git.sur5r.net Git - openldap/blob - tests/scripts/test021-certificate

   1 #! /bin/sh
   2 # $OpenLDAP$
   3
   4 SRCDIR="."
   5 if test $# -ge 1 ; then
   6         SRCDIR=$1; shift
   7 fi
   8
   9 . $SRCDIR/scripts/args.sh $*
  10
  11 echo "running defines.sh"
  12 . $SRCDIR/scripts/defines.sh
  13
  14 echo "running defines.sh $SRCDIR $BACKEND"
  15 . $SRCDIR/scripts/defines.sh
  16
  17 echo "Cleaning up in $DBDIR..."
  18
  19 rm -f $DBDIR/[!C]*
  20
  21 echo "Running slapadd to build slapd database..."
  22 . $CONFFILTER $BACKEND $MONITORDB < $CONF > $DBCONF
  23 $SLAPADD -f $DBCONF -l $LDIFORDERED
  24 RC=$?
  25 if test $RC != 0 ; then
  26         echo "slapadd failed ($RC)!"
  27         exit $RC
  28 fi
  29
  30 echo "Starting slapd on TCP/IP port $PORT..."
  31 $SLAPD -f $DBCONF -h $MASTERURI -d $LVL $TIMING > $MASTERLOG 2>&1 &
  32 PID=$!
  33 if test $WAIT != 0 ; then
  34     echo PID $PID
  35     read foo
  36 fi
  37
  38 echo "Testing certificate handling..."
  39
  40 for i in 0 1 2 3 4 5; do
  41         $LDAPSEARCH -s base -b "$MONITOR" -h $LOCALHOST -p $PORT \
  42                 'objectclass=*' > /dev/null 2>&1
  43         RC=$?
  44         if test $RC = 0 ; then
  45                 break
  46         fi
  47         echo "Waiting 5 seconds for slapd to start..."
  48         sleep 5
  49 done
  50
  51 if test $RC != 0 ; then
  52         echo "ldapsearch failed ($RC)!"
  53         kill -HUP $PID
  54         exit $RC
  55 fi
  56
  57 echo "Add certificates..."
  58 $LDAPMODIFY -v -D "$MANAGERDN" -h $LOCALHOST -p $PORT -w $PASSWD > \
  59         $TESTOUT 2>&1 << EOMODS
  60 version: 1
  61
  62 # LEADING COMMENT AND WHITE SPACE
  63
  64 # should use certificationAuthority instead of extensibleObject
  65 dn: o=University of Michigan,c=US
  66 changetype: modify
  67 add: objectClass
  68 objectClass: extensibleObject
  69 -
  70 add: cAcertificate
  71 cAcertificate;binary::
  72  MIIDVDCCAr2gAwIBAgIBADANBgkqhkiG9w0BAQQFADB3MQswCQYDVQQGEwJVUzET
  73  MBEGA1UECBMKQ2FsaWZvcm5pYTEfMB0GA1UEChMWT3BlbkxEQVAgRXhhbXBsZSwg
  74  THRkLjETMBEGA1UEAxMKRXhhbXBsZSBDQTEdMBsGCSqGSIb3DQEJARYOY2FAZXhh
  75  bXBsZS5jb20wHhcNMDMxMDE3MTYzMDQxWhcNMDQxMDE2MTYzMDQxWjB3MQswCQYD
  76  VQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEfMB0GA1UEChMWT3BlbkxEQVAg
  77  RXhhbXBsZSwgTHRkLjETMBEGA1UEAxMKRXhhbXBsZSBDQTEdMBsGCSqGSIb3DQEJ
  78  ARYOY2FAZXhhbXBsZS5jb20wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANlj
  79  UGxiisAzEiALukzt3Gj/24MRw1J0AZx6GncXLhpNJsAFyA0bYZdAzgvydKeq/uX0
  80  i5o/4Byc3G71XAAcbJZxDPtrLwpDAdMNOBvKV2r67yTgnpatFLfGRt/FWazj5EbF
  81  YkorWWTe+4eEBd9VPzebHdIm+DPHipUfIAzRoNejAgMBAAGjge8wgewwHQYDVR0O
  82  BBYEFEtvIRo2JNKQ+UOwU0ctfeHA5pgjMIGhBgNVHSMEgZkwgZaAFEtvIRo2JNKQ
  83  +UOwU0ctfeHA5pgjoXukeTB3MQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZv
  84  cm5pYTEfMB0GA1UEChMWT3BlbkxEQVAgRXhhbXBsZSwgTHRkLjETMBEGA1UEAxMK
  85  RXhhbXBsZSBDQTEdMBsGCSqGSIb3DQEJARYOY2FAZXhhbXBsZS5jb22CAQAwDAYD
  86  VR0TBAUwAwEB/zAZBgNVHREEEjAQgQ5jYUBleGFtcGxlLmNvbTANBgkqhkiG9w0B
  87  AQQFAAOBgQCgXD/+28El3GXi/uxMNEKqtnIhQdTnNU4il0fZ6pcmHPFC+61Bddow
  88  90ZZZh5Gbg5ZBxFRhDXN8K/fix3ewRSjASt40dGlEODkE+FsLMt04sYl6kX7RGKg
  89  9a46DkeG+uzZnN/3252uCgh+rjNMFAglueUTERv3EtUB1iXEoU3GyA==
  90
  91 dn: cn=Ursula Hampster,ou=Alumni Association,ou=People,o=University of Michigan,c=US
  92 changetype: modify
  93 add: objectClass
  94 objectClass: strongAuthenticationUser
  95 -
  96 add: userCertificate
  97 userCertificate;binary::
  98  MIIDazCCAtSgAwIBAgIBAjANBgkqhkiG9w0BAQQFADB3MQswCQYDVQQGEwJVUzET
  99  MBEGA1UECBMKQ2FsaWZvcm5pYTEfMB0GA1UEChMWT3BlbkxEQVAgRXhhbXBsZSwg
 100  THRkLjETMBEGA1UEAxMKRXhhbXBsZSBDQTEdMBsGCSqGSIb3DQEJARYOY2FAZXhh
 101  bXBsZS5jb20wHhcNMDMxMDE3MTYzMzE5WhcNMDQxMDE2MTYzMzE5WjB+MQswCQYD
 102  VQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEfMB0GA1UEChMWT3BlbkxEQVAg
 103  RXhhbXBsZSwgTHRkLjEYMBYGA1UEAxMPVXJzdWxhIEhhbXBzdGVyMR8wHQYJKoZI
 104  hvcNAQkBFhB1aGFtQGV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCB
 105  iQKBgQDuxgp5ELV9LmhxWMpV7qc4028QQT3+zzFDXhruuXE7ji2n3S3ea8bOwDtJ
 106  h+qnsDe561DhHHHlgIjMKCiDEizYMpxvJPYEXmvp0huRkMgpKZgmel95BSkt6TYm
 107  J0erS3aoimOHLEFimmnTLolNRMiWqNBvqwobx940PGwUWEePKQIDAQABo4H/MIH8
 108  MAkGA1UdEwQCMAAwLAYJYIZIAYb4QgENBB8WHU9wZW5TU0wgR2VuZXJhdGVkIENl
 109  cnRpZmljYXRlMB0GA1UdDgQWBBSjI94TbBmuDEeUUOiC37EK0Uf0XjCBoQYDVR0j
 110  BIGZMIGWgBRLbyEaNiTSkPlDsFNHLX3hwOaYI6F7pHkwdzELMAkGA1UEBhMCVVMx
 111  EzARBgNVBAgTCkNhbGlmb3JuaWExHzAdBgNVBAoTFk9wZW5MREFQIEV4YW1wbGUs
 112  IEx0ZC4xEzARBgNVBAMTCkV4YW1wbGUgQ0ExHTAbBgkqhkiG9w0BCQEWDmNhQGV4
 113  YW1wbGUuY29tggEAMA0GCSqGSIb3DQEBBAUAA4GBAIgUcARb3OlWYNbmr1nmqESu
 114  xLn16uqI1Ot6WkcICvpkdQ+Bo+R9AP05xpoXocZtKdNvBu3FNxB/jFkiOcLU2lX7
 115  Px1Ijnsjh60qVRy9HOsHCungIKlGcnXLKHmKu0y//5jds/HnaJsGcHI5JRG7CBJb
 116  W+wrwge3trJ1xHJI8prN
 117
 118 dn: cn=Jennifer Smith,ou=Alumni Association,ou=People,o=University of Michigan,c=US
 119 changetype: modify
 120 add: objectClass
 121 objectClass: strongAuthenticationUser
 122 -
 123 add: userCertificate
 124 userCertificate;binary::
 125  MIIDcDCCAtmgAwIBAgIBATANBgkqhkiG9w0BAQQFADB3MQswCQYDVQQGEwJVUzET
 126  MBEGA1UECBMKQ2FsaWZvcm5pYTEfMB0GA1UEChMWT3BlbkxEQVAgRXhhbXBsZSwg
 127  THRkLjETMBEGA1UEAxMKRXhhbXBsZSBDQTEdMBsGCSqGSIb3DQEJARYOY2FAZXhh
 128  bXBsZS5jb20wHhcNMDMxMDE3MTYzMTQwWhcNMDQxMDE2MTYzMTQwWjCBgjELMAkG
 129  A1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExHzAdBgNVBAoTFk9wZW5MREFQ
 130  IEV4YW1wbGUsIEx0ZC4xHTAbBgNVBAMUFEplbm5pZmVyICJKZW4iIFNtaXRoMR4w
 131  HAYJKoZIhvcNAQkBFg9qZW5AZXhhbXBsZS5jb20wgZ8wDQYJKoZIhvcNAQEBBQAD
 132  gY0AMIGJAoGBANUgO8cP/SjqgCVxxsRYv36AP0+QL81iEkGvR4gG6jbtDDBdVYDC
 133  YbS2oKKNJ5e99NxGMIjOYfmKcAwmkV46IhdzUtkutgjHEG9vl5ajSwc1KSsbTMTy
 134  NtuG3k5k02JYFbP+FrGyUE8iPqK4+i7mVjW4bh/MBCHW88FptnpDJiuHAgMBAAGj
 135  gf8wgfwwCQYDVR0TBAIwADAsBglghkgBhvhCAQ0EHxYdT3BlblNTTCBHZW5lcmF0
 136  ZWQgQ2VydGlmaWNhdGUwHQYDVR0OBBYEFEdo4jpxCQXJ1sh/E1O3ZBkLTbHkMIGh
 137  BgNVHSMEgZkwgZaAFEtvIRo2JNKQ+UOwU0ctfeHA5pgjoXukeTB3MQswCQYDVQQG
 138  EwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEfMB0GA1UEChMWT3BlbkxEQVAgRXhh
 139  bXBsZSwgTHRkLjETMBEGA1UEAxMKRXhhbXBsZSBDQTEdMBsGCSqGSIb3DQEJARYO
 140  Y2FAZXhhbXBsZS5jb22CAQAwDQYJKoZIhvcNAQEEBQADgYEAFpHsQUtSZQzmm9k2
 141  Vrfs0h7tdkWF3LcHzHk4a/t3k4EXcqlHBxh4f0tmb4XNP9QupRgm6ggr8t3Rq0Vt
 142  T8k50x4C7oE8HwZuEEB4FM7S1Zig3dfeJ8MJgdaLqt5/U9Ip/hZdzG2dsUsIceH/
 143  5MCKLu9bGJUjsKnGdm/KpaNwaNo=
 144
 145 dn: cn=Jennifer Smith,ou=Alumni Association,ou=People,o=University of Michigan,c=US
 146 add: userCertificate;binary
 147 userCertificate;binary::
 148  MIIDjDCCAvWgAwIBAgIBAzANBgkqhkiG9w0BAQQFADB3MQswCQYDVQQGEwJVUzET
 149  MBEGA1UECBMKQ2FsaWZvcm5pYTEfMB0GA1UEChMWT3BlbkxEQVAgRXhhbXBsZSwg
 150  THRkLjETMBEGA1UEAxMKRXhhbXBsZSBDQTEdMBsGCSqGSIb3DQEJARYOY2FAZXhh
 151  bXBsZS5jb20wHhcNMDMxMDE3MTYzNTM1WhcNMDQxMDE2MTYzNTM1WjCBnjELMAkG
 152  A1UEBhMCVVMxETAPBgNVBAgTCE1pY2hpZ2FuMR8wHQYDVQQKExZPcGVuTERBUCBF
 153  eGFtcGxlLCBMdGQuMRswGQYDVQQLExJBbHVtbmkgQXNzb2ljYXRpb24xEjAQBgNV
 154  BAMTCUplbiBTbWl0aDEqMCgGCSqGSIb3DQEJARYbamVuQG1haWwuYWx1bW5pLmV4
 155  YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDpnXWAL0VkROGO
 156  1Rg8J3u6F4F7yMqQCbUMsV9rxQisYj45+pmqiHV5urogvT4MGD6eLNFZKBn+0KRn
 157  i++uu7gbartzpmBaHOlzRII9ZdVMFfrT2xYNgAlkne6pb6IZIN9UONuH/httENCD
 158  J5WEpjZ48D1Lrml/HYO/W+SAMkpEqQIDAQABo4H/MIH8MAkGA1UdEwQCMAAwLAYJ
 159  YIZIAYb4QgENBB8WHU9wZW5TU0wgR2VuZXJhdGVkIENlcnRpZmljYXRlMB0GA1Ud
 160  DgQWBBTB2saht/od/nis76b9m+pjxfhSPjCBoQYDVR0jBIGZMIGWgBRLbyEaNiTS
 161  kPlDsFNHLX3hwOaYI6F7pHkwdzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlm
 162  b3JuaWExHzAdBgNVBAoTFk9wZW5MREFQIEV4YW1wbGUsIEx0ZC4xEzARBgNVBAMT
 163  CkV4YW1wbGUgQ0ExHTAbBgkqhkiG9w0BCQEWDmNhQGV4YW1wbGUuY29tggEAMA0G
 164  CSqGSIb3DQEBBAUAA4GBAIoGPc/AS0cNkMRDNoMIzcFdF9lONMduKBiSuFvv+x8n
 165  Cek+LUdXxF59V2NPKh2V5gFh5xbAchyv6FVBnpVtPdB5akCr5tdFQhuBLUXXDk/t
 166  THGpIWt7OAjEmpuMzsz3GUB8Zf9rioHOs1DMw+GpzWdnFITxXhAqEDc3quqPrpxZ
 167 -
 168 delete: userCertificate;binary
 169 userCertificate;binary::
 170  MIIDcDCCAtmgAwIBAgIBATANBgkqhkiG9w0BAQQFADB3MQswCQYDVQQGEwJVUzET
 171  MBEGA1UECBMKQ2FsaWZvcm5pYTEfMB0GA1UEChMWT3BlbkxEQVAgRXhhbXBsZSwg
 172  THRkLjETMBEGA1UEAxMKRXhhbXBsZSBDQTEdMBsGCSqGSIb3DQEJARYOY2FAZXhh
 173  bXBsZS5jb20wHhcNMDMxMDE3MTYzMTQwWhcNMDQxMDE2MTYzMTQwWjCBgjELMAkG
 174  A1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExHzAdBgNVBAoTFk9wZW5MREFQ
 175  IEV4YW1wbGUsIEx0ZC4xHTAbBgNVBAMUFEplbm5pZmVyICJKZW4iIFNtaXRoMR4w
 176  HAYJKoZIhvcNAQkBFg9qZW5AZXhhbXBsZS5jb20wgZ8wDQYJKoZIhvcNAQEBBQAD
 177  gY0AMIGJAoGBANUgO8cP/SjqgCVxxsRYv36AP0+QL81iEkGvR4gG6jbtDDBdVYDC
 178  YbS2oKKNJ5e99NxGMIjOYfmKcAwmkV46IhdzUtkutgjHEG9vl5ajSwc1KSsbTMTy
 179  NtuG3k5k02JYFbP+FrGyUE8iPqK4+i7mVjW4bh/MBCHW88FptnpDJiuHAgMBAAGj
 180  gf8wgfwwCQYDVR0TBAIwADAsBglghkgBhvhCAQ0EHxYdT3BlblNTTCBHZW5lcmF0
 181  ZWQgQ2VydGlmaWNhdGUwHQYDVR0OBBYEFEdo4jpxCQXJ1sh/E1O3ZBkLTbHkMIGh
 182  BgNVHSMEgZkwgZaAFEtvIRo2JNKQ+UOwU0ctfeHA5pgjoXukeTB3MQswCQYDVQQG
 183  EwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEfMB0GA1UEChMWT3BlbkxEQVAgRXhh
 184  bXBsZSwgTHRkLjETMBEGA1UEAxMKRXhhbXBsZSBDQTEdMBsGCSqGSIb3DQEJARYO
 185  Y2FAZXhhbXBsZS5jb22CAQAwDQYJKoZIhvcNAQEEBQADgYEAFpHsQUtSZQzmm9k2
 186  Vrfs0h7tdkWF3LcHzHk4a/t3k4EXcqlHBxh4f0tmb4XNP9QupRgm6ggr8t3Rq0Vt
 187  T8k50x4C7oE8HwZuEEB4FM7S1Zig3dfeJ8MJgdaLqt5/U9Ip/hZdzG2dsUsIceH/
 188  5MCKLu9bGJUjsKnGdm/KpaNwaNo=
 189
 190 EOMODS
 191
 192 RC=$?
 193 if test $RC != 0 ; then
 194         echo "ldapmodify failed ($RC)!"
 195         kill -HUP $PID
 196         exit $RC
 197 fi
 198
 199 echo 'Using ldapsearch to retrieve (userCertificate;binary=*) ...'
 200 echo "# (userCertificate;binary=*)" > $SEARCHOUT
 201 $LDAPSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT \
 202     '(userCertificate;binary=*)' >> $SEARCHOUT 2>&1
 203 RC=$?
 204 if test $RC != 0 ; then
 205         echo "ldapsearch failed ($RC)!"
 206         kill -HUP $PID
 207         exit $RC
 208 fi
 209
 210 echo 'Using ldapsearch to retrieve (cAcertificate=*) ...'
 211 echo "# (cAcertificate=*)" >> $SEARCHOUT
 212 $LDAPSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT \
 213     '(cAcertificate=*)' >> $SEARCHOUT 2>&1
 214 RC=$?
 215 if test $RC != 0 ; then
 216         echo "ldapsearch failed ($RC)!"
 217         kill -HUP $PID
 218         exit $RC
 219 fi
 220
 221 SNAI='2$EMAIL=ca@example.com,CN=Example CA,O=Openldap Example\5C, Ltd.,ST=California,C=US'
 222
 223 echo 'Using ldapsearch to retrieve (userCertificate=serialNumberAndIssuer) ...'
 224 echo "# (userCertificate=$SNAI)" >> $SEARCHOUT
 225 $LDAPSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT \
 226     "(userCertificate=$SNAI)" >> $SEARCHOUT 2>&1
 227 RC=$?
 228 if test $RC != 0 ; then
 229         echo "ldapsearch failed ($RC)!"
 230         kill -HUP $PID
 231         exit $RC
 232 fi
 233
 234 kill -HUP $PID
 235
 236 if test "$WITHTLS" = no ; then
 237         echo "Certificate matching not suported without TLS"
 238         LDIF=$CERTIFICATEOUT
 239 else
 240         LDIF=$CERTIFICATETLS
 241 fi
 242
 243 echo "Filtering ldapsearch results..."
 244 . $LDIFFILTER < $SEARCHOUT > $SEARCHFLT
 245 echo "Filtering original ldif used to create database..."
 246 . $LDIFFILTER < $LDIF > $LDIFFLT
 247 echo "Comparing filter output..."
 248 $CMP $SEARCHFLT $LDIFFLT > $CMPOUT
 249
 250 if test $? != 0 ; then
 251         echo "comparison failed - certificate operations did not complete correctly"
 252         exit 1
 253 fi
 254
 255 echo ">>>>> Test succeeded"
 256
 257 exit 0