test/cmp_msg_test.c

   1 /*
   2  * Copyright 2007-2021 The OpenSSL Project Authors. All Rights Reserved.
   3  * Copyright Nokia 2007-2019
   4  * Copyright Siemens AG 2015-2019
   5  *
   6  * Licensed under the Apache License 2.0 (the "License").  You may not use
   7  * this file except in compliance with the License.  You can obtain a copy
   8  * in the file LICENSE in the source distribution or at
   9  * https://www.openssl.org/source/license.html
  10  */
  11
  12 #include "helpers/cmp_testlib.h"
  13
  14 static const char *newkey_f;
  15 static const char *server_cert_f;
  16 static const char *pkcs10_f;
  17
  18 typedef struct test_fixture {
  19     const char *test_case_name;
  20     OSSL_CMP_CTX *cmp_ctx;
  21     /* for msg create tests */
  22     int bodytype;
  23     int err_code;
  24     /* for certConf */
  25     int fail_info;
  26     /* for protection tests */
  27     OSSL_CMP_MSG *msg;
  28     int expected;
  29     /* for error and response messages */
  30     OSSL_CMP_PKISI *si;
  31 } CMP_MSG_TEST_FIXTURE;
  32
  33 static OSSL_LIB_CTX *libctx = NULL;
  34 static OSSL_PROVIDER *default_null_provider = NULL, *provider = NULL;
  35
  36 static unsigned char ref[CMP_TEST_REFVALUE_LENGTH];
  37
  38 static void tear_down(CMP_MSG_TEST_FIXTURE *fixture)
  39 {
  40     OSSL_CMP_CTX_free(fixture->cmp_ctx);
  41     OSSL_CMP_MSG_free(fixture->msg);
  42     OSSL_CMP_PKISI_free(fixture->si);
  43     OPENSSL_free(fixture);
  44 }
  45
  46 #define SET_OPT_UNPROTECTED_SEND(ctx, val) \
  47     OSSL_CMP_CTX_set_option((ctx), OSSL_CMP_OPT_UNPROTECTED_SEND, (val))
  48 static CMP_MSG_TEST_FIXTURE *set_up(const char *const test_case_name)
  49 {
  50     CMP_MSG_TEST_FIXTURE *fixture;
  51
  52     if (!TEST_ptr(fixture = OPENSSL_zalloc(sizeof(*fixture))))
  53         return NULL;
  54     fixture->test_case_name = test_case_name;
  55
  56     if (!TEST_ptr(fixture->cmp_ctx = OSSL_CMP_CTX_new(libctx, NULL))
  57             || !TEST_true(SET_OPT_UNPROTECTED_SEND(fixture->cmp_ctx, 1))
  58             || !TEST_true(OSSL_CMP_CTX_set1_referenceValue(fixture->cmp_ctx,
  59                                                            ref, sizeof(ref)))) {
  60         tear_down(fixture);
  61         return NULL;
  62     }
  63     return fixture;
  64 }
  65
  66 static EVP_PKEY *newkey = NULL;
  67 static X509 *cert = NULL;
  68
  69 #define EXECUTE_MSG_CREATION_TEST(expr) \
  70     do { \
  71         OSSL_CMP_MSG *msg = NULL; \
  72         int good = fixture->expected != 0 ? \
  73             TEST_ptr(msg = (expr)) && TEST_true(valid_asn1_encoding(msg)) : \
  74             TEST_ptr_null(msg = (expr)); \
  75  \
  76         OSSL_CMP_MSG_free(msg); \
  77         ERR_print_errors_fp(stderr); \
  78         return good; \
  79     } while (0)
  80
  81 /*-
  82  * The following tests call a cmp message creation function.
  83  * if fixture->expected != 0:
  84  *         returns 1 if the message is created and syntactically correct.
  85  * if fixture->expected == 0
  86  *         returns 1 if message creation returns NULL
  87  */
  88 static int execute_certreq_create_test(CMP_MSG_TEST_FIXTURE *fixture)
  89 {
  90     EXECUTE_MSG_CREATION_TEST(ossl_cmp_certreq_new(fixture->cmp_ctx,
  91                                                    fixture->bodytype,
  92                                                    NULL));
  93 }
  94
  95 static int execute_errormsg_create_test(CMP_MSG_TEST_FIXTURE *fixture)
  96 {
  97     EXECUTE_MSG_CREATION_TEST(ossl_cmp_error_new(fixture->cmp_ctx, fixture->si,
  98                                                  fixture->err_code,
  99                                                  "details", 0));
 100 }
 101
 102 static int execute_rr_create_test(CMP_MSG_TEST_FIXTURE *fixture)
 103 {
 104     EXECUTE_MSG_CREATION_TEST(ossl_cmp_rr_new(fixture->cmp_ctx));
 105 }
 106
 107 static int execute_certconf_create_test(CMP_MSG_TEST_FIXTURE *fixture)
 108 {
 109     EXECUTE_MSG_CREATION_TEST(ossl_cmp_certConf_new
 110                               (fixture->cmp_ctx, OSSL_CMP_CERTREQID,
 111                                fixture->fail_info, NULL));
 112 }
 113
 114 static int execute_genm_create_test(CMP_MSG_TEST_FIXTURE *fixture)
 115 {
 116     EXECUTE_MSG_CREATION_TEST(ossl_cmp_genm_new(fixture->cmp_ctx));
 117 }
 118
 119 static int execute_pollreq_create_test(CMP_MSG_TEST_FIXTURE *fixture)
 120 {
 121     EXECUTE_MSG_CREATION_TEST(ossl_cmp_pollReq_new(fixture->cmp_ctx, 4711));
 122 }
 123
 124 static int execute_pkimessage_create_test(CMP_MSG_TEST_FIXTURE *fixture)
 125 {
 126     EXECUTE_MSG_CREATION_TEST(ossl_cmp_msg_create
 127                               (fixture->cmp_ctx, fixture->bodytype));
 128 }
 129
 130 static int set1_newPkey(OSSL_CMP_CTX *ctx, EVP_PKEY *pkey)
 131 {
 132     if (!EVP_PKEY_up_ref(pkey))
 133         return 0;
 134
 135     if (!OSSL_CMP_CTX_set0_newPkey(ctx, 1, pkey)) {
 136         EVP_PKEY_free(pkey);
 137         return 0;
 138     }
 139     return 1;
 140 }
 141
 142 static int test_cmp_create_ir_protection_set(void)
 143 {
 144     OSSL_CMP_CTX *ctx;
 145     unsigned char secret[16];
 146
 147     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 148
 149     ctx = fixture->cmp_ctx;
 150     fixture->bodytype = OSSL_CMP_PKIBODY_IR;
 151     fixture->err_code = -1;
 152     fixture->expected = 1;
 153     if (!TEST_int_eq(1, RAND_bytes_ex(libctx, secret, sizeof(secret), 0))
 154             || !TEST_true(SET_OPT_UNPROTECTED_SEND(ctx, 0))
 155             || !TEST_true(set1_newPkey(ctx, newkey))
 156             || !TEST_true(OSSL_CMP_CTX_set1_secretValue(ctx, secret,
 157                                                         sizeof(secret)))) {
 158         tear_down(fixture);
 159         fixture = NULL;
 160     }
 161     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 162     return result;
 163 }
 164
 165 static int test_cmp_create_ir_protection_fails(void)
 166 {
 167     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 168     fixture->bodytype = OSSL_CMP_PKIBODY_IR;
 169     fixture->err_code = -1;
 170     fixture->expected = 0;
 171     if (!TEST_true(OSSL_CMP_CTX_set1_pkey(fixture->cmp_ctx, newkey))
 172             || !TEST_true(SET_OPT_UNPROTECTED_SEND(fixture->cmp_ctx, 0))
 173             /* newkey used by default for signing does not match cert: */
 174             || !TEST_true(OSSL_CMP_CTX_set1_cert(fixture->cmp_ctx, cert))) {
 175         tear_down(fixture);
 176         fixture = NULL;
 177     }
 178     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 179     return result;
 180 }
 181
 182 static int test_cmp_create_cr_without_key(void)
 183 {
 184     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 185     fixture->bodytype = OSSL_CMP_PKIBODY_CR;
 186     fixture->err_code = -1;
 187     fixture->expected = 0;
 188     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 189     return result;
 190 }
 191
 192 static int test_cmp_create_cr(void)
 193 {
 194     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 195     fixture->bodytype = OSSL_CMP_PKIBODY_CR;
 196     fixture->err_code = -1;
 197     fixture->expected = 1;
 198     if (!TEST_true(set1_newPkey(fixture->cmp_ctx, newkey))) {
 199         tear_down(fixture);
 200         fixture = NULL;
 201     }
 202     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 203     return result;
 204 }
 205
 206 static int test_cmp_create_certreq_with_invalid_bodytype(void)
 207 {
 208     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 209     fixture->bodytype = OSSL_CMP_PKIBODY_RR;
 210     fixture->err_code = -1;
 211     fixture->expected = 0;
 212     if (!TEST_true(set1_newPkey(fixture->cmp_ctx, newkey))) {
 213         tear_down(fixture);
 214         fixture = NULL;
 215     }
 216     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 217     return result;
 218 }
 219
 220 static int test_cmp_create_p10cr(void)
 221 {
 222     OSSL_CMP_CTX *ctx;
 223     X509_REQ *p10cr = NULL;
 224
 225     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 226     ctx = fixture->cmp_ctx;
 227     fixture->bodytype = OSSL_CMP_PKIBODY_P10CR;
 228     fixture->err_code = CMP_R_ERROR_CREATING_CERTREQ;
 229     fixture->expected = 1;
 230     if (!TEST_ptr(p10cr = load_csr_der(pkcs10_f, libctx))
 231             || !TEST_true(set1_newPkey(ctx, newkey))
 232             || !TEST_true(OSSL_CMP_CTX_set1_p10CSR(ctx, p10cr))) {
 233         tear_down(fixture);
 234         fixture = NULL;
 235     }
 236     X509_REQ_free(p10cr);
 237     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 238     return result;
 239 }
 240
 241 static int test_cmp_create_p10cr_null(void)
 242 {
 243     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 244     fixture->bodytype = OSSL_CMP_PKIBODY_P10CR;
 245     fixture->err_code = CMP_R_ERROR_CREATING_CERTREQ;
 246     fixture->expected = 0;
 247     if (!TEST_true(set1_newPkey(fixture->cmp_ctx, newkey))) {
 248         tear_down(fixture);
 249         fixture = NULL;
 250     }
 251     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 252     return result;
 253 }
 254
 255 static int test_cmp_create_kur(void)
 256 {
 257     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 258     fixture->bodytype = OSSL_CMP_PKIBODY_KUR;
 259     fixture->err_code = -1;
 260     fixture->expected = 1;
 261     if (!TEST_true(set1_newPkey(fixture->cmp_ctx, newkey))
 262             || !TEST_true(OSSL_CMP_CTX_set1_oldCert(fixture->cmp_ctx, cert))) {
 263         tear_down(fixture);
 264         fixture = NULL;
 265     }
 266     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 267     return result;
 268 }
 269
 270 static int test_cmp_create_kur_without_oldcert(void)
 271 {
 272     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 273     fixture->bodytype = OSSL_CMP_PKIBODY_KUR;
 274     fixture->err_code = -1;
 275     fixture->expected = 0;
 276     if (!TEST_true(set1_newPkey(fixture->cmp_ctx, newkey))) {
 277         tear_down(fixture);
 278         fixture = NULL;
 279     }
 280     EXECUTE_TEST(execute_certreq_create_test, tear_down);
 281     return result;
 282 }
 283
 284 static int test_cmp_create_certconf(void)
 285 {
 286     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 287     fixture->fail_info = 0;
 288     fixture->expected = 1;
 289     if (!TEST_true(ossl_cmp_ctx_set0_newCert(fixture->cmp_ctx,
 290                                              X509_dup(cert)))) {
 291         tear_down(fixture);
 292         fixture = NULL;
 293     }
 294     EXECUTE_TEST(execute_certconf_create_test, tear_down);
 295     return result;
 296 }
 297
 298 static int test_cmp_create_certconf_badAlg(void)
 299 {
 300     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 301     fixture->fail_info = 1 << OSSL_CMP_PKIFAILUREINFO_badAlg;
 302     fixture->expected = 1;
 303     if (!TEST_true(ossl_cmp_ctx_set0_newCert(fixture->cmp_ctx,
 304                                              X509_dup(cert)))) {
 305         tear_down(fixture);
 306         fixture = NULL;
 307     }
 308     EXECUTE_TEST(execute_certconf_create_test, tear_down);
 309     return result;
 310 }
 311
 312 static int test_cmp_create_certconf_fail_info_max(void)
 313 {
 314     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 315     fixture->fail_info = 1 << OSSL_CMP_PKIFAILUREINFO_MAX;
 316     fixture->expected = 1;
 317     if (!TEST_true(ossl_cmp_ctx_set0_newCert(fixture->cmp_ctx,
 318                                              X509_dup(cert)))) {
 319         tear_down(fixture);
 320         fixture = NULL;
 321     }
 322     EXECUTE_TEST(execute_certconf_create_test, tear_down);
 323     return result;
 324 }
 325
 326 static int test_cmp_create_error_msg(void)
 327 {
 328     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 329     fixture->si = OSSL_CMP_STATUSINFO_new(OSSL_CMP_PKISTATUS_rejection,
 330                                           OSSL_CMP_PKIFAILUREINFO_systemFailure,
 331                                           NULL);
 332     fixture->err_code = -1;
 333     fixture->expected = 1; /* expected: message creation is successful */
 334     if (!TEST_true(set1_newPkey(fixture->cmp_ctx, newkey))) {
 335         tear_down(fixture);
 336         fixture = NULL;
 337     }
 338     EXECUTE_TEST(execute_errormsg_create_test, tear_down);
 339     return result;
 340 }
 341
 342 static int test_cmp_create_pollreq(void)
 343 {
 344     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 345     fixture->expected = 1;
 346     EXECUTE_TEST(execute_pollreq_create_test, tear_down);
 347     return result;
 348 }
 349
 350 static int test_cmp_create_rr(void)
 351 {
 352     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 353     fixture->expected = 1;
 354     if (!TEST_true(OSSL_CMP_CTX_set1_oldCert(fixture->cmp_ctx, cert))) {
 355         tear_down(fixture);
 356         fixture = NULL;
 357     }
 358     EXECUTE_TEST(execute_rr_create_test, tear_down);
 359     return result;
 360 }
 361
 362 static int test_cmp_create_genm(void)
 363 {
 364     OSSL_CMP_ITAV *iv = NULL;
 365
 366     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 367     fixture->expected = 1;
 368     iv = OSSL_CMP_ITAV_create(OBJ_nid2obj(NID_id_it_implicitConfirm), NULL);
 369     if (!TEST_ptr(iv)
 370             || !TEST_true(OSSL_CMP_CTX_push0_genm_ITAV(fixture->cmp_ctx, iv))) {
 371         OSSL_CMP_ITAV_free(iv);
 372         tear_down(fixture);
 373         fixture = NULL;
 374     }
 375
 376     EXECUTE_TEST(execute_genm_create_test, tear_down);
 377     return result;
 378 }
 379
 380 static int execute_certrep_create(CMP_MSG_TEST_FIXTURE *fixture)
 381 {
 382     OSSL_CMP_CTX *ctx = fixture->cmp_ctx;
 383     OSSL_CMP_CERTREPMESSAGE *crepmsg = OSSL_CMP_CERTREPMESSAGE_new();
 384     OSSL_CMP_CERTRESPONSE *read_cresp, *cresp = OSSL_CMP_CERTRESPONSE_new();
 385     EVP_PKEY *privkey;
 386     X509 *certfromresp = NULL;
 387     int res = 0;
 388
 389     if (crepmsg == NULL || cresp == NULL)
 390         goto err;
 391     if (!ASN1_INTEGER_set(cresp->certReqId, 99))
 392         goto err;
 393     if ((cresp->certifiedKeyPair = OSSL_CMP_CERTIFIEDKEYPAIR_new()) == NULL)
 394         goto err;
 395     cresp->certifiedKeyPair->certOrEncCert->type =
 396         OSSL_CMP_CERTORENCCERT_CERTIFICATE;
 397     if ((cresp->certifiedKeyPair->certOrEncCert->value.certificate =
 398          X509_dup(cert)) == NULL
 399             || !sk_OSSL_CMP_CERTRESPONSE_push(crepmsg->response, cresp))
 400         goto err;
 401     cresp = NULL;
 402     read_cresp = ossl_cmp_certrepmessage_get0_certresponse(crepmsg, 99);
 403     if (!TEST_ptr(read_cresp))
 404         goto err;
 405     if (!TEST_ptr_null(ossl_cmp_certrepmessage_get0_certresponse(crepmsg, 88)))
 406         goto err;
 407     privkey = OSSL_CMP_CTX_get0_newPkey(ctx, 1); /* may be NULL */
 408     certfromresp = ossl_cmp_certresponse_get1_cert(read_cresp, ctx, privkey);
 409     if (certfromresp == NULL || !TEST_int_eq(X509_cmp(cert, certfromresp), 0))
 410         goto err;
 411
 412     res = 1;
 413  err:
 414     X509_free(certfromresp);
 415     OSSL_CMP_CERTRESPONSE_free(cresp);
 416     OSSL_CMP_CERTREPMESSAGE_free(crepmsg);
 417     return res;
 418 }
 419
 420 static int test_cmp_create_certrep(void)
 421 {
 422     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 423     EXECUTE_TEST(execute_certrep_create, tear_down);
 424     return result;
 425 }
 426
 427 static int execute_rp_create(CMP_MSG_TEST_FIXTURE *fixture)
 428 {
 429     OSSL_CMP_PKISI *si = OSSL_CMP_STATUSINFO_new(33, 44, "a text");
 430     X509_NAME *issuer = X509_NAME_new();
 431     ASN1_INTEGER *serial = ASN1_INTEGER_new();
 432     OSSL_CRMF_CERTID *cid = NULL;
 433     OSSL_CMP_MSG *rpmsg = NULL;
 434     int res = 0;
 435
 436     if (si == NULL || issuer == NULL || serial == NULL)
 437         goto err;
 438
 439     if (!X509_NAME_add_entry_by_txt(issuer, "CN", MBSTRING_ASC,
 440                                     (unsigned char *)"The Issuer", -1, -1, 0)
 441             || !ASN1_INTEGER_set(serial, 99)
 442             || (cid = OSSL_CRMF_CERTID_gen(issuer, serial)) == NULL
 443             || (rpmsg = ossl_cmp_rp_new(fixture->cmp_ctx, si, cid, 1)) == NULL)
 444         goto err;
 445
 446     if (!TEST_ptr(ossl_cmp_revrepcontent_get_CertId(rpmsg->body->value.rp, 0)))
 447         goto err;
 448
 449     if (!TEST_ptr(ossl_cmp_revrepcontent_get_pkisi(rpmsg->body->value.rp, 0)))
 450         goto err;
 451
 452     res = 1;
 453  err:
 454     ASN1_INTEGER_free(serial);
 455     X509_NAME_free(issuer);
 456     OSSL_CRMF_CERTID_free(cid);
 457     OSSL_CMP_PKISI_free(si);
 458     OSSL_CMP_MSG_free(rpmsg);
 459     return res;
 460 }
 461
 462 static int test_cmp_create_rp(void)
 463 {
 464     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 465     EXECUTE_TEST(execute_rp_create, tear_down);
 466     return result;
 467 }
 468
 469 static int execute_pollrep_create(CMP_MSG_TEST_FIXTURE *fixture)
 470 {
 471     OSSL_CMP_MSG *pollrep;
 472     int res = 0;
 473
 474     pollrep = ossl_cmp_pollRep_new(fixture->cmp_ctx, 77, 2000);
 475     if (!TEST_ptr(pollrep))
 476         return 0;
 477     if (!TEST_ptr(ossl_cmp_pollrepcontent_get0_pollrep(pollrep->body->
 478                                                        value.pollRep, 77)))
 479         goto err;
 480     if (!TEST_ptr_null(ossl_cmp_pollrepcontent_get0_pollrep(pollrep->body->
 481                                                             value.pollRep, 88)))
 482         goto err;
 483
 484     res = 1;
 485  err:
 486     OSSL_CMP_MSG_free(pollrep);
 487     return res;
 488 }
 489
 490 static int test_cmp_create_pollrep(void)
 491 {
 492     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 493     EXECUTE_TEST(execute_pollrep_create, tear_down);
 494     return result;
 495 }
 496
 497 static int test_cmp_pkimessage_create(int bodytype)
 498 {
 499     X509_REQ *p10cr = NULL;
 500
 501     SETUP_TEST_FIXTURE(CMP_MSG_TEST_FIXTURE, set_up);
 502
 503     switch (fixture->bodytype = bodytype) {
 504     case OSSL_CMP_PKIBODY_P10CR:
 505         fixture->expected = 1;
 506         p10cr = load_csr_der(pkcs10_f, libctx);
 507         if (!TEST_true(OSSL_CMP_CTX_set1_p10CSR(fixture->cmp_ctx, p10cr))) {
 508             tear_down(fixture);
 509             fixture = NULL;
 510         }
 511         X509_REQ_free(p10cr);
 512         break;
 513     case OSSL_CMP_PKIBODY_IR:
 514     case OSSL_CMP_PKIBODY_IP:
 515     case OSSL_CMP_PKIBODY_CR:
 516     case OSSL_CMP_PKIBODY_CP:
 517     case OSSL_CMP_PKIBODY_KUR:
 518     case OSSL_CMP_PKIBODY_KUP:
 519     case OSSL_CMP_PKIBODY_RR:
 520     case OSSL_CMP_PKIBODY_RP:
 521     case OSSL_CMP_PKIBODY_PKICONF:
 522     case OSSL_CMP_PKIBODY_GENM:
 523     case OSSL_CMP_PKIBODY_GENP:
 524     case OSSL_CMP_PKIBODY_ERROR:
 525     case OSSL_CMP_PKIBODY_CERTCONF:
 526     case OSSL_CMP_PKIBODY_POLLREQ:
 527     case OSSL_CMP_PKIBODY_POLLREP:
 528         fixture->expected = 1;
 529         break;
 530     default:
 531         fixture->expected = 0;
 532         break;
 533     }
 534
 535     EXECUTE_TEST(execute_pkimessage_create_test, tear_down);
 536     return result;
 537 }
 538
 539 void cleanup_tests(void)
 540 {
 541     EVP_PKEY_free(newkey);
 542     X509_free(cert);
 543     OSSL_PROVIDER_unload(default_null_provider);
 544     OSSL_PROVIDER_unload(provider);
 545     OSSL_LIB_CTX_free(libctx);
 546 }
 547
 548 #define USAGE "new.key server.crt pkcs10.der module_name [module_conf_file]\n"
 549 OPT_TEST_DECLARE_USAGE(USAGE)
 550
 551 int setup_tests(void)
 552 {
 553     if (!test_skip_common_options()) {
 554         TEST_error("Error parsing test options\n");
 555         return 0;
 556     }
 557
 558     if (!TEST_ptr(newkey_f = test_get_argument(0))
 559             || !TEST_ptr(server_cert_f = test_get_argument(1))
 560             || !TEST_ptr(pkcs10_f = test_get_argument(2))) {
 561         TEST_error("usage: cmp_msg_test %s", USAGE);
 562         return 0;
 563     }
 564
 565     if (!test_arg_libctx(&libctx, &default_null_provider, &provider, 3, USAGE))
 566         return 0;
 567
 568     if (!TEST_ptr(newkey = load_pkey_pem(newkey_f, libctx))
 569             || !TEST_ptr(cert = load_cert_pem(server_cert_f, libctx))
 570             || !TEST_int_eq(1, RAND_bytes_ex(libctx, ref, sizeof(ref), 0))) {
 571         cleanup_tests();
 572         return 0;
 573     }
 574
 575     /* Message creation tests */
 576     ADD_TEST(test_cmp_create_certreq_with_invalid_bodytype);
 577     ADD_TEST(test_cmp_create_ir_protection_fails);
 578     ADD_TEST(test_cmp_create_ir_protection_set);
 579     ADD_TEST(test_cmp_create_error_msg);
 580     ADD_TEST(test_cmp_create_certconf);
 581     ADD_TEST(test_cmp_create_certconf_badAlg);
 582     ADD_TEST(test_cmp_create_certconf_fail_info_max);
 583     ADD_TEST(test_cmp_create_kur);
 584     ADD_TEST(test_cmp_create_kur_without_oldcert);
 585     ADD_TEST(test_cmp_create_cr);
 586     ADD_TEST(test_cmp_create_cr_without_key);
 587     ADD_TEST(test_cmp_create_p10cr);
 588     ADD_TEST(test_cmp_create_p10cr_null);
 589     ADD_TEST(test_cmp_create_pollreq);
 590     ADD_TEST(test_cmp_create_rr);
 591     ADD_TEST(test_cmp_create_rp);
 592     ADD_TEST(test_cmp_create_genm);
 593     ADD_TEST(test_cmp_create_certrep);
 594     ADD_TEST(test_cmp_create_pollrep);
 595     ADD_ALL_TESTS_NOSUBTEST(test_cmp_pkimessage_create,
 596                             OSSL_CMP_PKIBODY_POLLREP + 1);
 597     return 1;
 598 }