Security-58286.260.20.tar.gz

[apple/security.git] / OSX / libsecurity_smime / regressions / smime-cms-test.c

diff --git a/OSX/libsecurity_smime/regressions/smime-cms-test.c b/OSX/libsecurity_smime/regressions/smime-cms-test.c
index 6083a213b39d67136c634f3078c19841bb5d3d1c..080daa1c8154b9b427764d9db50ca21536bf8a17 100644 (file)
--- a/OSX/libsecurity_smime/regressions/smime-cms-test.c
+++ b/OSX/libsecurity_smime/regressions/smime-cms-test.c
@@ -22,7 +22,7 @@
  */
 
 
  */
 
 

-#include <test/testmore.h>
+#include <regressions/test/testmore.h>

 #include <Security/SecCMS.h>
 #include <Security/SecItem.h>
 #include <Security/SecItemPriv.h>
 #include <Security/SecCMS.h>
 #include <Security/SecItem.h>
 #include <Security/SecItemPriv.h>


@@ -384,7 +384,7 @@ const uint8_t gkIPACCG2DevCertClass87 [] =
 }; // gkIPACCG2DevCertClass87 []
 
 // Concatenated blob of 2 DER certificat
 }; // gkIPACCG2DevCertClass87 []
 
 // Concatenated blob of 2 DER certificat

-const uint8_t TestDoubleCerts [] =
+const uint8_t TestDoubleCerts1 [] =

 {
     0x30, 0x82, 0x01, 0xbe, 0x30, 0x82, 0x01, 0x27, 0x02, 0x01, 0x01, 0x30,
     0x0d, 0x06, 0x09, 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x05,
 {
     0x30, 0x82, 0x01, 0xbe, 0x30, 0x82, 0x01, 0x27, 0x02, 0x01, 0x01, 0x30,
     0x0d, 0x06, 0x09, 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x05,


@@ -423,7 +423,12 @@ const uint8_t TestDoubleCerts [] =
     0x30, 0x0a, 0xff, 0xdb, 0x7a, 0x72, 0xf6, 0x89, 0x51, 0x01, 0x81, 0x3b,
     0x97, 0x46, 0x99, 0x8a, 0x52, 0x42, 0xaf, 0x63, 0xa2, 0x1d, 0xc0, 0xae,
     0x09, 0xa6, 0x6c, 0x7c, 0x7f, 0x93, 0xc7, 0xd0, 0x18, 0x97, 0x6b, 0x59,
     0x30, 0x0a, 0xff, 0xdb, 0x7a, 0x72, 0xf6, 0x89, 0x51, 0x01, 0x81, 0x3b,
     0x97, 0x46, 0x99, 0x8a, 0x52, 0x42, 0xaf, 0x63, 0xa2, 0x1d, 0xc0, 0xae,
     0x09, 0xa6, 0x6c, 0x7c, 0x7f, 0x93, 0xc7, 0xd0, 0x18, 0x97, 0x6b, 0x59,

-    0xa9, 0x23, 0x84, 0x65, 0xf9, 0xfd, 0x30, 0x82, 0x01, 0xbf, 0x30, 0x82,
+    0xa9, 0x23, 0x84, 0x65, 0xf9, 0xfd,
+};
+
+const uint8_t TestDoubleCerts2 [] =
+{
+    0x30, 0x82, 0x01, 0xbf, 0x30, 0x82,

     0x01, 0x28, 0x02, 0x02, 0x03, 0xe9, 0x30, 0x0d, 0x06, 0x09, 0x2a, 0x86,
     0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x05, 0x05, 0x00, 0x30, 0x25, 0x31,
     0x23, 0x30, 0x21, 0x06, 0x03, 0x55, 0x04, 0x03, 0x13, 0x1a, 0x53, 0x65,
     0x01, 0x28, 0x02, 0x02, 0x03, 0xe9, 0x30, 0x0d, 0x06, 0x09, 0x2a, 0x86,
     0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x05, 0x05, 0x00, 0x30, 0x25, 0x31,
     0x23, 0x30, 0x21, 0x06, 0x03, 0x55, 0x04, 0x03, 0x13, 0x1a, 0x53, 0x65,


@@ -462,7 +467,7 @@ const uint8_t TestDoubleCerts [] =
     0xea, 0x9c, 0x85, 0xc9, 0x32, 0xde, 0xa9, 0x62, 0xcb, 0x3c, 0xb7, 0xbd,
     0x8d, 0x16, 0xec, 0xcf, 0x52, 0x17, 0xc8, 0x47, 0x99, 0x94, 0xe1, 0x4c,
     0x39
     0xea, 0x9c, 0x85, 0xc9, 0x32, 0xde, 0xa9, 0x62, 0xcb, 0x3c, 0xb7, 0xbd,
     0x8d, 0x16, 0xec, 0xcf, 0x52, 0x17, 0xc8, 0x47, 0x99, 0x94, 0xe1, 0x4c,
     0x39

-}; // Test with 2certs []
+};

 
 
 /* Basic processing of input */
 
 
 /* Basic processing of input */


@@ -479,6 +484,7 @@ static void tests(void)
        "SecCMSCertificatesOnlyMessageCopyCertificates");
     is(CFArrayGetCount(certs), 1, "certificate count is 1");
     CFReleaseNull(message);
        "SecCMSCertificatesOnlyMessageCopyCertificates");
     is(CFArrayGetCount(certs), 1, "certificate count is 1");
     CFReleaseNull(message);

+    CFReleaseNull(certs);

 
     // Premade message containing one certificate blob
     message = CFDataCreateWithBytesNoCopy(kCFAllocatorDefault,
 
     // Premade message containing one certificate blob
     message = CFDataCreateWithBytesNoCopy(kCFAllocatorDefault,


@@ -487,9 +493,10 @@ static void tests(void)
        "SecCMSCertificatesOnlyMessageCopyCertificates");
     is(CFArrayGetCount(certs), 1, "certificate count is 1");
     CFReleaseNull(message);
        "SecCMSCertificatesOnlyMessageCopyCertificates");
     is(CFArrayGetCount(certs), 1, "certificate count is 1");
     CFReleaseNull(message);

-
+    CFReleaseNull(certs);

 
     SecCertificateRef another_cert = NULL;
 
     SecCertificateRef another_cert = NULL;

+    CFMutableArrayRef input_certs = NULL;

 
     // Process a single raw certificate and make it a message
     isnt(another_cert = SecCertificateCreateWithBytes(NULL, _c1, sizeof(_c1)),
 
     // Process a single raw certificate and make it a message
     isnt(another_cert = SecCertificateCreateWithBytes(NULL, _c1, sizeof(_c1)),


@@ -498,30 +505,38 @@ static void tests(void)
     ok(certs = SecCMSCertificatesOnlyMessageCopyCertificates(message),
        "SecCMSCertificatesOnlyMessageCopyCertificates");
     is(CFArrayGetCount(certs), 1, "certificate count is 1");
     ok(certs = SecCMSCertificatesOnlyMessageCopyCertificates(message),
        "SecCMSCertificatesOnlyMessageCopyCertificates");
     is(CFArrayGetCount(certs), 1, "certificate count is 1");

+    CFReleaseNull(certs);
+    CFReleaseNull(message);
+    CFReleaseNull(another_cert);

 
 

-    // Process two raw certificates (concatenated DER blobs) and make it a message
-    isnt(another_cert = SecCertificateCreateWithBytes(NULL, TestDoubleCerts, sizeof(TestDoubleCerts)),
+    // Process two raw certificates and make it a message
+    input_certs = CFArrayCreateMutable(NULL, 3, &kCFTypeArrayCallBacks);
+    isnt(another_cert = SecCertificateCreateWithBytes(NULL, TestDoubleCerts1, sizeof(TestDoubleCerts1)),
+         NULL, "create certificate");
+    CFArrayAppendValue(input_certs, another_cert);
+    CFReleaseNull(another_cert);
+    isnt(another_cert = SecCertificateCreateWithBytes(NULL, TestDoubleCerts2, sizeof(TestDoubleCerts2)),

          NULL, "create certificate");
          NULL, "create certificate");

-    ok(message = SecCMSCreateCertificatesOnlyMessageIAP(another_cert), "create iAP specific cert only message (2certs)");
+    CFArrayAppendValue(input_certs, another_cert);
+    CFReleaseNull(another_cert);
+
+    ok(message = SecCMSCreateCertificatesOnlyMessage(input_certs), "create cert only message (2certs)");

     ok(certs = SecCMSCertificatesOnlyMessageCopyCertificates(message),
        "SecCMSCertificatesOnlyMessageCopyCertificates");
     ok(certs = SecCMSCertificatesOnlyMessageCopyCertificates(message),
        "SecCMSCertificatesOnlyMessageCopyCertificates");

-    // FIXME: SecCMSCreateCertificatesOnlyMessageIAP should be changed to take a CFArrayRef argument.
-    // Note that a SecCertificateRef can only contain the data of a single certificate.
-    // If the fix for rdar://17159227 is present, the message will only contain one certificate.

     count = (certs) ? CFArrayGetCount(certs) : 0;
     count = (certs) ? CFArrayGetCount(certs) : 0;

-    ok(count > 0 && count < 3, "certificate count is 1 or 2");
+    ok(count == 2, "certificate count is 2");

 
     // Clean up
     CFReleaseNull(another_cert);
     CFReleaseNull(message);
 
     // Clean up
     CFReleaseNull(another_cert);
     CFReleaseNull(message);

-
+    CFReleaseNull(input_certs);

     CFReleaseNull(certs);
 }
 
 
 int smime_cms_test(int argc, char *const *argv)
 {
     CFReleaseNull(certs);
 }
 
 
 int smime_cms_test(int argc, char *const *argv)
 {

-       plan_tests(12);
+       plan_tests(13);

 
        tests();
 
 
        tests();