/*	$OpenBSD: x509_algor.c,v 1.7 2024/02/29 20:03:47 tb Exp $ */
/*
 * Copyright (c) 2023 Theo Buehler <tb@openbsd.org>
 *
 * Permission to use, copy, modify, and distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 */

#include <err.h>
#include <stdio.h>

#include <openssl/asn1.h>
#include <openssl/evp.h>
#include <openssl/objects.h>
#include <openssl/x509.h>

int X509_ALGOR_set_evp_md(X509_ALGOR *alg, const EVP_MD *md);

static int
x509_algor_new_test(void)
{
	X509_ALGOR *alg = NULL;
	const ASN1_OBJECT *aobj;
	int failed = 1;

	if ((alg = X509_ALGOR_new()) == NULL)
		errx(1, "%s: X509_ALGOR_new", __func__);

	if ((aobj = OBJ_nid2obj(NID_undef)) == NULL)
		errx(1, "%s: OBJ_nid2obj", __func__);

	if (alg->algorithm != aobj) {
		fprintf(stderr, "FAIL: %s: want NID_undef OID\n", __func__);
		goto failure;
	}
	if (alg->parameter != NULL) {
		fprintf(stderr, "FAIL: %s: want NULL parameters\n", __func__);
		goto failure;
	}

	failed = 0;

 failure:
	X509_ALGOR_free(alg);

	return failed;
}

static int
x509_algor_set0_test(void)
{
	X509_ALGOR *alg = NULL;
	ASN1_TYPE *old_parameter;
	ASN1_OBJECT *oid;
	ASN1_INTEGER *aint = NULL, *aint_ref;
	int ret;
	int failed = 1;

	if ((ret = X509_ALGOR_set0(NULL, NULL, 0, NULL)) != 0) {
		fprintf(stderr, "FAIL: %s: X509_ALGOR_set0(NULL, NULL, 0, NULL)"
		    ", want: %d, got %d\n", __func__, 0, ret);
		goto failure;
	}

	if ((alg = X509_ALGOR_new()) == NULL)
		errx(1, "%s: X509_ALGOR_new", __func__);

	/* This sets algorithm to NULL and allocates new parameters. */
	if ((ret = X509_ALGOR_set0(alg, NULL, 0, NULL)) != 1) {
		fprintf(stderr, "FAIL: %s: X509_ALGOR_set0(alg, NULL, 0, NULL)"
		    ", want: %d, got %d\n", __func__, 1, ret);
		goto failure;
	}
	if (alg->algorithm != NULL) {
		fprintf(stderr, "FAIL: %s: want NULL algorithm after "
		    "X509_ALGOR_set0(alg, NULL, 0, NULL)\n", __func__);
		goto failure;
	}
	if ((old_parameter = alg->parameter) == NULL) {
		fprintf(stderr, "FAIL: %s: want non-NULL parameter after "
		    "X509_ALGOR_set0(alg, NULL, 0, NULL)\n", __func__);
		goto failure;
	}
	if (alg->parameter->type != V_ASN1_UNDEF) {
		fprintf(stderr, "FAIL: %s: want %d parameter type after "
		    "X509_ALGOR_set0(alg, NULL, 0, NULL), got %d\n",
		    __func__, V_ASN1_UNDEF, alg->parameter->type);
		goto failure;
	}
	if (alg->parameter->value.ptr != NULL) {
		fprintf(stderr, "FAIL: %s: want NULL parameter value after "
		    "X509_ALGOR_set0(alg, NULL, 0, NULL)\n", __func__);
		goto failure;
	}

	/* This should leave algorithm at NULL and parameters untouched. */
	if ((ret = X509_ALGOR_set0(alg, NULL, 0, NULL)) != 1) {
		fprintf(stderr, "FAIL: %s: X509_ALGOR_set0(alg, NULL, 0, NULL)"
		    ", want: %d, got %d\n", __func__, 1, ret);
		goto failure;
	}
	if (alg->algorithm != NULL) {
		fprintf(stderr, "FAIL: %s: want NULL algorithm after second"
		    "X509_ALGOR_set0(alg, NULL, 0, NULL)\n", __func__);
		goto failure;
	}
	if (alg->parameter != old_parameter) {
		fprintf(stderr, "FAIL: %s: parameter changed after second"
		    "X509_ALGOR_set0(alg, NULL, 0, NULL)\n", __func__);
		goto failure;
	}

	/* This ignores pval (old_parameter). */
	if ((ret = X509_ALGOR_set0(alg, NULL, 0, old_parameter)) != 1) {
		fprintf(stderr, "FAIL: %s: X509_ALGOR_set0(alg, NULL, 0, ptr)"
		    ", want: %d, got %d\n", __func__, 1, ret);
		goto failure;
	}
	if (alg->algorithm != NULL) {
		fprintf(stderr, "FAIL: %s: want NULL algorithm after "
		    "X509_ALGOR_set0(alg, NULL, 0, ptr)\n", __func__);
		goto failure;
	}
	if (alg->parameter == NULL) {
		fprintf(stderr, "FAIL: %s: want non-NULL parameter after "
		    "X509_ALGOR_set0(alg, NULL, 0, ptr)\n", __func__);
		goto failure;
	}
	if (alg->parameter->type != V_ASN1_UNDEF) {
		fprintf(stderr, "FAIL: %s: want %d parameter type after "
		    "X509_ALGOR_set0(alg, NULL, 0, ptr), got %d\n",
		    __func__, V_ASN1_UNDEF, alg->parameter->type);
		goto failure;
	}
	if (alg->parameter->value.ptr != NULL) {
		fprintf(stderr, "FAIL: %s: want NULL parameter value after "
		    "X509_ALGOR_set0(alg, NULL, 0, ptr)\n", __func__);
		goto failure;
	}

	old_parameter = NULL;

	/* This frees parameters and ignores pval. */
	if ((ret = X509_ALGOR_set0(alg, NULL, V_ASN1_UNDEF, NULL)) != 1) {
		fprintf(stderr, "FAIL: %s: "
		    "X509_ALGOR_set0(alg, NULL, V_ASN1_UNDEF, NULL)"
		    ", want: %d, got %d\n", __func__, 1, ret);
		goto failure;
	}
	if (alg->algorithm != NULL) {
		fprintf(stderr, "FAIL: %s: want NULL algorithm after "
		    "X509_ALGOR_set0(alg, NULL, V_ASN1_UNDEF, NULL)\n", __func__);
		goto failure;
	}
	if (alg->parameter != NULL) {
		fprintf(stderr, "FAIL: %s: want NULL parameter after "
		    "X509_ALGOR_set0(alg, NULL, V_ASN1_UNDEF, NULL)\n", __func__);
		goto failure;
	}

	/* This frees parameters and ignores "foo". */
	if ((ret = X509_ALGOR_set0(alg, NULL, V_ASN1_UNDEF, "foo")) != 1) {
		fprintf(stderr, "FAIL: %s: X509_ALGOR_set0(alg, NULL, 0, \"foo\")"
		    ", want: %d, got %d\n", __func__, 1, ret);
		goto failure;
	}
	if (alg->algorithm != NULL) {
		fprintf(stderr, "FAIL: %s: want NULL algorithm after "
		    "X509_ALGOR_set0(alg, NULL, V_ASN1_UNDEF, \"foo\")\n", __func__);
		goto failure;
	}
	if (alg->parameter != NULL) {
		fprintf(stderr, "FAIL: %s: want NULL parameter after "
		    "X509_ALGOR_set0(alg, NULL, V_ASN1_UNDEF, \"foo\")\n", __func__);
		goto failure;
	}

	if ((oid = OBJ_nid2obj(NID_sha512_224)) == NULL) {
		fprintf(stderr, "FAIL: %s: OBJ_nid2obj(NID_sha512_224)\n", __func__);
		goto failure;
	}
	if ((aint = aint_ref = ASN1_INTEGER_new()) == NULL)
		errx(1, "%s: ASN1_INTEGER_new()", __func__);
	if (!ASN1_INTEGER_set_uint64(aint, 57))
		errx(1, "%s: ASN1_INTEGER_set_uint64()", __func__);

	if ((ret = X509_ALGOR_set0(alg, oid, V_ASN1_INTEGER, aint)) != 1) {
		fprintf(stderr, "Fail: %s: "
		    "X509_ALGOR_set0(alg, oid, V_ASN1_INTEGER, aint)"
		    ", want: %d, got %d\n", __func__, 1, ret);
		goto failure;
	}
	aint = NULL;
	if (alg->algorithm != oid) {
		fprintf(stderr, "FAIL: %s: unexpected oid on alg after "
		    "X509_ALGOR_set0(alg, oid, V_ASN1_INTEGER, aint)"
		    ", want: %d, got %d\n", __func__, 1, ret);
		goto failure;
	}
	if (alg->parameter == NULL) {
		fprintf(stderr, "FAIL: %s: expected non-NULL parameter after "
		    "X509_ALGOR_set0(alg, oid, V_ASN1_INTEGER, aint)"
		    ", want: %d, got %d\n", __func__, 1, ret);
		goto failure;
	}
	if (alg->parameter->type != V_ASN1_INTEGER) {
		fprintf(stderr, "FAIL: %s: want %d parameter type after "
		    "X509_ALGOR_set0(alg, oid, V_ASN1_INTEGER, aint), got %d\n",
		    __func__, V_ASN1_INTEGER, alg->parameter->type);
		goto failure;
	}
	if (alg->parameter->value.asn1_string != aint_ref) {
		fprintf(stderr, "FAIL: %s: unexpected parameter value after "
		    "X509_ALGOR_set0(alg, oid, V_ASN1_NULL, aint)\n", __func__);
		goto failure;
	}

	failed = 0;

 failure:
	X509_ALGOR_free(alg);
	ASN1_INTEGER_free(aint);

	return failed;
}

static int
x509_algor_get0_test(void)
{
	X509_ALGOR *alg;
	const ASN1_OBJECT *aobj = NULL;
	int ptype = 0;
	const void *pval = NULL;
	ASN1_OBJECT *oid;
	ASN1_INTEGER *aint = NULL, *aint_ref = NULL;
	int ret;
	int failed = 1;

	if ((alg = X509_ALGOR_new()) == NULL)
		errx(1, "%s: X509_ALGOR_new", __func__);

	X509_ALGOR_get0(&aobj, NULL, NULL, alg);
	if (aobj == NULL) {
		fprintf(stderr, "FAIL: %s: expected non-NULL aobj\n", __func__);
		goto failure;
	}
	X509_ALGOR_get0(NULL, &ptype, NULL, alg);
	if (ptype != V_ASN1_UNDEF) {
		fprintf(stderr, "FAIL: %s: want %d, got %d\n",
		    __func__, V_ASN1_UNDEF, ptype);
		goto failure;
	}

	if ((oid = OBJ_nid2obj(NID_ED25519)) == NULL)
		errx(1, "%s: OBJ_nid2obj(NID_ED25519)", __func__);
	if ((aint = aint_ref = ASN1_INTEGER_new()) == NULL)
		errx(1, "%s: ASN1_INTEGER_new()", __func__);
	if (!ASN1_INTEGER_set_uint64(aint, 99))
		errx(1, "%s: ASN1_INTEGER_set_uint64()", __func__);

	if ((ret = X509_ALGOR_set0(alg, oid, V_ASN1_INTEGER, aint)) != 1) {
		fprintf(stderr, "Fail: %s: "
		    "X509_ALGOR_set0(alg, oid, V_ASN1_INTEGER, aint)"
		    ", want: %d, got %d\n", __func__, 1, ret);
		goto failure;
	}
	aint = NULL;

	X509_ALGOR_get0(&aobj, NULL, NULL, alg);
	if (aobj != oid) {
		fprintf(stderr, "FAIL: %s: expected Ed25519 oid\n", __func__);
		goto failure;
	}
	X509_ALGOR_get0(NULL, &ptype, NULL, alg);
	if (ptype != V_ASN1_INTEGER) {
		fprintf(stderr, "FAIL: %s: expected %d, got %d\n",
		    __func__, V_ASN1_INTEGER, ptype);
		goto failure;
	}
	pval = oid;
	X509_ALGOR_get0(NULL, NULL, &pval, alg);
	if (pval != NULL) {
		fprintf(stderr, "FAIL: %s: got non-NULL pval\n", __func__);
		goto failure;
	}

	aobj = NULL;
	ptype = V_ASN1_UNDEF;
	pval = oid;
	X509_ALGOR_get0(&aobj, &ptype, &pval, alg);
	if (aobj != oid) {
		fprintf(stderr, "FAIL: %s: expected Ed25519 oid 2\n", __func__);
		goto failure;
	}
	if (ptype != V_ASN1_INTEGER) {
		fprintf(stderr, "FAIL: %s: expected %d, got %d 2\n",
		    __func__, V_ASN1_INTEGER, ptype);
		goto failure;
	}
	if (pval != aint_ref) {
		fprintf(stderr, "FAIL: %s: expected ASN.1 integer\n", __func__);
		goto failure;
	}

	failed = 0;

 failure:
	X509_ALGOR_free(alg);
	ASN1_INTEGER_free(aint);

	return failed;
}

static int
x509_algor_set_evp_md_test(void)
{
	X509_ALGOR *alg = NULL;
	const ASN1_OBJECT *aobj;
	int ptype = 0, nid = 0;
	int failed = 1;

	if ((alg = X509_ALGOR_new()) == NULL)
		errx(1, "%s: X509_ALGOR_new", __func__);

	if (!X509_ALGOR_set_evp_md(alg, EVP_sm3())) {
		fprintf(stderr, "%s: X509_ALGOR_set_evp_md to sm3 failed\n",
		    __func__);
		goto failure;
	}
	X509_ALGOR_get0(&aobj, &ptype, NULL, alg);
	if ((nid = OBJ_obj2nid(aobj)) != NID_sm3) {
		fprintf(stderr, "%s: sm3 want %d, got %d\n", __func__,
		    NID_sm3, nid);
		goto failure;
	}
	if (ptype != V_ASN1_UNDEF) {
		fprintf(stderr, "%s: sm3 want %d, got %d\n", __func__,
		    V_ASN1_UNDEF, ptype);
		goto failure;
	}

	/* Preallocate as recommended in the manual. */
	if (!X509_ALGOR_set0(alg, NULL, 0, NULL))
		errx(1, "%s: X509_ALGOR_set0", __func__);

	if (!X509_ALGOR_set_evp_md(alg, EVP_md5())) {
		fprintf(stderr, "%s: X509_ALGOR_set_evp_md to md5 failed\n",
		    __func__);
		goto failure;
	}
	X509_ALGOR_get0(&aobj, &ptype, NULL, alg);
	if ((nid = OBJ_obj2nid(aobj)) != NID_md5) {
		fprintf(stderr, "%s: md5 want %d, got %d\n", __func__,
		    NID_sm3, nid);
		goto failure;
	}
	if (ptype != V_ASN1_NULL) {
		fprintf(stderr, "%s: md5 want %d, got %d\n", __func__,
		    V_ASN1_NULL, ptype);
		goto failure;
	}

	failed = 0;

 failure:
	X509_ALGOR_free(alg);

	return failed;
}

int
main(void)
{
	int failed = 0;

	failed |= x509_algor_new_test();
	failed |= x509_algor_set0_test();
	failed |= x509_algor_get0_test();
	failed |= x509_algor_set_evp_md_test();

	return failed;
}