oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Test pkinit encKey case.

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18223 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2006-10-04 21:00:33 +00:00
parent 45698ac1dc
commit a00613fcda
1 changed files with 15 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
tests/kdc/check-kdc.in
View File

@@ -247,20 +247,22 @@ fi
# If we support pkinit and have RSA, lets try that # If we support pkinit and have RSA, lets try that
if test "$pkinit" = yes -a "$rsa" = yes ; then if test "$pkinit" = yes -a "$rsa" = yes ; then
echo "Trying pk-init (principal in certificate)"
base="${srcdir}/../../lib/hx509/data"
${kinit} -C FILE:${base}/pkinit.crt,${base}/pkinit.key bar@${R} || exitcode=1
${kgetcred} ${server}@${R} || exitcode=1
${kdestroy}
echo "Trying pk-init (principal in pki-mapping)"
${kinit} -C FILE:${base}/pkinit.crt,${base}/pkinit.key foo@${R} || exitcode=1
${kgetcred} ${server}@${R} || exitcode=1
${kdestroy}
echo "Trying pk-init (password protected key)"
${kinit} -C FILE:${base}/pkinit.crt,${base}/pkinit-pw.key --password-file=${objdir}/foopassword foo@${R} || exitcode=1
${kgetcred} ${server}@${R} || exitcode=1
${kdestroy}
for type in "" "--pk-use-enckey"; do
echo "Trying pk-init (principal in certificate) $type"
base="${srcdir}/../../lib/hx509/data"
${kinit} $type -C FILE:${base}/pkinit.crt,${base}/pkinit.key bar@${R} || exitcode=1
${kgetcred} ${server}@${R} || exitcode=1
${kdestroy}
echo "Trying pk-init (principal in pki-mapping) $type"
${kinit} $type -C FILE:${base}/pkinit.crt,${base}/pkinit.key foo@${R} || exitcode=1
${kgetcred} ${server}@${R} || exitcode=1
${kdestroy}
echo "Trying pk-init (password protected key) $type"
${kinit} $type -C FILE:${base}/pkinit.crt,${base}/pkinit-pw.key --password-file=${objdir}/foopassword foo@${R} || exitcode=1
${kgetcred} ${server}@${R} || exitcode=1
${kdestroy}
done
else else
echo "no pkinit (pkinit: $pkinit, rsa: $rsa)" echo "no pkinit (pkinit: $pkinit, rsa: $rsa)"
fi fi