test/recipes/03-test_fipsinstall.t

31 my $provconf = srctop_file("test", "fips-and-base.cnf");
52 # Read in the text input file 'fips.cnf'
67     return replace_line_file_internal('fips.cnf', $srch, $rep, $outfile);
70 # Read in the text input file 'test/fips.cnf'
71 # and replace the .cnf file used in
72 # .include fipsmodule.cnf with a new value in $value.
77     my $srch = qr/fipsmodule.cnf/;
79     return replace_line_file_internal(srctop_file("test", 'fips.cnf'),
84 ok(!run(app(['openssl', 'fipsinstall', '-out', 'fips.cnf', '-module',
98 # output a fips.cnf file containing mac data
99 ok(run(app(['openssl', 'fipsinstall', '-out', 'fips.cnf', '-module', $infile,
105 # verify the fips.cnf file
106 ok(run(app(['openssl', 'fipsinstall', '-in', 'fips.cnf', '-module', $infile,
112 ok(replace_line_file('module-mac', '', 'fips_no_module_mac.cnf')
114                 '-in', 'fips_no_module_mac.cnf',
121 ok(replace_line_file('install-mac', '', 'fips_no_install_mac.cnf')
123                 '-in', 'fips_no_install_mac.cnf',
131                      'fips_bad_module_mac.cnf')
133                 '-in', 'fips_bad_module_mac.cnf',
141                      'fips_bad_install_mac.cnf')
143                 '-in', 'fips_bad_install_mac.cnf',
151                      'fips_bad_indicator.cnf')
153                 '-in', 'fips_bad_indicator.cnf',
160 # fail to verify the fips.cnf file if a different key is used
161 ok(!run(app(['openssl', 'fipsinstall', '-in', 'fips.cnf', '-module', $infile,
167 # fail to verify the fips.cnf file if a different mac digest is used
168 ok(!run(app(['openssl', 'fipsinstall', '-in', 'fips.cnf', '-module', $infile,
175 ok(!run(app(['openssl', 'fipsinstall', '-out', 'fips.cnf', '-module', $infile,
182 ok(!run(app(['openssl', 'fipsinstall', '-out', 'fips_fail.cnf', '-module', $infile,
189 ok(!run(app(['openssl', 'fipsinstall', '-out', 'fips_fail.cnf', '-module', $infile,
196 ok(!run(app(['openssl', 'fipsinstall', '-out', 'fips_fail.cnf', '-module', $infile,
203 ok(!run(app(['openssl', 'fipsinstall', '-out', 'fips_fail.cnf', '-module', $infile,
210 ok(!run(app(['openssl', 'fipsinstall', '-out', 'fips_fail.cnf', '-module', $infile,
221     ok(!run(app(['openssl', 'fipsinstall', '-out', 'fips.cnf', '-module', $infile,
240     ok(!run(app(['openssl', 'fipsinstall', '-out', 'fips.cnf', '-module', $infile,
253     ok(!run(app(['openssl', 'fipsinstall', '-out', 'fips.cnf', '-module', $infile,
262 ok(replace_parent_line_file('fips.cnf', 'fips_parent.cnf')
263    && run(app(['openssl', 'fipsinstall', '-config', 'fips_parent.cnf'])),
266 ok(replace_parent_line_file('fips_no_module_mac.cnf',
267                             'fips_parent_no_module_mac.cnf')
269                 '-config', 'fips_parent_no_module_mac.cnf'])),
272 ok(replace_parent_line_file('fips_no_install_mac.cnf',
273                             'fips_parent_no_install_mac.cnf')
275                 '-config', 'fips_parent_no_install_mac.cnf'])),
278 ok(replace_parent_line_file('fips_bad_indicator.cnf',
279                             'fips_parent_bad_indicator.cnf')
281                 '-config', 'fips_parent_bad_indicator.cnf'])),
285 ok(replace_parent_line_file('fips_bad_install_mac.cnf',
286                             'fips_parent_bad_install_mac.cnf')
288                 '-config', 'fips_parent_bad_install_mac.cnf'])),
291 ok(replace_parent_line_file('fips_bad_module_mac.cnf',
292                             'fips_parent_bad_module_mac.cnf')
294                 '-config', 'fips_parent_bad_module_mac.cnf'])),
298 my $stconf = "fipsmodule_selftest.cnf";