78 lines
2.0 KiB
Bash
Executable File
78 lines
2.0 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
set -e
|
|
|
|
cd "$(dirname $0)"
|
|
|
|
# Run this script to generate files used by tests.
|
|
|
|
echo "Creating protosets..."
|
|
protoc testing/test.proto \
|
|
--include_imports \
|
|
--descriptor_set_out=testing/test.protoset
|
|
|
|
protoc testing/example.proto \
|
|
--include_imports \
|
|
--descriptor_set_out=testing/example.protoset
|
|
|
|
protoc testing/jsonpb_test_proto/test_objects.proto \
|
|
--go_out=paths=source_relative:.
|
|
|
|
echo "Creating certs for TLS testing..."
|
|
if ! hash certstrap 2>/dev/null; then
|
|
# certstrap not found: try to install it
|
|
go get github.com/square/certstrap
|
|
go install github.com/square/certstrap
|
|
fi
|
|
|
|
function cs() {
|
|
certstrap --depot-path testing/tls "$@" --passphrase ""
|
|
}
|
|
|
|
rm -rf testing/tls
|
|
|
|
# Create CA
|
|
cs init --years 10 --common-name ca
|
|
|
|
# Create client cert
|
|
cs request-cert --common-name client
|
|
cs sign client --years 10 --CA ca
|
|
|
|
# Create server cert
|
|
cs request-cert --common-name server --ip 127.0.0.1 --domain localhost
|
|
cs sign server --years 10 --CA ca
|
|
|
|
# Create another server cert for error testing
|
|
cs request-cert --common-name other --ip 1.2.3.4 --domain foobar.com
|
|
cs sign other --years 10 --CA ca
|
|
|
|
# Create another CA and client cert for more
|
|
# error testing
|
|
cs init --years 10 --common-name wrong-ca
|
|
cs request-cert --common-name wrong-client
|
|
cs sign wrong-client --years 10 --CA wrong-ca
|
|
|
|
# Create expired cert
|
|
cs request-cert --common-name expired --ip 127.0.0.1 --domain localhost
|
|
cs sign expired --years 0 --CA ca
|
|
|
|
# Create DER PKCS12 file
|
|
openssl x509 -outform der -in tls/ca.crt -out tls/ca.der
|
|
openssl x509 -outform der -in tls/client.crt -out tls/client.der
|
|
openssl x509 -outform der -in tls/client.crt -out tls/client.der
|
|
openssl x509 -text -in tls/client.crt > tls/client.cer
|
|
sed '1s/^/invalidGuess/' tls/client.cer > tls/client.guess
|
|
openssl pkcs12 -export \
|
|
-in tls/client.crt \
|
|
-inkey tls/client.key \
|
|
-certfile tls/ca.crt \
|
|
-out tls/client.pfx \
|
|
-password pass:
|
|
openssl pkcs12 -export \
|
|
-in tls/client.crt \
|
|
-inkey tls/client.key \
|
|
-certfile tls/ca.crt \
|
|
-out tls/client_pass.pfx \
|
|
-password pass:pfxpassword
|
|
|