Commit d7c738a0 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Extend runex.pl to extract examples directly from RFC text.

parent a981e2ad
Loading
Loading
Loading
Loading
+308 −280
Original line number Diff line number Diff line
# test/runex.pl
# test/cms-examples.pl
# Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
# project.
#
@@ -51,15 +51,16 @@
# ====================================================================

# Perl script to run tests against S/MIME examples in RFC4134
# Assumes all files are extracted in an directory called "examples"
# Assumes RFC is in current directory and called "rfc4134.txt"

use MIME::Base64;

my $badttest = 0;
my $verbose  = 1;

my $cmscmd = "../util/shlib_wrap.sh ../apps/openssl cms";
my $convcmd = "../util/shlib_wrap.sh ../apps/openssl x509 -inform DER";
my $pconvcmd = "../util/shlib_wrap.sh ../apps/openssl rsa -inform DER";
my $exdir = "examples";
my $exdir  = "./";
my $exfile = "./rfc4134.txt";

my @test_list = (
    [ "3.1.bin"  => "dataout" ],
@@ -83,111 +84,151 @@ my @test_list = (
    [ "7.2.bin"  => "encode, encrypted, cont" ]
);

my $secretkey = "73:7c:79:1f:25:ea:d0:e0:46:29:25:43:52:f7:dc:62:91:e5:cb:26:91:7a:da:32";
# Extract examples from RFC4134 text.
# Base64 decode all examples, certificates and
# private keys are converted to PEM format.

	if (!-d $exdir)
		{
my ( $filename, $data );

my @cleanup = ( "cms.out", "cms.err", "tmp.der", "tmp.txt" );

$data = "";

open( IN, $exfile ) || die "Can't Open RFC examples file $exfile";

while (<IN>) {
    next unless (/^\|/);
    s/^\|//;
    next if (/^\*/);
    if (/^>(.*)$/) {
        $filename = $1;
        next;
    }
    if (/^</) {
        $filename = "$exdir/$filename";
        if ( $filename =~ /\.bin$/ || $filename =~ /\.eml$/ ) {
            $data = decode_base64($data);
            open OUT, ">$filename";
            binmode OUT;
            print OUT $data;
            close OUT;
            push @cleanup, $filename;
        }
        elsif ( $filename =~ /\.cer$/ ) {
            write_pem( $filename, "CERTIFICATE", $data );
        }
        elsif ( $filename =~ /\.pri$/ ) {
            write_pem( $filename, "PRIVATE KEY", $data );
        }
        $data     = "";
        $filename = "";
    }
    else {
        $data .= $_;
    }

}

my $secretkey =
  "73:7c:79:1f:25:ea:d0:e0:46:29:25:43:52:f7:dc:62:91:e5:cb:26:91:7a:da:32";

if ( !-d $exdir ) {
    print STDERR "FATAL ERROR: examples directory missing!!\n";
    exit 1;
}

	system ("$convcmd -in $exdir/CarlDSSSelf.cer -out $exdir/CarlDSSSelf.pem");
	system ("$convcmd -in $exdir/CarlRSASelf.cer -out $exdir/CarlRSASelf.pem");
	system ("$convcmd -in $exdir/BobRSASignByCarl.cer -out $exdir/BobRSASignByCarl.pem");
	system ("$pconvcmd -in $exdir/BobPrivRSAEncrypt.pri -out $exdir/BobPrivRSAEncrypt.pem");

foreach (@test_list) {
    my ( $file, $tlist ) = @$_;
    print "Example file $file:\n";
	if ($tlist =~ /encode/)
		{
    if ( $tlist =~ /encode/ ) {
        run_reencode_test( $exdir, $file );
    }
	if ($tlist =~ /dataout/)
		{
    if ( $tlist =~ /dataout/ ) {
        run_dataout_test( $exdir, $file );
    }
	if ($tlist =~ /verify/)
		{
    if ( $tlist =~ /verify/ ) {
        run_verify_test( $exdir, $tlist, $file );
    }
	if ($tlist =~ /digest/)
		{
    if ( $tlist =~ /digest/ ) {
        run_digest_test( $exdir, $tlist, $file );
    }
	if ($tlist =~ /encrypted/)
		{
    if ( $tlist =~ /encrypted/ ) {
        run_encrypted_test( $exdir, $tlist, $file, $secretkey );
    }
	if ($tlist =~ /envelope/)
		{
    if ( $tlist =~ /envelope/ ) {
        run_envelope_test( $exdir, $tlist, $file );
    }

}

unlink "cms.out";
unlink "cms.err";
unlink "tmp.der";
unlink "tmp.txt";
foreach (@cleanup) {
    unlink $_;
}

if ($badtest) {
    print "\n$badtest TESTS FAILED!!\n";
} else {
}
else {
    print "\n***All tests successful***\n";
}

sub write_pem {
    my ( $filename, $str, $data ) = @_;

sub run_reencode_test
	{
    $filename =~ s/\.[^.]*$/.pem/;

    push @cleanup, $filename;

    open OUT, ">$filename";

    print OUT "-----BEGIN $str-----\n";
    print OUT $data;
    print OUT "-----END $str-----\n";

    close OUT;
}

sub run_reencode_test {
    my ( $cmsdir, $tfile ) = @_;
    unlink "tmp.der";

	system ("$cmscmd -cmsout -inform DER -outform DER" .
		" -in $cmsdir/$tfile -out tmp.der");
    system( "$cmscmd -cmsout -inform DER -outform DER"
          . " -in $cmsdir/$tfile -out tmp.der" );

	if ($?)
		{
    if ($?) {
        print "\tReencode command FAILED!!\n";
        $badtest++;
    }
	elsif (!cmp_files("$cmsdir/$tfile", "tmp.der"))
		{
    elsif ( !cmp_files( "$cmsdir/$tfile", "tmp.der" ) ) {
        print "\tReencode FAILED!!\n";
        $badtest++;
    }
	else
		{
    else {
        print "\tReencode passed\n" if $verbose;
    }
}

sub run_dataout_test
	{
sub run_dataout_test {
    my ( $cmsdir, $tfile ) = @_;
    unlink "tmp.txt";

	system ("$cmscmd -data_out -inform DER" .
		" -in $cmsdir/$tfile -out tmp.txt");
    system(
        "$cmscmd -data_out -inform DER" . " -in $cmsdir/$tfile -out tmp.txt" );

	if ($?)
		{
    if ($?) {
        print "\tDataout command FAILED!!\n";
        $badtest++;
    }
	elsif (!cmp_files("$cmsdir/ExContent.bin", "tmp.txt"))
		{
    elsif ( !cmp_files( "$cmsdir/ExContent.bin", "tmp.txt" ) ) {
        print "\tDataout compare FAILED!!\n";
        $badtest++;
    }
	else
		{
    else {
        print "\tDataout passed\n" if $verbose;
    }
}

sub run_verify_test
	{
sub run_verify_test {
    my ( $cmsdir, $tlist, $tfile ) = @_;
    unlink "tmp.txt";

@@ -196,118 +237,108 @@ sub run_verify_test
    $cafile = "$cmsdir/CarlDSSSelf.pem" if $tlist =~ /dss/;
    $cafile = "$cmsdir/CarlRSASelf.pem" if $tlist =~ /rsa/;

	$cmd = "$cmscmd -verify -inform $form" .
		" -CAfile $cafile" .
		" -in $cmsdir/$tfile -out tmp.txt";
    $cmd =
        "$cmscmd -verify -inform $form"
      . " -CAfile $cafile"
      . " -in $cmsdir/$tfile -out tmp.txt";

    $cmd .= " -content $cmsdir/ExContent.bin" if $tlist =~ /cont_extern/;

    system("$cmd 2>cms.err 1>cms.out");

	if ($?)
		{
    if ($?) {
        print "\tVerify command FAILED!!\n";
        $badtest++;
    }
	elsif ($tlist =~ /cont/ &&
		!cmp_files("$cmsdir/ExContent.bin", "tmp.txt"))
    elsif ( $tlist =~ /cont/
        && !cmp_files( "$cmsdir/ExContent.bin", "tmp.txt" ) )
    {
        print "\tVerify content compare FAILED!!\n";
        $badtest++;
    }
	else
		{
    else {
        print "\tVerify passed\n" if $verbose;
    }
}

sub run_envelope_test
	{
sub run_envelope_test {
    my ( $cmsdir, $tlist, $tfile ) = @_;
    unlink "tmp.txt";

    $form = "DER"   if $tlist =~ /envelopeder/;
    $form = "SMIME" if $tlist =~ /envelopemime/;

	$cmd = "$cmscmd -decrypt -inform $form" .
		" -recip $cmsdir/BobRSASignByCarl.pem" .
		" -inkey $cmsdir/BobPrivRSAEncrypt.pem" .
		" -in $cmsdir/$tfile -out tmp.txt";
    $cmd =
        "$cmscmd -decrypt -inform $form"
      . " -recip $cmsdir/BobRSASignByCarl.pem"
      . " -inkey $cmsdir/BobPrivRSAEncrypt.pem"
      . " -in $cmsdir/$tfile -out tmp.txt";

    system("$cmd 2>cms.err 1>cms.out");

	if ($?)
		{
    if ($?) {
        print "\tDecrypt command FAILED!!\n";
        $badtest++;
    }
	elsif ($tlist =~ /cont/ &&
		!cmp_files("$cmsdir/ExContent.bin", "tmp.txt"))
    elsif ( $tlist =~ /cont/
        && !cmp_files( "$cmsdir/ExContent.bin", "tmp.txt" ) )
    {
        print "\tDecrypt content compare FAILED!!\n";
        $badtest++;
    }
	else
		{
    else {
        print "\tDecrypt passed\n" if $verbose;
    }
}

sub run_digest_test
	{
sub run_digest_test {
    my ( $cmsdir, $tlist, $tfile ) = @_;
    unlink "tmp.txt";

	my $cmd = "$cmscmd -digest_verify -inform DER" .
		" -in $cmsdir/$tfile -out tmp.txt";
    my $cmd =
      "$cmscmd -digest_verify -inform DER" . " -in $cmsdir/$tfile -out tmp.txt";

    system("$cmd 2>cms.err 1>cms.out");

	if ($?)
		{
    if ($?) {
        print "\tDigest verify command FAILED!!\n";
        $badtest++;
    }
	elsif ($tlist =~ /cont/ &&
		!cmp_files("$cmsdir/ExContent.bin", "tmp.txt"))
    elsif ( $tlist =~ /cont/
        && !cmp_files( "$cmsdir/ExContent.bin", "tmp.txt" ) )
    {
        print "\tDigest verify content compare FAILED!!\n";
        $badtest++;
    }
	else
		{
    else {
        print "\tDigest verify passed\n" if $verbose;
    }
}

sub run_encrypted_test
	{
sub run_encrypted_test {
    my ( $cmsdir, $tlist, $tfile, $key ) = @_;
    unlink "tmp.txt";

	system ("$cmscmd -EncryptedData_decrypt -inform DER" .
		" -secretkey $key" .
		" -in $cmsdir/$tfile -out tmp.txt");
    system( "$cmscmd -EncryptedData_decrypt -inform DER"
          . " -secretkey $key"
          . " -in $cmsdir/$tfile -out tmp.txt" );

	if ($?)
		{
    if ($?) {
        print "\tEncrypted Data command FAILED!!\n";
        $badtest++;
    }
	elsif ($tlist =~ /cont/ &&
		!cmp_files("$cmsdir/ExContent.bin", "tmp.txt"))
    elsif ( $tlist =~ /cont/
        && !cmp_files( "$cmsdir/ExContent.bin", "tmp.txt" ) )
    {
        print "\tEncrypted Data content compare FAILED!!\n";
        $badtest++;
    }
	else
		{
    else {
        print "\tEncryptedData verify passed\n" if $verbose;
    }
}

sub cmp_files
	{
sub cmp_files {
    my ( $f1, $f2 ) = @_;
    my ( $fp1, $fp2 );

@@ -328,15 +359,13 @@ sub cmp_files

    my $ret = 0;

	for (;;)
		{
    for ( ; ; ) {
        $n1 = sysread $fp1, $rd1, 4096;
        $n2 = sysread $fp2, $rd2, 4096;
        last if ( $n1 != $n2 );
        last if ( $rd1 ne $rd2 );

		if ($n1 == 0)
			{
        if ( $n1 == 0 ) {
            $ret = 1;
            last;
        }
@@ -350,4 +379,3 @@ sub cmp_files

}