OERV-RUNTIME/boringssl
2
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add tests for the server accepting client certificates.

Browse Source 
Change-Id: I9acc4363c6b9804d5fe464053393cf16ffb7785c
Reviewed-on: https://boringssl-review.googlesource.com/1159
Reviewed-by: Adam Langley <agl@google.com>
This commit is contained in:
David Benjamin
2014-07-14 21:45:57 +00:00
committed by Adam Langley
parent 51b1f7427b
commit 67666e7823
2 changed files with 25 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ssl/test/bssl_shim.cc
+7
View File
@@ -64,6 +64,10 @@ int select_certificate_callback(const struct ssl_early_callback_ctx *ctx) {
return 1;
}
int skip_verify(int preverify_ok, X509_STORE_CTX *store_ctx) {
return 1;
}
SSL *setup_test(int is_server) {
if (!SSL_library_init()) {
return NULL;
@@ -181,6 +185,9 @@ int main(int argc, char **argv) {
}
// Conveniently, 00 is not a certificate type.
expected_certificate_types = argv[i];
} else if (strcmp(argv[i], "-require-any-client-certificate") == 0) {
SSL_set_verify(ssl, SSL_VERIFY_PEER|SSL_VERIFY_FAIL_IF_NO_PEER_CERT,
skip_verify);
} else {
fprintf(stderr, "Unknown argument: %s\n", argv[i]);
return 1;
ssl/test/runner/runner.go
+18 -2
View File
@@ -536,7 +536,7 @@ func addClientAuthTests() {
testCases = append(testCases, testCase{
testType: clientTest,
name: ver.name + "-ClientAuth-RSA",
name: ver.name + "-Client-ClientAuth-RSA",
config: Config{
MinVersion: ver.version,
MaxVersion: ver.version,
@@ -550,7 +550,7 @@ func addClientAuthTests() {
})
testCases = append(testCases, testCase{
testType: clientTest,
name: ver.name + "-ClientAuth-ECDSA",
name: ver.name + "-Client-ClientAuth-ECDSA",
config: Config{
MinVersion: ver.version,
MaxVersion: ver.version,
@@ -562,6 +562,22 @@ func addClientAuthTests() {
"-key-file", ecdsaKeyFile,
},
})
testCases = append(testCases, testCase{
testType: serverTest,
name: ver.name + "-Server-ClientAuth-RSA",
config: Config{
Certificates: []Certificate{rsaCertificate},
},
flags: []string{"-require-any-client-certificate"},
})
testCases = append(testCases, testCase{
testType: serverTest,
name: ver.name + "-Server-ClientAuth-ECDSA",
config: Config{
Certificates: []Certificate{ecdsaCertificate},
},
flags: []string{"-require-any-client-certificate"},
})
}
}