1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
|
/***************************************************************************/
/* Copyright (c) 2024 Microsoft Corporation */
/* Copyright (c) 2026 Eclipse ThreadX contributors */
/* */
/* This program and the accompanying materials are made available under */
/* the terms of the MIT License which is available at */
/* https://opensource.org/licenses/MIT. */
/* */
/* SPDX-License-Identifier: MIT */
/***************************************************************************/
/* This test concentrates on process Finished message. */
#include "nx_api.h"
#include "nx_secure_tls_api.h"
#include "tls_test_utility.h"
/* Test basic X509 parsing with an example certificates. */
#include "test_ca_cert.c"
extern VOID test_control_return(UINT status);
#ifndef NX_SECURE_DISABLE_X509
#define METADATA_SIZE 16000
extern NX_SECURE_TLS_CRYPTO nx_crypto_tls_ciphers;
extern NX_SECURE_TLS_CIPHERSUITE_INFO _nx_crypto_ciphersuite_lookup_table[];
#ifdef CTEST
void test_application_define(void *first_unused_memory);
void test_application_define(void *first_unused_memory)
#else
VOID nx_secure_tls_process_finished_test_application_define(void *first_unused_memory)
#endif
{
UINT status;
NX_SECURE_TLS_SESSION tls_session;
UCHAR tls_session_metadata[METADATA_SIZE];
UCHAR packet_buffer[NX_SECURE_TLS_FINISHED_HASH_SIZE] = {0x14, 0xf4, 0xc9, 0x5a, 0xd9, 0x10, 0xc4, 0x22, 0x33, 0x20, 0xb8, 0x1};
NX_SECURE_X509_CERTIFICATE_STORE store;
NX_SECURE_X509_CERT certificate;
/* Print out test information banner. */
printf("NetX Secure Test: TLS Process Finished Test....................");
memset(tls_session_metadata, 0, sizeof(tls_session_metadata));
status = nx_secure_tls_session_create(&tls_session,
&nx_crypto_tls_ciphers,
tls_session_metadata,
sizeof(tls_session_metadata));
EXPECT_EQ(NX_SECURE_TLS_SUCCESS, status);
memset(&store, 0, sizeof(NX_SECURE_X509_CERTIFICATE_STORE));
status = nx_secure_x509_certificate_initialize(&certificate, test_ca_cert_der, test_ca_cert_der_len, NX_NULL, 0, NX_NULL, 0, NX_SECURE_X509_KEY_TYPE_NONE);
EXPECT_EQ(NX_SUCCESS, status);
/* Add our certificates to the store. */
status = _nx_secure_x509_store_certificate_add(&certificate, &store, NX_SECURE_X509_CERT_LOCATION_REMOTE);
EXPECT_EQ(NX_SUCCESS, status);
status = _nx_secure_x509_store_certificate_add(&certificate, &store, NX_SECURE_X509_CERT_LOCATION_FREE);
certificate.nx_secure_x509_user_allocated_cert = NX_TRUE;
tls_session.nx_secure_tls_credentials.nx_secure_tls_certificate_store = store;
tls_session.nx_secure_tls_protocol_version = NX_SECURE_TLS_VERSION_TLS_1_2;
tls_session.nx_secure_tls_remote_session_active = NX_TRUE;
tls_session.nx_secure_tls_received_remote_credentials = NX_TRUE;
tls_session.nx_secure_tls_session_ciphersuite = _nx_crypto_ciphersuite_lookup_table;
status = _nx_secure_tls_process_finished(&tls_session, packet_buffer, sizeof(packet_buffer));
EXPECT_EQ(NX_INVALID_PARAMETERS, status);
printf("SUCCESS!\n");
test_control_return(0);
}
#else
#ifdef CTEST
void test_application_define(void *first_unused_memory);
void test_application_define(void *first_unused_memory)
#else
VOID nx_secure_tls_process_finished_test_application_define(void *first_unused_memory)
#endif
{
/* Print out test information banner. */
printf("NetX Secure Test: TLS Process Finished Test....................N/A\n");
test_control_return(3);
}
#endif
|
