RetroZilla/security/nss/cmd/libpkix/pkix/params/test_procparams.c

/* This Source Code Form is subject to the terms of the Mozilla Public
 * License, v. 2.0. If a copy of the MPL was not distributed with this
 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
/*
 * test_procparams.c
 *
 * Test ProcessingParams Type
 *
 */

#include "testutil.h"
#include "testutil_nss.h"

static void *plContext = NULL;

static void
testDestroy(void *goodObject, void *equalObject, void *diffObject)
{
        PKIX_TEST_STD_VARS();

        subTest("PKIX_ProcessingParams_Destroy");

        PKIX_TEST_DECREF_BC(goodObject);
        PKIX_TEST_DECREF_BC(equalObject);
        PKIX_TEST_DECREF_BC(diffObject);

cleanup:

        PKIX_TEST_RETURN();

}

static
void testGetAnchors(
        PKIX_ProcessingParams *goodObject,
        PKIX_ProcessingParams *equalObject){

        PKIX_List *goodAnchors = NULL;
        PKIX_List *equalAnchors = NULL;

        PKIX_TEST_STD_VARS();
        subTest("PKIX_ProcessingParams_GetTrustAnchors");

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_ProcessingParams_GetTrustAnchors
                                    (goodObject, &goodAnchors, plContext));

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_ProcessingParams_GetTrustAnchors
                                    (equalObject, &equalAnchors, plContext));

        testEqualsHelper((PKIX_PL_Object *)goodAnchors,
                        (PKIX_PL_Object *)equalAnchors,
                        PKIX_TRUE,
                        plContext);

cleanup:

        PKIX_TEST_DECREF_AC(goodAnchors);
        PKIX_TEST_DECREF_AC(equalAnchors);

        PKIX_TEST_RETURN();
}

static
void testGetSetDate(
        PKIX_ProcessingParams *goodObject,
        PKIX_ProcessingParams *equalObject){

        PKIX_PL_Date *setDate = NULL;
        PKIX_PL_Date *getDate = NULL;
        char *asciiDate = "040329134847Z";

        PKIX_TEST_STD_VARS();
        subTest("PKIX_ProcessingParams_Get/SetDate");

        setDate = createDate(asciiDate, plContext);

        PKIX_TEST_EXPECT_NO_ERROR
                (PKIX_ProcessingParams_SetDate(goodObject, setDate, plContext));

        PKIX_TEST_EXPECT_NO_ERROR
                (PKIX_ProcessingParams_GetDate
                (goodObject, &getDate, plContext));

        testEqualsHelper((PKIX_PL_Object *)setDate,
                        (PKIX_PL_Object *)getDate,
                        PKIX_TRUE,
                        plContext);

        /* we want to make sure that goodObject and equalObject are "equal" */
        PKIX_TEST_EXPECT_NO_ERROR
                (PKIX_ProcessingParams_SetDate
                (equalObject, setDate, plContext));

cleanup:

        PKIX_TEST_DECREF_AC(setDate);
        PKIX_TEST_DECREF_AC(getDate);

        PKIX_TEST_RETURN();
}

static
PKIX_Error *userChecker1cb(
        PKIX_CertChainChecker *checker,
        PKIX_PL_Cert *cert,
        PKIX_List *unresolvedCriticalExtensions,  /* list of PKIX_PL_OID */
        void **pNBIOContext,
        void *plContext)
{
        return(NULL);
}

static
void testGetSetCertChainCheckers(
        PKIX_ProcessingParams *goodObject,
        PKIX_ProcessingParams *equalObject){

        PKIX_CertChainChecker *checker = NULL;
        PKIX_List *setCheckersList = NULL;
        PKIX_List *getCheckersList = NULL;
        PKIX_PL_Date *date = NULL;
        char *asciiDate = "040329134847Z";

        PKIX_TEST_STD_VARS();
        subTest("PKIX_ProcessingParams_Get/SetCertChainCheckers");

        date = createDate(asciiDate, plContext);

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_CertChainChecker_Create
                    (userChecker1cb,
                    PKIX_FALSE,
                    PKIX_FALSE,
                    NULL,
                    (PKIX_PL_Object *) date,
                    &checker,
                    plContext));

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_List_Create
                (&setCheckersList, plContext));

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_List_AppendItem
                (setCheckersList, (PKIX_PL_Object *) checker, plContext));
        PKIX_TEST_DECREF_BC(checker);

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_ProcessingParams_SetCertChainCheckers
                (goodObject, setCheckersList, plContext));

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_CertChainChecker_Create
                (userChecker1cb,
                PKIX_FALSE,
                PKIX_FALSE,
                NULL,
                (PKIX_PL_Object *) date,
                &checker,
                plContext));

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_ProcessingParams_AddCertChainChecker
                (goodObject, checker, plContext));

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_ProcessingParams_GetCertChainCheckers
                (goodObject, &getCheckersList, plContext));

cleanup:

        PKIX_TEST_DECREF_AC(setCheckersList);
        PKIX_TEST_DECREF_AC(getCheckersList);
        PKIX_TEST_DECREF_AC(date);
        PKIX_TEST_DECREF_BC(checker);

        PKIX_TEST_RETURN();
}

static
PKIX_Error *userChecker2cb(
        PKIX_RevocationChecker *checker,
        PKIX_PL_Cert *cert,
        PKIX_UInt32 *pResult,
        void *plContext)
{
        return(NULL);
}

static
void testGetSetRevocationCheckers(
        PKIX_ProcessingParams *goodObject,
        PKIX_ProcessingParams *equalObject){

        PKIX_RevocationChecker *checker = NULL;
        PKIX_List *setCheckersList = NULL;
        PKIX_List *getCheckersList = NULL;
        PKIX_PL_Date *date = NULL;
        char *asciiDate = "040329134847Z";

        PKIX_TEST_STD_VARS();
        subTest("PKIX_ProcessingParams_Get/SetRevocationCheckers");

        date = createDate(asciiDate, plContext);

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_RevocationChecker_Create
                    (userChecker2cb,
                    (PKIX_PL_Object *) date,
                    &checker,
                    plContext));

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_List_Create
                (&setCheckersList, plContext));

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_List_AppendItem
                    (setCheckersList,
                    (PKIX_PL_Object *) checker,
                    plContext));
        PKIX_TEST_DECREF_BC(checker);

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_ProcessingParams_SetRevocationCheckers
                    (goodObject, setCheckersList, plContext));

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_RevocationChecker_Create
                    (userChecker2cb,
                    (PKIX_PL_Object *) date,
                    &checker,
                    plContext));

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_ProcessingParams_AddRevocationChecker
                    (goodObject, checker, plContext));

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_ProcessingParams_GetRevocationCheckers
                    (goodObject, &getCheckersList, plContext));

cleanup:

        PKIX_TEST_DECREF_AC(setCheckersList);
        PKIX_TEST_DECREF_AC(getCheckersList);
        PKIX_TEST_DECREF_AC(date);
        PKIX_TEST_DECREF_BC(checker);

        PKIX_TEST_RETURN();
}

static
void testGetSetResourceLimits(
        PKIX_ProcessingParams *goodObject,
        PKIX_ProcessingParams *equalObject)

{
        PKIX_ResourceLimits *resourceLimits1 = NULL;
        PKIX_ResourceLimits *resourceLimits2 = NULL;

        PKIX_TEST_STD_VARS();
        subTest("PKIX_ProcessingParams_Get/SetResourceLimits");

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_ResourceLimits_Create
                    (&resourceLimits1, plContext));

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_ResourceLimits_Create
                    (&resourceLimits2, plContext));

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_ResourceLimits_SetMaxFanout
                    (resourceLimits1, 3, plContext));

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_ResourceLimits_SetMaxDepth
                    (resourceLimits1, 3, plContext));

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_ResourceLimits_SetMaxTime
                    (resourceLimits1, 2, plContext));

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_ProcessingParams_SetResourceLimits
                    (goodObject, resourceLimits1, plContext));

        PKIX_TEST_DECREF_BC(resourceLimits2);
        PKIX_TEST_EXPECT_NO_ERROR(PKIX_ProcessingParams_GetResourceLimits
                    (goodObject, &resourceLimits2, plContext));

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_ProcessingParams_SetResourceLimits
                    (equalObject, resourceLimits2, plContext));

cleanup:

        PKIX_TEST_DECREF_AC(resourceLimits1);
        PKIX_TEST_DECREF_AC(resourceLimits2);

        PKIX_TEST_RETURN();
}

static
void testGetSetConstraints(PKIX_ProcessingParams *goodObject){

        PKIX_CertSelector *setConstraints = NULL;
        PKIX_CertSelector *getConstraints = NULL;

        PKIX_TEST_STD_VARS();
        subTest("PKIX_ProcessingParams_Get/SetTargetCertConstraints");

        /*
        * After createConstraints is implemented
        * setConstraints = createConstraints();
        */

        PKIX_TEST_EXPECT_NO_ERROR
                (PKIX_ProcessingParams_SetTargetCertConstraints
                (goodObject, setConstraints, plContext));

        PKIX_TEST_EXPECT_NO_ERROR
                (PKIX_ProcessingParams_GetTargetCertConstraints
                (goodObject, &getConstraints, plContext));

        testEqualsHelper((PKIX_PL_Object *)setConstraints,
                        (PKIX_PL_Object *)getConstraints,
                        PKIX_TRUE,
                        plContext);

cleanup:

        PKIX_TEST_DECREF_AC(setConstraints);
        PKIX_TEST_DECREF_AC(getConstraints);

        PKIX_TEST_RETURN();
}

static
void testGetSetInitialPolicies(
        PKIX_ProcessingParams *goodObject,
        char *asciiPolicyOID)
{
        PKIX_PL_OID *policyOID = NULL;
        PKIX_List* setPolicyList = NULL;
        PKIX_List* getPolicyList = NULL;

        PKIX_TEST_STD_VARS();
        subTest("PKIX_ProcessingParams_Get/SetInitialPolicies");

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_PL_OID_Create
                (asciiPolicyOID, &policyOID, plContext));

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_List_Create(&setPolicyList, plContext));

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_List_AppendItem
                (setPolicyList, (PKIX_PL_Object *)policyOID, plContext));

        PKIX_TEST_EXPECT_NO_ERROR
                (PKIX_List_SetImmutable(setPolicyList, plContext));

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_ProcessingParams_SetInitialPolicies
                (goodObject, setPolicyList, plContext));

        PKIX_TEST_EXPECT_NO_ERROR(PKIX_ProcessingParams_GetInitialPolicies
                (goodObject, &getPolicyList, plContext));

        testEqualsHelper
                ((PKIX_PL_Object *)setPolicyList,
                (PKIX_PL_Object *)getPolicyList,
                PKIX_TRUE,
                plContext);

cleanup:
        PKIX_TEST_DECREF_AC(policyOID);
        PKIX_TEST_DECREF_AC(setPolicyList);
        PKIX_TEST_DECREF_AC(getPolicyList);

        PKIX_TEST_RETURN();
}

static
void testGetSetPolicyQualifiersRejected(
        PKIX_ProcessingParams *goodObject,
        PKIX_Boolean rejected)
{
        PKIX_Boolean getRejected = PKIX_FALSE;

        PKIX_TEST_STD_VARS();
        subTest("PKIX_ProcessingParams_Get/SetPolicyQualifiersRejected");

        PKIX_TEST_EXPECT_NO_ERROR
                (PKIX_ProcessingParams_SetPolicyQualifiersRejected
                (goodObject, rejected, plContext));

        PKIX_TEST_EXPECT_NO_ERROR
                (PKIX_ProcessingParams_GetPolicyQualifiersRejected
                (goodObject, &getRejected, plContext));

        if (rejected != getRejected) {
            testError
                ("GetPolicyQualifiersRejected returned unexpected value");
        }

cleanup:

        PKIX_TEST_RETURN();
}

static
void printUsage(char *pName){
        printf("\nUSAGE: %s <central-data-dir>\n\n", pName);
}

int test_procparams(int argc, char *argv[]) {

        PKIX_ProcessingParams *goodObject = NULL;
        PKIX_ProcessingParams *equalObject = NULL;
        PKIX_ProcessingParams *diffObject = NULL;
        PKIX_UInt32 actualMinorVersion;
        char *dataCentralDir = NULL;
        PKIX_UInt32 j = 0;

        char *oidAnyPolicy = PKIX_CERTIFICATEPOLICIES_ANYPOLICY_OID;
        char *oidNist1Policy = "2.16.840.1.101.3.2.1.48.2";

        char *goodInput = "yassir2yassir";
        char *diffInput = "yassir2bcn";

        char *expectedAscii =
                "[\n"
                "\tTrust Anchors: \n"
                "\t********BEGIN LIST OF TRUST ANCHORS********\n"
                "\t\t"
                "([\n"
                "\tTrusted CA Name:         "
                "CN=yassir,OU=bcn,OU=east,O=sun,C=us\n"
                "\tTrusted CA PublicKey:    ANSI X9.57 DSA Signature\n"
                "\tInitial Name Constraints:(null)\n"
                "]\n"
                ", [\n"
                "\tTrusted CA Name:         OU=bcn,OU=east,O=sun,C=us\n"
                "\tTrusted CA PublicKey:    ANSI X9.57 DSA Signature\n"
                "\tInitial Name Constraints:(null)\n"
                "]\n"
                ")\n"
                "\t********END LIST OF TRUST ANCHORS********\n"
                "\tDate:    \t\tMon Mar 29 08:48:47 2004\n"
                "\tTarget Constraints:    (null)\n"
                "\tInitial Policies:      (2.5.29.32.0)\n"
                "\tQualifiers Rejected:   FALSE\n"
                "\tCert Stores:           (EMPTY)\n"
                "\tResource Limits:       [\n"
                "\tMaxTime:                     2\n"
                "\tMaxFanout:                   3\n"
                "\tMaxDepth:                    3\n"
                "]\n\n"
                "\tCRL Checking Enabled:  0\n"
                "]\n";

        PKIX_TEST_STD_VARS();

        startTests("ProcessingParams");

        PKIX_TEST_EXPECT_NO_ERROR(
            PKIX_PL_NssContext_Create(0, PKIX_FALSE, NULL, &plContext));

        if (argc < 2){
                printUsage(argv[0]);
                return (0);
        }

        dataCentralDir = argv[j+1];

        subTest("PKIX_ProcessingParams_Create");
        goodObject = createProcessingParams
                (dataCentralDir,
                goodInput,
                diffInput,
                NULL,
                NULL,
                PKIX_FALSE,
                plContext);

        equalObject = createProcessingParams
                (dataCentralDir,
                goodInput,
                diffInput,
                NULL,
                NULL,
                PKIX_FALSE,
                plContext);

        diffObject = createProcessingParams
                (dataCentralDir,
                diffInput,
                goodInput,
                NULL,
                NULL,
                PKIX_FALSE,
                plContext);

        testGetAnchors(goodObject, equalObject);
        testGetSetDate(goodObject, equalObject);
        testGetSetCertChainCheckers(goodObject, equalObject);
        testGetSetRevocationCheckers(goodObject, equalObject);
        testGetSetResourceLimits(goodObject, equalObject);

        /*
        * XXX testGetSetConstraints(goodObject);
        */

        testGetSetInitialPolicies(goodObject, oidAnyPolicy);
        testGetSetInitialPolicies(equalObject, oidAnyPolicy);
        testGetSetInitialPolicies(diffObject, oidNist1Policy);
        testGetSetPolicyQualifiersRejected(goodObject, PKIX_FALSE);
        testGetSetPolicyQualifiersRejected(equalObject, PKIX_FALSE);
        testGetSetPolicyQualifiersRejected(diffObject, PKIX_TRUE);

        PKIX_TEST_EQ_HASH_TOSTR_DUP
                (goodObject,
                equalObject,
                diffObject,
                NULL, /* expectedAscii, */
                ProcessingParams,
                PKIX_FALSE);

        testDestroy(goodObject, equalObject, diffObject);

cleanup:

        PKIX_Shutdown(plContext);

        PKIX_TEST_RETURN();

        endTests("ProcessingParams");

        return (0);
}