Security-57031.1.35.tar.gz

[apple/security.git] / SecurityTests / clxutils / anchorTest / anchorSourceTest

diff --git a/SecurityTests/clxutils/anchorTest/anchorSourceTest b/SecurityTests/clxutils/anchorTest/anchorSourceTest
new file mode 100755 (executable)
index 0000000..dc08f2f
--- /dev/null
+++ b/SecurityTests/clxutils/anchorTest/anchorSourceTest
@@ -0,0 +1,75 @@
+#! /bin/csh -f
+#
+# verify "root-ness" of all of the certs in specified directory.
+#
+if ( $#argv < 1 ) then
+        echo Usage: anchorSourceTest directory
+               echo A good directory would be ../../../security_certificates/roots/
+        exit(1)
+endif
+#
+set BUILD_DIR=$LOCAL_BUILD_DIR
+set CERTS_DIR=$argv[1]
+
+set QUIET=0
+shift
+while ( $#argv > 0 )
+    switch ( "$argv[1]" )
+        case q:
+            set QUIET = 1
+            shift
+            breaksw
+        default:
+                       echo Usage: anchorSourceTest directory
+            exit(1)
+    endsw
+end
+
+#
+# binaries we need
+#
+set CERTCRL=$BUILD_DIR/certcrl
+set CERTS_FROM_DB=$BUILD_DIR/certsFromDb
+foreach targ ($CERTCRL $CERTS_FROM_DB)
+       if(! -e $targ) then
+               echo === $targ is missing. Try building clxutil. 
+               exit(1)
+       endif
+end
+
+echo starting anchorSourceTest
+#
+# certcrl args:
+#
+#  -c  cert to eval
+#  -C  use this as an anchor
+#  -a  allow certs unverified by CRLs
+#  -f  leaf cert is a CA
+#  -L  silent
+#
+set TEST_FAILED=0
+
+cd $CERTS_DIR
+foreach certFile (*)
+       if ( ( -f "$certFile" ) && ( "$certFile" != X509Anchors) ) then 
+               if($QUIET == 0) then
+                       echo testing $certFile....
+               endif
+#              $CERTCRL -c "$certFile" -C "$certFile" -a -f -L -T 20071217154316
+               $CERTCRL -c "$certFile" -C "$certFile" -a -f -L
+               if($status != 0) then
+                  echo "++++++++ Verification error on $certFile"
+                  $CERTCRL -c "$certFile" -C "$certFile" -a -f -v
+                  set TEST_FAILED=1
+               endif
+       endif
+end
+
+if($TEST_FAILED == 1) then
+       echo "anchorSourceTest FAILED"
+       exit(1)
+endif
+
+if($QUIET == 0) then
+       echo "...anchorSourceTest complete"
+endif