mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2026-07-05 20:30:48 +02:00
Tobias Frauenschläger
dedba75ad4
DecodeExtensionType() guarded the certificatePolicies duplicate check (VERIFY_AND_SET_OID) under WOLFSSL_SEP only, because the extCertPolicySet tracking bit was SEP-only. In a WOLFSSL_CERT_EXT-without-WOLFSSL_SEP build a cert with two certificatePolicies extensions was accepted and the second silently overwrote the first (RFC 5280 4.2 forbids repeats). Make the bit and the guard available under WOLFSSL_CERT_EXT too, matching every other non-repeatable extension. Add test_DecodeCertExtensions_dup_certpol (DecodeExtensionType now WOLFSSL_TEST_VIS).
67 lines
3.0 KiB
C
67 lines
3.0 KiB
C
/* test_asn.h
|
|
*
|
|
* Copyright (C) 2006-2026 wolfSSL Inc.
|
|
*
|
|
* This file is part of wolfSSL.
|
|
*
|
|
* wolfSSL is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* wolfSSL is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA
|
|
*/
|
|
|
|
#ifndef WOLFCRYPT_TEST_ASN_H
|
|
#define WOLFCRYPT_TEST_ASN_H
|
|
|
|
#include <tests/api/api_decl.h>
|
|
|
|
int test_SetAsymKeyDer(void);
|
|
int test_DecodeAsymKey_lenient_versions(void);
|
|
int test_DecodeAsymKey_negative(void);
|
|
int test_GetSetShortInt(void);
|
|
int test_wc_IndexSequenceOf(void);
|
|
int test_wolfssl_local_MatchBaseName(void);
|
|
int test_wolfssl_local_MatchDnsConstraintWildcard(void);
|
|
int test_wolfssl_local_MatchUriNameConstraint(void);
|
|
int test_wc_DecodeRsaPssParams(void);
|
|
int test_SerialNumber0_RootCA(void);
|
|
int test_DecodeAltNames_length_underflow(void);
|
|
int test_DecodeCertExtensions_dup_certpol(void);
|
|
int test_ParseCert_SM3wSM2_short_pubkey(void);
|
|
int test_wc_DecodeObjectId(void);
|
|
int test_ToTraditional_ex_handcrafted(void);
|
|
int test_ToTraditional_ex_roundtrip(void);
|
|
int test_ToTraditional_ex_negative(void);
|
|
int test_ToTraditional_ex_mldsa_bad_params(void);
|
|
|
|
#define TEST_ASN_DECLS \
|
|
TEST_DECL_GROUP("asn", test_SetAsymKeyDer), \
|
|
TEST_DECL_GROUP("asn", test_DecodeAsymKey_lenient_versions), \
|
|
TEST_DECL_GROUP("asn", test_DecodeAsymKey_negative), \
|
|
TEST_DECL_GROUP("asn", test_GetSetShortInt), \
|
|
TEST_DECL_GROUP("asn", test_wc_IndexSequenceOf), \
|
|
TEST_DECL_GROUP("asn", test_wolfssl_local_MatchBaseName), \
|
|
TEST_DECL_GROUP("asn", test_wolfssl_local_MatchDnsConstraintWildcard), \
|
|
TEST_DECL_GROUP("asn", test_wolfssl_local_MatchUriNameConstraint), \
|
|
TEST_DECL_GROUP("asn", test_wc_DecodeRsaPssParams), \
|
|
TEST_DECL_GROUP("asn", test_SerialNumber0_RootCA), \
|
|
TEST_DECL_GROUP("asn", test_DecodeAltNames_length_underflow), \
|
|
TEST_DECL_GROUP("asn", test_DecodeCertExtensions_dup_certpol), \
|
|
TEST_DECL_GROUP("asn", test_ParseCert_SM3wSM2_short_pubkey), \
|
|
TEST_DECL_GROUP("asn", test_wc_DecodeObjectId), \
|
|
TEST_DECL_GROUP("asn", test_ToTraditional_ex_handcrafted), \
|
|
TEST_DECL_GROUP("asn", test_ToTraditional_ex_roundtrip), \
|
|
TEST_DECL_GROUP("asn", test_ToTraditional_ex_negative), \
|
|
TEST_DECL_GROUP("asn", test_ToTraditional_ex_mldsa_bad_params)
|
|
|
|
#endif /* WOLFCRYPT_TEST_ASN_H */
|