From 532985afc37757f8e80ddf30d85b66d4c36a62b1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= <lha@kth.se>
Date: Sun, 30 Apr 2006 07:49:03 +0000
Subject: [PATCH] Don't try pkinit if there is no rsa

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17370 ec53bebd-3082-4978-b11e-865c3cabbd6b
---
 tests/kdc/check-kdc.in | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

diff --git a/tests/kdc/check-kdc.in b/tests/kdc/check-kdc.in
index 1dd812851..2f677a967 100644
--- a/tests/kdc/check-kdc.in
+++ b/tests/kdc/check-kdc.in
@@ -54,6 +54,7 @@ klist="../../kuser/klist -c $cache"
 kgetcred="../../kuser/kgetcred -c $cache"
 kdestroy="../../kuser/kdestroy -c $cache"
 ktutil="../../admin/ktutil"
+hxtool="../../lib/hx509/hxtool"
 
 KRB5_CONFIG="${objdir}/krb5.conf"
 export KRB5_CONFIG
@@ -162,8 +163,16 @@ ${kdestroy}
 #	${kdestroy}
 #done
 
-# If we support pkinit, lets try that
-if ${kinit} --help 2>&1 | grep "CA certificates" > /dev/null ; then
+rsa=yes
+if ${hxtool} info | grep 'rsa: hx509 null RSA' > /dev/null ; then
+    rsa=no
+fi
+if ${kinit} --help 2>&1 | grep "CA certificates" > /dev/null; then
+    pkinit=yes
+fi
+
+# If we support pkinit and have RSA, lets try that
+if test "$pkinit" = yes -a "$rsa" = yes ; then
 	echo "Trying pk-init (princiapl in certificate)"
 	base="${srcdir}/../../lib/hx509/data"
 	${kinit} -C FILE:${base}/pkinit.crt,${base}/pkinit.key bar@${R} || exitcode=1
@@ -174,7 +183,7 @@ if ${kinit} --help 2>&1 | grep "CA certificates" > /dev/null ; then
 	${kgetcred} ${server}@${R} || exitcode=1
 	${kdestroy}
 else
-	echo no pkinit
+	echo "no pkinit (pkinit: $pkinit, rsa: $rsa)"
 fi
 
 echo "killing kdc (${kdcpid})"