xref: /minix3/external/bsd/bind/dist/lib/dns/tests/nsec3_test.c (revision 00b67f09dd46474d133c95011a48590a8e8f94c7)
1*00b67f09SDavid van Moolenbroek /*	$NetBSD: nsec3_test.c,v 1.1.1.4 2014/12/10 03:34:43 christos Exp $	*/
2*00b67f09SDavid van Moolenbroek 
3*00b67f09SDavid van Moolenbroek /*
4*00b67f09SDavid van Moolenbroek  * Copyright (C) 2012, 2014  Internet Systems Consortium, Inc. ("ISC")
5*00b67f09SDavid van Moolenbroek  *
6*00b67f09SDavid van Moolenbroek  * Permission to use, copy, modify, and/or distribute this software for any
7*00b67f09SDavid van Moolenbroek  * purpose with or without fee is hereby granted, provided that the above
8*00b67f09SDavid van Moolenbroek  * copyright notice and this permission notice appear in all copies.
9*00b67f09SDavid van Moolenbroek  *
10*00b67f09SDavid van Moolenbroek  * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
11*00b67f09SDavid van Moolenbroek  * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
12*00b67f09SDavid van Moolenbroek  * AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
13*00b67f09SDavid van Moolenbroek  * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
14*00b67f09SDavid van Moolenbroek  * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
15*00b67f09SDavid van Moolenbroek  * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
16*00b67f09SDavid van Moolenbroek  * PERFORMANCE OF THIS SOFTWARE.
17*00b67f09SDavid van Moolenbroek  */
18*00b67f09SDavid van Moolenbroek 
19*00b67f09SDavid van Moolenbroek /* Id */
20*00b67f09SDavid van Moolenbroek 
21*00b67f09SDavid van Moolenbroek /*! \file */
22*00b67f09SDavid van Moolenbroek 
23*00b67f09SDavid van Moolenbroek #include <config.h>
24*00b67f09SDavid van Moolenbroek 
25*00b67f09SDavid van Moolenbroek #include <atf-c.h>
26*00b67f09SDavid van Moolenbroek 
27*00b67f09SDavid van Moolenbroek #include <unistd.h>
28*00b67f09SDavid van Moolenbroek 
29*00b67f09SDavid van Moolenbroek #include <dns/db.h>
30*00b67f09SDavid van Moolenbroek #include <dns/nsec3.h>
31*00b67f09SDavid van Moolenbroek 
32*00b67f09SDavid van Moolenbroek #include "dnstest.h"
33*00b67f09SDavid van Moolenbroek 
34*00b67f09SDavid van Moolenbroek #if defined(OPENSSL) || defined(PKCS11CRYPTO)
35*00b67f09SDavid van Moolenbroek /*
36*00b67f09SDavid van Moolenbroek  * Helper functions
37*00b67f09SDavid van Moolenbroek  */
38*00b67f09SDavid van Moolenbroek 
39*00b67f09SDavid van Moolenbroek static void
iteration_test(const char * file,unsigned int expected)40*00b67f09SDavid van Moolenbroek iteration_test(const char* file, unsigned int expected) {
41*00b67f09SDavid van Moolenbroek 	isc_result_t result;
42*00b67f09SDavid van Moolenbroek 	dns_db_t *db = NULL;
43*00b67f09SDavid van Moolenbroek 	unsigned int iterations;
44*00b67f09SDavid van Moolenbroek 
45*00b67f09SDavid van Moolenbroek 	result = dns_test_begin(NULL, ISC_FALSE);
46*00b67f09SDavid van Moolenbroek 	ATF_REQUIRE_EQ(result, ISC_R_SUCCESS);
47*00b67f09SDavid van Moolenbroek 
48*00b67f09SDavid van Moolenbroek 	result = dns_test_loaddb(&db, dns_dbtype_zone, "test", file);
49*00b67f09SDavid van Moolenbroek 	ATF_REQUIRE_EQ(result, ISC_R_SUCCESS);
50*00b67f09SDavid van Moolenbroek 
51*00b67f09SDavid van Moolenbroek 	result = dns_nsec3_maxiterations(db, NULL, mctx, &iterations);
52*00b67f09SDavid van Moolenbroek 	ATF_REQUIRE_EQ(result, ISC_R_SUCCESS);
53*00b67f09SDavid van Moolenbroek 
54*00b67f09SDavid van Moolenbroek 	ATF_REQUIRE_EQ(iterations, expected);
55*00b67f09SDavid van Moolenbroek 
56*00b67f09SDavid van Moolenbroek 	dns_db_detach(&db);
57*00b67f09SDavid van Moolenbroek 
58*00b67f09SDavid van Moolenbroek 	dns_test_end();
59*00b67f09SDavid van Moolenbroek }
60*00b67f09SDavid van Moolenbroek 
61*00b67f09SDavid van Moolenbroek /*
62*00b67f09SDavid van Moolenbroek  * Individual unit tests
63*00b67f09SDavid van Moolenbroek  */
64*00b67f09SDavid van Moolenbroek 
65*00b67f09SDavid van Moolenbroek ATF_TC(max_iterations);
ATF_TC_HEAD(max_iterations,tc)66*00b67f09SDavid van Moolenbroek ATF_TC_HEAD(max_iterations, tc) {
67*00b67f09SDavid van Moolenbroek 	atf_tc_set_md_var(tc, "descr", "check that appropriate max iterations "
68*00b67f09SDavid van Moolenbroek 			  " is returned for different key size mixes");
69*00b67f09SDavid van Moolenbroek }
ATF_TC_BODY(max_iterations,tc)70*00b67f09SDavid van Moolenbroek ATF_TC_BODY(max_iterations, tc) {
71*00b67f09SDavid van Moolenbroek 
72*00b67f09SDavid van Moolenbroek 	UNUSED(tc);
73*00b67f09SDavid van Moolenbroek 
74*00b67f09SDavid van Moolenbroek 	iteration_test("testdata/nsec3/1024.db", 150);
75*00b67f09SDavid van Moolenbroek 	iteration_test("testdata/nsec3/2048.db", 500);
76*00b67f09SDavid van Moolenbroek 	iteration_test("testdata/nsec3/4096.db", 2500);
77*00b67f09SDavid van Moolenbroek 	iteration_test("testdata/nsec3/min-1024.db", 150);
78*00b67f09SDavid van Moolenbroek 	iteration_test("testdata/nsec3/min-2048.db", 500);
79*00b67f09SDavid van Moolenbroek }
80*00b67f09SDavid van Moolenbroek #else
81*00b67f09SDavid van Moolenbroek ATF_TC(untested);
ATF_TC_HEAD(untested,tc)82*00b67f09SDavid van Moolenbroek ATF_TC_HEAD(untested, tc) {
83*00b67f09SDavid van Moolenbroek 	atf_tc_set_md_var(tc, "descr", "skipping nsec3 test");
84*00b67f09SDavid van Moolenbroek }
ATF_TC_BODY(untested,tc)85*00b67f09SDavid van Moolenbroek ATF_TC_BODY(untested, tc) {
86*00b67f09SDavid van Moolenbroek 	UNUSED(tc);
87*00b67f09SDavid van Moolenbroek 	atf_tc_skip("DNSSEC not available");
88*00b67f09SDavid van Moolenbroek }
89*00b67f09SDavid van Moolenbroek #endif
90*00b67f09SDavid van Moolenbroek 
91*00b67f09SDavid van Moolenbroek /*
92*00b67f09SDavid van Moolenbroek  * Main
93*00b67f09SDavid van Moolenbroek  */
ATF_TP_ADD_TCS(tp)94*00b67f09SDavid van Moolenbroek ATF_TP_ADD_TCS(tp) {
95*00b67f09SDavid van Moolenbroek #if defined(OPENSSL) || defined(PKCS11CRYPTO)
96*00b67f09SDavid van Moolenbroek 	ATF_TP_ADD_TC(tp, max_iterations);
97*00b67f09SDavid van Moolenbroek #else
98*00b67f09SDavid van Moolenbroek 	ATF_TP_ADD_TC(tp, untested);
99*00b67f09SDavid van Moolenbroek #endif
100*00b67f09SDavid van Moolenbroek 
101*00b67f09SDavid van Moolenbroek 	return (atf_no_error());
102*00b67f09SDavid van Moolenbroek }
103*00b67f09SDavid van Moolenbroek 
104