| OLD | NEW |
| 1 // Copyright 2013 The Chromium Authors. All rights reserved. | 1 // Copyright 2013 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "base/files/file_path.h" | 5 #include "base/files/file_path.h" |
| 6 #include "build/build_config.h" | 6 #include "build/build_config.h" |
| 7 #include "net/base/net_errors.h" | 7 #include "net/base/net_errors.h" |
| 8 #include "net/base/test_data_directory.h" | 8 #include "net/base/test_data_directory.h" |
| 9 #include "net/cert/cert_status_flags.h" | 9 #include "net/cert/cert_status_flags.h" |
| 10 #include "net/cert/cert_verify_proc.h" | 10 #include "net/cert/cert_verify_proc.h" |
| 11 #include "net/cert/cert_verify_result.h" | 11 #include "net/cert/cert_verify_result.h" |
| 12 #include "net/cert/test_root_certs.h" | 12 #include "net/cert/test_root_certs.h" |
| 13 #include "net/cert/x509_certificate.h" | 13 #include "net/cert/x509_certificate.h" |
| 14 #include "net/test/cert_test_util.h" | 14 #include "net/test/cert_test_util.h" |
| 15 #include "testing/gtest/include/gtest/gtest.h" | 15 #include "testing/gtest/include/gtest/gtest.h" |
| 16 | 16 |
| 17 #if defined(USE_NSS) || defined(OS_IOS) | 17 #if defined(USE_NSS_CERTS) || defined(OS_IOS) |
| 18 #include <nss.h> | 18 #include <nss.h> |
| 19 #endif | 19 #endif |
| 20 | 20 |
| 21 namespace net { | 21 namespace net { |
| 22 | 22 |
| 23 namespace { | 23 namespace { |
| 24 | 24 |
| 25 // The local test root certificate. | 25 // The local test root certificate. |
| 26 const char kRootCertificateFile[] = "root_ca_cert.pem"; | 26 const char kRootCertificateFile[] = "root_ca_cert.pem"; |
| 27 // A certificate issued by the local test root for 127.0.0.1. | 27 // A certificate issued by the local test root for 127.0.0.1. |
| (...skipping 33 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 61 test_roots->Clear(); | 61 test_roots->Clear(); |
| 62 EXPECT_TRUE(test_roots->IsEmpty()); | 62 EXPECT_TRUE(test_roots->IsEmpty()); |
| 63 } | 63 } |
| 64 | 64 |
| 65 // Test that TestRootCerts actually adds the appropriate trust status flags | 65 // Test that TestRootCerts actually adds the appropriate trust status flags |
| 66 // when requested, and that the trusted status is cleared once the root is | 66 // when requested, and that the trusted status is cleared once the root is |
| 67 // removed the TestRootCerts. This test acts as a canary/sanity check for | 67 // removed the TestRootCerts. This test acts as a canary/sanity check for |
| 68 // the results of the rest of net_unittests, ensuring that the trust status | 68 // the results of the rest of net_unittests, ensuring that the trust status |
| 69 // is properly being set and cleared. | 69 // is properly being set and cleared. |
| 70 TEST(TestRootCertsTest, OverrideTrust) { | 70 TEST(TestRootCertsTest, OverrideTrust) { |
| 71 #if defined(USE_NSS) || defined(OS_IOS) | 71 #if defined(USE_NSS_CERTS) || defined(OS_IOS) |
| 72 if (NSS_VersionCheck("3.14.2") && !NSS_VersionCheck("3.15")) { | 72 if (NSS_VersionCheck("3.14.2") && !NSS_VersionCheck("3.15")) { |
| 73 // See http://bugzil.la/863947 for details | 73 // See http://bugzil.la/863947 for details |
| 74 LOG(INFO) << "Skipping test for NSS 3.14.2 - NSS 3.15"; | 74 LOG(INFO) << "Skipping test for NSS 3.14.2 - NSS 3.15"; |
| 75 return; | 75 return; |
| 76 } | 76 } |
| 77 #endif | 77 #endif |
| 78 | 78 |
| 79 TestRootCerts* test_roots = TestRootCerts::GetInstance(); | 79 TestRootCerts* test_roots = TestRootCerts::GetInstance(); |
| 80 ASSERT_NE(static_cast<TestRootCerts*>(NULL), test_roots); | 80 ASSERT_NE(static_cast<TestRootCerts*>(NULL), test_roots); |
| 81 EXPECT_TRUE(test_roots->IsEmpty()); | 81 EXPECT_TRUE(test_roots->IsEmpty()); |
| (...skipping 46 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 128 NULL, | 128 NULL, |
| 129 CertificateList(), | 129 CertificateList(), |
| 130 &restored_verify_result); | 130 &restored_verify_result); |
| 131 EXPECT_NE(OK, restored_status); | 131 EXPECT_NE(OK, restored_status); |
| 132 EXPECT_NE(0u, | 132 EXPECT_NE(0u, |
| 133 restored_verify_result.cert_status & CERT_STATUS_AUTHORITY_INVALID); | 133 restored_verify_result.cert_status & CERT_STATUS_AUTHORITY_INVALID); |
| 134 EXPECT_EQ(bad_status, restored_status); | 134 EXPECT_EQ(bad_status, restored_status); |
| 135 EXPECT_EQ(bad_verify_result.cert_status, restored_verify_result.cert_status); | 135 EXPECT_EQ(bad_verify_result.cert_status, restored_verify_result.cert_status); |
| 136 } | 136 } |
| 137 | 137 |
| 138 #if defined(USE_NSS) || (defined(USE_OPENSSL_CERTS) && !defined(OS_ANDROID)) | 138 #if defined(USE_NSS_CERTS) || \ |
| 139 (defined(USE_OPENSSL_CERTS) && !defined(OS_ANDROID)) |
| 139 TEST(TestRootCertsTest, Contains) { | 140 TEST(TestRootCertsTest, Contains) { |
| 140 // Another test root certificate. | 141 // Another test root certificate. |
| 141 const char kRootCertificateFile2[] = "2048-rsa-root.pem"; | 142 const char kRootCertificateFile2[] = "2048-rsa-root.pem"; |
| 142 | 143 |
| 143 TestRootCerts* test_roots = TestRootCerts::GetInstance(); | 144 TestRootCerts* test_roots = TestRootCerts::GetInstance(); |
| 144 ASSERT_NE(static_cast<TestRootCerts*>(NULL), test_roots); | 145 ASSERT_NE(static_cast<TestRootCerts*>(NULL), test_roots); |
| 145 | 146 |
| 146 scoped_refptr<X509Certificate> root_cert_1 = | 147 scoped_refptr<X509Certificate> root_cert_1 = |
| 147 ImportCertFromFile(GetTestCertsDirectory(), kRootCertificateFile); | 148 ImportCertFromFile(GetTestCertsDirectory(), kRootCertificateFile); |
| 148 ASSERT_NE(static_cast<X509Certificate*>(NULL), root_cert_1.get()); | 149 ASSERT_NE(static_cast<X509Certificate*>(NULL), root_cert_1.get()); |
| (...skipping 17 matching lines...) Expand all Loading... |
| 166 EXPECT_FALSE(test_roots->Contains(root_cert_1->os_cert_handle())); | 167 EXPECT_FALSE(test_roots->Contains(root_cert_1->os_cert_handle())); |
| 167 EXPECT_FALSE(test_roots->Contains(root_cert_2->os_cert_handle())); | 168 EXPECT_FALSE(test_roots->Contains(root_cert_2->os_cert_handle())); |
| 168 } | 169 } |
| 169 #endif | 170 #endif |
| 170 | 171 |
| 171 // TODO(rsleevi): Add tests for revocation checking via CRLs, ensuring that | 172 // TODO(rsleevi): Add tests for revocation checking via CRLs, ensuring that |
| 172 // TestRootCerts properly injects itself into the validation process. See | 173 // TestRootCerts properly injects itself into the validation process. See |
| 173 // http://crbug.com/63958 | 174 // http://crbug.com/63958 |
| 174 | 175 |
| 175 } // namespace net | 176 } // namespace net |
| OLD | NEW |