OLD | NEW |
| (Empty) |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | |
2 // Use of this source code is governed by a BSD-style license that can be | |
3 // found in the LICENSE file. | |
4 | |
5 #include "net/base/ev_root_ca_metadata.h" | |
6 | |
7 #include "net/base/cert_test_util.h" | |
8 #include "net/base/x509_cert_types.h" | |
9 #include "testing/gtest/include/gtest/gtest.h" | |
10 | |
11 #if defined(USE_NSS) | |
12 #include "crypto/scoped_nss_types.h" | |
13 #endif | |
14 | |
15 namespace net { | |
16 | |
17 namespace { | |
18 | |
19 static const char kVerisignPolicy[] = "2.16.840.1.113733.1.7.23.6"; | |
20 static const char kThawtePolicy[] = "2.16.840.1.113733.1.7.48.1"; | |
21 static const char kFakePolicy[] = "2.16.840.1.42"; | |
22 static const SHA1HashValue kVerisignFingerprint = | |
23 { { 0x74, 0x2c, 0x31, 0x92, 0xe6, 0x07, 0xe4, 0x24, 0xeb, 0x45, | |
24 0x49, 0x54, 0x2b, 0xe1, 0xbb, 0xc5, 0x3e, 0x61, 0x74, 0xe2 } }; | |
25 static const SHA1HashValue kFakeFingerprint = | |
26 { { 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, | |
27 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99 } }; | |
28 | |
29 #if defined(USE_NSS) || defined(OS_WIN) | |
30 class EVOidData { | |
31 public: | |
32 EVOidData(); | |
33 bool Init(); | |
34 | |
35 EVRootCAMetadata::PolicyOID verisign_policy; | |
36 EVRootCAMetadata::PolicyOID thawte_policy; | |
37 EVRootCAMetadata::PolicyOID fake_policy; | |
38 }; | |
39 | |
40 #endif // defined(USE_NSS) || defined(OS_WIN) | |
41 | |
42 #if defined(USE_NSS) | |
43 | |
44 SECOidTag RegisterOID(PLArenaPool* arena, const char* oid_string) { | |
45 SECOidData oid_data; | |
46 memset(&oid_data, 0, sizeof(oid_data)); | |
47 oid_data.offset = SEC_OID_UNKNOWN; | |
48 oid_data.desc = oid_string; | |
49 oid_data.mechanism = CKM_INVALID_MECHANISM; | |
50 oid_data.supportedExtension = INVALID_CERT_EXTENSION; | |
51 | |
52 SECStatus rv = SEC_StringToOID(arena, &oid_data.oid, oid_string, 0); | |
53 if (rv != SECSuccess) | |
54 return SEC_OID_UNKNOWN; | |
55 | |
56 return SECOID_AddEntry(&oid_data); | |
57 } | |
58 | |
59 EVOidData::EVOidData() | |
60 : verisign_policy(SEC_OID_UNKNOWN), | |
61 thawte_policy(SEC_OID_UNKNOWN), | |
62 fake_policy(SEC_OID_UNKNOWN) { | |
63 } | |
64 | |
65 bool EVOidData::Init() { | |
66 crypto::ScopedPLArenaPool pool(PORT_NewArena(DER_DEFAULT_CHUNKSIZE)); | |
67 if (!pool.get()) | |
68 return false; | |
69 | |
70 verisign_policy = RegisterOID(pool.get(), kVerisignPolicy); | |
71 thawte_policy = RegisterOID(pool.get(), kThawtePolicy); | |
72 fake_policy = RegisterOID(pool.get(), kFakePolicy); | |
73 | |
74 return verisign_policy != SEC_OID_UNKNOWN && | |
75 thawte_policy != SEC_OID_UNKNOWN && | |
76 fake_policy != SEC_OID_UNKNOWN; | |
77 } | |
78 | |
79 #elif defined(OS_WIN) | |
80 | |
81 EVOidData::EVOidData() | |
82 : verisign_policy(kVerisignPolicy), | |
83 thawte_policy(kThawtePolicy), | |
84 fake_policy(kFakePolicy) { | |
85 } | |
86 | |
87 bool EVOidData::Init() { | |
88 return true; | |
89 } | |
90 | |
91 #endif | |
92 | |
93 #if defined(USE_NSS) || defined(OS_WIN) | |
94 | |
95 class EVRootCAMetadataTest : public testing::Test { | |
96 protected: | |
97 virtual void SetUp() OVERRIDE { | |
98 ASSERT_TRUE(ev_oid_data.Init()); | |
99 } | |
100 | |
101 EVOidData ev_oid_data; | |
102 }; | |
103 | |
104 TEST_F(EVRootCAMetadataTest, Basic) { | |
105 EVRootCAMetadata* ev_metadata(EVRootCAMetadata::GetInstance()); | |
106 | |
107 EXPECT_TRUE(ev_metadata->IsEVPolicyOID(ev_oid_data.verisign_policy)); | |
108 EXPECT_FALSE(ev_metadata->IsEVPolicyOID(ev_oid_data.fake_policy)); | |
109 EXPECT_TRUE(ev_metadata->HasEVPolicyOID(kVerisignFingerprint, | |
110 ev_oid_data.verisign_policy)); | |
111 EXPECT_FALSE(ev_metadata->HasEVPolicyOID(kFakeFingerprint, | |
112 ev_oid_data.verisign_policy)); | |
113 EXPECT_FALSE(ev_metadata->HasEVPolicyOID(kVerisignFingerprint, | |
114 ev_oid_data.fake_policy)); | |
115 EXPECT_FALSE(ev_metadata->HasEVPolicyOID(kVerisignFingerprint, | |
116 ev_oid_data.thawte_policy)); | |
117 } | |
118 | |
119 TEST_F(EVRootCAMetadataTest, AddRemove) { | |
120 EVRootCAMetadata* ev_metadata(EVRootCAMetadata::GetInstance()); | |
121 | |
122 EXPECT_FALSE(ev_metadata->IsEVPolicyOID(ev_oid_data.fake_policy)); | |
123 EXPECT_FALSE(ev_metadata->HasEVPolicyOID(kFakeFingerprint, | |
124 ev_oid_data.fake_policy)); | |
125 | |
126 { | |
127 ScopedTestEVPolicy test_ev_policy(ev_metadata, kFakeFingerprint, | |
128 kFakePolicy); | |
129 | |
130 EXPECT_TRUE(ev_metadata->IsEVPolicyOID(ev_oid_data.fake_policy)); | |
131 EXPECT_TRUE(ev_metadata->HasEVPolicyOID(kFakeFingerprint, | |
132 ev_oid_data.fake_policy)); | |
133 } | |
134 | |
135 EXPECT_FALSE(ev_metadata->IsEVPolicyOID(ev_oid_data.fake_policy)); | |
136 EXPECT_FALSE(ev_metadata->HasEVPolicyOID(kFakeFingerprint, | |
137 ev_oid_data.fake_policy)); | |
138 } | |
139 | |
140 #endif // defined(USE_NSS) || defined(OS_WIN) | |
141 | |
142 } // namespace | |
143 | |
144 } // namespace net | |
OLD | NEW |