mirror of
https://github.com/curl/curl.git
synced 2024-12-21 06:50:10 +08:00
78d6232f1f
We remove support for building curl with gskit. - This is a niche TLS library, only running on some IBM systems - no regular curl contributors use this backend - no CI builds use or verify this backend - gskit, or the curl adaption for it, lacks many modern TLS features making it an inferior solution - build breakages in this code take weeks or more to get detected - fixing gskit code is mostly done "flying blind" This removal has been advertized in DEPRECATED in Jan 2, 2023 and it has been mentioned on the curl-library mailing list. It could be brought back, this is not a ban. Given proper effort and will, gskit support is welcome back into the curl TLS backend family. Closes #11460
125 lines
4.0 KiB
C
125 lines
4.0 KiB
C
/***************************************************************************
|
|
* _ _ ____ _
|
|
* Project ___| | | | _ \| |
|
|
* / __| | | | |_) | |
|
|
* | (__| |_| | _ <| |___
|
|
* \___|\___/|_| \_\_____|
|
|
*
|
|
* Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
|
|
*
|
|
* This software is licensed as described in the file COPYING, which
|
|
* you should have received as part of this distribution. The terms
|
|
* are also available at https://curl.se/docs/copyright.html.
|
|
*
|
|
* You may opt to use, copy, modify, merge, publish, distribute and/or sell
|
|
* copies of the Software, and permit persons to whom the Software is
|
|
* furnished to do so, under the terms of the COPYING file.
|
|
*
|
|
* This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
|
|
* KIND, either express or implied.
|
|
*
|
|
* SPDX-License-Identifier: curl
|
|
*
|
|
***************************************************************************/
|
|
#include "curlcheck.h"
|
|
|
|
|
|
static CURLcode unit_setup(void)
|
|
{
|
|
return CURLE_OK;
|
|
}
|
|
|
|
static void unit_stop(void)
|
|
{
|
|
}
|
|
|
|
/* only these backends define the tested functions */
|
|
#if defined(USE_OPENSSL) || defined(USE_SCHANNEL)
|
|
#include "vtls/hostcheck.h"
|
|
struct testcase {
|
|
const char *host;
|
|
const char *pattern;
|
|
bool match;
|
|
};
|
|
|
|
static struct testcase tests[] = {
|
|
{"", "", FALSE},
|
|
{"a", "", FALSE},
|
|
{"", "b", FALSE},
|
|
{"a", "b", FALSE},
|
|
{"aa", "bb", FALSE},
|
|
{"\xff", "\xff", TRUE},
|
|
{"aa.aa.aa", "aa.aa.bb", FALSE},
|
|
{"aa.aa.aa", "aa.aa.aa", TRUE},
|
|
{"aa.aa.aa", "*.aa.bb", FALSE},
|
|
{"aa.aa.aa", "*.aa.aa", TRUE},
|
|
{"192.168.0.1", "192.168.0.1", TRUE},
|
|
{"192.168.0.1", "*.168.0.1", FALSE},
|
|
{"192.168.0.1", "*.0.1", FALSE},
|
|
{"h.ello", "*.ello", FALSE},
|
|
{"h.ello.", "*.ello", FALSE},
|
|
{"h.ello", "*.ello.", FALSE},
|
|
{"h.e.llo", "*.e.llo", TRUE},
|
|
{"h.e.llo", " *.e.llo", FALSE},
|
|
{" h.e.llo", "*.e.llo", TRUE},
|
|
{"h.e.llo.", "*.e.llo", TRUE},
|
|
{"*.e.llo.", "*.e.llo", TRUE},
|
|
{"************.e.llo.", "*.e.llo", TRUE},
|
|
{"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
|
|
"BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB"
|
|
"CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC"
|
|
"DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD"
|
|
"EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE"
|
|
".e.llo.", "*.e.llo", TRUE},
|
|
{"\xfe\xfe.e.llo.", "*.e.llo", TRUE},
|
|
{"h.e.llo.", "*.e.llo.", TRUE},
|
|
{"h.e.llo", "*.e.llo.", TRUE},
|
|
{".h.e.llo", "*.e.llo.", FALSE},
|
|
{"h.e.llo", "*.*.llo.", FALSE},
|
|
{"h.e.llo", "h.*.llo", FALSE},
|
|
{"h.e.llo", "h.e.*", FALSE},
|
|
{"hello", "*.ello", FALSE},
|
|
{"hello", "**llo", FALSE},
|
|
{"bar.foo.example.com", "*.example.com", FALSE},
|
|
{"foo.example.com", "*.example.com", TRUE},
|
|
{"baz.example.net", "b*z.example.net", FALSE},
|
|
{"foobaz.example.net", "*baz.example.net", FALSE},
|
|
{"xn--l8j.example.local", "x*.example.local", FALSE},
|
|
{"xn--l8j.example.net", "*.example.net", TRUE},
|
|
{"xn--l8j.example.net", "*j.example.net", FALSE},
|
|
{"xn--l8j.example.net", "xn--l8j.example.net", TRUE},
|
|
{"xn--l8j.example.net", "xn--l8j.*.net", FALSE},
|
|
{"xl8j.example.net", "*.example.net", TRUE},
|
|
{"fe80::3285:a9ff:fe46:b619", "*::3285:a9ff:fe46:b619", FALSE},
|
|
{"fe80::3285:a9ff:fe46:b619", "fe80::3285:a9ff:fe46:b619", TRUE},
|
|
{NULL, NULL, FALSE}
|
|
};
|
|
|
|
UNITTEST_START
|
|
{
|
|
int i;
|
|
for(i = 0; tests[i].host; i++) {
|
|
if(tests[i].match != Curl_cert_hostcheck(tests[i].pattern,
|
|
strlen(tests[i].pattern),
|
|
tests[i].host,
|
|
strlen(tests[i].host))) {
|
|
fprintf(stderr,
|
|
"HOST: %s\n"
|
|
"PTRN: %s\n"
|
|
"did %sMATCH\n",
|
|
tests[i].host,
|
|
tests[i].pattern,
|
|
tests[i].match ? "NOT ": "");
|
|
unitfail++;
|
|
}
|
|
}
|
|
}
|
|
|
|
UNITTEST_STOP
|
|
#else
|
|
|
|
UNITTEST_START
|
|
|
|
UNITTEST_STOP
|
|
#endif
|