📄 makefile
字号:
@$(ECHO) >> $(RESULTFILE) @$(ECHO) "Try to connect, this should fail." >> $(RESULTFILE) @TestCertClient $(PEGASUS_HOME)/testdn1.cert $(PEGASUS_HOME)/testdn1.key $(PEGASUS_HOME)/ssl.rnd >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Attempt to delete the certificate we just deleted, this should get a DNE error." >> $(RESULTFILE) @cimtrust -r -i /C=US/ST=VIRGINIA/L=Fairfax/O=OpenGroup/OU=OpenPegasus/CN=TestSelfSigned1 -S /C=US/ST=VIRGINIA/L=Fairfax/O=OpenGroup/OU=OpenPegasus/CN=TestSelfSigned1 >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Add the deleted self-signed certificate to the truststore. This should succeed" >> $(RESULTFILE) @cimtrust -a -T s -U $(CURRENT_USER) -f $(PEGASUS_HOME)/testdn1.cert >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Delete the self-signed certificate from the truststore by subject & issuer. This should succeed" >> $(RESULTFILE) @cimtrust -r -i /C=US/ST=VIRGINIA/L=Fairfax/O=OpenGroup/OU=OpenPegasus/CN=TestSelfSigned1 -S /C=US/ST=VIRGINIA/L=Fairfax/O=OpenGroup/OU=OpenPegasus/CN=TestSelfSigned1 >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) +++++++++ Functional tests - List operation testing +++++++++ >> $(RESULTFILE) @$(ECHO) "Negative testcases." >> $(RESULTFILE) @$(ECHO) "Add the self-signed root certificate to the truststore." >> $(RESULTFILE) @cimtrust -a -Ta -U $(CURRENT_USER) -f $(PEGASUS_HOME)/testchca.cert >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Add the intermediate CA signed certificate to the truststore." >> $(RESULTFILE) @cimtrust -a -T a -U $(CURRENT_USER) -f $(PEGASUS_HOME)/testinter.cert >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "List certificates, specify non-existent serial number. No certs listed." >> $(RESULTFILE) @cimtrust -l -i "/C=US/ST=California/L=Sacramento/O=OpenGroup/OU=OpenPegasus/CN=TestChainCA" -n 1234 >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "List certificates, specify non-existent issuername. No certs listed." >> $(RESULTFILE) @cimtrust -l -i "/C=US/ST=Nevada/L=Sacramento/O=OpenGroup/OU=OpenPegasus/CN=TestChainCA" >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "List certificates, specify non-existent subject. No certs listed." >> $(RESULTFILE) @cimtrust -l -i "/C=US/ST=California/L=Sacramento/O=OpenGroup/OU=OpenPegasus/CN=TestChainCA" -S "/C=US/ST=California/L=Sacramento/O=OpenGroup/OU=OpenPegasus/CN=NoSuchCert" >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "List certificates, specify only the serial number. This should fail." >> $(RESULTFILE) @cimtrust -l -n 0 >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "List certificates, specify only the subject. This should fail." >> $(RESULTFILE) @cimtrust -l -S "/C=US/ST=California/L=Sacramento/O=OpenGroup/OU=OpenPegasus/CN=TestChainCA" >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "List certificates, specify the only serial number. Should fail since issuer not specified." >> $(RESULTFILE) @cimtrust -l -n 0 >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "List certificates, specify both serial number & subject, this should fail." >> $(RESULTFILE) @cimtrust -l -i "/C=US/ST=California/L=Sacramento/O=OpenGroup/OU=OpenPegasus/CN=TestChainCA" -n 0 -S "/C=US/ST=California/L=Sacramento/O=OpenGroup/OU=OpenPegasus/CN=TestChainCA" >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "List certificates, specify both subject & serial number, this should fail." >> $(RESULTFILE) @cimtrust -l -i "/C=US/ST=California/L=Sacramento/O=OpenGroup/OU=OpenPegasus/CN=TestChainCA" -S "/C=US/ST=California/L=Sacramento/O=OpenGroup/OU=OpenPegasus/CN=TestChainCA" -n 0 >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Positive testcases." >> $(RESULTFILE) @$(ECHO) "List certificates, specify the issuername." >> $(RESULTFILE) @cimtrust -l -i "/C=US/ST=California/L=Sacramento/O=OpenGroup/OU=OpenPegasus/CN=TestChainCA" >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "List certificates, specify the issuername & subject." >> $(RESULTFILE) @cimtrust -l -i "/C=US/ST=California/L=Sacramento/O=OpenGroup/OU=OpenPegasus/CN=TestChainCA" -S "/C=US/ST=California/L=Sacramento/O=OpenGroup/OU=OpenPegasus/CN=TestChainCA" >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "List certificates, specify the issuername & serial number." >> $(RESULTFILE) @cimtrust -l -i "/C=US/ST=California/L=Sacramento/O=OpenGroup/OU=OpenPegasus/CN=TestChainCA" -n 0 >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Remove the CA certificate from the truststore, this should succeed." >> $(RESULTFILE) @cimtrust -r -i /C=US/ST=California/L=Sacramento/O=OpenGroup/OU=OpenPegasus/CN=TestChainCA -n 0 >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Try to connect with the intermediate certificate issued by the CA, this should fail." >> $(RESULTFILE) @TestCertClient $(PEGASUS_HOME)/testinter.cert $(PEGASUS_HOME)/testinter.key $(PEGASUS_HOME)/ssl.rnd >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Try to connect with the leaf certificate issued by the CA, this should fail." >> $(RESULTFILE) @TestCertClient $(PEGASUS_HOME)/testleaf.cert $(PEGASUS_HOME)/testleaf.key $(PEGASUS_HOME)/ssl.rnd >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Remove the intermediate CA certificate from the truststore, this should succeed." >> $(RESULTFILE) @cimtrust -r -i /C=US/ST=California/L=Sacramento/O=OpenGroup/OU=OpenPegasus/CN=TestChainCA -n 2 >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) +++++++++ Functional tests - Certificate chain tests +++++++++ >> $(RESULTFILE) @$(ECHO) +++++++++ Single-level chain tests +++++++++ >> $(RESULTFILE) @$(ECHO) "Add the CA certificate to the truststore." >> $(RESULTFILE) @cimtrust -a -T a -U $(CURRENT_USER) -f $(PEGASUS_HOME)/testca1.cert >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Try to connect with the 1st certificate issued by the CA, this should succeed." >> $(RESULTFILE) @TestCertClient $(PEGASUS_HOME)/testdn2.cert $(PEGASUS_HOME)/testdn2.key $(PEGASUS_HOME)/ssl.rnd >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Try to connect with the 2nd certificate issued by the CA, this should succeed." >> $(RESULTFILE) @TestCertClient $(PEGASUS_HOME)/testdn3.cert $(PEGASUS_HOME)/testdn3.key $(PEGASUS_HOME)/ssl.rnd >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Try to connect with the 3rd certificate issued by the CA, this should succeed." >> $(RESULTFILE) @TestCertClient $(PEGASUS_HOME)/testdn4.cert $(PEGASUS_HOME)/testdn4.key $(PEGASUS_HOME)/ssl.rnd >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Try to connect with the 1st certificate issued by CA1, this should succeed." >> $(RESULTFILE) @TestCertClient $(PEGASUS_HOME)/testdn2.cert $(PEGASUS_HOME)/testdn2.key $(PEGASUS_HOME)/ssl.rnd >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Add the second CA certificate to the truststore." >> $(RESULTFILE) @cimtrust -a -T a -U $(CURRENT_USER) -f $(PEGASUS_HOME)/testca2.cert >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Add the self-signed certificate to the truststore." >> $(RESULTFILE) @cimtrust -a -Ts -U $(CURRENT_USER) -f $(PEGASUS_HOME)/testdn1.cert >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Try to connect with testdn1, this should succeed." >> $(RESULTFILE) @TestCertClient $(PEGASUS_HOME)/testdn1.cert $(PEGASUS_HOME)/testdn1.key $(PEGASUS_HOME)/ssl.rnd >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Try to connect with testdup (same subject as testdn1) issued by CA2, this should succeed." >> $(RESULTFILE) @TestCertClient $(PEGASUS_HOME)/testdup.cert $(PEGASUS_HOME)/testdup.key $(PEGASUS_HOME)/ssl.rnd >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Remove the CA1 certificate from the truststore, this should succeed." >> $(RESULTFILE) @cimtrust -r -i /C=US/ST=WASHINGTON/L=Seattle/O=OpenGroup/OU=OpenPegasus/CN=TestCA -n 0 >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Try to connect with the 1st certificate issued by the CA, this should fail." >> $(RESULTFILE) @TestCertClient $(PEGASUS_HOME)/testdn2.cert $(PEGASUS_HOME)/testdn2.key $(PEGASUS_HOME)/ssl.rnd >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Try to connect with the 2nd certificate issued by the CA, this should fail." >> $(RESULTFILE) @TestCertClient $(PEGASUS_HOME)/testdn3.cert $(PEGASUS_HOME)/testdn3.key $(PEGASUS_HOME)/ssl.rnd >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Try to connect with the 3rd certificate issued by the CA, this should fail." >> $(RESULTFILE) @TestCertClient $(PEGASUS_HOME)/testdn4.cert $(PEGASUS_HOME)/testdn4.key $(PEGASUS_HOME)/ssl.rnd >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Remove the CA2 certificate from the truststore, this should succeed." >> $(RESULTFILE) @cimtrust -r -i /C=US/ST=OREGON/L=Portland/O=OpenGroup/OU=OpenPegasus/CN=TestCA -n 0 >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Add the testdup certificate to the truststore, this should fail with duplicate subject error." >> $(RESULTFILE) @cimtrust -a -Ta -U $(CURRENT_USER) -f $(PEGASUS_HOME)/testdup.cert >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Delete the self-signed certificate from the truststore by subject & issuer. This should succeed" >> $(RESULTFILE) @cimtrust -r -i /C=US/ST=VIRGINIA/L=Fairfax/O=OpenGroup/OU=OpenPegasus/CN=TestSelfSigned1 -S /C=US/ST=VIRGINIA/L=Fairfax/O=OpenGroup/OU=OpenPegasus/CN=TestSelfSigned1 >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) +++++++++ Functional tests - multi-level chain tests +++++++++ >> $(RESULTFILE) @$(ECHO) "Add the root CA certificate to the truststore without an associated username." >> $(RESULTFILE) @cimtrust -a -T a -f $(PEGASUS_HOME)/testchca.cert >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Try to connect, this should fail since the root CA does not have an associated username." >> $(RESULTFILE) @TestCertClient $(PEGASUS_HOME)/testinter.cert $(PEGASUS_HOME)/testinter.key $(PEGASUS_HOME)/ssl.rnd >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Add the intermediate CA signed certificate to the truststore without an associated username." >> $(RESULTFILE) @cimtrust -a -T a -f $(PEGASUS_HOME)/testinter.cert >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Try to connect, this should fail since the root CA does not have an associated username." >> $(RESULTFILE) @TestCertClient $(PEGASUS_HOME)/testinter.cert $(PEGASUS_HOME)/testinter.key $(PEGASUS_HOME)/ssl.rnd >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Add the leaf CA signed certificate to the truststore with an associated username." >> $(RESULTFILE) @cimtrust -a -Te -U $(CURRENT_USER) -f $(PEGASUS_HOME)/testleaf.cert >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "List the leaf certificate, specify the issuername." >> $(RESULTFILE) @cimtrust -l -i "/C=US/ST=Nevada/L=LasVegas/O=OpenGroup/OU=OpenPegasus/CN=TestInterCA" -n 2 >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Try to connect, this should succeed since the leaf has an associated username." >> $(RESULTFILE) @TestCertClient $(PEGASUS_HOME)/testleaf.cert $(PEGASUS_HOME)/testleaf.key $(PEGASUS_HOME)/ssl.rnd >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Remove the CA certificate from the truststore, this should succeed." >> $(RESULTFILE) @cimtrust -r -i /C=US/ST=California/L=Sacramento/O=OpenGroup/OU=OpenPegasus/CN=TestChainCA -n 0 >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Remove the intermediate CA certificate from the truststore, this should succeed." >> $(RESULTFILE) @cimtrust -r -i /C=US/ST=California/L=Sacramento/O=OpenGroup/OU=OpenPegasus/CN=TestChainCA -n 2 >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Remove the leaf CA signed certificate from the truststore, this should succeed." >> $(RESULTFILE) @cimtrust -r -i /C=US/ST=Nevada/L=LasVegas/O=OpenGroup/OU=OpenPegasus/CN=TestInterCA -n 2 >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Add the self-signed root certificate with an associated user to the truststore." >> $(RESULTFILE) @cimtrust -a -T a -U $(CURRENT_USER) -f $(PEGASUS_HOME)/testchca.cert >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Try to connect with root cert, this should succeed." >> $(RESULTFILE) @TestCertClient $(PEGASUS_HOME)/testchca.cert $(PEGASUS_HOME)/testchca.key $(PEGASUS_HOME)/ssl.rnd >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Try to connect with intermediate cert, this should succeed." >> $(RESULTFILE) @TestCertClient $(PEGASUS_HOME)/testinter.cert $(PEGASUS_HOME)/testinter.key $(PEGASUS_HOME)/ssl.rnd >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Add the intermediate CA signed certificate to the truststore." >> $(RESULTFILE) @cimtrust -a -T a -U $(CURRENT_USER) -f $(PEGASUS_HOME)/testinter.cert >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Try to connect with root cert, this should succeed." >> $(RESULTFILE) @TestCertClient $(PEGASUS_HOME)/testchca.cert $(PEGASUS_HOME)/testchca.key $(PEGASUS_HOME)/ssl.rnd >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Try to connect with intermediate cert, this should succeed." >> $(RESULTFILE) @TestCertClient $(PEGASUS_HOME)/testinter.cert $(PEGASUS_HOME)/testinter.key $(PEGASUS_HOME)/ssl.rnd >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Try to connect, this should succeed since the intermediate cert has associated username." >> $(RESULTFILE) @TestCertClient $(PEGASUS_HOME)/testleaf.cert $(PEGASUS_HOME)/testleaf.key $(PEGASUS_HOME)/ssl.rnd >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Remove the CA certificate from the truststore, this should succeed." >> $(RESULTFILE) @cimtrust -r -i /C=US/ST=California/L=Sacramento/O=OpenGroup/OU=OpenPegasus/CN=TestChainCA -n 0 >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Remove the intermediate CA certificate from the truststore, this should succeed." >> $(RESULTFILE) @cimtrust -r -i /C=US/ST=California/L=Sacramento/O=OpenGroup/OU=OpenPegasus/CN=TestChainCA -n 2 >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) +++++++++ Funtional tests - Tests for special cases +++++++++ >> $(RESULTFILE) @$(ECHO) "Invalid X509 certificate." >> $(RESULTFILE) @cimtrust -a -T s -U $(CURRENT_USER) -f $(PEGASUS_HOME)/testinvalid_x509.cert >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Connect with an expired certificate -- should fail." >> $(RESULTFILE) @TestCertClient $(PEGASUS_HOME)/testexpired1.cert $(PEGASUS_HOME)/testexpired1.key $(PEGASUS_HOME)/ssl.rnd >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Add the expired certificate to the truststore -- should get an expiration error." >> $(RESULTFILE) @cimtrust -a -T s -U $(CURRENT_USER) -f $(PEGASUS_HOME)/testexpired1.cert >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Connect with a not yet valid certificate -- should fail." >> $(RESULTFILE) @TestCertClient $(PEGASUS_HOME)/testnotyetvalid1.cert $(PEGASUS_HOME)/testnotyetvalid1.key $(PEGASUS_HOME)/ssl.rnd >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Add the not yet valid certificate to the truststore -- should get a not yet valid error." >> $(RESULTFILE) @cimtrust -a -T s -U $(CURRENT_USER) -f $(PEGASUS_HOME)/testnotyetvalid1.cert >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Connect with an untrusted certificate -- should fail." >> $(RESULTFILE) @TestCertClient $(PEGASUS_HOME)/testdn1.cert $(PEGASUS_HOME)/testdn1.key $(PEGASUS_HOME)/ssl.rnd >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) @$(ECHO) "Non-existent certificate file -- should fail." >> $(RESULTFILE) @cimtrust -a -U $(CURRENT_USER) -T a -f ./nosuchfile.cert >> $(RESULTFILE) $(REDIRECTERROR) @$(ECHO) >> $(RESULTFILE) ifndef PEGASUS_PAM_AUTHENTICATION ifneq ($(OS), zos) cimuser -r -u $(CURRENT_USER) endifendif @$(ECHO) ++++cimtrust tests completedendifdepend:general:strip-license:prepend-license:
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -