test/cmp_msg_test.c

   1 /*
   2  * Copyright 2007-2019 The OpenSSL Project Authors. All Rights Reserved.
   3  * Copyright Nokia 2007-2019
   4  * Copyright Siemens AG 2015-2019
   5  *
   6  * Licensed under the Apache License 2.0 (the "License").  You may not use
   7  * this file except in compliance with the License.  You can obtain a copy
   8  * in the file LICENSE in the source distribution or at
   9  * https://www.openssl.org/source/license.html
  10  */
  11
  12 #include "cmp_testlib.h"
  13
  14 static const char *server_cert_f;
  15 static const char *pkcs10_f;
  16
  17 typedef struct test_fixture {
  18     const char *test_case_name;
  19     OSSL_CMP_CTX *cmp_ctx;
  20     /* for msg create tests */
  21     int bodytype;
  22     int err_code;
  23     /* for certConf */
  24     int fail_info;
  25     /* for protection tests */
  26     OSSL_CMP_MSG *msg;
  27     int expected;
  28     /* for error and response messages */
  29     OSSL_CMP_PKISI *si;
  30 } CMP_MSG_TEST_FIXTURE;
  31
  32 static unsigned char ref[CMP_TEST_REFVALUE_LENGTH];
  33
  34 static void tear_down(CMP_MSG_TEST_FIXTURE *fixture)
  35 {
  36     OSSL_CMP_CTX_free(fixture->cmp_ctx);
  37     OSSL_CMP_MSG_free(fixture->msg);
  38     OSSL_CMP_PKISI_free(fixture->si);
  39     OPENSSL_free(fixture);
  40 }
  41
  42 #define SET_OPT_UNPROTECTED_SEND(ctx, val) \
  43     OSSL_CMP_CTX_set_option((ctx), OSSL_CMP_OPT_UNPROTECTED_SEND, (val))
  44 static CMP_MSG_TEST_FIXTURE *set_up(const char *const test_case_name)
  45 {
  46     CMP_MSG_TEST_FIXTURE *fixture;
  47
  48     if (!TEST_ptr(fixture = OPENSSL_zalloc(sizeof(*fixture))))
  49         return NULL;
  50     fixture->test_case_name = test_case_name;
  51
  52     if (!TEST_ptr(fixture->cmp_ctx = OSSL_CMP_CTX_new())
  53             || !TEST_true(SET_OPT_UNPROTECTED_SEND(fixture->cmp_ctx, 1))
  54             || !TEST_true(OSSL_CMP_CTX_set1_referenceValue(fixture->cmp_ctx,
  55                                                            ref, sizeof(ref)))) {
  56         tear_down(fixture);
  57         return NULL;
  58     }
  59     return fixture;
  60 }
  61
  62 static EVP_PKEY *newkey = NULL;
  63 static X509 *cert = NULL;
  64
  65 #define EXECUTE_MSG_CREATION_TEST(expr) \
  66     do { \
  67         OSSL_CMP_MSG *msg = NULL; \
  68         int good = fixture->expected != 0 ? \
  69             TEST_ptr(msg = (expr)) && TEST_true(valid_asn1_encoding(msg)) : \
  70             TEST_ptr_null(msg = (expr)); \
  71  \
  72         OSSL_CMP_MSG_free(msg); \
  73         return good; \
  74     } while (0)
  75
  76 /*-
  77  * The following tests call a cmp message creation function.
  78  * if fixture->expected != 0:
  79  *         returns 1 if the message is created and syntactically correct.
  80  * if fixture->expected == 0
  81  *         returns 1 if message creation returns NULL
  82  */
  83 static int execute_certreq_create_test(CMP_MSG_TEST_FIXTURE *fixture)
  84 {
  85     EXECUTE_MSG_CREATION_TEST(ossl_cmp_certReq_new(fixture->cmp_ctx,
  86                                                    fixture->bodytype,
  87                                                    fixture->err_code));
  88 }
  89
  90 static int execute_errormsg_create_test(CMP_MSG_TEST_FIXTURE *fixture)
  91 {
  92     EXECUTE_MSG_CREATION_TEST(ossl_cmp_error_new(fixture->cmp_ctx, fixture->si,
  93                                                  fixture->err_code,
  94                                                  "details", 0));
  95 }
  96
  97 static int execute_rr_create_test(CMP_MSG_TEST_FIXTURE *fixture)
  98 {
  99     EXECUTE_MSG_CREATION_TEST(ossl_cmp_rr_new(fixture->cmp_ctx));
 100 }
 101
 102 static int execute_certconf_create_test(CMP_MSG_TEST_FIXTURE *fixture)
 103 {
 104     EXECUTE_MSG_CREATION_TEST(ossl_cmp_certConf_new
 105                               (fixture->cmp_ctx, fixture->fail_info, NULL));
 106 }
 107
 108 static int execute_genm_create_test(CMP_MSG_TEST_FIXTURE *fixture)
 109 {
 110     EXECUTE_MSG_CREATION_TEST(ossl_cmp_genm_new(fixture->cmp_ctx));
 111 }
 112
 113 static int execute_pollreq_create_test(CMP_MSG_TEST_FIXTURE *fixture)
 114 {
 115     EXECUTE_MSG_CREATION_TEST(ossl_cmp_pollReq_new(fixture->cmp_ctx, 4711));
 116 }
 117
 118 static int execute_pkimessage_create_test(CMP_MSG_TEST_FIXTURE *fixture)
 119 {
 120     EXECUTE_MSG_CREATION_TEST(ossl_cmp_msg_create
 121                               (fixture->cmp_ctx, fixture->bodytype));
 122 }
 123
 124 static int set1_newPkey(OSSL_CMP_CTX *ctx, EVP_PKEY *pkey)
 125 {
 126     if (!EVP_PKEY_up_ref(pkey))
 127         return 0;
 128
 129     if (!OSSL_CMP_CTX_set0_newPkey(ctx, 1, pkey)) {
 130         EVP_PKEY_free(pkey);
 131         return 0;
 132     }
 133     return 1;
 134 }
 135
 136 static int test_cmp_create_ir_protection_set(void)
 137 {
 138     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 139     OSSL_CMP_CTX *ctx = fixture->cmp_ctx;
 140     unsigned char secret[16];
 141
 142     fixture->bodytype = OSSL_CMP_PKIBODY_IR;
 143     fixture->err_code = -1;
 144     fixture->expected = 1;
 145     if (!TEST_int_eq(1, RAND_bytes(secret, sizeof(secret)))
 146             || !TEST_true(SET_OPT_UNPROTECTED_SEND(ctx, 0))
 147             || !TEST_true(set1_newPkey(ctx, newkey))
 148             || !TEST_true(OSSL_CMP_CTX_set1_secretValue(ctx, secret,
 149                                                         sizeof(secret)))) {
 150         tear_down(fixture);
 151         fixture = NULL;
 152     }
 153     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 154     return result;
 155 }
 156
 157 static int test_cmp_create_ir_protection_fails(void)
 158 {
 159     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 160     fixture->bodytype = OSSL_CMP_PKIBODY_IR;
 161     fixture->err_code = -1;
 162     fixture->expected = 0;
 163     if (!TEST_true(OSSL_CMP_CTX_set1_pkey(fixture->cmp_ctx, newkey))
 164             || !TEST_true(SET_OPT_UNPROTECTED_SEND(fixture->cmp_ctx, 0))
 165             || !TEST_true(OSSL_CMP_CTX_set1_clCert(fixture->cmp_ctx, cert))) {
 166         tear_down(fixture);
 167         fixture = NULL;
 168     }
 169     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 170     return result;
 171 }
 172
 173 static int test_cmp_create_cr_without_key(void)
 174 {
 175     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 176     fixture->bodytype = OSSL_CMP_PKIBODY_CR;
 177     fixture->err_code = -1;
 178     fixture->expected = 0;
 179     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 180     return result;
 181 }
 182
 183 static int test_cmp_create_cr(void)
 184 {
 185     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 186     fixture->bodytype = OSSL_CMP_PKIBODY_CR;
 187     fixture->err_code = -1;
 188     fixture->expected = 1;
 189     if (!TEST_true(set1_newPkey(fixture->cmp_ctx, newkey))) {
 190         tear_down(fixture);
 191         fixture = NULL;
 192     }
 193     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 194     return result;
 195 }
 196
 197 static int test_cmp_create_certreq_with_invalid_bodytype(void)
 198 {
 199     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 200     fixture->bodytype = OSSL_CMP_PKIBODY_RR;
 201     fixture->err_code = -1;
 202     fixture->expected = 0;
 203     if (!TEST_true(set1_newPkey(fixture->cmp_ctx, newkey))) {
 204         tear_down(fixture);
 205         fixture = NULL;
 206     }
 207     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 208     return result;
 209 }
 210
 211 static int test_cmp_create_p10cr(void)
 212 {
 213     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 214     OSSL_CMP_CTX *ctx = fixture->cmp_ctx;
 215     X509_REQ *p10cr = NULL;
 216
 217     fixture->bodytype = OSSL_CMP_PKIBODY_P10CR;
 218     fixture->err_code = CMP_R_ERROR_CREATING_P10CR;
 219     fixture->expected = 1;
 220     if (!TEST_ptr(p10cr = load_csr(pkcs10_f))
 221             || !TEST_true(set1_newPkey(ctx, newkey))
 222             || !TEST_true(OSSL_CMP_CTX_set1_p10CSR(ctx, p10cr))) {
 223         tear_down(fixture);
 224         fixture = NULL;
 225     }
 226     X509_REQ_free(p10cr);
 227     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 228     return result;
 229 }
 230
 231 static int test_cmp_create_p10cr_null(void)
 232 {
 233     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 234     fixture->bodytype = OSSL_CMP_PKIBODY_P10CR;
 235     fixture->err_code = CMP_R_ERROR_CREATING_P10CR;
 236     fixture->expected = 0;
 237     if (!TEST_true(set1_newPkey(fixture->cmp_ctx, newkey))) {
 238         tear_down(fixture);
 239         fixture = NULL;
 240     }
 241     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 242     return result;
 243 }
 244
 245 static int test_cmp_create_kur(void)
 246 {
 247     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 248     fixture->bodytype = OSSL_CMP_PKIBODY_KUR;
 249     fixture->err_code = -1;
 250     fixture->expected = 1;
 251     if (!TEST_true(set1_newPkey(fixture->cmp_ctx, newkey))
 252             || !TEST_true(OSSL_CMP_CTX_set1_oldCert(fixture->cmp_ctx, cert))) {
 253         tear_down(fixture);
 254         fixture = NULL;
 255     }
 256     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 257     return result;
 258 }
 259
 260 static int test_cmp_create_kur_without_oldcert(void)
 261 {
 262     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 263     fixture->bodytype = OSSL_CMP_PKIBODY_KUR;
 264     fixture->err_code = -1;
 265     fixture->expected = 0;
 266     if (!TEST_true(set1_newPkey(fixture->cmp_ctx, newkey))) {
 267         tear_down(fixture);
 268         fixture = NULL;
 269     }
 270     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 271     return result;
 272 }
 273
 274 static int test_cmp_create_certconf(void)
 275 {
 276     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 277     fixture->fail_info = 0;
 278     fixture->expected = 1;
 279     if (!TEST_true(ossl_cmp_ctx_set0_newCert(fixture->cmp_ctx,
 280                                              X509_dup(cert)))) {
 281         tear_down(fixture);
 282         fixture = NULL;
 283     }
 284     EXECUTE_TEST(execute_certconf_create_test, tear_down);
 285     return result;
 286 }
 287
 288 static int test_cmp_create_certconf_badAlg(void)
 289 {
 290     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 291     fixture->fail_info = 1 << OSSL_CMP_PKIFAILUREINFO_badAlg;
 292     fixture->expected = 1;
 293     if (!TEST_true(ossl_cmp_ctx_set0_newCert(fixture->cmp_ctx,
 294                                              X509_dup(cert)))) {
 295         tear_down(fixture);
 296         fixture = NULL;
 297     }
 298     EXECUTE_TEST(execute_certconf_create_test, tear_down);
 299     return result;
 300 }
 301
 302 static int test_cmp_create_certconf_fail_info_max(void)
 303 {
 304     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 305     fixture->fail_info = 1 << OSSL_CMP_PKIFAILUREINFO_MAX;
 306     fixture->expected = 1;
 307     if (!TEST_true(ossl_cmp_ctx_set0_newCert(fixture->cmp_ctx,
 308                                              X509_dup(cert)))) {
 309         tear_down(fixture);
 310         fixture = NULL;
 311     }
 312     EXECUTE_TEST(execute_certconf_create_test, tear_down);
 313     return result;
 314 }
 315
 316 static int test_cmp_create_error_msg(void)
 317 {
 318     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 319     fixture->si = OSSL_CMP_STATUSINFO_new(OSSL_CMP_PKISTATUS_rejection,
 320                                           OSSL_CMP_PKIFAILUREINFO_systemFailure,
 321                                           NULL);
 322     fixture->err_code = -1;
 323     fixture->expected = 1; /* expected: message creation is successful */
 324     if (!TEST_true(set1_newPkey(fixture->cmp_ctx, newkey))) {
 325         tear_down(fixture);
 326         fixture = NULL;
 327     }
 328     EXECUTE_TEST(execute_errormsg_create_test, tear_down);
 329     return result;
 330 }
 331
 332
 333 static int test_cmp_create_pollreq(void)
 334 {
 335     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 336     fixture->expected = 1;
 337     EXECUTE_TEST(execute_pollreq_create_test, tear_down);
 338     return result;
 339 }
 340
 341 static int test_cmp_create_rr(void)
 342 {
 343     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 344     fixture->expected = 1;
 345     if (!TEST_true(OSSL_CMP_CTX_set1_oldCert(fixture->cmp_ctx, cert))) {
 346         tear_down(fixture);
 347         fixture = NULL;
 348     }
 349     EXECUTE_TEST(execute_rr_create_test, tear_down);
 350     return result;
 351 }
 352
 353 static int test_cmp_create_genm(void)
 354 {
 355     OSSL_CMP_ITAV *iv = NULL;
 356
 357     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 358     fixture->expected = 1;
 359     iv = OSSL_CMP_ITAV_create(OBJ_nid2obj(NID_id_it_implicitConfirm), NULL);
 360     if (!TEST_true(SET_OPT_UNPROTECTED_SEND(fixture->cmp_ctx, 1))
 361             || !TEST_ptr(iv)
 362             || !TEST_true(OSSL_CMP_CTX_push0_genm_ITAV(fixture->cmp_ctx, iv))) {
 363         OSSL_CMP_ITAV_free(iv);
 364         tear_down(fixture);
 365         fixture = NULL;
 366     }
 367
 368     EXECUTE_TEST(execute_genm_create_test, tear_down);
 369     return result;
 370 }
 371
 372 static int execute_certrep_create(CMP_MSG_TEST_FIXTURE *fixture)
 373 {
 374     OSSL_CMP_CERTREPMESSAGE *crepmsg = OSSL_CMP_CERTREPMESSAGE_new();
 375     OSSL_CMP_CERTRESPONSE *read_cresp, *cresp = OSSL_CMP_CERTRESPONSE_new();
 376     EVP_PKEY *privkey;
 377     X509 *certfromresp = NULL;
 378     int res = 0;
 379
 380     if (crepmsg == NULL || cresp == NULL)
 381         goto err;
 382     if (!ASN1_INTEGER_set(cresp->certReqId, 99))
 383         goto err;
 384     if ((cresp->certifiedKeyPair = OSSL_CMP_CERTIFIEDKEYPAIR_new()) == NULL)
 385         goto err;
 386     cresp->certifiedKeyPair->certOrEncCert->type =
 387         OSSL_CMP_CERTORENCCERT_CERTIFICATE;
 388     if ((cresp->certifiedKeyPair->certOrEncCert->value.certificate =
 389          X509_dup(cert)) == NULL
 390             || !sk_OSSL_CMP_CERTRESPONSE_push(crepmsg->response, cresp))
 391         goto err;
 392     cresp = NULL;
 393     read_cresp = ossl_cmp_certrepmessage_get0_certresponse(crepmsg, 99);
 394     if (!TEST_ptr(read_cresp))
 395         goto err;
 396     if (!TEST_ptr_null(ossl_cmp_certrepmessage_get0_certresponse(crepmsg, 88)))
 397         goto err;
 398     privkey = OSSL_CMP_CTX_get0_newPkey(fixture->cmp_ctx, 1); /* may be NULL */
 399     certfromresp = ossl_cmp_certresponse_get1_certificate(privkey, read_cresp);
 400     if (certfromresp == NULL || !TEST_int_eq(X509_cmp(cert, certfromresp), 0))
 401         goto err;
 402
 403     res = 1;
 404  err:
 405     X509_free(certfromresp);
 406     OSSL_CMP_CERTRESPONSE_free(cresp);
 407     OSSL_CMP_CERTREPMESSAGE_free(crepmsg);
 408     return res;
 409 }
 410
 411 static int test_cmp_create_certrep(void)
 412 {
 413     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 414     EXECUTE_TEST(execute_certrep_create, tear_down);
 415     return result;
 416 }
 417
 418
 419 static int execute_rp_create(CMP_MSG_TEST_FIXTURE *fixture)
 420 {
 421     OSSL_CMP_PKISI *si = OSSL_CMP_STATUSINFO_new(33, 44, "a text");
 422     X509_NAME *issuer = X509_NAME_new();
 423     ASN1_INTEGER *serial = ASN1_INTEGER_new();
 424     OSSL_CRMF_CERTID *cid = NULL;
 425     OSSL_CMP_MSG *rpmsg = NULL;
 426     int res = 0;
 427
 428     if (si == NULL || issuer == NULL || serial == NULL)
 429         goto err;
 430
 431     if (!X509_NAME_add_entry_by_txt(issuer, "CN", MBSTRING_ASC,
 432                                     (unsigned char *)"The Issuer", -1, -1, 0)
 433             || !ASN1_INTEGER_set(serial, 99)
 434             || (cid = OSSL_CRMF_CERTID_gen(issuer, serial)) == NULL
 435             || (rpmsg = ossl_cmp_rp_new(fixture->cmp_ctx, si, cid, 1)) == NULL)
 436         goto err;
 437
 438     if (!TEST_ptr(ossl_cmp_revrepcontent_get_CertId(rpmsg->body->value.rp, 0)))
 439         goto err;
 440
 441     if (!TEST_ptr(ossl_cmp_revrepcontent_get_pkisi(rpmsg->body->value.rp, 0)))
 442         goto err;
 443
 444     res = 1;
 445  err:
 446     ASN1_INTEGER_free(serial);
 447     X509_NAME_free(issuer);
 448     OSSL_CRMF_CERTID_free(cid);
 449     OSSL_CMP_PKISI_free(si);
 450     OSSL_CMP_MSG_free(rpmsg);
 451     return res;
 452 }
 453
 454 static int test_cmp_create_rp(void)
 455 {
 456     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 457     EXECUTE_TEST(execute_rp_create, tear_down);
 458     return result;
 459 }
 460
 461 static int execute_pollrep_create(CMP_MSG_TEST_FIXTURE *fixture)
 462 {
 463     OSSL_CMP_MSG *pollrep;
 464     int res = 0;
 465
 466     pollrep = ossl_cmp_pollRep_new(fixture->cmp_ctx, 77, 2000);
 467     if (!TEST_ptr(pollrep))
 468         return 0;
 469     if (!TEST_ptr(ossl_cmp_pollrepcontent_get0_pollrep(pollrep->body->
 470                                                        value.pollRep, 77)))
 471         goto err;
 472     if (!TEST_ptr_null(ossl_cmp_pollrepcontent_get0_pollrep(pollrep->body->
 473                                                             value.pollRep, 88)))
 474         goto err;
 475
 476     res = 1;
 477  err:
 478     OSSL_CMP_MSG_free(pollrep);
 479     return res;
 480 }
 481
 482 static int test_cmp_create_pollrep(void)
 483 {
 484     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 485     EXECUTE_TEST(execute_pollrep_create, tear_down);
 486     return result;
 487 }
 488
 489 static int test_cmp_pkimessage_create(int bodytype)
 490 {
 491     X509_REQ *p10cr = NULL;
 492
 493     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 494
 495     switch (fixture->bodytype = bodytype) {
 496     case OSSL_CMP_PKIBODY_P10CR:
 497         fixture->expected = 1;
 498         if (!TEST_true(OSSL_CMP_CTX_set1_p10CSR(fixture->cmp_ctx,
 499                                                 p10cr = load_csr(pkcs10_f)))) {
 500             tear_down(fixture);
 501             fixture = NULL;
 502         }
 503         X509_REQ_free(p10cr);
 504         break;
 505     case OSSL_CMP_PKIBODY_IR:
 506     case OSSL_CMP_PKIBODY_IP:
 507     case OSSL_CMP_PKIBODY_CR:
 508     case OSSL_CMP_PKIBODY_CP:
 509     case OSSL_CMP_PKIBODY_KUR:
 510     case OSSL_CMP_PKIBODY_KUP:
 511     case OSSL_CMP_PKIBODY_RR:
 512     case OSSL_CMP_PKIBODY_RP:
 513     case OSSL_CMP_PKIBODY_PKICONF:
 514     case OSSL_CMP_PKIBODY_GENM:
 515     case OSSL_CMP_PKIBODY_GENP:
 516     case OSSL_CMP_PKIBODY_ERROR:
 517     case OSSL_CMP_PKIBODY_CERTCONF:
 518     case OSSL_CMP_PKIBODY_POLLREQ:
 519     case OSSL_CMP_PKIBODY_POLLREP:
 520         fixture->expected = 1;
 521         break;
 522     default:
 523         fixture->expected = 0;
 524         break;
 525     }
 526
 527     EXECUTE_TEST(execute_pkimessage_create_test, tear_down);
 528     return result;
 529 }
 530
 531 void cleanup_tests(void)
 532 {
 533     EVP_PKEY_free(newkey);
 534     X509_free(cert);
 535 }
 536
 537 int setup_tests(void)
 538 {
 539     if (!test_skip_common_options()) {
 540         TEST_error("Error parsing test options\n");
 541         return 0;
 542     }
 543
 544     if (!TEST_ptr(server_cert_f = test_get_argument(0))
 545             || !TEST_ptr(pkcs10_f = test_get_argument(1))) {
 546         TEST_error("usage: cmp_msg_test server.crt pkcs10.der\n");
 547         return 0;
 548     }
 549
 550     if (!TEST_ptr(newkey = gen_rsa())
 551             || !TEST_ptr(cert = load_pem_cert(server_cert_f))
 552             || !TEST_int_eq(1, RAND_bytes(ref, sizeof(ref)))) {
 553         cleanup_tests();
 554         return 0;
 555     }
 556
 557     /* Message creation tests */
 558     ADD_TEST(test_cmp_create_certreq_with_invalid_bodytype);
 559     ADD_TEST(test_cmp_create_ir_protection_fails);
 560     ADD_TEST(test_cmp_create_ir_protection_set);
 561     ADD_TEST(test_cmp_create_error_msg);
 562     ADD_TEST(test_cmp_create_certconf);
 563     ADD_TEST(test_cmp_create_certconf_badAlg);
 564     ADD_TEST(test_cmp_create_certconf_fail_info_max);
 565     ADD_TEST(test_cmp_create_kur);
 566     ADD_TEST(test_cmp_create_kur_without_oldcert);
 567     ADD_TEST(test_cmp_create_cr);
 568     ADD_TEST(test_cmp_create_cr_without_key);
 569     ADD_TEST(test_cmp_create_p10cr);
 570     ADD_TEST(test_cmp_create_p10cr_null);
 571     ADD_TEST(test_cmp_create_pollreq);
 572     ADD_TEST(test_cmp_create_rr);
 573     ADD_TEST(test_cmp_create_rp);
 574     ADD_TEST(test_cmp_create_genm);
 575     ADD_TEST(test_cmp_create_certrep);
 576     ADD_TEST(test_cmp_create_pollrep);
 577     ADD_ALL_TESTS_NOSUBTEST(test_cmp_pkimessage_create,
 578                             OSSL_CMP_PKIBODY_POLLREP + 1);
 579     return 1;
 580 }