blob: 88586b5170587e7e20bfd7e997c65483c76819e5 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
|
#!/bin/sh -
# $Id$
#
# Script to test against rootd.py.
#
# This blows away rpkid's database and rebuilds it with what we need
# for this test, and knows far too much about the id numbers that
# rpkid and mysql will assign. In the long run we must do better than
# this, but gotta start somewhere.
openssl=../openssl/openssl/apps/openssl
# Halt on first error
set -e
# Generate new key and cert for rootd.py if needed
if test ! -r rootd.cer -o ! -r rootd.key
then
$openssl req -new -newkey rsa:2048 -nodes -keyout rootd.key -out rootd.req -config rootd.cnf
$openssl x509 -req -in rootd.req -out rootd.cer -extfile rootd.cnf -extensions req_x509_ext -signkey rootd.key -text -sha256
rm -f rootd.req
fi
# Blow away old rpkid database (!) so we can start clean
mysql -u rpki -p`awk '$1 == "sql-password" {print $3}' rpkid.conf` rpki <../docs/rpki-db-schema.sql
# Start rpkid so we can configure it, make sure we shut it down on exit
python rpkid.py & rpkid=$!
trap "kill $rpkid" 0 1 2 3 13 15
: Waiting to let rpkid start up; sleep 5
# Create a self instance
time python irbe-cli.py self --action create --crl_interval 84600
# Create a business signing context, issue the necessary business cert, and set up the cert chain
time python irbe-cli.py --pem_out bsc.req bsc --action create --self_id 1 --generate_keypair --signing_cert biz-certs/Bob-CA.cer
time $openssl x509 -req -in bsc.req -out bsc.cer -CA biz-certs/Bob-CA.cer -CAkey biz-certs/Bob-CA.key -CAserial biz-certs/Bob-CA.srl
time python irbe-cli.py bsc --action set --self_id 1 --bsc_id 1 --signing_cert bsc.cer
rm -f bsc.req bsc.cer
# Create a repository context
time python irbe-cli.py repository --self_id 1 --action create --bsc_id 1
# Create a parent context pointing at rootd.py
time python irbe-cli.py parent --self_id 1 --action create --bsc_id 1 --repository_id 1 \
--peer_contact_uri https://localhost:44333/ \
--cms_ta biz-certs/Elena-Root.cer \
--https_ta biz-certs/Elena-Root.cer \
--sia_base rsync://wombat.invalid/ \
--sender_name tweedledee \
--recipient_name tweedledum
# Create a child context
time python irbe-cli.py child --self_id 1 --action create --bsc_id 1 --cms_ta biz-certs/Frank-Root.cer
# Need to link irdb to created child and clear conflicting links.
# For now, just do this "manually" in MySQL CLI.
echo '
UPDATE registrant SET rpki_self_id = NULL, rpki_child_id = NULL;
UPDATE registrant SET rpki_self_id = 1, rpki_child_id = 1 WHERE subject_name = "Epilogue Technology Corporation";
' |
mysql -u irdb -p`awk '$1 == "sql-password" {print $3}' irbe.conf` irdb
if test "$1" = "run"
then
rm -rf publication
python rootd.py & rootd=$!
python irdbd.py & irdbd=$!
trap "kill $rpkid $irdbd $rootd" 0 1 2 3 13 15
: Waiting to let daemons start up; sleep 5
date; time python cronjob.py
date; time python testpoke.py -r list
date; time python testpoke.py -r issue
date; time python cronjob.py
date; time python testpoke.py -r list
date; time python testpoke.py -r issue
date; python testpoke.py -r issue |
qh |
sed -n '/^(certificate/,/^)certificate/s/^-//p' |
mimencode -u |
$openssl x509 -noout -inform DER -text
date; time python testpoke.py -r revoke
date; time python testpoke.py -r list
date; time python cronjob.py
date; time python testpoke.py -r list
date; time python cronjob.py
date; time python testpoke.py -r list
date; time python testpoke.py -r issue
date; time python testpoke.py -r revoke
date; time python testpoke.py -r list
date; time python cronjob.py
date; time python testpoke.py -r list
date; time python testpoke.py -r issue
date; time python testpoke.py -r revoke
date; time python testpoke.py -r issue
date; time python testpoke.py -r revoke
date; time python testpoke.py -r issue
date; time python testpoke.py -r revoke
date; time python testpoke.py -r list
date; time python cronjob.py
date; time python testpoke.py -r list
date; time python testpoke.py -r issue
date; time python cronjob.py
date; time python testpoke.py -r list
date
fi
|
