smime.sh
来自「支持SSL v2/v3, TLS, PKCS #5, PKCS #7, PKCS」· Shell 代码 · 共 283 行
SH
283 行
#! /bin/ksh ## This is just a quick script so we can still run our testcases.# Longer term we need a scriptable test environment..#. ../common/init.shCURDIR=`pwd`SMIMEDIR=${HOSTDIR}/smimeCADIR=${SMIMEDIR}/cadirALICEDIR=${SMIMEDIR}/alicedirBOBDIR=${SMIMEDIR}/bobdirecho "<HTML><BODY>" >> ${RESULTS}#temporary filesTMP=${TMP-/tmp}PWFILE=${TMP}/tests.pw.$$CERTSCRIPT=${TMP}/tests_certs.$$NOISE_FILE=${TMP}/tests_noise.$$TEMPFILES="${PWFILE} ${CERTSCRIPT} ${NOISE_FILE}"## should also try to kill any running server#trap "rm -f ${TEMPFILES}; exit" 2 3# Generate noise for our CA cert.## NOTE: these keys are only suitable for testing, as this whole thing bypasses# the entropy gathering. Don't use this method to generate keys and certs for# product use or deployment.#ps -efl > ${NOISE_FILE} 2>&1ps aux >> ${NOISE_FILE} 2>&1netstat >> ${NOISE_FILE} 2>&1date >> ${NOISE_FILE} 2>&1mkdir -p ${SMIMEDIR}mkdir -p ${CADIR}mkdir -p ${ALICEDIR}mkdir -p ${BOBDIR}cd ${CADIR}## build the TEMP CA used for testing purposes# echo "<TABLE BORDER=1><TR><TH COLSPAN=3>Certutil Tests</TH></TR>" >> ${RESULTS}echo "<TR><TH width=500>Test Case</TH><TH width=50>Result</TH></TR>" >> ${RESULTS}echo "********************** Creating a CA Certificate **********************"echo nss > ${PWFILE}echo " certutil -N -d ${CADIR} -f ${PWFILE}"certutil -N -d ${CADIR} -f ${PWFILE}echo initializedecho 5 > ${CERTSCRIPT}echo 9 >> ${CERTSCRIPT}echo n >> ${CERTSCRIPT}echo y >> ${CERTSCRIPT}echo 3 >> ${CERTSCRIPT}echo n >> ${CERTSCRIPT}echo 5 >> ${CERTSCRIPT}echo 6 >> ${CERTSCRIPT}echo 7 >> ${CERTSCRIPT}echo 9 >> ${CERTSCRIPT}echo n >> ${CERTSCRIPT}echo "certutil -S -n \"TestCA\" -s \"CN=NSS Test CA, O=BOGUS NSS, L=Mountain View, ST=California, C=US\" -t \"CTu,CTu,CTu\" -v 60 -x -d ${CADIR} -1 -2 -5 -f ${PWFILE} -z ${NOISE_FILE}"certutil -S -n "TestCA" -s "CN=NSS Test CA, O=BOGUS NSS, L=Mountain View, ST=California, C=US" -t "CTu,CTu,CTu" -v 60 -x -d ${CADIR} -1 -2 -5 -f ${PWFILE} -z ${NOISE_FILE} < ${CERTSCRIPT}if [ $? -ne 0 ]; then echo "<TR><TD>Creating CA Cert</TD><TD bgcolor=red>Failed</TD><TR>" >> ${RESULTS}else echo "<TR><TD>Creating CA Cert</TD><TD bgcolor=lightGreen>Passed</TD><TR>" >> ${RESULTS}fiecho " certutil -L -n \"TestCA\" -r -d ${CADIR} > root.cert"certutil -L -n "TestCA" -r -d ${CADIR} > root.certif [ $? -ne 0 ]; then CERTFAILED=${CERTFAILED-"Export Root"}fiecho "**************** Creating Client CA Issued Certificates ****************"certutil -N -d ${ALICEDIR} -f ${PWFILE}netstat >> ${NOISE_FILE} 2>&1date >> ${NOISE_FILE} 2>&1cd ${ALICEDIR}echo "Import the root CA"echo " certutil -A -n \"TestCA\" -t \"TC,TC,TC\" -f ${PWFILE} -d ${ALICEDIR} -i ${CADIR}/root.cert"certutil -A -n "TestCA" -t "TC,TC,TC" -f ${PWFILE} -d ${ALICEDIR} -i ${CADIR}/root.certif [ $? -ne 0 ]; then CERTFAILED=${CERTFAILED-"Import Root"}fiecho "Generate a Certificate request"echo " certutil -R -s \"CN=Alice, E=alice@bogus.com, O=BOGUS Netscape, L=Mountain View, ST=California, C=US\" -d ${ALICEDIR} -f ${PWFILE} -z ${NOISE_FILE} -o req"certutil -R -s "CN=Alice, E=alice@bogus.com, O=BOGUS NSS, L=Mountain View, ST=California, C=US" -d ${ALICEDIR} -f ${PWFILE} -z ${NOISE_FILE} -o reqif [ $? -ne 0 ]; then CERTFAILED=${CERTFAILED-"Generate Request"}fiecho "Sign the Certificate request"echo "certutil -C -c "TestCA" -m 3 -v 60 -d ${CADIR} -f ${PWFILE} -i req -o alice.cert"certutil -C -c "TestCA" -m 3 -v 60 -d ${CADIR} -i req -o alice.cert -f ${PWFILE}if [ $? -ne 0 ]; then CERTFAILED=${CERTFAILED-"Sign Alice's Cert"}fiecho "Import the new Cert"echo "certutil -A -n \"Alice\" -t \"u,u,u\" -d ${ALICEDIR} -f ${PWFILE} -i alice.cert"certutil -A -n "Alice" -t "u,u,u" -d ${ALICEDIR} -f ${PWFILE} -i alice.certif [ $? -ne 0 ]; then CERTFAILED=${CERTFAILED-"Import Alice's cert"}fiif [ -n "${CERTFAILED}" ]; then echo "<TR><TD>Creating Alice's email cert</TD><TD bgcolor=red>Failed ($CERTFAILED)</TD><TR>" >> ${RESULTS}else echo "<TR><TD>Creating Alice's email cert</TD><TD bgcolor=lightGreen>Passed</TD><TR>" >> ${RESULTS}finetstat >> ${NOISE_FILE} 2>&1date >> ${NOISE_FILE} 2>&1certutil -N -d ${BOBDIR} -f ${PWFILE}cd ${BOBDIR}echo "Import the root CA"echo " certutil -A -n \"TestCA\" -t \"TC,TC,TC\" -f ${PWFILE} -d ${BOBDIR} -i ${CADIR}/root.cert"certutil -A -n "TestCA" -t "TC,TC,TC" -f ${PWFILE} -d ${BOBDIR} -i ${CADIR}/root.certif [ $? -ne 0 ]; then CERTFAILED=${CERTFAILED-"Import Root"}fiecho "Generate a Certificate request"echo " certutil -R -s \"CN=Bob, E=bob@bogus.com, O=BOGUS Netscape, L=Mountain View, ST=California, C=US\" -d ${BOBDIR} -f ${PWFILE} -z ${NOISE_FILE} -o req"certutil -R -s "CN=Bob, E=bob@bogus.com, O=BOGUS NSS, L=Mountain View, ST=California, C=US" -d ${BOBDIR} -f ${PWFILE} -z ${NOISE_FILE} -o reqif [ $? -ne 0 ]; then CERTFAILED=${CERTFAILED-"Generate Request"}fiecho "Sign the Certificate request"echo "certutil -C -c "TestCA" -m 4 -v 60 -d ${CADIR} -f ${PWFILE} -i req -o bob.cert"certutil -C -c "TestCA" -m 4 -v 60 -d ${CADIR} -i req -o bob.cert -f ${PWFILE}if [ $? -ne 0 ]; then CERTFAILED=${CERTFAILED-"Sign Bob's cert"}fiecho "Import the new Cert"echo "certutil -A -n \"Bob\" -t \"u,u,u\" -d ${BOBDIR} -f ${PWFILE} -i bob.cert"certutil -A -n "Bob" -t "u,u,u" -d ${BOBDIR} -f ${PWFILE} -i bob.certif [ $? -ne 0 ]; then CERTFAILED=${CERTFAILED-"Import Bob's cert"}fiif [ -n "${CERTFAILED}" ]; then echo "<TR><TD>Creating Bob's email cert</TD><TD bgcolor=red>Failed ($CERTFAILED)</TD><TR>" >> ${RESULTS}else echo "<TR><TD>Creating Bob's email cert</TD><TD bgcolor=lightGreen>Passed</TD><TR>" >> ${RESULTS}finetstat >> ${NOISE_FILE} 2>&1date >> ${NOISE_FILE} 2>&1cd ${CADIR}echo "Generate a third cert"echo "certutil -S -n \"Dave\" -c \"TestCA\" -t \"u,u,u\" -s \"CN=Dave, E=dave@bogus.com, O=BOGUS Netscape, L=Mountain View, ST=California, C=US\" -d ${CADIR} -f ${PWFILE} -z ${NOISE_FILE} -m 5 -v 60"certutil -S -n "Dave" -c "TestCA" -t "u,u,u" -s "CN=Dave, E=dave@bogus.com, O=BOGUS Netscape, L=Mountain View, ST=California, C=US" -d ${CADIR} -f ${PWFILE} -z ${NOISE_FILE} -m 5 -v 60echo "Import Alices's cert into Bob's db"echo "certutil -E -t \"u,u,u\" -d ${BOBDIR} -f ${PWFILE} -i ${ALICEDIR}/alice.cert"certutil -E -t "u,u,u" -d ${BOBDIR} -f ${PWFILE} -i ${ALICEDIR}/alice.certif [ $? -ne 0 ]; then CERTFAILED=${CERTFAILED-"Import Alice's cert into Bob's db"}fiecho "Import Bob's cert into Alice's db"echo "certutil -E -t \"u,u,u\" -d ${ALICEDIR} -f ${PWFILE} -i ${BOBDIR}/bob.cert"certutil -E -t "u,u,u" -d ${ALICEDIR} -f ${PWFILE} -i ${BOBDIR}/bob.certif [ $? -ne 0 ]; then CERTFAILED=${CERTFAILED-"Import Bob's cert into Alice's db"}fiecho "Import Dave's cert into Alice's and Bob's dbs"echo " certutil -L -n \"Dave\" -r -d ${CADIR} > dave.cert"certutil -L -n "Dave" -r -d ${CADIR} > dave.certif [ $? -ne 0 ]; then CERTFAILED=${CERTFAILED-"Export Dave's cert"}fiecho "certutil -E -t \"u,u,u\" -d ${ALICEDIR} -f ${PWFILE} -i ${CADIR}/dave.cert"certutil -E -t "u,u,u" -d ${ALICEDIR} -f ${PWFILE} -i ${CADIR}/dave.certif [ $? -ne 0 ]; then CERTFAILED=${CERTFAILED-"Import Dave's cert into Alice's db"}fiecho "certutil -E -t \"u,u,u\" -d ${BOBDIR} -f ${PWFILE} -i ${CADIR}/dave.cert"certutil -E -t "u,u,u" -d ${BOBDIR} -f ${PWFILE} -i ${CADIR}/dave.certif [ $? -ne 0 ]; then CERTFAILED=${CERTFAILED-"Import Dave's cert into Bob's db"}fiecho "</TABLE><BR>" >> ${RESULTS}echo "********************* S/MIME testing ****************************"echo "<TABLE BORDER=1><TR><TH COLSPAN=3>S/MIME tests</TH></TR>" >> ${RESULTS}echo "<TR><TH width=500>Test Case</TH><TH width=50>Result</TH></TR>" >> ${RESULTS}cd ${SMIMEDIR}cp ${CURDIR}/alice.txt ${SMIMEDIR}# Test basic signed and enveloped messages from 1 --> 2echo "cmsutil -S -N Alice -i alice.txt -d ${ALICEDIR} -p nss -o alice.sig"cmsutil -S -N Alice -i alice.txt -d ${ALICEDIR} -p nss -o alice.sigif [ $? -ne 0 ]; then CMSFAILED=${CMSFAILED-"Create Signature Alice"}fiecho "cmsutil -D -i alice.sig -d ${BOBDIR} -o alice.data1"cmsutil -D -i alice.sig -d ${BOBDIR} -o alice.data1if [ $? -ne 0 ]; then CMSFAILED=${CMSFAILED-"Decode Alice's Signature"}fiecho "diff alice.txt alice.data1"diff alice.txt alice.data1if [ $? -ne 0 ]; then echo "Signing attached message Failed ($CMSFAILED)" echo "<TR><TD>Signing attached message</TD><TD bgcolor=red>Failed ($CMSFAILED)</TD><TR>" >> ${RESULTS}else echo "Signing attached message Passed" echo "<TR><TD>Signing attached message</TD><TD bgcolor=lightGreen>Passed</TD><TR>" >> ${RESULTS}fiecho "cmsutil -E -r bob@bogus.com -i alice.txt -d ${ALICEDIR} -p nss -o alice.env"cmsutil -E -r bob@bogus.com -i alice.txt -d ${ALICEDIR} -p nss -o alice.envif [ $? -ne 0 ]; then CMSFAILED=${CMSFAILED-"Create Enveloped Data Alice"}fiecho "cmsutil -D -i alice.env -d ${BOBDIR} -p nss -o alice.data1"cmsutil -D -i alice.env -d ${BOBDIR} -p nss -o alice.data1if [ $? -ne 0 ]; then CMSFAILED=${CMSFAILED-"Decode Enveloped Data Alice"}fiecho "diff alice.txt alice.data1"diff alice.txt alice.data1if [ $? -ne 0 ]; then echo "Enveloped Data Failed ($CMSFAILED)" echo "<TR><TD>Enveloped Data</TD><TD bgcolor=red>Failed ($CMSFAILED)</TD><TR>" >> ${RESULTS}else echo "Enveloped Data Passed" echo "<TR><TD>Enveloped Data</TD><TD bgcolor=lightGreen>Passed</TD><TR>" >> ${RESULTS}fi# multiple recip#cmsutil -E -i alicecc.txt -d alicedir -o alicecc.env -r bob@bogus.com,dave@bogus.com#cmsutil -D -i alicecc.env -d bobdir -p nss#certs-onlyecho "cmsutil -O -r \"Alice,bob@bogus.com,dave@bogus.com\" -d ${ALICEDIR} > co.der"cmsutil -O -r "Alice,bob@bogus.com,dave@bogus.com" -d ${ALICEDIR} > co.derif [ $? -ne 0 ]; then CMSFAILED=${CMSFAILED-"Create Certs-Only Alice"}fiecho "cmsutil -D -i co.der -d ${BOBDIR}"cmsutil -D -i co.der -d ${BOBDIR}if [ $? -ne 0 ]; then CMSFAILED=${CMSFAILED-"Verify Certs-Only by CA"}fiif [ -n "${CMSFAILED}" ]; then echo "Sending certs-only message Failed ($CMSFAILED)" echo "<TR><TD>Sending certs-only message</TD><TD bgcolor=red>Failed ($CMSFAILED)</TD><TR>" >> ${RESULTS}else echo "Sending certs-only message Passed" echo "<TR><TD>Sending certs-only message</TD><TD bgcolor=lightGreen>Passed</TD><TR>" >> ${RESULTS}fiecho "cmsutil -C -i alice.txt -e alicehello.env -d ${ALICEDIR} -r \"bob@bogus.com\" > alice.enc"cmsutil -C -i alice.txt -e alicehello.env -d ${ALICEDIR} -r "bob@bogus.com" > alice.encif [ $? -ne 0 ]; then CMSFAILED=${CMSFAILED-"Create Encrypted-Data"}fi#echo "cmsutil -C -i bob.txt -e alicehello.env -d ${ALICEDIR} -r \"alice@bogus.com\" > bob.enc"#cmsutil -C -i bob.txt -e alicehello.env -d ${ALICEDIR} -r "alice@bogus.com" > bob.encif [ $? -ne 0 ]; then CMSFAILED=${CMSFAILED-"Create Encrypted-Data"}fiecho "cmsutil -D -i alice.enc -d ${BOBDIR} -e alicehello.env -p nss -o alice.data2"cmsutil -D -i alice.enc -d ${BOBDIR} -e alicehello.env -p nss -o alice.data2diff alice.txt alice.data2if [ $? -ne 0 ]; then CMSFAILED=${CMSFAILED-"Decode Encrypted-Data"}fiif [ -n "${CMSFAILED}" ]; then echo "Encrypted-Data message Failed ($CMSFAILED)" echo "<TR><TD>Encrypted-Data message</TD><TD bgcolor=red>Failed ($CMSFAILED)</TD><TR>" >> ${RESULTS}else echo "Encrypted-Data message Passed" echo "<TR><TD>Encrypted-Data message</TD><TD bgcolor=lightGreen>Passed</TD><TR>" >> ${RESULTS}fiecho "</TABLE><BR>" >> ${RESULTS}rm -f ${TEMPFILES}cd ${CURDIR}echo "</BODY></HTML>" >> ${RESULTS}⌨️ 快捷键说明
复制代码Ctrl + C
搜索代码Ctrl + F
全屏模式F11
增大字号Ctrl + =
减小字号Ctrl + -
显示快捷键?