Changeset 3e800f9 in mod_gnutls for t/Makefile

Timestamp:

Jan 29, 2013, 9:56:00 PM (8 years ago)

Author:

Daniel Kahn Gillmor <dkg@…>

Branches:

debian/master, debian/stretch-backports, jessie-backports, master, msva, proxy-ticket, upstream

Children:

834d926

Parents:

7d1ab49

git-author:

Daniel Kahn Gillmor <dkg@…> (01/29/13 21:40:33)

git-committer:

Daniel Kahn Gillmor <dkg@…> (01/29/13 21:56:00)

Message:

test suite: OpenPGP certificates and secrets

Make ASCII-armored OpenPGP certificates and secret keys for everyone
signed by the "Testing Authority".

File:

• t/Makefile (modified) (3 diffs)

t/Makefile

@@ -26 +26 @@
 ### for setting up a little miniature CA + server + client environment:
 identities := server authority client imposter rogueca
-tokens := x509.pem pubring.gpg secret.key
+tokens := x509.pem secring.gpg secret.key cert.pgp secret.pgp
 all_tokens := $(foreach id,$(identities),$(foreach token,$(tokens),$(id)/$(token)))
 
@@ -40 +40 @@
         certtool --generate-privkey > $@
 
-%/pubring.gpg: %.uid %/secret.key
+%/secring.gpg: %.uid %/secret.key
         rm -f $(dir $@)pubring.gpg $(dir $@)secring.gpg $(dir $@)trustdb.gpg
         PEM2OPENPGP_EXPIRATION=86400 PEM2OPENPGP_USAGE_FLAGS=authenticate,certify pem2openpgp "$$(cat $<)" < $(dir $@)secret.key | GNUPGHOME=$(dir $@) gpg --import
         printf "%s:6:\n" "$$(GNUPGHOME=$(dir $@) gpg --with-colons --list-secret-keys --fingerprint | grep ^fpr: | cut -f 10 -d :)" | GNUPGHOME=$(dir $@) gpg --import-ownertrust
 
+%/gpg.conf: %/secring.gpg
+        printf "default-key %s\n" "$$(GNUPGHOME=$(dir $@) gpg --with-colons --list-secret-keys --fingerprint | grep ^fpr: | cut -f 10 -d :)" > $@
+
+%/secret.pgp: %/secring.gpg
+        GNUPGHOME=$(dir $@) gpg --armor --batch --no-tty --yes --export-secret-key "$$(GNUPGHOME=$(dir $@) gpg --with-colons --list-secret-keys --fingerprint | grep ^fpr: | cut -f 10 -d :)" > $@
+
+%/minimal.pgp: %/secring.gpg
+        GNUPGHOME=$(dir $@) gpg --armor --export "$$(GNUPGHOME=$(dir $@) gpg --with-colons --list-secret-keys --fingerprint | grep ^fpr: | cut -f 10 -d :)" > $@
+
+%/cert.pgp: %/minimal.pgp authority/gpg.conf
+        GNUPGHOME=authority gpg --import $<
+        GNUPGHOME=authority gpg --batch --sign-key --no-tty --yes "$$(GNUPGHOME=$(dir $@) gpg --with-colons --list-secret-keys --fingerprint | grep ^fpr: | cut -f 10 -d :)"
+        GNUPGHOME=authority gpg --armor --export "$$(GNUPGHOME=$(dir $@) gpg --with-colons --list-secret-keys --fingerprint | grep ^fpr: | cut -f 10 -d :)" > $@
+
+# special cases for the authorities' root certs:
 authority/x509.pem: authority.template authority/secret.key
         certtool --generate-self-signed --load-privkey=authority/secret.key --template=authority.template > $@
@@ -62 +77 @@
 
 clean:
-        rm -rf server client authority logs cache outputs setup.done *.template
+        rm -rf server client authority logs cache outputs setup.done server.template
 
 .PHONY: all clean