1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
|
#!/bin/bash
# vim: dict=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#
# runtest.sh of /CoreOS/rhcs/acceptance/cli-tests/pki-cert-cli
# Description: PKI CERT CLI tests
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# The following pki cert cli commands needs to be tested:
# pki-cert-request-submit
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#
# Author: Niranjan Mallapadi <mrniranjan@redhat.com>
#
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#
# Copyright (c) 2013 Red Hat, Inc. All rights reserved.
#
# This copyrighted material is made available to anyone wishing
# to use, modify, copy, or redistribute it subject to the terms
# and conditions of the GNU General Public License version 2.
#
# This program is distributed in the hope that it will be
# useful, but WITHOUT ANY WARRANTY; without even the implied
# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
# PURPOSE. See the GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public
# License along with this program; if not, write to the Free
# Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
# Boston, MA 02110-1301, USA.
#
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# Include rhts environment
. /usr/bin/rhts-environment.sh
. /usr/share/beakerlib/beakerlib.sh
. /opt/rhqa_pki/rhcs-shared.sh
. /opt/rhqa_pki/pki-cert-cli-lib.sh
. /opt/rhqa_pki/env.sh
run_pki-cert-show-ca_tests()
{
local invalid_serialNumber=$(cat /dev/urandom | tr -dc '1-9' | fold -w 10 | head -n 1)
local invalid_hex_serialNumber=0x$(echo "ibase=16;$invalid_serialNumber"|bc)
CA_agentV_user=CA_agentV
local pkcs10_reqstatus
local pkcs10_requestid
local crmf_reqstatus
local crmf_requestid
local decimal_valid_serialNumber
local rand=$(cat /dev/urandom | tr -dc '0-9' | fold -w 5 | head -n 1)
local junk="axb124?$5@@_%^$#$@\!(_)043112321412321"
local cert_req_info="$TmpDir/cert_req_info.out"
# Creating Temporary Directory for pki cert-show
rlPhaseStartSetup "pki cert-show Temporary Directory"
rlRun "TmpDir=\$(mktemp -d)" 0 "Creating tmp directory"
rlRun "pushd $TmpDir"
rlPhaseEnd
# Create a Temporary NSS DB Directory and generate Certificate
rlPhaseStartSetup "Generating temporary Cert to be used pki cert-show automation Tests"
local TEMP_NSS_DB="$TmpDir/nssdb"
local temp_out="$TmpDir/cert-show.out"
rlRun "create_cert_request $TEMP_NSS_DB redhat pkcs10 rsa 2048 "--" "--" "--" "--" "--" "--" "--" "$(hostname)" "8080" "$cert_req_info""
local pkcs10_requestid=$(cat $cert_req_info | grep Request_ID | cut -d- -f2)
rlRun "pki -d $CERTDB_DIR -c $CERTDB_DIR_PASSWORD -n \"$CA_agentV_user\" ca-cert-request-review $pkcs10_requestid --action approve 1> $TmpDir/pki-pkcs10-approve-out" 0 "As $CA_agentV_user Approve Certificate Request"
rlAssertGrep "Approved certificate request $pkcs10_requestid" "$TmpDir/pki-pkcs10-approve-out"
rlRun "create_cert_request $TEMP_NSS_DB redhat crmf rsa 2048 "--" "--" "--" "--" "--" "--" "--" "$(hostname)" "8080" "$cert_req_info""
local crmf_requestid=$(cat $cert_req_info | grep Request_ID | cut -d- -f2)
rlRun "pki -d $CERTDB_DIR \
-c $CERTDB_DIR_PASSWORD \
-n \"$CA_agentV_user\" \
ca-cert-request-review $crmf_requestid \
--action approve 1> $TmpDir/pki-crmf-approve-out"
rlAssertGrep "Approved certificate request $crmf_requestid" "$TmpDir/pki-crmf-approve-out"
local valid_pkcs10_serialNumber=$(pki cert-request-show $pkcs10_requestid | grep "Certificate ID" | sed 's/ //g' | cut -d: -f2)
local valid_crmf_serialNumber=$(pki cert-request-show $crmf_requestid | grep "Certificate ID" | sed 's/ //g' | cut -d: -f2)
STRIP_HEX_PKCS10=$(echo $valid_pkcs10_serialNumber | cut -dx -f2)
STRIP_HEX_CRMF=$(echo $valid_crmf_serialNumber | cut -dx -f2)
CONV_UPP_VAL_PKCS10=${STRIP_HEX_PKCS10^^}
CONV_UPP_VAL_CRMF=${STRIP_HEX_CRMF^^}
decimal_valid_serialNumber_pkcs10=$(echo "ibase=16;$CONV_UPP_VAL_PKCS10"|bc)
decimal_valid_serialNumber_crmf=$(echo "ibase=16;$CONV_UPP_VAL_CRMF"|bc)
rlPhaseEnd
# pki cert cli config test
rlPhaseStartTest "pki_cert_cli-configtest: pki cert-show --help configuration test"
rlRun "pki cert-show --help > $TmpDir/cert-show.out 2>&1" 0 "pki cert-show --help"
rlAssertGrep "usage:" "$TmpDir/cert-show.out"
rlAssertGrep "--encoded Base-64 encoded" "$TmpDir/cert-show.out"
rlAssertGrep "--output <file> Output file" "$TmpDir/cert-show.out"
rlAssertGrep "--pretty Pretty print" "$TmpDir/cert-show.out"
rlAssertNotGrep "Error: Unrecognized option: --help" "$TmpDir/cert-show.out"
rlLog "FAIL :: https://engineering.redhat.com/trac/pki-tests/ticket/490"
rlPhaseEnd
#Run pki cert-show with valid serial number in HexaDecimal
rlPhaseStartTest "pki_cert_show-001: pki cert-show < valid serialNumber(HexaDecimal) > should show Certificate Details"
rlRun "pki cert-show $valid_pkcs10_serialNumber > $temp_out" 0 "Executing pki cert-show $valid_pkcs10_serialNumber"
rlAssertGrep "Certificate \"$valid_pkcs10_serialNumber\"" "$temp_out"
rlAssertGrep "Serial Number: $valid_pkcs10_serialNumber" "$temp_out"
rlAssertGrep "Issuer: CN=CA Signing Certificate,O=$CA_DOMAIN" "$temp_out"
rlAssertGrep "Subject: $pkcs10_requestdn" "$temp_out"
rlAssertGrep "Status: VALID" "$temp_out"
rlPhaseEnd
#Run pki cert-show with No serial Number
rlPhaseStartTest "pki_cert_show-002: pki cert-show should show usage details when no serial Number is given"
rlRun "pki cert-show > $temp_out" 1,255 "pki cert-show without any serial number fails"
rlAssertGrep "usage: cert-show" "$temp_out"
rlPhaseEnd
# Run pki cert-show with Invalid Serial Number in decimal
rlPhaseStartTest "pki_cert_show-003: pki cert-show < invalid serialNumber(Decimal) > should Fail"
rlRun "pki cert-show $invalid_serialNumber 2> $temp_out" 1,255 "command pki cert-show $invalid_serialNumber"
rlAssertGrep "CertNotFoundException" "$temp_out"
rlPhaseEnd
# Run pki cert-show with valid serial Number given in decimal
rlPhaseStartTest "pki_cert_show-004: pki cert-show < valid serialNumber(Decimal) > should show Certificate Details"
rlLog "Decimal value : $decimal_valid_serialNumber_pkcs10"
rlRun "pki cert-show $decimal_valid_serialNumber_pkcs10 > $temp_out" 0 "Executing pki cert-show $decimal_valid_serialNumber_pkcs10"
rlAssertGrep "Certificate \"$valid_pkcs10_serialNumber\"" "$temp_out"
rlAssertGrep "Serial Number: $valid_pkcs10_serialNumber" "$temp_out"
rlAssertGrep "Issuer: CN=CA Signing Certificate,O=$CA_DOMAIN" "$temp_out"
rlAssertGrep "Subject: $pkcs10_requestdn" "$temp_out"
rlAssertGrep "Status: VALID" "$temp_out"
rlPhaseEnd
#Run pki cert-show with invalid serialNumber given in Hexadecimal
rlPhaseStartTest "pki_cert_show-005: pki cert-show < invalid serialNumber(hexadecimal) > should fail"
rlRun "pki cert-show $invalid_hex_serialNumber 2> $temp_out" 1,255 "Executing pki cert-show $invalid_hex_serialNumber"
rlAssertGrep "CertNotFoundException" "$temp_out"
rlPhaseEnd
# Run pki cert-show with Junk Characters
rlPhaseStartTest "pki_cert_show-006: pki cert-show < junk characters > should fail to show any certificate Details"
rlRun "pki cert-show \"$junk\" 2> $temp_out" 1,255 "Executing pki cert-show $junk"
rlAssertGrep "NumberFormatException: For input string" "$temp_out"
rlPhaseEnd
# Run pki cert-show <valid serialNumber> --encoded to produce a valid pem output
rlPhaseStartTest "pki_cert_show-007: pki cert-show <valid SerialNumber> --encoded should produce a valid pem output"
rlLog "Running pki cert-show $valid_pkcs10_serialNumber"
rlRun "pki cert-show $valid_pkcs10_serialNumber --encoded > $temp_out" 0 "command pki cert-show $valid_pkcs10_serialNumber --encoded"
rlLog "Get the Subject Name of the Certificate with $valid_pkcs10_serialNumber"
rlLog "$(cat $temp_out | grep Subject | awk -F":" '{print $2}')"
rlRun "openssl x509 -in $temp_out -noout -serial 1> $temp_out-openssl" 0 "Run openssl to verify PEM output"
rlAssertGrep "serial=$CONV_UPP_VAL_PKCS10" "$temp_out-openssl"
rlPhaseEnd
#Run pki cert-show --encoded with No serial Number
rlPhaseStartTest "pki_cert_show-008: pki cert-show <No SerialNumber> --encoded should fail"
rlRun "pki cert-show --encoded 1> $temp_out" 1,255 "Running pki cert-show <No-serial-Number> --encoded"
rlAssertGrep "usage: cert-show" "$temp_out"
rlPhaseEnd
# Run pki cert-show --encoded with Invalid Serial Number
rlPhaseStartTest "pki_cert_show-009: pki cert-show <In-Valid SerialNumber> --encoded should fail"
rlLog "Running pki cer-show <invalid-serial-Number> --encoded"
rlRun "pki cert-show $invalid_serialNumber --encoded 2> $temp_out" 1,255 "pki cert-show $serialNumber"
local invalid_hex_sno=$(echo "obase=16;$invalid_serialNumber"|bc)
local conv_lower_hex_invalidserialNum=${invalid_hex_sno,,}
rlAssertGrep "CertNotFoundException: Certificate ID 0x$conv_lower_hex_invalidserialNum not found" "$temp_out"
rlPhaseEnd
# Run pki cert-show <valid serialNumber> --output <filename>(pkcs10)
rlPhaseStartTest "pki_cert_show-0010: pki cert-show <valid SerialNumber(Hexadecimal)> --output <filename> should save the Certificate in File"
rlRun "pki cert-show $valid_pkcs10_serialNumber --output $temp_out" 0 "Executing pki cert-show $valid_pkcs10_serialNumber --output <file-name>"
rlAssertGrep "-----BEGIN CERTIFICATE-----" "$temp_out"
rlAssertGrep "\-----END CERTIFICATE-----" "$temp_out"
rlRun "openssl x509 -in $temp_out -noout -serial 1> $temp_out-openssl" 0 "Run openssl x509 on the output file"
rlAssertGrep "serial=$CONV_UPP_VAL_PKCS10" "$temp_out-openssl"
rlPhaseEnd
#Run pki cert-show <valid serialNumber> --output <filename> (crmf)
rlPhaseStartTest "pki_cert_show-0011: pki cert-show <valid SerialNumber(Hexadecimal)> (crmf) --output <filename> should save the Certificate in File"
rlRun "pki cert-show $valid_crmf_serialNumber --output $temp_out" 0 "Executing pki cert-show $valid_crmf_serialNumber --output <file-name>"
rlAssertGrep "-----BEGIN CERTIFICATE-----" "$temp_out"
rlAssertGrep "\-----END CERTIFICATE-----" "$temp_out"
rlRun "openssl x509 -in $temp_out -noout -serial 1> $temp_out-openssl" 0 "Run openssl x509 on the output file"
rlAssertGrep "serial=$CONV_UPP_VAL_CRMF" "$temp_out-openssl"
rlPhaseEnd
# Run pki cert-show <invalid-serial-number> --output
rlPhaseStartTest "pki_cert_show-0012: pki cert-show <invalid-serial-Number> --output <filename> should not create any file"
rlLog "Running pki cert-show <invalid-serialNumber> --output <filename>"
rlRun "pki cert-show $invalid_serialNumber --output $temp_out" 1,255 "pki cert-show <invalid-serial-number> --output <file>"
rlAssertExists $temp_out
rlPhaseEnd
# Run pki cert-show <No serial number> --output <filename>
rlPhaseStartTest "pki_cert_show-0013: pki cert-show <No serialNumber> --output <filename> should fail"
local temp_out13=$TmpDir/cert-show13.out
local temp_out13_err=$TmpDir/cert-err13.out
rlLog "Running pki cert-show --output $temp_out13 0> $temp_out13_err"
rlRun "pki cert-show --output $temp_ou13 1> $temp_out13_err" 1,255
rlAssertGrep "usage:" "$temp_out13_err"
rlAssertGrep "--encoded Base-64 encoded" "$temp_out13_err"
rlAssertGrep "--output <file> Output file" "$temp_out13_err"
rlAssertGrep "--pretty Pretty print" "$temp_out13_err"
rlPhaseEnd
# Run pki cert-show <valid-serial-number> --pretty
rlPhaseStartTest "pki_cert_show-0014: pki cert-show <valid SerialNumber(decimal)> --pretty <filename> should show PrettyPrint output of cert and save the the Cert in File."
rlLog "Running pki cert-show $valid_pkcs10_serialNumber --pretty"
rlRun "pki cert-show $valid_pkcs10_serialNumber --pretty > $temp_out" 0
rlAssertGrep "Certificate:" "$temp_out"
rlAssertGrep "Version:" "$temp_out"
rlAssertGrep "Subject:" "$temp_out"
rlPhaseEnd
# Run pki cert-show <in-valid-serial-number> --pretty
rlPhaseStartTest "pki_cert_show-0015: pki cert-show < $invalid_serialNumber > --pretty <filename> should fail to produce any PrettyPrint output"
local temp_out1="$TmpDir/cert-show1.out"
rlRun "pki cert-show $invalid_hex_serialNumber --pretty 2> $temp_out1" 1,255 "Executing pki cert-show $invalid_hex_serialNumber --pretty"
rlAssertGrep "CertNotFoundException: Certificate ID $invalid_hex_serialNumber not found" "$temp_out1"
rlPhaseEnd
# Run pki cert-show <No serial Number> --pretty
rlPhaseStartTest "pki_cert_show-0016: pki cert-show <No serialNumber> --pretty <filename> should fail to produce any PrettyPrint output"
rlLog "Running pki cert-show --pretty" 1
rlRun "pki cert-show --pretty 1> $temp_out" 1,255
rlAssertGrep "usage:" "$temp_out"
rlAssertGrep "--encoded Base-64 encoded" "$temp_out"
rlAssertGrep "--output <file> Output file" "$temp_out"
rlAssertGrep "--pretty Pretty print" "$temp_out"
rlPhaseEnd
# Run pki cert-show with i18n characters
rlPhaseStartTest "pki_cert_show-0017: Test-1 Verify pki cert-show with i18n Characters"
rlRun "create_cert_request $TEMP_NSS_DB redhat pkcs10 rsa 2048 \"Örjan Äke\" \"Örjan Äke\" \"test@example.org\" "--" "--" "--" "--" "$(hostname)" "8080" "$cert_req_info""
local i18n_ret_requestid=$(cat $cert_req_info | grep Request_ID | cut -d- -f2)
rlRun "pki -d $CERTDB_DIR \
-c $CERTDB_DIR_PASSWORD \
-n \"$CA_agentV_user\" \
ca-cert-request-review $i18n_ret_requestid \
--action approve 1> $TmpDir/i18n-pkcs10-approve-out" 0 "As $CA_agentV_user Approve Certificate Request"
rlAssertGrep "Approved certificate request $i18n_ret_requestid" "$TmpDir/i18n-pkcs10-approve-out"
rlRun "valid_i18n_pkcs10_serialNumber=\$(pki cert-request-show $i18n_ret_requestid | grep \"Certificate ID\" | sed 's/ //g' | cut -d: -f2)"
rlRun "pki cert-show $valid_i18n_pkcs10_serialNumber 1> $temp_out" 0 "Executing pki cert-show $valid_i18n_valid_pkcs10_serialNumber"
rlAssertGrep "CN=Örjan Äke" "$temp_out"
rlAssertGrep "UID=Örjan Äke" "$temp_out"
rlPhaseEnd
rlPhaseStartTest "pki_cert_show-0018: Test-2 Verify pki cert-show with i18n Characters"
rlRun "create_cert_request $TEMP_NSS_DB redhat pkcs10 rsa 2048 \"Éric Têko\" \"Éric Têko\" \"test@example.org\" "--" "--" "--" "--" "$(hostname)" "8080" "$cert_req_info""
local i18n_ret_requestid=$(cat $cert_req_info | grep Request_ID | cut -d- -f2)
rlRun "pki -d $CERTDB_DIR \
-c $CERTDB_DIR_PASSWORD \
-n \"$CA_agentV_user\" \
ca-cert-request-review $i18n_ret_requestid \
--action approve 1> $TmpDir/i18n-pkcs10-approve-out" 0 "As $CA_agentV_user Approve Certificate Request"
rlAssertGrep "Approved certificate request $i18n_ret_requestid" "$TmpDir/i18n-pkcs10-approve-out"
rlRun "valid_i18n_pkcs10_serialNumber=\$(pki cert-request-show $i18n_ret_requestid | grep \"Certificate ID\" | sed 's/ //g' | cut -d: -f2)"
rlRun "pki cert-show $valid_i18n_pkcs10_serialNumber 1> $temp_out" 0 "Executing pki cert-show $valid_i18n_valid_pkcs10_serialNumber"
rlAssertGrep "CN=Éric Têko" "$temp_out"
rlAssertGrep "UID=Éric Têko" "$temp_out"
rlPhaseEnd
rlPhaseStartTest "pki_cert_show-0019: Test-3 Verify pki cert-show with i18n Characters"
rlRun "create_cert_request $TEMP_NSS_DB redhat pkcs10 rsa 2048 \"éénentwintig dvidešimt\" \"éénentwintig dvidešimt\" \"test@example.org\" "--" "--" "--" "--" "$(hostname)" "8080" "$cert_req_info""
local i18n_ret_requestid=$(cat $cert_req_info | grep Request_ID | cut -d- -f2)
rlRun "pki -d $CERTDB_DIR \
-c $CERTDB_DIR_PASSWORD \
-n \"$CA_agentV_user\" \
ca-cert-request-review $i18n_ret_requestid \
--action approve 1> $TmpDir/i18n-pkcs10-approve-out" 0 "As $CA_agentV_user Approve Certificate Request"
rlAssertGrep "Approved certificate request $i18n_ret_requestid" "$TmpDir/i18n-pkcs10-approve-out"
rlRun "valid_i18n_pkcs10_serialNumber=\$(pki cert-request-show $i18n_ret_requestid | grep \"Certificate ID\" | sed 's/ //g' | cut -d: -f2)"
rlRun "pki cert-show $valid_i18n_pkcs10_serialNumber 1> $temp_out" 0 "Executing pki cert-show $valid_i18n_valid_pkcs10_serialNumber"
rlAssertGrep "CN=éénentwintig dvidešimt" "$temp_out"
rlAssertGrep "UID=éénentwintig dvidešimt" "$temp_out"
rlPhaseEnd
rlPhaseStartTest "pki_cert_show-0020: Test-4 Verify pki cert-show with i18n Characters"
rlRun "create_cert_request $TEMP_NSS_DB redhat pkcs10 rsa 2048 \"kakskümmend üks\" \"kakskümmend üks\" \"test@example.org\" "--" "--" "--" "--" "$(hostname)" "8080" "$cert_req_info""
local i18n_ret_requestid=$(cat $cert_req_info | grep Request_ID | cut -d- -f2)
rlRun "pki -d $CERTDB_DIR \
-c $CERTDB_DIR_PASSWORD \
-n \"$CA_agentV_user\" \
ca-cert-request-review $i18n_ret_requestid \
--action approve 1> $TmpDir/i18n-pkcs10-approve-out" 0 "As $CA_agentV_user Approve Certificate Request"
rlAssertGrep "Approved certificate request $i18n_ret_requestid" "$TmpDir/i18n-pkcs10-approve-out"
rlRun "valid_i18n_pkcs10_serialNumber=\$(pki cert-request-show $i18n_ret_requestid | grep \"Certificate ID\" | sed 's/ //g' | cut -d: -f2)"
rlRun "pki cert-show $valid_i18n_pkcs10_serialNumber 1> $temp_out" 0 "Executing pki cert-show $valid_i18n_valid_pkcs10_serialNumber"
rlAssertGrep "CN=kakskümmend üks" "$temp_out"
rlAssertGrep "UID=kakskümmend üks" "$temp_out"
rlPhaseEnd
rlPhaseStartTest "pki_cert_show-0021: Test-5 Verify pki cert-show with i18n Characters"
rlRun "create_cert_request $TEMP_NSS_DB redhat pkcs10 rsa 2048 \"двадцять один тридцять\" \"двадцять один тридцять\" \"test@example.org\" \
"--" "--" "--" "--" "$(hostname)" "8080" "$cert_req_info""
local i18n_ret_requestid=$(cat $cert_req_info | grep Request_ID | cut -d- -f2)
rlRun "pki -d $CERTDB_DIR \
-c $CERTDB_DIR_PASSWORD \
-n \"$CA_agentV_user\" \
ca-cert-request-review $i18n_ret_requestid \
--action approve 1> $TmpDir/i18n-pkcs10-approve-out" 0 "As $CA_agentV_user Approve Certificate Request"
rlAssertGrep "Approved certificate request $i18n_ret_requestid" "$TmpDir/i18n-pkcs10-approve-out"
local valid_i18n_pkcs10_serialNumber=$(pki cert-request-show $i18n_ret_requestid | grep "Certificate ID" | sed 's/ //g' | cut -d: -f2)
rlRun "pki cert-show $valid_i18n_pkcs10_serialNumber 1> $temp_out" 0 "Executing pki cert-show $valid_i18n_valid_pkcs10_serialNumber"
rlAssertGrep "CN=двадцять один тридцять" "$temp_out"
rlAssertGrep "UID=двадцять один тридцять" "$temp_out"
rlPhaseEnd
rlPhaseStartCleanup "pki cert-show cleanup: Delete temp dir"
rlRun "popd"
rlRun "rm -r $TmpDir" 0 "Removing tmp directory"
rlPhaseEnd
}
|
