OLD | NEW |
1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include <cert.h> | 5 #include <cert.h> |
6 #include <pk11pub.h> | 6 #include <pk11pub.h> |
7 | 7 |
8 #include <algorithm> | 8 #include <algorithm> |
9 | 9 |
10 #include "base/file_path.h" | 10 #include "base/file_path.h" |
(...skipping 524 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
535 | 535 |
536 EXPECT_EQ(CertDatabase::UNTRUSTED, | 536 EXPECT_EQ(CertDatabase::UNTRUSTED, |
537 cert_db_.GetCertTrust(goog_cert.get(), SERVER_CERT)); | 537 cert_db_.GetCertTrust(goog_cert.get(), SERVER_CERT)); |
538 psm::nsNSSCertTrust goog_trust(goog_cert->os_cert_handle()->trust); | 538 psm::nsNSSCertTrust goog_trust(goog_cert->os_cert_handle()->trust); |
539 EXPECT_TRUE(goog_trust.HasPeer(PR_TRUE, PR_TRUE, PR_TRUE)); | 539 EXPECT_TRUE(goog_trust.HasPeer(PR_TRUE, PR_TRUE, PR_TRUE)); |
540 | 540 |
541 int flags = 0; | 541 int flags = 0; |
542 CertVerifyResult verify_result; | 542 CertVerifyResult verify_result; |
543 int error = goog_cert->Verify("www.google.com", flags, &verify_result); | 543 int error = goog_cert->Verify("www.google.com", flags, &verify_result); |
544 EXPECT_EQ(OK, error); | 544 EXPECT_EQ(OK, error); |
545 EXPECT_EQ(0, verify_result.cert_status); | 545 EXPECT_EQ(CERT_STATUS_NO_ERROR, verify_result.cert_status); |
546 } | 546 } |
547 | 547 |
548 TEST_F(CertDatabaseNSSTest, ImportServerCert_SelfSigned) { | 548 TEST_F(CertDatabaseNSSTest, ImportServerCert_SelfSigned) { |
549 CertificateList certs; | 549 CertificateList certs; |
550 ASSERT_TRUE(ReadCertIntoList("punycodetest.der", &certs)); | 550 ASSERT_TRUE(ReadCertIntoList("punycodetest.der", &certs)); |
551 | 551 |
552 CertDatabase::ImportCertFailureList failed; | 552 CertDatabase::ImportCertFailureList failed; |
553 EXPECT_TRUE(cert_db_.ImportServerCert(certs, &failed)); | 553 EXPECT_TRUE(cert_db_.ImportServerCert(certs, &failed)); |
554 | 554 |
555 EXPECT_EQ(0U, failed.size()); | 555 EXPECT_EQ(0U, failed.size()); |
(...skipping 15 matching lines...) Expand all Loading... |
571 | 571 |
572 // TODO(mattm): this should be SERVER_CERT, not CA_CERT, but that does not | 572 // TODO(mattm): this should be SERVER_CERT, not CA_CERT, but that does not |
573 // work due to NSS bug: https://bugzilla.mozilla.org/show_bug.cgi?id=531160 | 573 // work due to NSS bug: https://bugzilla.mozilla.org/show_bug.cgi?id=531160 |
574 EXPECT_TRUE(cert_db_.SetCertTrust( | 574 EXPECT_TRUE(cert_db_.SetCertTrust( |
575 puny_cert.get(), CA_CERT, | 575 puny_cert.get(), CA_CERT, |
576 CertDatabase::TRUSTED_SSL | CertDatabase::TRUSTED_EMAIL)); | 576 CertDatabase::TRUSTED_SSL | CertDatabase::TRUSTED_EMAIL)); |
577 | 577 |
578 verify_result.Reset(); | 578 verify_result.Reset(); |
579 error = puny_cert->Verify("xn--wgv71a119e.com", flags, &verify_result); | 579 error = puny_cert->Verify("xn--wgv71a119e.com", flags, &verify_result); |
580 EXPECT_EQ(OK, error); | 580 EXPECT_EQ(OK, error); |
581 EXPECT_EQ(0, verify_result.cert_status); | 581 EXPECT_EQ(CERT_STATUS_NO_ERROR, verify_result.cert_status); |
582 } | 582 } |
583 | 583 |
584 } // namespace net | 584 } // namespace net |
OLD | NEW |