diff options
Diffstat (limited to 'src/regress/lib/libssl/interop/cert/Makefile')
| -rw-r--r-- | src/regress/lib/libssl/interop/cert/Makefile | 98 |
1 files changed, 0 insertions, 98 deletions
diff --git a/src/regress/lib/libssl/interop/cert/Makefile b/src/regress/lib/libssl/interop/cert/Makefile deleted file mode 100644 index 47f4422d6e..0000000000 --- a/src/regress/lib/libssl/interop/cert/Makefile +++ /dev/null | |||
| @@ -1,98 +0,0 @@ | |||
| 1 | # $OpenBSD: Makefile,v 1.10 2023/04/19 15:34:23 tb Exp $ | ||
| 2 | |||
| 3 | # Connect a client to a server. Both can be current libressl, or | ||
| 4 | # openssl 1.1 or 3.0. Create client and server certificates | ||
| 5 | # that are signed by a CA and not signed by a fake CA. Try all | ||
| 6 | # combinations with, without, and with wrong CA for client and server | ||
| 7 | # and check the result of certificate verification. | ||
| 8 | |||
| 9 | LIBRARIES = libressl | ||
| 10 | .if exists(/usr/local/bin/eopenssl11) | ||
| 11 | LIBRARIES += openssl11 | ||
| 12 | .endif | ||
| 13 | .if exists(/usr/local/bin/eopenssl30) | ||
| 14 | LIBRARIES += openssl30 | ||
| 15 | .endif | ||
| 16 | |||
| 17 | .for cca in noca ca fakeca | ||
| 18 | .for sca in noca ca fakeca | ||
| 19 | .for ccert in nocert cert | ||
| 20 | .for scert in nocert cert | ||
| 21 | .for cv in noverify verify | ||
| 22 | .for sv in noverify verify certverify | ||
| 23 | |||
| 24 | # remember when certificate verification should fail | ||
| 25 | .if (("${cv}" == verify && "${cca}" == ca && "${scert}" == cert) || \ | ||
| 26 | "${cv}" == noverify) && \ | ||
| 27 | (("${sv}" == verify && "${ccert}" == nocert) || \ | ||
| 28 | ("${sv}" == verify && "${sca}" == ca && "${ccert}" == cert) || \ | ||
| 29 | ("${sv}" == certverify && "${sca}" == ca && "${ccert}" == cert) || \ | ||
| 30 | "${sv}" == noverify) | ||
| 31 | FAIL_${cca}_${sca}_${ccert}_${scert}_${cv}_${sv} = | ||
| 32 | .else | ||
| 33 | FAIL_${cca}_${sca}_${ccert}_${scert}_${cv}_${sv} = ! | ||
| 34 | .endif | ||
| 35 | |||
| 36 | .for clib in ${LIBRARIES} | ||
| 37 | .for slib in ${LIBRARIES} | ||
| 38 | |||
| 39 | .if ("${clib}" == "libressl" || "${slib}" == "libressl") | ||
| 40 | REGRESS_TARGETS += run-cert-client-${clib}-${cca}-${ccert}-${cv}-server-${slib}-${sca}-${scert}-${sv} | ||
| 41 | .else | ||
| 42 | # Don't use REGRESS_SLOW_TARGETS since its handling in bsd.regress.mk is slow. | ||
| 43 | SLOW_TARGETS += run-cert-client-${clib}-${cca}-${ccert}-${cv}-server-${slib}-${sca}-${scert}-${sv} | ||
| 44 | .endif | ||
| 45 | |||
| 46 | run-cert-client-${clib}-${cca}-${ccert}-${cv}-server-${slib}-${sca}-${scert}-${sv}: \ | ||
| 47 | 127.0.0.1.crt ca.crt fake-ca.crt client.crt server.crt \ | ||
| 48 | ../${clib}/client ../${slib}/server | ||
| 49 | LD_LIBRARY_PATH=/usr/local/lib/e${slib} \ | ||
| 50 | ../${slib}/server >${@:S/^run/server/}.out \ | ||
| 51 | ${sca:S/^noca//:S/^fakeca/-C fake-ca.crt/:S/^ca/-C ca.crt/} \ | ||
| 52 | ${scert:S/^nocert//:S/^cert/-c server.crt -k server.key/} \ | ||
| 53 | ${sv:S/^noverify//:S/^verify/-v/:S/^certverify/-vv/} \ | ||
| 54 | 127.0.0.1 0 | ||
| 55 | ${FAIL_${cca}_${sca}_${ccert}_${scert}_${cv}_${sv}} \ | ||
| 56 | LD_LIBRARY_PATH=/usr/local/lib/e${clib} \ | ||
| 57 | ../${clib}/client >${@:S/^run/client/}.out \ | ||
| 58 | ${cca:S/^noca//:S/^fakeca/-C fake-ca.crt/:S/^ca/-C ca.crt/} \ | ||
| 59 | ${ccert:S/^nocert//:S/^cert/-c server.crt -k server.key/} \ | ||
| 60 | ${cv:S/^noverify//:S/^verify/-v/} \ | ||
| 61 | `sed -n 's/listen sock: //p' ${@:S/^run/server/}.out` | ||
| 62 | .if empty(${FAIL_${cca}_${sca}_${ccert}_${scert}_${cv}_${sv}}) | ||
| 63 | grep '^success$$' ${@:S/^run/server/}.out || \ | ||
| 64 | { sleep 1; grep '^success$$' ${@:S/^run/server/}.out; } | ||
| 65 | grep '^success$$' ${@:S/^run/client/}.out | ||
| 66 | .elif ! ("${sv}" == certverify && "${ccert}" == nocert) || \ | ||
| 67 | ("${cv}" == verify && "${scert}" != cert) | ||
| 68 | grep '^verify: fail' ${@:S/^run/client/}.out ${@:S/^run/server/}.out | ||
| 69 | .endif | ||
| 70 | |||
| 71 | .endfor | ||
| 72 | .endfor | ||
| 73 | .endfor | ||
| 74 | .endfor | ||
| 75 | .endfor | ||
| 76 | .endfor | ||
| 77 | .endfor | ||
| 78 | .endfor | ||
| 79 | |||
| 80 | .include <bsd.own.mk> | ||
| 81 | REGRESS_SKIP_SLOW ?= no | ||
| 82 | .if ${REGRESS_SKIP_SLOW:L} != "yes" | ||
| 83 | REGRESS_TARGETS += ${SLOW_TARGETS} | ||
| 84 | .endif | ||
| 85 | |||
| 86 | REGRESS_TARGETS += run-bob | ||
| 87 | run-bob: | ||
| 88 | @echo Bob, be happy! Tests finished. | ||
| 89 | |||
| 90 | # argument list too long for a single rm * | ||
| 91 | |||
| 92 | clean: _SUBDIRUSE | ||
| 93 | rm -f client-*.out | ||
| 94 | rm -f server-*.out | ||
| 95 | rm -f a.out [Ee]rrs mklog *.core y.tab.h \ | ||
| 96 | ${PROG} ${PROGS} ${OBJS} ${_LEXINTM} ${_YACCINTM} ${CLEANFILES} | ||
| 97 | |||
| 98 | .include <bsd.regress.mk> | ||
