|
 |
524513 |
From 53ecfcf6d934206e3daef4ed3515a0d6f098e276 Mon Sep 17 00:00:00 2001
|
|
|
524513 |
From: Sergio Correia <scorreia@redhat.com>
|
|
|
524513 |
Date: Wed, 16 Oct 2019 11:40:33 -0300
|
|
|
524513 |
Subject: [PATCH 1/2] Adjust pin-tang test to account for newer tang without
|
|
|
524513 |
tangd-update
|
|
|
524513 |
|
|
|
524513 |
---
|
|
|
524513 |
src/pins/tang/meson.build | 9 ++-------
|
|
|
524513 |
src/pins/tang/pin-tang | 11 ++++++++---
|
|
|
524513 |
2 files changed, 10 insertions(+), 10 deletions(-)
|
|
|
524513 |
|
|
|
524513 |
diff --git a/src/pins/tang/meson.build b/src/pins/tang/meson.build
|
|
|
524513 |
index 110d72d..061a79f 100644
|
|
|
524513 |
--- a/src/pins/tang/meson.build
|
|
|
524513 |
+++ b/src/pins/tang/meson.build
|
|
|
524513 |
@@ -8,11 +8,6 @@ kgen = find_program(
|
|
|
524513 |
'/usr/libexec/tangd-keygen',
|
|
|
524513 |
required: false
|
|
|
524513 |
)
|
|
|
524513 |
-updt = find_program(
|
|
|
524513 |
- join_paths(libexecdir, 'tangd-update'),
|
|
|
524513 |
- '/usr/libexec/tangd-update',
|
|
|
524513 |
- required: false
|
|
|
524513 |
-)
|
|
|
524513 |
tang = find_program(
|
|
|
524513 |
join_paths(libexecdir, 'tangd'),
|
|
|
524513 |
'/usr/libexec/tangd',
|
|
|
524513 |
@@ -25,7 +20,7 @@ if curl.found()
|
|
|
524513 |
bins += join_paths(meson.current_source_dir(), 'clevis-encrypt-tang')
|
|
|
524513 |
mans += join_paths(meson.current_source_dir(), 'clevis-encrypt-tang.1')
|
|
|
524513 |
|
|
|
524513 |
- if actv.found() and kgen.found() and updt.found() and tang.found()
|
|
|
524513 |
+ if actv.found() and kgen.found() and tang.found()
|
|
|
524513 |
env = environment()
|
|
|
524513 |
env.set('SD_ACTIVATE', actv.path())
|
|
|
524513 |
env.append('PATH',
|
|
|
524513 |
@@ -42,4 +37,4 @@ if curl.found()
|
|
|
524513 |
endif
|
|
|
524513 |
else
|
|
|
524513 |
warning('Will not install tang pin due to missing dependencies!')
|
|
|
524513 |
-endif
|
|
|
524513 |
\ No newline at end of file
|
|
|
524513 |
+endif
|
|
|
524513 |
diff --git a/src/pins/tang/pin-tang b/src/pins/tang/pin-tang
|
|
|
524513 |
index f420818..9dcc2da 100755
|
|
|
524513 |
--- a/src/pins/tang/pin-tang
|
|
|
524513 |
+++ b/src/pins/tang/pin-tang
|
|
|
524513 |
@@ -31,18 +31,23 @@ mkdir -p $TMP/db
|
|
|
524513 |
mkdir -p $TMP/cache
|
|
|
524513 |
|
|
|
524513 |
# Generate the server keys
|
|
|
524513 |
+KEYS=$TMP/db
|
|
|
524513 |
tangd-keygen $TMP/db sig exc
|
|
|
524513 |
-tangd-update $TMP/db $TMP/cache
|
|
|
524513 |
+if which tangd-update; then
|
|
|
524513 |
+ tangd-update $TMP/db $TMP/cache
|
|
|
524513 |
+ KEYS=$TMP/cache
|
|
|
524513 |
+fi
|
|
|
524513 |
|
|
|
524513 |
# Start the server
|
|
|
524513 |
port=`shuf -i 1024-65536 -n 1`
|
|
|
524513 |
-$SD_ACTIVATE --inetd -l 127.0.0.1:$port -a tangd $TMP/cache &
|
|
|
524513 |
+$SD_ACTIVATE --inetd -l 127.0.0.1:$port -a tangd $KEYS &
|
|
|
524513 |
export PID=$!
|
|
|
524513 |
sleep 0.25
|
|
|
524513 |
|
|
|
524513 |
thp=`jose jwk thp -i "$TMP/db/sig.jwk"`
|
|
|
524513 |
-adv="$TMP/cache/default.jws"
|
|
|
524513 |
url="http://localhost:${port}"
|
|
|
524513 |
+adv="$TMP/adv"
|
|
|
524513 |
+curl "$url/adv" -o $adv
|
|
|
524513 |
|
|
|
524513 |
cfg=`printf '{"url":"%s","adv":"%s"}' "$url" "$adv"`
|
|
|
524513 |
enc=`echo -n "hi" | clevis encrypt tang "$cfg"`
|
|
|
524513 |
--
|
|
|
524513 |
2.21.0
|
|
|
524513 |
|