#!/bin/sh
srcdir="@srcdir@"
objdir="@objdir@"
nistdir=${objdir}/PKITS_data
nistzip=${srcdir}/data/PKITS_data.zip
egrep="@egrep@"
limit="${1:-nolimit}"
stat="--statistic-file=${objdir}/statfile"
hxtool="${TESTS_ENVIRONMENT} ./hxtool ${stat}"
test -f "$nistzip" || exit 77
if ${hxtool} info | grep 'rsa: hcrypto null RSA' > /dev/null ; then
exit 77
fi
if ${hxtool} info | grep 'rand: not available' > /dev/null ; then
exit 77
fi
oldifs=$IFS
IFS=:
set -- $PATH
IFS=$oldifs
found=
for p in "$@" ; do
test -x "$p/unzip" && { found=1 ; break; }
done
test "X$found" = "X" && exit 77
echo "nist tests, version 2"
if [ ! -d "$nistdir" ] ; then
( mkdir "$nistdir" && unzip -d "${nistdir}" "${nistzip}" ) >/dev/null || \
{ rm -rf "$nistdir" ; exit 1; }
fi
ec=
name=
description=
while read result cert other ; do
if expr "$result" : "#" > /dev/null; then
name=${cert}
description="${other}"
continue
fi
test nolimit != "${limit}" && ! expr "$name" : "$limit" > /dev/null && continue
test "$result" = "end" && break
args=
args="$args cert:FILE:$nistdir/certs/$cert"
args="$args chain:DIR:$nistdir/certs"
args="$args anchor:FILE:$nistdir/certs/TrustAnchorRootCertificate.crt"
for a in $nistdir/crls/*.crl; do
args="$args crl:FILE:$a"
done
cmd="${hxtool} verify $args"
eval ${cmd} > /dev/null
res=$?
case "${result},${res}" in
0,0) r="PASSs";;
0,*) r="FAILs";;
[123],0) r="FAILf";;
[123],*) r="PASSf";;
*) echo="unknown result ${result},${res}" ; exit 1 ;;
esac
if ${egrep} "^${name} FAIL" $srcdir/data/nist-result2 > /dev/null; then
if expr "$r" : "PASS" >/dev/null; then
echo "${name} passed when expected not to"
echo "# ${description}" > nist2-passed-${name}.tmp
ec=1
fi
elif ${egrep} "^${name} EITHER" $srcdir/data/nist-result2 > /dev/null; then
:
elif expr "$r" : "FAIL.*" >/dev/null ; then
echo "$r ${name} ${description}"
echo "# ${description}" > nist2-failed-${name}.tmp
echo "$cmd" >> nist2-failed-${name}.tmp
ec=1
fi
done < $srcdir/data/nist-data2
echo "done!"
exit $ec