diff options
| author | Nikos Mavrogiannopoulos <nmav@redhat.com> | 2017-11-30 15:08:22 +0100 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2017-12-03 20:32:15 +0100 |
| commit | 752a21f88e2bea8e4bfaf2690fabf3868c4a6d52 (patch) | |
| tree | 3f8cd68681acfb73da11bd66d2fcc7d3908e5109 /tests/pkcs11 | |
| parent | b344a90a42570df5c8c7c256cc17e23e3ac6d446 (diff) | |
| download | gnutls-752a21f88e2bea8e4bfaf2690fabf3868c4a6d52.tar.gz | |
tests: enhanced pkcs11/list-tokens
This not only creates a trust list with the system certificates, but
also attempts to verify a certificate, increasing the number of calls
to PKCS#11 verification API (and thus ensuring there are no calls
which may trigger the load of other modules).
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
Diffstat (limited to 'tests/pkcs11')
| -rw-r--r-- | tests/pkcs11/list-tokens.c | 16 |
1 files changed, 12 insertions, 4 deletions
diff --git a/tests/pkcs11/list-tokens.c b/tests/pkcs11/list-tokens.c index 220b9de763..6929b2381b 100644 --- a/tests/pkcs11/list-tokens.c +++ b/tests/pkcs11/list-tokens.c @@ -35,6 +35,7 @@ #include <gnutls/abstract.h> #include <getopt.h> #include <assert.h> +#include "cert-common.h" /* lists the registered PKCS#11 modules by p11-kit. */ @@ -55,8 +56,10 @@ int main(int argc, char **argv) unsigned i; int opt; char *url; - gnutls_certificate_credentials_t cred; + gnutls_x509_trust_list_t tl; + gnutls_x509_crt_t crt; unsigned flag = 1; + unsigned int status; ret = gnutls_global_init(); if (ret != 0) { @@ -100,9 +103,14 @@ int main(int argc, char **argv) break; case 'v': /* do verification which should trigger trusted module loading */ - assert(gnutls_certificate_allocate_credentials(&cred) >= 0); - assert(gnutls_certificate_set_x509_system_trust(cred) >= 0); - gnutls_certificate_free_credentials(cred); + assert(gnutls_x509_crt_init(&crt) >= 0); + assert(gnutls_x509_crt_import(crt, &ca3_cert, GNUTLS_X509_FMT_PEM) >= 0); + + assert(gnutls_x509_trust_list_init(&tl, 0) >= 0); + assert(gnutls_x509_trust_list_add_system_trust(tl, 0, 0) >= 0); + gnutls_x509_trust_list_verify_crt2(tl, &crt, 1, NULL, 0, 0, &status, NULL); + gnutls_x509_trust_list_deinit(tl, 1); + gnutls_x509_crt_deinit(crt); break; default: fprintf(stderr, "Unknown option %c\n", (char)opt); |