23 lines
905 B
Bash
Executable file
23 lines
905 B
Bash
Executable file
#!/bin/bash
|
|
cargo build || (echo "Failed to build"; exit 1)
|
|
echo "Working: with Policy" | ./target/debug/clevis-pin-tpm2 encrypt '{"policy_pubkey_path":"./tests/policy_pubkey.json", "policy_ref": "", "policy_path": "./tests/policy_working.json"}' | ./target/debug/clevis-pin-tpm2 decrypt
|
|
# Negative test (non-valid policy)
|
|
token=$(echo Failed | ./target/debug/clevis-pin-tpm2 encrypt '{"policy_pubkey_path":"./tests/policy_pubkey.json", "policy_ref": "", "policy_path": "./tests/policy_broken.json"}')
|
|
res=$(echo "$token" | ./target/debug/clevis-pin-tpm2 decrypt 2>&1)
|
|
ret=$?
|
|
if [ $ret == 0 -a "$res" == "Failed" ]
|
|
then
|
|
echo "Managed to decrypt with invalid policy"
|
|
exit 1
|
|
elif [ $ret == 0 ];
|
|
then
|
|
echo "Success returned but not decrypted"
|
|
exit 1
|
|
elif [[ $res =~ Esys_VerifySignature_Finish() ]]
|
|
then
|
|
echo "Working: with policy with invalid digest"
|
|
else
|
|
echo "Something went wrong: $res"
|
|
exit 1
|
|
fi
|