From 4e36fc3e98dad17e31ffe59f8a25fb109715e832 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= Date: Sat, 22 Apr 2006 12:07:01 +0000 Subject: [PATCH] Test that certs in signed data is picked up. git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17168 ec53bebd-3082-4978-b11e-865c3cabbd6b --- lib/hx509/test_cms.in | 36 +++++++++++++++++++++++++++++++++++- 1 file changed, 35 insertions(+), 1 deletion(-) diff --git a/lib/hx509/test_cms.in b/lib/hx509/test_cms.in index 712801d19..c209883e2 100644 --- a/lib/hx509/test_cms.in +++ b/lib/hx509/test_cms.in @@ -56,7 +56,6 @@ echo "verify signed data (EE cert as anchor)" sd.data sd.data.out > /dev/null || exit 1 cmp "$srcdir/test_chain.in" sd.data.out || exit 1 - echo "create signed data (password)" ./hxtool cms-create-sd \ --pass=PASS:foobar \ @@ -141,6 +140,41 @@ echo "verify signed data (no attr, no certs)" sd.data.out > /dev/null || exit 1 cmp "$srcdir/data/static-file" sd.data.out || exit 1 +echo "create signed data (subcert, no certs)" +./hxtool cms-create-sd \ + --certificate=FILE:$srcdir/data/sub-cert.crt,$srcdir/data/sub-cert.key \ + "$srcdir/test_chain.in" \ + sd.data > /dev/null || exit 1 + +echo "verify failure signed data" +./hxtool cms-verify-sd \ + --missing-revoke \ + --anchors=FILE:$srcdir/data/ca.crt \ + sd.data sd.data.out > /dev/null 2> /dev/null && exit 1 + +echo "verify success signed data" +./hxtool cms-verify-sd \ + --missing-revoke \ + --certificate=FILE:$srcdir/data/sub-ca.crt \ + --anchors=FILE:$srcdir/data/ca.crt \ + sd.data sd.data.out > /dev/null || exit 1 +cmp "$srcdir/test_chain.in" sd.data.out || exit 1 + +echo "create signed data (subcert, certs)" +./hxtool cms-create-sd \ + --certificate=FILE:$srcdir/data/sub-cert.crt,$srcdir/data/sub-cert.key \ + --pool=FILE:$srcdir/data/sub-ca.crt \ + --anchors=FILE:$srcdir/data/ca.crt \ + "$srcdir/test_chain.in" \ + sd.data > /dev/null || exit 1 + +echo "verify success signed data" +./hxtool cms-verify-sd \ + --missing-revoke \ + --anchors=FILE:$srcdir/data/ca.crt \ + sd.data sd.data.out > /dev/null || exit 1 +cmp "$srcdir/test_chain.in" sd.data.out || exit 1 + echo "envelope data (content-info)" ./hxtool cms-envelope \ --certificate=FILE:$srcdir/data/test.crt \