2 # Copyright 2015-2023 The OpenSSL Project Authors. All Rights Reserved.
4 # Licensed under the Apache License 2.0 (the "License"). You may not use
5 # this file except in compliance with the License. You can obtain a copy
6 # in the file LICENSE in the source distribution or at
7 # https://www.openssl.org/source/license.html
13 use File::Spec::Functions qw/canonpath/;
15 use OpenSSL::Test qw/:DEFAULT srctop_file bldtop_dir ok_nofips with/;
16 use OpenSSL::Test::Utils;
21 my ($cert, $purpose, $trusted, $untrusted, @opts) = @_;
22 my @path = qw(test certs);
23 my @args = qw(openssl verify -auth_level 1);
24 push(@args, "-purpose", $purpose) if $purpose ne "";
26 for (@$trusted) { push(@args, "-trusted", srctop_file(@path, "$_.pem")) }
27 for (@$untrusted) { push(@args, "-untrusted", srctop_file(@path, "$_.pem")) }
28 push(@args, srctop_file(@path, "$cert.pem"));
35 ok(verify("ee-cert", "sslserver", ["root-cert"], ["ca-cert"]),
36 "accept compat trust");
39 ok(!verify("ee-cert", "sslserver", [qw(root-nonca)], [qw(ca-cert)]),
40 "fail trusted non-ca root");
41 ok(!verify("ee-cert", "sslserver", [qw(nroot+serverAuth)], [qw(ca-cert)]),
42 "fail server trust non-ca root");
43 ok(!verify("ee-cert", "sslserver", [qw(nroot+anyEKU)], [qw(ca-cert)]),
44 "fail wildcard trust non-ca root");
45 ok(!verify("ee-cert", "sslserver", [qw(root-cert2)], [qw(ca-cert)]),
46 "fail wrong root key");
47 ok(!verify("ee-cert", "sslserver", [qw(root-name2)], [qw(ca-cert)]),
48 "fail wrong root DN");
52 ok(verify("ee-cert-noncrit-unknown-ext", "", ["root-cert"], ["ca-cert"]),
53 "accept non-critical unknown extension");
54 ok(!verify("ee-cert-crit-unknown-ext", "", ["root-cert"], ["ca-cert"]),
55 "reject critical unknown extension");
56 ok(verify("ee-cert-ocsp-nocheck", "", ["root-cert"], ["ca-cert"]),
57 "accept critical OCSP No Check");
59 # Explicit trust/purpose combinations
61 ok(verify("ee-cert", "sslserver", [qw(sroot-cert)], [qw(ca-cert)]),
62 "accept server purpose");
63 ok(!verify("ee-cert", "sslserver", [qw(croot-cert)], [qw(ca-cert)]),
64 "fail client purpose");
65 ok(verify("ee-cert", "sslserver", [qw(root+serverAuth)], [qw(ca-cert)]),
66 "accept server trust");
67 ok(verify("ee-cert", "sslserver", [qw(sroot+serverAuth)], [qw(ca-cert)]),
68 "accept server trust with server purpose");
69 ok(verify("ee-cert", "sslserver", [qw(croot+serverAuth)], [qw(ca-cert)]),
70 "accept server trust with client purpose");
72 ok(verify("ee-cert", "sslserver", [qw(root+anyEKU)], [qw(ca-cert)]),
73 "accept wildcard trust");
74 ok(verify("ee-cert", "sslserver", [qw(sroot+anyEKU)], [qw(ca-cert)]),
75 "accept wildcard trust with server purpose");
76 ok(verify("ee-cert", "sslserver", [qw(croot+anyEKU)], [qw(ca-cert)]),
77 "accept wildcard trust with client purpose");
78 # Inapplicable mistrust
79 ok(verify("ee-cert", "sslserver", [qw(root-clientAuth)], [qw(ca-cert)]),
80 "accept client mistrust");
81 ok(verify("ee-cert", "sslserver", [qw(sroot-clientAuth)], [qw(ca-cert)]),
82 "accept client mistrust with server purpose");
83 ok(!verify("ee-cert", "sslserver", [qw(croot-clientAuth)], [qw(ca-cert)]),
84 "fail client mistrust with client purpose");
86 ok(!verify("ee-cert", "sslserver", [qw(root+clientAuth)], [qw(ca-cert)]),
88 ok(!verify("ee-cert", "sslserver", [qw(sroot+clientAuth)], [qw(ca-cert)]),
89 "fail client trust with server purpose");
90 ok(!verify("ee-cert", "sslserver", [qw(croot+clientAuth)], [qw(ca-cert)]),
91 "fail client trust with client purpose");
93 ok(!verify("ee-cert", "sslserver", [qw(root-serverAuth)], [qw(ca-cert)]),
95 ok(!verify("ee-cert", "sslserver", [qw(sroot-serverAuth)], [qw(ca-cert)]),
96 "fail server mistrust with server purpose");
97 ok(!verify("ee-cert", "sslserver", [qw(croot-serverAuth)], [qw(ca-cert)]),
98 "fail server mistrust with client purpose");
100 ok(!verify("ee-cert", "sslserver", [qw(root-anyEKU)], [qw(ca-cert)]),
101 "fail wildcard mistrust");
102 ok(!verify("ee-cert", "sslserver", [qw(sroot-anyEKU)], [qw(ca-cert)]),
103 "fail wildcard mistrust with server purpose");
104 ok(!verify("ee-cert", "sslserver", [qw(croot-anyEKU)], [qw(ca-cert)]),
105 "fail wildcard mistrust with client purpose");
107 # Check that trusted-first is on by setting up paths to different roots
108 # depending on whether the intermediate is the trusted or untrusted one.
110 ok(verify("ee-cert", "sslserver", [qw(root-serverAuth root-cert2 ca-root2)],
112 "accept trusted-first path");
113 ok(verify("ee-cert", "sslserver", [qw(root-cert root2+serverAuth ca-root2)],
115 "accept trusted-first path with server trust");
116 ok(!verify("ee-cert", "sslserver", [qw(root-cert root2-serverAuth ca-root2)],
118 "fail trusted-first path with server mistrust");
119 ok(!verify("ee-cert", "sslserver", [qw(root-cert root2+clientAuth ca-root2)],
121 "fail trusted-first path with client trust");
124 ok(!verify("ee-cert", "sslserver", [qw(root-cert)], [qw(ca-nonca)]),
125 "fail non-CA untrusted intermediate");
126 ok(!verify("ee-cert", "sslserver", [qw(root-cert)], [qw(ca-nonbc)]),
127 "fail non-CA untrusted intermediate");
128 ok(!verify("ee-cert", "sslserver", [qw(root-cert ca-nonca)], []),
129 "fail non-CA trust-store intermediate");
130 ok(!verify("ee-cert", "sslserver", [qw(root-cert ca-nonbc)], []),
131 "fail non-CA trust-store intermediate");
132 ok(!verify("ee-cert", "sslserver", [qw(root-cert nca+serverAuth)], []),
133 "fail non-CA server trust intermediate");
134 ok(!verify("ee-cert", "sslserver", [qw(root-cert nca+anyEKU)], []),
135 "fail non-CA wildcard trust intermediate");
136 ok(!verify("ee-cert", "sslserver", [qw(root-cert)], [qw(ca-cert2)]),
137 "fail wrong intermediate CA key");
138 ok(!verify("ee-cert", "sslserver", [qw(root-cert)], [qw(ca-name2)]),
139 "fail wrong intermediate CA DN");
140 ok(!verify("ee-cert", "sslserver", [qw(root-cert)], [qw(ca-root2)]),
141 "fail wrong intermediate CA issuer");
142 ok(!verify("ee-cert", "sslserver", [], [qw(ca-cert)], "-partial_chain"),
143 "fail untrusted partial chain");
144 ok(verify("ee-cert", "sslserver", [qw(ca-cert)], [], "-partial_chain"),
145 "accept trusted partial chain");
146 ok(!verify("ee-cert", "sslserver", [qw(ca-expired)], [], "-partial_chain"),
147 "reject expired trusted partial chain"); # this check is beyond RFC 5280
148 ok(!verify("ee-cert", "sslserver", [qw(root-expired)], [qw(ca-cert)]),
149 "reject expired trusted root"); # this check is beyond RFC 5280
150 ok(verify("ee-cert", "sslserver", [qw(sca-cert)], [], "-partial_chain"),
151 "accept partial chain with server purpose");
152 ok(!verify("ee-cert", "sslserver", [qw(cca-cert)], [], "-partial_chain"),
153 "fail partial chain with client purpose");
154 ok(verify("ee-cert", "sslserver", [qw(ca+serverAuth)], [], "-partial_chain"),
155 "accept server trust partial chain");
156 ok(verify("ee-cert", "sslserver", [qw(cca+serverAuth)], [], "-partial_chain"),
157 "accept server trust client purpose partial chain");
158 ok(verify("ee-cert", "sslserver", [qw(ca-clientAuth)], [], "-partial_chain"),
159 "accept client mistrust partial chain");
160 ok(verify("ee-cert", "sslserver", [qw(ca+anyEKU)], [], "-partial_chain"),
161 "accept wildcard trust partial chain");
162 ok(!verify("ee-cert", "sslserver", [], [qw(ca+serverAuth)], "-partial_chain"),
163 "fail untrusted partial issuer with ignored server trust");
164 ok(!verify("ee-cert", "sslserver", [qw(ca-serverAuth)], [], "-partial_chain"),
165 "fail server mistrust partial chain");
166 ok(!verify("ee-cert", "sslserver", [qw(ca+clientAuth)], [], "-partial_chain"),
167 "fail client trust partial chain");
168 ok(!verify("ee-cert", "sslserver", [qw(ca-anyEKU)], [], "-partial_chain"),
169 "fail wildcard mistrust partial chain");
171 # We now test auxiliary trust even for intermediate trusted certs without
172 # -partial_chain. Note that "-trusted_first" is now always on and cannot
174 ok(verify("ee-cert", "sslserver", [qw(root-cert ca+serverAuth)], [qw(ca-cert)]),
175 "accept server trust");
176 ok(verify("ee-cert", "sslserver", [qw(root-cert ca+anyEKU)], [qw(ca-cert)]),
177 "accept wildcard trust");
178 ok(verify("ee-cert", "sslserver", [qw(root-cert sca-cert)], [qw(ca-cert)]),
179 "accept server purpose");
180 ok(verify("ee-cert", "sslserver", [qw(root-cert sca+serverAuth)], [qw(ca-cert)]),
181 "accept server trust and purpose");
182 ok(verify("ee-cert", "sslserver", [qw(root-cert sca+anyEKU)], [qw(ca-cert)]),
183 "accept wildcard trust and server purpose");
184 ok(verify("ee-cert", "sslserver", [qw(root-cert sca-clientAuth)], [qw(ca-cert)]),
185 "accept client mistrust and server purpose");
186 ok(verify("ee-cert", "sslserver", [qw(root-cert cca+serverAuth)], [qw(ca-cert)]),
187 "accept server trust and client purpose");
188 ok(verify("ee-cert", "sslserver", [qw(root-cert cca+anyEKU)], [qw(ca-cert)]),
189 "accept wildcard trust and client purpose");
190 ok(!verify("ee-cert", "sslserver", [qw(root-cert cca-cert)], [qw(ca-cert)]),
191 "fail client purpose");
192 ok(!verify("ee-cert", "sslserver", [qw(root-cert ca-anyEKU)], [qw(ca-cert)]),
193 "fail wildcard mistrust");
194 ok(!verify("ee-cert", "sslserver", [qw(root-cert ca-serverAuth)], [qw(ca-cert)]),
195 "fail server mistrust");
196 ok(!verify("ee-cert", "sslserver", [qw(root-cert ca+clientAuth)], [qw(ca-cert)]),
197 "fail client trust");
198 ok(!verify("ee-cert", "sslserver", [qw(root-cert sca+clientAuth)], [qw(ca-cert)]),
199 "fail client trust and server purpose");
200 ok(!verify("ee-cert", "sslserver", [qw(root-cert cca+clientAuth)], [qw(ca-cert)]),
201 "fail client trust and client purpose");
202 ok(!verify("ee-cert", "sslserver", [qw(root-cert cca-serverAuth)], [qw(ca-cert)]),
203 "fail server mistrust and client purpose");
204 ok(!verify("ee-cert", "sslserver", [qw(root-cert cca-clientAuth)], [qw(ca-cert)]),
205 "fail client mistrust and client purpose");
206 ok(!verify("ee-cert", "sslserver", [qw(root-cert sca-serverAuth)], [qw(ca-cert)]),
207 "fail server mistrust and server purpose");
208 ok(!verify("ee-cert", "sslserver", [qw(root-cert sca-anyEKU)], [qw(ca-cert)]),
209 "fail wildcard mistrust and server purpose");
210 ok(!verify("ee-cert", "sslserver", [qw(root-cert cca-anyEKU)], [qw(ca-cert)]),
211 "fail wildcard mistrust and client purpose");
214 ok(verify("ee-client", "sslclient", [qw(root-cert)], [qw(ca-cert)]),
215 "accept client chain");
216 ok(!verify("ee-client", "sslserver", [qw(root-cert)], [qw(ca-cert)]),
217 "fail server leaf purpose");
218 ok(!verify("ee-cert", "sslclient", [qw(root-cert)], [qw(ca-cert)]),
219 "fail client leaf purpose");
220 ok(!verify("ee-cert2", "sslserver", [qw(root-cert)], [qw(ca-cert)]),
221 "fail wrong intermediate CA key");
222 ok(!verify("ee-name2", "sslserver", [qw(root-cert)], [qw(ca-cert)]),
223 "fail wrong intermediate CA DN");
224 ok(!verify("ee-expired", "sslserver", [qw(root-cert)], [qw(ca-cert)]),
225 "fail expired leaf");
226 ok(verify("ee-cert", "sslserver", [qw(ee-cert)], [], "-partial_chain"),
227 "accept last-resort direct leaf match");
228 ok(verify("ee-client", "sslclient", [qw(ee-client)], [], "-partial_chain"),
229 "accept last-resort direct leaf match");
230 ok(!verify("ee-cert", "sslserver", [qw(ee-client)], [], "-partial_chain"),
231 "fail last-resort direct leaf non-match");
232 ok(verify("ee-cert", "sslserver", [qw(ee+serverAuth)], [], "-partial_chain"),
233 "accept direct match with server trust");
234 ok(!verify("ee-cert", "sslserver", [qw(ee-serverAuth)], [], "-partial_chain"),
235 "fail direct match with server mistrust");
236 ok(verify("ee-client", "sslclient", [qw(ee+clientAuth)], [], "-partial_chain"),
237 "accept direct match with client trust");
238 ok(!verify("ee-client", "sslclient", [qw(ee-clientAuth)], [], "-partial_chain"),
239 "reject direct match with client mistrust");
240 ok(verify("ee-pathlen", "sslserver", [qw(root-cert)], [qw(ca-cert)]),
241 "accept non-ca with pathlen:0 by default");
242 ok(!verify("ee-pathlen", "sslserver", [qw(root-cert)], [qw(ca-cert)], "-x509_strict"),
243 "reject non-ca with pathlen:0 with strict flag");
245 # EE veaiants wrt timestamp signing
246 ok(verify("ee-timestampsign-CABforum", "timestampsign", [qw(root-cert)], [qw(ca-cert)]),
247 "accept timestampsign according to CAB forum");
248 ok(!verify("ee-timestampsign-CABforum-noncritxku", "timestampsign", [qw(root-cert)], [qw(ca-cert)]),
249 "fail timestampsign according to CAB forum with extendedKeyUsage not critical");
250 ok(!verify("ee-timestampsign-CABforum-serverauth", "timestampsign", [qw(root-cert)], [qw(ca-cert)]),
251 "fail timestampsign according to CAB forum with serverAuth");
252 ok(!verify("ee-timestampsign-CABforum-anyextkeyusage", "timestampsign", [qw(root-cert)], [qw(ca-cert)]),
253 "fail timestampsign according to CAB forum with anyExtendedKeyUsage");
254 ok(!verify("ee-timestampsign-CABforum-crlsign", "timestampsign", [qw(root-cert)], [qw(ca-cert)]),
255 "fail timestampsign according to CAB forum with cRLSign");
256 ok(!verify("ee-timestampsign-CABforum-keycertsign", "timestampsign", [qw(root-cert)], [qw(ca-cert)]),
257 "fail timestampsign according to CAB forum with keyCertSign");
258 ok(verify("ee-timestampsign-rfc3161", "timestampsign", [qw(root-cert)], [qw(ca-cert)]),
259 "accept timestampsign according to RFC 3161");
260 ok(!verify("ee-timestampsign-rfc3161-noncritxku", "timestampsign", [qw(root-cert)], [qw(ca-cert)]),
261 "fail timestampsign according to RFC 3161 with extendedKeyUsage not critical");
262 ok(verify("ee-timestampsign-rfc3161-digsig", "timestampsign", [qw(root-cert)], [qw(ca-cert)]),
263 "accept timestampsign according to RFC 3161 with digitalSignature");
265 # EE variants wrt code signing
266 ok(verify("ee-codesign", "codesign", [qw(root-cert)], [qw(ca-cert)]),
268 ok(!verify("ee-codesign-serverauth", "codesign", [qw(root-cert)], [qw(ca-cert)]),
269 "fail codesign with additional serverAuth");
270 ok(!verify("ee-codesign-anyextkeyusage", "codesign", [qw(root-cert)], [qw(ca-cert)]),
271 "fail codesign with additional anyExtendedKeyUsage");
272 ok(!verify("ee-codesign-crlsign", "codesign", [qw(root-cert)], [qw(ca-cert)]),
273 "fail codesign with additional cRLSign");
274 ok(!verify("ee-codesign-keycertsign", "codesign", [qw(root-cert)], [qw(ca-cert)]),
275 "fail codesign with additional keyCertSign");
276 ok(!verify("ee-codesign-noncritical", "codesign", [qw(root-cert)], [qw(ca-cert)]),
277 "fail codesign without critical KU");
278 ok(!verify("ee-cert", "codesign", [qw(root-cert)], [qw(ca-cert)]),
279 "fail sslserver as code sign");
280 ok(!verify("ee-client", "codesign", [qw(root-cert)], [qw(ca-cert)]),
281 "fail sslclient as codesign");
282 ok(!verify("ee-timestampsign-CABforum", "codesign", [qw(root-cert)], [qw(ca-cert)]),
283 "fail timestampsign according to CAB forum as codesign");
284 ok(!verify("ee-timestampsign-rfc3161", "codesign", [qw(root-cert)], [qw(ca-cert)]),
285 "fail timestampsign according to RFC 3161 as codesign");
288 ok(!verify("pc1-cert", "sslclient", [qw(root-cert)], [qw(ee-client ca-cert)]),
289 "fail to accept proxy cert without -allow_proxy_certs");
290 ok(verify("pc1-cert", "sslclient", [qw(root-cert)], [qw(ee-client ca-cert)],
291 "-allow_proxy_certs"),
292 "accept proxy cert 1");
293 ok(verify("pc2-cert", "sslclient", [qw(root-cert)], [qw(pc1-cert ee-client ca-cert)],
294 "-allow_proxy_certs"),
295 "accept proxy cert 2");
296 ok(!verify("bad-pc3-cert", "sslclient", [qw(root-cert)], [qw(pc1-cert ee-client ca-cert)],
297 "-allow_proxy_certs"),
298 "fail proxy cert with incorrect subject");
299 ok(!verify("bad-pc4-cert", "sslclient", [qw(root-cert)], [qw(pc1-cert ee-client ca-cert)],
300 "-allow_proxy_certs"),
301 "fail proxy cert with incorrect pathlen");
302 ok(verify("pc5-cert", "sslclient", [qw(root-cert)], [qw(pc1-cert ee-client ca-cert)],
303 "-allow_proxy_certs"),
304 "accept proxy cert missing proxy policy");
305 ok(!verify("pc6-cert", "sslclient", [qw(root-cert)], [qw(pc1-cert ee-client ca-cert)],
306 "-allow_proxy_certs"),
307 "failed proxy cert where last CN was added as a multivalue RDN component");
309 # Security level tests
310 ok(verify("ee-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "2"),
311 "accept RSA 2048 chain at auth level 2");
312 ok(!verify("ee-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "3"),
313 "reject RSA 2048 root at auth level 3");
314 ok(verify("ee-cert", "", ["root-cert-768"], ["ca-cert-768i"], "-auth_level", "0"),
315 "accept RSA 768 root at auth level 0");
316 ok(!verify("ee-cert", "", ["root-cert-768"], ["ca-cert-768i"]),
317 "reject RSA 768 root at auth level 1");
318 ok(verify("ee-cert-768i", "", ["root-cert"], ["ca-cert-768"], "-auth_level", "0"),
319 "accept RSA 768 intermediate at auth level 0");
320 ok(!verify("ee-cert-768i", "", ["root-cert"], ["ca-cert-768"]),
321 "reject RSA 768 intermediate at auth level 1");
322 ok(verify("ee-cert-768", "", ["root-cert"], ["ca-cert"], "-auth_level", "0"),
323 "accept RSA 768 leaf at auth level 0");
324 ok(!verify("ee-cert-768", "", ["root-cert"], ["ca-cert"]),
325 "reject RSA 768 leaf at auth level 1");
327 ok(verify("ee-cert", "", ["root-cert-md5"], ["ca-cert"], "-auth_level", "2"),
328 "accept md5 self-signed TA at auth level 2");
329 ok(verify("ee-cert", "", ["ca-cert-md5-any"], [], "-auth_level", "2"),
330 "accept md5 intermediate TA at auth level 2");
331 ok(verify("ee-cert", "", ["root-cert"], ["ca-cert-md5"], "-auth_level", "0"),
332 "accept md5 intermediate at auth level 0");
333 ok(!verify("ee-cert", "", ["root-cert"], ["ca-cert-md5"]),
334 "reject md5 intermediate at auth level 1");
335 ok(verify("ee-cert-md5", "", ["root-cert"], ["ca-cert"], "-auth_level", "0"),
336 "accept md5 leaf at auth level 0");
337 ok(!verify("ee-cert-md5", "", ["root-cert"], ["ca-cert"]),
338 "reject md5 leaf at auth level 1");
340 # Explicit vs named curve tests
342 skip "EC is not supported by this OpenSSL build", 7
344 ok(!verify("ee-cert-ec-explicit", "", ["root-cert"],
345 ["ca-cert-ec-named"]),
346 "reject explicit curve leaf with named curve intermediate");
347 ok(!verify("ee-cert-ec-named-explicit", "", ["root-cert"],
348 ["ca-cert-ec-explicit"]),
349 "reject named curve leaf with explicit curve intermediate");
350 ok(verify("ee-cert-ec-named-named", "", ["root-cert"],
351 ["ca-cert-ec-named"]),
352 "accept named curve leaf with named curve intermediate");
353 ok(verify("ee-cert-ec-sha3-224", "", ["root-cert"], ["ca-cert-ec-named"], ),
354 "accept cert generated with EC and SHA3-224");
355 ok(verify("ee-cert-ec-sha3-256", "", ["root-cert"], ["ca-cert-ec-named"], ),
356 "accept cert generated with EC and SHA3-256");
357 ok(verify("ee-cert-ec-sha3-384", "", ["root-cert"], ["ca-cert-ec-named"], ),
358 "accept cert generated with EC and SHA3-384");
359 ok(verify("ee-cert-ec-sha3-512", "", ["root-cert"], ["ca-cert-ec-named"], ),
360 "accept cert generated with EC and SHA3-512");
362 # Same as above but with base provider used for decoding
364 my $no_fips = disabled('fips') || ($ENV{NO_FIPS} // 0);
365 my $provconf = srctop_file("test", "fips-and-base.cnf");
366 my $provpath = bldtop_dir("providers");
367 my @prov = ("-provider-path", $provpath);
369 skip "EC is not supported or FIPS is disabled", 7
370 if disabled("ec") || $no_fips;
372 $ENV{OPENSSL_CONF} = $provconf;
374 ok(verify("ee-cert-ec-sha3-224", "", ["root-cert"], ["ca-cert-ec-named"], @prov),
375 "accept cert generated with EC and SHA3-224 w/fips");
376 ok(verify("ee-cert-ec-sha3-256", "", ["root-cert"], ["ca-cert-ec-named"], @prov),
377 "accept cert generated with EC and SHA3-256 w/fips");
378 ok(verify("ee-cert-ec-sha3-384", "", ["root-cert"], ["ca-cert-ec-named"], @prov),
379 "accept cert generated with EC and SHA3-384 w/fips");
380 ok(verify("ee-cert-ec-sha3-512", "", ["root-cert"], ["ca-cert-ec-named"], @prov),
381 "accept cert generated with EC and SHA3-512 w/fips");
383 delete $ENV{OPENSSL_CONF};
385 run(test(["fips_version_test", "-config", $provconf, ">3.0.0"]),
386 capture => 1, statusvar => \my $exit);
387 skip "FIPS provider version is too old", 3
390 $ENV{OPENSSL_CONF} = $provconf;
392 ok(!verify("ee-cert-ec-explicit", "", ["root-cert"],
393 ["ca-cert-ec-named"], @prov),
394 "reject explicit curve leaf with named curve intermediate w/fips");
395 ok(!verify("ee-cert-ec-named-explicit", "", ["root-cert"],
396 ["ca-cert-ec-explicit"], @prov),
397 "reject named curve leaf with explicit curve intermediate w/fips");
398 ok(verify("ee-cert-ec-named-named", "", ["root-cert"],
399 ["ca-cert-ec-named"], @prov),
400 "accept named curve leaf with named curve intermediate w/fips");
401 delete $ENV{OPENSSL_CONF};
404 # Depth tests, note the depth limit bounds the number of CA certificates
405 # between the trust-anchor and the leaf, so, for example, with a root->ca->leaf
406 # chain, depth = 1 is sufficient, but depth == 0 is not.
408 ok(verify("ee-cert", "", ["root-cert"], ["ca-cert"], "-verify_depth", "2"),
409 "accept chain with verify_depth 2");
410 ok(verify("ee-cert", "", ["root-cert"], ["ca-cert"], "-verify_depth", "1"),
411 "accept chain with verify_depth 1");
412 ok(!verify("ee-cert", "", ["root-cert"], ["ca-cert"], "-verify_depth", "0"),
413 "reject chain with verify_depth 0");
414 ok(verify("ee-cert", "", ["ca-cert-md5-any"], [], "-verify_depth", "0"),
415 "accept md5 intermediate TA with verify_depth 0");
417 # Name Constraints tests.
419 ok(verify("alt1-cert", "", ["root-cert"], ["ncca1-cert"], ),
420 "Name Constraints everything permitted");
422 ok(verify("alt2-cert", "", ["root-cert"], ["ncca2-cert"], ),
423 "Name Constraints nothing excluded");
425 ok(verify("alt3-cert", "", ["root-cert"], ["ncca1-cert", "ncca3-cert"], ),
426 "Name Constraints nested test all permitted");
428 ok(verify("goodcn1-cert", "", ["root-cert"], ["ncca1-cert"], ),
429 "Name Constraints CNs permitted");
431 ok(verify("goodcn2-cert", "", ["root-cert"], ["ncca1-cert"], ),
432 "Name Constraints CNs permitted - no SAN extension");
434 ok(!verify("badcn1-cert", "", ["root-cert"], ["ncca1-cert"], ),
435 "Name Constraints CNs not permitted");
437 ok(!verify("badalt1-cert", "", ["root-cert"], ["ncca1-cert"], ),
438 "Name Constraints hostname not permitted");
440 ok(!verify("badalt2-cert", "", ["root-cert"], ["ncca2-cert"], ),
441 "Name Constraints hostname excluded");
443 ok(!verify("badalt3-cert", "", ["root-cert"], ["ncca1-cert"], ),
444 "Name Constraints email address not permitted");
446 ok(!verify("badalt4-cert", "", ["root-cert"], ["ncca1-cert"], ),
447 "Name Constraints subject email address not permitted");
449 ok(!verify("badalt5-cert", "", ["root-cert"], ["ncca1-cert"], ),
450 "Name Constraints IP address not permitted");
452 ok(!verify("badalt6-cert", "", ["root-cert"], ["ncca1-cert"], ),
453 "Name Constraints CN hostname not permitted");
455 ok(!verify("badalt7-cert", "", ["root-cert"], ["ncca1-cert"], ),
456 "Name Constraints CN BMPSTRING hostname not permitted");
458 ok(!verify("badalt8-cert", "", ["root-cert"], ["ncca1-cert", "ncca3-cert"], ),
459 "Name constraints nested DNS name not permitted 1");
461 ok(!verify("badalt9-cert", "", ["root-cert"], ["ncca1-cert", "ncca3-cert"], ),
462 "Name constraints nested DNS name not permitted 2");
464 ok(!verify("badalt10-cert", "", ["root-cert"], ["ncca1-cert", "ncca3-cert"], ),
465 "Name constraints nested DNS name excluded");
467 ok(!verify("bad-othername-cert", "", ["root-cert"], ["nccaothername-cert"], ),
468 "CVE-2022-4203 type confusion test");
470 #Check that we get the expected failure return code
471 with({ exit_checker => sub { return shift == 2; } },
473 ok(verify("bad-othername-namec", "", ["bad-othername-namec-inter"], [],
474 "-partial_chain", "-attime", "1623060000"),
475 "Name constraints bad othername name constraint");
478 ok(verify("ee-pss-sha1-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "0"),
479 "Accept PSS signature using SHA1 at auth level 0");
481 ok(verify("ee-pss-sha256-cert", "", ["root-cert"], ["ca-cert"], ),
482 "CA with PSS signature using SHA256");
484 ok(!verify("ee-pss-sha1-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "1"),
485 "Reject PSS signature using SHA1 and auth level 1");
487 ok(verify("ee-pss-sha256-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "2"),
488 "PSS signature using SHA256 and auth level 2");
490 ok(verify("ee-pss-cert", "", ["root-cert"], ["ca-pss-cert"], ),
492 ok(!verify("ee-pss-wrong1.5-cert", "", ["root-cert"], ["ca-pss-cert"], ),
493 "CA producing regular PKCS#1 v1.5 signature with PSA-PSS key");
495 ok(!verify("many-names1", "", ["many-constraints"], ["many-constraints"], ),
496 "Too many names and constraints to check (1)");
497 ok(!verify("many-names2", "", ["many-constraints"], ["many-constraints"], ),
498 "Too many names and constraints to check (2)");
499 ok(!verify("many-names3", "", ["many-constraints"], ["many-constraints"], ),
500 "Too many names and constraints to check (3)");
502 ok(verify("some-names1", "", ["many-constraints"], ["many-constraints"], ),
503 "Not too many names and constraints to check (1)");
504 ok(verify("some-names2", "", ["many-constraints"], ["many-constraints"], ),
505 "Not too many names and constraints to check (2)");
506 ok(verify("some-names2", "", ["many-constraints"], ["many-constraints"], ),
507 "Not too many names and constraints to check (3)");
508 ok(verify("root-cert-rsa2", "", ["root-cert-rsa2"], [], "-check_ss_sig"),
509 "Public Key Algorithm rsa instead of rsaEncryption");
511 ok(verify("ee-self-signed", "", ["ee-self-signed"], [], "-attime", "1593565200"),
512 "accept trusted self-signed EE cert excluding key usage keyCertSign");
513 ok(verify("ee-ss-with-keyCertSign", "", ["ee-ss-with-keyCertSign"], []),
514 "accept trusted self-signed EE cert with key usage keyCertSign also when strict");
517 skip "Ed25519 is not supported by this OpenSSL build", 6
520 # ED25519 certificate from draft-ietf-curdle-pkix-04
521 ok(verify("ee-ed25519", "", ["root-ed25519"], []),
522 "accept X25519 EE cert issued by trusted Ed25519 self-signed CA cert");
524 ok(!verify("ee-ed25519", "", ["root-ed25519"], [], "-x509_strict"),
525 "reject X25519 EE cert in strict mode since AKID is missing");
527 ok(!verify("root-ed25519", "", ["ee-ed25519"], []),
528 "fail Ed25519 CA and EE certs swapped");
530 ok(verify("root-ed25519", "", ["root-ed25519"], []),
531 "accept trusted Ed25519 self-signed CA cert");
533 ok(!verify("ee-ed25519", "", ["ee-ed25519"], []),
534 "fail trusted Ed25519-signed self-issued X25519 cert");
536 ok(verify("ee-ed25519", "", ["ee-ed25519"], [], "-partial_chain"),
537 "accept last-resort direct leaf match Ed25519-signed self-issued cert");
542 skip "SM2 is not supported by this OpenSSL build", 2 if disabled("sm2");
544 ok_nofips(verify("sm2", "", ["sm2-ca-cert"], [], "-vfyopt", "distid:1234567812345678"),
546 ok_nofips(verify("sm2", "", ["sm2-ca-cert"], [], "-vfyopt", "hexdistid:31323334353637383132333435363738"),
550 # Mixed content tests
551 my $cert_file = srctop_file('test', 'certs', 'root-cert.pem');
552 my $rsa_file = srctop_file('test', 'certs', 'key-pass-12345.pem');
555 my $certplusrsa_file = 'certplusrsa.pem';
558 skip "Couldn't create certplusrsa.pem", 1
559 unless ( open $certplusrsa, '>', $certplusrsa_file
560 and copy($cert_file, $certplusrsa)
561 and copy($rsa_file, $certplusrsa)
562 and close $certplusrsa );
564 ok(run(app([ qw(openssl verify -trusted), $certplusrsa_file, $cert_file ])),
565 'Mixed cert + key file test');
569 my $rsapluscert_file = 'rsapluscert.pem';
572 skip "Couldn't create rsapluscert.pem", 1
573 unless ( open $rsapluscert, '>', $rsapluscert_file
574 and copy($rsa_file, $rsapluscert)
575 and copy($cert_file, $rsapluscert)
576 and close $rsapluscert );
578 ok(run(app([ qw(openssl verify -trusted), $rsapluscert_file, $cert_file ])),
579 'Mixed key + cert file test');
582 # Certificate Policies
583 ok(verify("ee-cert-policies", "", ["root-cert"], ["ca-pol-cert"],
584 "-policy_check", "-policy", "1.3.6.1.4.1.16604.998855.1",
586 "Certificate policy");
588 ok(!verify("ee-cert-policies-bad", "", ["root-cert"], ["ca-pol-cert"],
589 "-policy_check", "-policy", "1.3.6.1.4.1.16604.998855.1",
591 "Bad certificate policy");