mirror of
https://github.com/openssl/openssl.git
synced 2024-12-15 06:01:37 +08:00
abec331fd3
Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/13595)
107 lines
3.7 KiB
Perl
107 lines
3.7 KiB
Perl
#! /usr/bin/env perl
|
|
# Copyright 2016-2020 The OpenSSL Project Authors. All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License 2.0 (the "License"). You may not use
|
|
# this file except in compliance with the License. You can obtain a copy
|
|
# in the file LICENSE in the source distribution or at
|
|
# https://www.openssl.org/source/license.html
|
|
|
|
use strict;
|
|
use warnings;
|
|
|
|
use OpenSSL::Test qw/:DEFAULT srctop_file/;
|
|
use OpenSSL::Test::Utils;
|
|
|
|
use Encode;
|
|
|
|
setup("test_pkcs12");
|
|
|
|
plan skip_all => "The PKCS12 command line utility is not supported by this OpenSSL build"
|
|
if disabled("des");
|
|
|
|
my $pass = "σύνθημα γνώρισμα";
|
|
|
|
my $savedcp;
|
|
if (eval { require Win32::API; 1; }) {
|
|
# Trouble is that Win32 perl uses CreateProcessA, which
|
|
# makes it problematic to pass non-ASCII arguments, from perl[!]
|
|
# that is. This is because CreateProcessA is just a wrapper for
|
|
# CreateProcessW and will call MultiByteToWideChar and use
|
|
# system default locale. Since we attempt Greek pass-phrase
|
|
# conversion can be done only with Greek locale.
|
|
|
|
Win32::API->Import("kernel32","UINT GetSystemDefaultLCID()");
|
|
if (GetSystemDefaultLCID() != 0x408) {
|
|
plan skip_all => "Non-Greek system locale";
|
|
} else {
|
|
# Ensure correct code page so that VERBOSE output is right.
|
|
Win32::API->Import("kernel32","UINT GetConsoleOutputCP()");
|
|
Win32::API->Import("kernel32","BOOL SetConsoleOutputCP(UINT cp)");
|
|
$savedcp = GetConsoleOutputCP();
|
|
SetConsoleOutputCP(1253);
|
|
$pass = Encode::encode("cp1253",Encode::decode("utf-8",$pass));
|
|
}
|
|
} elsif ($^O eq "MSWin32") {
|
|
plan skip_all => "Win32::API unavailable";
|
|
} else {
|
|
# Running MinGW tests transparently under Wine apparently requires
|
|
# UTF-8 locale...
|
|
|
|
foreach(`locale -a`) {
|
|
s/\R$//;
|
|
if ($_ =~ m/^C\.UTF\-?8/i) {
|
|
$ENV{LC_ALL} = $_;
|
|
last;
|
|
}
|
|
}
|
|
}
|
|
$ENV{OPENSSL_WIN32_UTF8}=1;
|
|
|
|
plan tests => 5;
|
|
|
|
# Test different PKCS#12 formats
|
|
ok(run(test(["pkcs12_format_test"])), "test pkcs12 formats");
|
|
|
|
# just see that we can read shibboleth.pfx protected with $pass
|
|
ok(run(app(["openssl", "pkcs12", "-noout",
|
|
"-password", "pass:$pass",
|
|
"-in", srctop_file("test", "shibboleth.pfx")])),
|
|
"test_load_cert_pkcs12");
|
|
|
|
my @path = qw(test certs);
|
|
my $outfile1 = "out1.p12";
|
|
my $outfile2 = "out2.p12";
|
|
my $outfile3 = "out3.p12";
|
|
|
|
# Test the -chain option with -untrusted
|
|
ok(run(app(["openssl", "pkcs12", "-export", "-chain",
|
|
"-CAfile", srctop_file(@path, "sroot-cert.pem"),
|
|
"-untrusted", srctop_file(@path, "ca-cert.pem"),
|
|
"-in", srctop_file(@path, "ee-cert.pem"),
|
|
"-nokeys", "-passout", "pass:", "-out", $outfile1])),
|
|
"test_pkcs12_chain_untrusted");
|
|
|
|
# Test the -passcerts option
|
|
ok(run(app(["openssl", "pkcs12", "-export",
|
|
"-in", srctop_file(@path, "ee-cert.pem"),
|
|
"-certfile", srctop_file(@path, "v3-certs-TDES.p12"),
|
|
"-passcerts", "pass:v3-certs",
|
|
"-nokeys", "-passout", "pass:v3-certs", "-descert",
|
|
"-out", $outfile2])),
|
|
"test_pkcs12_passcerts");
|
|
|
|
SKIP: {
|
|
skip "Skipping legacy PKCS#12 test because RC2 is disabled in this build", 1
|
|
if disabled("rc2") || disabled("legacy");
|
|
# Test reading legacy PKCS#12 file
|
|
ok(run(app(["openssl", "pkcs12", "-export",
|
|
"-in", srctop_file(@path, "v3-certs-RC2.p12"),
|
|
"-passin", "pass:v3-certs",
|
|
"-provider", "default", "-provider", "legacy",
|
|
"-nokeys", "-passout", "pass:v3-certs", "-descert",
|
|
"-out", $outfile3])),
|
|
"test_pkcs12_passcerts_legacy");
|
|
}
|
|
|
|
SetConsoleOutputCP($savedcp) if (defined($savedcp));
|