OLD | NEW |
1 // Copyright 2013 The Chromium Authors. All rights reserved. | 1 // Copyright 2013 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "base/files/file_path.h" | 5 #include "base/files/file_path.h" |
6 #include "build/build_config.h" | 6 #include "build/build_config.h" |
7 #include "net/base/net_errors.h" | 7 #include "net/base/net_errors.h" |
8 #include "net/base/test_data_directory.h" | 8 #include "net/base/test_data_directory.h" |
9 #include "net/cert/cert_status_flags.h" | 9 #include "net/cert/cert_status_flags.h" |
10 #include "net/cert/cert_verify_proc.h" | 10 #include "net/cert/cert_verify_proc.h" |
11 #include "net/cert/cert_verify_result.h" | 11 #include "net/cert/cert_verify_result.h" |
12 #include "net/cert/test_root_certs.h" | 12 #include "net/cert/test_root_certs.h" |
13 #include "net/cert/x509_certificate.h" | 13 #include "net/cert/x509_certificate.h" |
14 #include "net/test/cert_test_util.h" | 14 #include "net/test/cert_test_util.h" |
15 #include "testing/gtest/include/gtest/gtest.h" | 15 #include "testing/gtest/include/gtest/gtest.h" |
16 | 16 |
17 #if defined(USE_NSS) || defined(OS_IOS) | 17 #if defined(USE_NSS_CERTS) || defined(OS_IOS) |
18 #include <nss.h> | 18 #include <nss.h> |
19 #endif | 19 #endif |
20 | 20 |
21 namespace net { | 21 namespace net { |
22 | 22 |
23 namespace { | 23 namespace { |
24 | 24 |
25 // The local test root certificate. | 25 // The local test root certificate. |
26 const char kRootCertificateFile[] = "root_ca_cert.pem"; | 26 const char kRootCertificateFile[] = "root_ca_cert.pem"; |
27 // A certificate issued by the local test root for 127.0.0.1. | 27 // A certificate issued by the local test root for 127.0.0.1. |
(...skipping 33 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
61 test_roots->Clear(); | 61 test_roots->Clear(); |
62 EXPECT_TRUE(test_roots->IsEmpty()); | 62 EXPECT_TRUE(test_roots->IsEmpty()); |
63 } | 63 } |
64 | 64 |
65 // Test that TestRootCerts actually adds the appropriate trust status flags | 65 // Test that TestRootCerts actually adds the appropriate trust status flags |
66 // when requested, and that the trusted status is cleared once the root is | 66 // when requested, and that the trusted status is cleared once the root is |
67 // removed the TestRootCerts. This test acts as a canary/sanity check for | 67 // removed the TestRootCerts. This test acts as a canary/sanity check for |
68 // the results of the rest of net_unittests, ensuring that the trust status | 68 // the results of the rest of net_unittests, ensuring that the trust status |
69 // is properly being set and cleared. | 69 // is properly being set and cleared. |
70 TEST(TestRootCertsTest, OverrideTrust) { | 70 TEST(TestRootCertsTest, OverrideTrust) { |
71 #if defined(USE_NSS) || defined(OS_IOS) | 71 #if defined(USE_NSS_CERTS) || defined(OS_IOS) |
72 if (NSS_VersionCheck("3.14.2") && !NSS_VersionCheck("3.15")) { | 72 if (NSS_VersionCheck("3.14.2") && !NSS_VersionCheck("3.15")) { |
73 // See http://bugzil.la/863947 for details | 73 // See http://bugzil.la/863947 for details |
74 LOG(INFO) << "Skipping test for NSS 3.14.2 - NSS 3.15"; | 74 LOG(INFO) << "Skipping test for NSS 3.14.2 - NSS 3.15"; |
75 return; | 75 return; |
76 } | 76 } |
77 #endif | 77 #endif |
78 | 78 |
79 TestRootCerts* test_roots = TestRootCerts::GetInstance(); | 79 TestRootCerts* test_roots = TestRootCerts::GetInstance(); |
80 ASSERT_NE(static_cast<TestRootCerts*>(NULL), test_roots); | 80 ASSERT_NE(static_cast<TestRootCerts*>(NULL), test_roots); |
81 EXPECT_TRUE(test_roots->IsEmpty()); | 81 EXPECT_TRUE(test_roots->IsEmpty()); |
(...skipping 46 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
128 NULL, | 128 NULL, |
129 CertificateList(), | 129 CertificateList(), |
130 &restored_verify_result); | 130 &restored_verify_result); |
131 EXPECT_NE(OK, restored_status); | 131 EXPECT_NE(OK, restored_status); |
132 EXPECT_NE(0u, | 132 EXPECT_NE(0u, |
133 restored_verify_result.cert_status & CERT_STATUS_AUTHORITY_INVALID); | 133 restored_verify_result.cert_status & CERT_STATUS_AUTHORITY_INVALID); |
134 EXPECT_EQ(bad_status, restored_status); | 134 EXPECT_EQ(bad_status, restored_status); |
135 EXPECT_EQ(bad_verify_result.cert_status, restored_verify_result.cert_status); | 135 EXPECT_EQ(bad_verify_result.cert_status, restored_verify_result.cert_status); |
136 } | 136 } |
137 | 137 |
138 #if defined(USE_NSS) || (defined(USE_OPENSSL_CERTS) && !defined(OS_ANDROID)) | 138 #if defined(USE_NSS_CERTS) || \ |
| 139 (defined(USE_OPENSSL_CERTS) && !defined(OS_ANDROID)) |
139 TEST(TestRootCertsTest, Contains) { | 140 TEST(TestRootCertsTest, Contains) { |
140 // Another test root certificate. | 141 // Another test root certificate. |
141 const char kRootCertificateFile2[] = "2048-rsa-root.pem"; | 142 const char kRootCertificateFile2[] = "2048-rsa-root.pem"; |
142 | 143 |
143 TestRootCerts* test_roots = TestRootCerts::GetInstance(); | 144 TestRootCerts* test_roots = TestRootCerts::GetInstance(); |
144 ASSERT_NE(static_cast<TestRootCerts*>(NULL), test_roots); | 145 ASSERT_NE(static_cast<TestRootCerts*>(NULL), test_roots); |
145 | 146 |
146 scoped_refptr<X509Certificate> root_cert_1 = | 147 scoped_refptr<X509Certificate> root_cert_1 = |
147 ImportCertFromFile(GetTestCertsDirectory(), kRootCertificateFile); | 148 ImportCertFromFile(GetTestCertsDirectory(), kRootCertificateFile); |
148 ASSERT_NE(static_cast<X509Certificate*>(NULL), root_cert_1.get()); | 149 ASSERT_NE(static_cast<X509Certificate*>(NULL), root_cert_1.get()); |
(...skipping 17 matching lines...) Expand all Loading... |
166 EXPECT_FALSE(test_roots->Contains(root_cert_1->os_cert_handle())); | 167 EXPECT_FALSE(test_roots->Contains(root_cert_1->os_cert_handle())); |
167 EXPECT_FALSE(test_roots->Contains(root_cert_2->os_cert_handle())); | 168 EXPECT_FALSE(test_roots->Contains(root_cert_2->os_cert_handle())); |
168 } | 169 } |
169 #endif | 170 #endif |
170 | 171 |
171 // TODO(rsleevi): Add tests for revocation checking via CRLs, ensuring that | 172 // TODO(rsleevi): Add tests for revocation checking via CRLs, ensuring that |
172 // TestRootCerts properly injects itself into the validation process. See | 173 // TestRootCerts properly injects itself into the validation process. See |
173 // http://crbug.com/63958 | 174 // http://crbug.com/63958 |
174 | 175 |
175 } // namespace net | 176 } // namespace net |
OLD | NEW |