test/cmp_msg_test.c

   1 /*
   2  * Copyright 2007-2020 The OpenSSL Project Authors. All Rights Reserved.
   3  * Copyright Nokia 2007-2019
   4  * Copyright Siemens AG 2015-2019
   5  *
   6  * Licensed under the Apache License 2.0 (the "License").  You may not use
   7  * this file except in compliance with the License.  You can obtain a copy
   8  * in the file LICENSE in the source distribution or at
   9  * https://www.openssl.org/source/license.html
  10  */
  11
  12 #include "cmp_testlib.h"
  13
  14 DEFINE_STACK_OF(OSSL_CMP_CERTRESPONSE)
  15
  16 static const char *server_cert_f;
  17 static const char *pkcs10_f;
  18
  19 typedef struct test_fixture {
  20     const char *test_case_name;
  21     OSSL_CMP_CTX *cmp_ctx;
  22     /* for msg create tests */
  23     int bodytype;
  24     int err_code;
  25     /* for certConf */
  26     int fail_info;
  27     /* for protection tests */
  28     OSSL_CMP_MSG *msg;
  29     int expected;
  30     /* for error and response messages */
  31     OSSL_CMP_PKISI *si;
  32 } CMP_MSG_TEST_FIXTURE;
  33
  34 static unsigned char ref[CMP_TEST_REFVALUE_LENGTH];
  35
  36 static void tear_down(CMP_MSG_TEST_FIXTURE *fixture)
  37 {
  38     OSSL_CMP_CTX_free(fixture->cmp_ctx);
  39     OSSL_CMP_MSG_free(fixture->msg);
  40     OSSL_CMP_PKISI_free(fixture->si);
  41     OPENSSL_free(fixture);
  42 }
  43
  44 #define SET_OPT_UNPROTECTED_SEND(ctx, val) \
  45     OSSL_CMP_CTX_set_option((ctx), OSSL_CMP_OPT_UNPROTECTED_SEND, (val))
  46 static CMP_MSG_TEST_FIXTURE *set_up(const char *const test_case_name)
  47 {
  48     CMP_MSG_TEST_FIXTURE *fixture;
  49
  50     if (!TEST_ptr(fixture = OPENSSL_zalloc(sizeof(*fixture))))
  51         return NULL;
  52     fixture->test_case_name = test_case_name;
  53
  54     if (!TEST_ptr(fixture->cmp_ctx = OSSL_CMP_CTX_new(NULL, NULL))
  55             || !TEST_true(SET_OPT_UNPROTECTED_SEND(fixture->cmp_ctx, 1))
  56             || !TEST_true(OSSL_CMP_CTX_set1_referenceValue(fixture->cmp_ctx,
  57                                                            ref, sizeof(ref)))) {
  58         tear_down(fixture);
  59         return NULL;
  60     }
  61     return fixture;
  62 }
  63
  64 static EVP_PKEY *newkey = NULL;
  65 static X509 *cert = NULL;
  66
  67 #define EXECUTE_MSG_CREATION_TEST(expr) \
  68     do { \
  69         OSSL_CMP_MSG *msg = NULL; \
  70         int good = fixture->expected != 0 ? \
  71             TEST_ptr(msg = (expr)) && TEST_true(valid_asn1_encoding(msg)) : \
  72             TEST_ptr_null(msg = (expr)); \
  73  \
  74         OSSL_CMP_MSG_free(msg); \
  75         return good; \
  76     } while (0)
  77
  78 /*-
  79  * The following tests call a cmp message creation function.
  80  * if fixture->expected != 0:
  81  *         returns 1 if the message is created and syntactically correct.
  82  * if fixture->expected == 0
  83  *         returns 1 if message creation returns NULL
  84  */
  85 static int execute_certreq_create_test(CMP_MSG_TEST_FIXTURE *fixture)
  86 {
  87     EXECUTE_MSG_CREATION_TEST(ossl_cmp_certreq_new(fixture->cmp_ctx,
  88                                                    fixture->bodytype,
  89                                                    NULL));
  90 }
  91
  92 static int execute_errormsg_create_test(CMP_MSG_TEST_FIXTURE *fixture)
  93 {
  94     EXECUTE_MSG_CREATION_TEST(ossl_cmp_error_new(fixture->cmp_ctx, fixture->si,
  95                                                  fixture->err_code,
  96                                                  "details", 0));
  97 }
  98
  99 static int execute_rr_create_test(CMP_MSG_TEST_FIXTURE *fixture)
 100 {
 101     EXECUTE_MSG_CREATION_TEST(ossl_cmp_rr_new(fixture->cmp_ctx));
 102 }
 103
 104 static int execute_certconf_create_test(CMP_MSG_TEST_FIXTURE *fixture)
 105 {
 106     EXECUTE_MSG_CREATION_TEST(ossl_cmp_certConf_new
 107                               (fixture->cmp_ctx, fixture->fail_info, NULL));
 108 }
 109
 110 static int execute_genm_create_test(CMP_MSG_TEST_FIXTURE *fixture)
 111 {
 112     EXECUTE_MSG_CREATION_TEST(ossl_cmp_genm_new(fixture->cmp_ctx));
 113 }
 114
 115 static int execute_pollreq_create_test(CMP_MSG_TEST_FIXTURE *fixture)
 116 {
 117     EXECUTE_MSG_CREATION_TEST(ossl_cmp_pollReq_new(fixture->cmp_ctx, 4711));
 118 }
 119
 120 static int execute_pkimessage_create_test(CMP_MSG_TEST_FIXTURE *fixture)
 121 {
 122     EXECUTE_MSG_CREATION_TEST(ossl_cmp_msg_create
 123                               (fixture->cmp_ctx, fixture->bodytype));
 124 }
 125
 126 static int set1_newPkey(OSSL_CMP_CTX *ctx, EVP_PKEY *pkey)
 127 {
 128     if (!EVP_PKEY_up_ref(pkey))
 129         return 0;
 130
 131     if (!OSSL_CMP_CTX_set0_newPkey(ctx, 1, pkey)) {
 132         EVP_PKEY_free(pkey);
 133         return 0;
 134     }
 135     return 1;
 136 }
 137
 138 static int test_cmp_create_ir_protection_set(void)
 139 {
 140     OSSL_CMP_CTX *ctx;
 141     unsigned char secret[16];
 142
 143     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 144
 145     ctx = fixture->cmp_ctx;
 146     fixture->bodytype = OSSL_CMP_PKIBODY_IR;
 147     fixture->err_code = -1;
 148     fixture->expected = 1;
 149     if (!TEST_int_eq(1, RAND_bytes(secret, sizeof(secret)))
 150             || !TEST_true(SET_OPT_UNPROTECTED_SEND(ctx, 0))
 151             || !TEST_true(set1_newPkey(ctx, newkey))
 152             || !TEST_true(OSSL_CMP_CTX_set1_secretValue(ctx, secret,
 153                                                         sizeof(secret)))) {
 154         tear_down(fixture);
 155         fixture = NULL;
 156     }
 157     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 158     return result;
 159 }
 160
 161 static int test_cmp_create_ir_protection_fails(void)
 162 {
 163     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 164     fixture->bodytype = OSSL_CMP_PKIBODY_IR;
 165     fixture->err_code = -1;
 166     fixture->expected = 0;
 167     if (!TEST_true(OSSL_CMP_CTX_set1_pkey(fixture->cmp_ctx, newkey))
 168             || !TEST_true(SET_OPT_UNPROTECTED_SEND(fixture->cmp_ctx, 0))
 169             /* newkey used by default for signing does not match cert: */
 170             || !TEST_true(OSSL_CMP_CTX_set1_cert(fixture->cmp_ctx, cert))) {
 171         tear_down(fixture);
 172         fixture = NULL;
 173     }
 174     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 175     return result;
 176 }
 177
 178 static int test_cmp_create_cr_without_key(void)
 179 {
 180     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 181     fixture->bodytype = OSSL_CMP_PKIBODY_CR;
 182     fixture->err_code = -1;
 183     fixture->expected = 0;
 184     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 185     return result;
 186 }
 187
 188 static int test_cmp_create_cr(void)
 189 {
 190     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 191     fixture->bodytype = OSSL_CMP_PKIBODY_CR;
 192     fixture->err_code = -1;
 193     fixture->expected = 1;
 194     if (!TEST_true(set1_newPkey(fixture->cmp_ctx, newkey))) {
 195         tear_down(fixture);
 196         fixture = NULL;
 197     }
 198     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 199     return result;
 200 }
 201
 202 static int test_cmp_create_certreq_with_invalid_bodytype(void)
 203 {
 204     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 205     fixture->bodytype = OSSL_CMP_PKIBODY_RR;
 206     fixture->err_code = -1;
 207     fixture->expected = 0;
 208     if (!TEST_true(set1_newPkey(fixture->cmp_ctx, newkey))) {
 209         tear_down(fixture);
 210         fixture = NULL;
 211     }
 212     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 213     return result;
 214 }
 215
 216 static int test_cmp_create_p10cr(void)
 217 {
 218     OSSL_CMP_CTX *ctx;
 219     X509_REQ *p10cr = NULL;
 220
 221     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 222     ctx = fixture->cmp_ctx;
 223     fixture->bodytype = OSSL_CMP_PKIBODY_P10CR;
 224     fixture->err_code = CMP_R_ERROR_CREATING_CERTREQ;
 225     fixture->expected = 1;
 226     if (!TEST_ptr(p10cr = load_csr(pkcs10_f))
 227             || !TEST_true(set1_newPkey(ctx, newkey))
 228             || !TEST_true(OSSL_CMP_CTX_set1_p10CSR(ctx, p10cr))) {
 229         tear_down(fixture);
 230         fixture = NULL;
 231     }
 232     X509_REQ_free(p10cr);
 233     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 234     return result;
 235 }
 236
 237 static int test_cmp_create_p10cr_null(void)
 238 {
 239     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 240     fixture->bodytype = OSSL_CMP_PKIBODY_P10CR;
 241     fixture->err_code = CMP_R_ERROR_CREATING_CERTREQ;
 242     fixture->expected = 0;
 243     if (!TEST_true(set1_newPkey(fixture->cmp_ctx, newkey))) {
 244         tear_down(fixture);
 245         fixture = NULL;
 246     }
 247     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 248     return result;
 249 }
 250
 251 static int test_cmp_create_kur(void)
 252 {
 253     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 254     fixture->bodytype = OSSL_CMP_PKIBODY_KUR;
 255     fixture->err_code = -1;
 256     fixture->expected = 1;
 257     if (!TEST_true(set1_newPkey(fixture->cmp_ctx, newkey))
 258             || !TEST_true(OSSL_CMP_CTX_set1_oldCert(fixture->cmp_ctx, cert))) {
 259         tear_down(fixture);
 260         fixture = NULL;
 261     }
 262     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 263     return result;
 264 }
 265
 266 static int test_cmp_create_kur_without_oldcert(void)
 267 {
 268     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 269     fixture->bodytype = OSSL_CMP_PKIBODY_KUR;
 270     fixture->err_code = -1;
 271     fixture->expected = 0;
 272     if (!TEST_true(set1_newPkey(fixture->cmp_ctx, newkey))) {
 273         tear_down(fixture);
 274         fixture = NULL;
 275     }
 276     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 277     return result;
 278 }
 279
 280 static int test_cmp_create_certconf(void)
 281 {
 282     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 283     fixture->fail_info = 0;
 284     fixture->expected = 1;
 285     if (!TEST_true(ossl_cmp_ctx_set0_newCert(fixture->cmp_ctx,
 286                                              X509_dup(cert)))) {
 287         tear_down(fixture);
 288         fixture = NULL;
 289     }
 290     EXECUTE_TEST(execute_certconf_create_test, tear_down);
 291     return result;
 292 }
 293
 294 static int test_cmp_create_certconf_badAlg(void)
 295 {
 296     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 297     fixture->fail_info = 1 << OSSL_CMP_PKIFAILUREINFO_badAlg;
 298     fixture->expected = 1;
 299     if (!TEST_true(ossl_cmp_ctx_set0_newCert(fixture->cmp_ctx,
 300                                              X509_dup(cert)))) {
 301         tear_down(fixture);
 302         fixture = NULL;
 303     }
 304     EXECUTE_TEST(execute_certconf_create_test, tear_down);
 305     return result;
 306 }
 307
 308 static int test_cmp_create_certconf_fail_info_max(void)
 309 {
 310     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 311     fixture->fail_info = 1 << OSSL_CMP_PKIFAILUREINFO_MAX;
 312     fixture->expected = 1;
 313     if (!TEST_true(ossl_cmp_ctx_set0_newCert(fixture->cmp_ctx,
 314                                              X509_dup(cert)))) {
 315         tear_down(fixture);
 316         fixture = NULL;
 317     }
 318     EXECUTE_TEST(execute_certconf_create_test, tear_down);
 319     return result;
 320 }
 321
 322 static int test_cmp_create_error_msg(void)
 323 {
 324     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 325     fixture->si = OSSL_CMP_STATUSINFO_new(OSSL_CMP_PKISTATUS_rejection,
 326                                           OSSL_CMP_PKIFAILUREINFO_systemFailure,
 327                                           NULL);
 328     fixture->err_code = -1;
 329     fixture->expected = 1; /* expected: message creation is successful */
 330     if (!TEST_true(set1_newPkey(fixture->cmp_ctx, newkey))) {
 331         tear_down(fixture);
 332         fixture = NULL;
 333     }
 334     EXECUTE_TEST(execute_errormsg_create_test, tear_down);
 335     return result;
 336 }
 337
 338
 339 static int test_cmp_create_pollreq(void)
 340 {
 341     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 342     fixture->expected = 1;
 343     EXECUTE_TEST(execute_pollreq_create_test, tear_down);
 344     return result;
 345 }
 346
 347 static int test_cmp_create_rr(void)
 348 {
 349     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 350     fixture->expected = 1;
 351     if (!TEST_true(OSSL_CMP_CTX_set1_oldCert(fixture->cmp_ctx, cert))) {
 352         tear_down(fixture);
 353         fixture = NULL;
 354     }
 355     EXECUTE_TEST(execute_rr_create_test, tear_down);
 356     return result;
 357 }
 358
 359 static int test_cmp_create_genm(void)
 360 {
 361     OSSL_CMP_ITAV *iv = NULL;
 362
 363     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 364     fixture->expected = 1;
 365     iv = OSSL_CMP_ITAV_create(OBJ_nid2obj(NID_id_it_implicitConfirm), NULL);
 366     if (!TEST_ptr(iv)
 367             || !TEST_true(OSSL_CMP_CTX_push0_genm_ITAV(fixture->cmp_ctx, iv))) {
 368         OSSL_CMP_ITAV_free(iv);
 369         tear_down(fixture);
 370         fixture = NULL;
 371     }
 372
 373     EXECUTE_TEST(execute_genm_create_test, tear_down);
 374     return result;
 375 }
 376
 377 static int execute_certrep_create(CMP_MSG_TEST_FIXTURE *fixture)
 378 {
 379     OSSL_CMP_CERTREPMESSAGE *crepmsg = OSSL_CMP_CERTREPMESSAGE_new();
 380     OSSL_CMP_CERTRESPONSE *read_cresp, *cresp = OSSL_CMP_CERTRESPONSE_new();
 381     EVP_PKEY *privkey;
 382     X509 *certfromresp = NULL;
 383     int res = 0;
 384
 385     if (crepmsg == NULL || cresp == NULL)
 386         goto err;
 387     if (!ASN1_INTEGER_set(cresp->certReqId, 99))
 388         goto err;
 389     if ((cresp->certifiedKeyPair = OSSL_CMP_CERTIFIEDKEYPAIR_new()) == NULL)
 390         goto err;
 391     cresp->certifiedKeyPair->certOrEncCert->type =
 392         OSSL_CMP_CERTORENCCERT_CERTIFICATE;
 393     if ((cresp->certifiedKeyPair->certOrEncCert->value.certificate =
 394          X509_dup(cert)) == NULL
 395             || !sk_OSSL_CMP_CERTRESPONSE_push(crepmsg->response, cresp))
 396         goto err;
 397     cresp = NULL;
 398     read_cresp = ossl_cmp_certrepmessage_get0_certresponse(crepmsg, 99);
 399     if (!TEST_ptr(read_cresp))
 400         goto err;
 401     if (!TEST_ptr_null(ossl_cmp_certrepmessage_get0_certresponse(crepmsg, 88)))
 402         goto err;
 403     privkey = OSSL_CMP_CTX_get0_newPkey(fixture->cmp_ctx, 1); /* may be NULL */
 404     certfromresp = ossl_cmp_certresponse_get1_certificate(privkey, read_cresp);
 405     if (certfromresp == NULL || !TEST_int_eq(X509_cmp(cert, certfromresp), 0))
 406         goto err;
 407
 408     res = 1;
 409  err:
 410     X509_free(certfromresp);
 411     OSSL_CMP_CERTRESPONSE_free(cresp);
 412     OSSL_CMP_CERTREPMESSAGE_free(crepmsg);
 413     return res;
 414 }
 415
 416 static int test_cmp_create_certrep(void)
 417 {
 418     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 419     EXECUTE_TEST(execute_certrep_create, tear_down);
 420     return result;
 421 }
 422
 423
 424 static int execute_rp_create(CMP_MSG_TEST_FIXTURE *fixture)
 425 {
 426     OSSL_CMP_PKISI *si = OSSL_CMP_STATUSINFO_new(33, 44, "a text");
 427     X509_NAME *issuer = X509_NAME_new();
 428     ASN1_INTEGER *serial = ASN1_INTEGER_new();
 429     OSSL_CRMF_CERTID *cid = NULL;
 430     OSSL_CMP_MSG *rpmsg = NULL;
 431     int res = 0;
 432
 433     if (si == NULL || issuer == NULL || serial == NULL)
 434         goto err;
 435
 436     if (!X509_NAME_add_entry_by_txt(issuer, "CN", MBSTRING_ASC,
 437                                     (unsigned char *)"The Issuer", -1, -1, 0)
 438             || !ASN1_INTEGER_set(serial, 99)
 439             || (cid = OSSL_CRMF_CERTID_gen(issuer, serial)) == NULL
 440             || (rpmsg = ossl_cmp_rp_new(fixture->cmp_ctx, si, cid, 1)) == NULL)
 441         goto err;
 442
 443     if (!TEST_ptr(ossl_cmp_revrepcontent_get_CertId(rpmsg->body->value.rp, 0)))
 444         goto err;
 445
 446     if (!TEST_ptr(ossl_cmp_revrepcontent_get_pkisi(rpmsg->body->value.rp, 0)))
 447         goto err;
 448
 449     res = 1;
 450  err:
 451     ASN1_INTEGER_free(serial);
 452     X509_NAME_free(issuer);
 453     OSSL_CRMF_CERTID_free(cid);
 454     OSSL_CMP_PKISI_free(si);
 455     OSSL_CMP_MSG_free(rpmsg);
 456     return res;
 457 }
 458
 459 static int test_cmp_create_rp(void)
 460 {
 461     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 462     EXECUTE_TEST(execute_rp_create, tear_down);
 463     return result;
 464 }
 465
 466 static int execute_pollrep_create(CMP_MSG_TEST_FIXTURE *fixture)
 467 {
 468     OSSL_CMP_MSG *pollrep;
 469     int res = 0;
 470
 471     pollrep = ossl_cmp_pollRep_new(fixture->cmp_ctx, 77, 2000);
 472     if (!TEST_ptr(pollrep))
 473         return 0;
 474     if (!TEST_ptr(ossl_cmp_pollrepcontent_get0_pollrep(pollrep->body->
 475                                                        value.pollRep, 77)))
 476         goto err;
 477     if (!TEST_ptr_null(ossl_cmp_pollrepcontent_get0_pollrep(pollrep->body->
 478                                                             value.pollRep, 88)))
 479         goto err;
 480
 481     res = 1;
 482  err:
 483     OSSL_CMP_MSG_free(pollrep);
 484     return res;
 485 }
 486
 487 static int test_cmp_create_pollrep(void)
 488 {
 489     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 490     EXECUTE_TEST(execute_pollrep_create, tear_down);
 491     return result;
 492 }
 493
 494 static int test_cmp_pkimessage_create(int bodytype)
 495 {
 496     X509_REQ *p10cr = NULL;
 497
 498     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 499
 500     switch (fixture->bodytype = bodytype) {
 501     case OSSL_CMP_PKIBODY_P10CR:
 502         fixture->expected = 1;
 503         if (!TEST_true(OSSL_CMP_CTX_set1_p10CSR(fixture->cmp_ctx,
 504                                                 p10cr = load_csr(pkcs10_f)))) {
 505             tear_down(fixture);
 506             fixture = NULL;
 507         }
 508         X509_REQ_free(p10cr);
 509         break;
 510     case OSSL_CMP_PKIBODY_IR:
 511     case OSSL_CMP_PKIBODY_IP:
 512     case OSSL_CMP_PKIBODY_CR:
 513     case OSSL_CMP_PKIBODY_CP:
 514     case OSSL_CMP_PKIBODY_KUR:
 515     case OSSL_CMP_PKIBODY_KUP:
 516     case OSSL_CMP_PKIBODY_RR:
 517     case OSSL_CMP_PKIBODY_RP:
 518     case OSSL_CMP_PKIBODY_PKICONF:
 519     case OSSL_CMP_PKIBODY_GENM:
 520     case OSSL_CMP_PKIBODY_GENP:
 521     case OSSL_CMP_PKIBODY_ERROR:
 522     case OSSL_CMP_PKIBODY_CERTCONF:
 523     case OSSL_CMP_PKIBODY_POLLREQ:
 524     case OSSL_CMP_PKIBODY_POLLREP:
 525         fixture->expected = 1;
 526         break;
 527     default:
 528         fixture->expected = 0;
 529         break;
 530     }
 531
 532     EXECUTE_TEST(execute_pkimessage_create_test, tear_down);
 533     return result;
 534 }
 535
 536 void cleanup_tests(void)
 537 {
 538     EVP_PKEY_free(newkey);
 539     X509_free(cert);
 540 }
 541
 542 int setup_tests(void)
 543 {
 544     if (!test_skip_common_options()) {
 545         TEST_error("Error parsing test options\n");
 546         return 0;
 547     }
 548
 549     if (!TEST_ptr(server_cert_f = test_get_argument(0))
 550             || !TEST_ptr(pkcs10_f = test_get_argument(1))) {
 551         TEST_error("usage: cmp_msg_test server.crt pkcs10.der\n");
 552         return 0;
 553     }
 554
 555     if (!TEST_ptr(newkey = gen_rsa())
 556             || !TEST_ptr(cert = load_pem_cert(server_cert_f))
 557             || !TEST_int_eq(1, RAND_bytes(ref, sizeof(ref)))) {
 558         cleanup_tests();
 559         return 0;
 560     }
 561
 562     /* Message creation tests */
 563     ADD_TEST(test_cmp_create_certreq_with_invalid_bodytype);
 564     ADD_TEST(test_cmp_create_ir_protection_fails);
 565     ADD_TEST(test_cmp_create_ir_protection_set);
 566     ADD_TEST(test_cmp_create_error_msg);
 567     ADD_TEST(test_cmp_create_certconf);
 568     ADD_TEST(test_cmp_create_certconf_badAlg);
 569     ADD_TEST(test_cmp_create_certconf_fail_info_max);
 570     ADD_TEST(test_cmp_create_kur);
 571     ADD_TEST(test_cmp_create_kur_without_oldcert);
 572     ADD_TEST(test_cmp_create_cr);
 573     ADD_TEST(test_cmp_create_cr_without_key);
 574     ADD_TEST(test_cmp_create_p10cr);
 575     ADD_TEST(test_cmp_create_p10cr_null);
 576     ADD_TEST(test_cmp_create_pollreq);
 577     ADD_TEST(test_cmp_create_rr);
 578     ADD_TEST(test_cmp_create_rp);
 579     ADD_TEST(test_cmp_create_genm);
 580     ADD_TEST(test_cmp_create_certrep);
 581     ADD_TEST(test_cmp_create_pollrep);
 582     ADD_ALL_TESTS_NOSUBTEST(test_cmp_pkimessage_create,
 583                             OSSL_CMP_PKIBODY_POLLREP + 1);
 584     return 1;
 585 }