qa/712

   1 #!/bin/sh
   2 # PCP QA Test No. 712
   3 #
   4 # Exercise encrypted communications between pmcd/clients
   5 # Copyright (c) 2012-2013 Red Hat.
   6 #
   7
   8 seq=`basename $0`
   9 echo "QA output created by $seq"
  10
  11 . ./common.secure
  12 nss_notrun_checks
  13
  14 _cleanup()
  15 {
  16     nss_cleanup
  17
  18     $sudo $PCP_RC_DIR/pcp restart 2>&1 | _filter_pcp_stop | _filter_pcp_start
  19     _wait_for_pmcd
  20     _wait_for_pmlogger
  21
  22     $sudo rm -f $tmp.*
  23     $sudo rm -fr $tmp
  24 }
  25
  26 status=1        # failure is the default!
  27 $sudo rm -rf $tmp.* $seq.full
  28 trap "_cleanup; exit \$status" 0 1 2 3 15
  29 $sudo $PCP_RC_DIR/pcp stop | _filter_pcp_stop
  30
  31 # real QA test starts here
  32 nss_backup
  33 nss_setup_randomness
  34
  35 # verify that local clients cannot establish a connection
  36 # without having a valid certificate database setup.
  37 nss_setup_collector false
  38
  39 nss_setup_empty_userdb
  40 echo "checking client, no certificate at all.  should fail..." | tee -a $seq.full
  41 export PCP_SECURE_SOCKETS=1
  42 yes | pminfo -h $hostname -f hinv.ncpu 2>&1 | tee -a $seq.full | nss_filter_pminfo
  43 unset PCP_SECURE_SOCKETS
  44
  45 # verify that local clients are prompted to establish a connection
  46 # when a valid collectoer certificate exists but no client config.
  47 nss_setup_collector true $qahost $hostname
  48
  49 nss_setup_empty_userdb
  50 echo "checking client, server certificate only.  should prompt and fail..." | tee -a $seq.full
  51 export PCP_SECURE_SOCKETS=1
  52 yes | pminfo -h $hostname -f hinv.ncpu 2>&1 | tee -a $seq.full | nss_filter_pminfo
  53 unset PCP_SECURE_SOCKETS
  54
  55 # make the new certificate visible to just this user
  56 echo "checking client, user certificate only.  should pass..."
  57 nss_setup_empty_userdb
  58 nss_import_cert_userdb
  59 export PCP_SECURE_SOCKETS=1
  60 yes | pminfo -h $hostname -f hinv.ncpu 2>&1 | tee -a $seq.full | nss_filter_pminfo
  61 unset PCP_SECURE_SOCKETS
  62
  63 # success, all done
  64 status=0
  65 exit