1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
|
#! /usr/bin/env perl
# Copyright 2020-2023 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
# in the file LICENSE in the source distribution or at
# https://www.openssl.org/source/license.html
use strict;
use warnings;
use OpenSSL::Test qw/:DEFAULT srctop_dir srctop_file bldtop_dir bldtop_file/;
use OpenSSL::Test::Utils;
BEGIN {
setup("test_encoder_decoder");
}
use lib srctop_dir('Configurations');
use lib bldtop_dir('.');
use platform;
my $no_fips = disabled('fips') || ($ENV{NO_FIPS} // 0);
my $rsa_key = srctop_file("test", "certs", "ee-key.pem");
my $pss_key = srctop_file("test", "certs", "ca-pss-key.pem");
plan tests => ($no_fips ? 0 : 5) + 2; # FIPS install test + test
my $conf = srctop_file("test", "default.cnf");
# Check if the specified pattern occurs in the given file
# Returns 1 if the pattern is found and 0 if not
sub find_line_file {
my ($key, $file) = @_;
open(my $in, $file) or return -1;
while (my $line = <$in>) {
if ($line =~ /$key/) {
close($in);
return 1;
}
}
close($in);
return 0;
}
ok(run(test(["endecode_test", "-rsa", $rsa_key,
"-pss", $pss_key,
"-config", $conf,
"-provider", "default"])));
# Run with non-default library context
ok(run(test(["endecode_test", "-rsa", $rsa_key,
"-pss", $pss_key,
"-context",
"-config", $conf,
"-provider", "default"])));
unless ($no_fips) {
# Run with fips library context
my $conf = srctop_file("test", "fips-and-base.cnf");
ok(run(test(["endecode_test", "-rsa", $rsa_key,
"-pss", $pss_key,
"-config", $conf,
"-provider", "fips"])));
SKIP: {
skip "EC disabled", 2 if disabled("ec");
ok(run(app([ 'openssl', 'genpkey', '-algorithm', 'EC',
'-pkeyopt', 'group:P-256', '-text',
'-config', $conf, '-provider', 'fips', '-out', 'ec.txt' ])),
'Print a FIPS provider EC private key');
ok(find_line_file('NIST CURVE: P-256', 'ec.txt') == 1,
'Printing an FIPS provider EC private key');
}
my $no_des = disabled("des");
SKIP: {
skip "MD5 disabled", 2 if disabled("md5");
ok(run(app([ 'openssl', 'genrsa', '-aes128', '-out', 'epki.pem',
'-traditional', '-passout', 'pass:pass' ])),
"rsa encrypted using a non fips algorithm MD5 in pbe");
my $conf2 = srctop_file("test", "default-and-fips.cnf");
ok(run(test(['decoder_propq_test', '-config', $conf2,
'-provider', 'fips', 'epki.pem'])));
}
}
|
