126 lines
5 KiB
Bash
Executable file
126 lines
5 KiB
Bash
Executable file
#!/bin/bash
|
|
# vim: dict+=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k
|
|
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
#
|
|
# Author: Karel Srot <ksrot@redhat.com>
|
|
#
|
|
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
#
|
|
# Copyright (c) 2022 Red Hat, Inc.
|
|
#
|
|
# This copyrighted material is made available to anyone wishing
|
|
# to use, modify, copy, or redistribute it subject to the terms
|
|
# and conditions of the GNU General Public License version 2.
|
|
#
|
|
# This program is distributed in the hope that it will be
|
|
# useful, but WITHOUT ANY WARRANTY; without even the implied
|
|
# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
|
|
# PURPOSE. See the GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public
|
|
# License along with this program; if not, write to the Free
|
|
# Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
|
|
# Boston, MA 02110-1301, USA.
|
|
#
|
|
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
# Include Beaker environment
|
|
. /usr/share/beakerlib/beakerlib.sh || exit 1
|
|
|
|
PACKAGE="opencryptoki"
|
|
[ -n "$SLOT" ] || SLOT=sw
|
|
USER="user$RANDOM"
|
|
|
|
rlJournalStart
|
|
rlPhaseStartSetup
|
|
rlAssertRpm $PACKAGE
|
|
rlRun "rlImport opencryptoki/token-manipulation" || rlDie "Could not import opencryptoki/token-manipulation library"
|
|
rlRun "TmpDir=\$(mktemp -d)" 0 "Creating tmp directory"
|
|
rlRun "pushd $TmpDir"
|
|
rlRun "useradd -m $USER -G pkcs11"
|
|
rlRun -s "su $USER -c 'id'"
|
|
rlFileBackup /etc/opencryptoki/opencryptoki.conf
|
|
rlServiceStop pkcsslotd
|
|
rlRun "pkcsResetTokens"
|
|
rlServiceStart pkcsslotd
|
|
sleep 1
|
|
rlRun "pkcsconf -t | grep 'Soft'"
|
|
SLOT=$( pkcsGetTokenSlot $SLOT )
|
|
rlRun "pkcsInitToken $SLOT"
|
|
rlRun "pkcsconf -t"
|
|
rlRun "pkcsstats -R"
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "Generate aes key as root and verify stats"
|
|
rlRun -s "pkcsstats -s $SLOT -U root"
|
|
rlAssertGrep "[no mechanisms were used]" $rlRun_LOG
|
|
rlRun "p11sak generate-key aes 128 --slot $SLOT --pin $pkcsUSER_PIN --label aes_key --attr ED"
|
|
rlRun -s "p11sak list-key aes --slot $SLOT --pin $pkcsUSER_PIN"
|
|
rlAssertGrep "AES 128 | aes_key" $rlRun_LOG
|
|
rlRun -s "p11sak gen-key ec prime256v1 --slot $SLOT --pin $pkcsUSER_PIN --label ec_key"
|
|
rlRun -s "p11sak ls secret --long --slot $SLOT --pin $pkcsUSER_PIN"
|
|
rlRun -s "pkcsstats -s $SLOT -U root"
|
|
rlAssertGrep "CKM_AES_KEY_GEN *\| *0 *0 *1 *0 *0" $rlRun_LOG -E
|
|
rlAssertGrep "CKM_EC_KEY_PAIR_GEN *\| *0 *0 *1 *0 *0" $rlRun_LOG -E
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "Generate aes key as $USER and verify stats"
|
|
rlRun -s "pkcsstats -s $SLOT -U $USER" 0,1
|
|
rlAssertGrep "(no mechanisms were used|No statistics are available for user '$USER')" $rlRun_LOG -E
|
|
rlRun "su - $USER -c 'sleep 3 && p11sak generate-key aes 128 --slot $SLOT --pin $pkcsUSER_PIN --label aes_key --attr ED'"
|
|
rlRun -s "p11sak list-key aes --slot $SLOT --pin $pkcsUSER_PIN"
|
|
rlAssertGrep "AES 128 | aes_key" $rlRun_LOG
|
|
rlRun -s "pkcsstats -s $SLOT -U $USER"
|
|
rlAssertGrep "CKM_AES_KEY_GEN *\| *0 *0 *1 *0 *0" $rlRun_LOG -E
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "Print acummulated stats for all users"
|
|
rlRun -s "pkcsstats -s $SLOT -S"
|
|
rlAssertGrep "CKM_AES_KEY_GEN *\| *0 *0 *2 *0 *0" $rlRun_LOG -E
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "Print --all-mechs stats for $USER"
|
|
rlRun -s "pkcsstats -s $SLOT --all-mechs -U $USER"
|
|
rlAssertGrep "CKM_AES_KEY_GEN *\| *0 *0 *1 *0 *0" $rlRun_LOG -E
|
|
rlAssertGrep "CKM_EC_KEY_PAIR_GEN *\| *0 *0 *0 *0 *0" $rlRun_LOG -E
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "Reset stats for $USER"
|
|
rlRun -s "pkcsstats -r -U $USER"
|
|
rlRun -s "pkcsstats -s $SLOT -U $USER"
|
|
rlAssertGrep "no mechanisms were used" $rlRun_LOG
|
|
rlRun -s "pkcsstats -s $SLOT -U $USER -a"
|
|
rlAssertGrep "CKM_AES_KEY_GEN *\| *0 *0 *0 *0 *0" $rlRun_LOG -E
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "Delete stats for $USER"
|
|
rlRun -s "pkcsstats -d -U $USER"
|
|
rlRun -s "pkcsstats -s $SLOT -U $USER -a" 1
|
|
rlAssertGrep "No statistics are available for user '$USER'" $rlRun_LOG -E
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "Print user stats in JSON"
|
|
rlRun -s "pkcsstats -s $SLOT -j"
|
|
rlAssertGrep '"user": "root",' $rlRun_LOG
|
|
rlAssertGrep '"mechanism": "CKM_AES_KEY_GEN",' $rlRun_LOG
|
|
rlAssertGrep '"strength-128": 1,' $rlRun_LOG
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "Print help"
|
|
rlRun -s "pkcsstats -h"
|
|
rlAssertGrep "Usage: pkcsstats \[OPTIONS\]" $rlRun_LOG
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartCleanup
|
|
rlServiceStop pkcsslotd
|
|
rlRun "pkcsRestoreTokens"
|
|
rlFileRestore
|
|
rlServiceRestore pkcsslotd
|
|
rlRun "popd"
|
|
rlRun "rm -r $TmpDir" 0 "Removing tmp directory"
|
|
rlLog "Waiting 12 for systemd --user process to exit..."
|
|
sleep 15
|
|
rlRun "userdel -r $USER" || ps -ef
|
|
rlPhaseEnd
|
|
rlJournalPrintText
|
|
rlJournalEnd
|