tests: Add 4.16.1 and 4.16.2 from NIST PKITS

This adds two more X.509 path validation test cases.

Signed-off-by: Jouni Malinen <j@w1.fi>
This commit is contained in:
Jouni Malinen 2014-05-09 22:49:49 +03:00
parent 0f1034e388
commit f1aac5c488

View file

@ -55,12 +55,21 @@ function run_test
echo "$NUM failed - expected validation result $RES; result was $REASONNUM" echo "$NUM failed - expected validation result $RES; result was $REASONNUM"
OK=0 OK=0
fi fi
else
if [ $RES -eq -1 ]; then
if grep -q "Failed to parse X.509 certificate" $TMPOUT.$NUM; then
OK=1
else
echo "$NUM failed - expected parsing failure; other type of error detected"
OK=0
fi
else else
echo "$NUM failed - expected validation failure; other type of error detected" echo "$NUM failed - expected validation failure; other type of error detected"
OK=0 OK=0
fi fi
fi fi
fi fi
fi
if [ $OK -eq 1 ]; then if [ $OK -eq 1 ]; then
rm $TMPOUT.$NUM rm $TMPOUT.$NUM
SUCCESS="$SUCCESS $NUM" SUCCESS="$SUCCESS $NUM"
@ -153,6 +162,9 @@ run_test 4.8.18 0 UserNoticeQualifierTest18EE.crt PoliciesP12CACert.crt
run_test 4.8.19 0 UserNoticeQualifierTest19EE.crt TrustAnchorRootCertificate.crt run_test 4.8.19 0 UserNoticeQualifierTest19EE.crt TrustAnchorRootCertificate.crt
run_test 4.8.20 0 CPSPointerQualifierTest20EE.crt GoodCACert.crt run_test 4.8.20 0 CPSPointerQualifierTest20EE.crt GoodCACert.crt
run_test 4.16.1 0 ValidUnknownNotCriticalCertificateExtensionTest1EE.crt
run_test 4.16.2 -1 InvalidUnknownCriticalCertificateExtensionTest2EE.crt
if false; then if false; then
# DSA tests # DSA tests
run_test 4.1.4 0 ValidDSASignaturesTest4EE.crt DSACACert.crt run_test 4.1.4 0 ValidDSASignaturesTest4EE.crt DSACACert.crt