nss-3.41/nss/cmd/libpkix/pkix_pl/module/test_httpcertstore.c - manifest_repos/nss - Git at Google

 /*
  * test_httpcertstore.c
  *
  * Test Httpcertstore Type
  *
  * Copyright 2004-2005 Sun Microsystems, Inc.  All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are met:
  *
  *   1. Redistribution of source code must retain the above copyright notice,
  *      this list of conditions and the following disclaimer.
  *
  *   2. Redistribution in binary form must reproduce the above copyright
  *      notice, this list of conditions and the following disclaimer in the
  *      documentation and/or other materials provided with the distribution.
  *
  * Neither the name of Sun Microsystems, Inc. or the names of contributors may
  * be used to endorse or promote products derived from this software without
  * specific prior written permission.
  *
  * This software is provided "AS IS," without a warranty of any kind. ALL
  * EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING
  * ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE
  * OR NON-INFRINGEMENT, ARE HEREBY EXCLUDED. SUN MICROSYSTEMS, INC. ("SUN")
  * AND ITS LICENSORS SHALL NOT BE LIABLE FOR ANY DAMAGES SUFFERED BY LICENSEE
  * AS A RESULT OF USING, MODIFYING OR DISTRIBUTING THIS SOFTWARE OR ITS
  * DERIVATIVES. IN NO EVENT WILL SUN OR ITS LICENSORS BE LIABLE FOR ANY LOST
  * REVENUE, PROFIT OR DATA, OR FOR DIRECT, INDIRECT, SPECIAL, CONSEQUENTIAL,
  * INCIDENTAL OR PUNITIVE DAMAGES, HOWEVER CAUSED AND REGARDLESS OF THE THEORY
  * OF LIABILITY, ARISING OUT OF THE USE OF OR INABILITY TO USE THIS SOFTWARE,
  * EVEN IF SUN HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
  *
  * You acknowledge that this software is not designed or intended for use in
  * the design, construction, operation or maintenance of any nuclear facility.
  */

 #include "testutil.h"
 #include "testutil_nss.h"
 #include "pkix_pl_common.h"

 static void *plContext = NULL;

 static void
 printUsage(char *testname)
 {
     char *fmt =
         "USAGE: %s [-arenas] certDir certName\n";
     printf(fmt, "test_httpcertstore");
 }

 /* Functional tests for Socket public functions */
 static void
 do_other_work(void)
 { /* while waiting for nonblocking I/O to complete */
     (void)PR_Sleep(2 * 60);
 }

 PKIX_Error *
 PKIX_PL_HttpCertStore_Create(
     PKIX_PL_HttpClient *client, /* if NULL, use default Client */
     PKIX_PL_GeneralName *location,
     PKIX_CertStore **pCertStore,
     void *plContext);

 PKIX_Error *
 pkix_pl_HttpCertStore_CreateWithAsciiName(
     PKIX_PL_HttpClient *client, /* if NULL, use default Client */
     char *location,
     PKIX_CertStore **pCertStore,
     void *plContext);

 static PKIX_Error *
 getLocation(
     PKIX_PL_Cert *certWithAia,
     PKIX_PL_GeneralName **pLocation,
     void *plContext)
 {
     PKIX_List *aiaList = NULL;
     PKIX_UInt32 size = 0;
     PKIX_PL_InfoAccess *aia = NULL;
     PKIX_UInt32 iaType = PKIX_INFOACCESS_LOCATION_UNKNOWN;
     PKIX_PL_GeneralName *location = NULL;

     PKIX_TEST_STD_VARS();

     subTest("Getting Authority Info Access");

     PKIX_TEST_EXPECT_NO_ERROR(PKIX_PL_Cert_GetAuthorityInfoAccess(certWithAia, &aiaList, plContext));

     PKIX_TEST_EXPECT_NO_ERROR(PKIX_List_GetLength(aiaList, &size, plContext));

     if (size != 1) {
         pkixTestErrorMsg = "unexpected number of AIA";
         goto cleanup;
     }

     PKIX_TEST_EXPECT_NO_ERROR(PKIX_List_GetItem(aiaList, 0, (PKIX_PL_Object **)&aia, plContext));

     PKIX_TEST_EXPECT_NO_ERROR(PKIX_PL_InfoAccess_GetLocationType(aia, &iaType, plContext));

     if (iaType != PKIX_INFOACCESS_LOCATION_HTTP) {
         pkixTestErrorMsg = "unexpected location type in AIA";
         goto cleanup;
     }

     PKIX_TEST_EXPECT_NO_ERROR(PKIX_PL_InfoAccess_GetLocation(aia, &location, plContext));

     *pLocation = location;

 cleanup:
     PKIX_TEST_DECREF_AC(aiaList);
     PKIX_TEST_DECREF_AC(aia);

     PKIX_TEST_RETURN();

     return (NULL);
 }

 int
 test_httpcertstore(int argc, char *argv[])
 {

     PKIX_UInt32 i = 0;
     PKIX_UInt32 numCerts = 0;
     PKIX_UInt32 numCrls = 0;
     int j = 0;
     PKIX_UInt32 actualMinorVersion;
     PKIX_UInt32 length = 0;

     char *certName = NULL;
     char *certDir = NULL;
     PKIX_PL_Cert *cmdLineCert = NULL;
     PKIX_PL_Cert *cert = NULL;
     PKIX_CertSelector *certSelector = NULL;
     PKIX_CertStore *certStore = NULL;
     PKIX_CertStore *crlStore = NULL;
     PKIX_PL_GeneralName *location = NULL;
     PKIX_CertStore_CertCallback getCerts = NULL;
     PKIX_List *certs = NULL;
     char *asciiResult = NULL;
     void *nbio = NULL;

     PKIX_PL_CRL *crl = NULL;
     PKIX_CRLSelector *crlSelector = NULL;
     char *crlLocation = "http://betty.nist.gov/pathdiscoverytestsuite/CRL"
                         "files/BasicHTTPURIPeer2CACRL.crl";
     PKIX_CertStore_CRLCallback getCrls = NULL;
     PKIX_List *crls = NULL;
     PKIX_PL_String *crlString = NULL;

     PKIX_TEST_STD_VARS();

     startTests("HttpCertStore");

     PKIX_TEST_EXPECT_NO_ERROR(
         PKIX_PL_NssContext_Create(0, PKIX_FALSE, NULL, &plContext));

     if (argc != (j + 3)) {
         printUsage(argv[0]);
         pkixTestErrorMsg = "Missing command line argument.";
         goto cleanup;
     }

     certDir = argv[++j];
     certName = argv[++j];

     cmdLineCert = createCert(certDir, certName, plContext);
     if (cmdLineCert == NULL) {
         pkixTestErrorMsg = "Unable to create Cert";
         goto cleanup;
     }

     /* muster arguments to create HttpCertStore */
     PKIX_TEST_EXPECT_NO_ERROR(getLocation(cmdLineCert, &location, plContext));

     if (location == NULL) {
         pkixTestErrorMsg = "Give me a cert with an HTTP URI!";
         goto cleanup;
     }

     /* create HttpCertStore */
     PKIX_TEST_EXPECT_NO_ERROR(PKIX_PL_HttpCertStore_Create(NULL, location, &certStore, plContext));

     /* get the GetCerts callback */
     PKIX_TEST_EXPECT_NO_ERROR(PKIX_CertStore_GetCertCallback(certStore, &getCerts, plContext));

     /* create a CertSelector */
     PKIX_TEST_EXPECT_NO_ERROR(PKIX_CertSelector_Create(NULL, NULL, &certSelector, plContext));

     /* Get the certs */
     PKIX_TEST_EXPECT_NO_ERROR(getCerts(certStore, certSelector, &nbio, &certs, plContext));

     while (nbio != NULL) {
         /* poll for a completion */

         PKIX_TEST_EXPECT_NO_ERROR(PKIX_CertStore_CertContinue(certStore, certSelector, &nbio, &certs, plContext));
     }

     if (certs) {

         PKIX_TEST_EXPECT_NO_ERROR(PKIX_List_GetLength(certs, &numCerts, plContext));

         if (numCerts == 0) {
             printf("HttpCertStore returned an empty Cert list\n");
             goto cleanup;
         }

         for (i = 0; i < numCerts; i++) {
             PKIX_TEST_EXPECT_NO_ERROR(PKIX_List_GetItem(certs,
                                                         i,
                                                         (PKIX_PL_Object **)&cert,
                                                         plContext));

             asciiResult = PKIX_Cert2ASCII(cert);

             printf("CERT[%d]:\n%s\n", i, asciiResult);

             /* PKIX_Cert2ASCII used PKIX_PL_Malloc(...,,NULL) */
             PKIX_TEST_EXPECT_NO_ERROR(PKIX_PL_Free(asciiResult, NULL));
             asciiResult = NULL;

             PKIX_TEST_DECREF_BC(cert);
         }
     } else {
         printf("HttpCertStore returned a NULL Cert list\n");
     }

     /* create HttpCertStore */
     PKIX_TEST_EXPECT_NO_ERROR(pkix_pl_HttpCertStore_CreateWithAsciiName(NULL, crlLocation, &crlStore, plContext));

     /* get the GetCrls callback */
     PKIX_TEST_EXPECT_NO_ERROR(PKIX_CertStore_GetCRLCallback(crlStore, &getCrls, plContext));

     /* create a CrlSelector */
     PKIX_TEST_EXPECT_NO_ERROR(PKIX_CRLSelector_Create(NULL, NULL, &crlSelector, plContext));

     /* Get the crls */
     PKIX_TEST_EXPECT_NO_ERROR(getCrls(crlStore, crlSelector, &nbio, &crls, plContext));

     while (nbio != NULL) {
         /* poll for a completion */

         PKIX_TEST_EXPECT_NO_ERROR(PKIX_CertStore_CrlContinue(crlStore, crlSelector, &nbio, &crls, plContext));
     }

     if (crls) {

         PKIX_TEST_EXPECT_NO_ERROR(PKIX_List_GetLength(crls, &numCrls, plContext));

         if (numCrls == 0) {
             printf("HttpCertStore returned an empty CRL list\n");
             goto cleanup;
         }

         for (i = 0; i < numCrls; i++) {
             PKIX_TEST_EXPECT_NO_ERROR(PKIX_List_GetItem(crls,
                                                         i,
                                                         (PKIX_PL_Object **)&crl,
                                                         plContext));

             PKIX_TEST_EXPECT_NO_ERROR(PKIX_PL_Object_ToString(
                 (PKIX_PL_Object *)crl,
                 &crlString,
                 plContext));

             PKIX_TEST_EXPECT_NO_ERROR(PKIX_PL_String_GetEncoded(crlString,
                                                                 PKIX_ESCASCII,
                                                                 (void **)&asciiResult,
                                                                 &length,
                                                                 plContext));

             printf("CRL[%d]:\n%s\n", i, asciiResult);

             PKIX_TEST_EXPECT_NO_ERROR(PKIX_PL_Free(asciiResult, plContext));
             PKIX_TEST_DECREF_BC(crlString);
             PKIX_TEST_DECREF_BC(crl);
         }
     } else {
         printf("HttpCertStore returned a NULL CRL list\n");
     }

 cleanup:

     PKIX_TEST_DECREF_AC(cert);
     PKIX_TEST_DECREF_AC(cmdLineCert);
     PKIX_TEST_DECREF_AC(certStore);
     PKIX_TEST_DECREF_AC(crlStore);
     PKIX_TEST_DECREF_AC(location);
     PKIX_TEST_DECREF_AC(certs);
     PKIX_TEST_DECREF_AC(crl);
     PKIX_TEST_DECREF_AC(crlString);
     PKIX_TEST_DECREF_AC(crls);

     PKIX_TEST_RETURN();

     endTests("HttpDefaultClient");

     return (0);
 }
	/*
	* test_httpcertstore.c
	*
	* Test Httpcertstore Type
	*
	* Copyright 2004-2005 Sun Microsystems, Inc. All rights reserved.
	*
	* Redistribution and use in source and binary forms, with or without
	* modification, are permitted provided that the following conditions are met:
	*
	* 1. Redistribution of source code must retain the above copyright notice,
	* this list of conditions and the following disclaimer.
	*
	* 2. Redistribution in binary form must reproduce the above copyright
	* notice, this list of conditions and the following disclaimer in the
	* documentation and/or other materials provided with the distribution.
	*
	* Neither the name of Sun Microsystems, Inc. or the names of contributors may
	* be used to endorse or promote products derived from this software without
	* specific prior written permission.
	*
	* This software is provided "AS IS," without a warranty of any kind. ALL
	* EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING
	* ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE
	* OR NON-INFRINGEMENT, ARE HEREBY EXCLUDED. SUN MICROSYSTEMS, INC. ("SUN")
	* AND ITS LICENSORS SHALL NOT BE LIABLE FOR ANY DAMAGES SUFFERED BY LICENSEE
	* AS A RESULT OF USING, MODIFYING OR DISTRIBUTING THIS SOFTWARE OR ITS
	* DERIVATIVES. IN NO EVENT WILL SUN OR ITS LICENSORS BE LIABLE FOR ANY LOST
	* REVENUE, PROFIT OR DATA, OR FOR DIRECT, INDIRECT, SPECIAL, CONSEQUENTIAL,
	* INCIDENTAL OR PUNITIVE DAMAGES, HOWEVER CAUSED AND REGARDLESS OF THE THEORY
	* OF LIABILITY, ARISING OUT OF THE USE OF OR INABILITY TO USE THIS SOFTWARE,
	* EVEN IF SUN HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
	*
	* You acknowledge that this software is not designed or intended for use in
	* the design, construction, operation or maintenance of any nuclear facility.
	*/

	#include "testutil.h"
	#include "testutil_nss.h"
	#include "pkix_pl_common.h"

	static void *plContext = NULL;

	static void
	printUsage(char *testname)
	{
	char *fmt =
	"USAGE: %s [-arenas] certDir certName\n";
	printf(fmt, "test_httpcertstore");
	}

	/* Functional tests for Socket public functions */
	static void
	do_other_work(void)
	{ /* while waiting for nonblocking I/O to complete */
	(void)PR_Sleep(2 * 60);
	}

	PKIX_Error *
	PKIX_PL_HttpCertStore_Create(
	PKIX_PL_HttpClient client, / if NULL, use default Client */
	PKIX_PL_GeneralName *location,
	PKIX_CertStore **pCertStore,
	void *plContext);

	PKIX_Error *
	pkix_pl_HttpCertStore_CreateWithAsciiName(
	PKIX_PL_HttpClient client, / if NULL, use default Client */
	char *location,
	PKIX_CertStore **pCertStore,
	void *plContext);

	static PKIX_Error *
	getLocation(
	PKIX_PL_Cert *certWithAia,
	PKIX_PL_GeneralName **pLocation,
	void *plContext)
	{
	PKIX_List *aiaList = NULL;
	PKIX_UInt32 size = 0;
	PKIX_PL_InfoAccess *aia = NULL;
	PKIX_UInt32 iaType = PKIX_INFOACCESS_LOCATION_UNKNOWN;
	PKIX_PL_GeneralName *location = NULL;

	PKIX_TEST_STD_VARS();

	subTest("Getting Authority Info Access");

	PKIX_TEST_EXPECT_NO_ERROR(PKIX_PL_Cert_GetAuthorityInfoAccess(certWithAia, &aiaList, plContext));

	PKIX_TEST_EXPECT_NO_ERROR(PKIX_List_GetLength(aiaList, &size, plContext));

	if (size != 1) {
	pkixTestErrorMsg = "unexpected number of AIA";
	goto cleanup;
	}

	PKIX_TEST_EXPECT_NO_ERROR(PKIX_List_GetItem(aiaList, 0, (PKIX_PL_Object **)&aia, plContext));

	PKIX_TEST_EXPECT_NO_ERROR(PKIX_PL_InfoAccess_GetLocationType(aia, &iaType, plContext));

	if (iaType != PKIX_INFOACCESS_LOCATION_HTTP) {
	pkixTestErrorMsg = "unexpected location type in AIA";
	goto cleanup;
	}

	PKIX_TEST_EXPECT_NO_ERROR(PKIX_PL_InfoAccess_GetLocation(aia, &location, plContext));

	*pLocation = location;

	cleanup:
	PKIX_TEST_DECREF_AC(aiaList);
	PKIX_TEST_DECREF_AC(aia);

	PKIX_TEST_RETURN();

	return (NULL);
	}

	int
	test_httpcertstore(int argc, char *argv[])
	{

	PKIX_UInt32 i = 0;
	PKIX_UInt32 numCerts = 0;
	PKIX_UInt32 numCrls = 0;
	int j = 0;
	PKIX_UInt32 actualMinorVersion;
	PKIX_UInt32 length = 0;

	char *certName = NULL;
	char *certDir = NULL;
	PKIX_PL_Cert *cmdLineCert = NULL;
	PKIX_PL_Cert *cert = NULL;
	PKIX_CertSelector *certSelector = NULL;
	PKIX_CertStore *certStore = NULL;
	PKIX_CertStore *crlStore = NULL;
	PKIX_PL_GeneralName *location = NULL;
	PKIX_CertStore_CertCallback getCerts = NULL;
	PKIX_List *certs = NULL;
	char *asciiResult = NULL;
	void *nbio = NULL;

	PKIX_PL_CRL *crl = NULL;
	PKIX_CRLSelector *crlSelector = NULL;
	char *crlLocation = "http://betty.nist.gov/pathdiscoverytestsuite/CRL"
	"files/BasicHTTPURIPeer2CACRL.crl";
	PKIX_CertStore_CRLCallback getCrls = NULL;
	PKIX_List *crls = NULL;
	PKIX_PL_String *crlString = NULL;

	PKIX_TEST_STD_VARS();

	startTests("HttpCertStore");

	PKIX_TEST_EXPECT_NO_ERROR(
	PKIX_PL_NssContext_Create(0, PKIX_FALSE, NULL, &plContext));

	if (argc != (j + 3)) {
	printUsage(argv[0]);
	pkixTestErrorMsg = "Missing command line argument.";
	goto cleanup;
	}

	certDir = argv[++j];
	certName = argv[++j];

	cmdLineCert = createCert(certDir, certName, plContext);
	if (cmdLineCert == NULL) {
	pkixTestErrorMsg = "Unable to create Cert";
	goto cleanup;
	}

	/* muster arguments to create HttpCertStore */
	PKIX_TEST_EXPECT_NO_ERROR(getLocation(cmdLineCert, &location, plContext));

	if (location == NULL) {
	pkixTestErrorMsg = "Give me a cert with an HTTP URI!";
	goto cleanup;
	}

	/* create HttpCertStore */
	PKIX_TEST_EXPECT_NO_ERROR(PKIX_PL_HttpCertStore_Create(NULL, location, &certStore, plContext));

	/* get the GetCerts callback */
	PKIX_TEST_EXPECT_NO_ERROR(PKIX_CertStore_GetCertCallback(certStore, &getCerts, plContext));

	/* create a CertSelector */
	PKIX_TEST_EXPECT_NO_ERROR(PKIX_CertSelector_Create(NULL, NULL, &certSelector, plContext));

	/* Get the certs */
	PKIX_TEST_EXPECT_NO_ERROR(getCerts(certStore, certSelector, &nbio, &certs, plContext));

	while (nbio != NULL) {
	/* poll for a completion */

	PKIX_TEST_EXPECT_NO_ERROR(PKIX_CertStore_CertContinue(certStore, certSelector, &nbio, &certs, plContext));
	}

	if (certs) {

	PKIX_TEST_EXPECT_NO_ERROR(PKIX_List_GetLength(certs, &numCerts, plContext));

	if (numCerts == 0) {
	printf("HttpCertStore returned an empty Cert list\n");
	goto cleanup;
	}

	for (i = 0; i < numCerts; i++) {
	PKIX_TEST_EXPECT_NO_ERROR(PKIX_List_GetItem(certs,
	i,
	(PKIX_PL_Object **)&cert,
	plContext));

	asciiResult = PKIX_Cert2ASCII(cert);

	printf("CERT[%d]:\n%s\n", i, asciiResult);

	/* PKIX_Cert2ASCII used PKIX_PL_Malloc(...,,NULL) */
	PKIX_TEST_EXPECT_NO_ERROR(PKIX_PL_Free(asciiResult, NULL));
	asciiResult = NULL;

	PKIX_TEST_DECREF_BC(cert);
	}
	} else {
	printf("HttpCertStore returned a NULL Cert list\n");
	}

	/* create HttpCertStore */
	PKIX_TEST_EXPECT_NO_ERROR(pkix_pl_HttpCertStore_CreateWithAsciiName(NULL, crlLocation, &crlStore, plContext));

	/* get the GetCrls callback */
	PKIX_TEST_EXPECT_NO_ERROR(PKIX_CertStore_GetCRLCallback(crlStore, &getCrls, plContext));

	/* create a CrlSelector */
	PKIX_TEST_EXPECT_NO_ERROR(PKIX_CRLSelector_Create(NULL, NULL, &crlSelector, plContext));

	/* Get the crls */
	PKIX_TEST_EXPECT_NO_ERROR(getCrls(crlStore, crlSelector, &nbio, &crls, plContext));

	while (nbio != NULL) {
	/* poll for a completion */

	PKIX_TEST_EXPECT_NO_ERROR(PKIX_CertStore_CrlContinue(crlStore, crlSelector, &nbio, &crls, plContext));
	}

	if (crls) {

	PKIX_TEST_EXPECT_NO_ERROR(PKIX_List_GetLength(crls, &numCrls, plContext));

	if (numCrls == 0) {
	printf("HttpCertStore returned an empty CRL list\n");
	goto cleanup;
	}

	for (i = 0; i < numCrls; i++) {
	PKIX_TEST_EXPECT_NO_ERROR(PKIX_List_GetItem(crls,
	i,
	(PKIX_PL_Object **)&crl,
	plContext));

	PKIX_TEST_EXPECT_NO_ERROR(PKIX_PL_Object_ToString(
	(PKIX_PL_Object *)crl,
	&crlString,
	plContext));

	PKIX_TEST_EXPECT_NO_ERROR(PKIX_PL_String_GetEncoded(crlString,
	PKIX_ESCASCII,
	(void **)&asciiResult,
	&length,
	plContext));

	printf("CRL[%d]:\n%s\n", i, asciiResult);

	PKIX_TEST_EXPECT_NO_ERROR(PKIX_PL_Free(asciiResult, plContext));
	PKIX_TEST_DECREF_BC(crlString);
	PKIX_TEST_DECREF_BC(crl);
	}
	} else {
	printf("HttpCertStore returned a NULL CRL list\n");
	}

	cleanup:

	PKIX_TEST_DECREF_AC(cert);
	PKIX_TEST_DECREF_AC(cmdLineCert);
	PKIX_TEST_DECREF_AC(certStore);
	PKIX_TEST_DECREF_AC(crlStore);
	PKIX_TEST_DECREF_AC(location);
	PKIX_TEST_DECREF_AC(certs);
	PKIX_TEST_DECREF_AC(crl);
	PKIX_TEST_DECREF_AC(crlString);
	PKIX_TEST_DECREF_AC(crls);

	PKIX_TEST_RETURN();

	endTests("HttpDefaultClient");

	return (0);
	}