Blame tests/ec-common.sh

Packit 6b81fa
#!/bin/sh
Packit 6b81fa
Packit 6b81fa
# Copyright (C) 2013 Nikos Mavrogiannopoulos
Packit 6b81fa
# Copyright (C) 2015 Red Hat, Inc.
Packit 6b81fa
#
Packit 6b81fa
# This is free software; you can redistribute it and/or modify it
Packit 6b81fa
# under the terms of the GNU General Public License as published by the
Packit 6b81fa
# Free Software Foundation; either version 3 of the License, or (at
Packit 6b81fa
# your option) any later version.
Packit 6b81fa
#
Packit 6b81fa
# GnuTLS is distributed in the hope that it will be useful, but
Packit 6b81fa
# WITHOUT ANY WARRANTY; without even the implied warranty of
Packit 6b81fa
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
Packit 6b81fa
# General Public License for more details.
Packit 6b81fa
#
Packit 6b81fa
# You should have received a copy of the GNU General Public License
Packit 6b81fa
# along with GnuTLS; if not, write to the Free Software Foundation,
Packit 6b81fa
# Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
Packit 6b81fa
Packit 6b81fa
OPENSSL_VERSION=$(./openssl_version | cut -d ' ' -f 2)
Packit 6b81fa
case "${OPENSSL_VERSION}" in
Packit 6b81fa
0.*)
Packit 6b81fa
    echo "EC tests skipped with OpenSSL ${OPENSSL_VERSION}"
Packit 6b81fa
	exit 77
Packit 6b81fa
	;;
Packit 6b81fa
*)
Packit 6b81fa
	;;
Packit 6b81fa
esac
Packit 6b81fa
Packit 6b81fa
echo "Current directory: $(pwd)"
Packit 6b81fa
echo "Source directory: ${srcdir}"
Packit 6b81fa
echo "Output directory: ${outdir}"
Packit 6b81fa
Packit 6b81fa
mkdir -p $outdir
Packit 6b81fa
Packit 6b81fa
for i in /usr/lib64/pkcs11 /usr/lib64/softhsm /usr/lib/x86_64-linux-gnu/softhsm /usr/local/lib/softhsm /opt/local/lib/softhsm /usr/lib/softhsm /usr/lib ;do
Packit 6b81fa
	if test -f "$i/libsofthsm2.so"; then
Packit 6b81fa
		MODULE="$i/libsofthsm2.so"
Packit 6b81fa
		break
Packit 6b81fa
	else
Packit 6b81fa
		if test -f "$i/libsofthsm.so";then
Packit 6b81fa
			MODULE="$i/libsofthsm.so"
Packit 6b81fa
			break
Packit 6b81fa
		fi
Packit 6b81fa
	fi
Packit 6b81fa
done
Packit 6b81fa
Packit 6b81fa
if (! test -x /usr/bin/pkcs11-tool && ! test -x /usr/local/bin/pkcs11-tool);then
Packit 6b81fa
	exit 77
Packit 6b81fa
fi
Packit 6b81fa
Packit 6b81fa
init_card () {
Packit 6b81fa
	PIN="$1"
Packit 6b81fa
	PUK="$2"
Packit 6b81fa
Packit 6b81fa
	if test -x "/usr/bin/softhsm"; then
Packit 6b81fa
		export SOFTHSM_CONF="$outdir/softhsm-testpkcs11.config"
Packit 6b81fa
		SOFTHSM_TOOL="/usr/bin/softhsm"
Packit 6b81fa
	fi
Packit 6b81fa
Packit 6b81fa
	if test -x "/usr/local/bin/softhsm2-util"; then
Packit 6b81fa
		export SOFTHSM2_CONF="$outdir/softhsm-testpkcs11.config"
Packit 6b81fa
		SOFTHSM_TOOL="/usr/local/bin/softhsm2-util"
Packit 6b81fa
	fi
Packit 6b81fa
Packit 6b81fa
	if test -x "/opt/local/bin/softhsm2-util"; then
Packit 6b81fa
		export SOFTHSM2_CONF="$outdir/softhsm-testpkcs11.config"
Packit 6b81fa
		SOFTHSM_TOOL="/opt/local/bin/softhsm2-util"
Packit 6b81fa
	fi
Packit 6b81fa
Packit 6b81fa
	if test -x "/usr/bin/softhsm2-util"; then
Packit 6b81fa
		export SOFTHSM2_CONF="$outdir/softhsm-testpkcs11.config"
Packit 6b81fa
		SOFTHSM_TOOL="/usr/bin/softhsm2-util"
Packit 6b81fa
	fi
Packit 6b81fa
Packit 6b81fa
	if test -z "${SOFTHSM_TOOL}"; then
Packit 6b81fa
		echo "Could not find softhsm(2) tool"
Packit 6b81fa
		exit 77
Packit 6b81fa
	fi
Packit 6b81fa
Packit 6b81fa
	if test -n "${SOFTHSM2_CONF}"; then
Packit 6b81fa
		rm -rf $outdir/softhsm-testpkcs11.db
Packit 6b81fa
		mkdir -p $outdir/softhsm-testpkcs11.db
Packit 6b81fa
		echo "objectstore.backend = file" > "${SOFTHSM2_CONF}"
Packit 6b81fa
		echo "directories.tokendir = $outdir/softhsm-testpkcs11.db" >> "${SOFTHSM2_CONF}"
Packit 6b81fa
	else
Packit 6b81fa
		rm -rf $outdir/softhsm-testpkcs11.db
Packit 6b81fa
		echo "0:$outdir/softhsm-testpkcs11.db" > "${SOFTHSM_CONF}"
Packit 6b81fa
	fi
Packit 6b81fa
Packit 6b81fa
Packit 6b81fa
	echo -n "* Initializing smart card... "
Packit 6b81fa
	${SOFTHSM_TOOL} --init-token --slot 0 --label "libp11-test" --so-pin "${PUK}" --pin "${PIN}" >/dev/null
Packit 6b81fa
	if test $? = 0; then
Packit 6b81fa
		echo ok
Packit 6b81fa
	else
Packit 6b81fa
		echo failed
Packit 6b81fa
		exit 1
Packit 6b81fa
	fi
Packit 6b81fa
}
Packit 6b81fa
Packit 6b81fa
PIN=1234
Packit 6b81fa
PUK=1234
Packit 6b81fa
init_card $PIN $PUK
Packit 6b81fa
Packit 6b81fa
# generate key in token
Packit 6b81fa
pkcs11-tool -p $PIN --module $MODULE -d 01020304 -a server-key -l -w ${srcdir}/ec-prvkey.der -y privkey >/dev/null
Packit 6b81fa
if test $? != 0;then
Packit 6b81fa
	exit 1;
Packit 6b81fa
fi
Packit 6b81fa
Packit 6b81fa
# pkcs11-tool currently only supports RSA public keys
Packit 6b81fa
pkcs11-tool -p $PIN --module $MODULE -d 01020304 -a server-key -l -w ${srcdir}/ec-pubkey.der -y pubkey >/dev/null
Packit 6b81fa
if test $? != 0;then
Packit 6b81fa
	exit 1;
Packit 6b81fa
fi
Packit 6b81fa
Packit 6b81fa
pkcs11-tool -p $PIN --module $MODULE -d 01020304 -a server-key -l -w ${srcdir}/ec-cert.der -y cert >/dev/null
Packit 6b81fa
if test $? != 0;then
Packit 6b81fa
	exit 1;
Packit 6b81fa
fi
Packit 6b81fa
Packit 6b81fa
echo "***************"
Packit 6b81fa
echo "Listing objects"
Packit 6b81fa
echo "***************"
Packit 6b81fa
pkcs11-tool -p $PIN --module $MODULE -l -O