1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
|
#! /usr/bin/perl
# This tests permutations in the proxy file format order, as well as support
# for PKCS8-encoded private keys in proxies
use strict;
use Test::More;
use IO::Handle;
use File::Temp;
my $valgrind="";
my @cleanups;
if (exists $ENV{VALGRIND})
{
$valgrind = "valgrind --log-file=VALGRIND-proxy-order-test-\%p.log";
if (exists $ENV{VALGRIND_OPTIONS})
{
$valgrind .= ' ' . $ENV{VALGRIND_OPTIONS};
}
}
sub create_proxy_elements
{
my $old_umask = umask(077);
my ($proxy_file) = mktemp( "proxytest.XXXXXXXX" );
umask($old_umask);
$ENV{X509_USER_PROXY} = $proxy_file;
system("$valgrind grid-proxy-init > /dev/null");
my $proxy_fh;
open($proxy_fh, "+<$proxy_file");
my $data = '';
my %elements = {};
while (<$proxy_fh>)
{
s/\s*$//;
if (/-----BEGIN CERTIFICATE-----/)
{
$data = "$_\n";
}
elsif (/-----END CERTIFICATE-----/)
{
$data .= "$_\n";
if (!exists($elements{proxy_cert}))
{
$elements{proxy_cert} = $data;
}
else
{
if (!exists($elements{id_cert}))
{
$elements{id_cert} = '';
}
$elements{id_cert} .= $data;
}
$data = '';
}
elsif (/-----BEGIN RSA PRIVATE KEY-----/)
{
$data = "$_\n";
}
elsif (/-----END RSA PRIVATE KEY-----/)
{
$data .= "$_\n";
$elements{proxy_key} = $data;
$data = '';
$elements{'proxy_key.pkcs8'} = `openssl pkcs8 -in "$proxy_file" -outform PEM -topk8 -nocrypt`;
}
else
{
$data .= "$_\n";
}
}
return %elements;
}
sub test_proxy_order($%)
{
my $order = shift;
my %elements = @_;
my $proxy_fh;
my $old_umask = umask(077);
my ($proxy_file) = mktemp( "proxytest.XXXXXXXX" );
umask($old_umask);
open($proxy_fh, ">$proxy_file");
for my $element (split(/:/, $order))
{
print $proxy_fh $elements{$element};
close($proxy_fh);
}
ok(system("$valgrind grid-proxy-info >/dev/null 2>&1") == 0, "proxy order $order");
}
my @permutations = qw(
proxy_cert:proxy_key:id_cert
proxy_cert:id_cert:proxy_key
proxy_key:proxy_cert:id_cert
proxy_key:id_cert:proxy_cert
id_cert:proxy_cert:proxy_key
id_cert:proxy_key:proxy_cert);
my @tests = @permutations;
push(@tests, map { $_ =~ s/proxy_key/proxy_key.pkcs8/; $_ } @permutations);
plan tests => scalar(@tests);
my %elements = create_proxy_elements();
foreach (@tests)
{
eval test_proxy_order($_, %elements);
}
|
