unittests/sshkey/test_sshkey.c

179 	struct sshkey *k1, *k2, *k3, *k4, *kr, *kd, *kf;
186 	k1 = sshkey_new(-42);
187 	ASSERT_PTR_EQ(k1, NULL);
191 	k1 = sshkey_new(KEY_UNSPEC);
192 	ASSERT_PTR_NE(k1, NULL);
193 	sshkey_free(k1);
197 	k1 = sshkey_new(KEY_RSA1);
198 	ASSERT_PTR_NE(k1, NULL);
199 	ASSERT_PTR_NE(k1->rsa, NULL);
200 	ASSERT_PTR_NE(k1->rsa->n, NULL);
201 	ASSERT_PTR_NE(k1->rsa->e, NULL);
202 	ASSERT_PTR_EQ(k1->rsa->p, NULL);
203 	sshkey_free(k1);
207 	k1 = sshkey_new(KEY_RSA);
208 	ASSERT_PTR_NE(k1, NULL);
209 	ASSERT_PTR_NE(k1->rsa, NULL);
210 	ASSERT_PTR_NE(k1->rsa->n, NULL);
211 	ASSERT_PTR_NE(k1->rsa->e, NULL);
212 	ASSERT_PTR_EQ(k1->rsa->p, NULL);
213 	sshkey_free(k1);
217 	k1 = sshkey_new(KEY_DSA);
218 	ASSERT_PTR_NE(k1, NULL);
219 	ASSERT_PTR_NE(k1->dsa, NULL);
220 	ASSERT_PTR_NE(k1->dsa->g, NULL);
221 	ASSERT_PTR_EQ(k1->dsa->priv_key, NULL);
222 	sshkey_free(k1);
227 	k1 = sshkey_new(KEY_ECDSA);
228 	ASSERT_PTR_NE(k1, NULL);
229 	ASSERT_PTR_EQ(k1->ecdsa, NULL);  /* Can't allocate without NID */
230 	sshkey_free(k1);
235 	k1 = sshkey_new(KEY_ED25519);
236 	ASSERT_PTR_NE(k1, NULL);
238 	ASSERT_PTR_EQ(k1->ed25519_sk, NULL);
239 	ASSERT_PTR_EQ(k1->ed25519_pk, NULL);
240 	sshkey_free(k1);
244 	k1 = sshkey_new_private(KEY_RSA);
245 	ASSERT_PTR_NE(k1, NULL);
246 	ASSERT_PTR_NE(k1->rsa, NULL);
247 	ASSERT_PTR_NE(k1->rsa->n, NULL);
248 	ASSERT_PTR_NE(k1->rsa->e, NULL);
249 	ASSERT_PTR_NE(k1->rsa->p, NULL);
250 	ASSERT_INT_EQ(sshkey_add_private(k1), 0);
251 	sshkey_free(k1);
255 	k1 = sshkey_new_private(KEY_DSA);
256 	ASSERT_PTR_NE(k1, NULL);
257 	ASSERT_PTR_NE(k1->dsa, NULL);
258 	ASSERT_PTR_NE(k1->dsa->g, NULL);
259 	ASSERT_PTR_NE(k1->dsa->priv_key, NULL);
260 	ASSERT_INT_EQ(sshkey_add_private(k1), 0);
261 	sshkey_free(k1);
265 	ASSERT_INT_EQ(sshkey_generate(KEY_RSA, 128, &k1),
267 	ASSERT_PTR_EQ(k1, NULL);
271 	ASSERT_INT_EQ(sshkey_generate(KEY_RSA, 1 << 20, &k1),
273 	ASSERT_PTR_EQ(k1, NULL);
277 	ASSERT_INT_EQ(sshkey_generate(KEY_DSA, 2048, &k1),
279 	ASSERT_PTR_EQ(k1, NULL);
280 	sshkey_free(k1);
285 	ASSERT_INT_EQ(sshkey_generate(KEY_ECDSA, 42, &k1),
287 	ASSERT_PTR_EQ(k1, NULL);
288 	sshkey_free(k1);
331 	ASSERT_INT_EQ(sshkey_demote(kr, &k1), 0);
332 	ASSERT_PTR_NE(k1, NULL);
333 	ASSERT_PTR_NE(kr, k1);
334 	ASSERT_INT_EQ(k1->type, KEY_RSA);
335 	ASSERT_PTR_NE(k1->rsa, NULL);
336 	ASSERT_PTR_NE(k1->rsa->n, NULL);
337 	ASSERT_PTR_NE(k1->rsa->e, NULL);
338 	ASSERT_PTR_EQ(k1->rsa->p, NULL);
342 	ASSERT_INT_EQ(sshkey_equal(kr, k1), 1);
343 	sshkey_free(k1);
347 	ASSERT_INT_EQ(sshkey_demote(kd, &k1), 0);
348 	ASSERT_PTR_NE(k1, NULL);
349 	ASSERT_PTR_NE(kd, k1);
350 	ASSERT_INT_EQ(k1->type, KEY_DSA);
351 	ASSERT_PTR_NE(k1->dsa, NULL);
352 	ASSERT_PTR_NE(k1->dsa->g, NULL);
353 	ASSERT_PTR_EQ(k1->dsa->priv_key, NULL);
357 	ASSERT_INT_EQ(sshkey_equal(kd, k1), 1);
358 	sshkey_free(k1);
363 	ASSERT_INT_EQ(sshkey_demote(ke, &k1), 0);
364 	ASSERT_PTR_NE(k1, NULL);
365 	ASSERT_PTR_NE(ke, k1);
366 	ASSERT_INT_EQ(k1->type, KEY_ECDSA);
367 	ASSERT_PTR_NE(k1->ecdsa, NULL);
368 	ASSERT_INT_EQ(k1->ecdsa_nid, ke->ecdsa_nid);
370 	ASSERT_PTR_EQ(EC_KEY_get0_private_key(k1->ecdsa), NULL);
374 	ASSERT_INT_EQ(sshkey_equal(ke, k1), 1);
375 	sshkey_free(k1);
380 	ASSERT_INT_EQ(sshkey_demote(kf, &k1), 0);
381 	ASSERT_PTR_NE(k1, NULL);
382 	ASSERT_PTR_NE(kf, k1);
383 	ASSERT_INT_EQ(k1->type, KEY_ED25519);
384 	ASSERT_PTR_NE(k1->ed25519_pk, NULL);
385 	ASSERT_PTR_EQ(k1->ed25519_sk, NULL);
389 	ASSERT_INT_EQ(sshkey_equal(kf, k1), 1);
390 	sshkey_free(k1);
404 	ASSERT_INT_EQ(sshkey_generate(KEY_RSA, 1024, &k1), 0);
405 	ASSERT_INT_EQ(sshkey_equal(kr, k1), 0);
406 	sshkey_free(k1);
407 	ASSERT_INT_EQ(sshkey_generate(KEY_DSA, 1024, &k1), 0);
408 	ASSERT_INT_EQ(sshkey_equal(kd, k1), 0);
409 	sshkey_free(k1);
411 	ASSERT_INT_EQ(sshkey_generate(KEY_ECDSA, 256, &k1), 0);
412 	ASSERT_INT_EQ(sshkey_equal(ke, k1), 0);
413 	sshkey_free(k1);
415 	ASSERT_INT_EQ(sshkey_generate(KEY_ED25519, 256, &k1), 0);
416 	ASSERT_INT_EQ(sshkey_equal(kf, k1), 0);
417 	sshkey_free(k1);
429 	    &k1, NULL), 0);
431 	ASSERT_INT_EQ(sshkey_to_certified(k1), 0);
432 	ASSERT_PTR_NE(k1->cert, NULL);
433 	k1->cert->type = SSH2_CERT_TYPE_USER;
434 	k1->cert->serial = 1234;
435 	k1->cert->key_id = strdup("estragon");
436 	ASSERT_PTR_NE(k1->cert->key_id, NULL);
437 	k1->cert->principals = calloc(4, sizeof(*k1->cert->principals));
438 	ASSERT_PTR_NE(k1->cert->principals, NULL);
439 	k1->cert->principals[0] = strdup("estragon");
440 	k1->cert->principals[1] = strdup("vladimir");
441 	k1->cert->principals[2] = strdup("pozzo");
442 	k1->cert->principals[3] = strdup("lucky");
443 	ASSERT_PTR_NE(k1->cert->principals[0], NULL);
444 	ASSERT_PTR_NE(k1->cert->principals[1], NULL);
445 	ASSERT_PTR_NE(k1->cert->principals[2], NULL);
446 	ASSERT_PTR_NE(k1->cert->principals[3], NULL);
447 	k1->cert->valid_after = 0;
448 	k1->cert->valid_before = (u_int64_t)-1;
449 	k1->cert->critical = sshbuf_new();
450 	ASSERT_PTR_NE(k1->cert->critical, NULL);
451 	k1->cert->extensions = sshbuf_new();
452 	ASSERT_PTR_NE(k1->cert->extensions, NULL);
453 	put_opt(k1->cert->critical, "force-command", "/usr/bin/true");
454 	put_opt(k1->cert->critical, "source-address", "127.0.0.1");
455 	put_opt(k1->cert->extensions, "permit-X11-forwarding", NULL);
456 	put_opt(k1->cert->extensions, "permit-agent-forwarding", NULL);
457 	ASSERT_INT_EQ(sshkey_from_private(k2, &k1->cert->signature_key), 0);
458 	ASSERT_INT_EQ(sshkey_certify(k1, k2), 0);
461 	ASSERT_INT_EQ(sshkey_putb(k1, b), 0);
464 	sshkey_free(k1);
471 	k1 = get_private("rsa_1");
474 	signature_tests(k1, k2, "ssh-rsa");
475 	sshkey_free(k1);
480 	k1 = get_private("rsa_1");
483 	signature_tests(k1, k2, "rsa-sha2-256");
484 	sshkey_free(k1);
489 	k1 = get_private("rsa_1");
492 	signature_tests(k1, k2, "rsa-sha2-512");
493 	sshkey_free(k1);
498 	k1 = get_private("dsa_1");
501 	signature_tests(k1, k2, NULL);
502 	sshkey_free(k1);
508 	k1 = get_private("ecdsa_1");
511 	signature_tests(k1, k2, NULL);
512 	sshkey_free(k1);
518 	k1 = get_private("ed25519_1");
521 	signature_tests(k1, k2, NULL);
522 	sshkey_free(k1);
527 	ASSERT_INT_EQ(sshkey_load_cert(test_data_file("rsa_1"), &k1), 0);
531 	build_cert(b, k2, "ssh-rsa-cert-v01@openssh.com", k3, k1, NULL);
535 	sshkey_free(k1);