tests/nist-pkits/build-chain

   1 #!/usr/bin/perl
   2
   3 use strict;
   4
   5 my $certdir = $ARGV[0];
   6 my $certfile = $ARGV[1];
   7 my $aki;
   8 my $info;
   9 my $list;
  10
  11 if (! -f "$certdir/certinfo.txt") {
  12     system("for i in $certdir/*.crt; do echo -n \$i:; certtool --inder -i < \$i|grep 'Subject Key Id' -A 1|tail -1; done > $certdir/certinfo.txt");
  13 }
  14
  15 do {
  16     print "Parsing $certdir/$certfile...\n";
  17
  18     $info = `certtool --inder -i < $certdir/$certfile`;
  19
  20     print "$info";
  21
  22     if ($info =~ m,Authority Key Identifier.*:\n[\t]*([a-z0-9]+),m) {
  23         $aki = $1;
  24     } else {
  25         die "Could not find AKI";
  26     }
  27
  28     print "Finding AKI $aki...\n";
  29
  30     $list = `cat $certdir/certinfo.txt | grep $aki`;
  31     if ($list =~m,.*/(.*):.*,) {
  32         $list = $1;
  33     } else {
  34         die "Could not find issuer";
  35     }
  36     $certfile = $list;
  37 } while (1);