| OLD | NEW |
| 1 // Copyright 2013 The Chromium Authors. All rights reserved. | 1 // Copyright 2013 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "base/files/file_path.h" | 5 #include "base/files/file_path.h" |
| 6 #include "build/build_config.h" | 6 #include "build/build_config.h" |
| 7 #include "net/base/net_errors.h" | 7 #include "net/base/net_errors.h" |
| 8 #include "net/cert/cert_status_flags.h" | 8 #include "net/cert/cert_status_flags.h" |
| 9 #include "net/cert/cert_verify_proc.h" | 9 #include "net/cert/cert_verify_proc.h" |
| 10 #include "net/cert/cert_verify_result.h" | 10 #include "net/cert/cert_verify_result.h" |
| 11 #include "net/cert/test_root_certs.h" | 11 #include "net/cert/test_root_certs.h" |
| 12 #include "net/cert/x509_certificate.h" | 12 #include "net/cert/x509_certificate.h" |
| 13 #include "net/test/cert_test_util.h" | 13 #include "net/test/cert_test_util.h" |
| 14 #include "net/test/gtest_util.h" |
| 14 #include "net/test/test_data_directory.h" | 15 #include "net/test/test_data_directory.h" |
| 16 #include "testing/gmock/include/gmock/gmock.h" |
| 15 #include "testing/gtest/include/gtest/gtest.h" | 17 #include "testing/gtest/include/gtest/gtest.h" |
| 16 | 18 |
| 17 #if defined(USE_NSS_CERTS) | 19 #if defined(USE_NSS_CERTS) |
| 18 #include <nss.h> | 20 #include <nss.h> |
| 19 #endif | 21 #endif |
| 20 | 22 |
| 23 using net::test::IsOk; |
| 24 |
| 21 namespace net { | 25 namespace net { |
| 22 | 26 |
| 23 namespace { | 27 namespace { |
| 24 | 28 |
| 25 // The local test root certificate. | 29 // The local test root certificate. |
| 26 const char kRootCertificateFile[] = "root_ca_cert.pem"; | 30 const char kRootCertificateFile[] = "root_ca_cert.pem"; |
| 27 // A certificate issued by the local test root for 127.0.0.1. | 31 // A certificate issued by the local test root for 127.0.0.1. |
| 28 const char kGoodCertificateFile[] = "ok_cert.pem"; | 32 const char kGoodCertificateFile[] = "ok_cert.pem"; |
| 29 | 33 |
| 30 } // namespace | 34 } // namespace |
| (...skipping 67 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 98 EXPECT_TRUE(test_roots->AddFromFile( | 102 EXPECT_TRUE(test_roots->AddFromFile( |
| 99 GetTestCertsDirectory().AppendASCII(kRootCertificateFile))); | 103 GetTestCertsDirectory().AppendASCII(kRootCertificateFile))); |
| 100 EXPECT_FALSE(test_roots->IsEmpty()); | 104 EXPECT_FALSE(test_roots->IsEmpty()); |
| 101 | 105 |
| 102 // Test that the certificate verification now succeeds, because the | 106 // Test that the certificate verification now succeeds, because the |
| 103 // TestRootCerts is successfully imbuing trust. | 107 // TestRootCerts is successfully imbuing trust. |
| 104 CertVerifyResult good_verify_result; | 108 CertVerifyResult good_verify_result; |
| 105 int good_status = | 109 int good_status = |
| 106 verify_proc->Verify(test_cert.get(), "127.0.0.1", std::string(), flags, | 110 verify_proc->Verify(test_cert.get(), "127.0.0.1", std::string(), flags, |
| 107 NULL, CertificateList(), &good_verify_result); | 111 NULL, CertificateList(), &good_verify_result); |
| 108 EXPECT_EQ(OK, good_status); | 112 EXPECT_THAT(good_status, IsOk()); |
| 109 EXPECT_EQ(0u, good_verify_result.cert_status); | 113 EXPECT_EQ(0u, good_verify_result.cert_status); |
| 110 | 114 |
| 111 test_roots->Clear(); | 115 test_roots->Clear(); |
| 112 EXPECT_TRUE(test_roots->IsEmpty()); | 116 EXPECT_TRUE(test_roots->IsEmpty()); |
| 113 | 117 |
| 114 // Ensure that when the TestRootCerts is cleared, the trust settings | 118 // Ensure that when the TestRootCerts is cleared, the trust settings |
| 115 // revert to their original state, and don't linger. If trust status | 119 // revert to their original state, and don't linger. If trust status |
| 116 // lingers, it will likely break other tests in net_unittests. | 120 // lingers, it will likely break other tests in net_unittests. |
| 117 CertVerifyResult restored_verify_result; | 121 CertVerifyResult restored_verify_result; |
| 118 int restored_status = | 122 int restored_status = |
| (...skipping 38 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 157 EXPECT_FALSE(test_roots->Contains(root_cert_1->os_cert_handle())); | 161 EXPECT_FALSE(test_roots->Contains(root_cert_1->os_cert_handle())); |
| 158 EXPECT_FALSE(test_roots->Contains(root_cert_2->os_cert_handle())); | 162 EXPECT_FALSE(test_roots->Contains(root_cert_2->os_cert_handle())); |
| 159 } | 163 } |
| 160 #endif | 164 #endif |
| 161 | 165 |
| 162 // TODO(rsleevi): Add tests for revocation checking via CRLs, ensuring that | 166 // TODO(rsleevi): Add tests for revocation checking via CRLs, ensuring that |
| 163 // TestRootCerts properly injects itself into the validation process. See | 167 // TestRootCerts properly injects itself into the validation process. See |
| 164 // http://crbug.com/63958 | 168 // http://crbug.com/63958 |
| 165 | 169 |
| 166 } // namespace net | 170 } // namespace net |
| OLD | NEW |