3 # Copyright (c) 2004 - 2008 Kungliga Tekniska Högskolan
4 # (Royal Institute of Technology, Stockholm, Sweden).
7 # Redistribution and use in source and binary forms, with or without
8 # modification, are permitted provided that the following conditions
11 # 1. Redistributions of source code must retain the above copyright
12 # notice, this list of conditions and the following disclaimer.
14 # 2. Redistributions in binary form must reproduce the above copyright
15 # notice, this list of conditions and the following disclaimer in the
16 # documentation and/or other materials provided with the distribution.
18 # 3. Neither the name of the Institute nor the names of its contributors
19 # may be used to endorse or promote products derived from this software
20 # without specific prior written permission.
22 # THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
23 # ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
24 # IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
25 # ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
26 # FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
27 # DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
28 # OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
29 # HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
30 # LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
31 # OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 # Id: test_nist.in 21787 2007-08-02 08:50:24Z lha
39 nistdir
=${objdir}/PKITS_data
40 nistzip
=${srcdir}/data
/PKITS_data.
zip
45 stat
="--statistic-file=${objdir}/statfile"
47 hxtool
="${TESTS_ENVIRONMENT} ./hxtool ${stat}"
49 # nistzip is not distributed part of the distribution
50 test -f "$nistzip" ||
exit 77
52 if ${hxtool} info |
grep 'rsa: hcrypto null RSA' > /dev
/null
; then
55 if ${hxtool} info |
grep 'rand: not available' > /dev
/null
; then
59 #--------- Try to find unzip
68 test -x "$p/unzip" && { found
=1 ; break; }
70 test "X$found" = "X" && exit 77
75 echo "nist tests, version 2"
77 if [ ! -d "$nistdir" ] ; then
78 ( mkdir
"$nistdir" && unzip -d "${nistdir}" "${nistzip}" ) >/dev
/null || \
79 { rm -rf "$nistdir" ; exit 1; }
85 while read result cert other
; do
86 if expr "$result" : "#" > /dev
/null
; then
88 description
="${other}"
92 test nolimit
!= "${limit}" && ! expr "$name" : "$limit" > /dev
/null
&& continue
94 test "$result" = "end" && break
97 args
="$args cert:FILE:$nistdir/certs/$cert"
98 args
="$args chain:DIR:$nistdir/certs"
99 args
="$args anchor:FILE:$nistdir/certs/TrustAnchorRootCertificate.crt"
101 for a
in $nistdir/crls
/*.crl
; do
102 args
="$args crl:FILE:$a"
105 cmd
="${hxtool} verify --time=2008-05-20 $args"
106 eval ${cmd} > /dev
/null
109 case "${result},${res}" in
114 *) echo="unknown result ${result},${res}" ; exit 1 ;;
116 if ${egrep} "^${name} FAIL" $srcdir/data
/nist-result2
> /dev
/null
; then
117 if expr "$r" : "PASS" >/dev
/null
; then
118 echo "${name} passed when expected not to"
119 echo "# ${description}" > nist2-passed-
${name}.tmp
122 elif ${egrep} "^${name} EITHER" $srcdir/data
/nist-result2
> /dev
/null
; then
124 elif expr "$r" : "FAIL.*" >/dev
/null
; then
125 echo "$r ${name} ${description}"
126 echo "# ${description}" > nist2-failed-
${name}.tmp
127 echo "$cmd" >> nist2-failed-
${name}.tmp
131 done < $srcdir/data
/nist-data2