/* $OpenBSD: x509_info.c,v 1.2 2020/09/18 14:41:04 tb Exp $ */ /* * Copyright (c) 2020 Ingo Schwarze * * Permission to use, copy, modify, and distribute this software for any * purpose with or without fee is hereby granted, provided that the above * copyright notice and this permission notice appear in all copies. * * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */ #include #include #include #include #include #include static const char *const bogus_pem = "\ -----BEGIN BOGUS----- \n\ -----END BOGUS----- \n\ "; static const char *const cert_pem = "\ -----BEGIN CERTIFICATE----- \n\ MIIDpTCCAo2gAwIBAgIJAPYm3GvOr5eTMA0GCSqGSIb3DQEBBQUAMHAxCzAJBgNV \n\ BAYTAlVLMRYwFAYDVQQKDA1PcGVuU1NMIEdyb3VwMSIwIAYDVQQLDBlGT1IgVEVT \n\ VElORyBQVVJQT1NFUyBPTkxZMSUwIwYDVQQDDBxPcGVuU1NMIFRlc3QgSW50ZXJt \n\ ZWRpYXRlIENBMB4XDTE0MDUyNDE0NDUxMVoXDTI0MDQwMTE0NDUxMVowZDELMAkG \n\ A1UEBhMCVUsxFjAUBgNVBAoMDU9wZW5TU0wgR3JvdXAxIjAgBgNVBAsMGUZPUiBU \n\ RVNUSU5HIFBVUlBPU0VTIE9OTFkxGTAXBgNVBAMMEFRlc3QgQ2xpZW50IENlcnQw \n\ ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ranbHRLcLVqN+0BzcZpY \n\ +yOLqxzDWT1LD9eW1stC4NzXX9/DCtSIVyN7YIHdGLrIPr64IDdXXaMRzgZ2rOKs \n\ lmHCAiFpO/ja99gGCJRxH0xwQatqAULfJVHeUhs7OEGOZc2nWifjqKvGfNTilP7D \n\ nwi69ipQFq9oS19FmhwVHk2wg7KZGHI1qDyG04UrfCZMRitvS9+UVhPpIPjuiBi2 \n\ x3/FZIpL5gXJvvFK6xHY63oq2asyzBATntBgnP4qJFWWcvRx24wF1PnZabxuVoL2 \n\ bPnQ/KvONDrw3IdqkKhYNTul7jEcu3OlcZIMw+7DiaKJLAzKb/bBF5gm/pwW6As9 \n\ AgMBAAGjTjBMMAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgXgMCwGCWCGSAGG \n\ +EIBDQQfFh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTANBgkqhkiG9w0B \n\ AQUFAAOCAQEAJzA4KTjkjXGSC4He63yX9Br0DneGBzjAwc1H6f72uqnCs8m7jgkE \n\ PQJFdTzQUKh97QPUuayZ2gl8XHagg+iWGy60Kw37gQ0+lumCN2sllvifhHU9R03H \n\ bWtS4kue+yQjMbrzf3zWygMDgwvFOUAIgBpH9qGc+CdNu97INTYd0Mvz51vLlxRn \n\ sC5aBYCWaZFnw3lWYxf9eVFRy9U+DkYFqX0LpmbDtcKP7AZGE6ZwSzaim+Cnoz1u \n\ Cgn+QmpFXgJKMFIZ82iSZISn+JkCCGxctZX1lMvai4Wi8Y0HxW9FTFZ6KBNwwE4B \n\ zjbN/ehBkgLlW/DWfi44DvwUHmuU6QP3cw== \n\ -----END CERTIFICATE----- \n\ "; int main(void) { BIO *bp; STACK_OF(X509_INFO) *skin, *skout; X509_INFO *info0, *info1; const char *errdata; unsigned long errcode; int errcount, errflags, num; errcount = 0; if ((skin = sk_X509_INFO_new_null()) == NULL) err(1, "sk_X509_INFO_new_null"); /* Test with empty input. */ if ((bp = BIO_new_mem_buf("", 0)) == NULL) err(1, "BIO_new_mem_buf(empty)"); if ((skout = PEM_X509_INFO_read_bio(bp, skin, NULL, NULL)) == NULL) err(1, "empty input: %s", ERR_error_string(ERR_get_error(), NULL)); if (skout != skin) errx(1, "empty input did not return the same stack"); skout = NULL; if ((num = sk_X509_INFO_num(skin)) != 0) errx(1, "empty input created %d X509_INFO objects", num); BIO_free(bp); /* Test with bogus input. */ if ((bp = BIO_new_mem_buf(bogus_pem, strlen(bogus_pem))) == NULL) err(1, "BIO_new_mem_buf(bogus_pem)"); if ((skout = PEM_X509_INFO_read_bio(bp, skin, NULL, NULL)) != NULL) errx(1, "success with bogus input on first try"); if ((num = sk_X509_INFO_num(skin)) != 0) errx(1, "bogus input created %d X509_INFO objects", num); if (BIO_reset(bp) != 1) errx(1, "BIO_reset"); /* Populate stack and test again with bogus input. */ if ((info0 = X509_INFO_new()) == NULL) err(1, "X509_INFO_new"); info0->references = 2; /* X509_INFO_up_ref(3) doesn't exist. */ if (sk_X509_INFO_push(skin, info0) != 1) err(1, "sk_X509_INFO_push"); if ((skout = PEM_X509_INFO_read_bio(bp, skin, NULL, NULL)) != NULL) errx(1, "success with bogus input on second try"); if ((num = sk_X509_INFO_num(skin)) != 1) errx(1, "bogus input changed stack size from 1 to %d", num); if (sk_X509_INFO_value(skin, 0) != info0) errx(1, "bogus input changed stack content"); if (info0->references != 2) { warnx("bogus input changed ref count from 2 to %d", info0->references); info0->references = 2; errcount++; } BIO_free(bp); /* Use a real certificate object. */ if ((bp = BIO_new_mem_buf(cert_pem, strlen(cert_pem))) == NULL) err(1, "BIO_new_mem_buf(cert_pem)"); if ((skout = PEM_X509_INFO_read_bio(bp, skin, NULL, NULL)) == NULL) { errdata = NULL; errflags = 0; while ((errcode = ERR_get_error_line_data(NULL, NULL, &errdata, &errflags)) != 0) if (errdata != NULL && (errflags & ERR_TXT_STRING)) warnx("%s --- %s", ERR_error_string(errcode, NULL), errdata); else warnx("%s", ERR_error_string(errcode, NULL)); err(1, "real input: parsing failed"); } if (skout != skin) errx(1, "real input did not return the same stack"); skout = NULL; if ((num = sk_X509_INFO_num(skin)) != 2) errx(1, "real input changed stack size from 1 to %d", num); if (sk_X509_INFO_value(skin, 0) != info0) errx(1, "real input changed stack content"); if (info0->references != 2) errx(1, "real input changed ref count from 2 to %d", info0->references); info1 = sk_X509_INFO_pop(skin); if (info1->x509 == NULL) errx(1, "real input did not create a certificate"); X509_INFO_free(info1); info1 = NULL; BIO_free(bp); /* Two real certificates followed by bogus input. */ if ((bp = BIO_new(BIO_s_mem())) == NULL) err(1, "BIO_new"); if (BIO_puts(bp, cert_pem) != strlen(cert_pem)) err(1, "BIO_puts(cert_pem) first copy"); if (BIO_puts(bp, cert_pem) != strlen(cert_pem)) err(1, "BIO_puts(cert_pem) second copy"); if (BIO_puts(bp, bogus_pem) != strlen(bogus_pem)) err(1, "BIO_puts(bogus_pem)"); if ((skout = PEM_X509_INFO_read_bio(bp, skin, NULL, NULL)) != NULL) errx(1, "success with real + bogus input"); if ((num = sk_X509_INFO_num(skin)) != 1) { warnx("real + bogus input changed stack size from 1 to %d", num); while (sk_X509_INFO_num(skin) > 1) (void)sk_X509_INFO_pop(skin); errcount++; } if (sk_X509_INFO_value(skin, 0) != info0) errx(1, "real + bogus input changed stack content"); if (info0->references != 2) { warnx("real + bogus input changed ref count from 2 to %d", info0->references); errcount++; } BIO_free(bp); info0->references = 1; X509_INFO_free(info0); sk_X509_INFO_free(skin); if (errcount > 0) errx(1, "%d errors detected", errcount); return 0; }