1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
|
#!/usr/bin/env python
# **********************************************************************
#
# Copyright (c) 2003-2009 ZeroC, Inc. All rights reserved.
#
# This copy of Ice is licensed to you under the terms described in the
# ICE_LICENSE file included in this distribution.
#
# **********************************************************************
import os, sys, shutil
for toplevel in [".", "..", "../..", "../../..", "../../../..", "../../../../.."]:
toplevel = os.path.normpath(toplevel)
if os.path.exists(os.path.join(toplevel, "scripts", "TestUtil.py")):
break
else:
raise "can't find toplevel directory!"
sys.path.append(os.path.join(toplevel, "config"))
from scripts import *
#
# Show usage information.
#
def usage():
print "Usage: " + sys.argv[0] + " [options]"
print
print "Options:"
print "-h Show this message."
print "-f Force an update to the Java files."
#
# Check arguments
#
force = 0
for x in sys.argv[1:]:
if x == "-h":
usage()
sys.exit(0)
elif x == "-f":
force = 1
elif x.startswith("-"):
print sys.argv[0] + ": unknown option `" + x + "'"
print
usage()
sys.exit(1)
else:
usage()
sys.exit(1)
cppcerts = os.path.join(TestUtil.getIceDir("cpp"), "test", "IceSSL", "certs")
certs = [\
"c_dsa_nopass_ca1", \
"c_rsa_nopass_ca1_exp", \
"c_rsa_nopass_ca1", \
"c_rsa_nopass_ca2", \
"s_dsa_nopass_ca1", \
"s_rsa_nopass_ca1_exp", \
"s_rsa_nopass_ca1", \
"s_rsa_nopass_ca2", \
]
#
# Create truststores from the CA certificates.
#
for x in ("cacert1", "cacert2"):
ts = x + ".jks"
os.system("openssl x509 -in " + os.path.join(cppcerts, x) + ".pem -outform DER -out " + x + ".der")
if force or not os.path.exists(ts):
if os.path.exists(ts):
os.remove(ts)
os.system("keytool -import -alias cacert -file " + x + ".der -keystore " + ts + \
" -storepass password -noprompt")
print "Created " + ts
#
# Create a truststore containing both CA certificates.
#
if force or not os.path.exists("cacerts.jks"):
if os.path.exists("cacerts.jks"):
os.remove("cacerts.jks")
os.system("keytool -import -alias cacert1 -file cacert1.der -keystore cacerts.jks -storepass password -noprompt")
os.system("keytool -import -alias cacert2 -file cacert2.der -keystore cacerts.jks -storepass password -noprompt")
print "Created cacerts.jks"
#
# Convert key/certificate pairs into PKCS12 format and then import them
# into keystores.
#
for x in certs:
p12 = x.replace("nopass_", "") + ".p12"
ks = x.replace("nopass_", "") + ".jks"
if x.find("1") > 0:
cacert = "cacert1"
else:
cacert = "cacert2"
if force or not os.path.exists(ks):
if os.path.exists(ks):
os.remove(ks)
cert = os.path.join(cppcerts, x)
ca = os.path.join(cppcerts, cacert) + ".pem"
os.system("openssl pkcs12 -in " + cert + "_pub.pem -inkey " + cert + "_priv.pem -export -out " + p12 + \
" -name cert -passout pass:password -certfile " + ca)
os.system("java -classpath ../../../certs ImportKey " + p12 + " cert " + cacert + ".der " + ks + " password")
os.remove(p12)
print "Created " + ks
#
# Create a keystore that contains both RSA and DSS certificates.
#
ks = "s_rsa_dsa_ca1.jks"
if force or not os.path.exists(ks):
if os.path.exists(ks):
os.remove(ks)
cacert = "cacert1"
ca = os.path.join(cppcerts, cacert) + ".pem"
p12 = "s_dsa_nopass_ca1.p12"
cert = os.path.join(cppcerts, "s_dsa_nopass_ca1")
os.system("openssl pkcs12 -in " + cert + "_pub.pem -inkey " + cert + "_priv.pem -export -out " + p12 + \
" -name dsacert -passout pass:password -certfile " + ca)
os.system("java -classpath ../../../certs ImportKey " + p12 + " dsacert " + cacert + ".der " + ks + " password")
os.remove(p12)
p12 = "s_rsa_nopass_ca1.p12"
cert = os.path.join(cppcerts, "s_rsa_nopass_ca1")
os.system("openssl pkcs12 -in " + cert + "_pub.pem -inkey " + cert + "_priv.pem -export -out " + p12 + \
" -name rsacert -passout pass:password -certfile " + ca)
os.system("java -classpath ../../../certs ImportKey " + p12 + " rsacert " + cacert + ".der " + ks + " password")
os.remove(p12)
print "Created " + ks
#
# Clean up.
#
for x in ("cacert1", "cacert2"):
cert = x + ".der"
if os.path.exists(cert):
os.remove(cert)
#
# Done.
#
print "Done."
|
