1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
|
#!/bin/bash -e
# Copyright (C) 2024 Ondrej Moris <omoris@redhat.com>
# SPDX-License-Identifier: Apache-2.0
# shellcheck disable=SC1091
source "../helpers.sh"
BASEDIR=$PWD
WORKDIR=$(mktemp -d)
PKCS11_DEBUG_FILE="${WORKDIR}/pkcs11-libssh-test.log"
install_dependencies()
{
title PARA "Install dependencies"
dnf install -y --skip-broken cmake libcmocka libcmocka-devel softhsm \
nss-tools gnutls-utils p11-kit p11-kit-devel opensc \
softhsm-devel socket_wrapper nss_wrapper uid_wrapper pam_wrapper \
priv_wrapper openssh-server zlib-devel git meson \
openssl-devel gcc g++ libcmocka-devel
}
pkcs11_provider_setup()
{
title PARA "Get, compile and install pkcs11-provider"
if [ "$GITHUB_ACTIONS" == "true" ]; then
echo "Skipped (running in Github Actions)"
if [ -z "$PKCS11_MODULE" ]; then
echo "ERROR: Missing PKCS11_MODULE variable!"
exit 1
fi
else
git clone \
"${GIT_URL:-"https://github.com/latchset/pkcs11-provider.git"}" \
"${WORKDIR}"/pkcs11-provider
pushd "$WORKDIR"/pkcs11-provider
git checkout "${GIT_REF:-"main"}"
meson setup -Dlibdir=/usr/lib64 builddir
meson compile -C builddir
meson install -C builddir
popd
export PKCS11_MODULE=/usr/lib64/ossl-modules/pkcs11.so
fi
test -e "$PKCS11_MODULE"
}
libssh_setup()
{
title PARA "Clone, setup and build libssh"
git clone https://gitlab.com/libssh/libssh-mirror.git \
"${WORKDIR}"/libssh-mirror
mkdir "${WORKDIR}"/libssh-mirror/build
pushd "${WORKDIR}"/libssh-mirror/build
cmake \
-DUNIT_TESTING=ON \
-DCLIENT_TESTING=ON \
-DCMAKE_BUILD_TYPE=Debug \
-DWITH_PKCS11_URI=ON \
-DWITH_PKCS11_PROVIDER=ON \
-DPKCS11_PROVIDER="${PKCS11_MODULE}" ..
make -j "$(nproc)"
popd
}
libssh_test()
{
title PARA "Run libssh pkcs11 tests"
pushd "${WORKDIR}"/libssh-mirror/build
PKCS11_PROVIDER_DEBUG=file:$PKCS11_DEBUG_FILE ctest --output-on-failure \
-R '(pkcs11|uri)' | tee testout.log 2>&1
grep -q "100% tests passed, 0 tests failed out of 4" testout.log
test -s "$PKCS11_DEBUG_FILE"
echo "Test passed"
popd
}
# shellcheck disable=SC2317
cleanup()
{
title PARA "Clean-up"
title SECTION "$PKCS11_DEBUG_FILE"
cat "$PKCS11_DEBUG_FILE"
title ENDSECTION
pushd "$BASEDIR" >/dev/null
rm -rf "$WORKDIR"
title LINE "Done"
}
trap "cleanup" EXIT
# Setup.
install_dependencies
pkcs11_provider_setup
libssh_setup
# Test.
libssh_test
|
