contrib/wpa_supplicant/wpa_supplicant/tests/test_x509v3.c

   1 /*
   2  * Testing tool for X.509v3 routines
   3  * Copyright (c) 2006-2007, Jouni Malinen <j@w1.fi>
   4  *
   5  * This program is free software; you can redistribute it and/or modify
   6  * it under the terms of the GNU General Public License version 2 as
   7  * published by the Free Software Foundation.
   8  *
   9  * Alternatively, this software may be distributed under the terms of BSD
  10  * license.
  11  *
  12  * See README and COPYING for more details.
  13  */
  14
  15 #include "includes.h"
  16
  17 #include "common.h"
  18 #include "tls/asn1.h"
  19 #include "tls/x509v3.h"
  20
  21 extern int wpa_debug_level;
  22
  23
  24 int main(int argc, char *argv[])
  25 {
  26         char *buf;
  27         size_t len;
  28         struct x509_certificate *certs = NULL, *last = NULL, *cert;
  29         int i, reason;
  30
  31         wpa_debug_level = 0;
  32
  33         if (argc < 3 || strcmp(argv[1], "-v") != 0) {
  34                 printf("usage: test_x509v3 -v <cert1.der> <cert2.der> ..\n");
  35                 return -1;
  36         }
  37
  38         for (i = 2; i < argc; i++) {
  39                 printf("Reading: %s\n", argv[i]);
  40                 buf = os_readfile(argv[i], &len);
  41                 if (buf == NULL) {
  42                         printf("Failed to read '%s'\n", argv[i]);
  43                         return -1;
  44                 }
  45
  46                 cert = x509_certificate_parse((u8 *) buf, len);
  47                 if (cert == NULL) {
  48                         printf("Failed to parse X.509 certificate\n");
  49                         return -1;
  50                 }
  51
  52                 free(buf);
  53
  54                 if (certs == NULL)
  55                         certs = cert;
  56                 else
  57                         last->next = cert;
  58                 last = cert;
  59         }
  60
  61         printf("\n\nValidating certificate chain\n");
  62         if (x509_certificate_chain_validate(last, certs, &reason) < 0) {
  63                 printf("\nCertificate chain validation failed: %d\n", reason);
  64                 return -1;
  65         }
  66         printf("\nCertificate chain is valid\n");
  67
  68         return 0;
  69 }