blob: 94b8790bee1dc53e6f2089a3f3ffa58930e4a905 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
|
# Required packages (Debian 9/stretch):
# libengine-pkcs11-openssl: /usr/lib/x86_64-linux-gnu/engines-1.1/pkcs11.so
# softhsm2: /usr/bin/softhsm2-util
# gnutls-bin: /usr/bin/p11tool
# openssl: /usr/bin/openssl
TEXT = "A foo is a bar"
SOFTHSM = /usr/bin/softhsm2-util
SOFTHSM_PROVIDER = /usr/lib/softhsm/libsofthsm2.so
P11P_PROVIDER = /home/linus/usr/lib/pkcs11/p11-kit-client.so
p11p-softhsm: testsig.hsm.p11p.pem
( \
P11_ENV=$$(p11-kit server $(SOFTHSM_PROVIDER)); \
eval "$$P11_ENV"; \
./do-verify.sh ./openssl.p11p.cnf $(P11P_PROVIDER) $< "$(TEXT)"; \
p11-kit server --kill > /dev/null; \
)
direct-softhsm: testsig.hsm.pem
./do-verify.sh ./openssl.direct.cnf $(SOFTHSM_PROVIDER) $< "$(TEXT)"
softhsm-token-setup: softhsm-token-setup.stamp
softhsm-token-setup.stamp: softhsm/tokens testkey.pkcs8
test -x $(SOFTHSM)
( \
BASEDIR=$$(pwd); \
export SOFTHSM2_CONF=$$BASEDIR/softhsm/softhsm2.conf; \
echo "directories.tokendir = $$BASEDIR/softhsm/tokens/" > $$SOFTHSM2_CONF; \
${SOFTHSM} --init-token --free --label mytoken --so-pin ffffff --pin ffff; \
${SOFTHSM} --import testkey.pkcs8 --token mytoken --label mykey --id 00 --pin ffff; \
)
touch $@
softhsm/tokens:
mkdir -p $@
testkey.pkcs8: testkey.pem
openssl pkey -in $< -outform pem -out $@
testkey.pem:
openssl genrsa -out $@ 2048
testsig.local.pem: testkey.pem
echo $(TEXT) | openssl dgst -sha256 -sign testkey.pem -out $@
testsig.hsm.pem: softhsm-token-setup
./do-sign.sh ./openssl.direct.cnf $(SOFTHSM_PROVIDER) $@ "$(TEXT)"
testsig.hsm.p11p.pem: softhsm-token-setup
( \
P11_ENV=$$(p11-kit server $(SOFTHSM_PROVIDER)); \
eval "$$P11_ENV"; \
./do-sign.sh ./openssl.p11p.cnf $(P11P_PROVIDER) $@ "$(TEXT)"; \
p11-kit server --kill > /dev/null; \
)
server-running:
# FIXME: use env printed to do 'p11-kit server --kill', at some point
clean:
-rm -r softhsm
-rm softhsm-token-setup.stamp
-rm testkey.pem testkey.pkcs8
-rm testsig.*.pem
.PHONY: clean
|
