Move the Security package to EPL, and add the implementations of the cryptographic algorithms
//
// Copyright (c) 2009 Nokia Corporation and/or its subsidiary(-ies).
// All rights reserved.
// This component and the accompanying materials are made available
// under the terms of the License "Eclipse Public License v1.0"
// which accompanies this distribution, and is available
// at the URL "http://www.eclipse.org/legal/epl-v10.html".
//
// Initial Contributors:
// Nokia Corporation - initial contribution.
//
// Contributors:
//
// Description:
//
//! @file
//! @SYMTestSuiteName SEC-CERTMAN
//! @SYMScriptTestEnvironment The script has no specific test environment requirements.
//! @SYMScriptPurpose Test the published API functions of CPKIXCertChain.
LOAD_SUITE tpkixcert_tefserver
//! @SYMTestCaseID SEC-CERTMAN-DATETIME-0001
//! @SYMTestCaseDesc Testing CPKIXCertChain date and time checking behaviour during certificate validation.
//! @SYMCR 1240
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct the certificate chain.
//! 2) Call CPKIXCertChain::ValidateL() passing in a validation time where the certificate chain has expired.
//! 3) Call CPKIXCertChain::SetValidityPeriodCheckFatal() passing in EFalse.
//! 4) Call CPKIXCertChain::ValidateL() passing in a validation time where the certificate chain has expired.
//! 5) Call CPKIXCertChain::SetValidityPeriodCheckFatal() passing in ETrue.
//! 6) Call CPKIXCertChain::ValidateL() passing in a validation time where the certificate chain has expired.
//! 7) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults Calls 2 and 6 should fail with EDateOutOfRange. Call 4 should pass with EValidatedOK but report the warning EDateOutOfRange through both the old warnings API(CPKIXValidationResult::Warnings()) and the new one(CCertificateWarning::Warnings()).
//! @SYMTestType CIT
//! @SYMTestPurpose 1) Check that current behaviour has not been altered and we still fail to validate out of date certificate chains.
//! 2) Check that new behaviour works correctly by allowing a certificate chain with an invalid date to validate successfully when explicitly told to.
//! 3) Then ensure this has left the system in the correct state to maintain normal behaviour.
START_TESTCASE SEC-CERTMAN-DATETIME-0001
RUN_TEST_STEP 100 tpkixcert_tefserver DateTimeFatalValidateTest c:\tpkixcert_tef\scripts\validatetests.ini ExpiredDateTime
END_TESTCASE SEC-CERTMAN-DATETIME-0001
//! @SYMTestCaseID SEC-CERTMAN-DATETIME-0002
//! @SYMTestCaseDesc Testing CPKIXCertChain date and time checking behaviour during certificate validation.
//! @SYMCR 1240
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct the certificate chain.
//! 2) Call CPKIXCertChain::ValidateL() passing in a validation time where the certificate chain has not yet become valid.
//! 3) Call CPKIXCertChain::SetValidityPeriodCheckFatal() passing in EFalse.
//! 4) Call CPKIXCertChain::ValidateL() passing in a validation time where the certificate chain has not yet become valid.
//! 5) Call CPKIXCertChain::SetValidityPeriodCheckFatal() passing in ETrue.
//! 6) Call CPKIXCertChain::ValidateL() passing in a validation time where the certificate chain has not yet become valid.
//! 7) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults Calls 2 and 6 should fail with EDateOutOfRange. Call 4 should pass with EValidatedOK but report the warning EDateOutOfRange through both the old warnings API(CPKIXValidationResult::Warnings()) and the new one(CCertificateWarning::Warnings()).
//! @SYMTestType CIT
//! @SYMTestPurpose 1) Check that current behaviour has not been altered and we still fail to validate out of date certificate chains.
//! 2) Check that new behaviour works correctly by allowing a certificate chain with an invalid date to validate successfully when explicitly told to.
//! 3) Then ensure this has left the system in the correct state to maintain normal behaviour.
START_TESTCASE SEC-CERTMAN-DATETIME-0002
RUN_TEST_STEP 100 tpkixcert_tefserver DateTimeFatalValidateTest c:\tpkixcert_tef\scripts\validatetests.ini InvalidDateTime
END_TESTCASE SEC-CERTMAN-DATETIME-0002
//! @SYMTestCaseID SEC-CERTMAN-DATETIME-0003
//! @SYMTestCaseDesc Testing CPKIXCertChain date and time checking behaviour during certificate validation.
//! @SYMCR 1240
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct the certificate chain.
//! 2) Call CPKIXCertChain::ValidateL() passing in a validation time where the certificate chain is valid.
//! 3) Call CPKIXCertChain::SetValidityPeriodCheckFatal() passing in EFalse.
//! 4) Call CPKIXCertChain::ValidateL() passing in a validation time where the certificate chain is valid.
//! 5) Call CPKIXCertChain::SetValidityPeriodCheckFatal() passing in ETrue.
//! 6) Call CPKIXCertChain::ValidateL() passing in a validation time where the certificate chain is valid.
//! 7) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults Calls 2, 4 and 6 should validate successfully with EValidatedOK.
//! @SYMTestType CIT
//! @SYMTestPurpose 1) Check that current behaviour has not been altered and we still fail to validate out of date certificate chains.
//! 2) Check that new behaviour works correctly by allowing a certificate chain with an invalid date to validate successfully when explicitly told to.
//! 3) Then ensure this has left the system in the correct state to maintain normal behaviour.
START_TESTCASE SEC-CERTMAN-DATETIME-0003
RUN_TEST_STEP 100 tpkixcert_tefserver DateTimeFatalValidateTest c:\tpkixcert_tef\scripts\validatetests.ini ValidDateTime
END_TESTCASE SEC-CERTMAN-DATETIME-0003
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-0001
//! @SYMTestCaseDesc Test correct behaviour of customisable supported critical extension processing.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct the certificate chain.
//! 2) Set the supported OID list to the default OIDs and the new ones through a call to CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 3) Call CPKIXCertChain::ValidateL().
//! 4) Ensure all critical extensions encountered are supported and that the certificate and certificate index information in the results match up with the correct certificates.
//! 5) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults Chain should validate successfully. All critical extensions should be reported through the new certificate warnings API (CCertificateWarning::CriticalExtensionsFound()).
//! @SYMTestType CIT
//! @SYMTestPurpose Test we correctly report the full gamut of possible critical extension patterns we may be expected to deal with in a certificate chain – multiple extensions in one certificate, multiple extensions spanning multiple certificates and the same extension in multiple certificates.
START_TESTCASE SEC-CERTMAN-CRITEXT-0001
RUN_TEST_STEP 100 tpkixcert_tefserver ValidateCertChain c:\tpkixcert_tef\scripts\validatetests.ini CustomCriticalExts
END_TESTCASE SEC-CERTMAN-CRITEXT-0001
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-0002
//! @SYMTestCaseDesc Test old and new warnings API for consistency and backwards compatibility.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct the certificate chain.
//! 2) Set the supported OID list to the default OIDs and the new ones through a call to CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 3) Call CPKIXCertChain::ValidateL().
//! 4) Compare resultant warnings.
//! 5) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults Chain should validate successfully. Each of the recognised critical extensions should be reported both as a warning through the old warnings return and through the new API CCertificateWarning::CriticalExtensionsFound(). CCertificateWarning::Warnings() should contain the other warnings found in CPKIXValidationResult::Warnings(). The new returns mechanism should have no additional warnings.
//! @SYMTestType CIT
//! @SYMTestPurpose Ensure backwards compatibility of old style warning reporting and ensure the new warning returns match up with this.
START_TESTCASE SEC-CERTMAN-CRITEXT-0002
RUN_TEST_STEP 100 tpkixcert_tefserver ValidateCertChain c:\tpkixcert_tef\scripts\validatetests.ini Warnings
END_TESTCASE SEC-CERTMAN-CRITEXT-0002
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-0003
//! @SYMTestCaseDesc Check supported OID list processing resilience.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct certificate chain.
//! 2) Set the supported OID list to the default OIDs and a new invalid format OID through a call to CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 3) Call CPKIXCertChain::ValidateL().
//! 4) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults Chain should validate successfully with EValidatedOK with expected warnings returned.
//! @SYMTestType CIT
//! @SYMTestPurpose Check the code is resilient to badly formed OID data being passed in to the supported OID list.
START_TESTCASE SEC-CERTMAN-CRITEXT-0003
RUN_TEST_STEP 100 tpkixcert_tefserver ValidateCertChain c:\tpkixcert_tef\scripts\validatetests.ini BadOidValue
END_TESTCASE SEC-CERTMAN-CRITEXT-0003
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-0004
//! @SYMTestCaseDesc Check supported OID list processing resilience.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct certificate chain.
//! 2) Set the supported OID list to an empty one through a call to CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 3) Call CPKIXCertChain::ValidateL().
//! 4) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults Chain should error with EUnrecognizedCriticalExtension (it is necessary for the CA to contain a critical extension).
//! @SYMTestType CIT
//! @SYMTestPurpose Check the code is resilient to an empty supported OID list.
START_TESTCASE SEC-CERTMAN-CRITEXT-0004
RUN_TEST_STEP 100 tpkixcert_tefserver ValidateCertChain c:\tpkixcert_tef\scripts\validatetests.ini EmptySupportedOidList
END_TESTCASE SEC-CERTMAN-CRITEXT-0004
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-0005
//! @SYMTestCaseDesc Test the Append API for manipulating supported OID list for correct behaviour.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct the certificate chain.
//! 2) Append a collection of new OIDs through CPKIXCertChain::AddSupportedCriticalExtensionsL().
//! 3) Call CPKIXCertChain::ResetSupportedCriticalExtsToDefaultL().
//! 4) Append a collection of OIDs already in the supported list through CPKIXCertChain::AddSupportedCriticalExtensionsL().
//! 5) Call CPKIXCertChain::ResetSupportedCriticalExtsToDefaultL().
//! 6) Append a collection of OIDs with duplicates within the collection.
//! 7) Call CPKIXCertChain::ResetSupportedCriticalExtsToDefaultL().
//! 8) Append an empty collection of OIDs through CPKIXCertChain::AddSupportedCriticalExtensionsL().
//! 9) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults Supported OID list should be updated correctly in each case.
//! @SYMTestType CIT
//! @SYMTestPurpose Ensure OIDs are added to the supported list, that the result contains no duplicates and no errors are reported.
START_TESTCASE SEC-CERTMAN-CRITEXT-0005
RUN_TEST_STEP 100 tpkixcert_tefserver AddSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini NewOids
RUN_TEST_STEP 100 tpkixcert_tefserver AddSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini AlreadySupportedOids
RUN_TEST_STEP 100 tpkixcert_tefserver AddSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini OidsWithDuplicates
RUN_TEST_STEP 100 tpkixcert_tefserver AddSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini NoOids
END_TESTCASE SEC-CERTMAN-CRITEXT-0005
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-OOM-0005
//! @SYMTestCaseDesc Test the Append API for manipulating supported OID list for correct behaviour.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions OOM loop around steps 1 to 9:
//! 1) Construct the certificate chain.
//! 2) Append a collection of new OIDs through CPKIXCertChain::AddSupportedCriticalExtensionsL().
//! 3) Call CPKIXCertChain::ResetSupportedCriticalExtsToDefaultL().
//! 4) Append a collection of OIDs already in the supported list through CPKIXCertChain::AddSupportedCriticalExtensionsL().
//! 5) Call CPKIXCertChain::ResetSupportedCriticalExtsToDefaultL().
//! 6) Append a collection of OIDs with duplicates within the collection.
//! 7) Call CPKIXCertChain::ResetSupportedCriticalExtsToDefaultL().
//! 8) Append an empty collection of OIDs through CPKIXCertChain::AddSupportedCriticalExtensionsL().
//! 9) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults There should be no memory leaks at any stage.
//! @SYMTestType CIT
//! @SYMTestPurpose Ensure OIDs are added to the supported list, that the result contains no duplicates and no errors are reported.
START_TESTCASE SEC-CERTMAN-CRITEXT-OOM-0005
RUN_TEST_STEP 100 tpkixcert_tefserver AddSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini OomNewOids
RUN_TEST_STEP 100 tpkixcert_tefserver AddSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini OomAlreadySupportedOids
RUN_TEST_STEP 100 tpkixcert_tefserver AddSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini OomOidsWithDuplicates
RUN_TEST_STEP 100 tpkixcert_tefserver AddSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini OomNoOids
END_TESTCASE SEC-CERTMAN-CRITEXT-OOM-0005
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-0006
//! @SYMTestCaseDesc Test the Remove API for manipulating supported OID list for correct behaviour.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct the certificate chain.
//! 2) Remove a collection of OIDs currently supported in the list through CPKIXCertChain::RemoveSupportedCriticalExtensions().
//! 3) Call CPKIXCertChain::ResetSupportedCriticalExtsToDefaultL().
//! 4) Remove a collection of OIDs not currently supported in the list through CPKIXCertChain::RemoveSupportedCriticalExtensions().
//! 5) Call CPKIXCertChain::ResetSupportedCriticalExtsToDefaultL().
//! 6) Remove an empty collection of OIDs through CPKIXCertChain::AddSupportedCriticalExtensionsL().
//! 7) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults Supported OID list should be updated correctly in each case.
//! @SYMTestType CIT
//! @SYMTestPurpose Ensure OIDs are removed from the supported list and no errors are reported.
START_TESTCASE SEC-CERTMAN-CRITEXT-0006
RUN_TEST_STEP 100 tpkixcert_tefserver RemoveSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini NewOids
RUN_TEST_STEP 100 tpkixcert_tefserver RemoveSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini AlreadySupportedOids
RUN_TEST_STEP 100 tpkixcert_tefserver RemoveSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini SupportedOidsWithDuplicates
RUN_TEST_STEP 100 tpkixcert_tefserver RemoveSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini NoOids
END_TESTCASE SEC-CERTMAN-CRITEXT-0006
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-OOM-0006
//! @SYMTestCaseDesc Test the Remove API for manipulating supported OID list for correct behaviour.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions OOM loop around steps 1 to 7:
//! 1) Construct the certificate chain.
//! 2) Remove a collection of OIDs currently supported in the list through CPKIXCertChain::RemoveSupportedCriticalExtensions().
//! 3) Call CPKIXCertChain::ResetSupportedCriticalExtsToDefaultL().
//! 4) Remove a collection of OIDs not currently supported in the list through CPKIXCertChain::RemoveSupportedCriticalExtensions().
//! 5) Call CPKIXCertChain::ResetSupportedCriticalExtsToDefaultL().
//! 6) Remove an empty collection of OIDs through CPKIXCertChain::AddSupportedCriticalExtensionsL().
//! 7) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults There should be no memory leaks at any stage.
//! @SYMTestType CIT
//! @SYMTestPurpose Ensure OIDs are removed from the supported list and no errors are reported.
START_TESTCASE SEC-CERTMAN-CRITEXT-OOM-0006
RUN_TEST_STEP 100 tpkixcert_tefserver RemoveSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini OomNewOids
RUN_TEST_STEP 100 tpkixcert_tefserver RemoveSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini OomAlreadySupportedOids
RUN_TEST_STEP 100 tpkixcert_tefserver RemoveSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini OomSupportedOidsWithDuplicates
RUN_TEST_STEP 100 tpkixcert_tefserver RemoveSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini OomNoOids
END_TESTCASE SEC-CERTMAN-CRITEXT-OOM-0006
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-0007
//! @SYMTestCaseDesc Test the Reset API for manipulating supported OID list for correct behaviour.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct the certificate chain.
//! 2) Call CPKIXCertChain::ResetSupportedCriticalExtsToDefaultL() with an empty supported OID list.
//! 3) Call CPKIXCertChain::ResetSupportedCriticalExtsToDefaultL() on a non empty, no default (one new OID added and one default OID removed)
//! supported OID list.
//! 4) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults Supported OID list should be updated correctly in each case.
//! @SYMTestType CIT
//! @SYMTestPurpose Ensure the supported OID list is reset to the default values correctly.
START_TESTCASE SEC-CERTMAN-CRITEXT-0007
RUN_TEST_STEP 100 tpkixcert_tefserver ResetSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini NoOids
RUN_TEST_STEP 100 tpkixcert_tefserver ResetSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini OneAddedOneRemoved
END_TESTCASE SEC-CERTMAN-CRITEXT-0007
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-OOM-0007
//! @SYMTestCaseDesc Test the Reset API for manipulating supported OID list for correct behaviour.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions OOM loop around steps 1 to 4:
//! 1) Construct the certificate chain.
//! 2) Call CPKIXCertChain::ResetSupportedCriticalExtsToDefaultL() with an empty supported OID list.
//! 3) Call CPKIXCertChain::ResetSupportedCriticalExtsToDefaultL() on a non empty, no default (one new OID added and one default OID removed)
//! supported OID list.
//! 4) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults There should be no memory leaks at any stage.
//! @SYMTestType CIT
//! @SYMTestPurpose Ensure the supported OID list is reset to the default values correctly.
START_TESTCASE SEC-CERTMAN-CRITEXT-OOM-0007
RUN_TEST_STEP 100 tpkixcert_tefserver ResetSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini OomNoOids
RUN_TEST_STEP 100 tpkixcert_tefserver ResetSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini OomOneAddedOneRemoved
END_TESTCASE SEC-CERTMAN-CRITEXT-OOM-0007
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-0008
//! @SYMTestCaseDesc Test the Set API for manipulating supported OID list for correct behaviour.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct the certificate chain.
//! 2) Set an empty collection of OIDs through CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 3) Call CPKIXCertChain::ResetSupportedCriticalExtsToDefaultL().
//! 4) Set a collection of non empty (one new OID and one default OID removed) collection of OIDs through CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 5) Call CPKIXCertChain::ResetSupportedCriticalExtsToDefaultL().
//! 6) Set the same collection of OIDs as is currently supported through CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 7) Call CPKIXCertChain::ResetSupportedCriticalExtsToDefaultL().
//! 8) Set a collection of OIDs containing internal duplicates through CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 9) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults Supported OID list should be updated correctly in each case.
//! @SYMTestType CIT
//! @SYMTestPurpose Ensure supported OID list is updated correctly, the result contains no duplicates and no errors are reported.
START_TESTCASE SEC-CERTMAN-CRITEXT-0008
RUN_TEST_STEP 100 tpkixcert_tefserver SetSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini NoOids
RUN_TEST_STEP 100 tpkixcert_tefserver SetSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini OneAddedOneRemoved
RUN_TEST_STEP 100 tpkixcert_tefserver SetSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini CurrentlySupported
RUN_TEST_STEP 100 tpkixcert_tefserver SetSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini OidsWithDuplicates
END_TESTCASE SEC-CERTMAN-CRITEXT-0008
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-OOM-0008
//! @SYMTestCaseDesc Test the Set API for manipulating supported OID list for correct behaviour.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions OOM loop around steps 1 to 9:
//! 1) Construct the certificate chain.
//! 2) Set an empty collection of OIDs through CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 3) Call CPKIXCertChain::ResetSupportedCriticalExtsToDefaultL().
//! 4) Set a collection of non empty (one new OID and one default OID removed) collection of OIDs through CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 5) Call CPKIXCertChain::ResetSupportedCriticalExtsToDefaultL().
//! 6) Set the same collection of OIDs as is currently supported through CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 7) Call CPKIXCertChain::ResetSupportedCriticalExtsToDefaultL().
//! 8) Set a collection of OIDs containing internal duplicates through CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 9) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults There should be no memory leaks at any stage.
//! @SYMTestType CIT
//! @SYMTestPurpose Ensure supported OID list is updated correctly, the result contains no duplicates and no errors are reported.
START_TESTCASE SEC-CERTMAN-CRITEXT-OOM-0008
RUN_TEST_STEP 100 tpkixcert_tefserver SetSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini OomNoOids
RUN_TEST_STEP 100 tpkixcert_tefserver SetSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini OomOneAddedOneRemoved
RUN_TEST_STEP 100 tpkixcert_tefserver SetSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini OomCurrentlySupported
RUN_TEST_STEP 100 tpkixcert_tefserver SetSupportedOidsTest c:\tpkixcert_tef\scripts\apitests.ini OomOidsWithDuplicates
END_TESTCASE SEC-CERTMAN-CRITEXT-OOM-0008
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-0009
//! @SYMTestCaseDesc Test CPKIXCertChain::ValidateL() code fails correctly.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct the certificate chain.
//! 2) Set the supported OID list to the default OIDs and the new one through a call to CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 3) Call CPKIXCertChain::ValidateL(). The default OID value for KExtendedKeyUsage is not set.
//! 4) Ensure the correct error value is returned
//! 5) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults The validation should return with EUnrecognisedCriticalExtension
//! @SYMTestType CIT
//! @SYMTestPurpose Ensure we fail correctly for critical extension OIDs encountered that are outside the specified list that we recognise.
START_TESTCASE SEC-CERTMAN-CRITEXT-0009
RUN_TEST_STEP 100 tpkixcert_tefserver ValidateCertChain c:\tpkixcert_tef\scripts\validatetests.ini Missing_ExtendedKeyUsage
END_TESTCASE SEC-CERTMAN-CRITEXT-0009
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-0010
//! @SYMTestCaseDesc Test CPKIXCertChain::ValidateL() code fails correctly.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct the certificate chain.
//! 2) Set the supported OID list to the default OIDs and the new one through a call to CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 3) Call CPKIXCertChain::ValidateL(). The default OID value for KPolicyMapping is not set.
//! 4) Ensure the correct error value is returned
//! 5) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults The validation should return with EUnrecognisedCriticalExtension
//! @SYMTestType CIT
//! @SYMTestPurpose Ensure we fail correctly for critical extension OIDs encountered that are outside the specified list that we recognise.
START_TESTCASE SEC-CERTMAN-CRITEXT-0010
RUN_TEST_STEP 100 tpkixcert_tefserver ValidateCertChain c:\tpkixcert_tef\scripts\validatetests.ini Missing_PolicyMapping
END_TESTCASE SEC-CERTMAN-CRITEXT-0010
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-0011
//! @SYMTestCaseDesc Test CPKIXCertChain::ValidateL() code fails correctly.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct the certificate chain.
//! 2) Set the supported OID list to the default OIDs and the new one through a call to CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 3) Call CPKIXCertChain::ValidateL(). The default OID value for KDeviceListConstraint is not set.
//! 4) Ensure the correct error value is returned
//! 5) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults The validation should return with EUnrecognisedCriticalExtension
//! @SYMTestType CIT
//! @SYMTestPurpose Ensure we fail correctly for critical extension OIDs encountered that are outside the specified list that we recognise.
START_TESTCASE SEC-CERTMAN-CRITEXT-0011
RUN_TEST_STEP 100 tpkixcert_tefserver ValidateCertChain c:\tpkixcert_tef\scripts\validatetests.ini Missing_DeviceIdListConstraint
END_TESTCASE SEC-CERTMAN-CRITEXT-0011
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-0012
//! @SYMTestCaseDesc Test CPKIXCertChain::ValidateL() code fails correctly.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct the certificate chain.
//! 2) Set the supported OID list to the default OIDs and the new one through a call to CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 3) Call CPKIXCertChain::ValidateL(). The default OID value for KSidListConstraint is not set.
//! 4) Ensure the correct error value is returned
//! 5) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults The validation should return with EUnrecognisedCriticalExtension
//! @SYMTestType CIT
//! @SYMTestPurpose Ensure we fail correctly for critical extension OIDs encountered that are outside the specified list that we recognise.
START_TESTCASE SEC-CERTMAN-CRITEXT-0012
RUN_TEST_STEP 100 tpkixcert_tefserver ValidateCertChain c:\tpkixcert_tef\scripts\validatetests.ini Missing_SidListConstraint
END_TESTCASE SEC-CERTMAN-CRITEXT-0012
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-0013
//! @SYMTestCaseDesc Test CPKIXCertChain::ValidateL() code fails correctly.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct the certificate chain.
//! 2) Set the supported OID list to the default OIDs and the new one through a call to CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 3) Call CPKIXCertChain::ValidateL(). The default OID value for KVidListConstraint is not set.
//! 4) Ensure the correct error value is returned
//! 5) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults The validation should return with EUnrecognisedCriticalExtension
//! @SYMTestType CIT
//! @SYMTestPurpose Ensure we fail correctly for critical extension OIDs encountered that are outside the specified list that we recognise.
START_TESTCASE SEC-CERTMAN-CRITEXT-0013
RUN_TEST_STEP 100 tpkixcert_tefserver ValidateCertChain c:\tpkixcert_tef\scripts\validatetests.ini Missing_VidListConstraint
END_TESTCASE SEC-CERTMAN-CRITEXT-0013
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-0014
//! @SYMTestCaseDesc Test CPKIXCertChain::ValidateL() code fails correctly.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct the certificate chain.
//! 2) Set the supported OID list to the default OIDs and the new one through a call to CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 3) Call CPKIXCertChain::ValidateL(). The default OID value for KCapabilitiesConstraint is not set.
//! 4) Ensure the correct error value is returned
//! 5) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults The validation should return with EUnrecognisedCriticalExtension
//! @SYMTestType CIT
//! @SYMTestPurpose Ensure we fail correctly for critical extension OIDs encountered that are outside the specified list that we recognise.
START_TESTCASE SEC-CERTMAN-CRITEXT-0014
RUN_TEST_STEP 100 tpkixcert_tefserver ValidateCertChain c:\tpkixcert_tef\scripts\validatetests.ini Missing_CapabilitiesConstraint
END_TESTCASE SEC-CERTMAN-CRITEXT-0014
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-0015
//! @SYMTestCaseDesc Test CPKIXCertChain::ValidateL() code fails correctly.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct the certificate chain.
//! 2) Set the supported OID list to the default OIDs and the new one through a call to CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 3) Call CPKIXCertChain::ValidateL(). The default OID value for KCertPolicies is not set.
//! 4) Ensure the correct error value is returned
//! 5) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults The validation should return with EUnrecognisedCriticalExtension
//! @SYMTestType CIT
//! @SYMTestPurpose Ensure we fail correctly for critical extension OIDs encountered that are outside the specified list that we recognise.
START_TESTCASE SEC-CERTMAN-CRITEXT-0015
RUN_TEST_STEP 100 tpkixcert_tefserver ValidateCertChain c:\tpkixcert_tef\scripts\validatetests.ini Missing_CertPolicies
END_TESTCASE SEC-CERTMAN-CRITEXT-0015
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-0016
//! @SYMTestCaseDesc Test CPKIXCertChain::ValidateL() code fails correctly.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct the certificate chain.
//! 2) Set the supported OID list to the default OIDs and the new one through a call to CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 3) Call CPKIXCertChain::ValidateL(). The default OID value for KPolicyConstraints is not set.
//! 4) Ensure the correct error value is returned
//! 5) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults The validation should return with EUnrecognisedCriticalExtension
//! @SYMTestType CIT
//! @SYMTestPurpose Ensure we fail correctly for critical extension OIDs encountered that are outside the specified list that we recognise.
START_TESTCASE SEC-CERTMAN-CRITEXT-0016
RUN_TEST_STEP 100 tpkixcert_tefserver ValidateCertChain c:\tpkixcert_tef\scripts\validatetests.ini Missing_PolicyConstraint
END_TESTCASE SEC-CERTMAN-CRITEXT-0016
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-0017
//! @SYMTestCaseDesc Test CPKIXCertChain::ValidateL() code fails correctly.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct the certificate chain.
//! 2) Set the supported OID list to the default OIDs and the new one through a call to CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 3) Call CPKIXCertChain::ValidateL(). The default OID value for KNameConstraints is not set.
//! 4) Ensure the correct error value is returned
//! 5) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults The validation should return with EUnrecognisedCriticalExtension
//! @SYMTestType CIT
//! @SYMTestPurpose Ensure we fail correctly for critical extension OIDs encountered that are outside the specified list that we recognise.
START_TESTCASE SEC-CERTMAN-CRITEXT-0017
RUN_TEST_STEP 100 tpkixcert_tefserver ValidateCertChain c:\tpkixcert_tef\scripts\validatetests.ini Missing_NameConstraint
END_TESTCASE SEC-CERTMAN-CRITEXT-0017
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-0018
//! @SYMTestCaseDesc Test CPKIXCertChain::ValidateL() code fails correctly.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct the certificate chain.
//! 2) Set the supported OID list to the default OIDs and the new one through a call to CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 3) Call CPKIXCertChain::ValidateL(). The default OID value for KBasicConstraints is not set.
//! 4) Ensure the correct error value is returned
//! 5) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults The validation should return with EUnrecognisedCriticalExtension
//! @SYMTestType CIT
//! @SYMTestPurpose Ensure we fail correctly for critical extension OIDs encountered that are outside the specified list that we recognise.
START_TESTCASE SEC-CERTMAN-CRITEXT-0018
RUN_TEST_STEP 100 tpkixcert_tefserver ValidateCertChain c:\tpkixcert_tef\scripts\validatetests.ini Missing_BasicConstraint
END_TESTCASE SEC-CERTMAN-CRITEXT-0018
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-0019
//! @SYMTestCaseDesc Test CPKIXCertChain::ValidateL() code fails correctly.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct the certificate chain.
//! 2) Set the supported OID list to the default OIDs and the new one through a call to CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 3) Call CPKIXCertChain::ValidateL(). The default OID value for KKeyUsage is not set.
//! 4) Ensure the correct error value is returned
//! 5) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults The validation should return with EUnrecognisedCriticalExtension
//! @SYMTestType CIT
//! @SYMTestPurpose Ensure we fail correctly for critical extension OIDs encountered that are outside the specified list that we recognise.
START_TESTCASE SEC-CERTMAN-CRITEXT-0019
RUN_TEST_STEP 100 tpkixcert_tefserver ValidateCertChain c:\tpkixcert_tef\scripts\validatetests.ini Missing_KeyUsage
END_TESTCASE SEC-CERTMAN-CRITEXT-0019
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-0020
//! @SYMTestCaseDesc Test CPKIXCertChain::ValidateL() code fails correctly.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct the certificate chain.
//! 2) Set the supported OID list to the default OIDs and the new one through a call to CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 3) Call CPKIXCertChain::ValidateL(). The default OID value for KSubjectAltName is not set.
//! 4) Ensure the correct error value is returned
//! 5) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults The validation should return with EUnrecognisedCriticalExtension
//! @SYMTestType CIT
//! @SYMTestPurpose Ensure we fail correctly for critical extension OIDs encountered that are outside the specified list that we recognise.
START_TESTCASE SEC-CERTMAN-CRITEXT-0020
RUN_TEST_STEP 100 tpkixcert_tefserver ValidateCertChain c:\tpkixcert_tef\scripts\validatetests.ini Missing_SubjectAltName
END_TESTCASE SEC-CERTMAN-CRITEXT-0020
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-0021
//! @SYMTestCaseDesc Test CPKIXCertChain::ValidateL() code fails correctly.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct the certificate chain.
//! 2) Set the supported OID list to the default OIDs and the new one through a call to CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 3) Call CPKIXCertChain::ValidateL(). The default OID value for KInhibitAnyPolicy is not set.
//! 4) Ensure the correct error value is returned
//! 5) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults The validation should return with EUnrecognisedCriticalExtension
//! @SYMTestType CIT
//! @SYMTestPurpose Ensure we fail correctly for critical extension OIDs encountered that are outside the specified list that we recognise.
START_TESTCASE SEC-CERTMAN-CRITEXT-0021
RUN_TEST_STEP 100 tpkixcert_tefserver ValidateCertChain c:\tpkixcert_tef\scripts\validatetests.ini Missing_InhibitAnyPolicy
END_TESTCASE SEC-CERTMAN-CRITEXT-0021
//! @SYMTestCaseID SEC-CERTMAN-CRITEXT-0022
//! @SYMTestCaseDesc Test CPKIXCertChain::ValidateL() code fails correctly.
//! @SYMCR 1399
//! @SYMTestPriority Critical
//! @SYMTestActions 1) Construct the certificate chain.
//! 2) Set the supported OID list to the default OIDs and the new one through a call to CPKIXCertChain::SetSupportedCriticalExtensionsL().
//! 3) Call CPKIXCertChain::ValidateL(). The default OID value for KTestOid is not set.
//! 4) Ensure the correct error value is returned
//! 5) Cleanup the certificate chain and utility classes.
//! @SYMTestExpectedResults The validation should return with EUnrecognisedCriticalExtension
//! @SYMTestType CIT
//! @SYMTestPurpose Ensure we fail correctly for critical extension OIDs encountered that are outside the specified list that we recognise.
START_TESTCASE SEC-CERTMAN-CRITEXT-0022
RUN_TEST_STEP 100 tpkixcert_tefserver ValidateCertChain c:\tpkixcert_tef\scripts\validatetests.ini Missing_TestOid
END_TESTCASE SEC-CERTMAN-CRITEXT-0022