You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
173 lines
4.4 KiB
173 lines
4.4 KiB
#!/bin/sh |
|
# |
|
# Copyright (c) International Business Machines Corp., 2005 |
|
# |
|
# This program is free software; you can redistribute it and#or modify |
|
# it under the terms of the GNU General Public License as published by |
|
# the Free Software Foundation; either version 2 of the License, or |
|
# (at your option) any later version. |
|
# |
|
# This program is distributed in the hope that it will be useful, but |
|
# WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY |
|
# or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License |
|
# for more details. |
|
# |
|
# You should have received a copy of the GNU General Public License |
|
# along with this program; if not, write to the Free Software |
|
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA |
|
# |
|
|
|
# test_tpm_tools.sh - Run the tpm-tools test suite. |
|
|
|
# Must be root to run the testsuite |
|
#if [ $UID != 0 ] |
|
#then |
|
# echo "FAILED: Must be root to execute this script" |
|
# exit 1 |
|
#fi |
|
|
|
# Set the LTPROOT directory |
|
cd `dirname $0` |
|
export LTPROOT=${PWD} |
|
echo $LTPROOT | grep testscripts > /dev/null 2>&1 |
|
if [ $? -eq 0 ] |
|
then |
|
cd .. |
|
export LTPROOT=${PWD} |
|
fi |
|
|
|
# Set the PATH to include testcase/bin |
|
# and the sbin directories |
|
export LTPBIN=$LTPROOT/testcases/bin |
|
export PATH=$PATH:/sbin:/usr/sbin:/usr/local/sbin:$LTPBIN |
|
|
|
# We will store the logfiles in $LTPROOT/results, so make sure |
|
# it exists. |
|
if [ ! -d $LTPROOT/results ] |
|
then |
|
mkdir $LTPROOT/results |
|
fi |
|
|
|
# Check for programs/daemons/groups... |
|
USER="`whoami`" |
|
RC=0 |
|
if [ -z "$LTPTMP" ] && [ -z "$TMPBASE" ] |
|
then |
|
LTPTMP="/tmp" |
|
else |
|
LTPTMP="$TMPBASE" |
|
fi |
|
export TPM_TMPFILE="$LTPTMP/tst_tpm.err" |
|
rm -f $TPM_TMPFILE 1>/dev/null 2>&1 |
|
|
|
# Check for the expect command |
|
rm -f $TPM_TMPFILE 1>/dev/null 2>&1 |
|
which expect 1>$TPM_TMPFILE 2>&1 |
|
if [ $? -ne 0 ] |
|
then |
|
echo "The 'expect' command is not available. Be sure the expect package has been installed properly" |
|
RC=1 |
|
fi |
|
|
|
# Check for TrouSerS and that it is running |
|
rm -f $TPM_TMPFILE 1>/dev/null 2>&1 |
|
which tcsd 1>$TPM_TMPFILE 2>&1 |
|
if [ $? -ne 0 ] |
|
then |
|
echo "The trousers TSS stack is not available. Be sure trousers has been installed properly" |
|
if [ -f $TPM_TMPFILE ] |
|
then |
|
cat $TPM_TMPFILE |
|
fi |
|
RC=1 |
|
else |
|
rm -f $TPM_TMPFILE 1>/dev/null 2>&1 |
|
ps -ef 1>$TPM_TMPFILE |
|
grep tcsd $TPM_TMPFILE 1>/dev/null |
|
if [ $? -ne 0 ] |
|
then |
|
echo "The trousers TSS stack is not running. Be sure to start the trousers daemon (tcsd)" |
|
RC=1 |
|
fi |
|
fi |
|
|
|
# Make the opencryptoki testing optional |
|
if [ -z "$TPM_NOPKCS11" ] |
|
then |
|
|
|
# Check for the pkcs11 group and that the user is a member of it |
|
grep -q ^pkcs11: /etc/group |
|
if [ $? -ne 0 ] |
|
then |
|
echo "The 'pkcs11' group does not exist. Be sure openCryptoki has been installed properly" |
|
RC=1 |
|
fi |
|
|
|
groups | grep pkcs11 1>/dev/null 2>&1 |
|
if [ $? -ne 0 ] |
|
then |
|
echo "User '$USER' is not a member of the 'pkcs11' group" |
|
RC=1 |
|
fi |
|
|
|
# Check for openCryptoki and that it is running |
|
# Additionally, delete the user's TPM token data store. |
|
rm -f $TPM_TMPFILE 1>/dev/null 2>&1 |
|
which pkcsslotd 1>$TPM_TMPFILE 2>&1 |
|
if [ $? -ne 0 ] |
|
then |
|
echo "The openCryptoki PKCS#11 slot daemon is not available. Be sure openCryptoki has been installed properly" |
|
if [ -f $TPM_TMPFILE ] |
|
then |
|
cat $TPM_TMPFILE |
|
fi |
|
RC=1 |
|
else |
|
rm -f $TPM_TMPFILE 1>/dev/null 2>&1 |
|
ps -ef 1>$TPM_TMPFILE |
|
grep pkcsslotd $TPM_TMPFILE 1>/dev/null |
|
if [ $? -ne 0 ] |
|
then |
|
echo "The openCryptoki PKCS#11 slot daemon is not running. Be sure to start the openCryptoki slot daemon (pkcsslotd)" |
|
RC=1 |
|
else |
|
P11DIR=`which pkcsslotd | sed s-/sbin/pkcsslotd--` |
|
if [ "$P11DIR" = "/usr" ] |
|
then |
|
P11DIR="" |
|
fi |
|
|
|
grep libpkcs11_tpm $P11DIR/var/lib/opencryptoki/pk_config_data 1>/dev/null |
|
if [ $? -ne 0 ] |
|
then |
|
echo "The TPM PKCS#11 token is not active. Be sure openCryptoki has been installed properly" |
|
RC=1 |
|
fi |
|
if [ -d $P11DIR/var/lib/opencryptoki/tpm/$USER ] |
|
then |
|
rm -rf $P11DIR/var/lib/opencryptoki/tpm/$USER |
|
fi |
|
fi |
|
fi |
|
fi |
|
|
|
if [ $RC -ne 0 ] |
|
then |
|
exit 1 |
|
fi |
|
|
|
# Set known password values |
|
export OWN_PWD="OWN PWD" |
|
export NEW_OWN_PWD="NEW OWN PWD" |
|
export SRK_PWD="SRK PWD" |
|
export NEW_SRK_PWD="NEW SRK PWD" |
|
export P11_SO_PWD="P11 SO PWD" |
|
export NEW_P11_SO_PWD="NEW P11 SO PWD" |
|
export P11_USER_PWD="P11 USER PWD" |
|
export NEW_P11_USER_PWD="NEW P11 USER PWD" |
|
|
|
echo "Running the tpm-tools testsuite..." |
|
$LTPROOT/bin/ltp-pan -d 5 -S -a $LTPROOT/results/tpm_tools -n ltp-tpm-tools -l $LTPROOT/results/tpm_tools.logfile -o $LTPROOT/results/tpm_tools.outfile -p -f $LTPROOT/runtest/tpm_tools |
|
|
|
echo "Done." |
|
exit 0
|
|
|