Merge branch 'extsign'

12 files changed, 110 insertions, 2 deletions

diff --git a/test/config/check.config b/test/config/check.config
new file mode 100644
index 0000000..4180771
--- /dev/null
+++ b/test/config/check.config
@@ -0,0 +1,4 @@
+%% -*- erlang -*-
+[{lager,
+  [{handlers,
+    [{lager_console_backend, warning}]}]}].
diff --git a/test/config/frontend-1.config b/test/config/frontend-1.config
index 79d887d..e7e8af2 100644
--- a/test/config/frontend-1.config
+++ b/test/config/frontend-1.config
@@ -30,6 +30,31 @@
    {entryhash_root_path, "tests/machine/machine-1/db/entryhash/"},
    {treesize_path, "tests/machine/machine-1/db/treesize"},
    {indexforhash_root_path, "tests/machine/machine-1/db/certindex/"},
+   {sth_path, "tests/machine/machine-1/db/sth"},
    {storage_nodes, ["https://127.0.0.1:8081/ct/storage/"]},
-   {storage_nodes_quorum, 1}
+   {storage_nodes_quorum, 1},
+   {publickey_path, "publickeys"},
+   {services, [ht]},
+   {log_public_key, "test/eckey-public.pem"},
+   {own_key, {"frontend-1", "privatekeys/frontend-1-private.pem"}},
+   {signing_node, "https://127.0.0.1:8088/ct/signing/"},
+   {allowed_clients, [{"/ct/frontend/sendentry", ["merge-1"]},
+                      {"/ct/frontend/sendlog", ["merge-1"]},
+                      {"/ct/frontend/sendsth", ["merge-1"]},
+                      {"/ct/frontend/currentposition", ["merge-1"]},
+                      {"/ct/frontend/missingentries", ["merge-1"]},
+                      {"/ct/v1/add-chain", noauth},
+                      {"/ct/v1/add-pre-chain", noauth},
+                      {"/ct/v1/get-sth", noauth},
+                      {"/ct/v1/get-sth-consistency", noauth},
+                      {"/ct/v1/get-proof-by-hash", noauth},
+                      {"/ct/v1/get-entries", noauth},
+                      {"/ct/v1/get-entry-and-proof", noauth},
+                      {"/ct/v1/get-roots", noauth}
+                     ]},
+   {allowed_servers, [{"/ct/storage/sendentry", ["storage-1"]},
+                      {"/ct/storage/entrycommitted", ["storage-1"]},
+                      {"/ct/signing/sct", ["signing-1"]},
+                      {"/ct/signing/sth", ["signing-1"]}
+                     ]}
   ]}].
diff --git a/test/config/privatekeys/frontend-1-private.pem b/test/config/privatekeys/frontend-1-private.pem
new file mode 100644
index 0000000..718efda
--- /dev/null
+++ b/test/config/privatekeys/frontend-1-private.pem
@@ -0,0 +1,5 @@
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEIPER9WFIxLXvXDHTwPvGnNvBAKOB+/6ahpvuCjtlzOU8oAoGCCqGSM49
+AwEHoUQDQgAEibeLqrVV7QAE6Wytzpxi4sd0JtGNGRfXNZ9r9CNIVudDnNjtFRF5
+gwm/AxUWEuBXjnbVvq4HOLqZ0bP2qc+uRQ==
+-----END EC PRIVATE KEY-----
diff --git a/test/config/privatekeys/merge-1-private.pem b/test/config/privatekeys/merge-1-private.pem
new file mode 100644
index 0000000..55d50b1
--- /dev/null
+++ b/test/config/privatekeys/merge-1-private.pem
@@ -0,0 +1,5 @@
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEIBQcXtOVX29dno+aYqGddVOpg23FfhJmrMFOpOegyYZxoAoGCCqGSM49
+AwEHoUQDQgAExHAsjFFgKFlrcCveHhVdjE7A/Uh0gXdAeN9+P7SDGgRNe0WWDjCr
+0Da3c8X5JulA1cOLlQ0h2B67Yp3WZ9ONHg==
+-----END EC PRIVATE KEY-----
diff --git a/test/config/privatekeys/signing-1-private.pem b/test/config/privatekeys/signing-1-private.pem
new file mode 100644
index 0000000..0c9f1ac
--- /dev/null
+++ b/test/config/privatekeys/signing-1-private.pem
@@ -0,0 +1,5 @@
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEICQ+kchWtj3ZwGhzz+QkKl/CM0fsfQCDtI+1Cb3GID+moAoGCCqGSM49
+AwEHoUQDQgAEeVsqn8x1CWv4BK9+o6qQqVt+lQ7+dI6VoiwwNOT2CAvocdYHzzqW
+2/dstQZIiYSdUw1SWQMR+7fTTRDZh5bDoQ==
+-----END EC PRIVATE KEY-----
diff --git a/test/config/privatekeys/storage-1-private.pem b/test/config/privatekeys/storage-1-private.pem
new file mode 100644
index 0000000..b68d2a9
--- /dev/null
+++ b/test/config/privatekeys/storage-1-private.pem
@@ -0,0 +1,5 @@
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEIAjVa6lTbhiNUfrfTGELRXqHSHF0nuk13lKF8NSHzU07oAoGCCqGSM49
+AwEHoUQDQgAE1vFWiMT9PItJGvyhMKPF5TnFirHPSh5u5swetajmNLyClWIDGXql
+RlXlcPwuKxTISI4rFJATBkKhNjvSZ5L3oA==
+-----END EC PRIVATE KEY-----
diff --git a/test/config/publickeys/frontend-1.pem b/test/config/publickeys/frontend-1.pem
new file mode 100644
index 0000000..938ef29
--- /dev/null
+++ b/test/config/publickeys/frontend-1.pem
@@ -0,0 +1,4 @@
+-----BEGIN PUBLIC KEY-----
+MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEibeLqrVV7QAE6Wytzpxi4sd0JtGN
+GRfXNZ9r9CNIVudDnNjtFRF5gwm/AxUWEuBXjnbVvq4HOLqZ0bP2qc+uRQ==
+-----END PUBLIC KEY-----
diff --git a/test/config/publickeys/merge-1.pem b/test/config/publickeys/merge-1.pem
new file mode 100644
index 0000000..95a75f7
--- /dev/null
+++ b/test/config/publickeys/merge-1.pem
@@ -0,0 +1,4 @@
+-----BEGIN PUBLIC KEY-----
+MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAExHAsjFFgKFlrcCveHhVdjE7A/Uh0
+gXdAeN9+P7SDGgRNe0WWDjCr0Da3c8X5JulA1cOLlQ0h2B67Yp3WZ9ONHg==
+-----END PUBLIC KEY-----
diff --git a/test/config/publickeys/signing-1.pem b/test/config/publickeys/signing-1.pem
new file mode 100644
index 0000000..cc5f472
--- /dev/null
+++ b/test/config/publickeys/signing-1.pem
@@ -0,0 +1,4 @@
+-----BEGIN PUBLIC KEY-----
+MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEeVsqn8x1CWv4BK9+o6qQqVt+lQ7+
+dI6VoiwwNOT2CAvocdYHzzqW2/dstQZIiYSdUw1SWQMR+7fTTRDZh5bDoQ==
+-----END PUBLIC KEY-----
diff --git a/test/config/publickeys/storage-1.pem b/test/config/publickeys/storage-1.pem
new file mode 100644
index 0000000..0b862a1
--- /dev/null
+++ b/test/config/publickeys/storage-1.pem
@@ -0,0 +1,4 @@
+-----BEGIN PUBLIC KEY-----
+MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE1vFWiMT9PItJGvyhMKPF5TnFirHP
+Sh5u5swetajmNLyClWIDGXqlRlXlcPwuKxTISI4rFJATBkKhNjvSZ5L3oA==
+-----END PUBLIC KEY-----
diff --git a/test/config/signing-1.config b/test/config/signing-1.config
new file mode 100644
index 0000000..a11bdeb
--- /dev/null
+++ b/test/config/signing-1.config
@@ -0,0 +1,35 @@
+%% catlfish configuration file (-*- erlang -*-)
+
+[{sasl,
+  [{sasl_error_logger, false},
+   {errlog_type, error},
+   {error_logger_mf_dir, "log"},
+   {error_logger_mf_maxbytes, 10485760},	% 10 MB
+   {error_logger_mf_maxfiles, 10}]},
+ {catlfish,
+  [{known_roots_path, "known_roots"},
+   {https_servers,
+    [{signing_https_api, "127.0.0.1", 8088, signing}
+    ]},
+   {https_certfile, "catlfish/webroot/certs/webcert.pem"},
+   {https_keyfile, "catlfish/webroot/keys/webkey.pem"},
+   {https_cacertfile, "catlfish/webroot/certs/webcert.pem"}
+  ]},
+ {lager,
+  [{handlers,
+    [{lager_console_backend, info},
+     {lager_file_backend, [{file, "signing-1-error.log"}, {level, error}]},
+     {lager_file_backend, [{file, "signing-1-debug.log"}, {level, debug}]},
+     {lager_file_backend, [{file, "signing-1-console.log"}, {level, info}]}
+    ]}
+  ]},
+ {plop,
+  [{publickey_path, "publickeys"},
+   {services, [sign]},
+   {log_private_key, "test/eckey.pem"},
+   {log_public_key, "test/eckey-public.pem"},
+   {own_key, {"signing-1", "privatekeys/signing-1-private.pem"}},
+   {allowed_clients, [{"/ct/signing/sct", ["frontend-1"]},
+                      {"/ct/signing/sth", ["merge-1"]}
+                     ]}
+  ]}].
diff --git a/test/config/storage-1.config b/test/config/storage-1.config
index b176e1f..005a8ad 100644
--- a/test/config/storage-1.config
+++ b/test/config/storage-1.config
@@ -28,4 +28,12 @@
    {newentries_path, "tests/machine/machine-1/db/newentries"},
    {entryhash_root_path, "tests/machine/machine-1/db/entryhash/"},
    {treesize_path, "tests/machine/machine-1/db/treesize"},
-   {indexforhash_root_path, "tests/machine/machine-1/db/certindex/"}]}].
+   {indexforhash_root_path, "tests/machine/machine-1/db/certindex/"},
+   {publickey_path, "publickeys"},
+   {own_key, {"storage-1", "privatekeys/storage-1-private.pem"}},
+   {allowed_clients, [{"/ct/storage/sendentry", ["frontend-1"]},
+                      {"/ct/storage/entrycommitted", ["frontend-1"]},
+                      {"/ct/storage/fetchnewentries", ["merge-1"]},
+                      {"/ct/storage/getentry", noauth}
+                     ]}
+]}].