openssl/test
Matt Caswell b533510f3b Fail if we fail to fetch the EVP_KEYMGMT
If we failed to fetch an EVP_KEYMGMT then we were falling back to legacy.
This is because some algorithms (such as MACs and KDFs used via an old
style EVP_PKEY) have not been transferred to providers.

Unfortunately this means that you cannot stop some algorithms from being
used by not loading the provider.

For example if you wanted to prevent RSA from being used, you might expect
to just not load any providers that make it available. Unfortunately that
doesn't work because we simply fall back to legacy if we fail to fetch
the EVP_KEYMGMT.

Instead we should fail *unless* the key type is one of those legacy key
types that we have not transferred.

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/11826)
2020-05-28 17:01:47 +01:00
..
certs Add support for unusal 'othername' subjectAltNames 2020-04-25 18:52:30 +03:00
ct Use .cnf for config files, not .conf 2020-03-06 18:25:13 +01:00
d2i-tests
ocsp-tests
ossl_shim ossl_shim: use the correct ticket key call back. 2020-05-28 13:54:33 +10:00
recipes fips: add AES OFB mode ciphers to FIPS provider. 2020-05-28 07:59:13 +10:00
smime-certs Remove RANDFILE settings from configuration files 2019-11-24 08:35:14 +01:00
ssl-tests test/ssl-tests/20-cert-select.cnf.in: Re-enable RSA-PSS related tests 2020-05-14 12:17:13 +02:00
testutil Update copyright year 2020-05-15 14:09:49 +01:00
aborttest.c
aesgcmtest.c Update copyright year 2020-05-15 14:09:49 +01:00
afalgtest.c
asn1_decode_test.c Update source files for deprecation at 3.0 2019-11-07 11:37:25 +01:00
asn1_dsa_internal_test.c Reorganize private crypto header files 2019-09-28 20:26:34 +02:00
asn1_encode_test.c Update source files for deprecation at 3.0 2019-11-07 11:37:25 +01:00
asn1_internal_test.c Reorganize private crypto header files 2019-09-28 20:26:34 +02:00
asn1_string_table_test.c
asn1_time_test.c Update copyright year 2020-04-23 13:55:52 +01:00
asynciotest.c Update copyright year 2020-04-23 13:55:52 +01:00
asynctest.c Deprecate most of debug-memory 2019-12-14 20:57:35 +01:00
bad_dtls_test.c Update copyright year 2020-04-23 13:55:52 +01:00
bftest.c Update copyright year 2020-04-23 13:55:52 +01:00
bio_callback_test.c
bio_enc_test.c
bio_memleak_test.c Update copyright year 2020-05-15 14:09:49 +01:00
bio_prefix_text.c TEST: Add test recipe and help program to test BIO_f_prefix() 2019-12-18 19:42:44 +01:00
bioprinttest.c fix truncation of integers on 32bit AIX 2019-03-11 14:45:18 +01:00
bn_internal_test.c Update copyright year 2020-05-15 14:09:49 +01:00
bn_rand_range.h Test of uniformity of BN_rand_range output. 2019-05-29 09:54:29 +10:00
bntest.c Fix some typos 2019-12-11 19:04:01 +01:00
bntests.pl
build.info Fix ERR_print_errors so that it matches the documented format in doc/man3/ERR_error_string.pod 2020-05-26 12:44:36 +10:00
CAss.cnf Use .cnf for config files, not .conf 2020-03-06 18:25:13 +01:00
casttest.c Update copyright year 2020-04-23 13:55:52 +01:00
CAtsa.cnf Remove RANDFILE settings from configuration files 2019-11-24 08:35:14 +01:00
chacha_internal_test.c Reorganize private crypto header files 2019-09-28 20:26:34 +02:00
cipher_overhead_test.c Reorganize local header files 2019-09-28 20:26:35 +02:00
cipherbytes_test.c Update copyright year 2020-05-15 14:09:49 +01:00
cipherlist_test.c Update copyright year 2020-05-15 14:09:49 +01:00
ciphername_test.c In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
clienthellotest.c Update copyright year 2020-04-23 13:55:52 +01:00
cmp_asn_test.c chunk 6 of CMP contribution to OpenSSL 2019-12-12 10:57:25 +00:00
cmp_client_test.c Rename OSSL_CMP_CTX_set1_clCert() to OSSL_CMP_CTX_set1_cert() 2020-05-13 19:42:00 +02:00
cmp_ctx_test.c Rename OSSL_CMP_CTX_set1_clCert() to OSSL_CMP_CTX_set1_cert() 2020-05-13 19:42:00 +02:00
cmp_hdr_test.c In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
cmp_msg_test.c Rename OSSL_CMP_CTX_set1_clCert() to OSSL_CMP_CTX_set1_cert() 2020-05-13 19:42:00 +02:00
cmp_protect_test.c Rename OSSL_CMP_CTX_set1_clCert() to OSSL_CMP_CTX_set1_cert() 2020-05-13 19:42:00 +02:00
cmp_server_test.c Chunk 8 of CMP contribution to OpenSSL: CMP server and cmp_mock_srv.c for testing 2020-03-10 16:09:44 +01:00
cmp_status_test.c In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
cmp_testlib.c In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
cmp_testlib.h Update copyright year 2020-04-23 13:55:52 +01:00
cmp_vfy_test.c In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
cms-examples.pl
cmsapitest.c Amend references to "OpenSSL license" 2020-04-29 15:27:22 +02:00
conf_include_test.c Remove RANDFILE settings from configuration files 2019-11-24 08:35:14 +01:00
confdump.c Update copyright year 2020-05-15 14:09:49 +01:00
constant_time_test.c Reorganize local header files 2019-09-28 20:26:35 +02:00
context_internal_test.c Instead of global data store it in an OPENSSL_CTX 2019-05-02 22:42:09 +01:00
crltest.c Update copyright year 2020-05-15 14:09:49 +01:00
ct_test.c In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
ctype_internal_test.c Reorganize private crypto header files 2019-09-28 20:26:34 +02:00
curve448_internal_test.c Update copyright year 2020-04-23 13:55:52 +01:00
d2i_test.c Update copyright year 2020-04-23 13:55:52 +01:00
danetest.c In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
danetest.in
danetest.pem
default-and-fips.cnf Update some nits around the FIPS module 2020-04-24 13:19:16 +02:00
default-and-legacy.cnf test/recipes/30-test_evp.t: Modify to test with different providers 2019-07-26 18:14:41 +02:00
default.cnf test/recipes/30-test_evp.t: Modify to test with different providers 2019-07-26 18:14:41 +02:00
destest.c Update copyright year 2020-04-23 13:55:52 +01:00
dhtest.c Update copyright year 2020-04-23 13:55:52 +01:00
drbg_cavs_data_ctr.c
drbg_cavs_data_hash.c
drbg_cavs_data_hmac.c
drbg_cavs_data.h Fix header file include guard names 2019-09-28 20:26:36 +02:00
drbg_cavs_test.c Update copyright year 2020-05-15 14:09:49 +01:00
drbg_extra_test.c coverity 1462562 Dereference before null check 2020-04-30 20:21:32 +10:00
drbg_extra_test.h Amend references to "OpenSSL license" 2020-04-29 15:27:22 +02:00
drbgtest.c Rename FIPS_MODE to FIPS_MODULE 2020-04-28 15:37:37 +02:00
drbgtest.h
dsa_no_digest_size_test.c Update copyright year 2020-04-23 13:55:52 +01:00
dsatest.c Update core_names.h fields and document most fields. 2020-05-26 13:53:07 +10:00
dtls_mtu_test.c Update copyright year 2020-05-15 14:09:49 +01:00
dtlstest.c Update copyright year 2020-04-23 13:55:52 +01:00
dtlsv1listentest.c
ec_internal_test.c Update copyright year 2020-04-23 13:55:52 +01:00
ecdsatest.c Rename FIPS_MODE to FIPS_MODULE 2020-04-28 15:37:37 +02:00
ecdsatest.h Fix header file include guard names 2019-09-28 20:26:36 +02:00
ecstresstest.c Remove tab characters from C source files. 2019-07-16 20:24:10 +10:00
ectest.c deprecate EC precomputation functionality 2020-05-19 16:29:37 +03:00
enginetest.c test/enginetest.c: Make sure no config file is loaded 2019-07-19 20:18:34 +02:00
errtest.c Fix errtest for older compilers 2020-05-28 14:18:13 +10:00
evp_extra_test.c test/evp_extra_test.c: Add OPENSSL_NO_CMAC around CMAC test 2020-05-14 17:15:05 +02:00
evp_fetch_prov_test.c Update copyright year 2020-04-23 13:55:52 +01:00
evp_kdf_test.c Fix no-cmac and no-camellia 2019-11-14 09:44:18 +00:00
evp_pkey_dparams_test.c EC only uses approved curves in FIPS mode. 2019-06-25 12:00:25 +10:00
evp_pkey_provided_test.c Update core_names.h fields and document most fields. 2020-05-26 13:53:07 +10:00
evp_test.c Fail if we fail to fetch the EVP_KEYMGMT 2020-05-28 17:01:47 +01:00
evp_test.h
exdatatest.c Fix the parameter types of the CRYPTO_EX_dup function type. 2020-05-23 15:31:14 +02:00
exptest.c
fatalerrtest.c Update copyright year 2020-04-23 13:55:52 +01:00
ffc_internal_test.c Fix DH_get_nid() so that it does not cache values. 2020-04-20 11:07:38 +10:00
fips.cnf Update some nits around the FIPS module 2020-04-24 13:19:16 +02:00
generate_buildtest.pl
generate_ssl_tests.pl Update copyright year 2020-04-23 13:55:52 +01:00
gmdifftest.c
gosttest.c Use a non-default libctx in sslapitest 2020-04-19 14:40:55 +01:00
handshake_helper.c In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
handshake_helper.h Fix header file include guard names 2019-09-28 20:26:36 +02:00
hexstr_test.c Fix ERR_print_errors so that it matches the documented format in doc/man3/ERR_error_string.pod 2020-05-26 12:44:36 +10:00
hmactest.c Update copyright year 2020-04-23 13:55:52 +01:00
http_test.c In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
ideatest.c Update copyright year 2020-04-23 13:55:52 +01:00
igetest.c Deprecate the AES_ige_*() functions 2019-12-04 17:46:38 +00:00
insta_ca.cert.pem Chunk 11 of CMP contribution to OpenSSL: CMP command-line interface 2020-05-13 19:42:00 +02:00
insta.priv.pem Chunk 11 of CMP contribution to OpenSSL: CMP command-line interface 2020-05-13 19:42:00 +02:00
keymgmt_internal_test.c Update copyright year 2020-04-23 13:55:52 +01:00
legacy.cnf test/recipes/30-test_evp.t: Modify to test with different providers 2019-07-26 18:14:41 +02:00
lhash_test.c
mdc2_internal_test.c Update copyright year 2020-04-23 13:55:52 +01:00
mdc2test.c Update copyright year 2020-04-23 13:55:52 +01:00
memleaktest.c test/memleaktest.c: Modify for use with address/leak sanitizer 2019-12-10 14:16:12 +01:00
modes_internal_test.c Update copyright year 2020-04-23 13:55:52 +01:00
namemap_internal_test.c Update copyright year 2020-04-23 13:55:52 +01:00
ocspapitest.c In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
ossl_test_endian.h Fix header file include guard names 2019-09-28 20:26:36 +02:00
P1ss.cnf Use .cnf for config files, not .conf 2020-03-06 18:25:13 +01:00
P2ss.cnf Use .cnf for config files, not .conf 2020-03-06 18:25:13 +01:00
p_test.c Maintain strict type discipline between the core and providers 2020-05-16 17:10:03 +01:00
packettest.c Make the PACKET/WPACKET code available to both libcrypto and libssl 2019-07-12 06:26:46 +10:00
param_build_test.c coverity 1462577: Incorrect expression 2020-04-30 20:21:16 +10:00
params_api_test.c params: change OSSL_PARAM_set_unmodified() to operate on a params array 2020-04-25 18:46:32 +10:00
params_conversion_test.c Update copyright year 2020-04-23 13:55:52 +01:00
params_test.c Update copyright year 2020-04-23 13:55:52 +01:00
pbelutest.c
pemtest.c
pkcs7-1.pem
pkcs7.pem
pkey_meth_kdf_test.c
pkey_meth_test.c
pkits-test.pl
poly1305_internal_test.c Add ChaCha related ciphers to default provider 2019-10-16 16:18:42 +10:00
property_test.c Update copyright year 2020-05-15 14:09:49 +01:00
provider_internal_test.c Load the config file by default 2019-08-01 09:59:20 +01:00
provider_internal_test.cnf.in Use .cnf for config files, not .conf 2020-03-06 18:25:13 +01:00
provider_test.c Change OSSL_PARAM return size to not be a pointer. 2019-06-24 14:43:55 +10:00
rc2test.c Update copyright year 2020-04-23 13:55:52 +01:00
rc4test.c Update copyright year 2020-04-23 13:55:52 +01:00
rc5test.c Update copyright year 2020-04-23 13:55:52 +01:00
rdrand_sanitytest.c Remove extern declarations of OPENSSL_ia32cap_P 2019-09-01 15:41:58 +02:00
README Centralise Environment Variables for the tests 2020-05-06 11:40:53 +01:00
README.external GOST external tests 2020-05-23 22:04:21 +03:00
README.ssltest.md Fix issues reported by markdownlint 2020-05-08 16:22:02 +02:00
recordlentest.c Update copyright year 2020-04-23 13:55:52 +01:00
rsa_complex.c
rsa_mp_test.c Update copyright year 2020-04-23 13:55:52 +01:00
rsa_sp800_56b_test.c Update copyright year 2020-05-15 14:09:49 +01:00
rsa_test.c Update copyright year 2020-04-23 13:55:52 +01:00
run_tests.pl Update copyright year 2020-05-15 14:09:49 +01:00
sanitytest.c
secmemtest.c Update copyright year 2020-04-23 13:55:52 +01:00
serverinfo2.pem
serverinfo.pem
servername_test.c Update copyright year 2020-04-23 13:55:52 +01:00
session.pem
shibboleth.pfx
shlibloadtest.c Reorganize public header files (part 1) 2019-09-28 20:26:36 +02:00
siphash_internal_test.c Reorganize private crypto header files 2019-09-28 20:26:34 +02:00
sm2_internal_test.c Update copyright year 2020-04-23 13:55:52 +01:00
sm4_internal_test.c Reorganize private crypto header files 2019-09-28 20:26:34 +02:00
smcont.txt
sparse_array_test.c Reorganize private crypto header files 2019-09-28 20:26:34 +02:00
srptest.c
ssl_cert_table_internal_test.c Reorganize local header files 2019-09-28 20:26:35 +02:00
ssl_ctx_test.c Update copyright year 2020-05-15 14:09:49 +01:00
ssl_test_ctx_test.c Update copyright year 2020-04-23 13:55:52 +01:00
ssl_test_ctx_test.cnf Use .cnf for config files, not .conf 2020-03-06 18:25:13 +01:00
ssl_test_ctx.c Update copyright year 2020-05-15 14:09:49 +01:00
ssl_test_ctx.h Fix header file include guard names 2019-09-28 20:26:36 +02:00
ssl_test.c In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
ssl_test.tmpl
sslapitest.c Test for the SSL_OP_IGNORE_UNEXPECTED_EOF option 2020-05-19 19:04:11 +03:00
sslbuffertest.c Update copyright year 2020-04-23 13:55:52 +01:00
sslcorrupttest.c In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
ssltest_old.c In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
ssltestlib.c Update copyright year 2020-04-23 13:55:52 +01:00
ssltestlib.h Update copyright year 2020-04-23 13:55:52 +01:00
stack_test.c
sysdefault.cnf
sysdefaulttest.c
test_test.c Fix --strict-warnings build 2019-08-18 21:45:16 +02:00
test.cnf Add -section option to 'req' command 2020-03-07 12:58:02 +03:00
testcrl.pem
testdsa.pem
testdsapub.pem
testec-p256.pem
testecpub-p256.pem
tested448.pem More testing for CLI usage of Ed25519 and Ed448 keys 2019-12-11 18:37:53 +01:00
tested448pub.pem More testing for CLI usage of Ed25519 and Ed448 keys 2019-12-11 18:37:53 +01:00
tested25519.pem More testing for CLI usage of Ed25519 and Ed448 keys 2019-12-11 18:37:53 +01:00
tested25519pub.pem More testing for CLI usage of Ed25519 and Ed448 keys 2019-12-11 18:37:53 +01:00
testp7.pem
testreq2.pem
testrsa.pem
testrsapub.pem
testsid.pem
testutil.h Update copyright year 2020-04-23 13:55:52 +01:00
testx509.pem
threadstest.c
time_offset_test.c
tls13ccstest.c Update copyright year 2020-04-23 13:55:52 +01:00
tls13encryptiontest.c Reorganize local header files 2019-09-28 20:26:35 +02:00
tls13secretstest.c Update copyright year 2020-04-23 13:55:52 +01:00
uitest.c
Uss.cnf Use .cnf for config files, not .conf 2020-03-06 18:25:13 +01:00
v3-cert1.pem
v3-cert2.pem
v3ext.c Update copyright year 2020-04-23 13:55:52 +01:00
v3nametest.c Update copyright year 2020-05-15 14:09:49 +01:00
verify_extra_test.c In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
versions.c
wpackettest.c WPACKET: don't write DER length when we don't want to 2020-05-04 05:50:06 +02:00
x509_check_cert_pkey_test.c Update copyright year 2020-04-23 13:55:52 +01:00
x509_dup_cert_test.c Update copyright year 2020-04-23 13:55:52 +01:00
x509_internal_test.c Join the x509 and x509v3 directories 2019-05-29 09:32:50 +02:00
x509_time_test.c Update copyright year 2020-04-23 13:55:52 +01:00
x509aux.c Update copyright year 2020-04-23 13:55:52 +01:00

How to add recipes
==================

For any test that you want to perform, you write a script located in
test/recipes/, named {nn}-test_{name}.t, where {nn} is a two digit number and
{name} is a unique name of your choice.

Please note that if a test involves a new testing executable, you will need to
do some additions in test/build.info. Please refer to the section "Changes to 
test/build.info" below.


Naming conventions
=================

A test executable is named test/{name}test.c

A test recipe is named test/recipes/{nn}-test_{name}.t, where {nn} is a two
digit number and {name} is a unique name of your choice.

The number {nn} is (somewhat loosely) grouped as follows:

00-04  sanity, internal and essential API tests
05-09  individual symmetric cipher algorithms
10-14  math (bignum)
15-19  individual asymmetric cipher algorithms
20-24  openssl commands (some otherwise not tested)
25-29  certificate forms, generation and verification
30-35  engine and evp
60-79  APIs:
   60  X509 subsystem
   61  BIO subsystem
   65  CMP subsystem
   70  PACKET layer
80-89  "larger" protocols (CA, CMS, OCSP, SSL, TSA)
90-98  misc
99     most time consuming tests [such as test_fuzz]


A recipe that just runs a test executable
=========================================

A script that just runs a program looks like this:

    #! /usr/bin/perl

    use OpenSSL::Test::Simple;

    simple_test("test_{name}", "{name}test", "{name}");

{name} is the unique name you have chosen for your test.

The second argument to `simple_test' is the test executable, and `simple_test'
expects it to be located in test/

For documentation on OpenSSL::Test::Simple, do
`perldoc util/perl/OpenSSL/Test/Simple.pm'.


A recipe that runs a more complex test
======================================

For more complex tests, you will need to read up on Test::More and
OpenSSL::Test.  Test::More is normally preinstalled, do `man Test::More' for
documentation.  For OpenSSL::Test, do `perldoc util/perl/OpenSSL/Test.pm'.

A script to start from could be this:

    #! /usr/bin/perl

    use strict;
    use warnings;
    use OpenSSL::Test;

    setup("test_{name}");

    plan tests => 2;                # The number of tests being performed

    ok(test1, "test1");
    ok(test2, "test1");

    sub test1
    {
        # test feature 1
    }

    sub test2
    {
        # test feature 2
    }


Changes to test/build.info
==========================

Whenever a new test involves a new test executable you need to do the
following (at all times, replace {NAME} and {name} with the name of your
test):

* add {name} to the list of programs under PROGRAMS_NO_INST

* create a three line description of how to build the test, you will have
to modify the include paths and source files if you don't want to use the
basic test framework:

    SOURCE[{name}]={name}.c
    INCLUDE[{name}]=.. ../include ../apps/include
    DEPEND[{name}]=../libcrypto libtestutil.a

Generic form of C test executables
==================================

    #include "testutil.h"

    static int my_test(void)
    {
        int testresult = 0;                 /* Assume the test will fail    */
        int observed;

        observed = function();              /* Call the code under test     */
        if (!TEST_int_eq(observed, 2))      /* Check the result is correct  */
            goto end;                       /* Exit on failure - optional   */

        testresult = 1;                     /* Mark the test case a success */
    end:
        cleanup();                          /* Any cleanup you require      */
        return testresult;
    }

    int setup_tests(void)
    {
        ADD_TEST(my_test);                  /* Add each test separately     */
        return 1;                           /* Indicate success             */
    }

You should use the TEST_xxx macros provided by testutil.h to test all failure
conditions.  These macros produce an error message in a standard format if the
condition is not met (and nothing if the condition is met).  Additional
information can be presented with the TEST_info macro that takes a printf
format string and arguments.  TEST_error is useful for complicated conditions,
it also takes a printf format string and argument.  In all cases the TEST_xxx
macros are guaranteed to evaluate their arguments exactly once.  This means
that expressions with side effects are allowed as parameters.  Thus,

    if (!TEST_ptr(ptr = OPENSSL_malloc(..)))

works fine and can be used in place of:

    ptr = OPENSSL_malloc(..);
    if (!TEST_ptr(ptr))

The former produces a more meaningful message on failure than the latter.

Note that the test infrastructure automatically sets up all required environment
variables (such as OPENSSL_MODULES, OPENSSL_CONF etc) for the tests. Individual
tests may choose to override the default settings as required.