1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
|
#!/bin/sh -
# $Id$
#
# Copyright (C) 2010 Internet Systems Consortium ("ISC")
#
# Permission to use, copy, modify, and distribute this software for any
# purpose with or without fee is hereby granted, provided that the above
# copyright notice and this permission notice appear in all copies.
#
# THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
# REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
# AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
# INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
# LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
# OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
# PERFORMANCE OF THIS SOFTWARE.
# Given the Maildir dump format, one can use Mutt as a viewer with two
# tweaks:
#
# 1) Add to ~/.muttrc
#
# auto_view application/x-rpki
#
# 2) Add to ~/.mailcap
#
# application/x-rpki; /path/to/this/script.sh ; copiousoutput
#
# "copiousoutput" is required by mutt to enable auto_view (inline
# display) behavior.
#
# This script could do fancier things (pretty XML formatting,
# verification checks of the CMS, etcetera) if anybody cared.
# For the moment the main use for this script is debugging.
# We have to jump through some hoops to figure out where our OpenSSL
# binary is. If you have already installed an OpenSSL binary that
# understands CMS, feel free to use that instead.
#exec 2>&1; set -x
: ${AWK=/usr/bin/awk}
: ${OPENSSL=$(/usr/bin/dirname $0)/../openssl/openssl/apps/openssl}
: ${SPLITBASE64=$(/usr/bin/dirname $0)/splitbase64.xsl}
: ${XMLINDENT=/usr/local/bin/xmlindent}
: ${XMLLINT=/usr/local/bin/xmllint}
: ${XSLTPROC=/usr/local/bin/xsltproc}
# This produces prettier output, but also hangs sometimes, apparently some xmlindent bug dealing with really long XML attributes
#OPENSSL_CONF=/dev/null $OPENSSL cms -verify -nosigs -noverify -inform DER 2>/dev/null | $XSLTPROC $SPLITBASE64 - | $XMLINDENT -i 2 | $AWK NF
# So we do this instead
OPENSSL_CONF=/dev/null $OPENSSL cms -verify -nosigs -noverify -inform DER 2>/dev/null | $XSLTPROC $SPLITBASE64 - | $XMLLINT -format -
|
