/*
 * Copyright (C) 2014-2024 CZ.NIC
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
 * In addition, as a special exception, the copyright holders give
 * permission to link the code of portions of this program with the
 * OpenSSL library under certain conditions as described in each
 * individual source file, and distribute linked combinations including
 * the two.
 */

#include <cstdlib> /* ::std::free */
#include <QtTest/QtTest>

#include "src/crypto/crypto.h"
#include "src/crypto/crypto_funcs.h"
#include "src/datovka_shared/crypto/crypto_version.h"
#include "src/datovka_shared/log/log.h"
#include "src/global.h"
#include "tests/helper.h"
#include "tests/test_crypto_message.h"

class DerFileContent {
public:
	explicit DerFileContent(const QString &path);
	~DerFileContent(void);

	void loadContent(void);
	void unloadContent(void);

	const QString fPath; /*!< Path to file. */
	char *der; /*!< File content. */
	size_t der_size; /*!< Size of data portion. */
	struct x509_crt *x509_crt; /*!< Signing certificate. */
};

DerFileContent::DerFileContent(const QString &path)
    : fPath(path),
    der(NULL),
    der_size(0),
    x509_crt(NULL)
{
}

DerFileContent::~DerFileContent(void)
{
	unloadContent();
}

void DerFileContent::loadContent(void)
{
	der = internal_read_file(fPath.toUtf8().constData(), &der_size, "r");
	x509_crt = raw_cms_signing_cert(der, der_size);
}

void DerFileContent::unloadContent(void)
{
	::std::free(der); der = NULL; der_size = 0;
	if (x509_crt != NULL) {
		x509_crt_destroy(x509_crt); x509_crt = NULL;
	}
}

class TestCryptoMessage : public QObject {
	Q_OBJECT

public:
	TestCryptoMessage(void);

private slots:
	void initTestCase(void);

	void cleanupTestCase(void);

	void x509CrtVerify(void);

	void verifySignature01(void);

	void cryptoAddCrl01(void);

	void verifySignature02(void);

	void cryptoAddCrl02(void);

	void crtAlgorithmInfo(void);

	void crtDateInfo(void);

	void rawTstVerify(void);

	void p12ToPem(void);

	void cryptoLibVerCompatible(void);

private:
	void verifySignature(void);

	void cryptoAddCrl(bool expectFail);

	DerFileContent ddz; /*!< Binary data message. */
	DerFileContent tst; /*!< Time stamp. */
	DerFileContent bin3401766;
	DerFileContent tst3401766;
	DerFileContent bin6872330;
	DerFileContent tst6872330;
	DerFileContent bin7057429;
	DerFileContent tst7057429; /* New time stamp format, see issue #437. */

	const QString p12FilePath; /*!< Unencrypted PKCS 12 file. */
	const QString p12EncryptedFilePath; /* !< Encrypted PKCS 12 file. */
	const QString pwd; /*!< Password for encrypted PKCS 12 file. */

	const QString crl1FilePath; /*!< Path to certificate revocation list. */
	const QString crl2FilePath; /*!< Path to certificate revocation list. */
};

/*
 * # Useful commands:
 * > openssl asn1parse -in FILE -inform DER
 * > openssl pkcs7 -in DATA_MESSAGE_ZFO -inform DER -noout -print
 * > openssl x509 -in CERTIFICATE_PEM -inform PEM -noout -text
 * # https://superuser.com/questions/1280716/how-to-decrypt-an-encapsulated-time-stamp
 * > openssl cms -in DATA_MESSAGE_ZFO/TIMESTAMP -inform DER -cmsout -print
 */

TestCryptoMessage::TestCryptoMessage(void)
    : ddz("data/DDZ_3401761.zfo"),
    tst("data/timestamp_binary.dat"), /* Validity: Not After: Oct  4 10:08:20 2019 GMT */
    bin3401766("data/DZ_3401766_binary.zfo"),
    tst3401766("data/DZ_3401766_timestamp_binary.dat"), /* Validity: Not After: Oct  2 11:10:05 2020 GMT */
    bin6872330("data/DZ_6872330_binary.zfo"),
    tst6872330("data/DZ_6872330_timestamp_binary.dat"), /* Validity: Not After: Dec 22 08:34:19 2024 GMT */
    bin7057429("data/DZ_7057429_binary.zfo"),
    tst7057429("data/DZ_7057429_timestamp_binary.dat"), /* Validity: Not After: May 11 09:19:54 2025 GMT */
    p12FilePath("data/cert_and_key.p12"),
    p12EncryptedFilePath("data/cert_and_key_encrypted.p12"),
    pwd("Abcd0"),
    crl1FilePath("../trusted_certs/crl/psrootqca.crl"),
    crl2FilePath("../trusted_certs/crl/psrootqca2.crl")
{
}

void TestCryptoMessage::initTestCase(void)
{
	QVERIFY(GlobInstcs::logPtr == Q_NULLPTR);
	GlobInstcs::logPtr = new (::std::nothrow) LogDevice;
	QVERIFY(GlobInstcs::logPtr != Q_NULLPTR);

	/* Initialise cryptographic context. */
	int ret = crypto_init();
	QVERIFY(ret == 0);

	ddz.loadContent();
	QVERIFY(ddz.der != NULL && ddz.der_size > 0);
	QVERIFY(ddz.x509_crt != NULL);

	tst.loadContent();
	QVERIFY(tst.der != NULL && tst.der_size > 0);
	QVERIFY(tst.x509_crt != NULL);

	bin3401766.loadContent();
	QVERIFY(bin3401766.der != NULL && bin3401766.der_size > 0);
	QVERIFY(bin3401766.x509_crt != NULL);

	tst3401766.loadContent();
	QVERIFY(tst3401766.der != NULL && tst3401766.der_size > 0);
	QVERIFY(tst3401766.x509_crt != NULL);

	bin6872330.loadContent();
	QVERIFY(bin6872330.der != NULL && bin6872330.der_size > 0);
	QVERIFY(bin6872330.x509_crt != NULL);

	tst6872330.loadContent();
	QVERIFY(tst6872330.der != NULL && tst6872330.der_size > 0);
	QVERIFY(tst6872330.x509_crt != NULL);

	bin7057429.loadContent();
	QVERIFY(bin7057429.der != NULL && bin7057429.der_size > 0);
	QVERIFY(bin7057429.x509_crt != NULL);

	tst7057429.loadContent();
	QVERIFY(tst7057429.der != NULL && tst7057429.der_size > 0);
	QVERIFY(tst7057429.x509_crt != NULL);
}

void TestCryptoMessage::cleanupTestCase(void)
{
	ddz.unloadContent();
	tst.unloadContent();
	bin3401766.unloadContent();
	tst3401766.unloadContent();
	bin6872330.unloadContent();
	tst6872330.unloadContent();
	bin7057429.unloadContent();
	tst7057429.unloadContent();

	delete GlobInstcs::logPtr; GlobInstcs::logPtr = Q_NULLPTR;
}

void TestCryptoMessage::x509CrtVerify(void)
{
	int ret;

	ret = x509_crt_verify(ddz.x509_crt, NULL);
	QVERIFY2(ret == 0, "Got invalid result at 1st attempt. Expected 0.");

	ret = x509_crt_verify(ddz.x509_crt, NULL);
	QVERIFY2(ret == 0, "Got invalid result at 2nd attempt. Expected 0.");

	ret = x509_crt_verify(ddz.x509_crt, NULL);
	QVERIFY2(ret == 0, "Got invalid result at 3rd attempt. Expected 0.");

	ret = x509_crt_verify(tst.x509_crt, NULL);
	QVERIFY2(ret == 0, "Got invalid result at 4th attempt. Expected 0.");

	ret = x509_crt_verify(tst.x509_crt, NULL);
	QVERIFY2(ret == 0, "Got invalid result at 5th attempt. Expected 0.");

	ret = x509_crt_verify(tst.x509_crt, NULL);
	QVERIFY2(ret == 0, "Got invalid result at 6th attempt. Expected 0.");

	ret = x509_crt_verify(bin3401766.x509_crt, NULL);
	QVERIFY2(ret == 0, "Got invalid result at 7th attempt. Expected 0.");

	ret = x509_crt_verify(bin3401766.x509_crt, NULL);
	QVERIFY2(ret == 0, "Got invalid result at 8th attempt. Expected 0.");

	ret = x509_crt_verify(bin3401766.x509_crt, NULL);
	QVERIFY2(ret == 0, "Got invalid result at 9th attempt. Expected 0.");

	ret = x509_crt_verify(tst3401766.x509_crt, NULL);
	QVERIFY2(ret == 1, "Got invalid result at 10th attempt. Expected 1.");

	ret = x509_crt_verify(tst3401766.x509_crt, NULL);
	QVERIFY2(ret == 1, "Got invalid result at 11th attempt. Expected 1.");

	ret = x509_crt_verify(tst3401766.x509_crt, NULL);
	QVERIFY2(ret == 1, "Got invalid result at 12th attempt. Expected 1.");

	ret = x509_crt_verify(bin6872330.x509_crt, NULL);
	QVERIFY2(ret == 1, "Got invalid result at 13th attempt. Expected 1.");

	ret = x509_crt_verify(bin6872330.x509_crt, NULL);
	QVERIFY2(ret == 1, "Got invalid result at 14th attempt. Expected 1.");

	ret = x509_crt_verify(bin6872330.x509_crt, NULL);
	QVERIFY2(ret == 1, "Got invalid result at 15th attempt. Expected 1.");

	ret = x509_crt_verify(tst6872330.x509_crt, NULL);
	QVERIFY2(ret == 1, "Got invalid result at 16th attempt. Expected 1.");

	ret = x509_crt_verify(tst6872330.x509_crt, NULL);
	QVERIFY2(ret == 1, "Got invalid result at 17th attempt. Expected 1.");

	ret = x509_crt_verify(tst6872330.x509_crt, NULL);
	QVERIFY2(ret == 1, "Got invalid result at 18th attempt. Expected 1.");

	ret = x509_crt_verify(bin7057429.x509_crt, NULL);
	QVERIFY2(ret == 1, "Got invalid result at 19th attempt. Expected 1.");

	ret = x509_crt_verify(bin7057429.x509_crt, NULL);
	QVERIFY2(ret == 1, "Got invalid result at 20th attempt. Expected 1.");

	ret = x509_crt_verify(bin7057429.x509_crt, NULL);
	QVERIFY2(ret == 1, "Got invalid result at 21th attempt. Expected 1.");

	ret = x509_crt_verify(tst7057429.x509_crt, NULL);
	QVERIFY2(ret == 0, "Got invalid result at 22th attempt. Expected 0."); // The time stamp contains intermediat issuer authority certificate.

	ret = x509_crt_verify(tst7057429.x509_crt, NULL);
	QVERIFY2(ret == 0, "Got invalid result at 23th attempt. Expected 0.");

	ret = x509_crt_verify(tst7057429.x509_crt, NULL);
	QVERIFY2(ret == 0, "Got invalid result at 24th attempt. Expected 0.");
}

void TestCryptoMessage::verifySignature01(void)
{
	verifySignature();
}

void TestCryptoMessage::cryptoAddCrl01(void)
{
	cryptoAddCrl(false);
}

void TestCryptoMessage::verifySignature02(void)
{
	verifySignature();
}

void TestCryptoMessage::cryptoAddCrl02(void)
{
	cryptoAddCrl(true);
}

void TestCryptoMessage::crtAlgorithmInfo(void)
{
	char *sa_id = NULL, *sa_name = NULL;
	int ret;

	ret = x509_crt_algorithm_info(ddz.x509_crt, &sa_id, &sa_name);
	QVERIFY2(ret == 0, "Could not obtain signature algorithm details.");
	QVERIFY2(sa_id != NULL &&
	         sa_id == QStringLiteral("1.2.840.113549.1.1.11"),
	         "Could not obtain signature algorithm identifier string.");
	QVERIFY2(sa_name != NULL &&
	         sa_name == QStringLiteral("sha256WithRSAEncryption"),
	         "Could not obtain signature algorithm name.");

	::std::free(sa_id); sa_id = NULL;
	::std::free(sa_name); sa_name = NULL;

	ret = x509_crt_algorithm_info(tst.x509_crt, &sa_id, &sa_name);
	QVERIFY2(ret == 0, "Could not obtain signature algorithm details.");
	QVERIFY2(sa_id != NULL &&
	         sa_id == QStringLiteral("1.2.840.113549.1.1.11"),
	         "Could not obtain signature algorithm identifier string.");
	QVERIFY2(sa_name != NULL &&
	         sa_name == QStringLiteral("sha256WithRSAEncryption"),
	         "Could not obtain signature algorithm name.");

	::std::free(sa_id); sa_id = NULL;
	::std::free(sa_name); sa_name = NULL;

	ret = x509_crt_algorithm_info(bin3401766.x509_crt, &sa_id, &sa_name);
	QVERIFY2(ret == 0, "Could not obtain signature algorithm details.");
	QVERIFY2(sa_id != NULL &&
	         sa_id == QStringLiteral("1.2.840.113549.1.1.11"),
	         "Could not obtain signature algorithm identifier string.");
	QVERIFY2(sa_name != NULL &&
	         sa_name == QStringLiteral("sha256WithRSAEncryption"),
	         "Could not obtain signature algorithm name.");

	::std::free(sa_id); sa_id = NULL;
	::std::free(sa_name); sa_name = NULL;

	ret = x509_crt_algorithm_info(tst3401766.x509_crt, &sa_id, &sa_name);
	QVERIFY2(ret == 0, "Could not obtain signature algorithm details.");
	QVERIFY2(sa_id != NULL &&
	         sa_id == QStringLiteral("1.2.840.113549.1.1.11"),
	         "Could not obtain signature algorithm identifier string.");
	QVERIFY2(sa_name != NULL &&
	         sa_name == QStringLiteral("sha256WithRSAEncryption"),
	         "Could not obtain signature algorithm name.");

	::std::free(sa_id); sa_id = NULL;
	::std::free(sa_name); sa_name = NULL;

	ret = x509_crt_algorithm_info(bin6872330.x509_crt, &sa_id, &sa_name);
	QVERIFY2(ret == 0, "Could not obtain signature algorithm details.");
	QVERIFY2(sa_id != NULL &&
	         sa_id == QStringLiteral("1.2.840.113549.1.1.11"),
	         "Could not obtain signature algorithm identifier string.");
	QVERIFY2(sa_name != NULL &&
	         sa_name == QStringLiteral("sha256WithRSAEncryption"),
	         "Could not obtain signature algorithm name.");

	::std::free(sa_id); sa_id = NULL;
	::std::free(sa_name); sa_name = NULL;

	ret = x509_crt_algorithm_info(tst6872330.x509_crt, &sa_id, &sa_name);
	QVERIFY2(ret == 0, "Could not obtain signature algorithm details.");
	QVERIFY2(sa_id != NULL &&
	         sa_id == QStringLiteral("1.2.840.113549.1.1.11"),
	         "Could not obtain signature algorithm identifier string.");
	QVERIFY2(sa_name != NULL &&
	         sa_name == QStringLiteral("sha256WithRSAEncryption"),
	         "Could not obtain signature algorithm name.");

	::std::free(sa_id); sa_id = NULL;
	::std::free(sa_name); sa_name = NULL;

	ret = x509_crt_algorithm_info(bin7057429.x509_crt, &sa_id, &sa_name);
	QVERIFY2(ret == 0, "Could not obtain signature algorithm details.");
	QVERIFY2(sa_id != NULL &&
	         sa_id == QStringLiteral("1.2.840.113549.1.1.11"),
	         "Could not obtain signature algorithm identifier string.");
	QVERIFY2(sa_name != NULL &&
	         sa_name == QStringLiteral("sha256WithRSAEncryption"),
	         "Could not obtain signature algorithm name.");

	::std::free(sa_id); sa_id = NULL;
	::std::free(sa_name); sa_name = NULL;

	ret = x509_crt_algorithm_info(tst7057429.x509_crt, &sa_id, &sa_name);
	QVERIFY2(ret == 0, "Could not obtain signature algorithm details.");
	QVERIFY2(sa_id != NULL &&
	         sa_id == QStringLiteral("1.2.840.113549.1.1.11"),
	         "Could not obtain signature algorithm identifier string.");
	QVERIFY2(sa_name != NULL &&
	         sa_name == QStringLiteral("sha256WithRSAEncryption"),
	         "Could not obtain signature algorithm name.");

	::std::free(sa_id); sa_id = NULL;
	::std::free(sa_name); sa_name = NULL;
}

void TestCryptoMessage::crtDateInfo(void)
{
	time_t inception = 0, expiration = 0;
	int ret;

	ret = x509_crt_date_info(ddz.x509_crt, &inception, &expiration);
	QVERIFY2(ret == 0, "Could not obtain date details.");
	QVERIFY2(inception == 1412923874, "Got wrong inception time.");
	QVERIFY2(expiration == 1446187874, "Got wrong expiration time.");

	ret = x509_crt_date_info(tst.x509_crt, &inception, &expiration);
	QVERIFY2(ret == 0, "Could not obtain date details.");
	QVERIFY2(inception == 1377511700, "Got wrong inception time.");
	QVERIFY2(expiration == 1570183700, "Got wrong expiration time.");

	ret = x509_crt_date_info(bin3401766.x509_crt, &inception, &expiration);
	QVERIFY2(ret == 0, "Could not obtain date details.");
	QVERIFY2(inception == 1412923874, "Got wrong inception time.");
	QVERIFY2(expiration == 1446187874, "Got wrong expiration time.");

	ret = x509_crt_date_info(tst3401766.x509_crt, &inception, &expiration);
	QVERIFY2(ret == 0, "Could not obtain date details.");
	QVERIFY2(inception == 1408965020, "Got wrong inception time.");
	QVERIFY2(expiration == 1601637005, "Got wrong expiration time.");

	ret = x509_crt_date_info(bin6872330.x509_crt, &inception, &expiration);
	QVERIFY2(ret == 0, "Could not obtain date details.");
	QVERIFY2(inception == 1545223420, "Got wrong inception time.");
	QVERIFY2(expiration == 1578487420, "Got wrong expiration time.");

	ret = x509_crt_date_info(tst6872330.x509_crt, &inception, &expiration);
	QVERIFY2(ret == 0, "Could not obtain date details.");
	QVERIFY2(inception == 1542184459, "Got wrong inception time.");
	QVERIFY2(expiration == 1734856459, "Got wrong expiration time.");

	ret = x509_crt_date_info(bin7057429.x509_crt, &inception, &expiration);
	QVERIFY2(ret == 0, "Could not obtain date details.");
	QVERIFY2(inception == 1545223420, "Got wrong inception time.");
	QVERIFY2(expiration == 1578487420, "Got wrong expiration time.");

	ret = x509_crt_date_info(tst7057429.x509_crt, &inception, &expiration);
	QVERIFY2(ret == 0, "Could not obtain date details.");
	QVERIFY2(inception == 1554283194, "Got wrong inception time.");
	QVERIFY2(expiration == 1746955194, "Got wrong expiration time.");
}

void TestCryptoMessage::rawTstVerify(void)
{
	time_t timestamp;
	int ret;

	ret = raw_tst_verify(tst.der, tst.der_size, &timestamp);
	QVERIFY2(ret == 0, "Time stamp signature verification failed.");

	ret = raw_tst_verify(tst3401766.der, tst3401766.der_size, &timestamp);
	QVERIFY2(ret == 1, "Time stamp signature verification failed.");

	ret = raw_tst_verify(tst6872330.der, tst6872330.der_size, &timestamp);
	QVERIFY2(ret == 1, "Time stamp signature verification failed.");

	ret = raw_tst_verify(tst7057429.der, tst7057429.der_size, &timestamp);
	QVERIFY2(ret == 1, "Time stamp signature verification failed.");
}

void TestCryptoMessage::p12ToPem(void)
{
	void *p12_enc = NULL;
	size_t p12_enc_size = 0;
	void *pem_enc = NULL;
	size_t pem_enc_size = 0;

	void *p12 = NULL;
	size_t p12_size = 0;
	void *pem = NULL;
	size_t pem_size = 0;

	int ret;

	p12_enc = internal_read_file(p12EncryptedFilePath.toUtf8().constData(),
	    &p12_enc_size, "r");
	QVERIFY(p12_enc != NULL && p12_enc_size > 0);

	ret = p12_to_pem(p12_enc, p12_enc_size, pwd.toUtf8().constData(),
	    &pem_enc, &pem_enc_size);
	QVERIFY(ret == 0);
	QVERIFY(pem_enc != NULL && pem_enc_size > 0);
	::std::free(p12_enc); p12_enc = NULL;

//	fprintf(stderr, "XXX %s\n", pem_enc);

	/*
	 * In order to check whether the private key has been correctly
	 * decrypted compare the output of these commands:
	 *
	 * openssl pkcs12 -in data/cert_and_key_encrypted.p12 -nocerts -nodes
	 * ./test_7 2>&1 | openssl pkey
	 */

	::std::free(pem_enc); pem_enc = NULL;

	p12 = internal_read_file(p12FilePath.toUtf8().constData(),
	    &p12_size, "r");
	QVERIFY(p12 != NULL && p12_size > 0);

	ret = p12_to_pem(p12, p12_size, "", &pem, &pem_size);
	QVERIFY(ret == 0);
	QVERIFY(pem != NULL && pem_size > 0);

	::std::free(p12); p12 = NULL;

//	fprintf(stderr, "XXX %s\n", pem);

	::std::free(pem); pem = NULL;
}

void TestCryptoMessage::cryptoLibVerCompatible(void)
{
	int ret;
	const unsigned long v1_0_1a = 0x1000101fL;
	const unsigned long v1_0_1b = 0x1000102fL;
	const unsigned long v1_0_2a = 0x1000201fL;
	const unsigned long v1_1_0a = 0x1010001fL;

	ret = crypto_lib_ver_compatible(v1_0_1a, v1_0_1a);
	QVERIFY2(ret == 0, "Expected compatible outcome.");

	ret = crypto_lib_ver_compatible(v1_0_1a, v1_0_1b);
	QVERIFY2(ret == 1, "Expected incompatible outcome.");

	ret = crypto_lib_ver_compatible(v1_0_1a, v1_0_2a);
	QVERIFY2(ret == 1, "Expected incompatible outcome.");

	ret = crypto_lib_ver_compatible(v1_0_1a, v1_1_0a);
	QVERIFY2(ret == 1, "Expected incompatible outcome.");

	ret = crypto_lib_ver_compatible(v1_0_1b, v1_0_1a);
	QVERIFY2(ret == 0, "Expected compatible outcome.");

	ret = crypto_lib_ver_compatible(v1_0_1b, v1_0_1b);
	QVERIFY2(ret == 0, "Expected compatible outcome.");

	ret = crypto_lib_ver_compatible(v1_0_1b, v1_0_2a);
	QVERIFY2(ret == 1, "Expected incompatible outcome.");

	ret = crypto_lib_ver_compatible(v1_0_1b, v1_1_0a);
	QVERIFY2(ret == 1, "Expected incompatible outcome.");

	ret = crypto_lib_ver_compatible(v1_0_2a, v1_0_1a);
	QVERIFY2(ret == 0, "Expected compatible outcome.");

	ret = crypto_lib_ver_compatible(v1_0_2a, v1_0_1b);
	QVERIFY2(ret == 0, "Expected compatible outcome.");

	ret = crypto_lib_ver_compatible(v1_0_2a, v1_0_2a);
	QVERIFY2(ret == 0, "Expected compatible outcome.");

	ret = crypto_lib_ver_compatible(v1_0_2a, v1_1_0a);
	QVERIFY2(ret == 1, "Expected incompatible outcome.");

	ret = crypto_lib_ver_compatible(v1_1_0a, v1_0_1a);
	QVERIFY2(ret == 1, "Expected incompatible outcome.");

	ret = crypto_lib_ver_compatible(v1_1_0a, v1_0_1b);
	QVERIFY2(ret == 1, "Expected incompatible outcome.");

	ret = crypto_lib_ver_compatible(v1_1_0a, v1_0_2a);
	QVERIFY2(ret == 1, "Expected incompatible outcome.");

	ret = crypto_lib_ver_compatible(v1_1_0a, v1_1_0a);
	QVERIFY2(ret == 0, "Expected compatible outcome.");
}

void TestCryptoMessage::verifySignature(void)
{
	int ret;

	ret = raw_msg_verify_signature(ddz.der, ddz.der_size, 0, 0);
	QVERIFY2(ret == 1, "Expected valid signature result.");

	ret = raw_msg_verify_signature(ddz.der, ddz.der_size, 1, 0);
	QVERIFY2(ret == 0, "Expected invalid signature result.");

	ret = raw_msg_verify_signature(ddz.der, ddz.der_size, 0, 1);
	QVERIFY2(ret == 1, "Expected valid signature result.");

	ret = raw_msg_verify_signature(ddz.der, ddz.der_size, 1, 1);
	QVERIFY2(ret == 0, "Expected invalid signature result.");

	ret = raw_msg_verify_signature(tst.der, tst.der_size, 0, 0);
	QVERIFY2(ret == 1, "Expected valid signature result.");

	ret = raw_msg_verify_signature(tst.der, tst.der_size, 1, 0);
	QVERIFY2(ret == 0, "Expected invalid signature result.");

	ret = raw_msg_verify_signature(tst.der, tst.der_size, 0, 1);
	QVERIFY2(ret == 1, "Expected valid signature result.");

	ret = raw_msg_verify_signature(tst.der, tst.der_size, 1, 1);
	QVERIFY2(ret == 0, "Expected invalid signature result.");

	ret = raw_msg_verify_signature(bin3401766.der, bin3401766.der_size, 0, 0);
	QVERIFY2(ret == 1, "Expected valid signature result.");

	ret = raw_msg_verify_signature(bin3401766.der, bin3401766.der_size, 1, 0);
	QVERIFY2(ret == 0, "Expected invalid signature result.");

	ret = raw_msg_verify_signature(bin3401766.der, bin3401766.der_size, 0, 1);
	QVERIFY2(ret == 1, "Expected valid signature result.");

	ret = raw_msg_verify_signature(bin3401766.der, bin3401766.der_size, 1, 1);
	QVERIFY2(ret == 0, "Expected invalid signature result.");

	ret = raw_msg_verify_signature(tst3401766.der, tst3401766.der_size, 0, 0);
	QVERIFY2(ret == 1, "Expected valid signature result.");

	ret = raw_msg_verify_signature(tst3401766.der, tst3401766.der_size, 1, 0);
	QVERIFY2(ret == 0, "Expected invalid signature result.");

	ret = raw_msg_verify_signature(tst3401766.der, tst3401766.der_size, 0, 1);
	QVERIFY2(ret == 1, "Expected valid signature result.");

	ret = raw_msg_verify_signature(tst3401766.der, tst3401766.der_size, 1, 1);
	QVERIFY2(ret == 0, "Expected invalid signature result.");

	ret = raw_msg_verify_signature(bin6872330.der, bin6872330.der_size, 0, 0);
	QVERIFY2(ret == 1, "Expected valid signature result.");

	ret = raw_msg_verify_signature(bin6872330.der, bin6872330.der_size, 1, 0);
	QVERIFY2(ret == 1, "Expected valid signature result.");

	ret = raw_msg_verify_signature(bin6872330.der, bin6872330.der_size, 0, 1);
	QVERIFY2(ret == 1, "Expected valid signature result.");

	ret = raw_msg_verify_signature(bin6872330.der, bin6872330.der_size, 1, 1);
	QVERIFY2(ret == 1, "Expected valid signature result.");

	ret = raw_msg_verify_signature(tst6872330.der, tst6872330.der_size, 0, 0);
	QVERIFY2(ret == 1, "Expected valid signature result.");

	ret = raw_msg_verify_signature(tst6872330.der, tst6872330.der_size, 1, 0);
	QVERIFY2(ret == 0, "Expected invalid signature result.");

	ret = raw_msg_verify_signature(tst6872330.der, tst6872330.der_size, 0, 1);
	QVERIFY2(ret == 1, "Expected valid signature result.");

	ret = raw_msg_verify_signature(tst6872330.der, tst6872330.der_size, 1, 1);
	QVERIFY2(ret == 0, "Expected invalid signature result.");

	ret = raw_msg_verify_signature(bin7057429.der, bin7057429.der_size, 0, 0);
	QVERIFY2(ret == 1, "Expected valid signature result.");

	ret = raw_msg_verify_signature(bin7057429.der, bin7057429.der_size, 1, 0);
	QVERIFY2(ret == 1, "Expected valid signature result.");

	ret = raw_msg_verify_signature(bin7057429.der, bin7057429.der_size, 0, 1);
	QVERIFY2(ret == 1, "Expected valid signature result.");

	ret = raw_msg_verify_signature(bin7057429.der, bin7057429.der_size, 1, 1);
	QVERIFY2(ret == 1, "Expected valid signature result.");

	ret = raw_msg_verify_signature(tst7057429.der, tst7057429.der_size, 0, 0);
	QVERIFY2(ret == 1, "Expected valid signature result.");

	ret = raw_msg_verify_signature(tst7057429.der, tst7057429.der_size, 1, 0);
	QVERIFY2(ret == 0, "Expected invalid signature result.");

	ret = raw_msg_verify_signature(tst7057429.der, tst7057429.der_size, 0, 1);
	QVERIFY2(ret == 1, "Expected valid signature result.");

	ret = raw_msg_verify_signature(tst7057429.der, tst7057429.der_size, 1, 1);
	QVERIFY2(ret == 0, "Expected invalid signature result.");
}

void TestCryptoMessage::cryptoAddCrl(bool expectFail)
{
	char *der = NULL;
	size_t der_size = 0;
	int ret;

	der = internal_read_file(crl1FilePath.toUtf8().constData(),
	    &der_size, "r");
	QVERIFY(der != NULL && der_size > 0);
	ret = crypto_add_crl(der, der_size);
	if (expectFail) {
		QEXPECT_FAIL("",
		    "This CRL file was probably added in previous test.",
		    Continue);
	}
	QVERIFY(ret == 0);
	::std::free(der); der = NULL;

	der = internal_read_file(crl2FilePath.toUtf8().constData(),
	    &der_size, "r");
	QVERIFY(der != NULL && der_size > 0);
	ret = crypto_add_crl(der, der_size);
	if (expectFail) {
		QEXPECT_FAIL("",
		    "This CRL file was probably added in previous test.",
		    Continue);
	}
	QVERIFY(ret == 0);
	::std::free(der); der = NULL;
}

QObject *newTestCryptoMessage(void)
{
	return new (::std::nothrow) TestCryptoMessage();
}

//QTEST_MAIN(TestCryptoMessage)
#include "test_crypto_message.moc"
