2 # Copyright 2017-2020 The OpenSSL Project Authors. All Rights Reserved.
4 # Licensed under the Apache License 2.0 (the "License"). You may not use
5 # this file except in compliance with the License. You can obtain a copy
6 # in the file LICENSE in the source distribution or at
7 # https://www.openssl.org/source/license.html
14 use OpenSSL::Test qw/:DEFAULT srctop_file/;
15 use OpenSSL::Test::Utils;
19 plan skip_all => "This test is unsupported in a no-dsa build"
24 ok(run(app([ 'openssl', 'genpkey', '-genparam',
26 '-pkeyopt', 'gindex:1',
27 '-pkeyopt', 'type:fips186_4',
29 "genpkey DSA params fips186_4 with verifiable g");
31 ok(run(app([ 'openssl', 'genpkey', '-genparam',
33 '-pkeyopt', 'type:fips186_4',
35 "genpkey DSA params fips186_4 with unverifiable g");
37 ok(run(app([ 'openssl', 'genpkey', '-genparam',
39 '-pkeyopt', 'pbits:2048',
40 '-pkeyopt', 'qbits:224',
41 '-pkeyopt', 'digest:SHA512-256',
42 '-pkeyopt', 'type:fips186_4'])),
43 "genpkey DSA params fips186_4 with truncated SHA");
45 ok(run(app([ 'openssl', 'genpkey', '-genparam',
47 '-pkeyopt', 'type:fips186_2',
49 "genpkey DSA params fips186_2");
51 ok(run(app([ 'openssl', 'genpkey', '-genparam',
53 '-pkeyopt', 'type:fips186_2',
54 '-pkeyopt', 'dsa_paramgen_bits:1024',
55 '-out', 'dsagen.legacy.pem'])),
56 "genpkey DSA params fips186_2 PEM");
58 ok(!run(app([ 'openssl', 'genpkey', '-algorithm', 'DSA',
59 '-pkeyopt', 'type:group',
61 "genpkey DSA does not support groups");
63 ok(run(app([ 'openssl', 'genpkey', '-genparam',
65 '-pkeyopt', 'gindex:1',
66 '-pkeyopt', 'type:fips186_4',
67 '-out', 'dsagen.pem'])),
68 "genpkey DSA params fips186_4 PEM");
70 ok(run(app([ 'openssl', 'genpkey', '-genparam',
72 '-pkeyopt', 'gindex:1',
73 '-pkeyopt', 'pbits:2048',
74 '-pkeyopt', 'qbits:256',
75 '-pkeyopt', 'type:fips186_4',
77 '-out', 'dsagen.der'])),
78 "genpkey DSA params fips186_4 DER");
80 ok(run(app([ 'openssl', 'genpkey',
81 '-paramfile', 'dsagen.legacy.pem',
82 '-pkeyopt', 'type:fips186_2',
84 "genpkey DSA fips186_2 with PEM params");
86 # The seed and counter should be the ones generated from the param generation
87 # Just put some dummy ones in to show it works.
88 ok(run(app([ 'openssl', 'genpkey',
89 '-paramfile', 'dsagen.der',
90 '-pkeyopt', 'type:fips186_4',
91 '-pkeyopt', 'gindex:1',
92 '-pkeyopt', 'hexseed:0102030405060708090A0B0C0D0E0F1011121314',
93 '-pkeyopt', 'pcounter:25',
95 "genpkey DSA fips186_4 with DER params");
97 ok(!run(app([ 'openssl', 'genpkey',
98 '-algorithm', 'DSA'])),
99 "genpkey DSA with no params should fail");