1#! /bin/csh -f 2# 3# Build trust settings needed for the test script trustSettings.scr. 4# The result is placed in userTrustSettings.plist in the build directory. 5# 6if ( $#argv != 0 ) then 7 echo "Usage: makeTrustSettings" 8 exit(1) 9endif 10 11set BUILD_DIR=$LOCAL_BUILD_DIR 12set TRUST_SETTINGS=userTrustSettings.plist 13set TRUST_SETTINGS_PATH=$BUILD_DIR/$TRUST_SETTINGS 14 15echo Creating empty $TRUST_SETTINGS in build directory... 16rm -f "$TRUST_SETTINGS_PATH" 17security add-trusted-cert -o "$TRUST_SETTINGS_PATH" || exit(1) 18 19set SECTOOL=security 20set SECCMD="$SECTOOL add-trusted-cert -i $TRUST_SETTINGS_PATH -o $TRUST_SETTINGS_PATH" 21set cmd="$SECCMD -p ssl debugRoot.cer" 22echo $cmd 23$cmd || exit(1) 24 25# allowedError = CSSMERR_APPLETP_HOSTNAME_MISMATCH 26set cmd="$SECCMD -p ssl -e -2147408896 -r unspecified localhost.cer " 27echo $cmd 28$cmd || exit(1) 29 30# allowedError = CSSMERR_APPLETP_CS_BAD_CERT_CHAIN_LENGTH 31set cmd="$SECCMD -p swUpdate -e -2147408849 -r unspecified csLeafShortPath.cer" 32echo $cmd 33$cmd || exit(1) 34 35set cmd="$SECCMD -p swUpdate csRoot.cer" 36echo $cmd 37$cmd || exit(1) 38 39# allowedError = CSSMERR_TP_CERT_REVOKED 40set cmd="$SECCMD -e -2147409652 -r unspecified crlTestLeaf.cer" 41echo $cmd 42$cmd || exit(1) 43 44set cmd="$SECCMD crlTestRoot.cer" 45echo $cmd 46$cmd || exit(1) 47 48# default root setting for SMIME : Deny 49set cmd="$SECCMD -D -p smime -r deny" 50echo $cmd 51$cmd || exit(1) 52