mirror of
https://github.com/openssl/openssl.git
synced 2025-01-06 13:26:43 +08:00
168c595b14
Certificate Management Protocol (CMP, RFC 4210) extension to OpenSSL Also includes CRMF (RFC 4211) and HTTP transfer (RFC 6712). Adds the CMP and CRMF API to libcrypto and the "cmp" app to the CLI. Adds extensive documentation and tests. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/11998)
6.8 KiB
6.8 KiB
| 1 | expected | description | -section | val | -recipient | val | -expect_sender | val | -srvcert | val | -trusted | val | -untrusted | val | -ignore_keyusage | -unprotected_errors | -extracertsout | val | val2 | -opt1 | arg1 | -opt2 | arg2 | -opt3 | arg3 |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2 | 0 | default test | -section | -recipient | _CA_DN | BLANK | BLANK | -trusted | trusted.crt | BLANK | BLANK | -unprotected_errors | BLANK | ||||||||||||
| 3 | 1 | recipient missing arg | -section | -recipient | BLANK | BLANK | -trusted | trusted.crt | BLANK | BLANK | -unprotected_errors | BLANK | |||||||||||||
| 4 | 0 | unknown attribute in recipient name | -section | -recipient | _CA_DN/ABC=123 | BLANK | BLANK | -trusted | trusted.crt | BLANK | BLANK | -unprotected_errors | BLANK | ||||||||||||
| 5 | 1 | wrong syntax in recipient name: trailing double '/' after value | -section | -recipient | _CA_DN// | BLANK | BLANK | -trusted | trusted.crt | BLANK | BLANK | -unprotected_errors | BLANK | ||||||||||||
| 6 | 1 | wrong syntax in recipient name: missing '=' | -section | -recipient | /CDE | BLANK | BLANK | -trusted | trusted.crt | BLANK | BLANK | -unprotected_errors | BLANK | ||||||||||||
| 7 | 1 | wrong syntax in recipient name: C too long | -section | -recipient | /CN=ECC Issuing CA v10/OU=For test purpose only/O=CMPforOpenSSL/C=DEE | BLANK | BLANK | -trusted | trusted.crt | BLANK | BLANK | -unprotected_errors | BLANK | ||||||||||||
| 8 | 0 | config default with expected sender | -section | -recipient | _CA_DN | -expect_sender | _SERVER_DN | BLANK | -trusted | trusted.crt | BLANK | BLANK | -unprotected_errors | BLANK | |||||||||||
| 9 | 1 | expected sender missing arg | -section | -recipient | _CA_DN | -expect_sender | BLANK | -trusted | trusted.crt | BLANK | BLANK | -unprotected_errors | BLANK | ||||||||||||
| 10 | 1 | wrong expected sender | -section | -recipient | _CA_DN | -expect_sender | /CN=Sample Cert/OU=R&D/O=Company Ltd./L=Dublin 4/C=IE | BLANK | -trusted | trusted.crt | BLANK | BLANK | -unprotected_errors | BLANK | |||||||||||
| 11 | 0 | unknown attribute in expected sender | -section | -recipient | _CA_DN | -expect_sender | _SERVER_DN/ABC=123 | BLANK | -trusted | trusted.crt | BLANK | BLANK | -unprotected_errors | BLANK | |||||||||||
| 12 | 1 | extra attribute in expected sender | -section | -recipient | _CA_DN | -expect_sender | _SERVER_DN/serialNumber=123 | BLANK | -trusted | trusted.crt | BLANK | BLANK | -unprotected_errors | BLANK | |||||||||||
| 13 | 1 | double attribute in expected sender | -section | -recipient | _CA_DN | -expect_sender | /CN=ECC Issuing CA v10_SERVER_DN | BLANK | -trusted | trusted.crt | BLANK | BLANK | -unprotected_errors | BLANK | |||||||||||
| 14 | 1 | missing attribute in expected sender | -section | -recipient | _CA_DN | -expect_sender | /CN=ECC Issuing CA v10/OU=For test purpose only/C=DE | BLANK | -trusted | trusted.crt | BLANK | BLANK | -unprotected_errors | BLANK | |||||||||||
| 15 | 1 | bad syntax in expected sender name: leading double '/' | -section | -recipient | _CA_DN | -expect_sender | //_CA_DN | BLANK | -trusted | trusted.crt | BLANK | BLANK | -unprotected_errors | BLANK | |||||||||||
| 16 | 1 | bad syntax in expected sender name: trailing double '/' | -section | -recipient | _CA_DN | -expect_sender | _CA_DN// | BLANK | -trusted | trusted.crt | BLANK | BLANK | -unprotected_errors | BLANK | |||||||||||
| 17 | 1 | bad syntax in expected sender name: missing '=' | -section | -recipient | _CA_DN | -expect_sender | /C=DE/CN=ECC Issuing CA v10/OU=For test purpose only/OCMPforOpenSSL | BLANK | -trusted | trusted.crt | BLANK | BLANK | -unprotected_errors | BLANK | |||||||||||
| 18 | 1 | expected sender empty attributes | -section | -recipient | _CA_DN | -expect_sender | /CN=/OU=/O=/C= | BLANK | -trusted | trusted.crt | BLANK | BLANK | -unprotected_errors | BLANK | |||||||||||
| 19 | 1 | srvcert missing arg | -section | -recipient | " | BLANK | -srvcert | -trusted | trusted.crt | BLANK | BLANK | -unprotected_errors | BLANK | ||||||||||||
| 20 | 1 | wrong srvcert | -section | -recipient | " | BLANK | -srvcert | signer.crt | -trusted | " | BLANK | BLANK | -unprotected_errors | BLANK | |||||||||||
| 21 | 1 | srvcert is empty file | -section | -recipient | " | BLANK | -srvcert | empty.txt | -trusted | " | BLANK | BLANK | -unprotected_errors | BLANK | |||||||||||
| 22 | 1 | srvcert random content | -section | -recipient | " | BLANK | -srvcert | random.bin | -trusted | " | BLANK | BLANK | -unprotected_errors | BLANK | |||||||||||
| 23 | 0 | no -trusted but srvcert | -section | -recipient | _CA_DN | BLANK | -srvcert | _SERVER_CERT | BLANK | BLANK | -unprotected_errors | BLANK | |||||||||||||
| 24 | 1 | trusted missing arg | -section | -recipient | _CA_DN | BLANK | BLANK | -trusted | BLANK | BLANK | -unprotected_errors | BLANK | |||||||||||||
| 25 | 1 | wrong trusted cert | -section | -recipient | _CA_DN | BLANK | BLANK | -trusted | signer.crt | BLANK | BLANK | -unprotected_errors | BLANK | -secret | " | -cert | signer.crt | -key | signer.p12 | -keypass | pass:12345 | ||||
| 26 | 1 | trusted empty file | -section | -recipient | _CA_DN | BLANK | BLANK | -trusted | empty.txt | BLANK | BLANK | -unprotected_errors | BLANK | ||||||||||||
| 27 | 1 | trusted random file | -section | -recipient | _CA_DN | BLANK | BLANK | -trusted | random.bin | BLANK | BLANK | -unprotected_errors | BLANK | ||||||||||||
| 28 | 1 | trusted file does not exist | -section | -recipient | _CA_DN | BLANK | BLANK | -trusted | idontexist | BLANK | BLANK | -unprotected_errors | BLANK | ||||||||||||
| 29 | 1 | untrusted missing arg | -section | -recipient | _CA_DN | BLANK | BLANK | -trusted | trusted.crt | -untrusted | BLANK | -unprotected_errors | BLANK | ||||||||||||
| 30 | 1 | untrusted empty file | -section | -recipient | _CA_DN | BLANK | BLANK | -trusted | trusted.crt | -untrusted | empty.txt | BLANK | -unprotected_errors | BLANK | |||||||||||
| 31 | 1 | untrusted random file | -section | -recipient | _CA_DN | BLANK | BLANK | -trusted | trusted.crt | -untrusted | random.bin | BLANK | -unprotected_errors | BLANK | |||||||||||
| 32 | 1 | untrusted file does not exist | -section | -recipient | _CA_DN | BLANK | BLANK | -trusted | trusted.crt | -untrusted | idontexist | BLANK | -unprotected_errors | BLANK | |||||||||||
| 33 | 0 | ignore key usage | -section | -recipient | _CA_DN | BLANK | BLANK | -trusted | trusted.crt | BLANK | -ignore_keyusage | -unprotected_errors | BLANK | ||||||||||||
| 34 | 1 | ignorekeyusage with parameter | -section | -recipient | _CA_DN | BLANK | BLANK | -trusted | trusted.crt | BLANK | -unprotected_errors | BLANK | -ignore_keyusage | 1 | |||||||||||
| 35 | 0 | no unprotected errors - no errors | -section | -recipient | _CA_DN | BLANK | BLANK | -trusted | trusted.crt | BLANK | BLANK | BLANK | BLANK | ||||||||||||
| 36 | 1 | unprotected_errors with parameter | -section | -recipient | _CA_DN | BLANK | BLANK | -trusted | trusted.crt | BLANK | BLANK | BLANK | BLANK | -unprotected_errors | 123 | ||||||||||
| 37 | 0 | extracertsout | -section | -recipient | _CA_DN | BLANK | BLANK | -trusted | trusted.crt | BLANK | BLANK | -unprotected_errors | -extracertsout | test.extracerts.pem | |||||||||||
| 38 | 1 | extracertsout no parameter | -section | -recipient | _CA_DN | BLANK | BLANK | -trusted | trusted.crt | BLANK | BLANK | -unprotected_errors | -extracertsout | ||||||||||||
| 39 | 1 | extracertsout directory | -section | -recipient | _CA_DN | BLANK | BLANK | -trusted | trusted.crt | BLANK | BLANK | -unprotected_errors | -extracertsout | directory/ | |||||||||||
| 40 | 1 | extracertsout multiple arguments | -section | -recipient | _CA_DN | BLANK | BLANK | -trusted | trusted.crt | BLANK | BLANK | -unprotected_errors | -extracertsout | abc | def |