📄 testlib.c
字号:
/****************************************************************************
* *
* cryptlib Test Code *
* Copyright Peter Gutmann 1995-2005 *
* *
****************************************************************************/
#ifdef _MSC_VER
#include "../cryptlib.h"
#include "test.h"
#else
#include "cryptlib.h"
#include "test/test.h"
#endif /* Braindamaged VC++ include handling */
#if defined( __MVS__ ) || defined( __VMCMS__ )
/* Suspend conversion of literals to ASCII. */
#pragma convlit( suspend )
#endif /* IBM big iron */
#if defined( __ILEC400__ )
#pragma convert( 0 )
#endif /* IBM medium iron */
/* Whether various keyset tests worked, the results are used later to test
other routines. We initially set the key read result to TRUE in case the
keyset read tests are never called, so we can still trying reading the
keys in other tests */
int keyReadOK = TRUE, doubleCertOK = FALSE;
#ifdef TEST_CONFIG
/* The names of the configuration options we check for */
static struct {
const CRYPT_ATTRIBUTE_TYPE option; /* Option */
const char *name; /* Option name */
const BOOLEAN isNumeric; /* Whether it's a numeric option */
} configOption[] = {
{ CRYPT_OPTION_INFO_DESCRIPTION, "CRYPT_OPTION_INFO_DESCRIPTION", FALSE },
{ CRYPT_OPTION_INFO_COPYRIGHT, "CRYPT_OPTION_INFO_COPYRIGHT", FALSE },
{ CRYPT_OPTION_INFO_MAJORVERSION, "CRYPT_OPTION_INFO_MAJORVERSION", TRUE },
{ CRYPT_OPTION_INFO_MINORVERSION, "CRYPT_OPTION_INFO_MINORVERSION", TRUE },
{ CRYPT_OPTION_INFO_STEPPING, "CRYPT_OPTION_INFO_STEPPING", TRUE },
{ CRYPT_OPTION_ENCR_ALGO, "CRYPT_OPTION_ENCR_ALGO", TRUE },
{ CRYPT_OPTION_ENCR_HASH, "CRYPT_OPTION_ENCR_HASH", TRUE },
{ CRYPT_OPTION_ENCR_MAC, "CRYPT_OPTION_ENCR_MAC", TRUE },
{ CRYPT_OPTION_PKC_ALGO, "CRYPT_OPTION_PKC_ALGO", TRUE },
{ CRYPT_OPTION_PKC_KEYSIZE, "CRYPT_OPTION_PKC_KEYSIZE", TRUE },
{ CRYPT_OPTION_SIG_ALGO, "CRYPT_OPTION_SIG_ALGO", TRUE },
{ CRYPT_OPTION_SIG_KEYSIZE, "CRYPT_OPTION_SIG_KEYSIZE", TRUE },
{ CRYPT_OPTION_KEYING_ALGO, "CRYPT_OPTION_KEYING_ALGO", TRUE },
{ CRYPT_OPTION_KEYING_ITERATIONS, "CRYPT_OPTION_KEYING_ITERATIONS", TRUE },
{ CRYPT_OPTION_CERT_SIGNUNRECOGNISEDATTRIBUTES, "CRYPT_OPTION_CERT_SIGNUNRECOGNISEDATTRIBUTES", TRUE },
{ CRYPT_OPTION_CERT_VALIDITY, "CRYPT_OPTION_CERT_VALIDITY", TRUE },
{ CRYPT_OPTION_CERT_UPDATEINTERVAL, "CRYPT_OPTION_CERT_UPDATEINTERVAL", TRUE },
{ CRYPT_OPTION_CERT_COMPLIANCELEVEL, "CRYPT_OPTION_CERT_COMPLIANCELEVEL", TRUE },
{ CRYPT_OPTION_CERT_REQUIREPOLICY, "CRYPT_OPTION_CERT_REQUIREPOLICY", TRUE },
{ CRYPT_OPTION_CMS_DEFAULTATTRIBUTES, "CRYPT_OPTION_CMS_DEFAULTATTRIBUTES", TRUE },
{ CRYPT_OPTION_KEYS_LDAP_OBJECTCLASS, "CRYPT_OPTION_KEYS_LDAP_OBJECTCLASS", FALSE },
{ CRYPT_OPTION_KEYS_LDAP_OBJECTTYPE, "CRYPT_OPTION_KEYS_LDAP_OBJECTTYPE", TRUE },
{ CRYPT_OPTION_KEYS_LDAP_FILTER, "CRYPT_OPTION_KEYS_LDAP_FILTER", FALSE },
{ CRYPT_OPTION_KEYS_LDAP_CACERTNAME, "CRYPT_OPTION_KEYS_LDAP_CACERTNAME", FALSE },
{ CRYPT_OPTION_KEYS_LDAP_CERTNAME, "CRYPT_OPTION_KEYS_LDAP_CERTNAME", FALSE },
{ CRYPT_OPTION_KEYS_LDAP_CRLNAME, "CRYPT_OPTION_KEYS_LDAP_CRLNAME", FALSE },
{ CRYPT_OPTION_KEYS_LDAP_EMAILNAME, "CRYPT_OPTION_KEYS_LDAP_EMAILNAME", FALSE },
{ CRYPT_OPTION_DEVICE_PKCS11_DVR01, "CRYPT_OPTION_DEVICE_PKCS11_DVR01", FALSE },
{ CRYPT_OPTION_DEVICE_PKCS11_DVR02, "CRYPT_OPTION_DEVICE_PKCS11_DVR02", FALSE },
{ CRYPT_OPTION_DEVICE_PKCS11_DVR03, "CRYPT_OPTION_DEVICE_PKCS11_DVR03", FALSE },
{ CRYPT_OPTION_DEVICE_PKCS11_DVR04, "CRYPT_OPTION_DEVICE_PKCS11_DVR04", FALSE },
{ CRYPT_OPTION_DEVICE_PKCS11_DVR05, "CRYPT_OPTION_DEVICE_PKCS11_DVR05", FALSE },
{ CRYPT_OPTION_DEVICE_PKCS11_HARDWAREONLY, "CRYPT_OPTION_DEVICE_PKCS11_HARDWAREONLY", TRUE },
{ CRYPT_OPTION_NET_SOCKS_SERVER, "CRYPT_OPTION_NET_SOCKS_SERVER", FALSE },
{ CRYPT_OPTION_NET_SOCKS_USERNAME, "CRYPT_OPTION_NET_SOCKS_USERNAME", FALSE },
{ CRYPT_OPTION_NET_HTTP_PROXY, "CRYPT_OPTION_NET_HTTP_PROXY", FALSE },
{ CRYPT_OPTION_NET_CONNECTTIMEOUT, "CRYPT_OPTION_NET_CONNECTTIMEOUT", TRUE },
{ CRYPT_OPTION_NET_READTIMEOUT, "CRYPT_OPTION_NET_READTIMEOUT", TRUE },
{ CRYPT_OPTION_NET_WRITETIMEOUT, "CRYPT_OPTION_NET_WRITETIMEOUT", TRUE },
{ CRYPT_OPTION_MISC_ASYNCINIT, "CRYPT_OPTION_MISC_ASYNCINIT", TRUE },
{ CRYPT_OPTION_MISC_SIDECHANNELPROTECTION, "CRYPT_OPTION_MISC_SIDECHANNELPROTECTION", TRUE },
{ CRYPT_ATTRIBUTE_NONE, NULL, 0 }
};
#endif /* TEST_CONFIG */
/* There are some sizeable (for DOS) data structures used, so we increase the
stack size to allow for them */
#if defined( __MSDOS16__ ) && defined( __TURBOC__ )
extern unsigned _stklen = 16384;
#endif /* __MSDOS16__ && __TURBOC__ */
/****************************************************************************
* *
* Utility Routines *
* *
****************************************************************************/
/* The tests that use databases and cert stores require that the user set
up a suitable ODBC data source (at least when running under Windows). To
help people who don't read documentation, we try and create the data
source if it isn't present */
#if defined( _MSC_VER ) && defined( _WIN32 ) && !defined( _WIN32_WCE )
#define DATABASE_AUTOCONFIG
#include <odbcinst.h>
#define DATABASE_ATTR_NAME "DSN=" DATABASE_KEYSET_NAME_ASCII "\0" \
"DESCRIPTION=cryptlib test key database\0" \
"DBQ="
#define DATABASE_ATTR_CREATE "DSN=" DATABASE_KEYSET_NAME_ASCII "\0" \
"DESCRIPTION=cryptlib test key database\0" \
"CREATE_DB="
#define DATABASE_ATTR_TAIL DATABASE_KEYSET_NAME_ASCII ".mdb\0"
#define CERTSTORE_ATTR_NAME "DSN=" CERTSTORE_KEYSET_NAME_ASCII "\0" \
"DESCRIPTION=cryptlib test key database\0" \
"DBQ="
#define CERTSTORE_ATTR_CREATE "DSN=" CERTSTORE_KEYSET_NAME_ASCII "\0" \
"DESCRIPTION=cryptlib test key database\0" \
"CREATE_DB="
#define CERTSTORE_ATTR_TAIL CERTSTORE_KEYSET_NAME_ASCII ".mdb\0"
#ifdef USE_SQLSERVER
#define DRIVER_NAME TEXT( "SQL Server" )
#else
#define DRIVER_NAME TEXT( "Microsoft Access Driver (*.MDB)" )
#endif /* USE_SQLSERVER */
static void buildDBString( char *buffer, const char *attrName,
const int attrNameSize,
const char *attrTail, const char *path )
{
const int attrTailSize = strlen( attrTail ) + 2;
const int pathSize = strlen( path );
memcpy( buffer, attrName, attrNameSize + 1 );
memcpy( buffer + attrNameSize - 1, path, pathSize );
memcpy( buffer + attrNameSize - 1 + pathSize, attrTail, attrTailSize );
}
static void checkCreateDatabaseKeysets( void )
{
CRYPT_KEYSET cryptKeyset;
char tempPathBuffer[ 512 ];
int length, status;
if( !( length = GetTempPath( 512, tempPathBuffer ) ) )
{
strcpy( tempPathBuffer, "C:\\Temp\\" );
length = 8;
}
/* Try and open the test keyset */
status = cryptKeysetOpen( &cryptKeyset, CRYPT_UNUSED,
CRYPT_KEYSET_ODBC, DATABASE_KEYSET_NAME,
CRYPT_KEYOPT_READONLY );
if( cryptStatusOK( status ) )
cryptKeysetClose( cryptKeyset );
else
{
if( status == CRYPT_ERROR_OPEN )
{
char attrBuffer[ 1024 ];
#ifdef UNICODE_STRINGS
wchar_t wcAttrBuffer[ 1024 ];
#endif /* UNICODE_STRINGS */
/* Try and create the DSN. This is a two-step process, first we
create the DSN and then the underlying file that contains the
database */
puts( "Database keyset " DATABASE_KEYSET_NAME_ASCII " not "
"found, attempting to create data source..." );
buildDBString( attrBuffer, DATABASE_ATTR_NAME,
sizeof( DATABASE_ATTR_NAME ),
DATABASE_ATTR_TAIL, tempPathBuffer );
#ifdef UNICODE_STRINGS
mbstowcs( wcAttrBuffer, attrBuffer, strlen( attrBuffer ) + 1 );
status = SQLConfigDataSource( NULL, ODBC_ADD_DSN, DRIVER_NAME,
wcAttrBuffer );
#else
status = SQLConfigDataSource( NULL, ODBC_ADD_DSN, DRIVER_NAME,
attrBuffer );
#endif /* UNICODE_STRINGS */
if( status == 1 )
{
buildDBString( attrBuffer, DATABASE_ATTR_CREATE,
sizeof( DATABASE_ATTR_CREATE ),
DATABASE_ATTR_TAIL, tempPathBuffer );
#ifdef UNICODE_STRINGS
mbstowcs( wcAttrBuffer, attrBuffer, strlen( attrBuffer ) + 1 );
status = SQLConfigDataSource( NULL, ODBC_ADD_DSN,
DRIVER_NAME, wcAttrBuffer );
#else
status = SQLConfigDataSource( NULL, ODBC_ADD_DSN,
DRIVER_NAME, attrBuffer );
#endif /* UNICODE_STRINGS */
}
puts( ( status == 1 ) ? "Data source creation succeeded." : \
"Data source creation failed.\n\nYou need to create the "
"keyset data source as described in the cryptlib manual\n"
"for the database keyset tests to run." );
}
}
/* Try and open the test cert store. This can return a
CRYPT_ARGERROR_PARAM3 as a normal condition since a freshly-created
database is empty and therefore can't be identified as a cert store
until data is written to it */
status = cryptKeysetOpen( &cryptKeyset, CRYPT_UNUSED,
CRYPT_KEYSET_ODBC_STORE, CERTSTORE_KEYSET_NAME,
CRYPT_KEYOPT_READONLY );
if( cryptStatusOK( status ) )
cryptKeysetClose( cryptKeyset );
else
{
if( status == CRYPT_ERROR_OPEN )
{
char attrBuffer[ 1024 ];
#ifdef UNICODE_STRINGS
wchar_t wcAttrBuffer[ 1024 ];
#endif /* UNICODE_STRINGS */
/* Try and create the DSN. As before, this is a two-step
process */
puts( "Certificate store " CERTSTORE_KEYSET_NAME_ASCII " not "
"found, attempting to create data source..." );
buildDBString( attrBuffer, CERTSTORE_ATTR_NAME,
sizeof( CERTSTORE_ATTR_NAME ),
CERTSTORE_ATTR_TAIL, tempPathBuffer );
#ifdef UNICODE_STRINGS
mbstowcs( wcAttrBuffer, attrBuffer, strlen( attrBuffer ) + 1 );
status = SQLConfigDataSource( NULL, ODBC_ADD_DSN, DRIVER_NAME,
wcAttrBuffer );
#else
status = SQLConfigDataSource( NULL, ODBC_ADD_DSN, DRIVER_NAME,
attrBuffer );
#endif /* UNICODE_STRINGS */
if( status == 1 )
{
buildDBString( attrBuffer, CERTSTORE_ATTR_CREATE,
sizeof( CERTSTORE_ATTR_CREATE ),
CERTSTORE_ATTR_TAIL, tempPathBuffer );
#ifdef UNICODE_STRINGS
mbstowcs( wcAttrBuffer, attrBuffer, strlen( attrBuffer ) + 1 );
status = SQLConfigDataSource( NULL, ODBC_ADD_DSN,
DRIVER_NAME, wcAttrBuffer );
#else
status = SQLConfigDataSource( NULL, ODBC_ADD_DSN,
DRIVER_NAME, attrBuffer );
#endif /* UNICODE_STRINGS */
}
puts( ( status == 1 ) ? "Data source creation succeeded.\n" : \
"Data source creation failed.\n\nYou need to create the "
"certificate store data source as described in the\n"
"cryptlib manual for the certificate management tests to "
"run.\n" );
}
}
}
#endif /* Win32 with VC++ */
/****************************************************************************
* *
* Misc.Kludges *
* *
****************************************************************************/
/* Prototypes for general debug routines used to evaluate problems with certs
and envelopes from other apps */
void xxxCertImport( const char *fileName );
void xxxDataImport( const char *fileName );
void xxxSignedDataImport( const char *fileName );
void xxxEncryptedDataImport( const char *fileName );
void xxxEnvTest( void );
/* Prototype for stress test interface routine */
void smokeTest( void );
/* Update the cryptlib config file. This code can be used to set the
information required to load PKCS #11 device drivers:
- Set the driver path in the CRYPT_OPTION_DEVICE_PKCS11_DVR01 setting
below.
- Add a call to updateConfig() from somewhere (e.g.the test kludge function).
- Run the test code until it calls updateConfig().
- Remove the updateConfig() call, then run the test code as normal.
The testDevices() call will report the results of trying to use your
driver.
Note that under Windows XP the path name changes from 'WinNT' to just
'Windows' */
static void updateConfig( void )
{
#if 0
const char *driverPath = "c:/winnt/system32/aetpkss1.dll"; /* AET */
const char *driverPath = "c:/winnt/system32/etpkcs11.dll"; /* Aladdin eToken */
const char *driverPath = "c:/winnt/system32/cryst32.dll"; /* Chrysalis */
const char *driverPath = "c:/program files/luna/cryst201.dll"; /* Chrysalis */
const char *driverPath = "c:/winnt/system32/pkcs201n.dll"; /* Datakey */
const char *driverPath = "c:/winnt/system32/dkck201.dll"; /* Datakey (for Entrust) */
const char *driverPath = "c:/winnt/system32/dkck232.dll"; /* Datakey/iKey (NB: buggy, use 201) */
const char *driverPath = "c:/program files/eracom/cprov sw/cryptoki.dll"; /* Eracom (old, OK) */
const char *driverPath = "c:/program files/eracom/cprov runtime/cryptoki.dll"; /* Eracom (new, buggy) */
const char *driverPath = "c:/winnt/system32/sadaptor.dll"; /* Eutron */
const char *driverPath = "c:/winnt/system32/pk2priv.dll"; /* Gemplus */
const char *driverPath = "c:/program files/gemplus/gclib.dll"; /* Gemplus */
const char *driverPath = "c:/winnt/system32/cryptoki.dll"; /* IBM */
const char *driverPath = "c:/winnt/system32/cknfast.dll"; /* nCipher */
const char *driverPath = "c:/winnt/system32/nxpkcs11.dll"; /* Nexus */
const char *driverPath = "c:/winnt/system32/micardoPKCS11.dll"; /* Orga Micardo */
const char *driverPath = "c:/winnt/system32/cryptoki22.dll";/* Rainbow HSM (for USB use Datakey dvr) */
const char *driverPath = "c:/winnt/system32/p11card.dll"; /* Safelayer HSM (for USB use Datakey dvr) */
const char *driverPath = "c:/winnt/system32/slbck.dll"; /* Schlumberger */
const char *driverPath = "c:/winnt/system32/SpyPK11.dll"; /* Spyrus */
#endif /* 0 */
const char *driverPath = "c:/winnt/system32/SpyPK11.dll"; /* Spyrus */
printf( "Updating cryptlib configuration to load PKCS #11 driver\n "
"'%s'\n as default driver...", driverPath );
/* Set the path for a PKCS #11 device driver. We only enable one of
these at a time to speed the startup time */
cryptSetAttributeString( CRYPT_UNUSED, CRYPT_OPTION_DEVICE_PKCS11_DVR01,
driverPath, strlen( driverPath ) );
/* Update the options */
cryptSetAttribute( CRYPT_UNUSED, CRYPT_OPTION_CONFIGCHANGED, FALSE );
puts( " done." );
}
/* Add trusted certs to the config file and make sure that they're
persistent. This can't be done in the normal self-test since it requires
that cryptlib be restarted as part of the test to re-read the config file,
and because it modifies the cryptlib config file */
static void updateConfigCert( void )
{
CRYPT_CERTIFICATE trustedCert;
/* Import the first cert, make it trusted, and commit the changes */
importCertFromTemplate( &trustedCert, CERT_FILE_TEMPLATE, 1 );
cryptSetAttribute( trustedCert, CRYPT_CERTINFO_TRUSTED_IMPLICIT, TRUE );
cryptSetAttribute( CRYPT_UNUSED, CRYPT_OPTION_CONFIGCHANGED, FALSE );
cryptDestroyCert( trustedCert );
cryptEnd();
/* Do the same with a second cert. At the conclusion of this, we should
have two trusted certs on disk */
cryptInit();
importCertFromTemplate( &trustedCert, CERT_FILE_TEMPLATE, 2 );
cryptSetAttribute( trustedCert, CRYPT_CERTINFO_TRUSTED_IMPLICIT, TRUE );
cryptSetAttribute( CRYPT_UNUSED, CRYPT_OPTION_CONFIGCHANGED, FALSE );
cryptDestroyCert( trustedCert );
cryptEnd();
}
/* Generic test code insertion point. The following routine is called
before any of the other tests are run and can be used to handle special-
case tests that aren't part of the main test suite */
void testKludge( void )
{
/* Create test key databases */
#if 0
checkCreateDatabaseKeysets();
#endif /* 0 */
/* Performance-testing test harness */
#if 0
void performanceTests( const CRYPT_DEVICE cryptDevice );
performanceTests( CRYPT_UNUSED );
#endif /* 0 */
/* Memory diagnostic test harness */
#if 0
testReadFileCertPrivkey();
testEnvelopePKCCrypt(); /* Use "Datasize, certificate" */
testEnvelopeSign(); /* Use "Datasize, certificate" */
#endif /* 0 */
/* Simple (brute-force) server code. NB: Remember to change
setLocalConnect() to not bind the server to localhost if expecting
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -