diff options
| author | James Bottomley <James.Bottomley@HansenPartnership.com> | 2020-05-29 10:51:11 -0700 |
|---|---|---|
| committer | James Bottomley <James.Bottomley@HansenPartnership.com> | 2020-05-29 10:51:11 -0700 |
| commit | 50b4f9446f03ca87e71966fef60ef35ce454bd7b (patch) | |
| tree | 15b960c92c21347a29be6f8e62b351e46d9ff1af | |
| parent | f9c5f8bc5889dc922cfb2f454b82c866340243fa (diff) | |
| download | openssl-pkcs11-export-50b4f9446f03ca87e71966fef60ef35ce454bd7b.tar.gz | |
Add test to make sure we don't get a segfault on a problem config file
Now the token should fail to initialize and p11tool should say so
Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>
| -rw-r--r-- | .gitignore | 1 | ||||
| -rw-r--r-- | tests/Makefile.am | 2 | ||||
| -rwxr-xr-x | tests/p11tool_checks.sh | 9 |
3 files changed, 11 insertions, 1 deletions
@@ -23,3 +23,4 @@ tmp.* *.key *.crt op.conf +stderr diff --git a/tests/Makefile.am b/tests/Makefile.am index 0d57e70..446718e 100644 --- a/tests/Makefile.am +++ b/tests/Makefile.am @@ -14,7 +14,7 @@ AM_TESTS_ENVIRONMENT = OPENSSL_PKCS11_CONF=$(abs_srcdir)/op.conf; \ export OPENSSL_PKCS11_CONF srcdir OPENSSL_CONF; TEST_EXTENSIONS = .sh -CLEANFILES = key-*.* op.conf *.msg *.txt +CLEANFILES = key-*.* op.conf *.msg *.txt stderr check_LTLIBRARIES = testengine.la diff --git a/tests/p11tool_checks.sh b/tests/p11tool_checks.sh index d0a6ff0..ec4e3ef 100755 --- a/tests/p11tool_checks.sh +++ b/tests/p11tool_checks.sh @@ -26,3 +26,12 @@ export GNUTLS_PIN=Passw0rd ## ${CERTTOOL} --generate-self-signed --load-privkey 'pkcs11:manufacturer=openssl-pkcs11-export;token=key-pass;object=key-pass' --template=tmp.tmpl > tmp.crt || exit 1 certtool --verify --infile tmp.crt --load-ca-cert tmp.crt || exit 1 + +## +# test operation with no config file (must always be last in the file) +## +OPENSSL_PKCS11_CONF=/random/nonexistent/config/file +# make sure p11tool returns an error +${P11TOOL} --list-all 2> stderr && exit 1 +# and that the error says the provider failed to initialize +grep -q 'pkcs11_add_provider: PKCS #11 error' stderr || exit 1 |