зеркало из https://github.com/mozilla/pjs.git
Add a mini-framework to allow us to test NSS releases without using tet.
This commit is contained in:
relyea%netscape.com
Родитель
38d6152e38
Коммит
303f425f64
|
|
@ -0,0 +1,35 @@
|
||||||
|
#!/bin/sh
|
||||||
|
#
|
||||||
|
# Run all our tests
|
||||||
|
#
|
||||||
|
CURDIR=`pwd`
|
||||||
|
TESTS="ssl"
|
||||||
|
cd common
|
||||||
|
. init.sh
|
||||||
|
export MOZILLA_ROOT
|
||||||
|
export COMMON
|
||||||
|
export DIST
|
||||||
|
export SECURITY_ROOT
|
||||||
|
export TESTDIR
|
||||||
|
export OBJDIR
|
||||||
|
export HOSTDIR
|
||||||
|
|
||||||
|
LOGFILE=${HOSTDIR}/output.log
|
||||||
|
export LOGFILE
|
||||||
|
touch ${LOGFILE}
|
||||||
|
tail -f ${LOGFILE} &
|
||||||
|
TAILPID=$!
|
||||||
|
trap "kill ${TAILPID}; exit" 2
|
||||||
|
for i in ${TESTS}
|
||||||
|
do
|
||||||
|
echo "Running Tests for $i"
|
||||||
|
#
|
||||||
|
# All tells the test suite to run through all their tests.
|
||||||
|
# file tells the test suite that the output is going to a log, so any
|
||||||
|
# forked() children need to redirect their output to prevent them from
|
||||||
|
# being over written.
|
||||||
|
|
||||||
|
(cd ${CURDIR}/$i ; ./${i}.sh all file >> ${LOGFILE} 2>&1)
|
||||||
|
# cd ${CURDIR}/$i ; ./${i}.sh
|
||||||
|
done
|
||||||
|
kill ${TAILPID}
|
||||||
|
|
@ -0,0 +1,296 @@
|
||||||
|
#!/bin/sh
|
||||||
|
# The contents of this file are subject to the Mozilla Public
|
||||||
|
# License Version 1.1 (the "License"); you may not use this file
|
||||||
|
# except in compliance with the License. You may obtain a copy of
|
||||||
|
# the License at http://www.mozilla.org/MPL/
|
||||||
|
#
|
||||||
|
# Software distributed under the License is distributed on an "AS
|
||||||
|
# IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
|
||||||
|
# implied. See the License for the specific language governing
|
||||||
|
# rights and limitations under the License.
|
||||||
|
#
|
||||||
|
# The Original Code is the Netscape security libraries.
|
||||||
|
#
|
||||||
|
# The Initial Developer of the Original Code is Netscape
|
||||||
|
# Communications Corporation. Portions created by Netscape are
|
||||||
|
# Copyright (C) 1994-2000 Netscape Communications Corporation. All
|
||||||
|
# Rights Reserved.
|
||||||
|
#
|
||||||
|
# Contributor(s):
|
||||||
|
#
|
||||||
|
# Alternatively, the contents of this file may be used under the
|
||||||
|
# terms of the GNU General Public License Version 2 or later (the
|
||||||
|
# "GPL"), in which case the provisions of the GPL are applicable
|
||||||
|
# instead of those above. If you wish to allow use of your
|
||||||
|
# version of this file only under the terms of the GPL and not to
|
||||||
|
# allow others to use your version of this file under the MPL,
|
||||||
|
# indicate your decision by deleting the provisions above and
|
||||||
|
# replace them with the notice and other provisions required by
|
||||||
|
# the GPL. If you do not delete the provisions above, a recipient
|
||||||
|
# may use your version of this file under either the MPL or the
|
||||||
|
# GPL.
|
||||||
|
#
|
||||||
|
|
||||||
|
#######################################################################
|
||||||
|
# Master "Core Components" macros for getting the OS architecture #
|
||||||
|
#######################################################################
|
||||||
|
|
||||||
|
#
|
||||||
|
# Macros for getting the OS architecture
|
||||||
|
#
|
||||||
|
if [ -s "${USE_64}" ]; then
|
||||||
|
A64BIT_TAG=_64
|
||||||
|
else
|
||||||
|
A64BIT_TAG=
|
||||||
|
fi
|
||||||
|
|
||||||
|
#OS_ARCH := $(subst /,_,$(shell uname -s))
|
||||||
|
OS_ARCH=`uname -s | sed -e 's;/;_;'`
|
||||||
|
|
||||||
|
#
|
||||||
|
# Attempt to differentiate between sparc and x86 Solaris
|
||||||
|
#
|
||||||
|
|
||||||
|
#OS_TEST := $(shell uname -m)
|
||||||
|
OS_TEST=`uname -m`
|
||||||
|
if [ ${OS_TEST} = "i86pc" ]; then
|
||||||
|
OS_RELEASE=`uname -r`"_"${OS_TEST}
|
||||||
|
else
|
||||||
|
OS_RELEASE=`uname -r`
|
||||||
|
fi
|
||||||
|
|
||||||
|
#
|
||||||
|
# Force the IRIX64 machines to use IRIX.
|
||||||
|
#
|
||||||
|
if [ ${OS_ARCH} = "IRIX64" ]; then
|
||||||
|
OS_ARCH="IRIX"
|
||||||
|
fi
|
||||||
|
|
||||||
|
#
|
||||||
|
# Force the newer BSDI versions to use the old arch name.
|
||||||
|
#
|
||||||
|
|
||||||
|
if [ ${OS_ARCH} = "BSD_OS" ]; then
|
||||||
|
OS_ARCH=BSD_386
|
||||||
|
fi
|
||||||
|
|
||||||
|
#
|
||||||
|
# Catch Deterim if SVR4 is NCR or UNIXWARE
|
||||||
|
#
|
||||||
|
|
||||||
|
if [ ${OS_ARCH} = "UNIX_SV" ]; then
|
||||||
|
if grep NCR /etc/bcheckrc ; then
|
||||||
|
OS_ARCH=NCR
|
||||||
|
else
|
||||||
|
# Make UnixWare something human readable
|
||||||
|
OS_ARCH=UNIXWARE
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Get the OS release number, not 4.2
|
||||||
|
OS_RELEASE=`uname -v`
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ ${OS_ARCH} = "UNIX_System_V" ]; then
|
||||||
|
OS_ARCH=NEC
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ ${OS_ARCH} = "AIX" ]; then
|
||||||
|
OS_MAJOR=`uname -v`
|
||||||
|
OS_MINOR=`uname -r`
|
||||||
|
OS_RELEASE=${OS_MAJOR}.${OS_MINOR}
|
||||||
|
fi
|
||||||
|
|
||||||
|
#
|
||||||
|
# Distinguish between OSF1 V4.0B and V4.0D
|
||||||
|
#
|
||||||
|
|
||||||
|
if [ ${OS_ARCH}${OS_RELEASE} = "OSF1V4.0" ]; then
|
||||||
|
OS_VERSION=`uname -v`
|
||||||
|
if [ ${OS_VERSION} = "564" ]; then
|
||||||
|
OS_RELEASE=V4.0B
|
||||||
|
fi
|
||||||
|
if [ ${OS_VERSION} = "878" ]; then
|
||||||
|
OS_RELEASE=V4.0D
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
#
|
||||||
|
# SINIX changes name to ReliantUNIX with 5.43
|
||||||
|
#
|
||||||
|
|
||||||
|
if [ ${OS_ARCH} = "ReliantUNIX-N" ]; then
|
||||||
|
OS_ARCH=ReliantUNIX
|
||||||
|
OS_RELEASE=5.4
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ ${OS_ARCH} = "SINIX-N" ]; then
|
||||||
|
OS_ARCH=ReliantUNIX
|
||||||
|
OS_RELEASE=5.4
|
||||||
|
fi
|
||||||
|
|
||||||
|
#
|
||||||
|
# Handle FreeBSD 2.2-STABLE and Linux 2.0.30-osfmach3
|
||||||
|
#
|
||||||
|
|
||||||
|
#if [(,$(filter-out Linux FreeBSD,${OS_ARCH}))
|
||||||
|
#OS_RELEASE := $(shell echo $(OS_RELEASE) | sed 's/-.*//')
|
||||||
|
#endif
|
||||||
|
|
||||||
|
if [ ${OS_ARCH} = "Linux" ]; then
|
||||||
|
OS_RELEASE=`basename ${OS_RELEASE}`
|
||||||
|
fi
|
||||||
|
|
||||||
|
#######################################################################
|
||||||
|
# Master "Core Components" macros for getting the OS target #
|
||||||
|
#######################################################################
|
||||||
|
|
||||||
|
#
|
||||||
|
# Note: OS_TARGET should be specified on the command line for gmake.
|
||||||
|
# When OS_TARGET=WIN95 is specified, then a Windows 95 target is built.
|
||||||
|
# The difference between the Win95 target and the WinNT target is that
|
||||||
|
# the WinNT target uses Windows NT specific features not available
|
||||||
|
# in Windows 95. The Win95 target will run on Windows NT, but (supposedly)
|
||||||
|
# at lesser performance (the Win95 target uses threads; the WinNT target
|
||||||
|
# uses fibers).
|
||||||
|
#
|
||||||
|
# When OS_TARGET=WIN16 is specified, then a Windows 3.11 (16bit) target
|
||||||
|
# is built. See: win16_3.11.mk for lots more about the Win16 target.
|
||||||
|
#
|
||||||
|
# If OS_TARGET is not specified, it defaults to ${OS_ARCH}, i.e., no
|
||||||
|
# cross-compilation.
|
||||||
|
#
|
||||||
|
|
||||||
|
#
|
||||||
|
# The following hack allows one to build on a WIN95 machine (as if
|
||||||
|
# s/he were cross-compiling on a WINNT host for a WIN95 target).
|
||||||
|
# It also accomodates for MKS's uname.exe. If you never intend
|
||||||
|
# to do development on a WIN95 machine, you don't need this. It doesn't
|
||||||
|
# work any more anyway.
|
||||||
|
#
|
||||||
|
if [ ${OS_ARCH} = "WIN95" ]; then
|
||||||
|
OS_ARCH=WINNT
|
||||||
|
OS_TARGET=WIN95
|
||||||
|
fi
|
||||||
|
if [ ${OS_ARCH} = "Windows_95" ]; then
|
||||||
|
OS_ARCH=Windows_NT
|
||||||
|
OS_TARGET=WIN95
|
||||||
|
fi
|
||||||
|
|
||||||
|
#
|
||||||
|
# On WIN32, we also define the variable CPU_ARCH.
|
||||||
|
#
|
||||||
|
|
||||||
|
if [ ${OS_ARCH} = "WINNT" ]; then
|
||||||
|
CPU_ARCH=`uname -p`
|
||||||
|
if [ ${CPU_ARCH} = "I386" ]; then
|
||||||
|
CPU_ARCH=x386
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
#
|
||||||
|
# If uname -s returns "Windows_NT", we assume that we are using
|
||||||
|
# the uname.exe in MKS toolkit.
|
||||||
|
#
|
||||||
|
# The -r option of MKS uname only returns the major version number.
|
||||||
|
# So we need to use its -v option to get the minor version number.
|
||||||
|
# Moreover, it doesn't have the -p option, so we need to use uname -m.
|
||||||
|
#
|
||||||
|
if [ ${OS_ARCH} = "Windows_NT" ]; then
|
||||||
|
OS_ARCH=WINNT
|
||||||
|
OS_MINOR_RELEASE=`uname -v`
|
||||||
|
if [ ${OS_MINOR_RELEASE} = "00" ]; then
|
||||||
|
OS_MINOR_RELEASE=0
|
||||||
|
fi
|
||||||
|
OS_RELEASE=${OS_RELEASE}.${OS_MINOR_RELEASE}
|
||||||
|
CPU_ARCH=`uname -m`
|
||||||
|
#
|
||||||
|
# MKS's uname -m returns "586" on a Pentium machine.
|
||||||
|
#
|
||||||
|
#ifneq (,$(findstring 86,$(CPU_ARCH)))
|
||||||
|
if (echo $CPU_ARCH | grep 86) ; then
|
||||||
|
CPU_ARCH=x386
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
OS_TARGET=${OS_TARGET-${OS_ARCH}}
|
||||||
|
|
||||||
|
if [ ${OS_TARGET} = "WIN95" ]; then
|
||||||
|
OS_RELEASE=4.0
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ ${OS_TARGET} = "WIN16" ]; then
|
||||||
|
OS_RELEASE=
|
||||||
|
# OS_RELEASE = _3.11
|
||||||
|
fi
|
||||||
|
|
||||||
|
#
|
||||||
|
# This variable is used to get OS_CONFIG.mk.
|
||||||
|
#
|
||||||
|
|
||||||
|
OS_CONFIG=${OS_TARGET}${OS_RELEASE}
|
||||||
|
|
||||||
|
#
|
||||||
|
# OBJDIR_TAG depends on the predefined variable BUILD_OPT,
|
||||||
|
# to distinguish between debug and release builds.
|
||||||
|
#
|
||||||
|
|
||||||
|
if [ -s "${BUILD_OPT}" ]; then
|
||||||
|
if [ ${OS_TARGET} = "WIN16" ]; then
|
||||||
|
OBJDIR_TAG=_O
|
||||||
|
else
|
||||||
|
OBJDIR_TAG=${A64BIT_TAG}_OPT
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
if [ -s "${BUILD_IDG}" ]; then
|
||||||
|
if [ ${OS_TARGET} = "WIN16" ]; then
|
||||||
|
OBJDIR_TAG=_I
|
||||||
|
else
|
||||||
|
OBJDIR_TAG=${A64BIT_TAG}_IDG
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
if [ ${OS_TARGET} = WIN16 ]; then
|
||||||
|
OBJDIR_TAG=_D
|
||||||
|
else
|
||||||
|
OBJDIR_TAG=${A64BIT_TAG}_DBG
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
#
|
||||||
|
# The following flags are defined in the individual $(OS_CONFIG).mk
|
||||||
|
# files.
|
||||||
|
#
|
||||||
|
# CPU_TAG is defined if the CPU is not the most common CPU.
|
||||||
|
# COMPILER_TAG is defined if the compiler is not the native compiler.
|
||||||
|
# IMPL_STRATEGY may be defined too.
|
||||||
|
#
|
||||||
|
|
||||||
|
# Name of the binary code directories
|
||||||
|
#ifeq (${OS_ARCH}, WINNT)
|
||||||
|
# ifeq ($(CPU_ARCH),x386)
|
||||||
|
## OBJDIR_NAME=$(OS_CONFIG)$(OBJDIR_TAG).OBJ
|
||||||
|
# else
|
||||||
|
# OBJDIR_NAME=$(OS_CONFIG)$(CPU_ARCH)$(OBJDIR_TAG).OBJ
|
||||||
|
# endif
|
||||||
|
#else
|
||||||
|
#endif
|
||||||
|
|
||||||
|
OBJDIR_NAME=${OS_CONFIG}${CPU_TAG}${COMPILER_TAG}${LIBC_TAG}${IMPL_STRATEGY}${OBJDIR_TAG}'.OBJ'
|
||||||
|
|
||||||
|
#export OS_CONFIG OS_ARCH OBJDIR_NAME OS_RELEASE OBJDIR_TAG
|
||||||
|
|
||||||
|
if [ ${OS_ARCH} = "WINNT" ]; then
|
||||||
|
if [ ${OS_TARGET} != "WIN16" ]; then
|
||||||
|
if [ ! -s "${BUILD_OPT}" ]; then
|
||||||
|
#
|
||||||
|
# Define USE_DEBUG_RTL if you want to use the debug runtime library
|
||||||
|
# (RTL) in the debug build
|
||||||
|
#
|
||||||
|
if [ -s "${USE_DEBUG_RTL}" ]; then
|
||||||
|
OBJDIR_NAME=${OS_CONFIG}${CPU_TAG}${COMPILER_TAG}${IMPL_STRATEGY}${OBJDIR_TAG}.OBJD
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo ${OBJDIR_NAME}
|
||||||
|
|
@ -0,0 +1,59 @@
|
||||||
|
#! /bin/sh
|
||||||
|
#
|
||||||
|
# Initialize a bunch of variables that may tests would be interested in
|
||||||
|
#
|
||||||
|
#
|
||||||
|
mozilla_root=`(cd ../../../..; pwd)`
|
||||||
|
common=`(cd ../common; pwd)`
|
||||||
|
MOZILLA_ROOT=${SECURITY_ROOT-$mozilla_root}
|
||||||
|
COMMON=${TEST_COMMON-$common}
|
||||||
|
DIST=${DIST-${MOZILLA_ROOT}/dist}
|
||||||
|
SECURITY_ROOT=${DIST-${MOZILLA_ROOT}/security/nss}
|
||||||
|
TESTDIR=${TESTDIR-${MOZILLA_ROOT}/tests_results/security}
|
||||||
|
. ../common/arch.sh
|
||||||
|
OBJDIR=${OBJDIR_NAME}
|
||||||
|
PATH=${DIST}/${OBJDIR}/bin:${DIST}/${OBJDIR}/lib:$PATH
|
||||||
|
export PATH
|
||||||
|
LD_LIBRARY_PATH=${DIST}/${OBJDIR}/lib
|
||||||
|
export LD_LIBRARY_PATH
|
||||||
|
echo "Creating ${TESTDIR}"
|
||||||
|
if [ ! -d ${TESTDIR} ]; then
|
||||||
|
mkdir -p ${TESTDIR}
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ ! -s "${HOSTDIR}" ]; then
|
||||||
|
version=1
|
||||||
|
if [ -f ${TESTDIR}/${HOST} ]; then
|
||||||
|
version=`cat ${TESTDIR}/${HOST}`
|
||||||
|
fi
|
||||||
|
expr $version + 1 > ${TESTDIR}/${HOST}
|
||||||
|
|
||||||
|
HOSTDIR=${TESTDIR}/${HOST}'.'$version
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ ! -d ${HOSTDIR} ]; then
|
||||||
|
mkdir -p ${HOSTDIR}
|
||||||
|
fi
|
||||||
|
|
||||||
|
RESULTS=${HOSTDIR}/results.html
|
||||||
|
if [ ! -f "${RESULTS}" ]; then
|
||||||
|
|
||||||
|
cp ${COMMON}/results_header.html ${RESULTS}
|
||||||
|
echo "<H4>Platform: ${OBJDIR}<BR>" >> ${RESULTS}
|
||||||
|
echo "Test Run: ${HOST}.$version</H4>" >> ${RESULTS}
|
||||||
|
echo "<HR><BR>" >> ${RESULTS}
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "********************************************"
|
||||||
|
echo " Platform: ${OBJDIR}"
|
||||||
|
echo " Results: ${HOST}.$version"
|
||||||
|
echo "********************************************"
|
||||||
|
|
||||||
|
KILL="kill"
|
||||||
|
if [ ${OS_ARCH} = "Linux" ]; then
|
||||||
|
KILL="kill -kill"
|
||||||
|
fi
|
||||||
|
|
||||||
|
export KILL
|
||||||
|
|
||||||
|
|
||||||
|
|
@ -0,0 +1,6 @@
|
||||||
|
<HTML>
|
||||||
|
<HEAD>
|
||||||
|
<TITLE>Test Report for NSS</TITLE>
|
||||||
|
</HEAD>
|
||||||
|
<BODY BGCOLOR="#FFFFFF">
|
||||||
|
<CENTER><H3>Test Report for NSS</H3></CENTER>
|
||||||
|
|
@ -0,0 +1,263 @@
|
||||||
|
#! /bin/ksh
|
||||||
|
#
|
||||||
|
# This is just a quick script so we can still run our testcases.
|
||||||
|
# Longer term we need a scriptable test environment..
|
||||||
|
#
|
||||||
|
. ../common/init.sh
|
||||||
|
CURDIR=`pwd`
|
||||||
|
PORT=${PORT-8443}
|
||||||
|
|
||||||
|
# Test case files
|
||||||
|
SSLCOV=${CURDIR}/sslcov.txt
|
||||||
|
SSLAUTH=${CURDIR}/sslauth.txt
|
||||||
|
SSLSTRESS=${CURDIR}/sslstress.txt
|
||||||
|
REQUEST_FILE=${CURDIR}/sslreq.txt
|
||||||
|
|
||||||
|
#temparary files
|
||||||
|
PWFILE=/tmp/tests.pw.$$
|
||||||
|
CERTSCRIPT=/tmp/tests.certs.$$
|
||||||
|
NOISE_FILE=/tmp/tests.noise.$$
|
||||||
|
SERVEROUTFILE=/tmp/tests.server.$$
|
||||||
|
|
||||||
|
TEMPFILES="${PWFILE} ${CERTSCRIPT} ${SERVEROUTFILE} ${NOISE_FILE}"
|
||||||
|
|
||||||
|
none=1
|
||||||
|
coverage=0
|
||||||
|
auth=0
|
||||||
|
stress=0
|
||||||
|
fileout=0
|
||||||
|
|
||||||
|
for i in $*
|
||||||
|
do
|
||||||
|
case $i in
|
||||||
|
[aA][lL]*)
|
||||||
|
none=0; coverage=1; auth=1; stress=1;;
|
||||||
|
[aA][uU]*)
|
||||||
|
none=0; auth=1;;
|
||||||
|
[Cc]*)
|
||||||
|
none=0; coverage=1;;
|
||||||
|
[Ss]*)
|
||||||
|
none=0; stress=1;;
|
||||||
|
f)
|
||||||
|
fileout=1;
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
|
||||||
|
if [ $none -eq 1 ]; then
|
||||||
|
coverage=1
|
||||||
|
auth=1
|
||||||
|
stress=1
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
#
|
||||||
|
# should also try to kill any running server
|
||||||
|
#
|
||||||
|
trap "rm -f ${TEMPFILES}; exit" 2 3
|
||||||
|
|
||||||
|
|
||||||
|
# Generate noise for our CA cert.
|
||||||
|
#
|
||||||
|
# NOTE: these keys are only suitable for testing, as this whole thing bypasses
|
||||||
|
# the entropy gathering. Don't use this method to generate keys and certs for
|
||||||
|
# product use or deployment.
|
||||||
|
#
|
||||||
|
ps -efl > ${NOISE_FILE} 2>&1
|
||||||
|
ps aux >> ${NOISE_FILE} 2>&1
|
||||||
|
netstat >> ${NOISE_FILE} 2>&1
|
||||||
|
date >> ${NOISE_FILE} 2>&1
|
||||||
|
|
||||||
|
#
|
||||||
|
# build the TEMP CA used for testing purposes
|
||||||
|
#
|
||||||
|
echo "<TABLE BORDER=1><TR><TH COLSPAN=3>Certutil Tests</TH></TR>" >> ${RESULTS}
|
||||||
|
echo "<TR><TH width=500>Test Case</TH><TH width=50>Result</TH></TR>" >> ${RESULTS}
|
||||||
|
CADIR=${HOSTDIR}/CA
|
||||||
|
echo "********************** Creating a CA Certificate **********************"
|
||||||
|
if [ ! -d ${CADIR} ]; then
|
||||||
|
mkdir -p ${CADIR}
|
||||||
|
fi
|
||||||
|
cd ${CADIR}
|
||||||
|
echo nss > ${PWFILE}
|
||||||
|
echo " certutil -N -d . -f ${PWFILE}"
|
||||||
|
certutil -N -d . -f ${PWFILE}
|
||||||
|
|
||||||
|
echo 5 > ${CERTSCRIPT}
|
||||||
|
echo 9 >> ${CERTSCRIPT}
|
||||||
|
echo n >> ${CERTSCRIPT}
|
||||||
|
echo y >> ${CERTSCRIPT}
|
||||||
|
echo 3 >> ${CERTSCRIPT}
|
||||||
|
echo n >> ${CERTSCRIPT}
|
||||||
|
echo 5 >> ${CERTSCRIPT}
|
||||||
|
echo 6 >> ${CERTSCRIPT}
|
||||||
|
echo 7 >> ${CERTSCRIPT}
|
||||||
|
echo 9 >> ${CERTSCRIPT}
|
||||||
|
echo n >> ${CERTSCRIPT}
|
||||||
|
echo "certutil -S -n \"TestCA\" -s \"CN=NSS Test CA, O=BOGUS NSS, L=Mountain View, ST=California, C=US\" -t \"CTu,CTu,CTu\" -v 60 -x -d . -1 -2 -5 -f ${PWFILE} -z ${NOISE_FILE}"
|
||||||
|
certutil -S -n "TestCA" -s "CN=NSS Test CA, O=BOGUS NSS, L=Mountain View, ST=California, C=US" -t "CTu,CTu,CTu" -v 60 -x -d . -1 -2 -5 -f ${PWFILE} -z ${NOISE_FILE} < ${CERTSCRIPT}
|
||||||
|
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
echo "<TR><TD>Creating CA Cert</TD><TD bgcolor=red>Failed</TD><TR>" >> ${RESULTS}
|
||||||
|
else
|
||||||
|
echo "<TR><TD>Creating CA Cert</TD><TD bgcolor=lightGreen>Passed</TD><TR>" >> ${RESULTS}
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "**************** Creating Client CA Issued Certificate ****************"
|
||||||
|
netstat >> ${NOISE_FILE} 2>&1
|
||||||
|
date >> ${NOISE_FILE} 2>&1
|
||||||
|
CLIENTDIR=${HOSTDIR}/client
|
||||||
|
if [ ! -d ${CLIENTDIR} ]; then
|
||||||
|
mkdir -p ${CLIENTDIR}
|
||||||
|
fi
|
||||||
|
cd ${CLIENTDIR}
|
||||||
|
cp ${CADIR}/*.db .
|
||||||
|
echo "certutil -S -n \"TestUser\" -s \"CN=Test User, O=BOGUS Netscape, L=Mountain View, ST=California, C=US\" -t \"u,u,u\" -c "TestCA" -m 3 -v 60 -d . -f ${PWFILE} -z ${NOISE_FILE}"
|
||||||
|
certutil -S -n "TestUser" -s "CN=Test User, O=BOGUS NSS, L=Mountain View, ST=California, C=US" -t "u,u,u" -c "TestCA" -m 3 -v 60 -d . -f ${PWFILE} -z ${NOISE_FILE}
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
echo "<TR><TD>Creating client Cert</TD><TD bgcolor=red>Failed</TD><TR>" >> ${RESULTS}
|
||||||
|
else
|
||||||
|
echo "<TR><TD>Creating client Cert</TD><TD bgcolor=lightGreen>Passed</TD><TR>" >> ${RESULTS}
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "***** Creating Server CA Issued Certificate for ${HOST}.${DOMSUF} *****"
|
||||||
|
netstat >> ${NOISE_FILE} 2>&1
|
||||||
|
date >> ${NOISE_FILE} 2>&1
|
||||||
|
SERVERDIR=${HOSTDIR}/server
|
||||||
|
if [ ! -d ${SERVERDIR} ]; then
|
||||||
|
mkdir -p ${SERVERDIR}
|
||||||
|
fi
|
||||||
|
cd ${SERVERDIR}
|
||||||
|
cp ../CA/*.db .
|
||||||
|
echo "certutil -S -n \"${HOST}.${DOMSUF}\" -s \"CN=${HOST}.${DOMSUF}, O=BOGUS Netscape, L=Mountain View, ST=California, C=US\" -t \"Pu,Pu,Pu\" -c "TestCA" -v 60 -d . -f ${PWFILE} -z ${NOISE_FILE}"
|
||||||
|
certutil -S -n "${HOST}.${DOMSUF}" -s "CN=${HOST}.${DOMSUF}, O=BOGUS Netscape, L=Mountain View, ST=California, C=US" -t "Pu,Pu,Pu" -c "TestCA" -m 1 -v 60 -d . -f ${PWFILE} -z ${NOISE_FILE}
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
echo "<TR><TD>Creating Server Cert</TD><TD bgcolor=red>Failed</TD><TR>" >> ${RESULTS}
|
||||||
|
else
|
||||||
|
echo "<TR><TD>Creating Server Cert</TD><TD bgcolor=lightGreen>Passed</TD><TR>" >> ${RESULTS}
|
||||||
|
fi
|
||||||
|
echo "</TABLE><BR>" >> ${RESULTS}
|
||||||
|
|
||||||
|
rm -f ${TEMPFILES}
|
||||||
|
|
||||||
|
|
||||||
|
# OK now lets run the tests....
|
||||||
|
if [ $coverage -eq 1 ]; then
|
||||||
|
echo "********************* SSL Cipher Coverage ****************************"
|
||||||
|
echo "<TABLE BORDER=1><TR><TH COLSPAN=3>SSL Cipher Coverage</TH></TR>" >> ${RESULTS}
|
||||||
|
echo "<TR><TH width=500>Test Case</TH><TH width=50>Result</TH></TR>" >> ${RESULTS}
|
||||||
|
cd ${CLIENTDIR}
|
||||||
|
cat ${SSLCOV} | while read tls param testname
|
||||||
|
do
|
||||||
|
if [ $tls != "#" ]; then
|
||||||
|
echo "********************* $testname ****************************"
|
||||||
|
TLS_FLAG=-T
|
||||||
|
if [ $tls = "TLS" ]; then
|
||||||
|
TLS_FLAG=""
|
||||||
|
fi
|
||||||
|
sparam=""
|
||||||
|
if [ ${param} = "i" ]; then
|
||||||
|
sparam='-c i'
|
||||||
|
fi
|
||||||
|
if [ ${fileout} -eq 1 ]; then
|
||||||
|
selfserv -v -p ${PORT} -d ${SERVERDIR} -n ${HOST}.${DOMSUF} -w nss ${sparam} > ${SERVEROUTFILE} 2>&1 &
|
||||||
|
else
|
||||||
|
selfserv -v -p ${PORT} -d ${SERVERDIR} -n ${HOST}.${DOMSUF} -w nss ${sparam} &
|
||||||
|
fi
|
||||||
|
SERVERPID=$!
|
||||||
|
sleep 10
|
||||||
|
|
||||||
|
tstclnt -p ${PORT} -h ${HOST} -c ${param} ${TLS_FLAG} -f -d . < ${REQUEST_FILE}
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
echo "<TR><TD>"${testname}"</TD><TD bgcolor=red>Failed</TD><TR>" >> ${RESULTS}
|
||||||
|
else
|
||||||
|
echo "<TR><TD>"${testname}"</TD><TD bgcolor=lightGreen>Passed</TD><TR>" >> ${RESULTS}
|
||||||
|
fi
|
||||||
|
${KILL} ${SERVERPID}
|
||||||
|
wait ${SERVERPID}
|
||||||
|
if [ ${fileout} -eq 1 ]; then
|
||||||
|
cat ${SERVEROUTFILE}
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
echo "</TABLE><BR>" >> ${RESULTS}
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ $auth -eq 1 ]; then
|
||||||
|
echo "********************* SSL Client Auth ****************************"
|
||||||
|
cd ${CLIENTDIR}
|
||||||
|
echo "<TABLE BORDER=1><TR><TH COLSPAN=3>SSL Client Authentication</TH></TR>" >> ${RESULTS}
|
||||||
|
echo "<TR><TH width=500>Test Case</TH><TH width=50>Result</TH></TR>" >> ${RESULTS}
|
||||||
|
|
||||||
|
cat ${SSLAUTH} | while read value sparam cparam testname
|
||||||
|
do
|
||||||
|
if [ $value != "#" ]; then
|
||||||
|
echo "***** $testname ****"
|
||||||
|
sparam=`echo $sparam | sed -e 's;_; ;g'`
|
||||||
|
cparam=`echo $cparam | sed -e 's;_; ;g'`
|
||||||
|
echo "selfserv -v -p ${PORT} -d ${SERVERDIR} -n ${HOST}.${DOMSUF} -w nss ${sparam} &"
|
||||||
|
if [ ${fileout} -eq 1 ]; then
|
||||||
|
selfserv -v -p ${PORT} -d ${SERVERDIR} -n ${HOST}.${DOMSUF} -w nss ${sparam} > ${SERVEROUTFILE} 2>&1 &
|
||||||
|
else
|
||||||
|
selfserv -v -p ${PORT} -d ${SERVERDIR} -n ${HOST}.${DOMSUF} -w nss ${sparam} &
|
||||||
|
fi
|
||||||
|
SERVERPID=$!
|
||||||
|
sleep 10
|
||||||
|
pwd
|
||||||
|
echo "tstclnt -p ${PORT} -h ${HOST} -f -d ${CLIENTDIR} ${cparam}"
|
||||||
|
tstclnt -p ${PORT} -h ${HOST} -f -d ${CLIENTDIR} ${cparam} < ${REQUEST_FILE}
|
||||||
|
if [ $? -ne $value ]; then
|
||||||
|
echo "<TR><TD>"${testname}"</TD><TD bgcolor=red>Failed</TD><TR>" >> ${RESULTS}
|
||||||
|
else
|
||||||
|
echo "<TR><TD>"${testname}"</TD><TD bgcolor=lightGreen>Passed</TD><TR>" >> ${RESULTS}
|
||||||
|
fi
|
||||||
|
${KILL} ${SERVERPID}
|
||||||
|
wait ${SERVERPID}
|
||||||
|
if [ ${fileout} -eq 1 ]; then
|
||||||
|
cat ${SERVEROUTFILE}
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
echo "</TABLE><BR>" >> ${RESULTS}
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
if [ $stress -eq 1 ]; then
|
||||||
|
echo "********************* Stress Test ****************************"
|
||||||
|
cd ${CLIENTDIR}
|
||||||
|
echo "<TABLE BORDER=1><TR><TH COLSPAN=3>SSL Stress Test</TH></TR>" >> ${RESULTS}
|
||||||
|
echo "<TR><TH width=500>Test Case</TH><TH width=50>Result</TH></TR>" >> ${RESULTS}
|
||||||
|
|
||||||
|
cat ${SSLSTRESS} | while read value sparam cparam testname
|
||||||
|
do
|
||||||
|
if [ $value != "#" ]; then
|
||||||
|
echo "********************* $testname ****************************"
|
||||||
|
sparam=`echo $sparam | sed -e 's;_; ;g'`
|
||||||
|
cparam=`echo $cparam | sed -e 's;_; ;g'`
|
||||||
|
if [ ${fileout} -eq 1 ]; then
|
||||||
|
selfserv -p ${PORT} -d ${SERVERDIR} -n ${HOST}.${DOMSUF} -w nss ${sparam} > ${SERVEROUTFILE} 2>&1 &
|
||||||
|
else
|
||||||
|
selfserv -p ${PORT} -d ${SERVERDIR} -n ${HOST}.${DOMSUF} -w nss ${sparam} &
|
||||||
|
fi
|
||||||
|
SERVERPID=$!
|
||||||
|
sleep 10
|
||||||
|
|
||||||
|
strsclnt -p ${PORT} ${HOST} -d . -w nss $cparam
|
||||||
|
if [ $? -ne $value ]; then
|
||||||
|
echo "<TR><TD>"${testname}"</TD><TD bgcolor=red>Failed</TD><TR>" >> ${RESULTS}
|
||||||
|
else
|
||||||
|
echo "<TR><TD>"${testname}"</TD><TD bgcolor=lightGreen>Passed</TD><TR>" >> ${RESULTS}
|
||||||
|
fi
|
||||||
|
${KILL} ${SERVERPID}
|
||||||
|
wait ${SERVERPID}
|
||||||
|
if [ ${fileout} -eq 1 ]; then
|
||||||
|
cat ${SERVEROUTFILE}
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
echo "</TABLE><BR>" >> ${RESULTS}
|
||||||
|
fi
|
||||||
|
|
||||||
|
rm -f ${TEMPFILES}
|
||||||
|
|
@ -0,0 +1,21 @@
|
||||||
|
#
|
||||||
|
# This file defines the tests for client auth.
|
||||||
|
#
|
||||||
|
# expected
|
||||||
|
# return server client Test Case name
|
||||||
|
# value params params
|
||||||
|
# ------ ------ ------ ---------------
|
||||||
|
0 -r -w_nss TLS Request don't require client auth (client does not provide auth)
|
||||||
|
0 -r -n_TestUser_-w_bogus TLS Request don't require client auth (bad password)
|
||||||
|
0 -r -n_TestUser_-w_nss TLS Request don't require client auth (client auth)
|
||||||
|
0 -r_-r -w_nss TLS Require client auth (client does not provide auth)
|
||||||
|
# this one should fail
|
||||||
|
254 -r_-r -n_TestUser_-w_bogus TLS Require client auth (bad password)
|
||||||
|
0 -r_-r -n_TestUser_-w_nss TLS Require client auth (client auth)
|
||||||
|
0 -r -T_-w_nss SSL3 Request don't require client auth (client does not provide auth)
|
||||||
|
0 -r -T_-n_TestUser_-w_bogus SSL3 Request don't require client auth (bad password)
|
||||||
|
0 -r -T_-n_TestUser_-w_nss SSL3 Request don't require client auth (client auth)
|
||||||
|
0 -r_-r -T_-w_nss SSL3 Require client auth (client does not provide auth)
|
||||||
|
# this one should fail
|
||||||
|
254 -r_-r -T_-n_TestUser_-w_bogus SSL3 Require client auth (bad password)
|
||||||
|
0 -r_-r -T_-n_TestUser_-w_nss SSL3 Require client auth (client auth)
|
||||||
|
|
@ -0,0 +1,37 @@
|
||||||
|
#
|
||||||
|
# This file enables test coverage of the various SSL ciphers
|
||||||
|
#
|
||||||
|
# NOTE: SSL2 ciphers are independent of whether TLS is enabled or not. We
|
||||||
|
# mix up the enable functions so we can tests boths paths.
|
||||||
|
#
|
||||||
|
# Enable Cipher Test Name
|
||||||
|
# TLS
|
||||||
|
#
|
||||||
|
noTLS A SSL2 RC4 128 WITH MD5
|
||||||
|
TLS B SSL2 RC4 128 EXPORT40 WITH MD5
|
||||||
|
TLS C SSL2 RC2 128 CBC WITH MD5
|
||||||
|
noTLS D SSL2 RC2 128 CBC EXPORT40 WITH MD5
|
||||||
|
TLS E SSL2 DES 64 CBC WITH MD5
|
||||||
|
noTLS F SSL2 DES 192 EDE3 CBC WITH MD5
|
||||||
|
noTLS c SSL3 RSA WITH RC4 128 MD5
|
||||||
|
noTLS d SSL3 RSA WITH 3DES EDE CBC SHA
|
||||||
|
noTLS e SSL3 RSA WITH DES CBC SHA
|
||||||
|
noTLS f SSL3 RSA EXPORT WITH RC4 40 MD5
|
||||||
|
noTLS g SSL3 RSA EXPORT WITH RC2 CBC 40 MD5
|
||||||
|
noTLS j SSL3 RSA FIPS WITH 3DES EDE CBC SHA
|
||||||
|
noTLS k SSL3 RSA FIPS WITH DES CBC SHA
|
||||||
|
noTLS l SSL3 RSA EXPORT WITH DES CBC SHA (new)
|
||||||
|
noTLS m SSL3 RSA EXPORT WITH RC4 56 SHA (new)
|
||||||
|
TLS c TLS RSA WITH RC4 128 MD5
|
||||||
|
TLS d TLS RSA WITH 3DES EDE CBC SHA
|
||||||
|
TLS e TLS RSA WITH DES CBC SHA
|
||||||
|
TLS f TLS RSA EXPORT WITH RC4 40 MD5
|
||||||
|
TLS g TLS RSA EXPORT WITH RC2 CBC 40 MD5
|
||||||
|
TLS j TLS RSA FIPS WITH 3DES EDE CBC SHA
|
||||||
|
TLS k TLS RSA FIPS WITH DES CBC SHA
|
||||||
|
TLS l TLS RSA EXPORT WITH DES CBC SHA (new)
|
||||||
|
TLS m TLS RSA EXPORT WITH RC4 56 SHA (new)
|
||||||
|
# The NULL ciphers have to be last because we need to restart selfserve
|
||||||
|
# (NULL is not enabled by default)
|
||||||
|
TLS i TLS RSA WITH NULL MD5
|
||||||
|
noTLS i SSL3 RSA WITH NULL MD5
|
||||||
|
|
@ -0,0 +1,3 @@
|
||||||
|
GET / HTTP/1.0
|
||||||
|
|
||||||
|
|
||||||
|
|
@ -0,0 +1,14 @@
|
||||||
|
#
|
||||||
|
# This file defines the tests for client auth.
|
||||||
|
#
|
||||||
|
# expected
|
||||||
|
# return server client Test Case name
|
||||||
|
# value params params
|
||||||
|
# ------ ------ ------ ---------------
|
||||||
|
0 _ -c_1000_-C_A Stress SSL2 RC4 128 with MD5
|
||||||
|
0 _ -c_1000_-C_A Stress SSL3 RC4 128 with MD5
|
||||||
|
# 0 _ -c_1000_-C_c Stress TLS RC4 128 with MD5
|
||||||
|
#
|
||||||
|
# add client auth versions here...
|
||||||
|
#
|
||||||
|
# 0 -r -n_"Test_User"_-w_bogus TLS Request don't require client auth (bad password)
|
||||||
Загрузка…
Ссылка в новой задаче