2 * Copyright (C) 2012 Free Software Foundation, Inc.
4 * Author: Nikos Mavrogiannopoulos
6 * This file is part of GnuTLS.
8 * GnuTLS is free software; you can redistribute it and/or modify it
9 * under the terms of the GNU General Public License as published by
10 * the Free Software Foundation; either version 3 of the License, or
11 * (at your option) any later version.
13 * GnuTLS is distributed in the hope that it will be useful, but
14 * WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 * General Public License for more details.
18 * You should have received a copy of the GNU General Public License
19 * along with GnuTLS; if not, write to the Free Software Foundation,
20 * Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA
31 #include <gnutls/gnutls.h>
34 /* This will test whether the default public key storage backend
35 * is operating properly */
37 static void tls_log_func(int level, const char *str)
39 fprintf(stderr, "|<%d>| %s", level, str);
42 static unsigned char server_cert_pem[] =
43 "-----BEGIN CERTIFICATE-----\n"
44 "MIICVjCCAcGgAwIBAgIERiYdMTALBgkqhkiG9w0BAQUwGTEXMBUGA1UEAxMOR251\n"
45 "VExTIHRlc3QgQ0EwHhcNMDcwNDE4MTMyOTIxWhcNMDgwNDE3MTMyOTIxWjA3MRsw\n"
46 "GQYDVQQKExJHbnVUTFMgdGVzdCBzZXJ2ZXIxGDAWBgNVBAMTD3Rlc3QuZ251dGxz\n"
47 "Lm9yZzCBnDALBgkqhkiG9w0BAQEDgYwAMIGIAoGA17pcr6MM8C6pJ1aqU46o63+B\n"
48 "dUxrmL5K6rce+EvDasTaDQC46kwTHzYWk95y78akXrJutsoKiFV1kJbtple8DDt2\n"
49 "DZcevensf9Op7PuFZKBroEjOd35znDET/z3IrqVgbtm2jFqab7a+n2q9p/CgMyf1\n"
50 "tx2S5Zacc1LWn9bIjrECAwEAAaOBkzCBkDAMBgNVHRMBAf8EAjAAMBoGA1UdEQQT\n"
51 "MBGCD3Rlc3QuZ251dGxzLm9yZzATBgNVHSUEDDAKBggrBgEFBQcDATAPBgNVHQ8B\n"
52 "Af8EBQMDB6AAMB0GA1UdDgQWBBTrx0Vu5fglyoyNgw106YbU3VW0dTAfBgNVHSME\n"
53 "GDAWgBTpPBz7rZJu5gakViyi4cBTJ8jylTALBgkqhkiG9w0BAQUDgYEAaFEPTt+7\n"
54 "bzvBuOf7+QmeQcn29kT6Bsyh1RHJXf8KTk5QRfwp6ogbp94JQWcNQ/S7YDFHglD1\n"
55 "AwUNBRXwd3riUsMnsxgeSDxYBfJYbDLeohNBsqaPDJb7XailWbMQKfAbFQ8cnOxg\n"
56 "rOKLUQRWJ0K3HyXRMhbqjdLIaQiCvQLuizo=\n" "-----END CERTIFICATE-----\n";
58 const gnutls_datum_t server_cert = { server_cert_pem,
59 sizeof(server_cert_pem)
62 static char client_pem[] =
63 "-----BEGIN CERTIFICATE-----\n"
64 "MIICHjCCAYmgAwIBAgIERiYdNzALBgkqhkiG9w0BAQUwGTEXMBUGA1UEAxMOR251\n"
65 "VExTIHRlc3QgQ0EwHhcNMDcwNDE4MTMyOTI3WhcNMDgwNDE3MTMyOTI3WjAdMRsw\n"
66 "GQYDVQQDExJHbnVUTFMgdGVzdCBjbGllbnQwgZwwCwYJKoZIhvcNAQEBA4GMADCB\n"
67 "iAKBgLtmQ/Xyxde2jMzF3/WIO7HJS2oOoa0gUEAIgKFPXKPQ+GzP5jz37AR2ExeL\n"
68 "ZIkiW8DdU3w77XwEu4C5KL6Om8aOoKUSy/VXHqLnu7czSZ/ju0quak1o/8kR4jKN\n"
69 "zj2AC41179gAgY8oBAOgIo1hBAf6tjd9IQdJ0glhaZiQo1ipAgMBAAGjdjB0MAwG\n"
70 "A1UdEwEB/wQCMAAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwDwYDVR0PAQH/BAUDAweg\n"
71 "ADAdBgNVHQ4EFgQUTLkKm/odNON+3svSBxX+odrLaJEwHwYDVR0jBBgwFoAU6Twc\n"
72 "+62SbuYGpFYsouHAUyfI8pUwCwYJKoZIhvcNAQEFA4GBALujmBJVZnvaTXr9cFRJ\n"
73 "jpfc/3X7sLUsMvumcDE01ls/cG5mIatmiyEU9qI3jbgUf82z23ON/acwJf875D3/\n"
74 "U7jyOsBJ44SEQITbin2yUeJMIm1tievvdNXBDfW95AM507ShzP12sfiJkJfjjdhy\n"
75 "dc8Siq5JojruiMizAf0pA7in\n" "-----END CERTIFICATE-----\n";
76 const gnutls_datum_t client_cert =
77 { (void *) client_pem, sizeof(client_pem) };
79 #define TMP_FILE "mini-tdb-tmp"
81 #define SHA1_HASH "\x53\x4b\x3b\xdc\x5e\xc8\x44\x4c\x02\x20\xbf\x39\x48\x6f\x4c\xfe\xcd\x25\x52\x10"
85 gnutls_datum_t der_cert, der_cert2;
89 /* the sha1 hash of the server's pubkey */
90 hash.data = (void *) SHA1_HASH;
91 hash.size = sizeof(SHA1_HASH) - 1;
95 gnutls_global_set_log_function(tls_log_func);
97 gnutls_global_set_log_level(2);
100 gnutls_pem_base64_decode_alloc("CERTIFICATE", &server_cert,
103 fail("base64 decoding\n");
108 gnutls_pem_base64_decode_alloc("CERTIFICATE", &client_cert,
111 fail("base64 decoding\n");
117 /* verify whether the stored hash verification succeeeds */
118 ret = gnutls_store_commitment(TMP_FILE, NULL, "localhost", "https",
119 GNUTLS_DIG_SHA1, &hash, 0, 0);
121 fail("commitment storage: %s\n", gnutls_strerror(ret));
126 success("Commitment storage: passed\n");
129 gnutls_verify_stored_pubkey(TMP_FILE, NULL, "localhost",
130 "https", GNUTLS_CRT_X509,
135 fail("commitment verification: %s\n",
136 gnutls_strerror(ret));
141 success("Commitment verification: passed\n");
143 /* verify whether the stored pubkey verification succeeeds */
144 ret = gnutls_store_pubkey(TMP_FILE, NULL, "localhost", "https",
145 GNUTLS_CRT_X509, &der_cert, 0, 0);
147 fail("storage: %s\n", gnutls_strerror(ret));
152 success("Public key storage: passed\n");
155 gnutls_verify_stored_pubkey(TMP_FILE, NULL, "localhost",
156 "https", GNUTLS_CRT_X509,
159 fail("pubkey verification: %s\n", gnutls_strerror(ret));
164 gnutls_verify_stored_pubkey(TMP_FILE, NULL, "localhost",
165 "https", GNUTLS_CRT_X509,
169 fail("verification succeed when shouldn't!\n");
172 if (ret != GNUTLS_E_CERTIFICATE_KEY_MISMATCH) {
173 fail("Wrong error code returned: %s!\n",
174 gnutls_strerror(ret));
179 success("Public key verification: passed\n");
182 gnutls_global_deinit();
183 gnutls_free(der_cert.data);
184 gnutls_free(der_cert2.data);