denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

auth-cfg: Parse rsa/pss auth tokens

Browse Source
This commit is contained in:
Tobias Brunner
2017-11-08 16:48:10 +01:00
parent 54f8d09261
commit 634c6ba8ce
2 changed files with 138 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/tests/suites/test_auth_cfg.c
+74
View File
@@ -106,6 +106,76 @@ START_TEST(test_ike_contraints_fallback)
}
END_TEST
typedef union {
rsa_pss_params_t pss;
} signature_param_types_t;
struct {
char *constraints;
signature_scheme_t sig[5];
signature_param_types_t p[5];
} sig_constraints_params_tests[] = {
{ "rsa/pss-sha256", { SIGN_RSA_EMSA_PSS, 0 }, {
{ .pss = { .hash = HASH_SHA256, .mgf1_hash = HASH_SHA256, .salt_len = HASH_SIZE_SHA256, }}}},
{ "rsa/pss-sha256-sha384", { SIGN_RSA_EMSA_PSS, SIGN_RSA_EMSA_PSS, 0 }, {
{ .pss = { .hash = HASH_SHA256, .mgf1_hash = HASH_SHA256, .salt_len = HASH_SIZE_SHA256, }},
{ .pss = { .hash = HASH_SHA384, .mgf1_hash = HASH_SHA384, .salt_len = HASH_SIZE_SHA384, }}}},
{ "rsa/pss-sha256-rsa-sha256", { SIGN_RSA_EMSA_PSS, SIGN_RSA_EMSA_PKCS1_SHA2_256, 0 }, {
{ .pss = { .hash = HASH_SHA256, .mgf1_hash = HASH_SHA256, .salt_len = HASH_SIZE_SHA256, }}}},
{ "rsa-sha256-rsa/pss-sha256", { SIGN_RSA_EMSA_PKCS1_SHA2_256, SIGN_RSA_EMSA_PSS, 0 }, {
{},
{ .pss = { .hash = HASH_SHA256, .mgf1_hash = HASH_SHA256, .salt_len = HASH_SIZE_SHA256, }}}},
{ "rsa/pss", { 0 }, {}},
};
static void check_sig_constraints_params(auth_cfg_t *cfg, auth_rule_t type,
signature_scheme_t scheme[],
signature_param_types_t p[])
{
enumerator_t *enumerator;
auth_rule_t t;
signature_params_t *value;
int i = 0;
enumerator = cfg->create_enumerator(cfg);
while (enumerator->enumerate(enumerator, &t, &value))
{
if (t == type)
{
if (scheme[i] == SIGN_RSA_EMSA_PSS)
{
signature_params_t expected = {
.scheme = scheme[i],
.params = &p[i].pss,
};
ck_assert(signature_params_equal(value, &expected));
}
else
{
ck_assert(scheme[i]);
ck_assert(!value->params);
ck_assert_int_eq(scheme[i], value->scheme);
}
i++;
}
}
enumerator->destroy(enumerator);
ck_assert(!scheme[i]);
}
START_TEST(test_sig_contraints_params)
{
auth_cfg_t *cfg;
cfg = auth_cfg_create();
cfg->add_pubkey_constraints(cfg, sig_constraints_params_tests[_i].constraints, TRUE);
check_sig_constraints_params(cfg, AUTH_RULE_IKE_SIGNATURE_SCHEME,
sig_constraints_params_tests[_i].sig,
sig_constraints_params_tests[_i].p);
cfg->destroy(cfg);
}
END_TEST
Suite *auth_cfg_suite_create()
{
Suite *s;
@@ -118,5 +188,9 @@ Suite *auth_cfg_suite_create()
tcase_add_loop_test(tc, test_ike_contraints_fallback, 0, countof(sig_constraints_tests));
suite_add_tcase(s, tc);
tc = tcase_create("add_pubkey_constraints parameters");
tcase_add_loop_test(tc, test_sig_contraints_params, 0, countof(sig_constraints_params_tests));
suite_add_tcase(s, tc);
return s;
}