Skip to content
体验新版
项目
组织
正在加载...
登录
切换导航
打开侧边栏
OpenHarmony
Third Party Openssl
提交
ec40e5ff
T
Third Party Openssl
项目概览
OpenHarmony
/
Third Party Openssl
1 年多 前同步成功
通知
9
Star
18
Fork
1
代码
文件
提交
分支
Tags
贡献者
分支图
Diff
Issue
0
列表
看板
标记
里程碑
合并请求
0
Wiki
0
Wiki
分析
仓库
DevOps
项目成员
Pages
T
Third Party Openssl
项目概览
项目概览
详情
发布
仓库
仓库
文件
提交
分支
标签
贡献者
分支图
比较
Issue
0
Issue
0
列表
看板
标记
里程碑
合并请求
0
合并请求
0
Pages
分析
分析
仓库分析
DevOps
Wiki
0
Wiki
成员
成员
收起侧边栏
关闭侧边栏
动态
分支图
创建新Issue
提交
Issue看板
提交
ec40e5ff
编写于
12月 10, 2012
作者:
B
Ben Laurie
浏览文件
操作
浏览文件
下载
电子邮件补丁
差异文件
Tabification. Remove accidental duplication.
上级
b34aa49c
变更
2
隐藏空白更改
内联
并排
Showing
2 changed file
with
3 addition
and
200 deletion
+3
-200
crypto/ocsp/ocsp_vfy.c
crypto/ocsp/ocsp_vfy.c
+3
-3
test/tocsp
test/tocsp
+0
-197
未找到文件。
crypto/ocsp/ocsp_vfy.c
浏览文件 @
ec40e5ff
...
...
@@ -173,14 +173,14 @@ int OCSP_basic_verify(OCSP_BASICRESP *bs, STACK_OF(X509) *certs,
ret
=
X509_verify_cert
(
&
ctx
);
chain
=
tmpchain
=
X509_STORE_CTX_get1_chain
(
&
ctx
);
X509_STORE_CTX_cleanup
(
&
ctx
);
if
(
ret
<=
0
)
if
(
ret
<=
0
)
{
i
=
X509_STORE_CTX_get_error
(
&
ctx
);
OCSPerr
(
OCSP_F_OCSP_BASIC_VERIFY
,
OCSP_R_CERTIFICATE_VERIFY_ERROR
);
ERR_add_error_data
(
2
,
"Verify error:"
,
X509_verify_cert_error_string
(
i
));
goto
end
;
}
goto
end
;
}
verified_chain:
if
(
flags
&
OCSP_NOCHECKS
)
...
...
test/tocsp
浏览文件 @
ec40e5ff
...
...
@@ -195,200 +195,3 @@ if [ $? != 0 ]; then exit 1; fi
/bin/rm
$ocspdir
/
*
.ors.der
echo
"ALL OCSP TESTS SUCCESSFUL"
exit
0
#!/bin/sh
cmd
=
'../util/shlib_wrap.sh ../apps/openssl'
ocspdir
=
"ocsp-tests"
stdparams
=
"-trust_other -CApath /dev/null"
for
resp
in
`
ls
-1
$ocspdir
/
*
.ors
`
do
$cmd
base64
-d
-in
$resp
-out
$resp
.der
done
echo
"=== VALID OCSP RESPONSES ==="
echo
"NON-DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ND1.ors.der
-verify_other
$ocspdir
/ND1_Issuer_ICA.pem
$stdparams
if
[
$?
!=
0
]
;
then
exit
1
;
fi
echo
"NON-DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/ND2.ors.der
-verify_other
$ocspdir
/ND2_Issuer_Root.pem
$stdparams
if
[
$?
!=
0
]
;
then
exit
1
;
fi
echo
"NON-DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ND3.ors.der
-verify_other
$ocspdir
/ND3_Issuer_Root.pem
$stdparams
if
[
$?
!=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/D1.ors.der
-verify_other
$ocspdir
/D1_Issuer_ICA.pem
$stdparams
if
[
$?
!=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/D2.ors.der
-verify_other
$ocspdir
/D2_Issuer_Root.pem
$stdparams
if
[
$?
!=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/D3.ors.der
-verify_other
$ocspdir
/D3_Issuer_Root.pem
$stdparams
if
[
$?
!=
0
]
;
then
exit
1
;
fi
echo
"=== INVALID SIGNATURE on the OCSP RESPONSE ==="
echo
"NON-DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ISOP_ND1.ors.der
-verify_other
$ocspdir
/ND1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"NON-DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/ISOP_ND2.ors.der
-verify_other
$ocspdir
/ND2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"NON-DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ISOP_ND3.ors.der
-verify_other
$ocspdir
/ND3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ISOP_D1.ors.der
-verify_other
$ocspdir
/D1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/ISOP_D2.ors.der
-verify_other
$ocspdir
/D2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ISOP_D3.ors.der
-verify_other
$ocspdir
/D3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"=== WRONG RESPONDERID in the OCSP RESPONSE ==="
echo
"NON-DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WRID_ND1.ors.der
-verify_other
$ocspdir
/ND1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"NON-DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/WRID_ND2.ors.der
-verify_other
$ocspdir
/ND2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"NON-DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WRID_ND3.ors.der
-verify_other
$ocspdir
/ND3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WRID_D1.ors.der
-verify_other
$ocspdir
/D1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/WRID_D2.ors.der
-verify_other
$ocspdir
/D2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WRID_D3.ors.der
-verify_other
$ocspdir
/D3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"=== WRONG ISSUERNAMEHASH in the OCSP RESPONSE ==="
echo
"NON-DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WINH_ND1.ors.der
-verify_other
$ocspdir
/ND1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"NON-DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/WINH_ND2.ors.der
-verify_other
$ocspdir
/ND2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"NON-DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WINH_ND3.ors.der
-verify_other
$ocspdir
/ND3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WINH_D1.ors.der
-verify_other
$ocspdir
/D1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/WINH_D2.ors.der
-verify_other
$ocspdir
/D2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WINH_D3.ors.der
-verify_other
$ocspdir
/D3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"=== WRONG ISSUERKEYHASH in the OCSP RESPONSE ==="
echo
"NON-DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WIKH_ND1.ors.der
-verify_other
$ocspdir
/ND1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"NON-DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/WIKH_ND2.ors.der
-verify_other
$ocspdir
/ND2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"NON-DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WIKH_ND3.ors.der
-verify_other
$ocspdir
/ND3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WIKH_D1.ors.der
-verify_other
$ocspdir
/D1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/WIKH_D2.ors.der
-verify_other
$ocspdir
/D2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WIKH_D3.ors.der
-verify_other
$ocspdir
/D3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"=== WRONG KEY in the DELEGATED OCSP SIGNING CERTIFICATE ==="
echo
"DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WKDOSC_D1.ors.der
-verify_other
$ocspdir
/D1_Issuer_ICA.pem
$std_params
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/WKDOSC_D2.ors.der
-verify_other
$ocspdir
/D2_Issuer_Root.pem
$std_params
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WKDOSC_D3.ors.der
-verify_other
$ocspdir
/D3_Issuer_Root.pem
$std_params
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"=== INVALID SIGNATURE on the DELEGATED OCSP SIGNING CERTIFICATE ==="
echo
"DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ISDOSC_D1.ors.der
-verify_other
$ocspdir
/D1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/ISDOSC_D2.ors.der
-verify_other
$ocspdir
/D2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ISDOSC_D3.ors.der
-verify_other
$ocspdir
/D3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"=== WRONG SUBJECT NAME in the ISSUER CERTIFICATE ==="
echo
"NON-DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ND1.ors.der
-verify_other
$ocspdir
/WSNIC_ND1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"NON-DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/ND2.ors.der
-verify_other
$ocspdir
/WSNIC_ND2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"NON-DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ND3.ors.der
-verify_other
$ocspdir
/WSNIC_ND3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/D1.ors.der
-verify_other
$ocspdir
/WSNIC_D1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/D2.ors.der
-verify_other
$ocspdir
/WSNIC_D2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/D3.ors.der
-verify_other
$ocspdir
/WSNIC_D3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"=== WRONG KEY in the ISSUER CERTIFICATE ==="
echo
"NON-DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ND1.ors.der
-verify_other
$ocspdir
/WKIC_ND1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"NON-DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/ND2.ors.der
-verify_other
$ocspdir
/WKIC_ND2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"NON-DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ND3.ors.der
-verify_other
$ocspdir
/WKIC_ND3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/D1.ors.der
-verify_other
$ocspdir
/WKIC_D1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/D2.ors.der
-verify_other
$ocspdir
/WKIC_D2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/D3.ors.der
-verify_other
$ocspdir
/WKIC_D3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
echo
"=== INVALID SIGNATURE on the ISSUER CERTIFICATE ==="
# Expect success, because we're explicitly trusting the issuer certificate.
echo
"NON-DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ND1.ors.der
-verify_other
$ocspdir
/ISIC_ND1_Issuer_ICA.pem
$stdparams
if
[
$?
!=
0
]
;
then
exit
1
;
fi
echo
"NON-DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/ND2.ors.der
-verify_other
$ocspdir
/ISIC_ND2_Issuer_Root.pem
$stdparams
if
[
$?
!=
0
]
;
then
exit
1
;
fi
echo
"NON-DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ND3.ors.der
-verify_other
$ocspdir
/ISIC_ND3_Issuer_Root.pem
$stdparams
if
[
$?
!=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/D1.ors.der
-verify_other
$ocspdir
/ISIC_D1_Issuer_ICA.pem
$stdparams
if
[
$?
!=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/D2.ors.der
-verify_other
$ocspdir
/ISIC_D2_Issuer_Root.pem
$stdparams
if
[
$?
!=
0
]
;
then
exit
1
;
fi
echo
"DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/D3.ors.der
-verify_other
$ocspdir
/ISIC_D3_Issuer_Root.pem
$stdparams
if
[
$?
!=
0
]
;
then
exit
1
;
fi
/bin/rm
$ocspdir
/
*
.ors.der
echo
"ALL OCSP TESTS SUCCESSFUL"
exit
0
编辑
预览
Markdown
is supported
0%
请重试
或
添加新附件
.
添加附件
取消
You are about to add
0
people
to the discussion. Proceed with caution.
先完成此消息的编辑!
取消
想要评论请
注册
或
登录