1*cdf0e10cSrcweir /*************************************************************************
2*cdf0e10cSrcweir *
3*cdf0e10cSrcweir * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
4*cdf0e10cSrcweir *
5*cdf0e10cSrcweir * Copyright 2000, 2010 Oracle and/or its affiliates.
6*cdf0e10cSrcweir *
7*cdf0e10cSrcweir * OpenOffice.org - a multi-platform office productivity suite
8*cdf0e10cSrcweir *
9*cdf0e10cSrcweir * This file is part of OpenOffice.org.
10*cdf0e10cSrcweir *
11*cdf0e10cSrcweir * OpenOffice.org is free software: you can redistribute it and/or modify
12*cdf0e10cSrcweir * it under the terms of the GNU Lesser General Public License version 3
13*cdf0e10cSrcweir * only, as published by the Free Software Foundation.
14*cdf0e10cSrcweir *
15*cdf0e10cSrcweir * OpenOffice.org is distributed in the hope that it will be useful,
16*cdf0e10cSrcweir * but WITHOUT ANY WARRANTY; without even the implied warranty of
17*cdf0e10cSrcweir * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
18*cdf0e10cSrcweir * GNU Lesser General Public License version 3 for more details
19*cdf0e10cSrcweir * (a copy is included in the LICENSE file that accompanied this code).
20*cdf0e10cSrcweir *
21*cdf0e10cSrcweir * You should have received a copy of the GNU Lesser General Public License
22*cdf0e10cSrcweir * version 3 along with OpenOffice.org.  If not, see
23*cdf0e10cSrcweir * <http://www.openoffice.org/license.html>
24*cdf0e10cSrcweir * for a copy of the LGPLv3 License.
25*cdf0e10cSrcweir *
26*cdf0e10cSrcweir ************************************************************************/
27*cdf0e10cSrcweir 
28*cdf0e10cSrcweir #include "precompiled_xmlsecurity.hxx"
29*cdf0e10cSrcweir #include "sal/config.h"
30*cdf0e10cSrcweir #include "test/officeconnection.hxx"
31*cdf0e10cSrcweir 
32*cdf0e10cSrcweir #include <com/sun/star/security/XSanExtension.hpp>
33*cdf0e10cSrcweir #include <com/sun/star/security/ExtAltNameType.hpp>
34*cdf0e10cSrcweir #include <com/sun/star/xml/crypto/XSecurityEnvironment.hpp>
35*cdf0e10cSrcweir #include <com/sun/star/xml/crypto/XSEInitializer.hpp>
36*cdf0e10cSrcweir #include <com/sun/star/xml/crypto/XXMLSecurityContext.hpp>
37*cdf0e10cSrcweir #include <com/sun/star/security/XCertificate.hpp>
38*cdf0e10cSrcweir #include <com/sun/star/lang/XMultiServiceFactory.hpp>
39*cdf0e10cSrcweir #include <com/sun/star/beans/NamedValue.hpp>
40*cdf0e10cSrcweir #include "com/sun/star/uno/XComponentContext.hpp"
41*cdf0e10cSrcweir #include "com/sun/star/uno/Reference.hxx"
42*cdf0e10cSrcweir 
43*cdf0e10cSrcweir #include "cppuhelper/bootstrap.hxx"
44*cdf0e10cSrcweir #include "cppunit/TestAssert.h"
45*cdf0e10cSrcweir #include "cppunit/TestFixture.h"
46*cdf0e10cSrcweir #include "cppunit/extensions/HelperMacros.h"
47*cdf0e10cSrcweir #include "cppunit/plugin/TestPlugIn.h"
48*cdf0e10cSrcweir #include "sal/types.h"
49*cdf0e10cSrcweir #include "comphelper/sequence.hxx"
50*cdf0e10cSrcweir #include <rtl/ustring.hxx>
51*cdf0e10cSrcweir 
52*cdf0e10cSrcweir #include <neon/ne_ssl.h>
53*cdf0e10cSrcweir 
54*cdf0e10cSrcweir using namespace com::sun::star;
55*cdf0e10cSrcweir 
56*cdf0e10cSrcweir #define OID_SUBJECT_ALTERNATIVE_NAME "2.5.29.17"
57*cdf0e10cSrcweir #define SEINITIALIZER_COMPONENT "com.sun.star.xml.crypto.SEInitializer"
58*cdf0e10cSrcweir 
59*cdf0e10cSrcweir 
60*cdf0e10cSrcweir namespace {
61*cdf0e10cSrcweir 
62*cdf0e10cSrcweir 	class Test: public CppUnit::TestFixture {
63*cdf0e10cSrcweir 
64*cdf0e10cSrcweir 	private:
65*cdf0e10cSrcweir 		static uno::Sequence< security::CertAltNameEntry > altNames;
66*cdf0e10cSrcweir 		static bool runOnce;
67*cdf0e10cSrcweir 
68*cdf0e10cSrcweir 		uno::Reference< xml::crypto::XSecurityEnvironment > initUno();
69*cdf0e10cSrcweir 		void init();
70*cdf0e10cSrcweir 		rtl::OString getB64CertFromFile(const char filename[]);
71*cdf0e10cSrcweir 		test::OfficeConnection connection_;
72*cdf0e10cSrcweir 
73*cdf0e10cSrcweir 	public:
74*cdf0e10cSrcweir 
75*cdf0e10cSrcweir 		Test();
76*cdf0e10cSrcweir 
77*cdf0e10cSrcweir 		~Test();
78*cdf0e10cSrcweir 
79*cdf0e10cSrcweir 		virtual void setUp();
80*cdf0e10cSrcweir 
81*cdf0e10cSrcweir 		virtual void tearDown();
82*cdf0e10cSrcweir 
83*cdf0e10cSrcweir 		void test_Others();
84*cdf0e10cSrcweir 
85*cdf0e10cSrcweir 		void test_RFC822();
86*cdf0e10cSrcweir 
87*cdf0e10cSrcweir 		void test_DNS();
88*cdf0e10cSrcweir 
89*cdf0e10cSrcweir 		void test_Direcory();
90*cdf0e10cSrcweir 
91*cdf0e10cSrcweir 		void test_URI();
92*cdf0e10cSrcweir 
93*cdf0e10cSrcweir 		void test_IP();
94*cdf0e10cSrcweir 
95*cdf0e10cSrcweir 		void test_RID();
96*cdf0e10cSrcweir 
97*cdf0e10cSrcweir 		void test_EDI();
98*cdf0e10cSrcweir 
99*cdf0e10cSrcweir 		void test_X400();
100*cdf0e10cSrcweir 
101*cdf0e10cSrcweir 		CPPUNIT_TEST_SUITE(Test);
102*cdf0e10cSrcweir 		CPPUNIT_TEST(test_Others);
103*cdf0e10cSrcweir 		CPPUNIT_TEST(test_RFC822);
104*cdf0e10cSrcweir 		CPPUNIT_TEST(test_DNS);
105*cdf0e10cSrcweir 		CPPUNIT_TEST(test_Direcory);
106*cdf0e10cSrcweir 		CPPUNIT_TEST(test_URI);
107*cdf0e10cSrcweir 		CPPUNIT_TEST(test_IP);
108*cdf0e10cSrcweir 		CPPUNIT_TEST(test_RID);
109*cdf0e10cSrcweir 		CPPUNIT_TEST(test_EDI);
110*cdf0e10cSrcweir 		CPPUNIT_TEST(test_X400);
111*cdf0e10cSrcweir 		CPPUNIT_TEST_SUITE_END();
112*cdf0e10cSrcweir 	};
113*cdf0e10cSrcweir 
114*cdf0e10cSrcweir 	uno::Sequence< security::CertAltNameEntry > Test::altNames;
115*cdf0e10cSrcweir 	bool Test::runOnce = false;
116*cdf0e10cSrcweir 
117*cdf0e10cSrcweir 	CPPUNIT_TEST_SUITE_REGISTRATION(Test);
118*cdf0e10cSrcweir 
119*cdf0e10cSrcweir 	Test::Test()
120*cdf0e10cSrcweir 	{
121*cdf0e10cSrcweir 		if (runOnce)
122*cdf0e10cSrcweir 			return;
123*cdf0e10cSrcweir 		runOnce = true;
124*cdf0e10cSrcweir 		connection_.setUp();
125*cdf0e10cSrcweir 		init();
126*cdf0e10cSrcweir 	}
127*cdf0e10cSrcweir 
128*cdf0e10cSrcweir 	Test::~Test()
129*cdf0e10cSrcweir 	{
130*cdf0e10cSrcweir 		if (runOnce)
131*cdf0e10cSrcweir 		{
132*cdf0e10cSrcweir 			connection_.tearDown();
133*cdf0e10cSrcweir 			runOnce = false;
134*cdf0e10cSrcweir 		}
135*cdf0e10cSrcweir 	}
136*cdf0e10cSrcweir 
137*cdf0e10cSrcweir 
138*cdf0e10cSrcweir 	uno::Reference< xml::crypto::XSecurityEnvironment > Test::initUno()
139*cdf0e10cSrcweir 	{
140*cdf0e10cSrcweir 		uno::Reference< uno::XComponentContext > context(connection_.getComponentContext(), uno::UNO_QUERY_THROW);
141*cdf0e10cSrcweir 		uno::Reference< lang::XMultiServiceFactory > factory(context->getServiceManager(), uno::UNO_QUERY_THROW);
142*cdf0e10cSrcweir 		uno::Reference< xml::crypto::XSEInitializer > xSEInitializer(factory->createInstance(
143*cdf0e10cSrcweir 			rtl::OUString::createFromAscii( SEINITIALIZER_COMPONENT )),	uno::UNO_QUERY_THROW);
144*cdf0e10cSrcweir 		uno::Reference< xml::crypto::XXMLSecurityContext > xSecurityContext(
145*cdf0e10cSrcweir 			xSEInitializer->createSecurityContext(rtl::OUString()));
146*cdf0e10cSrcweir 		return xSecurityContext->getSecurityEnvironment();
147*cdf0e10cSrcweir 	}
148*cdf0e10cSrcweir 
149*cdf0e10cSrcweir 
150*cdf0e10cSrcweir 	void Test::init()
151*cdf0e10cSrcweir 	{
152*cdf0e10cSrcweir 		uno::Reference< xml::crypto::XSecurityEnvironment > xSecurityEnv = initUno();
153*cdf0e10cSrcweir 		rtl::OString b64Cert(getB64CertFromFile("User_35_Root_11.crt"));
154*cdf0e10cSrcweir 		uno::Reference< security::XCertificate > xCert = xSecurityEnv->createCertificateFromAscii(
155*cdf0e10cSrcweir 			rtl::OStringToOUString( b64Cert, RTL_TEXTENCODING_ASCII_US ) );
156*cdf0e10cSrcweir 		uno::Sequence< uno::Reference< security::XCertificateExtension > > extensions = xCert->getExtensions();
157*cdf0e10cSrcweir 		for (sal_Int32 i = 0 ; i < extensions.getLength(); i++)
158*cdf0e10cSrcweir 		{
159*cdf0e10cSrcweir 			uno::Reference< security::XCertificateExtension >element = extensions[i];
160*cdf0e10cSrcweir 			rtl::OString aId ( (const sal_Char *)element->getExtensionId().getArray(), element->getExtensionId().getLength());
161*cdf0e10cSrcweir 			if (aId.equals(OID_SUBJECT_ALTERNATIVE_NAME))
162*cdf0e10cSrcweir 			{
163*cdf0e10cSrcweir 				uno::Reference< security::XSanExtension > sanExtension ( element, uno::UNO_QUERY );
164*cdf0e10cSrcweir 				altNames = sanExtension->getAlternativeNames();
165*cdf0e10cSrcweir 				break;
166*cdf0e10cSrcweir 			}
167*cdf0e10cSrcweir 		}
168*cdf0e10cSrcweir 	}
169*cdf0e10cSrcweir 
170*cdf0e10cSrcweir 	rtl::OString Test::getB64CertFromFile(const char filename[])
171*cdf0e10cSrcweir 	{
172*cdf0e10cSrcweir 		ne_ssl_certificate* cert = ne_ssl_cert_read(filename);
173*cdf0e10cSrcweir 		char* certExportB64 = ne_ssl_cert_export(cert);
174*cdf0e10cSrcweir 		rtl::OString certB64( certExportB64 );
175*cdf0e10cSrcweir 		return certB64;
176*cdf0e10cSrcweir 	}
177*cdf0e10cSrcweir 
178*cdf0e10cSrcweir 
179*cdf0e10cSrcweir 	void Test::setUp() {
180*cdf0e10cSrcweir 	}
181*cdf0e10cSrcweir 
182*cdf0e10cSrcweir 	void Test::tearDown() {
183*cdf0e10cSrcweir 	}
184*cdf0e10cSrcweir 
185*cdf0e10cSrcweir 	void Test::test_Others() {
186*cdf0e10cSrcweir 		CPPUNIT_ASSERT_ASSERTION_PASS( CPPUNIT_ASSERT( altNames.getLength() > 0 ) );
187*cdf0e10cSrcweir 		for(int n = 1; n < altNames.getLength(); n++)
188*cdf0e10cSrcweir 		{
189*cdf0e10cSrcweir 			if (altNames[n].Type ==  security::ExtAltNameType_OTHER_NAME)
190*cdf0e10cSrcweir 			{
191*cdf0e10cSrcweir 				::com::sun::star::beans::NamedValue otherNameProp;
192*cdf0e10cSrcweir 				if (altNames[n].Value >>= otherNameProp)
193*cdf0e10cSrcweir 				{
194*cdf0e10cSrcweir 					CPPUNIT_ASSERT_EQUAL( rtl::OUString::createFromAscii("1.2.3.4"), otherNameProp.Name);
195*cdf0e10cSrcweir 					uno::Sequence< sal_Int8 > ipAddress;
196*cdf0e10cSrcweir 					otherNameProp.Value >>= ipAddress;
197*cdf0e10cSrcweir 					CPPUNIT_ASSERT_ASSERTION_PASS( CPPUNIT_ASSERT( ipAddress.getLength() > 0 ) );
198*cdf0e10cSrcweir 				}
199*cdf0e10cSrcweir 			}
200*cdf0e10cSrcweir 		}
201*cdf0e10cSrcweir 	}
202*cdf0e10cSrcweir 
203*cdf0e10cSrcweir 	void Test::test_RFC822() {
204*cdf0e10cSrcweir 		CPPUNIT_ASSERT_ASSERTION_PASS( CPPUNIT_ASSERT( altNames.getLength() > 0 ) );
205*cdf0e10cSrcweir 		for(int n = 1; n < altNames.getLength(); n++)
206*cdf0e10cSrcweir 		{
207*cdf0e10cSrcweir 			if (altNames[n].Type ==  security::ExtAltNameType_RFC822_NAME)
208*cdf0e10cSrcweir 			{
209*cdf0e10cSrcweir 				rtl::OUString value;
210*cdf0e10cSrcweir 				altNames[n].Value >>= value;
211*cdf0e10cSrcweir 				CPPUNIT_ASSERT_EQUAL( rtl::OUString::createFromAscii("my@other.address"), value);
212*cdf0e10cSrcweir 			}
213*cdf0e10cSrcweir 		}
214*cdf0e10cSrcweir 	}
215*cdf0e10cSrcweir 
216*cdf0e10cSrcweir 	void Test::test_DNS() {
217*cdf0e10cSrcweir 		CPPUNIT_ASSERT_ASSERTION_PASS( CPPUNIT_ASSERT( altNames.getLength() > 0 ) );
218*cdf0e10cSrcweir 		for(int n = 1; n < altNames.getLength(); n++)
219*cdf0e10cSrcweir 		{
220*cdf0e10cSrcweir 			if (altNames[n].Type ==  security::ExtAltNameType_DNS_NAME)
221*cdf0e10cSrcweir 			{
222*cdf0e10cSrcweir 				rtl::OUString value;
223*cdf0e10cSrcweir 				altNames[n].Value >>= value;
224*cdf0e10cSrcweir 				CPPUNIT_ASSERT_EQUAL( rtl::OUString::createFromAscii("alt.openoffice.org"), value);
225*cdf0e10cSrcweir 			}
226*cdf0e10cSrcweir 		}
227*cdf0e10cSrcweir 	}
228*cdf0e10cSrcweir 
229*cdf0e10cSrcweir 	void Test::test_Direcory() {
230*cdf0e10cSrcweir 		// Not implemented
231*cdf0e10cSrcweir 	}
232*cdf0e10cSrcweir 
233*cdf0e10cSrcweir 	void Test::test_URI() {
234*cdf0e10cSrcweir 		CPPUNIT_ASSERT_ASSERTION_PASS( CPPUNIT_ASSERT( altNames.getLength() > 0 ) );
235*cdf0e10cSrcweir 		for(int n = 1; n < altNames.getLength(); n++)
236*cdf0e10cSrcweir 		{
237*cdf0e10cSrcweir 			if (altNames[n].Type ==  security::ExtAltNameType_URL)
238*cdf0e10cSrcweir 			{
239*cdf0e10cSrcweir 				rtl::OUString value;
240*cdf0e10cSrcweir 				altNames[n].Value >>= value;
241*cdf0e10cSrcweir 				CPPUNIT_ASSERT_EQUAL( rtl::OUString::createFromAscii("http://my.url.here/"), value);
242*cdf0e10cSrcweir 			}
243*cdf0e10cSrcweir 		}
244*cdf0e10cSrcweir 	}
245*cdf0e10cSrcweir 
246*cdf0e10cSrcweir 	void Test::test_IP() {
247*cdf0e10cSrcweir 		CPPUNIT_ASSERT_ASSERTION_PASS( CPPUNIT_ASSERT( altNames.getLength() > 0 ) );
248*cdf0e10cSrcweir 		for(int n = 1; n < altNames.getLength(); n++)
249*cdf0e10cSrcweir 		{
250*cdf0e10cSrcweir 			if (altNames[n].Type ==  security::ExtAltNameType_IP_ADDRESS)
251*cdf0e10cSrcweir 			{
252*cdf0e10cSrcweir 				uno::Sequence< sal_Int8 > ipAddress;
253*cdf0e10cSrcweir 				altNames[n].Value >>= ipAddress;
254*cdf0e10cSrcweir 				CPPUNIT_ASSERT_ASSERTION_PASS( CPPUNIT_ASSERT( ipAddress.getLength() > 0 ) );
255*cdf0e10cSrcweir 			}
256*cdf0e10cSrcweir 		}
257*cdf0e10cSrcweir 
258*cdf0e10cSrcweir 	}
259*cdf0e10cSrcweir 
260*cdf0e10cSrcweir 	void Test::test_RID() {
261*cdf0e10cSrcweir 		CPPUNIT_ASSERT_ASSERTION_PASS( CPPUNIT_ASSERT( altNames.getLength() > 0 ) );
262*cdf0e10cSrcweir 		for(int n = 1; n < altNames.getLength(); n++)
263*cdf0e10cSrcweir 		{
264*cdf0e10cSrcweir 			if (altNames[n].Type ==  security::ExtAltNameType_REGISTERED_ID)
265*cdf0e10cSrcweir 			{
266*cdf0e10cSrcweir 				rtl::OUString value;
267*cdf0e10cSrcweir 				altNames[n].Value >>= value;
268*cdf0e10cSrcweir 				CPPUNIT_ASSERT( rtl::OUString::createFromAscii("1.2.3.4").equals(value));
269*cdf0e10cSrcweir 			}
270*cdf0e10cSrcweir 		}
271*cdf0e10cSrcweir 	}
272*cdf0e10cSrcweir 
273*cdf0e10cSrcweir 	void Test::test_EDI() {
274*cdf0e10cSrcweir 		// Not implemented
275*cdf0e10cSrcweir 	}
276*cdf0e10cSrcweir 
277*cdf0e10cSrcweir 	void Test::test_X400() {
278*cdf0e10cSrcweir 		// Not implemented
279*cdf0e10cSrcweir 	}
280*cdf0e10cSrcweir }
281*cdf0e10cSrcweir CPPUNIT_PLUGIN_IMPLEMENT();
282