diff options
Diffstat (limited to 'scripts/Old/encode-test.py')
| -rwxr-xr-x | scripts/Old/encode-test.py | 175 |
1 files changed, 0 insertions, 175 deletions
diff --git a/scripts/Old/encode-test.py b/scripts/Old/encode-test.py deleted file mode 100755 index b39a8d51..00000000 --- a/scripts/Old/encode-test.py +++ /dev/null @@ -1,175 +0,0 @@ -# $Id$ - -# Copyright (C) 2007--2008 American Registry for Internet Numbers ("ARIN") -# -# Permission to use, copy, modify, and distribute this software for any -# purpose with or without fee is hereby granted, provided that the above -# copyright notice and this permission notice appear in all copies. -# -# THE SOFTWARE IS PROVIDED "AS IS" AND ARIN DISCLAIMS ALL WARRANTIES WITH -# REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY -# AND FITNESS. IN NO EVENT SHALL ARIN BE LIABLE FOR ANY SPECIAL, DIRECT, -# INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM -# LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE -# OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR -# PERFORMANCE OF THIS SOFTWARE. - -import os - -def run(func, arg, *cmd): - i, o = func(cmd) - i.write(arg) - i.close() - value = o.read() - o.close() - return value - -def encode(xml, cer, key): - return run(os.popen2, xml, "openssl", "smime", "-sign", "-nodetach", "-outform", "PEM", "-signer", cer, "-inkey", key) - -def decode(cms, dir): - return run(os.popen2, cms, "openssl", "smime", "-verify", "-inform", "PEM", "-CApath", dir) - -def relaxng(xml, rng): - return run(os.popen4, xml, "xmllint", "--noout", "--relaxng", rng, "-") - -def main(): - dir = "biz-certs" - cer = "biz-certs/Alice-EE.cer" - key = "biz-certs/Alice-EE.key" - rng = "up-down-schema.rng" - - for x in xml: - print x - e = encode(x, cer, key) - print e - d = decode(e, dir) - print d - v = relaxng(d, rng) - print v - print "=====\n" - -# Ugly inline stuff here for initial testing - -xml = [ -'''<?xml version="1.0" encoding="UTF-8"?> -<message xmlns="http://www.apnic.net/specs/rescerts/up-down/" - version="1" - sender="sender name" - recipient="recipient name" - msg_ref="42" - type="error_response"> - <status>2001</status> - <last_msg_processed>17</last_msg_processed> - <description xml:lang="en-US">[Readable text]</description> -</message> -''', -'''<?xml version="1.0" encoding="UTF-8"?> -<message xmlns="http://www.apnic.net/specs/rescerts/up-down/" - version="1" - sender="sender name" - recipient="recipient name" - msg_ref="42" type="issue"> - <request class_name="class name" - req_resource_set_as="" - req_resource_set_ipv4="10.0.0.44/32" - req_resource_set_ipv6="dead:beef::/32"> - deadbeef - </request> -</message> -''', -'''<?xml version="1.0" encoding="UTF-8"?> -<message xmlns="http://www.apnic.net/specs/rescerts/up-down/" - version="1" - sender="sender name" - recipient="recipient name" - msg_ref="1" - type="issue_response"> - <class class_name="class name" - cert_url="url" - cert_ski="g(ski)" - resource_set_as="22,42,44444-5555555" - resource_set_ipv4="10.0.0.44-10.3.0.44,10.6.0.2/32" - resource_set_ipv6="dead:beef::/128"> - <certificate cert_url="url" - cert_ski="g(ski)" - cert_aki="g(aki)" - cert_serial="1" - resource_set_as="14-17" - resource_set_ipv4="128.224.1.136/22" - resource_set_ipv6="0:0::/22" - req_resource_set_as="" - req_resource_set_ipv4="10.0.0.77/16,127.0.0.1/8" - req_resource_set_ipv6="dead:beef::/16" - status="match"> - deadbeef - </certificate> - <issuer>deadbeef</issuer> - </class> -</message> -''', -'''<?xml version="1.0" encoding="UTF-8"?> -<message xmlns="http://www.apnic.net/specs/rescerts/up-down/" - version="1" - sender="sender name" - recipient="recipient name" - msg_ref="42" - type="list"/> -''', -'''<?xml version="1.0" encoding="UTF-8"?> -<message xmlns="http://www.apnic.net/specs/rescerts/up-down/" - version="1" - sender="sender name" - recipient="recipient name" - msg_ref="42" - type="list_response"> - <class class_name="class name" - cert_url="url" - cert_ski="g(ski)" - resource_set_as="1,2,4,6,16-32" - resource_set_ipv4="128.224.1.1-128.22.4.32" - resource_set_ipv6="" - suggested_sia_head="rsync://wombat.example/fnord/"> - <certificate cert_url="url" - cert_ski="g(ski)" - cert_aki="g(aki)" - cert_serial="1" - resource_set_as="" - resource_set_ipv4="" - resource_set_ipv6="" - req_resource_set_as="" - req_resource_set_ipv4="" - req_resource_set_ipv6="" - status="match"> - deadbeef - </certificate> - <!-- Repeated for each current certificate naming the client as subject --> - <issuer>deadbeef</issuer> - </class> -</message> -''', -'''<?xml version="1.0" encoding="UTF-8"?> -<message xmlns="http://www.apnic.net/specs/rescerts/up-down/" - version="1" - sender="sender name" - recipient="recipient name" - msg_ref="42" - type="revoke"> - <key class_name="class name" - ski="g(ski)"/> -</message> -''', -'''<?xml version="1.0" encoding="UTF-8"?> -<message xmlns="http://www.apnic.net/specs/rescerts/up-down/" - version="1" - sender="sender name" - recipient="recipient name" - msg_ref="42" - type="revoke_response"> - <key class_name="class name" - ski="g(ski)"/> -</message> -''' -] - -main() |