2
# Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
5
# ====================================================================
6
# Copyright (c) 2008 The OpenSSL Project. All rights reserved.
8
# Redistribution and use in source and binary forms, with or without
9
# modification, are permitted provided that the following conditions
12
# 1. Redistributions of source code must retain the above copyright
13
# notice, this list of conditions and the following disclaimer.
15
# 2. Redistributions in binary form must reproduce the above copyright
16
# notice, this list of conditions and the following disclaimer in
17
# the documentation and/or other materials provided with the
20
# 3. All advertising materials mentioning features or use of this
21
# software must display the following acknowledgment:
22
# "This product includes software developed by the OpenSSL Project
23
# for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
25
# 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
26
# endorse or promote products derived from this software without
27
# prior written permission. For written permission, please contact
28
# licensing@OpenSSL.org.
30
# 5. Products derived from this software may not be called "OpenSSL"
31
# nor may "OpenSSL" appear in their names without prior written
32
# permission of the OpenSSL Project.
34
# 6. Redistributions of any form whatsoever must retain the following
36
# "This product includes software developed by the OpenSSL Project
37
# for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
39
# THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
40
# EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
41
# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
42
# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
43
# ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
44
# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
45
# NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
46
# LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47
# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
48
# STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
49
# ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
50
# OF THE POSSIBILITY OF SUCH DAMAGE.
51
# ====================================================================
53
# Perl script to run tests against S/MIME examples in RFC4134
54
# Assumes RFC is in current directory and called "rfc4134.txt"
63
my $exfile = "./rfc4134.txt";
65
if (-f "../apps/openssl")
67
$cmscmd = "../util/shlib_wrap.sh ../apps/openssl cms";
69
elsif (-f "..\\out32dll\\openssl.exe")
71
$cmscmd = "..\\out32dll\\openssl.exe cms";
73
elsif (-f "..\\out32\\openssl.exe")
75
$cmscmd = "..\\out32\\openssl.exe cms";
79
[ "3.1.bin" => "dataout" ],
80
[ "3.2.bin" => "encode, dataout" ],
81
[ "4.1.bin" => "encode, verifyder, cont, dss" ],
82
[ "4.2.bin" => "encode, verifyder, cont, rsa" ],
83
[ "4.3.bin" => "encode, verifyder, cont_extern, dss" ],
84
[ "4.4.bin" => "encode, verifyder, cont, dss" ],
85
[ "4.5.bin" => "verifyder, cont, rsa" ],
86
[ "4.6.bin" => "encode, verifyder, cont, dss" ],
87
[ "4.7.bin" => "encode, verifyder, cont, dss" ],
88
[ "4.8.eml" => "verifymime, dss" ],
89
[ "4.9.eml" => "verifymime, dss" ],
90
[ "4.10.bin" => "encode, verifyder, cont, dss" ],
91
[ "4.11.bin" => "encode, certsout" ],
92
[ "5.1.bin" => "encode, envelopeder, cont" ],
93
[ "5.2.bin" => "encode, envelopeder, cont" ],
94
[ "5.3.eml" => "envelopemime, cont" ],
95
[ "6.0.bin" => "encode, digest, cont" ],
96
[ "7.1.bin" => "encode, encrypted, cont" ],
97
[ "7.2.bin" => "encode, encrypted, cont" ]
100
# Extract examples from RFC4134 text.
101
# Base64 decode all examples, certificates and
102
# private keys are converted to PEM format.
104
my ( $filename, $data );
106
my @cleanup = ( "cms.out", "cms.err", "tmp.der", "tmp.txt" );
110
open( IN, $exfile ) || die "Can't Open RFC examples file $exfile";
121
$filename = "$exdir/$filename";
122
if ( $filename =~ /\.bin$/ || $filename =~ /\.eml$/ ) {
123
$data = decode_base64($data);
124
open OUT, ">$filename";
128
push @cleanup, $filename;
130
elsif ( $filename =~ /\.cer$/ ) {
131
write_pem( $filename, "CERTIFICATE", $data );
133
elsif ( $filename =~ /\.pri$/ ) {
134
write_pem( $filename, "PRIVATE KEY", $data );
146
"73:7c:79:1f:25:ea:d0:e0:46:29:25:43:52:f7:dc:62:91:e5:cb:26:91:7a:da:32";
148
foreach (@test_list) {
149
my ( $file, $tlist ) = @$_;
150
print "Example file $file:\n";
151
if ( $tlist =~ /encode/ ) {
152
run_reencode_test( $exdir, $file );
154
if ( $tlist =~ /certsout/ ) {
155
run_certsout_test( $exdir, $file );
157
if ( $tlist =~ /dataout/ ) {
158
run_dataout_test( $exdir, $file );
160
if ( $tlist =~ /verify/ ) {
161
run_verify_test( $exdir, $tlist, $file );
163
if ( $tlist =~ /digest/ ) {
164
run_digest_test( $exdir, $tlist, $file );
166
if ( $tlist =~ /encrypted/ ) {
167
run_encrypted_test( $exdir, $tlist, $file, $secretkey );
169
if ( $tlist =~ /envelope/ ) {
170
run_envelope_test( $exdir, $tlist, $file );
180
print "\n$badtest TESTS FAILED!!\n";
183
print "\n***All tests successful***\n";
187
my ( $filename, $str, $data ) = @_;
189
$filename =~ s/\.[^.]*$/.pem/;
191
push @cleanup, $filename;
193
open OUT, ">$filename";
195
print OUT "-----BEGIN $str-----\n";
197
print OUT "-----END $str-----\n";
202
sub run_reencode_test {
203
my ( $cmsdir, $tfile ) = @_;
206
system( "$cmscmd -cmsout -inform DER -outform DER"
207
. " -in $cmsdir/$tfile -out tmp.der" );
210
print "\tReencode command FAILED!!\n";
213
elsif ( !cmp_files( "$cmsdir/$tfile", "tmp.der" ) ) {
214
print "\tReencode FAILED!!\n";
218
print "\tReencode passed\n" if $verbose;
222
sub run_certsout_test {
223
my ( $cmsdir, $tfile ) = @_;
227
system( "$cmscmd -cmsout -inform DER -certsout tmp.pem"
228
. " -in $cmsdir/$tfile -out tmp.der" );
231
print "\tCertificate output command FAILED!!\n";
235
print "\tCertificate output passed\n" if $verbose;
239
sub run_dataout_test {
240
my ( $cmsdir, $tfile ) = @_;
244
"$cmscmd -data_out -inform DER" . " -in $cmsdir/$tfile -out tmp.txt" );
247
print "\tDataout command FAILED!!\n";
250
elsif ( !cmp_files( "$cmsdir/ExContent.bin", "tmp.txt" ) ) {
251
print "\tDataout compare FAILED!!\n";
255
print "\tDataout passed\n" if $verbose;
259
sub run_verify_test {
260
my ( $cmsdir, $tlist, $tfile ) = @_;
263
$form = "DER" if $tlist =~ /verifyder/;
264
$form = "SMIME" if $tlist =~ /verifymime/;
265
$cafile = "$cmsdir/CarlDSSSelf.pem" if $tlist =~ /dss/;
266
$cafile = "$cmsdir/CarlRSASelf.pem" if $tlist =~ /rsa/;
269
"$cmscmd -verify -inform $form"
271
. " -in $cmsdir/$tfile -out tmp.txt";
273
$cmd .= " -content $cmsdir/ExContent.bin" if $tlist =~ /cont_extern/;
275
system("$cmd 2>cms.err 1>cms.out");
278
print "\tVerify command FAILED!!\n";
281
elsif ( $tlist =~ /cont/
282
&& !cmp_files( "$cmsdir/ExContent.bin", "tmp.txt" ) )
284
print "\tVerify content compare FAILED!!\n";
288
print "\tVerify passed\n" if $verbose;
292
sub run_envelope_test {
293
my ( $cmsdir, $tlist, $tfile ) = @_;
296
$form = "DER" if $tlist =~ /envelopeder/;
297
$form = "SMIME" if $tlist =~ /envelopemime/;
300
"$cmscmd -decrypt -inform $form"
301
. " -recip $cmsdir/BobRSASignByCarl.pem"
302
. " -inkey $cmsdir/BobPrivRSAEncrypt.pem"
303
. " -in $cmsdir/$tfile -out tmp.txt";
305
system("$cmd 2>cms.err 1>cms.out");
308
print "\tDecrypt command FAILED!!\n";
311
elsif ( $tlist =~ /cont/
312
&& !cmp_files( "$cmsdir/ExContent.bin", "tmp.txt" ) )
314
print "\tDecrypt content compare FAILED!!\n";
318
print "\tDecrypt passed\n" if $verbose;
322
sub run_digest_test {
323
my ( $cmsdir, $tlist, $tfile ) = @_;
327
"$cmscmd -digest_verify -inform DER" . " -in $cmsdir/$tfile -out tmp.txt";
329
system("$cmd 2>cms.err 1>cms.out");
332
print "\tDigest verify command FAILED!!\n";
335
elsif ( $tlist =~ /cont/
336
&& !cmp_files( "$cmsdir/ExContent.bin", "tmp.txt" ) )
338
print "\tDigest verify content compare FAILED!!\n";
342
print "\tDigest verify passed\n" if $verbose;
346
sub run_encrypted_test {
347
my ( $cmsdir, $tlist, $tfile, $key ) = @_;
350
system( "$cmscmd -EncryptedData_decrypt -inform DER"
352
. " -in $cmsdir/$tfile -out tmp.txt" );
355
print "\tEncrypted Data command FAILED!!\n";
358
elsif ( $tlist =~ /cont/
359
&& !cmp_files( "$cmsdir/ExContent.bin", "tmp.txt" ) )
361
print "\tEncrypted Data content compare FAILED!!\n";
365
print "\tEncryptedData verify passed\n" if $verbose;
370
my ( $f1, $f2 ) = @_;
375
if ( !open( $fp1, "<$f1" ) ) {
376
print STDERR "Can't Open file $f1\n";
380
if ( !open( $fp2, "<$f2" ) ) {
381
print STDERR "Can't Open file $f2\n";
391
$n1 = sysread $fp1, $rd1, 4096;
392
$n2 = sysread $fp2, $rd2, 4096;
393
last if ( $n1 != $n2 );
394
last if ( $rd1 ne $rd2 );
added
removed
test/cms-examples.pl
