mirror of
https://github.com/open62541/open62541.git
synced 2026-10-18 21:52:55 +08:00
Julius Pfrommer
9ae8b76986
We want to have the same default for client and server. So we get less trouble with reusing certificates. Before we had to manually adjust the client URI to say "server". That's not good...
84 lines
3.0 KiB
C
84 lines
3.0 KiB
C
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
*
|
|
* Copyright 2021 (c) Christian von Arnim, ISW University of Stuttgart (for VDW and umati)
|
|
*/
|
|
|
|
#include <open62541/server_config_default.h>
|
|
#include <open62541/plugin/log_stdout.h>
|
|
#include <open62541/plugin/create_certificate.h>
|
|
|
|
#include <check.h>
|
|
#include "test_helpers.h"
|
|
|
|
UA_Server *server;
|
|
|
|
static void setup(void) {
|
|
server = UA_Server_newForUnitTest();
|
|
ck_assert(server != NULL);
|
|
}
|
|
|
|
static void teardown(void) {
|
|
UA_Server_delete(server);
|
|
}
|
|
|
|
START_TEST(certificate_generation) {
|
|
UA_ByteString derPrivKey = UA_BYTESTRING_NULL;
|
|
UA_ByteString derCert = UA_BYTESTRING_NULL;
|
|
UA_String subject[3] = {UA_STRING_STATIC("C=DE"),
|
|
UA_STRING_STATIC("O=SampleOrganization"),
|
|
UA_STRING_STATIC("CN=Open62541Server@localhost")};
|
|
UA_UInt32 lenSubject = 3;
|
|
UA_String subjectAltName[2]= {
|
|
UA_STRING_STATIC("DNS:localhost"),
|
|
UA_STRING_STATIC("URI:urn:open62541.unconfigured.application")
|
|
};
|
|
UA_UInt32 lenSubjectAltName = 2;
|
|
UA_KeyValueMap *kvm = UA_KeyValueMap_new();
|
|
UA_UInt16 expiresIn = 14;
|
|
UA_KeyValueMap_setScalar(kvm, UA_QUALIFIEDNAME(0, "expires-in-days"),
|
|
(void *)&expiresIn, &UA_TYPES[UA_TYPES_UINT16]);
|
|
UA_UInt16 keyLength = 2048;
|
|
UA_KeyValueMap_setScalar(kvm, UA_QUALIFIEDNAME(0, "key-size-bits"),
|
|
(void *)&keyLength, &UA_TYPES[UA_TYPES_UINT16]);
|
|
UA_StatusCode status = UA_CreateCertificate(
|
|
UA_Log_Stdout, subject, lenSubject, subjectAltName, lenSubjectAltName,
|
|
UA_CERTIFICATEFORMAT_DER, kvm, &derPrivKey, &derCert);
|
|
UA_KeyValueMap_delete(kvm);
|
|
ck_assert(status == UA_STATUSCODE_GOOD);
|
|
ck_assert(derPrivKey.length > 0);
|
|
ck_assert(derCert.length > 0);
|
|
|
|
UA_ServerConfig *config = UA_Server_getConfig(server);
|
|
status = UA_ServerConfig_setDefaultWithSecurityPolicies(config, 4840, &derCert, &derPrivKey,
|
|
NULL, 0, NULL, 0, NULL, 0);
|
|
config->tcpReuseAddr = true;
|
|
ck_assert(status == UA_STATUSCODE_GOOD);
|
|
|
|
UA_ByteString_clear(&derCert);
|
|
UA_ByteString_clear(&derPrivKey);
|
|
}
|
|
END_TEST
|
|
|
|
static Suite* testSuite_create_certificate(void) {
|
|
Suite *s = suite_create("Create Certificate");
|
|
TCase *tc_cert = tcase_create("Certificate Create");
|
|
tcase_add_checked_fixture(tc_cert, setup, teardown);
|
|
#ifdef UA_ENABLE_ENCRYPTION
|
|
tcase_add_test(tc_cert, certificate_generation);
|
|
#endif /* UA_ENABLE_ENCRYPTION */
|
|
suite_add_tcase(s,tc_cert);
|
|
return s;
|
|
}
|
|
|
|
int main(void) {
|
|
Suite *s = testSuite_create_certificate();
|
|
SRunner *sr = srunner_create(s);
|
|
srunner_set_fork_status(sr, CK_NOFORK);
|
|
srunner_run_all(sr,CK_NORMAL);
|
|
int number_failed = srunner_ntests_failed(sr);
|
|
srunner_free(sr);
|
|
return (number_failed == 0) ? EXIT_SUCCESS : EXIT_FAILURE;
|
|
}
|