User must log in after DKEK import.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
This commit is contained in:
Pol Henarejos 2023-10-12 17:42:49 +02:00
parent 6b1eeb4004
commit 76522829ef
No known key found for this signature in database
GPG key ID: C0095B7870A4CCD3

View file

@ -14,7 +14,7 @@ sc_backup() {
pkcs11-tool -l --pin 648219 -I > /dev/null 2>&1 pkcs11-tool -l --pin 648219 -I > /dev/null 2>&1
test $? -eq 0 && echo -n "." || exit $? test $? -eq 0 && echo -n "." || exit $?
for i in $(seq 1 $1); do for i in $(seq 1 $1); do
e=$(sc-hsm-tool --pin 648219 --import-dkek-share dkek.${i}.pbe --password testpw 2>&1) e=$(sc-hsm-tool --import-dkek-share dkek.${i}.pbe --password testpw 2>&1)
test $? -eq 0 && echo -n "." || exit $? test $? -eq 0 && echo -n "." || exit $?
grep -q "DKEK share imported" <<< $e && echo -n "." || exit $? grep -q "DKEK share imported" <<< $e && echo -n "." || exit $?
grep -q "DKEK shares : $1" <<< $e && echo -n "." || exit $? grep -q "DKEK shares : $1" <<< $e && echo -n "." || exit $?
@ -22,18 +22,19 @@ sc_backup() {
grep -q "DKEK import pending, $(( $1 - $i ))" <<< $e && echo -n "." || exit $? grep -q "DKEK import pending, $(( $1 - $i ))" <<< $e && echo -n "." || exit $?
fi fi
done done
# Store DKEK, since it is not logged in
pkcs11-tool -l --pin 648219 -I > /dev/null 2>&1
test $? -eq 0 && echo -n "." || exit $?
} }
echo -n " Test single DKEK..." echo -n " Test single DKEK..."
sc_backup 1 sc_backup 1
test $? -eq 0 && echo -e ".\t${OK}" || exit $? test $? -eq 0 && echo -e ".\t${OK}" || exit $?
: '
echo -n " Test multiple DKEK..." echo -n " Test multiple DKEK..."
sc_backup 3 sc_backup 3
test $? -eq 0 && echo -e ".\t${OK}" || exit $? test $? -eq 0 && echo -e ".\t${OK}" || exit $?
rm -rf dkek.*.pbe rm -rf dkek.*.pbe
'
echo " Test backup and restore" echo " Test backup and restore"
algs=("rsa:1024" "rsa:2048" "ec:secp192r1" "ec:secp256r1" "ec:secp384r1" "ec:secp521r1" "ec:brainpoolP256r1" "ec:brainpoolP384r1" "ec:brainpoolP512r1" "ec:secp192k1" "ec:secp256k1") algs=("rsa:1024" "rsa:2048" "ec:secp192r1" "ec:secp256r1" "ec:secp384r1" "ec:secp521r1" "ec:brainpoolP256r1" "ec:brainpoolP384r1" "ec:brainpoolP512r1" "ec:secp192k1" "ec:secp256k1")