|
 |
1495bf |
From c33a8fe36d340447641d4dc623c98d2bf9a2d650 Mon Sep 17 00:00:00 2001
|
|
|
1495bf |
From: Fraser Tweedale <ftweedal@redhat.com>
|
|
|
1495bf |
Date: Thu, 24 Aug 2017 13:37:36 +1000
|
|
|
1495bf |
Subject: [PATCH] MS cert template: add tests
|
|
|
1495bf |
|
|
|
1495bf |
Part of: https://pagure.io/certmonger/issue/78
|
|
|
1495bf |
---
|
|
|
1495bf |
tests/038-ms-v2-template/expected.out | 19 ++++++++++
|
|
|
1495bf |
tests/038-ms-v2-template/extract-extdata.py | 29 ++++++++++++++++
|
|
|
1495bf |
tests/038-ms-v2-template/run.sh | 54 +++++++++++++++++++++++++++++
|
|
|
1495bf |
tests/Makefile.am | 8 +++--
|
|
|
1495bf |
4 files changed, 108 insertions(+), 2 deletions(-)
|
|
|
1495bf |
create mode 100644 tests/038-ms-v2-template/expected.out
|
|
|
1495bf |
create mode 100755 tests/038-ms-v2-template/extract-extdata.py
|
|
|
1495bf |
create mode 100755 tests/038-ms-v2-template/run.sh
|
|
|
1495bf |
|
|
|
1495bf |
diff --git a/tests/038-ms-v2-template/expected.out b/tests/038-ms-v2-template/expected.out
|
|
|
1495bf |
new file mode 100644
|
|
|
1495bf |
index 0000000..7338a5f
|
|
|
1495bf |
--- /dev/null
|
|
|
1495bf |
+++ b/tests/038-ms-v2-template/expected.out
|
|
|
1495bf |
@@ -0,0 +1,19 @@
|
|
|
1495bf |
+[key]
|
|
|
1495bf |
+OK.
|
|
|
1495bf |
+[csr : bogus oid]
|
|
|
1495bf |
+extension not present
|
|
|
1495bf |
+[csr : bogus major version]
|
|
|
1495bf |
+extension not present
|
|
|
1495bf |
+[csr : missing major version]
|
|
|
1495bf |
+extension not present
|
|
|
1495bf |
+[csr : too many parts]
|
|
|
1495bf |
+extension not present
|
|
|
1495bf |
+[csr : oid, major version]
|
|
|
1495bf |
+ 0:d=0 hl=2 l= 8 cons: SEQUENCE
|
|
|
1495bf |
+ 2:d=1 hl=2 l= 3 prim: OBJECT :1.2.3.4
|
|
|
1495bf |
+ 7:d=1 hl=2 l= 1 prim: INTEGER :2A
|
|
|
1495bf |
+[csr : oid, major version, minor version]
|
|
|
1495bf |
+ 0:d=0 hl=2 l= 11 cons: SEQUENCE
|
|
|
1495bf |
+ 2:d=1 hl=2 l= 3 prim: OBJECT :1.2.3.4
|
|
|
1495bf |
+ 7:d=1 hl=2 l= 1 prim: INTEGER :2A
|
|
|
1495bf |
+ 10:d=1 hl=2 l= 1 prim: INTEGER :11
|
|
|
1495bf |
diff --git a/tests/038-ms-v2-template/extract-extdata.py b/tests/038-ms-v2-template/extract-extdata.py
|
|
|
1495bf |
new file mode 100755
|
|
|
1495bf |
index 0000000..cd96f99
|
|
|
1495bf |
--- /dev/null
|
|
|
1495bf |
+++ b/tests/038-ms-v2-template/extract-extdata.py
|
|
|
1495bf |
@@ -0,0 +1,29 @@
|
|
|
1495bf |
+#!/bin/python2
|
|
|
1495bf |
+
|
|
|
1495bf |
+# Given `openssl asn1parse` output of a CSR, look for the V2 Template
|
|
|
1495bf |
+# extension and output its data if found. Nonzero exit status if
|
|
|
1495bf |
+# not found.
|
|
|
1495bf |
+
|
|
|
1495bf |
+import binascii
|
|
|
1495bf |
+import re
|
|
|
1495bf |
+import sys
|
|
|
1495bf |
+
|
|
|
1495bf |
+STATE_SEARCH, STATE_FOUND, STATE_DONE = range(3)
|
|
|
1495bf |
+
|
|
|
1495bf |
+state = STATE_SEARCH
|
|
|
1495bf |
+
|
|
|
1495bf |
+for line in sys.stdin:
|
|
|
1495bf |
+ if state == STATE_SEARCH and ':1.3.6.1.4.1.311.21.7' in line:
|
|
|
1495bf |
+ state = STATE_FOUND
|
|
|
1495bf |
+ continue
|
|
|
1495bf |
+
|
|
|
1495bf |
+ # look for first OCTET STRING once we're in STATE_FOUND
|
|
|
1495bf |
+ #
|
|
|
1495bf |
+ if state == STATE_FOUND and 'OCTET STRING' in line:
|
|
|
1495bf |
+ result = re.search(r'\[HEX DUMP\]:(\w*)', line)
|
|
|
1495bf |
+ sys.stdout.write(binascii.unhexlify(result.group(1)))
|
|
|
1495bf |
+ state = STATE_DONE
|
|
|
1495bf |
+ break
|
|
|
1495bf |
+
|
|
|
1495bf |
+if state != STATE_DONE:
|
|
|
1495bf |
+ sys.exit(1)
|
|
|
1495bf |
diff --git a/tests/038-ms-v2-template/run.sh b/tests/038-ms-v2-template/run.sh
|
|
|
1495bf |
new file mode 100755
|
|
|
1495bf |
index 0000000..0eeb7f9
|
|
|
1495bf |
--- /dev/null
|
|
|
1495bf |
+++ b/tests/038-ms-v2-template/run.sh
|
|
|
1495bf |
@@ -0,0 +1,54 @@
|
|
|
1495bf |
+#!/bin/bash -e
|
|
|
1495bf |
+
|
|
|
1495bf |
+srcdir=$PWD
|
|
|
1495bf |
+cd $tmpdir
|
|
|
1495bf |
+
|
|
|
1495bf |
+mkconfig() {
|
|
|
1495bf |
+ cat > request <<- EOF
|
|
|
1495bf |
+ key_storage_type=FILE
|
|
|
1495bf |
+ key_storage_location=$tmpdir/key
|
|
|
1495bf |
+ cert_storage_type=FILE
|
|
|
1495bf |
+ cert_storage_location=$tmpdir/cert
|
|
|
1495bf |
+ template_subject=CN=MS V2 Certificate Template test
|
|
|
1495bf |
+ EOF
|
|
|
1495bf |
+}
|
|
|
1495bf |
+
|
|
|
1495bf |
+echo "[key]"
|
|
|
1495bf |
+mkconfig
|
|
|
1495bf |
+$toolsdir/keygen request
|
|
|
1495bf |
+
|
|
|
1495bf |
+echo "[csr : bogus oid]"
|
|
|
1495bf |
+mkconfig
|
|
|
1495bf |
+echo "template_certificate_template=NotAnOid:42" >> request
|
|
|
1495bf |
+$toolsdir/csrgen request | openssl asn1parse \
|
|
|
1495bf |
+ | $srcdir/extract-extdata.py || echo "extension not present"
|
|
|
1495bf |
+
|
|
|
1495bf |
+echo "[csr : bogus major version]"
|
|
|
1495bf |
+mkconfig
|
|
|
1495bf |
+echo "template_certificate_template=1.2.3.4:wat" >> request
|
|
|
1495bf |
+$toolsdir/csrgen request | openssl asn1parse \
|
|
|
1495bf |
+ | $srcdir/extract-extdata.py || echo "extension not present"
|
|
|
1495bf |
+
|
|
|
1495bf |
+echo "[csr : missing major version]"
|
|
|
1495bf |
+mkconfig
|
|
|
1495bf |
+echo "template_certificate_template=1.2.3.4" >> request
|
|
|
1495bf |
+$toolsdir/csrgen request | openssl asn1parse \
|
|
|
1495bf |
+ | $srcdir/extract-extdata.py || echo "extension not present"
|
|
|
1495bf |
+
|
|
|
1495bf |
+echo "[csr : too many parts]"
|
|
|
1495bf |
+mkconfig
|
|
|
1495bf |
+echo "template_certificate_template=1.2.3.4:1:1:1" >> request
|
|
|
1495bf |
+$toolsdir/csrgen request | openssl asn1parse \
|
|
|
1495bf |
+ | $srcdir/extract-extdata.py || echo "extension not present"
|
|
|
1495bf |
+
|
|
|
1495bf |
+echo "[csr : oid, major version]"
|
|
|
1495bf |
+mkconfig
|
|
|
1495bf |
+echo "template_certificate_template=1.2.3.4:42" >> request
|
|
|
1495bf |
+$toolsdir/csrgen request | openssl asn1parse \
|
|
|
1495bf |
+ | $srcdir/extract-extdata.py | openssl asn1parse -inform DER
|
|
|
1495bf |
+
|
|
|
1495bf |
+echo "[csr : oid, major version, minor version]"
|
|
|
1495bf |
+mkconfig
|
|
|
1495bf |
+echo "template_certificate_template=1.2.3.4:42:17" >> request
|
|
|
1495bf |
+$toolsdir/csrgen request | openssl asn1parse \
|
|
|
1495bf |
+ | $srcdir/extract-extdata.py | openssl asn1parse -inform DER
|
|
|
1495bf |
diff --git a/tests/Makefile.am b/tests/Makefile.am
|
|
|
1495bf |
index bbcd06e..562b027 100644
|
|
|
1495bf |
--- a/tests/Makefile.am
|
|
|
1495bf |
+++ b/tests/Makefile.am
|
|
|
1495bf |
@@ -148,7 +148,10 @@ EXTRA_DIST = \
|
|
|
1495bf |
036-getcert/expected.out \
|
|
|
1495bf |
036-getcert/run.sh \
|
|
|
1495bf |
037-rekey2/expected.out \
|
|
|
1495bf |
- 037-rekey2/run.sh
|
|
|
1495bf |
+ 037-rekey2/run.sh \
|
|
|
1495bf |
+ 038-ms-v2-template/expected.out \
|
|
|
1495bf |
+ 038-ms-v2-template/extract-extdata.py \
|
|
|
1495bf |
+ 038-ms-v2-template/run.sh
|
|
|
1495bf |
|
|
|
1495bf |
subdirs = \
|
|
|
1495bf |
001-keyiread \
|
|
|
1495bf |
@@ -189,7 +192,8 @@ subdirs = \
|
|
|
1495bf |
034-perms \
|
|
|
1495bf |
035-json \
|
|
|
1495bf |
036-getcert \
|
|
|
1495bf |
- 037-rekey2
|
|
|
1495bf |
+ 037-rekey2 \
|
|
|
1495bf |
+ 038-ms-v2-template
|
|
|
1495bf |
|
|
|
1495bf |
if HAVE_DBM_NSSDB
|
|
|
1495bf |
subdirs += \
|
|
|
1495bf |
--
|
|
|
1495bf |
2.14.4
|
|
|
1495bf |
|