| // Autogenerated by generate_tests.py, do not edit |
| |
| // Hack to allow disabling type parameterized test cases. |
| // See https://github.com/google/googletest/issues/389 |
| #define WRAPPED_TYPED_TEST_P(CaseName, TestName) \ |
| TYPED_TEST_P(CaseName, TestName) |
| #define WRAPPED_REGISTER_TYPED_TEST_CASE_P(CaseName, ...) \ |
| REGISTER_TYPED_TEST_CASE_P(CaseName, __VA_ARGS__) |
| |
| template <typename PkitsTestDelegate> |
| class PkitsTest01SignatureVerification : public PkitsTest<PkitsTestDelegate> {}; |
| TYPED_TEST_CASE_P(PkitsTest01SignatureVerification); |
| |
| // 4.1.1 Valid Signatures Test1 |
| WRAPPED_TYPED_TEST_P(PkitsTest01SignatureVerification, |
| Section1ValidSignaturesTest1) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "GoodCACert", |
| "ValidCertificatePathTest1EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "GoodCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.1.2 Invalid CA Signature Test2 |
| WRAPPED_TYPED_TEST_P(PkitsTest01SignatureVerification, |
| Section1InvalidCASignatureTest2) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "BadSignedCACert", |
| "InvalidCASignatureTest2EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "BadSignedCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.1.3 Invalid EE Signature Test3 |
| WRAPPED_TYPED_TEST_P(PkitsTest01SignatureVerification, |
| Section1InvalidEESignatureTest3) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "GoodCACert", |
| "InvalidEESignatureTest3EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "GoodCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.1.4 Valid DSA Signatures Test4 |
| WRAPPED_TYPED_TEST_P(PkitsTest01SignatureVerification, |
| Section1ValidDSASignaturesTest4) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "DSACACert", |
| "ValidDSASignaturesTest4EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "DSACACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.1.5 Valid DSA Parameter Inheritance Test5 |
| WRAPPED_TYPED_TEST_P(PkitsTest01SignatureVerification, |
| Section1ValidDSAParameterInheritanceTest5) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "DSACACert", |
| "DSAParametersInheritedCACert", |
| "ValidDSAParameterInheritanceTest5EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "DSACACRL", |
| "DSAParametersInheritedCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.1.6 Invalid DSA Signature Test6 |
| WRAPPED_TYPED_TEST_P(PkitsTest01SignatureVerification, |
| Section1InvalidDSASignatureTest6) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "DSACACert", |
| "InvalidDSASignatureTest6EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "DSACACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| WRAPPED_REGISTER_TYPED_TEST_CASE_P(PkitsTest01SignatureVerification, |
| Section1ValidSignaturesTest1, |
| Section1InvalidCASignatureTest2, |
| Section1InvalidEESignatureTest3, |
| Section1ValidDSASignaturesTest4, |
| Section1ValidDSAParameterInheritanceTest5, |
| Section1InvalidDSASignatureTest6); |
| |
| template <typename PkitsTestDelegate> |
| class PkitsTest02ValidityPeriods : public PkitsTest<PkitsTestDelegate> {}; |
| TYPED_TEST_CASE_P(PkitsTest02ValidityPeriods); |
| |
| // 4.2.1 Invalid CA notBefore Date Test1 |
| WRAPPED_TYPED_TEST_P(PkitsTest02ValidityPeriods, |
| Section2InvalidCAnotBeforeDateTest1) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "BadnotBeforeDateCACert", |
| "InvalidCAnotBeforeDateTest1EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "BadnotBeforeDateCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.2.2 Invalid EE notBefore Date Test2 |
| WRAPPED_TYPED_TEST_P(PkitsTest02ValidityPeriods, |
| Section2InvalidEEnotBeforeDateTest2) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "GoodCACert", |
| "InvalidEEnotBeforeDateTest2EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "GoodCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.2.3 Valid pre2000 UTC notBefore Date Test3 |
| WRAPPED_TYPED_TEST_P(PkitsTest02ValidityPeriods, |
| Section2Validpre2000UTCnotBeforeDateTest3) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "GoodCACert", |
| "Validpre2000UTCnotBeforeDateTest3EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "GoodCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.2.4 Valid GeneralizedTime notBefore Date Test4 |
| WRAPPED_TYPED_TEST_P(PkitsTest02ValidityPeriods, |
| Section2ValidGeneralizedTimenotBeforeDateTest4) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "GoodCACert", |
| "ValidGeneralizedTimenotBeforeDateTest4EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "GoodCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.2.5 Invalid CA notAfter Date Test5 |
| WRAPPED_TYPED_TEST_P(PkitsTest02ValidityPeriods, |
| Section2InvalidCAnotAfterDateTest5) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "BadnotAfterDateCACert", |
| "InvalidCAnotAfterDateTest5EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "BadnotAfterDateCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.2.6 Invalid EE notAfter Date Test6 |
| WRAPPED_TYPED_TEST_P(PkitsTest02ValidityPeriods, |
| Section2InvalidEEnotAfterDateTest6) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "GoodCACert", |
| "InvalidEEnotAfterDateTest6EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "GoodCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.2.7 Invalid pre2000 UTC EE notAfter Date Test7 |
| WRAPPED_TYPED_TEST_P(PkitsTest02ValidityPeriods, |
| Section2Invalidpre2000UTCEEnotAfterDateTest7) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "GoodCACert", |
| "Invalidpre2000UTCEEnotAfterDateTest7EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "GoodCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.2.8 Valid GeneralizedTime notAfter Date Test8 |
| WRAPPED_TYPED_TEST_P(PkitsTest02ValidityPeriods, |
| Section2ValidGeneralizedTimenotAfterDateTest8) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "GoodCACert", |
| "ValidGeneralizedTimenotAfterDateTest8EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "GoodCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| WRAPPED_REGISTER_TYPED_TEST_CASE_P( |
| PkitsTest02ValidityPeriods, |
| Section2InvalidCAnotBeforeDateTest1, |
| Section2InvalidEEnotBeforeDateTest2, |
| Section2Validpre2000UTCnotBeforeDateTest3, |
| Section2ValidGeneralizedTimenotBeforeDateTest4, |
| Section2InvalidCAnotAfterDateTest5, |
| Section2InvalidEEnotAfterDateTest6, |
| Section2Invalidpre2000UTCEEnotAfterDateTest7, |
| Section2ValidGeneralizedTimenotAfterDateTest8); |
| |
| template <typename PkitsTestDelegate> |
| class PkitsTest03VerifyingNameChaining : public PkitsTest<PkitsTestDelegate> {}; |
| TYPED_TEST_CASE_P(PkitsTest03VerifyingNameChaining); |
| |
| // 4.3.1 Invalid Name Chaining EE Test1 |
| WRAPPED_TYPED_TEST_P(PkitsTest03VerifyingNameChaining, |
| Section3InvalidNameChainingEETest1) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "GoodCACert", |
| "InvalidNameChainingTest1EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "GoodCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.3.2 Invalid Name Chaining Order Test2 |
| WRAPPED_TYPED_TEST_P(PkitsTest03VerifyingNameChaining, |
| Section3InvalidNameChainingOrderTest2) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "NameOrderingCACert", |
| "InvalidNameChainingOrderTest2EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "NameOrderCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.3.3 Valid Name Chaining Whitespace Test3 |
| WRAPPED_TYPED_TEST_P(PkitsTest03VerifyingNameChaining, |
| Section3ValidNameChainingWhitespaceTest3) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "GoodCACert", |
| "ValidNameChainingWhitespaceTest3EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "GoodCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.3.4 Valid Name Chaining Whitespace Test4 |
| WRAPPED_TYPED_TEST_P(PkitsTest03VerifyingNameChaining, |
| Section3ValidNameChainingWhitespaceTest4) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "GoodCACert", |
| "ValidNameChainingWhitespaceTest4EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "GoodCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.3.5 Valid Name Chaining Capitalization Test5 |
| WRAPPED_TYPED_TEST_P(PkitsTest03VerifyingNameChaining, |
| Section3ValidNameChainingCapitalizationTest5) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "GoodCACert", |
| "ValidNameChainingCapitalizationTest5EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "GoodCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.3.6 Valid Name Chaining UIDs Test6 |
| WRAPPED_TYPED_TEST_P(PkitsTest03VerifyingNameChaining, |
| Section3ValidNameChainingUIDsTest6) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "UIDCACert", |
| "ValidNameUIDsTest6EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "UIDCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.3.7 Valid RFC3280 Mandatory Attribute Types Test7 |
| WRAPPED_TYPED_TEST_P(PkitsTest03VerifyingNameChaining, |
| Section3ValidRFC3280MandatoryAttributeTypesTest7) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "RFC3280MandatoryAttributeTypesCACert", |
| "ValidRFC3280MandatoryAttributeTypesTest7EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "RFC3280MandatoryAttributeTypesCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.3.8 Valid RFC3280 Optional Attribute Types Test8 |
| WRAPPED_TYPED_TEST_P(PkitsTest03VerifyingNameChaining, |
| Section3ValidRFC3280OptionalAttributeTypesTest8) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "RFC3280OptionalAttributeTypesCACert", |
| "ValidRFC3280OptionalAttributeTypesTest8EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "RFC3280OptionalAttributeTypesCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.3.9 Valid UTF8String Encoded Names Test9 |
| WRAPPED_TYPED_TEST_P(PkitsTest03VerifyingNameChaining, |
| Section3ValidUTF8StringEncodedNamesTest9) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "UTF8StringEncodedNamesCACert", |
| "ValidUTF8StringEncodedNamesTest9EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "UTF8StringEncodedNamesCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.3.10 Valid Rollover from PrintableString to UTF8String Test10 |
| WRAPPED_TYPED_TEST_P( |
| PkitsTest03VerifyingNameChaining, |
| Section3ValidRolloverfromPrintableStringtoUTF8StringTest10) { |
| const char* const certs[] = { |
| "TrustAnchorRootCertificate", |
| "RolloverfromPrintableStringtoUTF8StringCACert", |
| "ValidRolloverfromPrintableStringtoUTF8StringTest10EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "RolloverfromPrintableStringtoUTF8StringCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.3.11 Valid UTF8String Case Insensitive Match Test11 |
| WRAPPED_TYPED_TEST_P(PkitsTest03VerifyingNameChaining, |
| Section3ValidUTF8StringCaseInsensitiveMatchTest11) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "UTF8StringCaseInsensitiveMatchCACert", |
| "ValidUTF8StringCaseInsensitiveMatchTest11EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "UTF8StringCaseInsensitiveMatchCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| WRAPPED_REGISTER_TYPED_TEST_CASE_P( |
| PkitsTest03VerifyingNameChaining, |
| Section3InvalidNameChainingEETest1, |
| Section3InvalidNameChainingOrderTest2, |
| Section3ValidNameChainingWhitespaceTest3, |
| Section3ValidNameChainingWhitespaceTest4, |
| Section3ValidNameChainingCapitalizationTest5, |
| Section3ValidNameChainingUIDsTest6, |
| Section3ValidRFC3280MandatoryAttributeTypesTest7, |
| Section3ValidRFC3280OptionalAttributeTypesTest8, |
| Section3ValidUTF8StringEncodedNamesTest9, |
| Section3ValidRolloverfromPrintableStringtoUTF8StringTest10, |
| Section3ValidUTF8StringCaseInsensitiveMatchTest11); |
| |
| template <typename PkitsTestDelegate> |
| class PkitsTest04BasicCertificateRevocationTests |
| : public PkitsTest<PkitsTestDelegate> {}; |
| TYPED_TEST_CASE_P(PkitsTest04BasicCertificateRevocationTests); |
| |
| // 4.4.1 Missing CRL Test1 |
| WRAPPED_TYPED_TEST_P(PkitsTest04BasicCertificateRevocationTests, |
| Section4MissingCRLTest1) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "NoCRLCACert", |
| "InvalidMissingCRLTest1EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.4.2 Invalid Revoked CA Test2 |
| WRAPPED_TYPED_TEST_P(PkitsTest04BasicCertificateRevocationTests, |
| Section4InvalidRevokedCATest2) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "GoodCACert", |
| "RevokedsubCACert", "InvalidRevokedCATest2EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "GoodCACRL", |
| "RevokedsubCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.4.3 Invalid Revoked EE Test3 |
| WRAPPED_TYPED_TEST_P(PkitsTest04BasicCertificateRevocationTests, |
| Section4InvalidRevokedEETest3) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "GoodCACert", |
| "InvalidRevokedEETest3EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "GoodCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.4.4 Invalid Bad CRL Signature Test4 |
| WRAPPED_TYPED_TEST_P(PkitsTest04BasicCertificateRevocationTests, |
| Section4InvalidBadCRLSignatureTest4) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "BadCRLSignatureCACert", |
| "InvalidBadCRLSignatureTest4EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "BadCRLSignatureCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.4.5 Invalid Bad CRL Issuer Name Test5 |
| WRAPPED_TYPED_TEST_P(PkitsTest04BasicCertificateRevocationTests, |
| Section4InvalidBadCRLIssuerNameTest5) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "BadCRLIssuerNameCACert", |
| "InvalidBadCRLIssuerNameTest5EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "BadCRLIssuerNameCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.4.6 Invalid Wrong CRL Test6 |
| WRAPPED_TYPED_TEST_P(PkitsTest04BasicCertificateRevocationTests, |
| Section4InvalidWrongCRLTest6) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "WrongCRLCACert", |
| "InvalidWrongCRLTest6EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "WrongCRLCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.4.7 Valid Two CRLs Test7 |
| WRAPPED_TYPED_TEST_P(PkitsTest04BasicCertificateRevocationTests, |
| Section4ValidTwoCRLsTest7) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "TwoCRLsCACert", |
| "ValidTwoCRLsTest7EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "TwoCRLsCAGoodCRL", |
| "TwoCRLsCABadCRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.4.8 Invalid Unknown CRL Entry Extension Test8 |
| WRAPPED_TYPED_TEST_P(PkitsTest04BasicCertificateRevocationTests, |
| Section4InvalidUnknownCRLEntryExtensionTest8) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "UnknownCRLEntryExtensionCACert", |
| "InvalidUnknownCRLEntryExtensionTest8EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "UnknownCRLEntryExtensionCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.4.9 Invalid Unknown CRL Extension Test9 |
| WRAPPED_TYPED_TEST_P(PkitsTest04BasicCertificateRevocationTests, |
| Section4InvalidUnknownCRLExtensionTest9) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "UnknownCRLExtensionCACert", |
| "InvalidUnknownCRLExtensionTest9EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "UnknownCRLExtensionCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.4.10 Invalid Unknown CRL Extension Test10 |
| WRAPPED_TYPED_TEST_P(PkitsTest04BasicCertificateRevocationTests, |
| Section4InvalidUnknownCRLExtensionTest10) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "UnknownCRLExtensionCACert", |
| "InvalidUnknownCRLExtensionTest10EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "UnknownCRLExtensionCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.4.11 Invalid Old CRL nextUpdate Test11 |
| WRAPPED_TYPED_TEST_P(PkitsTest04BasicCertificateRevocationTests, |
| Section4InvalidOldCRLnextUpdateTest11) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "OldCRLnextUpdateCACert", |
| "InvalidOldCRLnextUpdateTest11EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "OldCRLnextUpdateCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.4.12 Invalid pre2000 CRL nextUpdate Test12 |
| WRAPPED_TYPED_TEST_P(PkitsTest04BasicCertificateRevocationTests, |
| Section4Invalidpre2000CRLnextUpdateTest12) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "pre2000CRLnextUpdateCACert", |
| "Invalidpre2000CRLnextUpdateTest12EESeetheintrod" |
| "uctiontoSection4.4formoreinformation."}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "pre2000CRLnextUpdateCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.4.13 Valid GeneralizedTime CRL nextUpdate Test13 |
| WRAPPED_TYPED_TEST_P(PkitsTest04BasicCertificateRevocationTests, |
| Section4ValidGeneralizedTimeCRLnextUpdateTest13) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "GeneralizedTimeCRLnextUpdateCACert", |
| "ValidGeneralizedTimeCRLnextUpdateTest13EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "GeneralizedTimeCRLnextUpdateCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.4.14 Valid Negative Serial Number Test14 |
| WRAPPED_TYPED_TEST_P(PkitsTest04BasicCertificateRevocationTests, |
| Section4ValidNegativeSerialNumberTest14) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "NegativeSerialNumberCACert", |
| "ValidNegativeSerialNumberTest14EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "NegativeSerialNumberCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.4.15 Invalid Negative Serial Number Test15 |
| WRAPPED_TYPED_TEST_P(PkitsTest04BasicCertificateRevocationTests, |
| Section4InvalidNegativeSerialNumberTest15) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "NegativeSerialNumberCACert", |
| "InvalidNegativeSerialNumberTest15EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "NegativeSerialNumberCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.4.16 Valid Long Serial Number Test16 |
| WRAPPED_TYPED_TEST_P(PkitsTest04BasicCertificateRevocationTests, |
| Section4ValidLongSerialNumberTest16) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "LongSerialNumberCACert", |
| "ValidLongSerialNumberTest16EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "LongSerialNumberCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.4.17 Valid Long Serial Number Test17 |
| WRAPPED_TYPED_TEST_P(PkitsTest04BasicCertificateRevocationTests, |
| Section4ValidLongSerialNumberTest17) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "LongSerialNumberCACert", |
| "ValidLongSerialNumberTest17EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "LongSerialNumberCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.4.18 Invalid Long Serial Number Test18 |
| WRAPPED_TYPED_TEST_P(PkitsTest04BasicCertificateRevocationTests, |
| Section4InvalidLongSerialNumberTest18) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "LongSerialNumberCACert", |
| "InvalidLongSerialNumberTest18EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "LongSerialNumberCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.4.19 Valid Separate Certificate and CRL Keys Test19 |
| WRAPPED_TYPED_TEST_P(PkitsTest04BasicCertificateRevocationTests, |
| Section4ValidSeparateCertificateandCRLKeysTest19) { |
| const char* const certs[] = { |
| "TrustAnchorRootCertificate", |
| "SeparateCertificateandCRLKeysCertificateSigningCACert", |
| "SeparateCertificateandCRLKeysCRLSigningCert", |
| "ValidSeparateCertificateandCRLKeysTest19EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "SeparateCertificateandCRLKeysCRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.4.20 Invalid Separate Certificate and CRL Keys Test20 |
| WRAPPED_TYPED_TEST_P(PkitsTest04BasicCertificateRevocationTests, |
| Section4InvalidSeparateCertificateandCRLKeysTest20) { |
| const char* const certs[] = { |
| "TrustAnchorRootCertificate", |
| "SeparateCertificateandCRLKeysCertificateSigningCACert", |
| "SeparateCertificateandCRLKeysCRLSigningCert", |
| "InvalidSeparateCertificateandCRLKeysTest20EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "SeparateCertificateandCRLKeysCRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.4.21 Invalid Separate Certificate and CRL Keys Test21 |
| WRAPPED_TYPED_TEST_P(PkitsTest04BasicCertificateRevocationTests, |
| Section4InvalidSeparateCertificateandCRLKeysTest21) { |
| const char* const certs[] = { |
| "TrustAnchorRootCertificate", |
| "SeparateCertificateandCRLKeysCA2CertificateSigningCACert", |
| "SeparateCertificateandCRLKeysCA2CRLSigningCert", |
| "InvalidSeparateCertificateandCRLKeysTest21EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "SeparateCertificateandCRLKeysCA2CRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| WRAPPED_REGISTER_TYPED_TEST_CASE_P( |
| PkitsTest04BasicCertificateRevocationTests, |
| Section4MissingCRLTest1, |
| Section4InvalidRevokedCATest2, |
| Section4InvalidRevokedEETest3, |
| Section4InvalidBadCRLSignatureTest4, |
| Section4InvalidBadCRLIssuerNameTest5, |
| Section4InvalidWrongCRLTest6, |
| Section4ValidTwoCRLsTest7, |
| Section4InvalidUnknownCRLEntryExtensionTest8, |
| Section4InvalidUnknownCRLExtensionTest9, |
| Section4InvalidUnknownCRLExtensionTest10, |
| Section4InvalidOldCRLnextUpdateTest11, |
| Section4Invalidpre2000CRLnextUpdateTest12, |
| Section4ValidGeneralizedTimeCRLnextUpdateTest13, |
| Section4ValidNegativeSerialNumberTest14, |
| Section4InvalidNegativeSerialNumberTest15, |
| Section4ValidLongSerialNumberTest16, |
| Section4ValidLongSerialNumberTest17, |
| Section4InvalidLongSerialNumberTest18, |
| Section4ValidSeparateCertificateandCRLKeysTest19, |
| Section4InvalidSeparateCertificateandCRLKeysTest20, |
| Section4InvalidSeparateCertificateandCRLKeysTest21); |
| |
| template <typename PkitsTestDelegate> |
| class PkitsTest05VerifyingPathswithSelfIssuedCertificates |
| : public PkitsTest<PkitsTestDelegate> {}; |
| TYPED_TEST_CASE_P(PkitsTest05VerifyingPathswithSelfIssuedCertificates); |
| |
| // 4.5.1 Valid Basic Self-Issued Old With New Test1 |
| WRAPPED_TYPED_TEST_P(PkitsTest05VerifyingPathswithSelfIssuedCertificates, |
| Section5ValidBasicSelfIssuedOldWithNewTest1) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "BasicSelfIssuedNewKeyCACert", |
| "BasicSelfIssuedNewKeyOldWithNewCACert", |
| "ValidBasicSelfIssuedOldWithNewTest1EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "BasicSelfIssuedNewKeyCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.5.2 Invalid Basic Self-Issued Old With New Test2 |
| WRAPPED_TYPED_TEST_P(PkitsTest05VerifyingPathswithSelfIssuedCertificates, |
| Section5InvalidBasicSelfIssuedOldWithNewTest2) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "BasicSelfIssuedNewKeyCACert", |
| "BasicSelfIssuedNewKeyOldWithNewCACert", |
| "InvalidBasicSelfIssuedOldWithNewTest2EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "BasicSelfIssuedNewKeyCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.5.3 Valid Basic Self-Issued New With Old Test3 |
| WRAPPED_TYPED_TEST_P(PkitsTest05VerifyingPathswithSelfIssuedCertificates, |
| Section5ValidBasicSelfIssuedNewWithOldTest3) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "BasicSelfIssuedOldKeyCACert", |
| "BasicSelfIssuedOldKeyNewWithOldCACert", |
| "ValidBasicSelfIssuedNewWithOldTest3EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "BasicSelfIssuedOldKeySelfIssuedCertCRL", |
| "BasicSelfIssuedOldKeyCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.5.4 Valid Basic Self-Issued New With Old Test4 |
| WRAPPED_TYPED_TEST_P(PkitsTest05VerifyingPathswithSelfIssuedCertificates, |
| Section5ValidBasicSelfIssuedNewWithOldTest4) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "BasicSelfIssuedOldKeyCACert", |
| "BasicSelfIssuedOldKeyNewWithOldCACert", |
| "ValidBasicSelfIssuedNewWithOldTest4EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "BasicSelfIssuedOldKeySelfIssuedCertCRL", |
| "BasicSelfIssuedOldKeyCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.5.5 Invalid Basic Self-Issued New With Old Test5 |
| WRAPPED_TYPED_TEST_P(PkitsTest05VerifyingPathswithSelfIssuedCertificates, |
| Section5InvalidBasicSelfIssuedNewWithOldTest5) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "BasicSelfIssuedOldKeyCACert", |
| "BasicSelfIssuedOldKeyNewWithOldCACert", |
| "InvalidBasicSelfIssuedNewWithOldTest5EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "BasicSelfIssuedOldKeySelfIssuedCertCRL", |
| "BasicSelfIssuedOldKeyCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.5.6 Valid Basic Self-Issued CRL Signing Key Test6 |
| WRAPPED_TYPED_TEST_P(PkitsTest05VerifyingPathswithSelfIssuedCertificates, |
| Section5ValidBasicSelfIssuedCRLSigningKeyTest6) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "BasicSelfIssuedCRLSigningKeyCACert", |
| "BasicSelfIssuedCRLSigningKeyCRLCert", |
| "ValidBasicSelfIssuedCRLSigningKeyTest6EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "BasicSelfIssuedCRLSigningKeyCRLCertCRL", |
| "BasicSelfIssuedCRLSigningKeyCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.5.7 Invalid Basic Self-Issued CRL Signing Key Test7 |
| WRAPPED_TYPED_TEST_P(PkitsTest05VerifyingPathswithSelfIssuedCertificates, |
| Section5InvalidBasicSelfIssuedCRLSigningKeyTest7) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "BasicSelfIssuedCRLSigningKeyCACert", |
| "BasicSelfIssuedCRLSigningKeyCRLCert", |
| "InvalidBasicSelfIssuedCRLSigningKeyTest7EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "BasicSelfIssuedCRLSigningKeyCRLCertCRL", |
| "BasicSelfIssuedCRLSigningKeyCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.5.8 Invalid Basic Self-Issued CRL Signing Key Test8 |
| WRAPPED_TYPED_TEST_P(PkitsTest05VerifyingPathswithSelfIssuedCertificates, |
| Section5InvalidBasicSelfIssuedCRLSigningKeyTest8) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "BasicSelfIssuedCRLSigningKeyCACert", |
| "BasicSelfIssuedCRLSigningKeyCRLCert", |
| "InvalidBasicSelfIssuedCRLSigningKeyTest8EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "BasicSelfIssuedCRLSigningKeyCRLCertCRL", |
| "BasicSelfIssuedCRLSigningKeyCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| WRAPPED_REGISTER_TYPED_TEST_CASE_P( |
| PkitsTest05VerifyingPathswithSelfIssuedCertificates, |
| Section5ValidBasicSelfIssuedOldWithNewTest1, |
| Section5InvalidBasicSelfIssuedOldWithNewTest2, |
| Section5ValidBasicSelfIssuedNewWithOldTest3, |
| Section5ValidBasicSelfIssuedNewWithOldTest4, |
| Section5InvalidBasicSelfIssuedNewWithOldTest5, |
| Section5ValidBasicSelfIssuedCRLSigningKeyTest6, |
| Section5InvalidBasicSelfIssuedCRLSigningKeyTest7, |
| Section5InvalidBasicSelfIssuedCRLSigningKeyTest8); |
| |
| template <typename PkitsTestDelegate> |
| class PkitsTest06VerifyingBasicConstraints |
| : public PkitsTest<PkitsTestDelegate> {}; |
| TYPED_TEST_CASE_P(PkitsTest06VerifyingBasicConstraints); |
| |
| // 4.6.1 Invalid Missing basicConstraints Test1 |
| WRAPPED_TYPED_TEST_P(PkitsTest06VerifyingBasicConstraints, |
| Section6InvalidMissingbasicConstraintsTest1) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "MissingbasicConstraintsCACert", |
| "InvalidMissingbasicConstraintsTest1EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "MissingbasicConstraintsCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.6.2 Invalid cA False Test2 |
| WRAPPED_TYPED_TEST_P(PkitsTest06VerifyingBasicConstraints, |
| Section6InvalidcAFalseTest2) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "basicConstraintsCriticalcAFalseCACert", |
| "InvalidcAFalseTest2EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "basicConstraintsCriticalcAFalseCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.6.3 Invalid cA False Test3 |
| WRAPPED_TYPED_TEST_P(PkitsTest06VerifyingBasicConstraints, |
| Section6InvalidcAFalseTest3) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "basicConstraintsNotCriticalcAFalseCACert", |
| "InvalidcAFalseTest3EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "basicConstraintsNotCriticalcAFalseCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.6.4 Valid basicConstraints Not Critical Test4 |
| WRAPPED_TYPED_TEST_P(PkitsTest06VerifyingBasicConstraints, |
| Section6ValidbasicConstraintsNotCriticalTest4) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "basicConstraintsNotCriticalCACert", |
| "ValidbasicConstraintsNotCriticalTest4EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "basicConstraintsNotCriticalCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.6.5 Invalid pathLenConstraint Test5 |
| WRAPPED_TYPED_TEST_P(PkitsTest06VerifyingBasicConstraints, |
| Section6InvalidpathLenConstraintTest5) { |
| const char* const certs[] = { |
| "TrustAnchorRootCertificate", "pathLenConstraint0CACert", |
| "pathLenConstraint0subCACert", "InvalidpathLenConstraintTest5EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "pathLenConstraint0CACRL", |
| "pathLenConstraint0subCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.6.6 Invalid pathLenConstraint Test6 |
| WRAPPED_TYPED_TEST_P(PkitsTest06VerifyingBasicConstraints, |
| Section6InvalidpathLenConstraintTest6) { |
| const char* const certs[] = { |
| "TrustAnchorRootCertificate", "pathLenConstraint0CACert", |
| "pathLenConstraint0subCACert", "InvalidpathLenConstraintTest6EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "pathLenConstraint0CACRL", |
| "pathLenConstraint0subCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.6.7 Valid pathLenConstraint Test7 |
| WRAPPED_TYPED_TEST_P(PkitsTest06VerifyingBasicConstraints, |
| Section6ValidpathLenConstraintTest7) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "pathLenConstraint0CACert", |
| "ValidpathLenConstraintTest7EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "pathLenConstraint0CACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.6.8 Valid pathLenConstraint Test8 |
| WRAPPED_TYPED_TEST_P(PkitsTest06VerifyingBasicConstraints, |
| Section6ValidpathLenConstraintTest8) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "pathLenConstraint0CACert", |
| "ValidpathLenConstraintTest8EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "pathLenConstraint0CACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.6.9 Invalid pathLenConstraint Test9 |
| WRAPPED_TYPED_TEST_P(PkitsTest06VerifyingBasicConstraints, |
| Section6InvalidpathLenConstraintTest9) { |
| const char* const certs[] = { |
| "TrustAnchorRootCertificate", "pathLenConstraint6CACert", |
| "pathLenConstraint6subCA0Cert", "pathLenConstraint6subsubCA00Cert", |
| "InvalidpathLenConstraintTest9EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "pathLenConstraint6CACRL", |
| "pathLenConstraint6subCA0CRL", |
| "pathLenConstraint6subsubCA00CRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.6.10 Invalid pathLenConstraint Test10 |
| WRAPPED_TYPED_TEST_P(PkitsTest06VerifyingBasicConstraints, |
| Section6InvalidpathLenConstraintTest10) { |
| const char* const certs[] = { |
| "TrustAnchorRootCertificate", "pathLenConstraint6CACert", |
| "pathLenConstraint6subCA0Cert", "pathLenConstraint6subsubCA00Cert", |
| "InvalidpathLenConstraintTest10EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "pathLenConstraint6CACRL", |
| "pathLenConstraint6subCA0CRL", |
| "pathLenConstraint6subsubCA00CRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.6.11 Invalid pathLenConstraint Test11 |
| WRAPPED_TYPED_TEST_P(PkitsTest06VerifyingBasicConstraints, |
| Section6InvalidpathLenConstraintTest11) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "pathLenConstraint6CACert", |
| "pathLenConstraint6subCA1Cert", |
| "pathLenConstraint6subsubCA11Cert", |
| "pathLenConstraint6subsubsubCA11XCert", |
| "InvalidpathLenConstraintTest11EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "pathLenConstraint6CACRL", |
| "pathLenConstraint6subCA1CRL", |
| "pathLenConstraint6subsubCA11CRL", |
| "pathLenConstraint6subsubsubCA11XCRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.6.12 Invalid pathLenConstraint Test12 |
| WRAPPED_TYPED_TEST_P(PkitsTest06VerifyingBasicConstraints, |
| Section6InvalidpathLenConstraintTest12) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "pathLenConstraint6CACert", |
| "pathLenConstraint6subCA1Cert", |
| "pathLenConstraint6subsubCA11Cert", |
| "pathLenConstraint6subsubsubCA11XCert", |
| "InvalidpathLenConstraintTest12EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "pathLenConstraint6CACRL", |
| "pathLenConstraint6subCA1CRL", |
| "pathLenConstraint6subsubCA11CRL", |
| "pathLenConstraint6subsubsubCA11XCRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.6.13 Valid pathLenConstraint Test13 |
| WRAPPED_TYPED_TEST_P(PkitsTest06VerifyingBasicConstraints, |
| Section6ValidpathLenConstraintTest13) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "pathLenConstraint6CACert", |
| "pathLenConstraint6subCA4Cert", |
| "pathLenConstraint6subsubCA41Cert", |
| "pathLenConstraint6subsubsubCA41XCert", |
| "ValidpathLenConstraintTest13EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "pathLenConstraint6CACRL", |
| "pathLenConstraint6subCA4CRL", |
| "pathLenConstraint6subsubCA41CRL", |
| "pathLenConstraint6subsubsubCA41XCRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.6.14 Valid pathLenConstraint Test14 |
| WRAPPED_TYPED_TEST_P(PkitsTest06VerifyingBasicConstraints, |
| Section6ValidpathLenConstraintTest14) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "pathLenConstraint6CACert", |
| "pathLenConstraint6subCA4Cert", |
| "pathLenConstraint6subsubCA41Cert", |
| "pathLenConstraint6subsubsubCA41XCert", |
| "ValidpathLenConstraintTest14EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "pathLenConstraint6CACRL", |
| "pathLenConstraint6subCA4CRL", |
| "pathLenConstraint6subsubCA41CRL", |
| "pathLenConstraint6subsubsubCA41XCRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.6.15 Valid Self-Issued pathLenConstraint Test15 |
| WRAPPED_TYPED_TEST_P(PkitsTest06VerifyingBasicConstraints, |
| Section6ValidSelfIssuedpathLenConstraintTest15) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "pathLenConstraint0CACert", |
| "pathLenConstraint0SelfIssuedCACert", |
| "ValidSelfIssuedpathLenConstraintTest15EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "pathLenConstraint0CACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.6.16 Invalid Self-Issued pathLenConstraint Test16 |
| WRAPPED_TYPED_TEST_P(PkitsTest06VerifyingBasicConstraints, |
| Section6InvalidSelfIssuedpathLenConstraintTest16) { |
| const char* const certs[] = { |
| "TrustAnchorRootCertificate", "pathLenConstraint0CACert", |
| "pathLenConstraint0SelfIssuedCACert", "pathLenConstraint0subCA2Cert", |
| "InvalidSelfIssuedpathLenConstraintTest16EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "pathLenConstraint0CACRL", |
| "pathLenConstraint0subCA2CRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.6.17 Valid Self-Issued pathLenConstraint Test17 |
| WRAPPED_TYPED_TEST_P(PkitsTest06VerifyingBasicConstraints, |
| Section6ValidSelfIssuedpathLenConstraintTest17) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "pathLenConstraint1CACert", |
| "pathLenConstraint1SelfIssuedCACert", |
| "pathLenConstraint1subCACert", |
| "pathLenConstraint1SelfIssuedsubCACert", |
| "ValidSelfIssuedpathLenConstraintTest17EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "pathLenConstraint1CACRL", |
| "pathLenConstraint1subCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| WRAPPED_REGISTER_TYPED_TEST_CASE_P( |
| PkitsTest06VerifyingBasicConstraints, |
| Section6InvalidMissingbasicConstraintsTest1, |
| Section6InvalidcAFalseTest2, |
| Section6InvalidcAFalseTest3, |
| Section6ValidbasicConstraintsNotCriticalTest4, |
| Section6InvalidpathLenConstraintTest5, |
| Section6InvalidpathLenConstraintTest6, |
| Section6ValidpathLenConstraintTest7, |
| Section6ValidpathLenConstraintTest8, |
| Section6InvalidpathLenConstraintTest9, |
| Section6InvalidpathLenConstraintTest10, |
| Section6InvalidpathLenConstraintTest11, |
| Section6InvalidpathLenConstraintTest12, |
| Section6ValidpathLenConstraintTest13, |
| Section6ValidpathLenConstraintTest14, |
| Section6ValidSelfIssuedpathLenConstraintTest15, |
| Section6InvalidSelfIssuedpathLenConstraintTest16, |
| Section6ValidSelfIssuedpathLenConstraintTest17); |
| |
| template <typename PkitsTestDelegate> |
| class PkitsTest07KeyUsage : public PkitsTest<PkitsTestDelegate> {}; |
| TYPED_TEST_CASE_P(PkitsTest07KeyUsage); |
| |
| // 4.7.1 Invalid keyUsage Critical keyCertSign False Test1 |
| WRAPPED_TYPED_TEST_P(PkitsTest07KeyUsage, |
| Section7InvalidkeyUsageCriticalkeyCertSignFalseTest1) { |
| const char* const certs[] = { |
| "TrustAnchorRootCertificate", "keyUsageCriticalkeyCertSignFalseCACert", |
| "InvalidkeyUsageCriticalkeyCertSignFalseTest1EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "keyUsageCriticalkeyCertSignFalseCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.7.2 Invalid keyUsage Not Critical keyCertSign False Test2 |
| WRAPPED_TYPED_TEST_P(PkitsTest07KeyUsage, |
| Section7InvalidkeyUsageNotCriticalkeyCertSignFalseTest2) { |
| const char* const certs[] = { |
| "TrustAnchorRootCertificate", "keyUsageNotCriticalkeyCertSignFalseCACert", |
| "InvalidkeyUsageNotCriticalkeyCertSignFalseTest2EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "keyUsageNotCriticalkeyCertSignFalseCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.7.3 Valid keyUsage Not Critical Test3 |
| WRAPPED_TYPED_TEST_P(PkitsTest07KeyUsage, |
| Section7ValidkeyUsageNotCriticalTest3) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "keyUsageNotCriticalCACert", |
| "ValidkeyUsageNotCriticalTest3EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "keyUsageNotCriticalCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.7.4 Invalid keyUsage Critical cRLSign False Test4 |
| WRAPPED_TYPED_TEST_P(PkitsTest07KeyUsage, |
| Section7InvalidkeyUsageCriticalcRLSignFalseTest4) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "keyUsageCriticalcRLSignFalseCACert", |
| "InvalidkeyUsageCriticalcRLSignFalseTest4EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "keyUsageCriticalcRLSignFalseCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.7.5 Invalid keyUsage Not Critical cRLSign False Test5 |
| WRAPPED_TYPED_TEST_P(PkitsTest07KeyUsage, |
| Section7InvalidkeyUsageNotCriticalcRLSignFalseTest5) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "keyUsageNotCriticalcRLSignFalseCACert", |
| "InvalidkeyUsageNotCriticalcRLSignFalseTest5EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "keyUsageNotCriticalcRLSignFalseCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| WRAPPED_REGISTER_TYPED_TEST_CASE_P( |
| PkitsTest07KeyUsage, |
| Section7InvalidkeyUsageCriticalkeyCertSignFalseTest1, |
| Section7InvalidkeyUsageNotCriticalkeyCertSignFalseTest2, |
| Section7ValidkeyUsageNotCriticalTest3, |
| Section7InvalidkeyUsageCriticalcRLSignFalseTest4, |
| Section7InvalidkeyUsageNotCriticalcRLSignFalseTest5); |
| |
| // Skipping section 4.8 |
| // Skipped 4.8.1 All Certificates Same Policy Test1 |
| // Skipped 4.8.2 All Certificates No Policies Test2 |
| // Skipped 4.8.3 Different Policies Test3 |
| // Skipped 4.8.4 Different Policies Test4 |
| // Skipped 4.8.5 Different Policies Test5 |
| // Skipped 4.8.6 Overlapping Policies Test6 |
| // Skipped 4.8.7 Different Policies Test7 |
| // Skipped 4.8.8 Different Policies Test8 |
| // Skipped 4.8.9 Different Policies Test9 |
| // Skipped 4.8.10 All Certificates Same Policies Test10 |
| // Skipped 4.8.11 All Certificates AnyPolicy Test11 |
| // Skipped 4.8.12 Different Policies Test12 |
| // Skipped 4.8.13 All Certificates Same Policies Test13 |
| // Skipped 4.8.14 AnyPolicy Test14 |
| // Skipped 4.8.15 User Notice Qualifier Test15 |
| // Skipped 4.8.16 User Notice Qualifier Test16 |
| // Skipped 4.8.17 User Notice Qualifier Test17 |
| // Skipped 4.8.18 User Notice Qualifier Test18 |
| // Skipped 4.8.19 User Notice Qualifier Test19 |
| // Skipped 4.8.20 CPS Pointer Qualifier Test20 |
| |
| // Skipping section 4.9 |
| // Skipped 4.9.1 Valid RequireExplicitPolicy Test1 |
| // Skipped 4.9.2 Valid RequireExplicitPolicy Test2 |
| // Skipped 4.9.3 Invalid RequireExplicitPolicy Test3 |
| // Skipped 4.9.4 Valid RequireExplicitPolicy Test4 |
| // Skipped 4.9.5 Invalid RequireExplicitPolicy Test5 |
| // Skipped 4.9.6 Valid Self-Issued requireExplicitPolicy Test6 |
| // Skipped 4.9.7 Invalid Self-Issued requireExplicitPolicy Test7 |
| // Skipped 4.9.8 Invalid Self-Issued requireExplicitPolicy Test8 |
| |
| // Skipping section 4.10 |
| // Skipped 4.10.1 Valid Policy Mapping Test1 |
| // Skipped 4.10.2 Invalid Policy Mapping Test2 |
| // Skipped 4.10.3 Valid Policy Mapping Test3 |
| // Skipped 4.10.4 Invalid Policy Mapping Test4 |
| // Skipped 4.10.5 Valid Policy Mapping Test5 |
| // Skipped 4.10.6 Valid Policy Mapping Test6 |
| // Skipped 4.10.7 Invalid Mapping From anyPolicy Test7 |
| // Skipped 4.10.8 Invalid Mapping To anyPolicy Test8 |
| // Skipped 4.10.9 Valid Policy Mapping Test9 |
| // Skipped 4.10.10 Invalid Policy Mapping Test10 |
| // Skipped 4.10.11 Valid Policy Mapping Test11 |
| // Skipped 4.10.12 Valid Policy Mapping Test12 |
| // Skipped 4.10.13 Valid Policy Mapping Test13 |
| // Skipped 4.10.14 Valid Policy Mapping Test14 |
| |
| // Skipping section 4.11 |
| // Skipped 4.11.1 Invalid inhibitPolicyMapping Test1 |
| // Skipped 4.11.2 Valid inhibitPolicyMapping Test2 |
| // Skipped 4.11.3 Invalid inhibitPolicyMapping Test3 |
| // Skipped 4.11.4 Valid inhibitPolicyMapping Test4 |
| // Skipped 4.11.5 Invalid inhibitPolicyMapping Test5 |
| // Skipped 4.11.6 Invalid inhibitPolicyMapping Test6 |
| // Skipped 4.11.7 Valid Self-Issued inhibitPolicyMapping Test7 |
| // Skipped 4.11.8 Invalid Self-Issued inhibitPolicyMapping Test8 |
| // Skipped 4.11.9 Invalid Self-Issued inhibitPolicyMapping Test9 |
| // Skipped 4.11.10 Invalid Self-Issued inhibitPolicyMapping Test10 |
| // Skipped 4.11.11 Invalid Self-Issued inhibitPolicyMapping Test11 |
| |
| // Skipping section 4.12 |
| // Skipped 4.12.1 Invalid inhibitAnyPolicy Test1 |
| // Skipped 4.12.2 Valid inhibitAnyPolicy Test2 |
| // Skipped 4.12.3 inhibitAnyPolicy Test3 |
| // Skipped 4.12.4 Invalid inhibitAnyPolicy Test4 |
| // Skipped 4.12.5 Invalid inhibitAnyPolicy Test5 |
| // Skipped 4.12.6 Invalid inhibitAnyPolicy Test6 |
| // Skipped 4.12.7 Valid Self-Issued inhibitAnyPolicy Test7 |
| // Skipped 4.12.8 Invalid Self-Issued inhibitAnyPolicy Test8 |
| // Skipped 4.12.9 Valid Self-Issued inhibitAnyPolicy Test9 |
| // Skipped 4.12.10 Invalid Self-Issued inhibitAnyPolicy Test10 |
| |
| template <typename PkitsTestDelegate> |
| class PkitsTest13NameConstraints : public PkitsTest<PkitsTestDelegate> {}; |
| TYPED_TEST_CASE_P(PkitsTest13NameConstraints); |
| |
| // 4.13.1 Valid DN nameConstraints Test1 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13ValidDNnameConstraintsTest1) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsDN1CACert", |
| "ValidDNnameConstraintsTest1EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDN1CACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.2 Invalid DN nameConstraints Test2 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13InvalidDNnameConstraintsTest2) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsDN1CACert", |
| "InvalidDNnameConstraintsTest2EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDN1CACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.3 Invalid DN nameConstraints Test3 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13InvalidDNnameConstraintsTest3) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsDN1CACert", |
| "InvalidDNnameConstraintsTest3EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDN1CACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.4 Valid DN nameConstraints Test4 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13ValidDNnameConstraintsTest4) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsDN1CACert", |
| "ValidDNnameConstraintsTest4EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDN1CACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.5 Valid DN nameConstraints Test5 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13ValidDNnameConstraintsTest5) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsDN2CACert", |
| "ValidDNnameConstraintsTest5EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDN2CACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.6 Valid DN nameConstraints Test6 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13ValidDNnameConstraintsTest6) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsDN3CACert", |
| "ValidDNnameConstraintsTest6EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDN3CACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.7 Invalid DN nameConstraints Test7 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13InvalidDNnameConstraintsTest7) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsDN3CACert", |
| "InvalidDNnameConstraintsTest7EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDN3CACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.8 Invalid DN nameConstraints Test8 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13InvalidDNnameConstraintsTest8) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsDN4CACert", |
| "InvalidDNnameConstraintsTest8EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDN4CACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.9 Invalid DN nameConstraints Test9 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13InvalidDNnameConstraintsTest9) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsDN4CACert", |
| "InvalidDNnameConstraintsTest9EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDN4CACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.10 Invalid DN nameConstraints Test10 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13InvalidDNnameConstraintsTest10) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsDN5CACert", |
| "InvalidDNnameConstraintsTest10EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDN5CACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.11 Valid DN nameConstraints Test11 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13ValidDNnameConstraintsTest11) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsDN5CACert", |
| "ValidDNnameConstraintsTest11EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDN5CACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.12 Invalid DN nameConstraints Test12 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13InvalidDNnameConstraintsTest12) { |
| const char* const certs[] = { |
| "TrustAnchorRootCertificate", "nameConstraintsDN1CACert", |
| "nameConstraintsDN1subCA1Cert", "InvalidDNnameConstraintsTest12EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDN1CACRL", |
| "nameConstraintsDN1subCA1CRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.13 Invalid DN nameConstraints Test13 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13InvalidDNnameConstraintsTest13) { |
| const char* const certs[] = { |
| "TrustAnchorRootCertificate", "nameConstraintsDN1CACert", |
| "nameConstraintsDN1subCA2Cert", "InvalidDNnameConstraintsTest13EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDN1CACRL", |
| "nameConstraintsDN1subCA2CRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.14 Valid DN nameConstraints Test14 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13ValidDNnameConstraintsTest14) { |
| const char* const certs[] = { |
| "TrustAnchorRootCertificate", "nameConstraintsDN1CACert", |
| "nameConstraintsDN1subCA2Cert", "ValidDNnameConstraintsTest14EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDN1CACRL", |
| "nameConstraintsDN1subCA2CRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.15 Invalid DN nameConstraints Test15 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13InvalidDNnameConstraintsTest15) { |
| const char* const certs[] = { |
| "TrustAnchorRootCertificate", "nameConstraintsDN3CACert", |
| "nameConstraintsDN3subCA1Cert", "InvalidDNnameConstraintsTest15EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDN3CACRL", |
| "nameConstraintsDN3subCA1CRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.16 Invalid DN nameConstraints Test16 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13InvalidDNnameConstraintsTest16) { |
| const char* const certs[] = { |
| "TrustAnchorRootCertificate", "nameConstraintsDN3CACert", |
| "nameConstraintsDN3subCA1Cert", "InvalidDNnameConstraintsTest16EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDN3CACRL", |
| "nameConstraintsDN3subCA1CRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.17 Invalid DN nameConstraints Test17 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13InvalidDNnameConstraintsTest17) { |
| const char* const certs[] = { |
| "TrustAnchorRootCertificate", "nameConstraintsDN3CACert", |
| "nameConstraintsDN3subCA2Cert", "InvalidDNnameConstraintsTest17EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDN3CACRL", |
| "nameConstraintsDN3subCA2CRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.18 Valid DN nameConstraints Test18 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13ValidDNnameConstraintsTest18) { |
| const char* const certs[] = { |
| "TrustAnchorRootCertificate", "nameConstraintsDN3CACert", |
| "nameConstraintsDN3subCA2Cert", "ValidDNnameConstraintsTest18EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDN3CACRL", |
| "nameConstraintsDN3subCA2CRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.19 Valid Self-Issued DN nameConstraints Test19 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13ValidSelfIssuedDNnameConstraintsTest19) { |
| const char* const certs[] = { |
| "TrustAnchorRootCertificate", "nameConstraintsDN1CACert", |
| "nameConstraintsDN1SelfIssuedCACert", "ValidDNnameConstraintsTest19EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDN1CACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.20 Invalid Self-Issued DN nameConstraints Test20 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13InvalidSelfIssuedDNnameConstraintsTest20) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsDN1CACert", |
| "InvalidDNnameConstraintsTest20EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDN1CACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.21 Valid RFC822 nameConstraints Test21 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13ValidRFC822nameConstraintsTest21) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsRFC822CA1Cert", |
| "ValidRFC822nameConstraintsTest21EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "nameConstraintsRFC822CA1CRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.22 Invalid RFC822 nameConstraints Test22 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13InvalidRFC822nameConstraintsTest22) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsRFC822CA1Cert", |
| "InvalidRFC822nameConstraintsTest22EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "nameConstraintsRFC822CA1CRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.23 Valid RFC822 nameConstraints Test23 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13ValidRFC822nameConstraintsTest23) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsRFC822CA2Cert", |
| "ValidRFC822nameConstraintsTest23EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "nameConstraintsRFC822CA2CRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.24 Invalid RFC822 nameConstraints Test24 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13InvalidRFC822nameConstraintsTest24) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsRFC822CA2Cert", |
| "InvalidRFC822nameConstraintsTest24EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "nameConstraintsRFC822CA2CRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.25 Valid RFC822 nameConstraints Test25 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13ValidRFC822nameConstraintsTest25) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsRFC822CA3Cert", |
| "ValidRFC822nameConstraintsTest25EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "nameConstraintsRFC822CA3CRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.26 Invalid RFC822 nameConstraints Test26 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13InvalidRFC822nameConstraintsTest26) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsRFC822CA3Cert", |
| "InvalidRFC822nameConstraintsTest26EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "nameConstraintsRFC822CA3CRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.27 Valid DN and RFC822 nameConstraints Test27 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13ValidDNandRFC822nameConstraintsTest27) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsDN1CACert", |
| "nameConstraintsDN1subCA3Cert", |
| "ValidDNandRFC822nameConstraintsTest27EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDN1CACRL", |
| "nameConstraintsDN1subCA3CRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.28 Invalid DN and RFC822 nameConstraints Test28 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13InvalidDNandRFC822nameConstraintsTest28) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsDN1CACert", |
| "nameConstraintsDN1subCA3Cert", |
| "InvalidDNandRFC822nameConstraintsTest28EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDN1CACRL", |
| "nameConstraintsDN1subCA3CRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.29 Invalid DN and RFC822 nameConstraints Test29 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13InvalidDNandRFC822nameConstraintsTest29) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsDN1CACert", |
| "nameConstraintsDN1subCA3Cert", |
| "InvalidDNandRFC822nameConstraintsTest29EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDN1CACRL", |
| "nameConstraintsDN1subCA3CRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.30 Valid DNS nameConstraints Test30 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13ValidDNSnameConstraintsTest30) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsDNS1CACert", |
| "ValidDNSnameConstraintsTest30EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDNS1CACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.31 Invalid DNS nameConstraints Test31 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13InvalidDNSnameConstraintsTest31) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsDNS1CACert", |
| "InvalidDNSnameConstraintsTest31EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDNS1CACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.32 Valid DNS nameConstraints Test32 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13ValidDNSnameConstraintsTest32) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsDNS2CACert", |
| "ValidDNSnameConstraintsTest32EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDNS2CACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.33 Invalid DNS nameConstraints Test33 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13InvalidDNSnameConstraintsTest33) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsDNS2CACert", |
| "InvalidDNSnameConstraintsTest33EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDNS2CACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.34 Valid URI nameConstraints Test34 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13ValidURInameConstraintsTest34) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsURI1CACert", |
| "ValidURInameConstraintsTest34EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsURI1CACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.35 Invalid URI nameConstraints Test35 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13InvalidURInameConstraintsTest35) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsURI1CACert", |
| "InvalidURInameConstraintsTest35EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsURI1CACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.36 Valid URI nameConstraints Test36 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13ValidURInameConstraintsTest36) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsURI2CACert", |
| "ValidURInameConstraintsTest36EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsURI2CACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.37 Invalid URI nameConstraints Test37 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13InvalidURInameConstraintsTest37) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsURI2CACert", |
| "InvalidURInameConstraintsTest37EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsURI2CACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.13.38 Invalid DNS nameConstraints Test38 |
| WRAPPED_TYPED_TEST_P(PkitsTest13NameConstraints, |
| Section13InvalidDNSnameConstraintsTest38) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "nameConstraintsDNS1CACert", |
| "InvalidDNSnameConstraintsTest38EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "nameConstraintsDNS1CACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| WRAPPED_REGISTER_TYPED_TEST_CASE_P( |
| PkitsTest13NameConstraints, |
| Section13ValidDNnameConstraintsTest1, |
| Section13InvalidDNnameConstraintsTest2, |
| Section13InvalidDNnameConstraintsTest3, |
| Section13ValidDNnameConstraintsTest4, |
| Section13ValidDNnameConstraintsTest5, |
| Section13ValidDNnameConstraintsTest6, |
| Section13InvalidDNnameConstraintsTest7, |
| Section13InvalidDNnameConstraintsTest8, |
| Section13InvalidDNnameConstraintsTest9, |
| Section13InvalidDNnameConstraintsTest10, |
| Section13ValidDNnameConstraintsTest11, |
| Section13InvalidDNnameConstraintsTest12, |
| Section13InvalidDNnameConstraintsTest13, |
| Section13ValidDNnameConstraintsTest14, |
| Section13InvalidDNnameConstraintsTest15, |
| Section13InvalidDNnameConstraintsTest16, |
| Section13InvalidDNnameConstraintsTest17, |
| Section13ValidDNnameConstraintsTest18, |
| Section13ValidSelfIssuedDNnameConstraintsTest19, |
| Section13InvalidSelfIssuedDNnameConstraintsTest20, |
| Section13ValidRFC822nameConstraintsTest21, |
| Section13InvalidRFC822nameConstraintsTest22, |
| Section13ValidRFC822nameConstraintsTest23, |
| Section13InvalidRFC822nameConstraintsTest24, |
| Section13ValidRFC822nameConstraintsTest25, |
| Section13InvalidRFC822nameConstraintsTest26, |
| Section13ValidDNandRFC822nameConstraintsTest27, |
| Section13InvalidDNandRFC822nameConstraintsTest28, |
| Section13InvalidDNandRFC822nameConstraintsTest29, |
| Section13ValidDNSnameConstraintsTest30, |
| Section13InvalidDNSnameConstraintsTest31, |
| Section13ValidDNSnameConstraintsTest32, |
| Section13InvalidDNSnameConstraintsTest33, |
| Section13ValidURInameConstraintsTest34, |
| Section13InvalidURInameConstraintsTest35, |
| Section13ValidURInameConstraintsTest36, |
| Section13InvalidURInameConstraintsTest37, |
| Section13InvalidDNSnameConstraintsTest38); |
| |
| template <typename PkitsTestDelegate> |
| class PkitsTest14DistributionPoints : public PkitsTest<PkitsTestDelegate> {}; |
| TYPED_TEST_CASE_P(PkitsTest14DistributionPoints); |
| |
| // 4.14.1 Valid distributionPoint Test1 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14ValiddistributionPointTest1) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "distributionPoint1CACert", |
| "ValiddistributionPointTest1EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "distributionPoint1CACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.2 Invalid distributionPoint Test2 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14InvaliddistributionPointTest2) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "distributionPoint1CACert", |
| "InvaliddistributionPointTest2EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "distributionPoint1CACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.3 Invalid distributionPoint Test3 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14InvaliddistributionPointTest3) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "distributionPoint1CACert", |
| "InvaliddistributionPointTest3EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "distributionPoint1CACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.4 Valid distributionPoint Test4 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14ValiddistributionPointTest4) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "distributionPoint1CACert", |
| "ValiddistributionPointTest4EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "distributionPoint1CACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.5 Valid distributionPoint Test5 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14ValiddistributionPointTest5) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "distributionPoint2CACert", |
| "ValiddistributionPointTest5EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "distributionPoint2CACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.6 Invalid distributionPoint Test6 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14InvaliddistributionPointTest6) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "distributionPoint2CACert", |
| "InvaliddistributionPointTest6EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "distributionPoint2CACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.7 Valid distributionPoint Test7 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14ValiddistributionPointTest7) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "distributionPoint2CACert", |
| "ValiddistributionPointTest7EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "distributionPoint2CACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.8 Invalid distributionPoint Test8 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14InvaliddistributionPointTest8) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "distributionPoint2CACert", |
| "InvaliddistributionPointTest8EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "distributionPoint2CACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.9 Invalid distributionPoint Test9 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14InvaliddistributionPointTest9) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "distributionPoint2CACert", |
| "InvaliddistributionPointTest9EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "distributionPoint2CACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.10 Valid No issuingDistributionPoint Test10 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14ValidNoissuingDistributionPointTest10) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "NoissuingDistributionPointCACert", |
| "ValidNoissuingDistributionPointTest10EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "NoissuingDistributionPointCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.11 Invalid onlyContainsUserCerts CRL Test11 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14InvalidonlyContainsUserCertsCRLTest11) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "onlyContainsUserCertsCACert", |
| "InvalidonlyContainsUserCertsTest11EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "onlyContainsUserCertsCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.12 Invalid onlyContainsCACerts CRL Test12 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14InvalidonlyContainsCACertsCRLTest12) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "onlyContainsCACertsCACert", |
| "InvalidonlyContainsCACertsTest12EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "onlyContainsCACertsCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.13 Valid onlyContainsCACerts CRL Test13 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14ValidonlyContainsCACertsCRLTest13) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "onlyContainsCACertsCACert", |
| "ValidonlyContainsCACertsTest13EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "onlyContainsCACertsCACRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.14 Invalid onlyContainsAttributeCerts Test14 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14InvalidonlyContainsAttributeCertsTest14) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "onlyContainsAttributeCertsCACert", |
| "InvalidonlyContainsAttributeCertsTest14EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "onlyContainsAttributeCertsCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.15 Invalid onlySomeReasons Test15 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14InvalidonlySomeReasonsTest15) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "onlySomeReasonsCA1Cert", |
| "InvalidonlySomeReasonsTest15EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "onlySomeReasonsCA1compromiseCRL", |
| "onlySomeReasonsCA1otherreasonsCRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.16 Invalid onlySomeReasons Test16 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14InvalidonlySomeReasonsTest16) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "onlySomeReasonsCA1Cert", |
| "InvalidonlySomeReasonsTest16EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "onlySomeReasonsCA1compromiseCRL", |
| "onlySomeReasonsCA1otherreasonsCRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.17 Invalid onlySomeReasons Test17 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14InvalidonlySomeReasonsTest17) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "onlySomeReasonsCA2Cert", |
| "InvalidonlySomeReasonsTest17EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "onlySomeReasonsCA2CRL1", |
| "onlySomeReasonsCA2CRL2"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.18 Valid onlySomeReasons Test18 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14ValidonlySomeReasonsTest18) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "onlySomeReasonsCA3Cert", |
| "ValidonlySomeReasonsTest18EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "onlySomeReasonsCA3compromiseCRL", |
| "onlySomeReasonsCA3otherreasonsCRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.19 Valid onlySomeReasons Test19 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14ValidonlySomeReasonsTest19) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "onlySomeReasonsCA4Cert", |
| "ValidonlySomeReasonsTest19EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "onlySomeReasonsCA4compromiseCRL", |
| "onlySomeReasonsCA4otherreasonsCRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.20 Invalid onlySomeReasons Test20 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14InvalidonlySomeReasonsTest20) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "onlySomeReasonsCA4Cert", |
| "InvalidonlySomeReasonsTest20EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "onlySomeReasonsCA4compromiseCRL", |
| "onlySomeReasonsCA4otherreasonsCRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.21 Invalid onlySomeReasons Test21 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14InvalidonlySomeReasonsTest21) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "onlySomeReasonsCA4Cert", |
| "InvalidonlySomeReasonsTest21EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "onlySomeReasonsCA4compromiseCRL", |
| "onlySomeReasonsCA4otherreasonsCRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.22 Valid IDP with indirectCRL Test22 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14ValidIDPwithindirectCRLTest22) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "indirectCRLCA1Cert", |
| "ValidIDPwithindirectCRLTest22EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "indirectCRLCA1CRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.23 Invalid IDP with indirectCRL Test23 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14InvalidIDPwithindirectCRLTest23) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "indirectCRLCA1Cert", |
| "InvalidIDPwithindirectCRLTest23EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "indirectCRLCA1CRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.24 Valid IDP with indirectCRL Test24 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14ValidIDPwithindirectCRLTest24) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "indirectCRLCA2Cert", "indirectCRLCA1Cert", |
| "ValidIDPwithindirectCRLTest24EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "indirectCRLCA1CRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.25 Valid IDP with indirectCRL Test25 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14ValidIDPwithindirectCRLTest25) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "indirectCRLCA2Cert", "indirectCRLCA1Cert", |
| "ValidIDPwithindirectCRLTest25EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "indirectCRLCA1CRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.26 Invalid IDP with indirectCRL Test26 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14InvalidIDPwithindirectCRLTest26) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "indirectCRLCA2Cert", "indirectCRLCA1Cert", |
| "InvalidIDPwithindirectCRLTest26EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "indirectCRLCA1CRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.27 Invalid cRLIssuer Test27 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14InvalidcRLIssuerTest27) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "indirectCRLCA2Cert", "GoodCACert", |
| "InvalidcRLIssuerTest27EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "GoodCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.28 Valid cRLIssuer Test28 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14ValidcRLIssuerTest28) { |
| const char* const certs[] = { |
| "TrustAnchorRootCertificate", "indirectCRLCA3Cert", |
| "indirectCRLCA3cRLIssuerCert", "ValidcRLIssuerTest28EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "indirectCRLCA3CRL", |
| "indirectCRLCA3cRLIssuerCRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.29 Valid cRLIssuer Test29 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14ValidcRLIssuerTest29) { |
| const char* const certs[] = { |
| "TrustAnchorRootCertificate", "indirectCRLCA3Cert", |
| "indirectCRLCA3cRLIssuerCert", "ValidcRLIssuerTest29EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "indirectCRLCA3CRL", |
| "indirectCRLCA3cRLIssuerCRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.30 Valid cRLIssuer Test30 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14ValidcRLIssuerTest30) { |
| const char* const certs[] = { |
| "TrustAnchorRootCertificate", "indirectCRLCA4Cert", |
| "indirectCRLCA4cRLIssuerCert", "ValidcRLIssuerTest30EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "indirectCRLCA4cRLIssuerCRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.31 Invalid cRLIssuer Test31 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14InvalidcRLIssuerTest31) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "indirectCRLCA5Cert", "indirectCRLCA6Cert", |
| "InvalidcRLIssuerTest31EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "indirectCRLCA5CRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.32 Invalid cRLIssuer Test32 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14InvalidcRLIssuerTest32) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "indirectCRLCA5Cert", "indirectCRLCA6Cert", |
| "InvalidcRLIssuerTest32EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "indirectCRLCA5CRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.33 Valid cRLIssuer Test33 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14ValidcRLIssuerTest33) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "indirectCRLCA5Cert", "indirectCRLCA6Cert", |
| "ValidcRLIssuerTest33EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "indirectCRLCA5CRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.34 Invalid cRLIssuer Test34 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14InvalidcRLIssuerTest34) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "indirectCRLCA5Cert", |
| "InvalidcRLIssuerTest34EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "indirectCRLCA5CRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.14.35 Invalid cRLIssuer Test35 |
| WRAPPED_TYPED_TEST_P(PkitsTest14DistributionPoints, |
| Section14InvalidcRLIssuerTest35) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "indirectCRLCA5Cert", |
| "InvalidcRLIssuerTest35EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "indirectCRLCA5CRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| WRAPPED_REGISTER_TYPED_TEST_CASE_P( |
| PkitsTest14DistributionPoints, |
| Section14ValiddistributionPointTest1, |
| Section14InvaliddistributionPointTest2, |
| Section14InvaliddistributionPointTest3, |
| Section14ValiddistributionPointTest4, |
| Section14ValiddistributionPointTest5, |
| Section14InvaliddistributionPointTest6, |
| Section14ValiddistributionPointTest7, |
| Section14InvaliddistributionPointTest8, |
| Section14InvaliddistributionPointTest9, |
| Section14ValidNoissuingDistributionPointTest10, |
| Section14InvalidonlyContainsUserCertsCRLTest11, |
| Section14InvalidonlyContainsCACertsCRLTest12, |
| Section14ValidonlyContainsCACertsCRLTest13, |
| Section14InvalidonlyContainsAttributeCertsTest14, |
| Section14InvalidonlySomeReasonsTest15, |
| Section14InvalidonlySomeReasonsTest16, |
| Section14InvalidonlySomeReasonsTest17, |
| Section14ValidonlySomeReasonsTest18, |
| Section14ValidonlySomeReasonsTest19, |
| Section14InvalidonlySomeReasonsTest20, |
| Section14InvalidonlySomeReasonsTest21, |
| Section14ValidIDPwithindirectCRLTest22, |
| Section14InvalidIDPwithindirectCRLTest23, |
| Section14ValidIDPwithindirectCRLTest24, |
| Section14ValidIDPwithindirectCRLTest25, |
| Section14InvalidIDPwithindirectCRLTest26, |
| Section14InvalidcRLIssuerTest27, |
| Section14ValidcRLIssuerTest28, |
| Section14ValidcRLIssuerTest29, |
| Section14ValidcRLIssuerTest30, |
| Section14InvalidcRLIssuerTest31, |
| Section14InvalidcRLIssuerTest32, |
| Section14ValidcRLIssuerTest33, |
| Section14InvalidcRLIssuerTest34, |
| Section14InvalidcRLIssuerTest35); |
| |
| template <typename PkitsTestDelegate> |
| class PkitsTest15DeltaCRLs : public PkitsTest<PkitsTestDelegate> {}; |
| TYPED_TEST_CASE_P(PkitsTest15DeltaCRLs); |
| |
| // 4.15.1 Invalid deltaCRLIndicator No Base Test1 |
| WRAPPED_TYPED_TEST_P(PkitsTest15DeltaCRLs, |
| Section15InvaliddeltaCRLIndicatorNoBaseTest1) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", |
| "deltaCRLIndicatorNoBaseCACert", |
| "InvaliddeltaCRLIndicatorNoBaseTest1EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", |
| "deltaCRLIndicatorNoBaseCACRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.15.2 Valid delta-CRL Test2 |
| WRAPPED_TYPED_TEST_P(PkitsTest15DeltaCRLs, Section15ValiddeltaCRLTest2) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "deltaCRLCA1Cert", |
| "ValiddeltaCRLTest2EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "deltaCRLCA1CRL", |
| "deltaCRLCA1deltaCRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.15.3 Invalid delta-CRL Test3 |
| WRAPPED_TYPED_TEST_P(PkitsTest15DeltaCRLs, Section15InvaliddeltaCRLTest3) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "deltaCRLCA1Cert", |
| "InvaliddeltaCRLTest3EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "deltaCRLCA1CRL", |
| "deltaCRLCA1deltaCRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.15.4 Invalid delta-CRL Test4 |
| WRAPPED_TYPED_TEST_P(PkitsTest15DeltaCRLs, Section15InvaliddeltaCRLTest4) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "deltaCRLCA1Cert", |
| "InvaliddeltaCRLTest4EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "deltaCRLCA1CRL", |
| "deltaCRLCA1deltaCRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.15.5 Valid delta-CRL Test5 |
| WRAPPED_TYPED_TEST_P(PkitsTest15DeltaCRLs, Section15ValiddeltaCRLTest5) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "deltaCRLCA1Cert", |
| "ValiddeltaCRLTest5EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "deltaCRLCA1CRL", |
| "deltaCRLCA1deltaCRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.15.6 Invalid delta-CRL Test6 |
| WRAPPED_TYPED_TEST_P(PkitsTest15DeltaCRLs, Section15InvaliddeltaCRLTest6) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "deltaCRLCA1Cert", |
| "InvaliddeltaCRLTest6EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "deltaCRLCA1CRL", |
| "deltaCRLCA1deltaCRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.15.7 Valid delta-CRL Test7 |
| WRAPPED_TYPED_TEST_P(PkitsTest15DeltaCRLs, Section15ValiddeltaCRLTest7) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "deltaCRLCA1Cert", |
| "ValiddeltaCRLTest7EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "deltaCRLCA1CRL", |
| "deltaCRLCA1deltaCRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.15.8 Valid delta-CRL Test8 |
| WRAPPED_TYPED_TEST_P(PkitsTest15DeltaCRLs, Section15ValiddeltaCRLTest8) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "deltaCRLCA2Cert", |
| "ValiddeltaCRLTest8EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "deltaCRLCA2CRL", |
| "deltaCRLCA2deltaCRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.15.9 Invalid delta-CRL Test9 |
| WRAPPED_TYPED_TEST_P(PkitsTest15DeltaCRLs, Section15InvaliddeltaCRLTest9) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "deltaCRLCA2Cert", |
| "InvaliddeltaCRLTest9EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "deltaCRLCA2CRL", |
| "deltaCRLCA2deltaCRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| // 4.15.10 Invalid delta-CRL Test10 |
| WRAPPED_TYPED_TEST_P(PkitsTest15DeltaCRLs, Section15InvaliddeltaCRLTest10) { |
| const char* const certs[] = {"TrustAnchorRootCertificate", "deltaCRLCA3Cert", |
| "InvaliddeltaCRLTest10EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL", "deltaCRLCA3CRL", |
| "deltaCRLCA3deltaCRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| WRAPPED_REGISTER_TYPED_TEST_CASE_P(PkitsTest15DeltaCRLs, |
| Section15InvaliddeltaCRLIndicatorNoBaseTest1, |
| Section15ValiddeltaCRLTest2, |
| Section15InvaliddeltaCRLTest3, |
| Section15InvaliddeltaCRLTest4, |
| Section15ValiddeltaCRLTest5, |
| Section15InvaliddeltaCRLTest6, |
| Section15ValiddeltaCRLTest7, |
| Section15ValiddeltaCRLTest8, |
| Section15InvaliddeltaCRLTest9, |
| Section15InvaliddeltaCRLTest10); |
| |
| template <typename PkitsTestDelegate> |
| class PkitsTest16PrivateCertificateExtensions |
| : public PkitsTest<PkitsTestDelegate> {}; |
| TYPED_TEST_CASE_P(PkitsTest16PrivateCertificateExtensions); |
| |
| // 4.16.1 Valid Unknown Not Critical Certificate Extension Test1 |
| WRAPPED_TYPED_TEST_P( |
| PkitsTest16PrivateCertificateExtensions, |
| Section16ValidUnknownNotCriticalCertificateExtensionTest1) { |
| const char* const certs[] = { |
| "TrustAnchorRootCertificate", |
| "ValidUnknownNotCriticalCertificateExtensionTest1EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL"}; |
| ASSERT_TRUE(this->Verify(certs, crls)); |
| } |
| |
| // 4.16.2 Invalid Unknown Critical Certificate Extension Test2 |
| WRAPPED_TYPED_TEST_P(PkitsTest16PrivateCertificateExtensions, |
| Section16InvalidUnknownCriticalCertificateExtensionTest2) { |
| const char* const certs[] = { |
| "TrustAnchorRootCertificate", |
| "InvalidUnknownCriticalCertificateExtensionTest2EE"}; |
| const char* const crls[] = {"TrustAnchorRootCRL"}; |
| ASSERT_FALSE(this->Verify(certs, crls)); |
| } |
| |
| WRAPPED_REGISTER_TYPED_TEST_CASE_P( |
| PkitsTest16PrivateCertificateExtensions, |
| Section16ValidUnknownNotCriticalCertificateExtensionTest1, |
| Section16InvalidUnknownCriticalCertificateExtensionTest2); |