source/license.html 8 9 10use strict; 11use warnings; 12 13use File::Spec::Functions qw/canonpath/; 14use File::Copy; 15use OpenSSL::Test qw/:DEFAULT srctop_file bldtop_dir ok_nofips with/; 16use OpenSSL::Test::Utils; 17 18setup("test_verify"); 19 20sub verify { 21 my ($cert, $purpose, $trusted, $untrusted, @opts) = @_; 22 my @path = qw(test certs); 23 my @args = qw(openssl verify -auth_level 1); 24 push(@args, "-purpose", $purpose) if $purpose ne ""; 25 push(@args, @opts); 26 for (@$trusted) { push(@args, "-trusted", srctop_file(@path, "$_.pem")) } 27 for (@$untrusted) { push(@args, "-untrusted", srctop_file(@path, "$_.pem")) } 28 push(@args, srctop_file(@path, "$cert.pem")); 29 run(app([@args])); 30} 31 32plan tests => 193; 33 34# Canonical success 35ok(verify("ee-cert", "sslserver", ["root-cert"], ["ca-cert"]), 36 "accept compat trust"); 37 38# Root CA variants 39ok(!verify("ee-cert", "sslserver", [qw(root-nonca)], [qw(ca-cert)]), 40 "fail trusted non-ca root"); 41ok(!verify("ee-cert", "sslserver", [qw(nroot+serverAuth)], [qw(ca-cert)]), 42 "fail server trust non-ca root"); 43ok(!verify("ee-cert", "sslserver", [qw(nroot+anyEKU)], [qw(ca-cert)]), 44 "fail wildcard trust non-ca root"); 45ok(!verify("ee-cert", "sslserver", [qw(root-cert2)], [qw(ca-cert)]), 46 "fail wrong root key"); 47ok(!verify("ee-cert", "sslserver", [qw(root-name2)], [qw(ca-cert)]), 48 "fail wrong root DN"); 49 50# Critical extensions 51 52ok(verify("ee-cert-noncrit-unknown-ext", "", ["root-cert"], ["ca-cert"]), 53 "accept non-critical unknown extension"); 54ok(!verify("ee-cert-crit-unknown-ext", "", ["root-cert"], ["ca-cert"]), 55 "reject critical unknown extension"); 56ok(verify("ee-cert-ocsp-nocheck", "", ["root-cert"], ["ca-cert"]), 57 "accept critical OCSP No Check"); 58 59# Explicit trust/purpose combinations 60# 61ok(verify("ee-cert", "sslserver", [qw(sroot-cert)], [qw(ca-cert)]), 62 "accept server purpose"); 63ok(!verify("ee-cert", "sslserver", [qw(croot-cert)], [qw(ca-cert)]), 64 "fail client purpose"); # beware, questionable non-standard EKU check on trust anchor 65ok(verify("ee-cert", "sslserver", [qw(root+serverAuth)], [qw(ca-cert)]), 66 "accept server trust"); 67ok(verify("ee-cert", "sslserver", [qw(sroot+serverAuth)], [qw(ca-cert)]), 68 "accept server trust with server purpose"); 69ok(verify("ee-cert", "sslserver", [qw(croot+serverAuth)], [qw(ca-cert)]), 70 "accept server trust with client purpose"); 71# Wildcard trust 72ok(verify("ee-cert", "sslserver", [qw(root+anyEKU)], [qw(ca-cert)]), 73 "accept wildcard trust"); 74ok(verify("ee-cert", "sslserver", [qw(sroot+anyEKU)], [qw(ca-cert)]), 75 "accept wildcard trust with server purpose"); 76ok(verify("ee-cert", "sslserver", [qw(croot+anyEKU)], [qw(ca-cert)]), 77 "accept wildcard trust with client purpose"); 78# Inapplicable mistrust 79ok(verify("ee-cert", "sslserver", [qw(root-clientAuth)], [qw(ca-cert)]), 80 "accept client mistrust"); 81ok(verify("ee-cert", "sslserver", [qw(sroot-clientAuth)], [qw(ca-cert)]), 82 "accept client mistrust with server purpose"); 83ok(!verify("ee-cert", "sslserver", [qw(croot-clientAuth)], [qw(ca-cert)]), 84 "fail client mistrust with client purpose"); # beware, questionable non-standard EKU check on trust anchor 85# Inapplicable trust 86ok(!verify("ee-cert", "sslserver", [qw(root+clientAuth)], [qw(ca-cert)]), 87 "fail client trust"); 88ok(!verify("ee-cert", "sslserver", [qw(sroot+clientAuth)], [qw(ca-cert)]), 89 "fail client trust with server purpose"); 90ok(!verify("ee-cert", "sslserver", [qw(croot+clientAuth)], [qw(ca-cert)]), 91 "fail client trust with client purpose"); 92# Server mistrust 93ok(!verify("ee-cert", "sslserver", [qw(root-serverAuth)], [qw(ca-cert)]), 94 "fail rejected EKU"); 95ok(!verify("ee-cert", "sslserver", [qw(sroot-serverAuth)], [qw(ca-cert)]), 96 "fail server mistrust with server purpose"); 97ok(!verify("ee-cert", "sslserver", [qw(croot-serverAuth)], [qw(ca-cert)]), 98 "fail server mistrust with client purpose"); 99# Wildcard mistrust 100ok(!verify("ee-cert", "sslserver", [qw(root-anyEKU)], [qw(ca-cert)]), 101 "fail wildcard mistrust"); 102ok(!verify("ee-cert", "sslserver", [qw(sroot-anyEKU)], [qw(ca-cert)]), 103 "fail wildcard mistrust with server purpose"); 104ok(!verify("ee-cert", "sslserver", [qw(croot-anyEKU)], [qw(ca-cert)]), 105 "fail wildcard mistrust with client purpose"); 106 107# Check that trusted-first is on by setting up paths to different roots 108# depending on whether the intermediate is the trusted or untrusted one. 109# 110ok(verify("ee-cert", "sslserver", [qw(root-serverAuth root-cert2 ca-root2)], 111 [qw(ca-cert)]), 112 "accept trusted-first path"); 113ok(verify("ee-cert", "sslserver", [qw(root-cert root2+serverAuth ca-root2)], 114 [qw(ca-cert)]), 115 "accept trusted-first path with server trust"); 116ok(!verify("ee-cert", "sslserver", [qw(root-cert root2-serverAuth ca-root2)], 117 [qw(ca-cert)]), 118 "fail trusted-first path with server mistrust"); 119ok(!verify("ee-cert", "sslserver", [qw(root-cert root2+clientAuth ca-root2)], 120 [qw(ca-cert)]), 121 "fail trusted-first path with client trust"); 122 123# CA variants 124ok(!verify("ee-cert", "sslserver", [qw(root-cert)], [qw(ca-nonca)]), 125 "fail non-CA untrusted intermediate"); 126ok(!verify("ee-cert", "sslserver", [qw(root-cert)], [qw(ca-nonbc)]), 127 "fail non-CA untrusted intermediate"); 128ok(!verify("ee-cert", "sslserver", [qw(root-cert ca-nonca)], []), 129 "fail non-CA trust-store intermediate"); 130ok(!verify("ee-cert", "sslserver", [qw(root-cert ca-nonbc)], []), 131 "fail non-CA trust-store intermediate"); 132ok(!verify("ee-cert", "sslserver", [qw(root-cert nca+serverAuth)], []), 133 "fail non-CA server trust intermediate"); 134ok(!verify("ee-cert", "sslserver", [qw(root-cert nca+anyEKU)], []), 135 "fail non-CA wildcard trust intermediate"); 136ok(!verify("ee-cert", "sslserver", [qw(root-cert)], [qw(ca-cert2)]), 137 "fail wrong intermediate CA key"); 138ok(!verify("ee-cert", "sslserver", [qw(root-cert)], [qw(ca-name2)]), 139 "fail wrong intermediate CA DN"); 140ok(!verify("ee-cert", "sslserver", [qw(root-cert)], [qw(ca-root2)]), 141 "fail wrong intermediate CA issuer"); 142ok(!verify("ee-cert", "sslserver", [], [qw(ca-cert)], "-partial_chain"), 143 "fail untrusted partial chain"); 144ok(verify("ee-cert", "sslserver", [qw(ca-cert)], [], "-partial_chain"), 145 "accept trusted partial chain"); 146ok(!verify("ee-cert", "sslserver", [qw(ca-expired)], [], "-partial_chain"), 147 "reject expired trusted partial chain"); # this check is beyond RFC 5280 148ok(!verify("ee-cert", "sslserver", [qw(root-expired)], [qw(ca-cert)]), 149 "reject expired trusted root"); # this check is beyond RFC 5280 150ok(verify("ee-cert", "sslserver", [qw(sca-cert)], [], "-partial_chain"), 151 "accept partial chain with server purpose"); 152ok(!verify("ee-cert", "sslserver", [qw(cca-cert)], [], "-partial_chain"), 153 "fail partial chain with client purpose"); # beware, questionable non-standard EKU check on trust anchor 154ok(verify("ee-cert", "sslserver", [qw(ca+serverAuth)], [], "-partial_chain"), 155 "accept server trust partial chain"); 156ok(verify("ee-cert", "sslserver", [qw(cca+serverAuth)], [], "-partial_chain"), 157 "accept server trust client purpose partial chain"); 158ok(verify("ee-cert", "sslserver", [qw(ca-clientAuth)], [], "-partial_chain"), 159 "accept client mistrust partial chain"); 160ok(verify("ee-cert", "sslserver", [qw(ca+anyEKU)], [], "-partial_chain"), 161 "accept wildcard trust partial chain"); 162ok(!verify("ee-cert", "sslserver", [], [qw(ca+serverAuth)], "-partial_chain"), 163 "fail untrusted partial issuer with ignored server trust"); 164ok(!verify("ee-cert", "sslserver", [qw(ca-serverAuth)], [], "-partial_chain"), 165 "fail server mistrust partial chain"); 166ok(!verify("ee-cert", "sslserver", [qw(ca+clientAuth)], [], "-partial_chain"), 167 "fail client trust partial chain"); 168ok(!verify("ee-cert", "sslserver", [qw(ca-anyEKU)], [], "-partial_chain"), 169 "fail wildcard mistrust partial chain"); 170 171# We now test auxiliary trust even for intermediate trusted certs without 172# -partial_chain. Note that "-trusted_first" is now always on and cannot 173# be disabled. 174ok(verify("ee-cert", "sslserver", [qw(root-cert ca+serverAuth)], [qw(ca-cert)]), 175 "accept server trust"); 176ok(verify("ee-cert", "sslserver", [qw(root-cert ca+anyEKU)], [qw(ca-cert)]), 177 "accept wildcard trust"); 178ok(verify("ee-cert", "sslserver", [qw(root-cert sca-cert)], [qw(ca-cert)]), 179 "accept server purpose"); 180ok(verify("ee-cert", "sslserver", [qw(root-cert sca+serverAuth)], [qw(ca-cert)]), 181 "accept server trust and purpose"); 182ok(verify("ee-cert", "sslserver", [qw(root-cert sca+anyEKU)], [qw(ca-cert)]), 183 "accept wildcard trust and server purpose"); 184ok(verify("ee-cert", "sslserver", [qw(root-cert sca-clientAuth)], [qw(ca-cert)]), 185 "accept client mistrust and server purpose"); 186ok(verify("ee-cert", "sslserver", [qw(root-cert cca+serverAuth)], [qw(ca-cert)]), 187 "accept server trust and client purpose"); 188ok(verify("ee-cert", "sslserver", [qw(root-cert cca+anyEKU)], [qw(ca-cert)]), 189 "accept wildcard trust and client purpose"); 190ok(!verify("ee-cert", "sslserver", [qw(root-cert cca-cert)], [qw(ca-cert)]), 191 "fail client purpose intermediate trusted"); # beware, questionable non-standard EKU check on trust anchor 192ok(!verify("ee-cert", "sslserver", [qw(root-cert ca-anyEKU)], [qw(ca-cert)]), 193 "fail wildcard mistrust"); 194ok(!verify("ee-cert", "sslserver", [qw(root-cert ca-serverAuth)], [qw(ca-cert)]), 195 "fail server mistrust"); 196ok(!verify("ee-cert", "sslserver", [qw(root-cert ca+clientAuth)], [qw(ca-cert)]), 197 "fail client trust"); 198ok(!verify("ee-cert", "sslserver", [qw(root-cert sca+clientAuth)], [qw(ca-cert)]), 199 "fail client trust and server purpose"); 200ok(!verify("ee-cert", "sslserver", [qw(root-cert cca+clientAuth)], [qw(ca-cert)]), 201 "fail client trust and client purpose"); 202ok(!verify("ee-cert", "sslserver", [qw(root-cert cca-serverAuth)], [qw(ca-cert)]), 203 "fail server mistrust and client purpose"); 204ok(!verify("ee-cert", "sslserver", [qw(root-cert cca-clientAuth)], [qw(ca-cert)]), 205 "fail client mistrust and client purpose"); 206ok(!verify("ee-cert", "sslserver", [qw(root-cert sca-serverAuth)], [qw(ca-cert)]), 207 "fail server mistrust and server purpose"); 208ok(!verify("ee-cert", "sslserver", [qw(root-cert sca-anyEKU)], [qw(ca-cert)]), 209 "fail wildcard mistrust and server purpose"); 210ok(!verify("ee-cert", "sslserver", [qw(root-cert cca-anyEKU)], [qw(ca-cert)]), 211 "fail wildcard mistrust and client purpose"); 212 213# EE variants 214ok(verify("ee-client", "sslclient", [qw(root-cert)], [qw(ca-cert)]), 215 "accept client chain"); 216ok(!verify("ee-client", "sslserver", [qw(root-cert)], [qw(ca-cert)]), 217 "fail server leaf purpose"); 218ok(!verify("ee-cert", "sslclient", [qw(root-cert)], [qw(ca-cert)]), 219 "fail client leaf purpose"); 220ok(!verify("ee-cert2", "sslserver", [qw(root-cert)], [qw(ca-cert)]), 221 "fail wrong intermediate CA key"); 222ok(!verify("ee-name2", "sslserver", [qw(root-cert)], [qw(ca-cert)]), 223 "fail wrong intermediate CA DN"); 224ok(!verify("ee-expired", "sslserver", [qw(root-cert)], [qw(ca-cert)]), 225 "fail expired leaf"); 226ok(verify("ee-cert", "sslserver", [qw(ee-cert)], [], "-partial_chain"), 227 "accept last-resort direct leaf match"); 228ok(verify("ee-client", "sslclient", [qw(ee-client)], [], "-partial_chain"), 229 "accept last-resort direct leaf match"); 230ok(!verify("ee-cert", "sslserver", [qw(ee-client)], [], "-partial_chain"), 231 "fail last-resort direct leaf non-match"); 232ok(verify("ee-cert", "sslserver", [qw(ee+serverAuth)], [], "-partial_chain"), 233 "accept direct match with server trust"); 234ok(!verify("ee-cert", "sslserver", [qw(ee-serverAuth)], [], "-partial_chain"), 235 "fail direct match with server mistrust"); 236ok(verify("ee-client", "sslclient", [qw(ee+clientAuth)], [], "-partial_chain"), 237 "accept direct match with client trust"); 238ok(!verify("ee-client", "sslclient", [qw(ee-clientAuth)], [], "-partial_chain"), 239 "reject direct match with client mistrust"); 240ok(verify("ee-pathlen", "sslserver", [qw(root-cert)], [qw(ca-cert)]), 241 "accept non-ca with pathlen:0 by default"); 242ok(!verify("ee-pathlen", "sslserver", [qw(root-cert)], [qw(ca-cert)], "-x509_strict"), 243 "reject non-ca with pathlen:0 with strict flag"); 244 245# EE veaiants wrt timestamp signing 246ok(verify("ee-timestampsign-CABforum", "timestampsign", [qw(root-cert)], [qw(ca-cert)]), 247 "accept timestampsign according to CAB forum"); 248ok(!verify("ee-timestampsign-CABforum-noncritxku", "timestampsign", [qw(root-cert)], [qw(ca-cert)]), 249 "fail timestampsign according to CAB forum with extendedKeyUsage not critical"); 250ok(!verify("ee-timestampsign-CABforum-serverauth", "timestampsign", [qw(root-cert)], [qw(ca-cert)]), 251 "fail timestampsign according to CAB forum with serverAuth"); 252ok(!verify("ee-timestampsign-CABforum-anyextkeyusage", "timestampsign", [qw(root-cert)], [qw(ca-cert)]), 253 "fail timestampsign according to CAB forum with anyExtendedKeyUsage"); 254ok(!verify("ee-timestampsign-CABforum-crlsign", "timestampsign", [qw(root-cert)], [qw(ca-cert)]), 255 "fail timestampsign according to CAB forum with cRLSign"); 256ok(!verify("ee-timestampsign-CABforum-keycertsign", "timestampsign", [qw(root-cert)], [qw(ca-cert)]), 257 "fail timestampsign according to CAB forum with keyCertSign"); 258ok(verify("ee-timestampsign-rfc3161", "timestampsign", [qw(root-cert)], [qw(ca-cert)]), 259 "accept timestampsign according to RFC 3161"); 260ok(!verify("ee-timestampsign-rfc3161-noncritxku", "timestampsign", [qw(root-cert)], [qw(ca-cert)]), 261 "fail timestampsign according to RFC 3161 with extendedKeyUsage not critical"); 262ok(verify("ee-timestampsign-rfc3161-digsig", "timestampsign", [qw(root-cert)], [qw(ca-cert)]), 263 "accept timestampsign according to RFC 3161 with digitalSignature"); 264 265# EE variants wrt code signing 266ok(verify("ee-codesign", "codesign", [qw(root-cert)], [qw(ca-cert)]), 267 "accept codesign"); 268ok(!verify("ee-codesign-serverauth", "codesign", [qw(root-cert)], [qw(ca-cert)]), 269 "fail codesign with additional serverAuth"); 270ok(!verify("ee-codesign-anyextkeyusage", "codesign", [qw(root-cert)], [qw(ca-cert)]), 271 "fail codesign with additional anyExtendedKeyUsage"); 272ok(!verify("ee-codesign-crlsign", "codesign", [qw(root-cert)], [qw(ca-cert)]), 273 "fail codesign with additional cRLSign"); 274ok(!verify("ee-codesign-keycertsign", "codesign", [qw(root-cert)], [qw(ca-cert)]), 275 "fail codesign with additional keyCertSign"); 276ok(!verify("ee-codesign-noncritical", "codesign", [qw(root-cert)], [qw(ca-cert)]), 277 "fail codesign without critical KU"); 278ok(!verify("ee-cert", "codesign", [qw(root-cert)], [qw(ca-cert)]), 279 "fail sslserver as code sign"); 280ok(!verify("ee-client", "codesign", [qw(root-cert)], [qw(ca-cert)]), 281 "fail sslclient as codesign"); 282ok(!verify("ee-timestampsign-CABforum", "codesign", [qw(root-cert)], [qw(ca-cert)]), 283 "fail timestampsign according to CAB forum as codesign"); 284ok(!verify("ee-timestampsign-rfc3161", "codesign", [qw(root-cert)], [qw(ca-cert)]), 285 "fail timestampsign according to RFC 3161 as codesign"); 286 287# Proxy certificates 288ok(!verify("pc1-cert", "sslclient", [qw(root-cert)], [qw(ee-client ca-cert)]), 289 "fail to accept proxy cert without -allow_proxy_certs"); 290ok(verify("pc1-cert", "sslclient", [qw(root-cert)], [qw(ee-client ca-cert)], 291 "-allow_proxy_certs"), 292 "accept proxy cert 1"); 293ok(verify("pc2-cert", "sslclient", [qw(root-cert)], [qw(pc1-cert ee-client ca-cert)], 294 "-allow_proxy_certs"), 295 "accept proxy cert 2"); 296ok(!verify("bad-pc3-cert", "sslclient", [qw(root-cert)], [qw(pc1-cert ee-client ca-cert)], 297 "-allow_proxy_certs"), 298 "fail proxy cert with incorrect subject"); 299ok(!verify("bad-pc4-cert", "sslclient", [qw(root-cert)], [qw(pc1-cert ee-client ca-cert)], 300 "-allow_proxy_certs"), 301 "fail proxy cert with incorrect pathlen"); 302ok(verify("pc5-cert", "sslclient", [qw(root-cert)], [qw(pc1-cert ee-client ca-cert)], 303 "-allow_proxy_certs"), 304 "accept proxy cert missing proxy policy"); 305ok(!verify("pc6-cert", "sslclient", [qw(root-cert)], [qw(pc1-cert ee-client ca-cert)], 306 "-allow_proxy_certs"), 307 "failed proxy cert where last CN was added as a multivalue RDN component"); 308 309# Security level tests 310ok(verify("ee-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "2"), 311 "accept RSA 2048 chain at auth level 2"); 312ok(!verify("ee-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "3"), 313 "reject RSA 2048 root at auth level 3"); 314ok(verify("ee-cert", "", ["root-cert-768"], ["ca-cert-768i"], "-auth_level", "0"), 315 "accept RSA 768 root at auth level 0"); 316ok(!verify("ee-cert", "", ["root-cert-768"], ["ca-cert-768i"]), 317 "reject RSA 768 root at auth level 1"); 318ok(verify("ee-cert-768i", "", ["root-cert"], ["ca-cert-768"], "-auth_level", "0"), 319 "accept RSA 768 intermediate at auth level 0"); 320ok(!verify("ee-cert-768i", "", ["root-cert"], ["ca-cert-768"]), 321 "reject RSA 768 intermediate at auth level 1"); 322ok(verify("ee-cert-768", "", ["root-cert"], ["ca-cert"], "-auth_level", "0"), 323 "accept RSA 768 leaf at auth level 0"); 324ok(!verify("ee-cert-768", "", ["root-cert"], ["ca-cert"]), 325 "reject RSA 768 leaf at auth level 1"); 326# 327ok(verify("ee-cert", "", ["root-cert-md5"], ["ca-cert"], "-auth_level", "2"), 328 "accept md5 self-signed TA at auth level 2"); 329ok(verify("ee-cert", "", ["ca-cert-md5-any"], [], "-auth_level", "2"), 330 "accept md5 intermediate TA at auth level 2"); 331ok(verify("ee-cert", "", ["root-cert"], ["ca-cert-md5"], "-auth_level", "0"), 332 "accept md5 intermediate at auth level 0"); 333ok(!verify("ee-cert", "", ["root-cert"], ["ca-cert-md5"]), 334 "reject md5 intermediate at auth level 1"); 335ok(verify("ee-cert-md5", "", ["root-cert"], ["ca-cert"], "-auth_level", "0"), 336 "accept md5 leaf at auth level 0"); 337ok(!verify("ee-cert-md5", "", ["root-cert"], ["ca-cert"]), 338 "reject md5 leaf at auth level 1"); 339 340# Explicit vs named curve tests 341SKIP: { 342 skip "EC is not supported by this OpenSSL build", 7 343 if disabled("ec"); 344 ok(!verify("ee-cert-ec-explicit", "", ["root-cert"], 345 ["ca-cert-ec-named"]), 346 "reject explicit curve leaf with named curve intermediate"); 347 ok(!verify("ee-cert-ec-named-explicit", "", ["root-cert"], 348 ["ca-cert-ec-explicit"]), 349 "reject named curve leaf with explicit curve intermediate"); 350 ok(verify("ee-cert-ec-named-named", "", ["root-cert"], 351 ["ca-cert-ec-named"]), 352 "accept named curve leaf with named curve intermediate"); 353 ok(verify("ee-cert-ec-sha3-224", "", ["root-cert"], ["ca-cert-ec-named"], ), 354 "accept cert generated with EC and SHA3-224"); 355 ok(verify("ee-cert-ec-sha3-256", "", ["root-cert"], ["ca-cert-ec-named"], ), 356 "accept cert generated with EC and SHA3-256"); 357 ok(verify("ee-cert-ec-sha3-384", "", ["root-cert"], ["ca-cert-ec-named"], ), 358 "accept cert generated with EC and SHA3-384"); 359 ok(verify("ee-cert-ec-sha3-512", "", ["root-cert"], ["ca-cert-ec-named"], ), 360 "accept cert generated with EC and SHA3-512"); 361} 362# Same as above but with base provider used for decoding 363SKIP: { 364 my $no_fips = disabled('fips') || ($ENV{NO_FIPS} // 0); 365 my $provconf = srctop_file("test", "fips-and-base.cnf"); 366 my $provpath = bldtop_dir("providers"); 367 my @prov = ("-provider-path", $provpath); 368 369 skip "EC is not supported or FIPS is disabled", 7 370 if disabled("ec") || $no_fips; 371 372 $ENV{OPENSSL_CONF} = $provconf; 373 374 ok(verify("ee-cert-ec-sha3-224", "", ["root-cert"], ["ca-cert-ec-named"], @prov), 375 "accept cert generated with EC and SHA3-224 w/fips"); 376 ok(verify("ee-cert-ec-sha3-256", "", ["root-cert"], ["ca-cert-ec-named"], @prov), 377 "accept cert generated with EC and SHA3-256 w/fips"); 378 ok(verify("ee-cert-ec-sha3-384", "", ["root-cert"], ["ca-cert-ec-named"], @prov), 379 "accept cert generated with EC and SHA3-384 w/fips"); 380 ok(verify("ee-cert-ec-sha3-512", "", ["root-cert"], ["ca-cert-ec-named"], @prov), 381 "accept cert generated with EC and SHA3-512 w/fips"); 382 383 delete $ENV{OPENSSL_CONF}; 384 385 run(test(["fips_version_test", "-config", $provconf, ">3.0.0"]), 386 capture => 1, statusvar => \my $exit); 387 skip "FIPS provider version is too old", 3 388 if !$exit; 389 390 $ENV{OPENSSL_CONF} = $provconf; 391 392 ok(!verify("ee-cert-ec-explicit", "", ["root-cert"], 393 ["ca-cert-ec-named"], @prov), 394 "reject explicit curve leaf with named curve intermediate w/fips"); 395 ok(!verify("ee-cert-ec-named-explicit", "", ["root-cert"], 396 ["ca-cert-ec-explicit"], @prov), 397 "reject named curve leaf with explicit curve intermediate w/fips"); 398 ok(verify("ee-cert-ec-named-named", "", ["root-cert"], 399 ["ca-cert-ec-named"], @prov), 400 "accept named curve leaf with named curve intermediate w/fips"); 401 delete $ENV{OPENSSL_CONF}; 402} 403 404# Depth tests, note the depth limit bounds the number of CA certificates 405# between the trust-anchor and the leaf, so, for example, with a root->ca->leaf 406# chain, depth = 1 is sufficient, but depth == 0 is not. 407# 408ok(verify("ee-cert", "", ["root-cert"], ["ca-cert"], "-verify_depth", "2"), 409 "accept chain with verify_depth 2"); 410ok(verify("ee-cert", "", ["root-cert"], ["ca-cert"], "-verify_depth", "1"), 411 "accept chain with verify_depth 1"); 412ok(!verify("ee-cert", "", ["root-cert"], ["ca-cert"], "-verify_depth", "0"), 413 "reject chain with verify_depth 0"); 414ok(verify("ee-cert", "", ["ca-cert-md5-any"], [], "-verify_depth", "0"), 415 "accept md5 intermediate TA with verify_depth 0"); 416 417# Name Constraints tests. 418 419ok(verify("alt1-cert", "", ["root-cert"], ["ncca1-cert"], ), 420 "Name Constraints everything permitted"); 421 422ok(verify("alt2-cert", "", ["root-cert"], ["ncca2-cert"], ), 423 "Name Constraints nothing excluded"); 424 425ok(verify("alt3-cert", "", ["root-cert"], ["ncca1-cert", "ncca3-cert"], ), 426 "Name Constraints nested test all permitted"); 427 428ok(verify("goodcn1-cert", "", ["root-cert"], ["ncca1-cert"], ), 429 "Name Constraints CNs permitted"); 430 431ok(verify("goodcn2-cert", "", ["root-cert"], ["ncca1-cert"], ), 432 "Name Constraints CNs permitted - no SAN extension"); 433 434ok(!verify("badcn1-cert", "", ["root-cert"], ["ncca1-cert"], ), 435 "Name Constraints CNs not permitted"); 436 437ok(!verify("badalt1-cert", "", ["root-cert"], ["ncca1-cert"], ), 438 "Name Constraints hostname not permitted"); 439 440ok(!verify("badalt2-cert", "", ["root-cert"], ["ncca2-cert"], ), 441 "Name Constraints hostname excluded"); 442 443ok(!verify("badalt3-cert", "", ["root-cert"], ["ncca1-cert"], ), 444 "Name Constraints email address not permitted"); 445 446ok(!verify("badalt4-cert", "", ["root-cert"], ["ncca1-cert"], ), 447 "Name Constraints subject email address not permitted"); 448 449ok(!verify("badalt5-cert", "", ["root-cert"], ["ncca1-cert"], ), 450 "Name Constraints IP address not permitted"); 451 452ok(!verify("badalt6-cert", "", ["root-cert"], ["ncca1-cert"], ), 453 "Name Constraints CN hostname not permitted"); 454 455ok(!verify("badalt7-cert", "", ["root-cert"], ["ncca1-cert"], ), 456 "Name Constraints CN BMPSTRING hostname not permitted"); 457 458ok(!verify("badalt8-cert", "", ["root-cert"], ["ncca1-cert", "ncca3-cert"], ), 459 "Name constraints nested DNS name not permitted 1"); 460 461ok(!verify("badalt9-cert", "", ["root-cert"], ["ncca1-cert", "ncca3-cert"], ), 462 "Name constraints nested DNS name not permitted 2"); 463 464ok(!verify("badalt10-cert", "", ["root-cert"], ["ncca1-cert", "ncca3-cert"], ), 465 "Name constraints nested DNS name excluded"); 466 467ok(!verify("bad-othername-cert", "", ["root-cert"], ["nccaothername-cert"], ), 468 "CVE-2022-4203 type confusion test"); 469 470#Check that we get the expected failure return code 471with({ exit_checker => sub { return shift == 2; } }, 472 sub { 473 ok(verify("bad-othername-namec", "", ["bad-othername-namec-inter"], [], 474 "-partial_chain", "-attime", "1623060000"), 475 "Name constraints bad othername name constraint"); 476 }); 477 478ok(verify("ee-pss-sha1-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "0"), 479 "Accept PSS signature using SHA1 at auth level 0"); 480 481ok(verify("ee-pss-sha256-cert", "", ["root-cert"], ["ca-cert"], ), 482 "CA with PSS signature using SHA256"); 483 484ok(!verify("ee-pss-sha1-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "1"), 485 "Reject PSS signature using SHA1 and auth level 1"); 486 487ok(verify("ee-pss-sha256-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "2"), 488 "PSS signature using SHA256 and auth level 2"); 489 490ok(verify("ee-pss-cert", "", ["root-cert"], ["ca-pss-cert"], ), 491 "CA PSS signature"); 492ok(!verify("ee-pss-wrong1.5-cert", "", ["root-cert"], ["ca-pss-cert"], ), 493 "CA producing regular PKCS#1 v1.5 signature with PSA-PSS key"); 494 495ok(!verify("many-names1", "", ["many-constraints"], ["many-constraints"], ), 496 "Too many names and constraints to check (1)"); 497ok(!verify("many-names2", "", ["many-constraints"], ["many-constraints"], ), 498 "Too many names and constraints to check (2)"); 499ok(!verify("many-names3", "", ["many-constraints"], ["many-constraints"], ), 500 "Too many names and constraints to check (3)"); 501 502ok(verify("some-names1", "", ["many-constraints"], ["many-constraints"], ), 503 "Not too many names and constraints to check (1)"); 504ok(verify("some-names2", "", ["many-constraints"], ["many-constraints"], ), 505 "Not too many names and constraints to check (2)"); 506ok(verify("some-names2", "", ["many-constraints"], ["many-constraints"], ), 507 "Not too many names and constraints to check (3)"); 508ok(verify("root-cert-rsa2", "", ["root-cert-rsa2"], [], "-check_ss_sig"), 509 "Public Key Algorithm rsa instead of rsaEncryption"); 510 511ok(verify("ee-self-signed", "", ["ee-self-signed"], [], "-attime", "1593565200"), 512 "accept trusted self-signed EE cert excluding key usage keyCertSign"); 513ok(verify("ee-ss-with-keyCertSign", "", ["ee-ss-with-keyCertSign"], []), 514 "accept trusted self-signed EE cert with key usage keyCertSign also when strict"); 515 516SKIP: { 517 skip "Ed25519 is not supported by this OpenSSL build", 6 518 if disabled("ecx"); 519 520 # ED25519 certificate from draft-ietf-curdle-pkix-04 521 ok(verify("ee-ed25519", "", ["root-ed25519"], []), 522 "accept X25519 EE cert issued by trusted Ed25519 self-signed CA cert"); 523 524 ok(!verify("ee-ed25519", "", ["root-ed25519"], [], "-x509_strict"), 525 "reject X25519 EE cert in strict mode since AKID is missing"); 526 527 ok(!verify("root-ed25519", "", ["ee-ed25519"], []), 528 "fail Ed25519 CA and EE certs swapped"); 529 530 ok(verify("root-ed25519", "", ["root-ed25519"], []), 531 "accept trusted Ed25519 self-signed CA cert"); 532 533 ok(!verify("ee-ed25519", "", ["ee-ed25519"], []), 534 "fail trusted Ed25519-signed self-issued X25519 cert"); 535 536 ok(verify("ee-ed25519", "", ["ee-ed25519"], [], "-partial_chain"), 537 "accept last-resort direct leaf match Ed25519-signed self-issued cert"); 538 539} 540 541SKIP: { 542 skip "SM2 is not supported by this OpenSSL build", 2 if disabled("sm2"); 543 544 ok_nofips(verify("sm2", "", ["sm2-ca-cert"], [], "-vfyopt", "distid:1234567812345678"), 545 "SM2 ID test"); 546 ok_nofips(verify("sm2", "", ["sm2-ca-cert"], [], "-vfyopt", "hexdistid:31323334353637383132333435363738"), 547 "SM2 hex ID test"); 548} 549 550# Mixed content tests 551my $cert_file = srctop_file('test', 'certs', 'root-cert.pem'); 552my $rsa_file = srctop_file('test', 'certs', 'key-pass-12345.pem'); 553 554SKIP: { 555 my $certplusrsa_file = 'certplusrsa.pem'; 556 my $certplusrsa; 557 558 skip "Couldn't create certplusrsa.pem", 1 559 unless ( open $certplusrsa, '>', $certplusrsa_file 560 and copy($cert_file, $certplusrsa) 561 and copy($rsa_file, $certplusrsa) 562 and close $certplusrsa ); 563 564 ok(run(app([ qw(openssl verify -trusted), $certplusrsa_file, $cert_file ])), 565 'Mixed cert + key file test'); 566} 567 568SKIP: { 569 my $rsapluscert_file = 'rsapluscert.pem'; 570 my $rsapluscert; 571 572 skip "Couldn't create rsapluscert.pem", 1 573 unless ( open $rsapluscert, '>', $rsapluscert_file 574 and copy($rsa_file, $rsapluscert) 575 and copy($cert_file, $rsapluscert) 576 and close $rsapluscert ); 577 578 ok(run(app([ qw(openssl verify -trusted), $rsapluscert_file, $cert_file ])), 579 'Mixed key + cert file test'); 580} 581 582# Certificate Policies 583ok(verify("ee-cert-policies", "", ["root-cert"], ["ca-pol-cert"], 584 "-policy_check", "-policy", "1.3.6.1.4.1.16604.998855.1", 585 "-explicit_policy"), 586 "Certificate policy"); 587 588ok(!verify("ee-cert-policies-bad", "", ["root-cert"], ["ca-pol-cert"], 589 "-policy_check", "-policy", "1.3.6.1.4.1.16604.998855.1", 590 "-explicit_policy"), 591 "Bad certificate policy"); 592
