blob: 403ce26ea24a6c75b62e3f72ba03ac20d27008c8 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
|
#!/bin/sh -x
SRC_DIR=`cd ../.. ; pwd`
INSTANCE_NAME=kra-master
SERVER_CERT_DIR=/var/lib/pki/$INSTANCE_NAME
CLIENT_CERT_DIR=/var/lib/pki/$INSTANCE_NAME/kra/certs
CERT_NAME="transportCert cert-$INSTANCE_NAME"
CLASSPATH=$SRC_DIR/pki/build/classes
CLASSPATH=$CLASSPATH:/usr/share/java/apache-commons-cli.jar
CLASSPATH=$CLASSPATH:/usr/lib64/java/jss4.jar
CLASSPATH=$CLASSPATH:/usr/share/java/commons-codec.jar
#echo Secret123 > $CLIENT_CERT_DIR/password.txt
#certutil -N -d $CLIENT_CERT_DIR -f $CLIENT_CERT_DIR/password.txt
# export transport certificate
certutil -L -d $SERVER_CERT_DIR/alias -n "$CERT_NAME" -a > $CLIENT_CERT_DIR/transport.pem
AtoB $CLIENT_CERT_DIR/transport.pem $CLIENT_CERT_DIR/transport.crt
# import transport certificate
certutil -A -d $CLIENT_CERT_DIR -n "$CERT_NAME" -i $CLIENT_CERT_DIR/transport.pem -t u,u,u
# generate options
java -classpath $CLASSPATH com.netscape.cms.servlet.test.GeneratePKIArchiveOptions -d $CLIENT_CERT_DIR -k $CLIENT_CERT_DIR/symkey.out -o $CLIENT_CERT_DIR/options.out -t $CLIENT_CERT_DIR/transport.crt -w Secret123
# run KRA test
cd $SRC_DIR/pki/base/kra/functional
python drmclient.py -d $CLIENT_CERT_DIR --options=options.out --symkey=symkey.out -p 12080 -n "$CERT_NAME"
|
