Attachment 704147 Details for Bug 916603 – A test case to demo what libvirt does

A test case to demo what libvirt does

tlsvalid.c (text/plain), 2.10 KB, created by Daniel Berrangé on 2013-03-01 11:47:43 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Daniel Berrangé

Created: 2013-03-01 11:47:43 UTC

Size: 2.10 KB

patch

obsolete

>#include <gnutls/gnutls.h>
>#include <gnutls/x509.h>
>
>#include <stdio.h>
>#include <stdlib.h>
>#include <fcntl.h>
>#include <unistd.h>
>
>int main(int argc, char **argv)
>{
>  gnutls_x509_crt_t cacert;
>  gnutls_x509_crt_t cert;
>  gnutls_datum_t data;
>  int fd;
>  unsigned char buf[8192];
>  ssize_t n;
>  unsigned int status;
>
>  gnutls_global_init();
>
>  if (argc != 3) {
>    fprintf(stderr, "syntax: %s CACERT CERT\n", argv[0]);
>    exit(1);
>  }
>
>  gnutls_x509_crt_init(&cert);
>  gnutls_x509_crt_init(&cacert);
>
>  if ((fd = open(argv[1], O_RDONLY)) < 0) {
>    fprintf(stderr, "cannot open %s\n", argv[1]);
>    exit(1);
>  }
>
>  if ((n = read(fd, buf, sizeof(buf))) < 0) {
>    fprintf(stderr, "cannot read %s\n", argv[1]);
>    exit(1);
>  }
>  buf[n] = '\0';
>  close(fd);
>
>  data.data = buf;
>  data.size = n;
>  if (gnutls_x509_crt_import(cacert, &data, GNUTLS_X509_FMT_PEM) < 0) {
>    fprintf(stderr, "cannot load %s\n", argv[1]);
>    exit(1);
>  }
>
>  if ((fd = open(argv[2], O_RDONLY)) < 0) {
>    fprintf(stderr, "cannot open %s\n", argv[2]);
>    exit(1);
>  }
>
>  if ((n = read(fd, buf, sizeof(buf))) < 0) {
>    fprintf(stderr, "cannot read %s\n", argv[2]);
>    exit(1);
>  }
>  buf[n] = '\0';
>  close(fd);
>
>  data.data = buf;
>  data.size = n;
>  if (gnutls_x509_crt_import(cert, &data, GNUTLS_X509_FMT_PEM) < 0) {
>    fprintf(stderr, "cannot load %s\n", argv[2]);
>    exit(1);
>  }
>
>
>  if (gnutls_x509_crt_list_verify(&cert, 1,
>				  &cacert, 1,
>				  NULL, 0,
>				  0, &status) < 0) {
>    fprintf(stderr, "cannot verify %s, %s\n", argv[1], argv[2]);
>    exit(1);
>  }
>
>  if (status != 0) {
>    const char *reason = "Invalid certificate";
>
>    if (status & GNUTLS_CERT_INVALID)
>      reason = "The certificate is not trusted.";
>
>    if (status & GNUTLS_CERT_SIGNER_NOT_FOUND)
>      reason = "The certificate hasn't got a known issuer.";
>
>    if (status & GNUTLS_CERT_REVOKED)
>      reason = "The certificate has been revoked.";
>
>    if (status & GNUTLS_CERT_INSECURE_ALGORITHM)
>      reason = "The certificate uses an insecure algorithm";
>
>    fprintf(stderr, "Failed validation %s\n", reason);
>  } else {
>    fprintf(stderr, "Certificate is ok\n");
>  }
>  return 0;
>}

Actions: View

Attachments on bug 916603: 704143 | 704144 | 704145 | 704146 | 704147