1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
|
/***************************************************************************/
/* Copyright (c) 2024 Microsoft Corporation */
/* Copyright (c) 2026 Eclipse ThreadX contributors */
/* */
/* This program and the accompanying materials are made available under */
/* the terms of the MIT License which is available at */
/* https://opensource.org/licenses/MIT. */
/* */
/* SPDX-License-Identifier: MIT */
/***************************************************************************/
#include <stdio.h>
#include "nx_secure_tls_api.h"
#include "tls_test_utility.h"
extern void test_control_return(UINT status);
void NX_Secure_TLS_AlertTest();
#ifdef CTEST
void test_application_define(void *first_unused_memory);
void test_application_define(void *first_unused_memory)
#else
void nx_secure_tls_alert_test_application_define(void *first_unused_memory)
#endif
{
/* Print out test information banner. */
printf("NetX Secure Test: TLS Alert mapping Test.............................");
NX_Secure_TLS_AlertTest();
printf("SUCCESS!\n");
test_control_return(0);
}
#define TLS_ALERT_TEST(error, expected_alert, expected_level) \
_nx_secure_tls_map_error_to_alert(error, &alert_number, &alert_level); \
EXPECT_EQ(expected_alert, alert_number); \
EXPECT_EQ(expected_level, alert_level);
TEST(NX_Secure_TLS, AlertTest)
{
UINT alert_number;
UINT alert_level;
/* Unsupported or otherwise incorrect alerts.
NX_SECURE_TLS_ALERT_EXPORT_RESTRICTION_RESERVED
NX_SECURE_TLS_ALERT_INSUFFICIENT_SECURITY
NX_SECURE_TLS_ALERT_USER_CANCELED
NX_SECURE_TLS_ALERT_ACCESS_DENIED
NX_SECURE_TLS_ALERT_DECRYPTION_FAILED_RESERVED
NX_SECURE_TLS_ALERT_RECORD_OVERFLOW
NX_SECURE_TLS_ALERT_DECOMPRESSION_FAILURE
NX_SECURE_TLS_ALERT_NO_CERTIFICATE_RESERVED
NX_SECURE_TLS_ALERT_UNSUPPORTED_EXTENSION
*/
/* Unexpected message alerts. */
TLS_ALERT_TEST(NX_SECURE_TLS_UNRECOGNIZED_MESSAGE_TYPE, NX_SECURE_TLS_ALERT_UNEXPECTED_MESSAGE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_ALERT_RECEIVED , NX_SECURE_TLS_ALERT_UNEXPECTED_MESSAGE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_BAD_CIPHERSPEC , NX_SECURE_TLS_ALERT_UNEXPECTED_MESSAGE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
/* Hash or decryption failures. */
TLS_ALERT_TEST(NX_SECURE_TLS_HASH_MAC_VERIFY_FAILURE , NX_SECURE_TLS_ALERT_BAD_RECORD_MAC, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_AEAD_DECRYPT_FAIL, NX_SECURE_TLS_ALERT_BAD_RECORD_MAC, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_PADDING_CHECK_FAILED, NX_SECURE_TLS_ALERT_BAD_RECORD_MAC, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
/* General handshake failures. */
TLS_ALERT_TEST(NX_SECURE_TLS_UNKNOWN_CIPHERSUITE, NX_SECURE_TLS_ALERT_HANDSHAKE_FAILURE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_UNSUPPORTED_CIPHER, NX_SECURE_TLS_ALERT_HANDSHAKE_FAILURE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_HANDSHAKE_FAILURE, NX_SECURE_TLS_ALERT_HANDSHAKE_FAILURE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_NO_SUPPORTED_CIPHERS, NX_SECURE_TLS_ALERT_HANDSHAKE_FAILURE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
/* Invalid certificate issues. */
TLS_ALERT_TEST(NX_SECURE_TLS_INVALID_SERVER_CERT, NX_SECURE_TLS_ALERT_BAD_CERTIFICATE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_INVALID_CERTIFICATE, NX_SECURE_TLS_ALERT_BAD_CERTIFICATE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_CERTIFICATE_SIG_CHECK_FAILED, NX_SECURE_TLS_ALERT_BAD_CERTIFICATE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_CERTIFICATE_NOT_FOUND, NX_SECURE_TLS_ALERT_BAD_CERTIFICATE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_X509_WRONG_SIGNATURE_METHOD, NX_SECURE_TLS_ALERT_BAD_CERTIFICATE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_X509_INVALID_DATE_FORMAT, NX_SECURE_TLS_ALERT_BAD_CERTIFICATE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_X509_ASN1_LENGTH_TOO_LONG, NX_SECURE_TLS_ALERT_BAD_CERTIFICATE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_X509_PKCS7_PARSING_FAILED, NX_SECURE_TLS_ALERT_BAD_CERTIFICATE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
/* Unsupported certificate issues (unsupported ciphers and signature types). */
TLS_ALERT_TEST(NX_SECURE_TLS_UNSUPPORTED_PUBLIC_CIPHER, NX_SECURE_TLS_ALERT_UNSUPPORTED_CERTIFICATE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_UNSUPPORTED_CERT_SIGN_TYPE, NX_SECURE_TLS_ALERT_UNSUPPORTED_CERTIFICATE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_UNSUPPORTED_CERT_SIGN_ALG, NX_SECURE_TLS_ALERT_UNSUPPORTED_CERTIFICATE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
/* A certificate was revoked by its signer. */
TLS_ALERT_TEST(NX_SECURE_X509_CRL_CERTIFICATE_REVOKED, NX_SECURE_TLS_ALERT_CERTIFICATE_REVOKED, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
/* A certificate has expired or is not yet valid. */
TLS_ALERT_TEST(NX_SECURE_X509_CERTIFICATE_EXPIRED, NX_SECURE_TLS_ALERT_CERTIFICATE_EXPIRED, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_X509_CERTIFICATE_NOT_YET_VALID, NX_SECURE_TLS_ALERT_CERTIFICATE_EXPIRED, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
/* Unknown certificate issues - the certificate was unsupported but for some odd reason (or it was self-signed). */
TLS_ALERT_TEST(NX_SECURE_TLS_INVALID_SELF_SIGNED_CERT, NX_SECURE_TLS_ALERT_CERTIFICATE_UNKNOWN, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_UNKNOWN_CERT_SIG_ALGORITHM, NX_SECURE_TLS_ALERT_CERTIFICATE_UNKNOWN, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
/* Illegal parameters - bad compression method, etc. */
TLS_ALERT_TEST(NX_SECURE_TLS_BAD_COMPRESSION_METHOD, NX_SECURE_TLS_ALERT_ILLEGAL_PARAMETER, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
/* The issuer for a received certificate was not found in our local store. */
TLS_ALERT_TEST(NX_SECURE_TLS_ISSUER_CERTIFICATE_NOT_FOUND, NX_SECURE_TLS_ALERT_UNKNOWN_CA, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_X509_CHAIN_VERIFY_FAILURE, NX_SECURE_TLS_ALERT_UNKNOWN_CA, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
/* Some type of decoding error happened with a received message. */
TLS_ALERT_TEST(NX_SECURE_TLS_INCORRECT_MESSAGE_LENGTH, NX_SECURE_TLS_ALERT_DECODE_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
/* Decryption error in processing a message. */
TLS_ALERT_TEST(NX_SECURE_TLS_FINISHED_HASH_FAILURE, NX_SECURE_TLS_ALERT_DECRYPT_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_SIGNATURE_VERIFICATION_ERROR, NX_SECURE_TLS_ALERT_DECRYPT_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
/* We received a protocol version that we understand but that version is not supported/enabled. */
TLS_ALERT_TEST(NX_SECURE_TLS_PROTOCOL_VERSION_CHANGED, NX_SECURE_TLS_ALERT_PROTOCOL_VERSION, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_UNSUPPORTED_TLS_VERSION, NX_SECURE_TLS_ALERT_PROTOCOL_VERSION, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_UNKNOWN_TLS_VERSION, NX_SECURE_TLS_ALERT_PROTOCOL_VERSION, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
/* Re-negotiation issues - the client may opt to decline a Hello Request message. */
TLS_ALERT_TEST(NX_SECURE_TLS_NO_RENEGOTIATION_ERROR, NX_SECURE_TLS_ALERT_NO_RENEGOTIATION, NX_SECURE_TLS_ALERT_LEVEL_WARNING);
/* Unknown PSK errors. */
TLS_ALERT_TEST(NX_SECURE_TLS_NO_MATCHING_PSK, NX_SECURE_TLS_ALERT_UNKNOWN_PSK_IDENTITY, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
/* Unexpected messages. */
TLS_ALERT_TEST(NX_SECURE_TLS_UNEXPECTED_MESSAGE, NX_SECURE_TLS_ALERT_UNEXPECTED_MESSAGE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
/* Bad certificate issues. */
TLS_ALERT_TEST(NX_SECURE_TLS_CERTIFICATE_VERIFY_FAILURE, NX_SECURE_TLS_ALERT_BAD_CERTIFICATE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_EMPTY_REMOTE_CERTIFICATE_RECEIVED, NX_SECURE_TLS_ALERT_BAD_CERTIFICATE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
/* Renegotiation errors. */
TLS_ALERT_TEST(NX_SECURE_TLS_RENEGOTIATION_FAILURE, NX_SECURE_TLS_ALERT_NO_RENEGOTIATION, NX_SECURE_TLS_ALERT_LEVEL_WARNING);
/* Fallback (TLS protocol version) errors. */
TLS_ALERT_TEST(NX_SECURE_TLS_INAPPROPRIATE_FALLBACK, NX_SECURE_TLS_ALERT_INAPPROPRIATE_FALLBACK, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
/* Missing extensions, groups, verification errors resulting in handshake failure. */
TLS_ALERT_TEST(NX_SECURE_TLS_EXTENSION_NOT_FOUND, NX_SECURE_TLS_ALERT_HANDSHAKE_FAILURE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_SNI_EXTENSION_INVALID, NX_SECURE_TLS_ALERT_HANDSHAKE_FAILURE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_EMPTY_EC_GROUP, NX_SECURE_TLS_ALERT_HANDSHAKE_FAILURE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_EMPTY_EC_POINT_FORMAT, NX_SECURE_TLS_ALERT_HANDSHAKE_FAILURE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_UNSUPPORTED_ECC_CURVE, NX_SECURE_TLS_ALERT_HANDSHAKE_FAILURE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_UNSUPPORTED_ECC_FORMAT, NX_SECURE_TLS_ALERT_HANDSHAKE_FAILURE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_UNSUPPORTED_SIGNATURE_ALGORITHM, NX_SECURE_TLS_ALERT_HANDSHAKE_FAILURE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_UNSUPPORTED_FEATURE , NX_SECURE_TLS_ALERT_HANDSHAKE_FAILURE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_RENEGOTIATION_SESSION_INACTIVE, NX_SECURE_TLS_ALERT_HANDSHAKE_FAILURE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_RENEGOTIATION_EXTENSION_ERROR, NX_SECURE_TLS_ALERT_HANDSHAKE_FAILURE, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
/* Record overflow. */
TLS_ALERT_TEST(NX_SECURE_TLS_RECORD_OVERFLOW, NX_SECURE_TLS_ALERT_RECORD_OVERFLOW, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
/* Internal errors. */
TLS_ALERT_TEST(NX_SECURE_TLS_ALLOCATE_PACKET_FAILED , NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_SESSION_UNINITIALIZED , NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_INVALID_STATE , NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_INVALID_PACKET , NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_NEED_DTLS_SESSION , NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_NEED_TLS_SESSION , NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_INSUFFICIENT_CERT_SPACE , NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_TCP_SEND_FAILED , NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_NO_CLOSE_RESPONSE , NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_NO_MORE_PSK_SPACE , NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_NO_CERT_SPACE_ALLOCATED , NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_CLOSE_NOTIFY_RECEIVED , NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_CRYPTO_KEYS_TOO_LARGE , NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_PACKET_BUFFER_TOO_SMALL , NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_CERT_ID_INVALID , NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_CERT_ID_DUPLICATE , NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_MISSING_CRYPTO_ROUTINE , NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
/* DTLS errors. */
TLS_ALERT_TEST(NX_SECURE_TLS_OUT_OF_ORDER_MESSAGE , NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_INVALID_REMOTE_HOST , NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_INVALID_EPOCH , NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_REPEAT_MESSAGE_RECEIVED, NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_SEND_ADDRESS_MISMATCH , NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_NO_FREE_DTLS_SESSIONS , NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_DTLS_SESSION_NOT_FOUND , NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_NO_AVAILABLE_SESSIONS , NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
TLS_ALERT_TEST(NX_SECURE_TLS_SUCCESS, NX_SECURE_TLS_ALERT_INTERNAL_ERROR, NX_SECURE_TLS_ALERT_LEVEL_FATAL);
}
|
