Add a test of DFS certificate path search

randombit · randombit · commit 77dd8692d8ba · 2026-04-03T20:47:17.000-04:00
The end entity certificates are each signed by one of the level1 7
intermediates, and each level1 intermediate is signed by one of the 7
level2 intermediates. No AKIDs are available to guide the path
generation, thus as many as 49 possible paths must be checked before a
valid path is found.
diff --git a/src/tests/data/x509/path_building/end01.pem b/src/tests/data/x509/path_building/end01.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/src/tests/data/x509/path_building/end02.pem b/src/tests/data/x509/path_building/end02.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----
+MIIBujCCAV+gAwIBAgIUIO7luuHduSgt/KlORojaVgzSbVwwCgYIKoZIzj0EAwIw
+QDEfMB0GA1UECgwWUGF0aCBCdWlsZGluZyBERlMgVGVzdDEdMBsGA1UEAwwUSW50
+ZXJtZWRpYXRlIExldmVsIDEwHhcNMjYwMTAxMDAwMDAwWhcNMzUxMjMwMDAwMDAw
+WjA4MR8wHQYDVQQKDBZQYXRoIEJ1aWxkaW5nIERGUyBUZXN0MRUwEwYDVQQDDAxF
+bmQgRW50aXR5IDEwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAS+p+d0evbuzn7W
+qWrQqbgmeC5TwsSJCeN3sHZNxW2igTn0REvfVb9eEVoFg+lZZOe+Pv8AfxFKLGM+
+FBZI4B92oz8wPTAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSU4bXG01EY9UocjZaf
+XqQlJ4oz2jAOBgNVHQ8BAf8EBAMCB4AwCgYIKoZIzj0EAwIDSQAwRgIhAKuYNQ2L
+4WTITq178HrXqbLPhkUJ9eL2lBHYPPcQbsmiAiEA9W/kophycoaexvCcYklchD4k
+MmZ7dv08J29sr423RZw=
+-----END CERTIFICATE-----
diff --git a/src/tests/data/x509/path_building/end03.pem b/src/tests/data/x509/path_building/end03.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/src/tests/data/x509/path_building/end04.pem b/src/tests/data/x509/path_building/end04.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/src/tests/data/x509/path_building/end05.pem b/src/tests/data/x509/path_building/end05.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/src/tests/data/x509/path_building/end06.pem b/src/tests/data/x509/path_building/end06.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/src/tests/data/x509/path_building/end07.pem b/src/tests/data/x509/path_building/end07.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/src/tests/data/x509/path_building/expected.txt b/src/tests/data/x509/path_building/expected.txt
@@ -0,0 +1,7 @@
+end01.pem:Verified
+end02.pem:Verified
+end03.pem:Verified
+end04.pem:Verified
+end05.pem:Verified
+end06.pem:Verified
+end07.pem:Verified
diff --git a/src/tests/data/x509/path_building/level1_0.pem b/src/tests/data/x509/path_building/level1_0.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----
+MIIBwzCCAWqgAwIBAgIULPY1bQ9+kRlVWHT2CsoNq9yw0H0wCgYIKoZIzj0EAwIw
+QDEfMB0GA1UECgwWUGF0aCBCdWlsZGluZyBERlMgVGVzdDEdMBsGA1UEAwwUSW50
+ZXJtZWRpYXRlIExldmVsIDIwHhcNMjYwMTAxMDAwMDAwWhcNMzUxMjMwMDAwMDAw
+WjBAMR8wHQYDVQQKDBZQYXRoIEJ1aWxkaW5nIERGUyBUZXN0MR0wGwYDVQQDDBRJ
+bnRlcm1lZGlhdGUgTGV2ZWwgMTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABHgi
+KPpSl1VypZ3FycPbiKVbXPV1v7asfsOwBwoOTzGI6KR1f8YC0RQjJQ2hkDsN+2/H
+jWRPuCZQx9har+LpLU+jQjBAMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFCvU
+SkPvWYYs/a6vBA3DldWAt1SBMA4GA1UdDwEB/wQEAwIBhjAKBggqhkjOPQQDAgNH
+ADBEAiASruedDTuEPbt4rwcEcfirBuCFPGlNhsYxkpSvlA1WGQIgT8g2043xME5g
+bzjHLaOgR7gs4wFphlcbTqu3VMSsjgw=
+-----END CERTIFICATE-----
diff --git a/src/tests/data/x509/path_building/level1_1.pem b/src/tests/data/x509/path_building/level1_1.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/src/tests/data/x509/path_building/level1_2.pem b/src/tests/data/x509/path_building/level1_2.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/src/tests/data/x509/path_building/level1_3.pem b/src/tests/data/x509/path_building/level1_3.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----
+MIIBxDCCAWqgAwIBAgIUWYUUIXbB/T2ezKt/+RO0EGtm9AswCgYIKoZIzj0EAwIw
+QDEfMB0GA1UECgwWUGF0aCBCdWlsZGluZyBERlMgVGVzdDEdMBsGA1UEAwwUSW50
+ZXJtZWRpYXRlIExldmVsIDIwHhcNMjYwMTAxMDAwMDAwWhcNMzUxMjMwMDAwMDAw
+WjBAMR8wHQYDVQQKDBZQYXRoIEJ1aWxkaW5nIERGUyBUZXN0MR0wGwYDVQQDDBRJ
+bnRlcm1lZGlhdGUgTGV2ZWwgMTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABEoH
+mqRq3bOemM2u7i4aB1urBvUNM+fzAM1B+TnV2ztd8c9fbCPmR0d6YrXkqjj7DsGh
+CrOZq+9HHZCtwxjbYOGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFFuh
+9C6ydM4F/CyPAdPKvyY6A299MA4GA1UdDwEB/wQEAwIBhjAKBggqhkjOPQQDAgNI
+ADBFAiEA3ohH545vXw35sweQ3kzA3K1WI4cBMu2rjQR5tmg8rawCIAe+1xOtj5EY
+XCx6FmECZQ12+Tdbojor2KHAVNCeW2pI
+-----END CERTIFICATE-----
diff --git a/src/tests/data/x509/path_building/level1_4.pem b/src/tests/data/x509/path_building/level1_4.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/src/tests/data/x509/path_building/level1_5.pem b/src/tests/data/x509/path_building/level1_5.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/src/tests/data/x509/path_building/level1_6.pem b/src/tests/data/x509/path_building/level1_6.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/src/tests/data/x509/path_building/level2_0.pem b/src/tests/data/x509/path_building/level2_0.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----
+MIIB2DCCAX6gAwIBAgIURsjrCbkE5tP0YsLQWhL18X5m3mYwCgYIKoZIzj0EAwIw
+MzEfMB0GA1UECgwWUGF0aCBCdWlsZGluZyBERlMgVGVzdDEQMA4GA1UEAwwHUm9v
+dCBDQTAeFw0yNjAxMDEwMDAwMDBaFw0zNTEyMzAwMDAwMDBaMEAxHzAdBgNVBAoM
+FlBhdGggQnVpbGRpbmcgREZTIFRlc3QxHTAbBgNVBAMMFEludGVybWVkaWF0ZSBM
+ZXZlbCAyMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEwDpf0z7P4hYxX/FxtSEO
+ikDbAy3B4jFoMsNUufqHfEwqSMfJxjxBcCaB0lvS5dIXqNs26RsyAf3RmEVJG7hN
+F6NjMGEwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA2MrVnPHhSrxQpPaFl/g
+PbxCfgQwDgYDVR0PAQH/BAQDAgGGMB8GA1UdIwQYMBaAFBTiTHCkz1XhA5wgZqHF
+jn17KF3nMAoGCCqGSM49BAMCA0gAMEUCIQC0ZzfGFmUepN5Cj0Aa9Lr7PLzqOLXR
+r9Ny7rQa/WXoUgIgIF/ckDTjO31uWcpzFk9swzI9Nf1zQn6hxIKAXpvnlVU=
+-----END CERTIFICATE-----
diff --git a/src/tests/data/x509/path_building/level2_1.pem b/src/tests/data/x509/path_building/level2_1.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/src/tests/data/x509/path_building/level2_2.pem b/src/tests/data/x509/path_building/level2_2.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
diff --git a/src/tests/data/x509/path_building/level2_3.pem b/src/tests/data/x509/path_building/level2_3.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
diff --git a/src/tests/data/x509/path_building/level2_4.pem b/src/tests/data/x509/path_building/level2_4.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
diff --git a/src/tests/data/x509/path_building/level2_5.pem b/src/tests/data/x509/path_building/level2_5.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
diff --git a/src/tests/data/x509/path_building/level2_6.pem b/src/tests/data/x509/path_building/level2_6.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
diff --git a/src/tests/data/x509/path_building/root.pem b/src/tests/data/x509/path_building/root.pem
@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
diff --git a/src/tests/test_x509_path.cpp b/src/tests/test_x509_path.cpp
@@ -41,8 +41,6 @@ namespace {
 
 #if defined(BOTAN_HAS_X509_CERTIFICATES) && defined(BOTAN_TARGET_OS_HAS_FILESYSTEM)
 
-   #if defined(BOTAN_HAS_RSA) && defined(BOTAN_HAS_EMSA_PKCS1)
-
 std::map<std::string, std::string> read_results(const std::string& results_file, const char delim = ':') {
    std::ifstream in(results_file);
    if(!in.good()) {
@@ -119,6 +117,8 @@ std::vector<Botan::Path_Validation_Restrictions> restrictions_to_test(bool req_r
    return restrictions;
 }
 
+   #if defined(BOTAN_HAS_RSA) && defined(BOTAN_HAS_EMSA_PKCS1)
+
 class X509test_Path_Validation_Tests final : public Test {
    public:
       std::vector<Test::Result> run() override {
@@ -1830,6 +1830,62 @@ BOTAN_REGISTER_TEST("x509", "x509_cve_2026_35580", CVE_2026_35580_Test);
 
    #endif
 
+   #if defined(BOTAN_HAS_ECDSA)
+
+/**
+* Test that the certificate path building DFS correctly handles constructing
+* paths with many possible intermediates.
+*/
+class Path_Building_Tests final : public Test {
+   public:
+      std::vector<Test::Result> run() override {
+         if(Botan::has_filesystem_impl() == false) {
+            return {Test::Result::Note("X509 path building", "Skipping due to missing filesystem access")};
+         }
+
+         const std::string base_dir = "x509/path_building";
+         auto validation_time = Botan::calendar_point(2026, 4, 1, 4, 20, 0).to_std_timepoint();
+
+         // Load root into trust store
+         Botan::Certificate_Store_In_Memory trust_store;
+         trust_store.add_certificate(Botan::X509_Certificate(Test::data_file(base_dir + "/root.pem")));
+
+         // Load the intermediates
+         std::vector<Botan::X509_Certificate> intermediates;
+         for(const auto& file : Test::files_in_data_dir(base_dir)) {
+            if(file.find("level1_") != std::string::npos || file.find("level2_") != std::string::npos) {
+               intermediates.emplace_back(file);
+            }
+         }
+
+         Test::Result result("X509 path building DFS");
+         result.start_timer();
+
+         const Botan::Path_Validation_Restrictions restrictions(false, 80, false);
+
+         for(const auto& [test_name, expected_result] : read_results(Test::data_file(base_dir + "/expected.txt"))) {
+            const Botan::X509_Certificate end_entity(Test::data_file(Botan::fmt("{}/{}", base_dir, test_name)));
+
+            std::vector<Botan::X509_Certificate> end_certs;
+            end_certs.push_back(end_entity);
+            end_certs.insert(end_certs.end(), intermediates.begin(), intermediates.end());
+
+            const Botan::Path_Validation_Result validation_result = Botan::x509_path_validate(
+               end_certs, restrictions, {&trust_store}, "", Botan::Usage_Type::UNSPECIFIED, validation_time);
+
+            result.test_str_eq(
+               test_name + " path validation result", validation_result.result_string(), expected_result);
+         }
+
+         result.end_timer();
+         return {result};
+      }
+};
+
+BOTAN_REGISTER_TEST("x509", "x509_path_building", Path_Building_Tests);
+
+   #endif
+
 #endif
 
 }  // namespace
