You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
139 lines
6.9 KiB
139 lines
6.9 KiB
#!/bin/sh
|
|
|
|
PRINT_PASSED=2
|
|
|
|
printf "Initializing tests ...\n"
|
|
|
|
OPENSSL_PEM="$(mktemp)"
|
|
OPENSSL_DER="$(mktemp)"
|
|
|
|
NONCE=$(dd if=/dev/urandom bs=1 count=4 2>/dev/null | hexdump -e '1/1 "%02x"')
|
|
SUBJECT="/C=ZZ/ST=Somewhere/L=None/O=OpenWrt'$NONCE'/CN=OpenWrt"
|
|
|
|
openssl req -x509 -nodes -days 1 -keyout /dev/null 2>/dev/null \
|
|
-out "$OPENSSL_PEM" -subj "$SUBJECT" \
|
|
|| ( printf "error: generating PEM certificate with openssl"; return 1)
|
|
openssl req -x509 -nodes -days 1 -keyout /dev/null 2>/dev/null \
|
|
-out "$OPENSSL_DER" -outform der -subj "$SUBJECT" \
|
|
|| ( printf "error: generating DER certificate with openssl"; return 1)
|
|
|
|
|
|
test() {
|
|
eval "$1 >/dev/null "
|
|
if [ $? -eq "$2" ]
|
|
then
|
|
[ "${PRINT_PASSED}" -gt 0 ] \
|
|
&& printf "%-72s%-1s\n" "$1" ">/dev/null (-> $2?) passed."
|
|
else
|
|
printf "%-72s%-1s\n" "$1" ">/dev/null (-> $2?) failed!!!"
|
|
[ "${PRINT_PASSED}" -gt 1 ] && exit 1
|
|
fi
|
|
}
|
|
|
|
|
|
[ "$PRINT_PASSED" -gt 0 ] && printf "\nTesting openssl itself ...\n"
|
|
|
|
[ "$PRINT_PASSED" -gt 1 ] && printf " * right PEM:\n"
|
|
test 'cat "$OPENSSL_PEM" | openssl x509 -checkend 0 ' 0
|
|
test 'cat "$OPENSSL_PEM" | openssl x509 -checkend 86300 ' 0
|
|
test 'cat "$OPENSSL_PEM" | openssl x509 -checkend 86400 ' 1
|
|
|
|
[ "$PRINT_PASSED" -gt 1 ] && printf " * right DER:\n"
|
|
test 'cat "$OPENSSL_DER" | openssl x509 -checkend 0 -inform der ' 0
|
|
test 'cat "$OPENSSL_DER" | openssl x509 -checkend 86300 -inform der ' 0
|
|
test 'cat "$OPENSSL_DER" | openssl x509 -checkend 86400 -inform der ' 1
|
|
|
|
[ "$PRINT_PASSED" -gt 1 ] && printf " * wrong:\n"
|
|
test 'cat "$OPENSSL_PEM" | openssl x509 -checkend 0 -inform der 2>/dev/null' 1
|
|
test 'cat "$OPENSSL_DER" | openssl x509 -checkend 0 2>/dev/null' 1
|
|
|
|
|
|
[ "$PRINT_PASSED" -gt 0 ] && printf "\nTesting px5g checkend ...\n"
|
|
|
|
[ "$PRINT_PASSED" -gt 1 ] && printf " * right PEM:\n"
|
|
test 'cat "$OPENSSL_PEM" | ./px5g checkend 0 ' 0
|
|
test 'cat "$OPENSSL_PEM" | ./px5g checkend 86300 ' 0
|
|
test 'cat "$OPENSSL_PEM" | ./px5g checkend 86400 ' 1
|
|
|
|
[ "$PRINT_PASSED" -gt 1 ] && printf " * right DER:\n"
|
|
test 'cat "$OPENSSL_DER" | ./px5g checkend -der 0 ' 0
|
|
test 'cat "$OPENSSL_DER" | ./px5g checkend -der 86300 ' 0
|
|
test 'cat "$OPENSSL_DER" | ./px5g checkend -der 86400 ' 1
|
|
|
|
[ "$PRINT_PASSED" -gt 1 ] && printf " * in option:\n"
|
|
test 'cat "$OPENSSL_DER" | ./px5g checkend -in /proc/self/fd/0 -der 0 ' 0
|
|
test 'cat "$OPENSSL_DER" | ./px5g checkend -der -in /proc/self/fd/0 99 ' 0
|
|
|
|
[ "$PRINT_PASSED" -gt 1 ] && printf " * wrong:\n"
|
|
test 'cat "$OPENSSL_PEM" | ./px5g checkend -der 0 2>/dev/null' 1
|
|
test 'cat "$OPENSSL_DER" | ./px5g checkend 0 2>/dev/null' 1
|
|
|
|
|
|
[ "$PRINT_PASSED" -gt 0 ] && printf "\nTesting px5g eckey ...\n"
|
|
|
|
[ "$PRINT_PASSED" -gt 1 ] && printf " * standard curves:\n"
|
|
test './px5g eckey P-256 | openssl ec -check 2>/dev/null' 0
|
|
test './px5g eckey P-384 | openssl ec -check 2>/dev/null' 0
|
|
test './px5g eckey secp384r1 | openssl ec -check 2>/dev/null' 0
|
|
test './px5g eckey secp256r1 | openssl ec -check 2>/dev/null' 0
|
|
test './px5g eckey secp256k1 | openssl ec -check 2>/dev/null' 0
|
|
|
|
[ "$PRINT_PASSED" -gt 1 ] && printf " * more curves:\n"
|
|
test './px5g eckey P-521 | openssl ec -check 2>/dev/null' 0
|
|
test './px5g eckey secp521r1 | openssl ec -check 2>/dev/null' 0
|
|
test './px5g eckey secp224r1 | openssl ec -check 2>/dev/null' 0
|
|
test './px5g eckey secp224k1 | openssl ec -check 2>/dev/null' 0
|
|
test './px5g eckey secp192r1 | openssl ec -check 2>/dev/null' 0
|
|
test './px5g eckey secp192k1 | openssl ec -check 2>/dev/null' 0
|
|
test './px5g eckey brainpoolP512r1 | openssl ec -check 2>/dev/null' 0
|
|
test './px5g eckey brainpoolP384r1 | openssl ec -check 2>/dev/null' 0
|
|
test './px5g eckey brainpoolP256r1 | openssl ec -check 2>/dev/null' 0
|
|
|
|
[ "$PRINT_PASSED" -gt 1 ] && printf " * other options:\n"
|
|
test './px5g eckey -out /proc/self/fd/1 | openssl ec -check 2>/dev/null' 0
|
|
test './px5g eckey -der | openssl ec -check -inform der 2>/dev/null' 0
|
|
|
|
|
|
[ "$PRINT_PASSED" -gt 0 ] && printf "\nTesting px5g rsakey ...\n"
|
|
|
|
[ "$PRINT_PASSED" -gt 1 ] && printf " * standard exponent:\n"
|
|
test './px5g rsakey | openssl rsa -check 2>/dev/null' 0
|
|
test './px5g rsakey 512 | openssl rsa -check 2>/dev/null' 0
|
|
test './px5g rsakey 1024 | openssl rsa -check 2>/dev/null' 0
|
|
test './px5g rsakey 2048 | openssl rsa -check 2>/dev/null' 0
|
|
test './px5g rsakey 4096 | openssl rsa -check 2>/dev/null' 0
|
|
test './px5g rsakey 1111 | openssl rsa -check 2>/dev/null' 0
|
|
test './px5g rsakey 0 2>/dev/null' 1
|
|
|
|
[ "$PRINT_PASSED" -gt 1 ] && printf " * small exponent:\n"
|
|
test './px5g rsakey -3 | openssl rsa -check 2>/dev/null' 0
|
|
test './px5g rsakey -3 512 | openssl rsa -check 2>/dev/null' 0
|
|
test './px5g rsakey -3 1024 | openssl rsa -check 2>/dev/null' 0
|
|
test './px5g rsakey -3 2048 | openssl rsa -check 2>/dev/null' 0
|
|
test './px5g rsakey -3 4096 | openssl rsa -check 2>/dev/null' 0
|
|
test './px5g rsakey -3 1111 | openssl rsa -check 2>/dev/null' 0
|
|
test './px5g rsakey -3 0 2>/dev/null' 1
|
|
|
|
[ "$PRINT_PASSED" -gt 1 ] && printf " * other options:\n"
|
|
test './px5g rsakey -out /proc/self/fd/1 | openssl rsa -check 2>/dev/null' 0
|
|
test './px5g rsakey -der | openssl rsa -check -inform der 2>/dev/null' 0
|
|
|
|
|
|
[ "$PRINT_PASSED" -gt 0 ] && printf "\nTesting px5g selfsigned ...\n"
|
|
|
|
test './px5g selfsigned -der | openssl x509 -checkend 0 -inform der ' 0
|
|
test './px5g selfsigned -days 1 | openssl x509 -checkend 0 ' 0
|
|
test './px5g selfsigned -days 1 | openssl x509 -checkend 86300' 0
|
|
test './px5g selfsigned -days 1 | openssl x509 -checkend 86400' 1
|
|
test './px5g selfsigned -out /proc/self/fd/1 | openssl x509 -checkend 0 ' 0
|
|
test './px5g selfsigned -newkey rsa:666 | openssl x509 -checkend 0 ' 0
|
|
test './px5g selfsigned -newkey ec | openssl x509 -checkend 0 ' 0
|
|
test './px5g selfsigned -newkey ec -pkeyopt ec_paramgen_curve:secp384r1 \
|
|
| openssl x509 -checkend 0 ' 0
|
|
test './px5g selfsigned -subj "$SUBJECT" | openssl x509 -noout \
|
|
-subject -nameopt compat | grep -q subject="$SUBJECT" 2>/dev/null' 0
|
|
test './px5g selfsigned -out /dev/null -keyout /proc/self/fd/1 \
|
|
| openssl rsa -check 2>/dev/null ' 0
|
|
|
|
|
|
rm "$OPENSSL_PEM" "$OPENSSL_DER"
|