1*e0c4386eSCy Schubert#! /usr/bin/env perl 2*e0c4386eSCy Schubert# Copyright 2023 The OpenSSL Project Authors. All Rights Reserved. 3*e0c4386eSCy Schubert# 4*e0c4386eSCy Schubert# Licensed under the Apache License 2.0 (the "License"). You may not use 5*e0c4386eSCy Schubert# this file except in compliance with the License. You can obtain a copy 6*e0c4386eSCy Schubert# in the file LICENSE in the source distribution or at 7*e0c4386eSCy Schubert# https://www.openssl.org/source/license.html 8*e0c4386eSCy Schubert 9*e0c4386eSCy Schubert 10*e0c4386eSCy Schubertuse strict; 11*e0c4386eSCy Schubertuse warnings; 12*e0c4386eSCy Schubert 13*e0c4386eSCy Schubertuse POSIX; 14*e0c4386eSCy Schubertuse OpenSSL::Test qw/:DEFAULT srctop_file with data_file/; 15*e0c4386eSCy Schubert 16*e0c4386eSCy Schubertuse OpenSSL::Test::Utils; 17*e0c4386eSCy Schubertuse OpenSSL::Glob; 18*e0c4386eSCy Schubert 19*e0c4386eSCy Schubertsetup("test_policy_tree"); 20*e0c4386eSCy Schubert 21*e0c4386eSCy Schubertplan skip_all => "No EC support" if disabled("ec"); 22*e0c4386eSCy Schubert 23*e0c4386eSCy Schubertplan tests => 2; 24*e0c4386eSCy Schubert 25*e0c4386eSCy Schubert# The small pathological tree is expected to work 26*e0c4386eSCy Schubertmy $small_chain = srctop_file("test", "recipes", "80-test_policy_tree_data", 27*e0c4386eSCy Schubert "small_policy_tree.pem"); 28*e0c4386eSCy Schubertmy $small_leaf = srctop_file("test", "recipes", "80-test_policy_tree_data", 29*e0c4386eSCy Schubert "small_leaf.pem"); 30*e0c4386eSCy Schubert 31*e0c4386eSCy Schubertok(run(app(["openssl", "verify", "-CAfile", $small_chain, 32*e0c4386eSCy Schubert "-policy_check", $small_leaf])), 33*e0c4386eSCy Schubert "test small policy tree"); 34*e0c4386eSCy Schubert 35*e0c4386eSCy Schubert# The large pathological tree is expected to fail 36*e0c4386eSCy Schubertmy $large_chain = srctop_file("test", "recipes", "80-test_policy_tree_data", 37*e0c4386eSCy Schubert "large_policy_tree.pem"); 38*e0c4386eSCy Schubertmy $large_leaf = srctop_file("test", "recipes", "80-test_policy_tree_data", 39*e0c4386eSCy Schubert "large_leaf.pem"); 40*e0c4386eSCy Schubert 41*e0c4386eSCy Schubertok(!run(app(["openssl", "verify", "-CAfile", $large_chain, 42*e0c4386eSCy Schubert "-policy_check", $large_leaf])), 43*e0c4386eSCy Schubert "test large policy tree"); 44