// Test that the large length of the child serial number causes // CreateEncodedOCSPRequest to fail. TEST_F(pkixocsp_CreateEncodedOCSPRequest, ChildCertLongSerialNumberTest) { static const uint8_t UNSUPPORTED_LEN = 128; // must be larger than 127 ByteString serialNumberString; // tag + length + value is 1 + 2 + UNSUPPORTED_LEN // Encoding the length takes two bytes: one byte to indicate that a // second byte follows, and the second byte to indicate the length. serialNumberString.push_back(0x80 + 1); serialNumberString.push_back(UNSUPPORTED_LEN); // value is 0x010000...00 serialNumberString.push_back(0x01); for (size_t i = 1; i < UNSUPPORTED_LEN; ++i) { serialNumberString.push_back(0x00); } ByteString issuerDER; ByteString issuerSPKI; ASSERT_NO_FATAL_FAILURE(MakeIssuerCertIDComponents("CA", issuerDER, issuerSPKI)); Input issuer; ASSERT_EQ(Success, issuer.Init(issuerDER.data(), issuerDER.length())); Input spki; ASSERT_EQ(Success, spki.Init(issuerSPKI.data(), issuerSPKI.length())); Input serialNumber; ASSERT_EQ(Success, serialNumber.Init(serialNumberString.data(), serialNumberString.length())); uint8_t ocspRequest[OCSP_REQUEST_MAX_LENGTH]; size_t ocspRequestLength; ASSERT_EQ(Result::ERROR_BAD_DER, CreateEncodedOCSPRequest(trustDomain, CertID(issuer, spki, serialNumber), ocspRequest, ocspRequestLength)); }
// Test that CreateEncodedOCSPRequest handles the longest serial number that // it's required to support (i.e. 20 octets). TEST_F(pkixocsp_CreateEncodedOCSPRequest, LongestSupportedSerialNumberTest) { static const uint8_t LONGEST_REQUIRED_LEN = 20; ByteString serialNumberString; // tag + length + value is 1 + 1 + LONGEST_REQUIRED_LEN serialNumberString.push_back(der::INTEGER); serialNumberString.push_back(LONGEST_REQUIRED_LEN); serialNumberString.push_back(0x01); // value is 0x010000...00 for (size_t i = 1; i < LONGEST_REQUIRED_LEN; ++i) { serialNumberString.push_back(0x00); } ByteString issuerDER; ByteString issuerSPKI; ASSERT_NO_FATAL_FAILURE(MakeIssuerCertIDComponents("CA", issuerDER, issuerSPKI)); Input issuer; ASSERT_EQ(Success, issuer.Init(issuerDER.data(), issuerDER.length())); Input spki; ASSERT_EQ(Success, spki.Init(issuerSPKI.data(), issuerSPKI.length())); Input serialNumber; ASSERT_EQ(Success, serialNumber.Init(serialNumberString.data(), serialNumberString.length())); uint8_t ocspRequest[OCSP_REQUEST_MAX_LENGTH]; size_t ocspRequestLength; ASSERT_EQ(Success, CreateEncodedOCSPRequest(trustDomain, CertID(issuer, spki, serialNumber), ocspRequest, ocspRequestLength)); }