David Benjamin | 4969cc9 | 2016-04-22 15:02:23 -0400 | [diff] [blame] | 1 | /* Copyright (c) 2016, Google Inc. |
| 2 | * |
| 3 | * Permission to use, copy, modify, and/or distribute this software for any |
| 4 | * purpose with or without fee is hereby granted, provided that the above |
| 5 | * copyright notice and this permission notice appear in all copies. |
| 6 | * |
| 7 | * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES |
| 8 | * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF |
| 9 | * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY |
| 10 | * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES |
| 11 | * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION |
| 12 | * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN |
| 13 | * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */ |
| 14 | |
| 15 | #include <stdio.h> |
| 16 | #include <string.h> |
| 17 | |
David Benjamin | c895d6b | 2016-08-11 13:26:41 -0400 | [diff] [blame] | 18 | #include <openssl/asn1.h> |
David Benjamin | 4969cc9 | 2016-04-22 15:02:23 -0400 | [diff] [blame] | 19 | #include <openssl/bytestring.h> |
| 20 | #include <openssl/crypto.h> |
| 21 | #include <openssl/obj.h> |
| 22 | |
Robert Sloan | 69939df | 2017-01-09 10:53:07 -0800 | [diff] [blame] | 23 | #include "../internal.h" |
| 24 | |
David Benjamin | 4969cc9 | 2016-04-22 15:02:23 -0400 | [diff] [blame] | 25 | |
| 26 | static bool TestBasic() { |
| 27 | static const int kNID = NID_sha256WithRSAEncryption; |
| 28 | static const char kShortName[] = "RSA-SHA256"; |
| 29 | static const char kLongName[] = "sha256WithRSAEncryption"; |
| 30 | static const char kText[] = "1.2.840.113549.1.1.11"; |
| 31 | static const uint8_t kDER[] = { |
| 32 | 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x0b, |
| 33 | }; |
| 34 | |
| 35 | CBS cbs; |
| 36 | CBS_init(&cbs, kDER, sizeof(kDER)); |
| 37 | if (OBJ_cbs2nid(&cbs) != kNID || |
| 38 | OBJ_sn2nid(kShortName) != kNID || |
| 39 | OBJ_ln2nid(kLongName) != kNID || |
| 40 | OBJ_txt2nid(kShortName) != kNID || |
| 41 | OBJ_txt2nid(kLongName) != kNID || |
| 42 | OBJ_txt2nid(kText) != kNID) { |
| 43 | return false; |
| 44 | } |
| 45 | |
| 46 | if (strcmp(kShortName, OBJ_nid2sn(kNID)) != 0 || |
| 47 | strcmp(kLongName, OBJ_nid2ln(kNID)) != 0) { |
| 48 | return false; |
| 49 | } |
| 50 | |
| 51 | if (OBJ_sn2nid("this is not an OID") != NID_undef || |
| 52 | OBJ_ln2nid("this is not an OID") != NID_undef || |
| 53 | OBJ_txt2nid("this is not an OID") != NID_undef) { |
| 54 | return false; |
| 55 | } |
| 56 | |
| 57 | CBS_init(&cbs, NULL, 0); |
| 58 | if (OBJ_cbs2nid(&cbs) != NID_undef) { |
| 59 | return false; |
| 60 | } |
| 61 | |
| 62 | // 1.2.840.113554.4.1.72585.2 (https://davidben.net/oid). |
| 63 | static const uint8_t kUnknownDER[] = { |
| 64 | 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x12, 0x04, 0x01, 0x84, 0xb7, 0x09, 0x02, |
| 65 | }; |
| 66 | CBS_init(&cbs, kUnknownDER, sizeof(kUnknownDER)); |
| 67 | if (OBJ_cbs2nid(&cbs) != NID_undef) { |
| 68 | return false; |
| 69 | } |
| 70 | |
| 71 | return true; |
| 72 | } |
| 73 | |
| 74 | static bool TestSignatureAlgorithms() { |
| 75 | int digest_nid, pkey_nid; |
| 76 | if (!OBJ_find_sigid_algs(NID_sha256WithRSAEncryption, &digest_nid, |
| 77 | &pkey_nid) || |
| 78 | digest_nid != NID_sha256 || pkey_nid != NID_rsaEncryption) { |
| 79 | return false; |
| 80 | } |
| 81 | |
| 82 | if (OBJ_find_sigid_algs(NID_sha256, &digest_nid, &pkey_nid)) { |
| 83 | return false; |
| 84 | } |
| 85 | |
| 86 | int sign_nid; |
| 87 | if (!OBJ_find_sigid_by_algs(&sign_nid, NID_sha256, NID_rsaEncryption) || |
| 88 | sign_nid != NID_sha256WithRSAEncryption) { |
| 89 | return false; |
| 90 | } |
| 91 | |
| 92 | if (OBJ_find_sigid_by_algs(&sign_nid, NID_dsa, NID_rsaEncryption)) { |
| 93 | return false; |
| 94 | } |
| 95 | |
| 96 | return true; |
| 97 | } |
| 98 | |
David Benjamin | c895d6b | 2016-08-11 13:26:41 -0400 | [diff] [blame] | 99 | static bool ExpectObj2Txt(const uint8_t *der, size_t der_len, |
| 100 | bool always_return_oid, const char *expected) { |
| 101 | ASN1_OBJECT obj; |
Robert Sloan | 69939df | 2017-01-09 10:53:07 -0800 | [diff] [blame] | 102 | OPENSSL_memset(&obj, 0, sizeof(obj)); |
David Benjamin | c895d6b | 2016-08-11 13:26:41 -0400 | [diff] [blame] | 103 | obj.data = der; |
| 104 | obj.length = static_cast<int>(der_len); |
| 105 | |
| 106 | int expected_len = static_cast<int>(strlen(expected)); |
| 107 | |
| 108 | int len = OBJ_obj2txt(nullptr, 0, &obj, always_return_oid); |
| 109 | if (len != expected_len) { |
| 110 | fprintf(stderr, |
| 111 | "OBJ_obj2txt of %s with out_len = 0 returned %d, wanted %d.\n", |
| 112 | expected, len, expected_len); |
| 113 | return false; |
| 114 | } |
| 115 | |
| 116 | char short_buf[1]; |
Robert Sloan | 69939df | 2017-01-09 10:53:07 -0800 | [diff] [blame] | 117 | OPENSSL_memset(short_buf, 0xff, sizeof(short_buf)); |
David Benjamin | c895d6b | 2016-08-11 13:26:41 -0400 | [diff] [blame] | 118 | len = OBJ_obj2txt(short_buf, sizeof(short_buf), &obj, always_return_oid); |
| 119 | if (len != expected_len) { |
| 120 | fprintf(stderr, |
| 121 | "OBJ_obj2txt of %s with out_len = 1 returned %d, wanted %d.\n", |
| 122 | expected, len, expected_len); |
| 123 | return false; |
| 124 | } |
| 125 | |
Robert Sloan | 69939df | 2017-01-09 10:53:07 -0800 | [diff] [blame] | 126 | if (OPENSSL_memchr(short_buf, '\0', sizeof(short_buf)) == nullptr) { |
David Benjamin | c895d6b | 2016-08-11 13:26:41 -0400 | [diff] [blame] | 127 | fprintf(stderr, |
| 128 | "OBJ_obj2txt of %s with out_len = 1 did not NUL-terminate the " |
| 129 | "output.\n", |
| 130 | expected); |
| 131 | return false; |
| 132 | } |
| 133 | |
| 134 | char buf[256]; |
| 135 | len = OBJ_obj2txt(buf, sizeof(buf), &obj, always_return_oid); |
| 136 | if (len != expected_len) { |
| 137 | fprintf(stderr, |
| 138 | "OBJ_obj2txt of %s with out_len = 256 returned %d, wanted %d.\n", |
| 139 | expected, len, expected_len); |
| 140 | return false; |
| 141 | } |
| 142 | |
| 143 | if (strcmp(buf, expected) != 0) { |
| 144 | fprintf(stderr, "OBJ_obj2txt returned \"%s\"; wanted \"%s\".\n", buf, |
| 145 | expected); |
| 146 | return false; |
| 147 | } |
| 148 | |
| 149 | return true; |
| 150 | } |
| 151 | |
| 152 | static bool TestObj2Txt() { |
| 153 | // kSHA256WithRSAEncryption is the DER representation of |
| 154 | // 1.2.840.113549.1.1.11, id-sha256WithRSAEncryption. |
| 155 | static const uint8_t kSHA256WithRSAEncryption[] = { |
| 156 | 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x0b, |
| 157 | }; |
| 158 | |
| 159 | // kBasicConstraints is the DER representation of 2.5.29.19, |
| 160 | // id-basicConstraints. |
| 161 | static const uint8_t kBasicConstraints[] = { |
| 162 | 0x55, 0x1d, 0x13, |
| 163 | }; |
| 164 | |
| 165 | // kTestOID is the DER representation of 1.2.840.113554.4.1.72585.0, |
| 166 | // from https://davidben.net/oid. |
| 167 | static const uint8_t kTestOID[] = { |
| 168 | 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x12, 0x04, 0x01, 0x84, 0xb7, 0x09, 0x00, |
| 169 | }; |
| 170 | |
| 171 | if (!ExpectObj2Txt(kSHA256WithRSAEncryption, sizeof(kSHA256WithRSAEncryption), |
| 172 | true /* don't return name */, "1.2.840.113549.1.1.11") || |
| 173 | !ExpectObj2Txt(kSHA256WithRSAEncryption, sizeof(kSHA256WithRSAEncryption), |
| 174 | false /* return name */, "sha256WithRSAEncryption") || |
| 175 | !ExpectObj2Txt(kBasicConstraints, sizeof(kBasicConstraints), |
| 176 | true /* don't return name */, "2.5.29.19") || |
| 177 | !ExpectObj2Txt(kBasicConstraints, sizeof(kBasicConstraints), |
| 178 | false /* return name */, "X509v3 Basic Constraints") || |
| 179 | !ExpectObj2Txt(kTestOID, sizeof(kTestOID), true /* don't return name */, |
| 180 | "1.2.840.113554.4.1.72585.0") || |
| 181 | !ExpectObj2Txt(kTestOID, sizeof(kTestOID), false /* return name */, |
| 182 | "1.2.840.113554.4.1.72585.0") || |
| 183 | // Python depends on the empty OID successfully encoding as the empty |
| 184 | // string. |
| 185 | !ExpectObj2Txt(nullptr, 0, false /* return name */, "") || |
| 186 | !ExpectObj2Txt(nullptr, 0, true /* don't return name */, "")) { |
| 187 | return false; |
| 188 | } |
| 189 | |
| 190 | ASN1_OBJECT obj; |
Robert Sloan | 69939df | 2017-01-09 10:53:07 -0800 | [diff] [blame] | 191 | OPENSSL_memset(&obj, 0, sizeof(obj)); |
David Benjamin | c895d6b | 2016-08-11 13:26:41 -0400 | [diff] [blame] | 192 | |
| 193 | // kNonMinimalOID is kBasicConstraints with the final component non-minimally |
| 194 | // encoded. |
| 195 | static const uint8_t kNonMinimalOID[] = { |
| 196 | 0x55, 0x1d, 0x80, 0x13, |
| 197 | }; |
| 198 | obj.data = kNonMinimalOID; |
| 199 | obj.length = sizeof(kNonMinimalOID); |
| 200 | if (OBJ_obj2txt(NULL, 0, &obj, 0) != -1) { |
| 201 | fprintf(stderr, "OBJ_obj2txt accepted non-minimal OIDs.\n"); |
| 202 | return false; |
| 203 | } |
| 204 | |
| 205 | // kOverflowOID is the DER representation of |
| 206 | // 1.2.840.113554.4.1.72585.18446744073709551616. (The final value is 2^64.) |
| 207 | static const uint8_t kOverflowOID[] = { |
| 208 | 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x12, 0x04, 0x01, 0x84, 0xb7, 0x09, |
| 209 | 0x82, 0x80, 0x80, 0x80, 0x80, 0x80, 0x80, 0x80, 0x80, 0x00, |
| 210 | }; |
| 211 | obj.data = kOverflowOID; |
| 212 | obj.length = sizeof(kOverflowOID); |
| 213 | if (OBJ_obj2txt(NULL, 0, &obj, 0) != -1) { |
| 214 | fprintf(stderr, "OBJ_obj2txt accepted an OID with a large component.\n"); |
| 215 | return false; |
| 216 | } |
| 217 | |
| 218 | // kInvalidOID is a mis-encoded version of kBasicConstraints with the final |
| 219 | // octet having the high bit set. |
| 220 | static const uint8_t kInvalidOID[] = { |
| 221 | 0x55, 0x1d, 0x93, |
| 222 | }; |
| 223 | obj.data = kInvalidOID; |
| 224 | obj.length = sizeof(kInvalidOID); |
| 225 | if (OBJ_obj2txt(NULL, 0, &obj, 0) != -1) { |
| 226 | fprintf(stderr, "OBJ_obj2txt accepted a mis-encoded OID.\n"); |
| 227 | return false; |
| 228 | } |
| 229 | |
| 230 | return true; |
| 231 | } |
| 232 | |
David Benjamin | 4969cc9 | 2016-04-22 15:02:23 -0400 | [diff] [blame] | 233 | int main() { |
| 234 | CRYPTO_library_init(); |
| 235 | |
| 236 | if (!TestBasic() || |
David Benjamin | c895d6b | 2016-08-11 13:26:41 -0400 | [diff] [blame] | 237 | !TestSignatureAlgorithms() || |
| 238 | !TestObj2Txt()) { |
David Benjamin | 4969cc9 | 2016-04-22 15:02:23 -0400 | [diff] [blame] | 239 | return 1; |
| 240 | } |
| 241 | |
| 242 | printf("PASS\n"); |
| 243 | return 0; |
| 244 | } |