Check self-signed certificate names and signatures

net/cert/x509_certificate_unittest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/x509_certificate.h"
 
 #include <stdint.h>
 
 #include <memory>
 
@@ skipping 730 matching lines @@
 
   scoped_refptr<X509Certificate> cert(
       ImportCertFromFile(certs_dir, "mit.davidben.der"));
   ASSERT_NE(static_cast<X509Certificate*>(NULL), cert.get());
   EXPECT_FALSE(X509Certificate::IsSelfSigned(cert->os_cert_handle()));
 
   scoped_refptr<X509Certificate> self_signed(
       ImportCertFromFile(certs_dir, "aia-root.pem"));
   ASSERT_NE(static_cast<X509Certificate*>(NULL), self_signed.get());
   EXPECT_TRUE(X509Certificate::IsSelfSigned(self_signed->os_cert_handle()));
+
+  scoped_refptr<X509Certificate> bad_name(
+      ImportCertFromFile(certs_dir, "self-signed-invalid-name.pem"));
+  ASSERT_NE(static_cast<X509Certificate*>(NULL), bad_name.get());
+  EXPECT_FALSE(X509Certificate::IsSelfSigned(bad_name->os_cert_handle()));
+
+  scoped_refptr<X509Certificate> bad_sig(
+      ImportCertFromFile(certs_dir, "self-signed-invalid-sig.pem"));
+  ASSERT_NE(static_cast<X509Certificate*>(NULL), bad_sig.get());
+  EXPECT_FALSE(X509Certificate::IsSelfSigned(bad_sig->os_cert_handle()));
 }
 
 TEST(X509CertificateTest, IsIssuedByEncodedWithIntermediates) {
   static const unsigned char kPolicyRootDN[] = {
     0x30, 0x1e, 0x31, 0x1c, 0x30, 0x1a, 0x06, 0x03, 0x55, 0x04, 0x03, 0x0c,
     0x13, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x20, 0x54, 0x65, 0x73, 0x74,
     0x20, 0x52, 0x6f, 0x6f, 0x74, 0x20, 0x43, 0x41
   };
   static const unsigned char kPolicyIntermediateDN[] = {
     0x30, 0x26, 0x31, 0x24, 0x30, 0x22, 0x06, 0x03, 0x55, 0x04, 0x03, 0x0c,
@@ skipping 458 matching lines @@
                                     &actual_type);
 
   EXPECT_EQ(data.expected_bits, actual_bits);
   EXPECT_EQ(data.expected_type, actual_type);
 }
 
 INSTANTIATE_TEST_CASE_P(, X509CertificatePublicKeyInfoTest,
                         testing::ValuesIn(kPublicKeyInfoTestData));
 
 }  // namespace net