wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2025-08-03 12:44:45 +02:00
Code Issues Packages Projects Releases Wiki Activity

If WOLFSSL_TRUST_PEER_CERT is defined, the negative test is no longer negative.

Browse Source
This commit is contained in:
Anthony Hu
2024-03-28 17:59:26 -04:00
parent 136eaae4f1
commit e4b7857e43
1 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
tests/api.c
View File

@@ -1136,7 +1136,9 @@ static int test_dual_alg_support(void)
/* Now we try a negative case. Note that we use wrongPrivFile to generate /* Now we try a negative case. Note that we use wrongPrivFile to generate
* the alternative signature and then set negative_test to true for the * the alternative signature and then set negative_test to true for the
* call to do_dual_alg_tls13_connection(). Its expecting a failed connection * call to do_dual_alg_tls13_connection(). Its expecting a failed connection
* because the signature won't verify. */ * because the signature won't verify. The exception is if
* WOLFSSL_TRUST_PEER_CERT is defined. In that case, no verfication happens
* and this is no longer a negative test. */
rootSz = do_dual_alg_root_certgen(&root, keyFile, sapkiFile, wrongPrivFile); rootSz = do_dual_alg_root_certgen(&root, keyFile, sapkiFile, wrongPrivFile);
ExpectNotNull(root); ExpectNotNull(root);
ExpectIntGT(rootSz, 0); ExpectIntGT(rootSz, 0);
@@ -1144,9 +1146,15 @@ static int test_dual_alg_support(void)
wrongPrivFile, keyFile, root, rootSz); wrongPrivFile, keyFile, root, rootSz);
ExpectNotNull(server); ExpectNotNull(server);
ExpectIntGT(serverSz, 0); ExpectIntGT(serverSz, 0);
#ifdef WOLFSSL_TRUST_PEER_CERT
ExpectIntEQ(do_dual_alg_tls13_connection(root, rootSz,
server, serverSz, serverKey, (word32)serverKeySz, 0),
TEST_SUCCESS);
#else
ExpectIntEQ(do_dual_alg_tls13_connection(root, rootSz, ExpectIntEQ(do_dual_alg_tls13_connection(root, rootSz,
server, serverSz, serverKey, (word32)serverKeySz, 1), server, serverSz, serverKey, (word32)serverKeySz, 1),
TEST_SUCCESS); TEST_SUCCESS);
#endif
/* Lets see if CertManager can find the new extensions */ /* Lets see if CertManager can find the new extensions */
extCount = 0; extCount = 0;