From 5a2484de86694e0e97afb6893ae86c9aab381033 Mon Sep 17 00:00:00 2001 From: Karel Srot Date: Fri, 3 Jun 2022 15:26:28 +0200 Subject: [PATCH] Add pkcsstats-basic-functionality --- Sanity/pkcsstats-basic-functionality/main.fmf | 30 +++++ .../pkcsstats-basic-functionality/runtest.sh | 126 ++++++++++++++++++ 2 files changed, 156 insertions(+) create mode 100644 Sanity/pkcsstats-basic-functionality/main.fmf create mode 100755 Sanity/pkcsstats-basic-functionality/runtest.sh diff --git a/Sanity/pkcsstats-basic-functionality/main.fmf b/Sanity/pkcsstats-basic-functionality/main.fmf new file mode 100644 index 0000000..e4f0445 --- /dev/null +++ b/Sanity/pkcsstats-basic-functionality/main.fmf @@ -0,0 +1,30 @@ +summary: Tests basic functionality of the pkcsstats command +description: | + Bug summary: openCryptoki: add crypto counters + Bugzilla link: https://bugzilla.redhat.com/show_bug.cgi?id=2043854 + Bugzilla link: https://bugzilla.redhat.com/show_bug.cgi?id=2044180 +contact: Karel Srot +component: +- opencryptoki +test: ./runtest.sh +framework: beakerlib +require: +- url: https://src.fedoraproject.org/tests/opencryptoki.git + name: /Library/token-manipulation +recommend: +- opencryptoki +- opencryptoki-swtok +- expect +duration: 5m +enabled: true +tag: +- CI-Tier-1 +- Tier1 +tier: '1' +link: +- relates: https://bugzilla.redhat.com/show_bug.cgi?id=2043854 +- relates: https://bugzilla.redhat.com/show_bug.cgi?id=2044180 +adjust: +- enabled: false + when: distro == rhel-4, rhel-5, rhel-6, rhel-7 + continue: false diff --git a/Sanity/pkcsstats-basic-functionality/runtest.sh b/Sanity/pkcsstats-basic-functionality/runtest.sh new file mode 100755 index 0000000..5c88f21 --- /dev/null +++ b/Sanity/pkcsstats-basic-functionality/runtest.sh @@ -0,0 +1,126 @@ +#!/bin/bash +# vim: dict+=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k +# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +# +# Author: Karel Srot +# +# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +# +# Copyright (c) 2022 Red Hat, Inc. +# +# This copyrighted material is made available to anyone wishing +# to use, modify, copy, or redistribute it subject to the terms +# and conditions of the GNU General Public License version 2. +# +# This program is distributed in the hope that it will be +# useful, but WITHOUT ANY WARRANTY; without even the implied +# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR +# PURPOSE. See the GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public +# License along with this program; if not, write to the Free +# Software Foundation, Inc., 51 Franklin Street, Fifth Floor, +# Boston, MA 02110-1301, USA. +# +# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +# Include Beaker environment +. /usr/share/beakerlib/beakerlib.sh || exit 1 + +PACKAGE="opencryptoki" +[ -n "$SLOT" ] || SLOT=sw +USER="user$RANDOM" + +rlJournalStart + rlPhaseStartSetup + rlAssertRpm $PACKAGE + rlRun "rlImport opencryptoki/token-manipulation" || rlDie "Could not import opencryptoki/token-manipulation library" + rlRun "TmpDir=\$(mktemp -d)" 0 "Creating tmp directory" + rlRun "pushd $TmpDir" + rlRun "useradd -m $USER -G pkcs11" + rlRun -s "su $USER -c 'id'" + rlFileBackup /etc/opencryptoki/opencryptoki.conf + rlServiceStop pkcsslotd + rlRun "pkcsResetTokens" + rlServiceStart pkcsslotd + sleep 1 + rlRun "pkcsconf -t | grep 'Soft'" + SLOT=$( pkcsGetTokenSlot $SLOT ) + rlRun "pkcsInitToken $SLOT" + rlRun "pkcsconf -t" + rlRun "pkcsstats -R" + rlPhaseEnd + + rlPhaseStartTest "Generate aes key as root and verify stats" + rlRun -s "pkcsstats -s $SLOT -U root" + rlAssertGrep "[no mechanisms were used]" $rlRun_LOG + rlRun "p11sak generate-key aes 128 --slot $SLOT --pin $pkcsUSER_PIN --label aes_key --attr ED" + rlRun -s "p11sak list-key aes --slot $SLOT --pin $pkcsUSER_PIN" + rlAssertGrep "AES 128 | aes_key" $rlRun_LOG + rlRun -s "p11sak gen-key ec prime256v1 --slot $SLOT --pin $pkcsUSER_PIN --label ec_key" + rlRun -s "p11sak ls secret --long --slot $SLOT --pin $pkcsUSER_PIN" + rlRun -s "pkcsstats -s $SLOT -U root" + rlAssertGrep "CKM_AES_KEY_GEN *\| *0 *0 *1 *0 *0" $rlRun_LOG -E + rlAssertGrep "CKM_EC_KEY_PAIR_GEN *\| *0 *0 *1 *0 *0" $rlRun_LOG -E + rlPhaseEnd + + rlPhaseStartTest "Generate aes key as $USER and verify stats" + rlRun -s "pkcsstats -s $SLOT -U $USER" 0,1 + rlAssertGrep "(no mechanisms were used|No statistics are available for user '$USER')" $rlRun_LOG -E + rlRun "su - $USER -c 'p11sak generate-key aes 128 --slot $SLOT --pin $pkcsUSER_PIN --label aes_key --attr ED'" + rlRun -s "p11sak list-key aes --slot $SLOT --pin $pkcsUSER_PIN" + rlAssertGrep "AES 128 | aes_key" $rlRun_LOG + rlRun -s "pkcsstats -s $SLOT -U $USER" + rlAssertGrep "CKM_AES_KEY_GEN *\| *0 *0 *1 *0 *0" $rlRun_LOG -E + rlPhaseEnd + + rlPhaseStartTest "Print acummulated stats for all users" + rlRun -s "pkcsstats -s $SLOT -S" + rlAssertGrep "CKM_AES_KEY_GEN *\| *0 *0 *2 *0 *0" $rlRun_LOG -E + rlPhaseEnd + + rlPhaseStartTest "Print --all-mechs stats for $USER" + rlRun -s "pkcsstats -s $SLOT --all-mechs -U $USER" + rlAssertGrep "CKM_AES_KEY_GEN *\| *0 *0 *1 *0 *0" $rlRun_LOG -E + rlAssertGrep "CKM_EC_KEY_PAIR_GEN *\| *0 *0 *0 *0 *0" $rlRun_LOG -E + rlPhaseEnd + + rlPhaseStartTest "Reset stats for $USER" + rlRun -s "pkcsstats -r -U $USER" + rlRun -s "pkcsstats -s $SLOT -U $USER" + rlAssertGrep "no mechanisms were used" $rlRun_LOG + rlRun -s "pkcsstats -s $SLOT -U $USER -a" + rlAssertGrep "CKM_AES_KEY_GEN *\| *0 *0 *0 *0 *0" $rlRun_LOG -E + rlPhaseEnd + + rlPhaseStartTest "Delete stats for $USER" + rlRun -s "pkcsstats -d -U $USER" + rlRun -s "pkcsstats -s $SLOT -U $USER -a" 1 + rlAssertGrep "No statistics are available for user '$USER'" $rlRun_LOG -E + rlPhaseEnd + + rlPhaseStartTest "Print user stats in JSON" + rlRun -s "pkcsstats -s $SLOT -j" + rlAssertGrep '"user": "root",' $rlRun_LOG + rlAssertGrep '"mechanism": "CKM_AES_KEY_GEN",' $rlRun_LOG + rlAssertGrep '"strength-128": 1,' $rlRun_LOG + rlPhaseEnd + + rlPhaseStartTest "Print help" + rlRun -s "pkcsstats -h" + rlAssertGrep "Usage: pkcsstats \[OPTIONS\]" $rlRun_LOG + rlPhaseEnd + + rlPhaseStartCleanup + rlServiceStop pkcsslotd + rlRun "pkcsRestoreTokens" + rlFileRestore + rlServiceRestore pkcsslotd + rlRun "popd" + rlRun "rm -r $TmpDir" 0 "Removing tmp directory" + rlLog "Waiting 12 for systemd --user process to exit..." + sleep 15 + rlRun "userdel -r $USER" || ps -ef + rlPhaseEnd +rlJournalPrintText +rlJournalEnd