mirror of
https://github.com/curl/curl.git
synced 2025-01-06 13:44:52 +08:00
d15692ebba
Removes one strlen() call per SAN name in a cert-check. Closes #8418
84 lines
3.4 KiB
C
84 lines
3.4 KiB
C
/***************************************************************************
|
|
* _ _ ____ _
|
|
* Project ___| | | | _ \| |
|
|
* / __| | | | |_) | |
|
|
* | (__| |_| | _ <| |___
|
|
* \___|\___/|_| \_\_____|
|
|
*
|
|
* Copyright (C) 1998 - 2022, Daniel Stenberg, <daniel@haxx.se>, et al.
|
|
*
|
|
* This software is licensed as described in the file COPYING, which
|
|
* you should have received as part of this distribution. The terms
|
|
* are also available at https://curl.se/docs/copyright.html.
|
|
*
|
|
* You may opt to use, copy, modify, merge, publish, distribute and/or sell
|
|
* copies of the Software, and permit persons to whom the Software is
|
|
* furnished to do so, under the terms of the COPYING file.
|
|
*
|
|
* This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
|
|
* KIND, either express or implied.
|
|
*
|
|
***************************************************************************/
|
|
#include "curlcheck.h"
|
|
|
|
#include "vtls/hostcheck.h" /* from the lib dir */
|
|
|
|
static CURLcode unit_setup(void)
|
|
{
|
|
return CURLE_OK;
|
|
}
|
|
|
|
static void unit_stop(void)
|
|
{
|
|
/* done before shutting down and exiting */
|
|
}
|
|
|
|
UNITTEST_START
|
|
|
|
/* only these backends define the tested functions */
|
|
#if defined(USE_OPENSSL) || defined(USE_GSKIT)
|
|
|
|
/* here you start doing things and checking that the results are good */
|
|
|
|
fail_unless(Curl_cert_hostcheck(STRCONST("www.example.com"),
|
|
"www.example.com"), "good 1");
|
|
fail_unless(Curl_cert_hostcheck(STRCONST("*.example.com"), "www.example.com"),
|
|
"good 2");
|
|
fail_unless(Curl_cert_hostcheck(STRCONST("xxx*.example.com"),
|
|
"xxxwww.example.com"), "good 3");
|
|
fail_unless(Curl_cert_hostcheck(STRCONST("f*.example.com"), "foo.example.com"),
|
|
"good 4");
|
|
fail_unless(Curl_cert_hostcheck(STRCONST("192.168.0.0"), "192.168.0.0"),
|
|
"good 5");
|
|
|
|
fail_if(Curl_cert_hostcheck(STRCONST("xxx.example.com"),
|
|
"www.example.com"), "bad 1");
|
|
fail_if(Curl_cert_hostcheck(STRCONST("*"), "www.example.com"), "bad 2");
|
|
fail_if(Curl_cert_hostcheck(STRCONST("*.*.com"), "www.example.com"), "bad 3");
|
|
fail_if(Curl_cert_hostcheck(STRCONST("*.example.com"),
|
|
"baa.foo.example.com"), "bad 4");
|
|
fail_if(Curl_cert_hostcheck(STRCONST("f*.example.com"),
|
|
"baa.example.com"), "bad 5");
|
|
fail_if(Curl_cert_hostcheck(STRCONST("*.com"), "example.com"), "bad 6");
|
|
fail_if(Curl_cert_hostcheck(STRCONST("*fail.com"), "example.com"), "bad 7");
|
|
fail_if(Curl_cert_hostcheck(STRCONST("*.example."), "www.example."), "bad 8");
|
|
fail_if(Curl_cert_hostcheck(STRCONST("*.example."), "www.example"), "bad 9");
|
|
fail_if(Curl_cert_hostcheck(STRCONST(""), "www"), "bad 10");
|
|
fail_if(Curl_cert_hostcheck(STRCONST("*"), "www"), "bad 11");
|
|
fail_if(Curl_cert_hostcheck(STRCONST("*.168.0.0"), "192.168.0.0"), "bad 12");
|
|
fail_if(Curl_cert_hostcheck(STRCONST("www.example.com"),
|
|
"192.168.0.0"), "bad 13");
|
|
|
|
#ifdef ENABLE_IPV6
|
|
fail_if(Curl_cert_hostcheck(STRCONST("*::3285:a9ff:fe46:b619"),
|
|
"fe80::3285:a9ff:fe46:b619"), "bad 14");
|
|
fail_unless(Curl_cert_hostcheck(STRCONST("fe80::3285:a9ff:fe46:b619"),
|
|
"fe80::3285:a9ff:fe46:b619"), "good 6");
|
|
#endif
|
|
|
|
#endif
|
|
|
|
/* you end the test code like this: */
|
|
|
|
UNITTEST_STOP
|