#! /usr/bin/env perl
# Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
# Copyright Nokia 2007-2019
# Copyright Siemens AG 2015-2019
#
# Licensed under the Apache License 2.0 (the "License").  You may not use
# this file except in compliance with the License.  You can obtain a copy
# in the file LICENSE in the source distribution or at
# https://www.openssl.org/source/license.html

use strict;
use OpenSSL::Test qw/:DEFAULT data_file srctop_file srctop_dir bldtop_file bldtop_dir/;
use OpenSSL::Test::Utils;

BEGIN {
    setup("test_cmp_protect");
}

use lib srctop_dir('Configurations');
use lib bldtop_dir('.');

my $no_fips = disabled('fips') || ($ENV{NO_FIPS} // 0);

plan skip_all => "This test is not supported in a no-cmp build"
    if disabled("cmp");

plan skip_all => "This test is not supported in a shared library build on Windows"
    if $^O eq 'MSWin32' && !disabled("shared");

plan tests => 2 + ($no_fips ? 0 : 1); #fips test

my @basic_cmd = ("cmp_protect_test",
                 data_file("prot_RSA.pem"),
                 data_file("IR_protected.der"), # signed using prot_RSA.pem
                 data_file("prot_Ed.pem"), # test/certs/root-ed25519.privkey.pem
                 data_file("GENM_protected_Ed.der"), # signed using prot_Ed.pem
                 data_file("IR_unprotected.der"),
                 data_file("IP_PBM.der"),
                 data_file("server.crt"),
                 data_file("server.pem"),
                 data_file("EndEntity1.crt"),
                 data_file("EndEntity2.crt"),
                 data_file("Root_CA.crt"),
                 data_file("Intermediate_CA.crt"));

ok(run(test([@basic_cmd, "none"])));

ok(run(test([@basic_cmd, "default", srctop_file("test", "default.cnf")])));

unless ($no_fips) {
    ok(run(test([@basic_cmd,
                 "fips", srctop_file("test", "fips-and-base.cnf")])));
}