diff options
| author | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2020-12-24 12:43:39 +0100 |
|---|---|---|
| committer | Dr. David von Oheimb <dev@ddvo.net> | 2021-01-13 11:53:15 +0100 |
| commit | b65c5ec8f5f8c9fa082c44bf805beed03d0fee0c (patch) | |
| tree | 2bc3ce487192eb578a252b9a68d4637b54c77ef8 /test | |
| parent | 41e597a01d95540f52e8bc4d69f88c3d93a093ce (diff) | |
apps/req.c: Add -copy_extensions option for use with -x509; default: none
Fixes #13708
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/13658)
Diffstat (limited to 'test')
| -rw-r--r-- | test/certs/ext-check.csr | 18 | ||||
| -rw-r--r-- | test/recipes/25-test_req.t | 15 |
2 files changed, 32 insertions, 1 deletions
diff --git a/test/certs/ext-check.csr b/test/certs/ext-check.csr new file mode 100644 index 0000000000..ee974e05ce --- /dev/null +++ b/test/certs/ext-check.csr @@ -0,0 +1,18 @@ +-----BEGIN CERTIFICATE REQUEST----- +MIICzTCCAbcCAQAwVDELMAkGA1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUx +ITAfBgNVBAoMGEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDENMAsGA1UEAwwEdGVz +dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJadpD0ASxxfxsvdj9Ix +sogVzMSGLFziaYuE9KejU9+R479RifvwfBANO62sNWJ19X//9G5UjwWmkiOzn1k5 +0DkYsBBA3mJzik6wjt/c58lBIlSEgAgpvDU8ht8w3t20JP9+YqXAeugqFj/Wl9rF +QtsvaWSRywjXVlp5fxuEQelNnXcJEKhsKTNExsBUZebo4/J1BWpklWzA9P0lYW5I +NvDAAwcF1nzlEf0Y6Eot03IMNyg2MTE4hehxjdgCSci8GYnFirE/ojXqqpAcZGh7 +r2dqWgZUD1Dh+bT2vjrUzj8eTH3GdzI+oljt29102JIUaqj3yzRYkah8FLF9CLNN +sUcCAwEAAaA2MBYGCSqGSIb3DQEJAjEJDAdDb21wYW55MBwGCSqGSIb3DQEJDjEP +MA0wCwYDVR0PBAQDAgeAMAsGCSqGSIb3DQEBCwOCAQEAYd4B+FkWRuVVDPYfrN8P +UdZbLTggUGrpdhRibnoAsLNQ3cCS90OsCq5FLD6TVUCNb1gnp15Jp1WChQSyD3zC +jb8VgivDeDOuk08Zy2Fl2+QvuwyQ9hKTAOTdAmP/bapAi7zniElSTP6BZ8vyEtuP +FCEWJ5UjhvUYbZOG5WIHxhT+24CtYH3iHNir4OlDbsYrUBKEmQZIDj6WC01UT+4U +/up2xKq1Y+rOUv2Xy3K9O/U1W/3AF7IvcDyd7+qQTGD8U2X3efzZYOffhTN+9Rvn +5t82CnHLjFn4Co43RBiOcbjSDbvtaghtDiYB2tSUuqafHiuAJKx6zAm0Y2FR8X+z +gg== +-----END CERTIFICATE REQUEST----- diff --git a/test/recipes/25-test_req.t b/test/recipes/25-test_req.t index 7f699c065d..861212f110 100644 --- a/test/recipes/25-test_req.t +++ b/test/recipes/25-test_req.t @@ -15,7 +15,7 @@ use OpenSSL::Test qw/:DEFAULT srctop_file/; setup("test_req"); -plan tests => 38; +plan tests => 42; require_ok(srctop_file('test', 'recipes', 'tconversion.pl')); @@ -274,6 +274,11 @@ sub has_AKID { my $expect = shift @_; cert_contains($cert, "Authority Key Identifier", $expect); } +sub has_keyUsage { + my $cert = shift @_; + my $expect = shift @_; + cert_contains($cert, "Key Usage", $expect); +} sub strict_verify { my $cert = shift @_; my $expect = shift @_; @@ -329,3 +334,11 @@ generate_cert($cert, "-addext", "keyUsage = dataEncipherment", "-in", srctop_file(@certs, "x509-check.csr")); cert_ext_has_n_different_lines($cert, 4, $SKID_AKID); # SKID != AKID strict_verify($cert, 1); + +my $cert = "self-signed_CA_no_keyUsage.pem"; +generate_cert($cert, "-in", srctop_file(@certs, "ext-check.csr")); +has_keyUsage($cert, 0); +my $cert = "self-signed_CA_with_keyUsages.pem"; +generate_cert($cert, "-in", srctop_file(@certs, "ext-check.csr"), + "-copy_extensions", "copy"); +has_keyUsage($cert, 1); |