From 2ea5fa5ca2d1fb41444a8be5c0e58651aafdee04 Mon Sep 17 00:00:00 2001
From: Marcel Poul <marcel.poul@cern.ch>
Date: Sun, 3 Feb 2013 23:43:01 +0000
Subject: [PATCH] Test ocsp on server certificate. Has to be used, where
 hostcert.pem in /etc/gridsecurity/ is valid and has OCSP uri specified in
 AIA.`

---
 .../CANL-C/tests/canl-test-ocsp.sh                 | 163 +++++++++++++++++++++
 1 file changed, 163 insertions(+)
 create mode 100755 org.glite.testsuites.ctb/CANL-C/tests/canl-test-ocsp.sh

diff --git a/org.glite.testsuites.ctb/CANL-C/tests/canl-test-ocsp.sh b/org.glite.testsuites.ctb/CANL-C/tests/canl-test-ocsp.sh
new file mode 100755
index 0000000..0cce94a
--- /dev/null
+++ b/org.glite.testsuites.ctb/CANL-C/tests/canl-test-ocsp.sh
@@ -0,0 +1,163 @@
+#!/bin/bash
+#
+# Copyright (c) Members of the EGEE Collaboration. 2004-2010.
+# See http://www.eu-egee.org/partners for details on the copyright holders.
+# 
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+# 
+#     http://www.apache.org/licenses/LICENSE-2.0
+# 
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+# show help and usage
+progname=`basename $0`
+showHelp()
+{
+cat << EndHelpHeader
+Script for testing canl secured connection with OCSP
+
+Prerequisities:
+Tests called:
+
+    check_binaries
+
+Returned values:
+    Exit TEST_OK: Test Passed
+    Exit TEST_ERROR: Test Failed
+    Exit 2: Wrong Input
+
+EndHelpHeader
+
+	echo "Usage: $progname [OPTIONS]"
+	echo "Options:"
+	echo " -h | --help            Show this help message."
+#	echo " -o | --output 'file'   Redirect all output to the 'file' (stdout by default)."
+	echo " -t | --text            Format output as plain ASCII text."
+	echo " -c | --color           Format output as text with ANSI colours (autodetected by default)."
+	echo " -x | --html            Format output as html."
+	echo " -s | --srvbin          Canl sample server file path"
+	echo " -k | --clibin          Canl sample client file path"
+}
+
+# read common definitions and functions
+COMMON=canl-common.sh
+if [ ! -r ${COMMON} ]; then
+	printf "Common definitions '${COMMON}' missing!"
+	exit 2
+fi
+source ${COMMON}
+
+#logfile=$$.tmp
+#flag=0
+srvbin=""
+clibin=""
+server_host=`hostname -f 2> /dev/null || hostname -A 2> /dev/null`
+while test -n "$1"
+do
+	case "$1" in
+		"-h" | "--help") showHelp && exit 2 ;;
+#		"-o" | "--output") shift ; logfile=$1 flag=1 ;;
+		"-s" | "--srvbin") shift ; srvbin=$1 ;;
+		"-k" | "--clibin") shift ; clibin=$1 ;;
+		"-t" | "--text")  setOutputASCII ;;
+		"-c" | "--color") setOutputColor ;;
+		"-x" | "--html")  setOutputHTML ;;
+	esac
+	shift
+done
+
+# redirecting all output to $logfile
+#touch $logfile
+#if [ ! -w $logfile ]; then
+#	echo "Cannot write to output file $logfile"
+#	exit $TEST_ERROR
+#fi
+
+##
+#  Starting the tests
+#####################
+
+{
+test_start
+# check canl binaries
+get_canl_sc_binaries $srvbin $clibin
+if [ $? -ne 0 ]; then
+        test_failed
+        test_end
+        exit $TEST_ERROR
+else    
+        test_done
+fi
+
+# check_binaries
+printf "Testing if all binaries are available"
+check_binaries $EMI_CANL_SERVER $EMI_CANL_CLIENT \
+	$VOMSPROXYFAKE $GRIDPROXYINFO $SYS_GREP \
+	$SYS_SED $SYS_AWK $SYS_LSOF $OPENSSL
+if [ $? -gt 0 ]; then
+	test_failed
+else
+	test_done
+fi
+
+printf "Testing credentials\n"
+
+server_cert_file="/tmp/canl_ocsp_certfile.$$"
+if [[ -r $server_cert_file ]]; then
+    rm -rf $server_file
+fi
+
+${OPENSSL} x509 -in /etc/grid-security/hostcert.pem -noout\
+            -text >> "$server_cert_file"
+
+ocsp_line=`grep OCSP "$server_cert_file"`
+
+echo "Server certificate has OSCP url specified"
+if [[ ! -z $server_cert_file ]]
+then
+   test_done
+else
+   test_failed
+fi
+
+printf "Starting canl sample server \n"
+${EMI_CANL_SERVER} -k /etc/grid-security/hostkey.pem \
+        -c /etc/grid-security/hostcert.pem -p "${nu_port}" &
+last_pid=$!
+lp_running=`${SYS_PS} | ${SYS_GREP} -E "${last_pid}" 2> /dev/null`
+if [ -n "$lp_running" ]; then
+        test_done
+else
+        test_failed
+        test_end
+        exit 2
+fi
+
+
+printf "CANL client: connect to CANL sample server and server cert OCSP verified \n"
+${EMI_CANL_CLIENT} -s "${server_host}" -p "${nu_port}" -o
+if [ $? != 0 ]; then
+	test_failed
+else
+	test_done
+fi
+
+kill ${last_pid} &> /dev/null
+
+rm -rf $server_file
+test_end
+}
+#} &> $logfile
+
+#if [ $flag -ne 1 ]; then
+# 	cat $logfile
+# 	$SYS_RM $logfile
+#fi
+exit $TEST_OK
-- 
1.8.2.3