Blame SOURCES/0018-MS-cert-template-add-tests.patch

10e13a
From c33a8fe36d340447641d4dc623c98d2bf9a2d650 Mon Sep 17 00:00:00 2001
10e13a
From: Fraser Tweedale <ftweedal@redhat.com>
10e13a
Date: Thu, 24 Aug 2017 13:37:36 +1000
10e13a
Subject: [PATCH] MS cert template: add tests
10e13a
10e13a
Part of: https://pagure.io/certmonger/issue/78
10e13a
---
10e13a
 tests/038-ms-v2-template/expected.out       | 19 ++++++++++
10e13a
 tests/038-ms-v2-template/extract-extdata.py | 29 ++++++++++++++++
10e13a
 tests/038-ms-v2-template/run.sh             | 54 +++++++++++++++++++++++++++++
10e13a
 tests/Makefile.am                           |  8 +++--
10e13a
 4 files changed, 108 insertions(+), 2 deletions(-)
10e13a
 create mode 100644 tests/038-ms-v2-template/expected.out
10e13a
 create mode 100755 tests/038-ms-v2-template/extract-extdata.py
10e13a
 create mode 100755 tests/038-ms-v2-template/run.sh
10e13a
10e13a
diff --git a/tests/038-ms-v2-template/expected.out b/tests/038-ms-v2-template/expected.out
10e13a
new file mode 100644
10e13a
index 0000000..7338a5f
10e13a
--- /dev/null
10e13a
+++ b/tests/038-ms-v2-template/expected.out
10e13a
@@ -0,0 +1,19 @@
10e13a
+[key]
10e13a
+OK.
10e13a
+[csr : bogus oid]
10e13a
+extension not present
10e13a
+[csr : bogus major version]
10e13a
+extension not present
10e13a
+[csr : missing major version]
10e13a
+extension not present
10e13a
+[csr : too many parts]
10e13a
+extension not present
10e13a
+[csr : oid, major version]
10e13a
+    0:d=0  hl=2 l=   8 cons: SEQUENCE          
10e13a
+    2:d=1  hl=2 l=   3 prim: OBJECT            :1.2.3.4
10e13a
+    7:d=1  hl=2 l=   1 prim: INTEGER           :2A
10e13a
+[csr : oid, major version, minor version]
10e13a
+    0:d=0  hl=2 l=  11 cons: SEQUENCE          
10e13a
+    2:d=1  hl=2 l=   3 prim: OBJECT            :1.2.3.4
10e13a
+    7:d=1  hl=2 l=   1 prim: INTEGER           :2A
10e13a
+   10:d=1  hl=2 l=   1 prim: INTEGER           :11
10e13a
diff --git a/tests/038-ms-v2-template/extract-extdata.py b/tests/038-ms-v2-template/extract-extdata.py
10e13a
new file mode 100755
10e13a
index 0000000..cd96f99
10e13a
--- /dev/null
10e13a
+++ b/tests/038-ms-v2-template/extract-extdata.py
10e13a
@@ -0,0 +1,29 @@
10e13a
+#!/bin/python2
10e13a
+
10e13a
+# Given `openssl asn1parse` output of a CSR, look for the V2 Template
10e13a
+# extension and output its data if found.  Nonzero exit status if
10e13a
+# not found.
10e13a
+
10e13a
+import binascii
10e13a
+import re
10e13a
+import sys
10e13a
+
10e13a
+STATE_SEARCH, STATE_FOUND, STATE_DONE = range(3)
10e13a
+
10e13a
+state = STATE_SEARCH
10e13a
+
10e13a
+for line in sys.stdin:
10e13a
+    if state == STATE_SEARCH and ':1.3.6.1.4.1.311.21.7' in line:
10e13a
+        state = STATE_FOUND
10e13a
+        continue
10e13a
+
10e13a
+    # look for first OCTET STRING once we're in STATE_FOUND
10e13a
+    #
10e13a
+    if state == STATE_FOUND and 'OCTET STRING' in line:
10e13a
+        result = re.search(r'\[HEX DUMP\]:(\w*)', line)
10e13a
+        sys.stdout.write(binascii.unhexlify(result.group(1)))
10e13a
+        state = STATE_DONE
10e13a
+        break
10e13a
+
10e13a
+if state != STATE_DONE:
10e13a
+    sys.exit(1)
10e13a
diff --git a/tests/038-ms-v2-template/run.sh b/tests/038-ms-v2-template/run.sh
10e13a
new file mode 100755
10e13a
index 0000000..0eeb7f9
10e13a
--- /dev/null
10e13a
+++ b/tests/038-ms-v2-template/run.sh
10e13a
@@ -0,0 +1,54 @@
10e13a
+#!/bin/bash -e
10e13a
+
10e13a
+srcdir=$PWD
10e13a
+cd $tmpdir
10e13a
+
10e13a
+mkconfig() {
10e13a
+	cat > request <<- EOF
10e13a
+	key_storage_type=FILE
10e13a
+	key_storage_location=$tmpdir/key
10e13a
+	cert_storage_type=FILE
10e13a
+	cert_storage_location=$tmpdir/cert
10e13a
+	template_subject=CN=MS V2 Certificate Template test
10e13a
+	EOF
10e13a
+}
10e13a
+
10e13a
+echo "[key]"
10e13a
+mkconfig
10e13a
+$toolsdir/keygen request
10e13a
+
10e13a
+echo "[csr : bogus oid]"
10e13a
+mkconfig
10e13a
+echo "template_certificate_template=NotAnOid:42" >> request
10e13a
+$toolsdir/csrgen request | openssl asn1parse \
10e13a
+	| $srcdir/extract-extdata.py || echo "extension not present"
10e13a
+
10e13a
+echo "[csr : bogus major version]"
10e13a
+mkconfig
10e13a
+echo "template_certificate_template=1.2.3.4:wat" >> request
10e13a
+$toolsdir/csrgen request | openssl asn1parse \
10e13a
+	| $srcdir/extract-extdata.py || echo "extension not present"
10e13a
+
10e13a
+echo "[csr : missing major version]"
10e13a
+mkconfig
10e13a
+echo "template_certificate_template=1.2.3.4" >> request
10e13a
+$toolsdir/csrgen request | openssl asn1parse \
10e13a
+	| $srcdir/extract-extdata.py || echo "extension not present"
10e13a
+
10e13a
+echo "[csr : too many parts]"
10e13a
+mkconfig
10e13a
+echo "template_certificate_template=1.2.3.4:1:1:1" >> request
10e13a
+$toolsdir/csrgen request | openssl asn1parse \
10e13a
+	| $srcdir/extract-extdata.py || echo "extension not present"
10e13a
+
10e13a
+echo "[csr : oid, major version]"
10e13a
+mkconfig
10e13a
+echo "template_certificate_template=1.2.3.4:42" >> request
10e13a
+$toolsdir/csrgen request | openssl asn1parse \
10e13a
+	| $srcdir/extract-extdata.py | openssl asn1parse -inform DER
10e13a
+
10e13a
+echo "[csr : oid, major version, minor version]"
10e13a
+mkconfig
10e13a
+echo "template_certificate_template=1.2.3.4:42:17" >> request
10e13a
+$toolsdir/csrgen request | openssl asn1parse \
10e13a
+	| $srcdir/extract-extdata.py | openssl asn1parse -inform DER
10e13a
diff --git a/tests/Makefile.am b/tests/Makefile.am
10e13a
index bbcd06e..562b027 100644
10e13a
--- a/tests/Makefile.am
10e13a
+++ b/tests/Makefile.am
10e13a
@@ -148,7 +148,10 @@ EXTRA_DIST = \
10e13a
 	036-getcert/expected.out \
10e13a
 	036-getcert/run.sh \
10e13a
 	037-rekey2/expected.out \
10e13a
-	037-rekey2/run.sh
10e13a
+	037-rekey2/run.sh \
10e13a
+	038-ms-v2-template/expected.out \
10e13a
+	038-ms-v2-template/extract-extdata.py \
10e13a
+	038-ms-v2-template/run.sh
10e13a
 
10e13a
 subdirs = \
10e13a
 	001-keyiread \
10e13a
@@ -189,7 +192,8 @@ subdirs = \
10e13a
 	034-perms \
10e13a
 	035-json \
10e13a
 	036-getcert \
10e13a
-	037-rekey2
10e13a
+	037-rekey2 \
10e13a
+	038-ms-v2-template
10e13a
 
10e13a
 if HAVE_DBM_NSSDB
10e13a
 subdirs += \
10e13a
-- 
10e13a
2.14.4
10e13a