diff options
Diffstat (limited to 'tcl_tests/pkcs12.try')
| -rw-r--r-- | tcl_tests/pkcs12.try | 55 |
1 files changed, 55 insertions, 0 deletions
diff --git a/tcl_tests/pkcs12.try b/tcl_tests/pkcs12.try new file mode 100644 index 0000000..52e23d6 --- /dev/null +++ b/tcl_tests/pkcs12.try @@ -0,0 +1,55 @@ +#!/usr/bin/tclsh +# -*- coding: cp1251 -*- +lappend auto_path [file dirname [info script]] +package require ossltest +cd $::test::dir + +start_tests "Тесты на команду pkcs12" + +if {[info exists env(ALG_LIST)]} { + set alg_list $env(ALG_LIST) +} else { + switch -exact [engine_name] { + "ccore" {set alg_list {gost2001:A gost2001:B gost2001:C gost2001:XA gost2001:XB gost2012_256:A gost2012_256:B gost2012_256:C gost2012_256:XA gost2012_256:XB gost2012_512:A gost2012_512:B}} + "open" {set alg_list {gost2001:A gost2001:B gost2001:C gost2012_256:A gost2001:XA gost2001:XB gost2012_256:B gost2012_256:C gost2012_256:XA gost2012_256:XB gost2012_512:A gost2012_512:B}} + } +} + +foreach alg $alg_list { + set alg_fn [string map {":" "_"} $alg] + set username U_pkcs12_$alg_fn + switch -glob $alg { + gost2012_512:* {set hash_alg md_gost12_512} + gost2012_256:* {set hash_alg md_gost12_256} + default {set hash_alg md_gost94} + } + +test -createsfiles [list $username/sscert.pem $username/sskey.pem]\ + "Генерируем сертификат и секретный ключ $alg" { + makeSecretKey $username $alg + makeFile $username/req.conf [makeConf] + openssl "req -new -x509 -config $username/req.conf -key $username/seckey.pem -out $username/cert.pem" + expr {[file size $username/cert.pem] > 0} +} 0 1 + +test -createsfiles {$username/pkcs12.p12} "Собираем pkcs12 с алгоритмом $alg" { + openssl "pkcs12 -export -inkey $username/seckey.pem -in $username/cert.pem -out $username/pkcs12.p12 -password pass:12345 -keypbe gost89 -certpbe gost89 -macalg $hash_alg" + file exists $username/pkcs12.p12 +} 0 1 + +test -skip {![file exists $username/pkcs12.p12]} -createsfiles [list $username/extracted_cert.pem $username/extracted_key.pem] "Разбираем pkcs12 c алгоритмом $alg" { + openssl "pkcs12 -in $username/pkcs12.p12 -nodes -out $username/dump.pem -password pass:12345" + set dump [getFile $username/dump.pem] + set lextr [regexp -all -inline "\n-----BEGIN .*?\n-----END \[^\n\]+-----\n" $dump] + + list [llength $lextr] [expr {[lindex $lextr 0] eq "\n[getFile $username/cert.pem]"}] [expr {[lindex $lextr 1] eq "\n[openssl "pkcs8 -nocrypt -topk8 -in $username/seckey.pem"]"}] + +} 0 {2 1 1} + + +#./load_engine pkcs12 -export -in t/z/U_enc_gost94_/cert.pem -inkey t/z/U_enc_gost94_/seckey.pem -certfile t/z/testCA/cacert.pem -name "CERTIFICATE" -out mycert.p12 -password pass:12345 +#./load_engine pkcs12 -in mycert.p12 -out mycert.pem + +} + +end_tests |