RFCcertDT:SSL/TLS中证书验证的测试工具

doi:10.19665/j.issn1001-2400.2019.03.004

摘要/Abstract

摘要：

为解决现有工具对安全套接层或传输层安全协议实现中证书验证模块的检测效率低等问题,研发了对证书验证模块进行差异测试的新工具RFCcertDT。首先,RFCcertDT基于因特网工程任务组制定的请求评议进行证书规则的自动提取、更新、分类和表示,基于动态符号执行技术生成证书作为测试用例;然后,使用生成的证书和令牌环式测试实现对单个或多个证书验证模块的差异测试并生成软件错误报告。实验结果表明,RFCcertDT的检测效率优于现有工具。RFCcertDT对证书验证模块实现了高效的检测,有助于加强安全套接层或传输层安全协议的软件安全。

关键词: 安全套接层协议, 传输层安全协议, 请求评议, 证书验证, 差异测试, 动态符号执行

Abstract:

To solve the problems such as low efficiency of existing tools which are used to check certificate validation modules in the implementation of Secure Sockets Layer or Transport Layer Security protocol, a novel tool named RFCcertDT for differential testing of certificate validation modules is designed and developed. First, rules of certificates are automatically extracted, updated, classified and expressed based on the Request for Comments specified by the Internet Engineering Task Force, and certificates which act as test cases are generated based on the dynamic symbolic execution technique. Second, the generated certificates and the token-ring testing are used to conduct differential testing of a single or multiple certificate validation modules and generate bug reports. Experimental results show that the RFCcertDT is more efficient than existing tools. In summary, the RFCcertDT tests certificate validation modules with high efficiency and is helpful to reinforcing the software security of the Secure Sockets Layer or Transport Layer Security protocol.

Key words: secure sockets layer, transport layer security, request for comments, certificate validation, differential testing, dynamic symbolic execution

中图分类号:

TP311.5

陈矗. RFCcertDT:SSL/TLS中证书验证的测试工具[J]. 西安电子科技大学学报, 2019, 46(3): 20-25.

CHEN Chu. RFCcertDT: a testing tool for certificate validation in SSL/TLS[J]. Journal of Xidian University, 2019, 46(3): 20-25.

图/表 4

参考文献 17

[1]	FREIER A, KARTON P, KOCHER P . The Secure Sockets Layer (SSL) Protocol Version 3.0: RFC 6101 [S/OL]. [ 2019-02-25]. https://tools.ietf.org/html/rfc6101
[2]	DIERKS T, RESCORLA E . The Transport Layer Security (TLS) Protocol Version 1.2: RFC 5246 [S/OL]. [ 2019-02-25]. https://tools.ietf.org/html/rfc5246
[3]	Information Technology Laboratory. National Vulnerabilty Database CVE-2016-8495 Details [EB/OL]. [2019-02-20]. https://nvd.nist.gov/vuln/detail/CVE-2016-8495
[4]	BRUBAKER C, JANA S, RAY B , et al. Using Frankencerts for Automated Adversarial Testing of Certificate Validation in SSL/TLS Implementations [C]//Proceedings of the 2014 IEEE Symposium on Security and Privacy. Washington:IEEE Computer Society, 2014: 114-129.
[5]	CHEN Y T, SU Z D . Guided Differential Testing of Certificate Validation in SSL/TLS Implementations [C]// Proceedings of the 2015 10th Joint Meeting of the European Software Engineering Conference and the ACM SIGSOFT Symposium on the Foundations of Software Engineering. New York: ACM, 2015: 793-804.
[6]	CHAU S Y, CHOWDHURY O, HOQUE E , et al. SymCerts: Practical Symbolic Execution for Exposing Noncompliance in X.509 Certificate Validation Implementations [C]//Proceedings of the 2017 IEEE Symposium on Security and Privacy. Piscataway: IEEE, 2017: 503-520.
[7]	PETSIOS T, TANG A, STOLFO S , et al. NEZHA: Efficient Domain-independent Differential Testing [C]// Proceedings of the 2017 IEEE Symposium on Security and Privacy. Piscataway: IEEE, 2017: 615-632.
[8]	COOPER D, SANTESSON S, FARRELL S , et al. Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile: RFC 5280 [S/OL]. [2019-02-25]. https://tools.ietf.org/html/rfc5280
[9]	BRADNER S . Key Words for Use in RFCs to Indicate Requirement Levels: RFC 2119[S/OL]. [ 2019-02-25]. https://tools.ietf.org/html/rfc2119
[10]	LEIBA B . Ambiguity of Uppercase vs Lowercase in RFC 2119: RFC 8174 [S/OL]. [2019-02-20]. https://tools.ietf.org/html/rfc8174
[11]	BALDONI R, COPPA E, D’ELIA D C et al. A Survey of Symbolic Execution Techniques[J]. ACM Computing Surveys, 2018,51(3): 50:1-50:39.
[12]	MCKEEMAN W M . Differential Testing for Software[J]. Digital Technical Journal, 1998,10(1):100-107.
[13]	EVANS R B, SAVOIA A . Differential Testing: a New Approach to Change Detection [C]// Proceedings of the 2007 6th Joint Meeting of the European Software Engineering Conference and the ACM SIGSOFT Symposium on the Foundations of Software Engineering. New York: ACM, 2007: 549-552.
[14]	CHEN Y T, SU T, SUN C N , et al. Coverage-directed Differential Testing of JVM Implementations [C]// Proceedings of the 2016 ACM SIGPLAN Conference on Programming Language Design and Implementation. New York: ACM, 2016: 85-99.
[15]	YEE P . Updates to the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile: RFC 6818 [S/OL]. [ 2019-02-25]. https://tools.ietf.org/html/rfc6818
[16]	CADAR C, DUNBAR D, ENGLER D R . KLEE: Unassisted and Automatic Generation of High-coverage Tests for Complex Systems Programs [C]//Proceedings of the 2008 8th USENIX Conference on Operating Systems Design and Implementation. Berkeley: USENIX Association, 2008: 209-224.
[17]	CHEN C, TIAN C, DUAN Z H , et al. RFC-directed Differential Testing of Certificate Validation in SSL/TLS Implementations [C]//Proceedings of the 2018 International Conference on Software Engineering. New York: ACM, 2018: 859-870.

项目	生成证书和测试总时间/s	发现的差异数量/个
Path δ-diversity (coarse)	50	8
Path δ-diversity (fine)	45	9
Output δ-diversity	51	11
RFCcertDT	35	79

项目	wolfSSL v3.6.6/v3.9.10/个	mbedTLS v2.1.4/v.2.3.0/个	matrixSSL v3.7.2/v3.8.6	时间/s
SymCerts	2	1	5	7 260
RFCcertDT	26	26	11	22