nx_trust_store_load_from_certdata_test.nx source
↩ module page · 44 lines · 2217 B
1// nx_trust_store_load_from_certdata_test.nx -- KAT for the
2// boot-time certdata.txt -> TrustStore loader.
3//
4// Full happy-path against a real Mozilla certdata.txt drop is
5// exercised by Arc A's end-to-end demo (queued). This KAT
6// verifies the orchestrator's verdict surface:
7// - missing file -> FILE_FAIL
8// - sealed verdict gate
9//
10// expect_exit: 0
11// license_tier: ORIGINAL
12
13import "nx_syscalls.nx"
14import "nx_trust_store_load_from_certdata.nx"
15
16func main() -> i64 {
17 // ---- Test A: non-existent file path -> FILE_FAIL ----
18 let bogus_path: *u8 = sys_mmap(64)
19 // "/nonexistent/certdata-does-not-exist.txt"
20 bogus_path[0]=0x2F // /
21 bogus_path[1]=0x6E; bogus_path[2]=0x6F; bogus_path[3]=0x6E // non
22 bogus_path[4]=0x65; bogus_path[5]=0x78; bogus_path[6]=0x69 // exi
23 bogus_path[7]=0x73; bogus_path[8]=0x74; bogus_path[9]=0x65 // ste
24 bogus_path[10]=0x6E; bogus_path[11]=0x74 // nt
25 bogus_path[12]=0x2F // /
26 bogus_path[13]=0x63; bogus_path[14]=0x64; bogus_path[15]=0x2E // cd.
27 bogus_path[16]=0x74; bogus_path[17]=0x78; bogus_path[18]=0x74 // txt
28 bogus_path[19]=0
29
30 let v_a: i64 = nx_trust_store_load_from_certdata(bogus_path, 16, 65536)
31 if v_a != (0 - NX_TS_LOAD_CD_FILE_FAIL) { return 1 }
32
33 // ---- Test B: sealed verdict gate ----
34 if nx_trust_store_load_from_certdata_verdict_is_valid(NX_TS_LOAD_CD_OK) != 1 { return 10 }
35 if nx_trust_store_load_from_certdata_verdict_is_valid(NX_TS_LOAD_CD_FILE_FAIL) != 1 { return 11 }
36 if nx_trust_store_load_from_certdata_verdict_is_valid(NX_TS_LOAD_CD_PARSE_FAIL) != 1 { return 12 }
37 if nx_trust_store_load_from_certdata_verdict_is_valid(NX_TS_LOAD_CD_LOAD_FAIL) != 1 { return 13 }
38 if nx_trust_store_load_from_certdata_verdict_is_valid(NX_TS_LOAD_CD_ZERO_CERTS) != 1 { return 14 }
39 if nx_trust_store_load_from_certdata_verdict_is_valid(NX_TS_LOAD_CD_VERDICT_N) != 0 { return 15 }
40 if nx_trust_store_load_from_certdata_verdict_is_valid(0) != 0 { return 16 }
41 if nx_trust_store_load_from_certdata_verdict_is_valid(0 - 1) != 0 { return 17 }
42
43 return 0
44}