abc/GmSSL
1
0
Fork 0
mirror of https://github.com/guanzhi/GmSSL.git synced 2026-06-27 15:43:42 +08:00
Code Issues Packages Projects Releases Wiki Activity

Update X509 basic constraints

Browse Source
This commit is contained in:
Zhi Guan
2026-06-19 10:23:37 +08:00
parent c65edf1042
commit f48af14b2b
5 changed files with 293 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
tests/x509_vrftest.c
View File

@@ -268,6 +268,11 @@ static int test_x509_cert_is_signed_by_root_ca_cert(void)
size_t leaf_len;
uint8_t leaf_wrong_aki_issuer[2048];
size_t leaf_wrong_aki_issuer_len;
uint8_t rootcacerts[8192];
size_t rootcacertslen;
uint8_t *p;
const uint8_t *found_root;
size_t found_root_len;
if (set_x509_name_cn(root_name, &root_name_len, sizeof(root_name), "Root CA") != 1
|| set_x509_name_cn(other_name, &other_name_len, sizeof(other_name), "Other Root CA") != 1
@@ -332,6 +337,35 @@ static int test_x509_cert_is_signed_by_root_ca_cert(void)
return -1;
}
found_root = good_root;
found_root_len = good_root_len;
if (x509_cert_chain_find_root_ca_cert(leaf, leaf_len,
wrong_name_root, wrong_name_root_len,
&found_root, &found_root_len,
SM2_DEFAULT_ID, strlen(SM2_DEFAULT_ID)) != 0
|| found_root != NULL
|| found_root_len != 0) {
error_print();
return -1;
}
p = rootcacerts;
rootcacertslen = 0;
if (x509_cert_to_der(wrong_name_root, wrong_name_root_len, &p, &rootcacertslen) != 1
|| x509_cert_to_der(good_root, good_root_len, &p, &rootcacertslen) != 1) {
error_print();
return -1;
}
if (x509_cert_chain_find_root_ca_cert(leaf, leaf_len,
rootcacerts, rootcacertslen,
&found_root, &found_root_len,
SM2_DEFAULT_ID, strlen(SM2_DEFAULT_ID)) != 1
|| found_root_len != good_root_len
|| memcmp(found_root, good_root, good_root_len) != 0) {
error_print();
return -1;
}
printf("%s() ok\n", __FUNCTION__);
return 1;
}