1# $OpenBSD: Makefile,v 1.3 2020/10/17 16:31:20 tb Exp $ 2 3# Copyright (c) 2020 Bob Beck <beck@openbsd.org> 4# 5# Permission to use, copy, modify, and distribute this software for any 6# purpose with or without fee is hereby granted, provided that the above 7# copyright notice and this permission notice appear in all copies. 8# 9# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES 10# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF 11# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR 12# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES 13# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 14# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 15# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 16 17CLEANFILES += ktrace.out server.der client.der revoked.der 18 19ocsp-start: 20 /usr/bin/openssl ocsp -port 127.0.0.1:2560 -text -sha256 -index ${.CURDIR}/index.txt -CA ${.CURDIR}/chain.pem -rkey ${.CURDIR}/ocsp-localhost.key.pem -rsigner ${.CURDIR}/ocsp-localhost.pem -nmin 1 > /dev/null 2>&1 & 21 sleep .1 # give openssl some time to spin up 22 pgrep -xf '/usr/bin/openssl ocsp -port 127.0.0.1:2560.*' 23 24ocsp-stop: 25 pkill -xf '/usr/bin/openssl ocsp -port 127.0.0.1:2560.*' 26 27REGRESS_TARGETS += run-regress-ocspcheck 28run-regress-ocspcheck: ocsp-start 29 /usr/sbin/ocspcheck -v \ 30 -C ${.CURDIR}/chain.pem \ 31 -o ${.OBJDIR}/server.der \ 32 ${.CURDIR}/server.crt 33 /usr/sbin/ocspcheck -v \ 34 -C ${.CURDIR}/chain.pem \ 35 -o ${.OBJDIR}/client.der \ 36 ${.CURDIR}/client.crt 37 /usr/sbin/ocspcheck -v \ 38 -C ${.CURDIR}/chain.pem \ 39 -i ${.OBJDIR}/server.der \ 40 ${.CURDIR}/server.crt 41 /usr/sbin/ocspcheck -v \ 42 -C ${.CURDIR}/chain.pem \ 43 -i ${.OBJDIR}/client.der \ 44 ${.CURDIR}/client.crt 45 ${.CURDIR}/failocspcheck -v \ 46 -C ${.CURDIR}/chain.pem \ 47 -o ${.OBJDIR}/revoked.der \ 48 ${.CURDIR}/revoked.crt 49 ${.CURDIR}/failocspcheck -v \ 50 -C ${.CURDIR}/chain.pem \ 51 -i ${.OBJDIR}/revoked.der \ 52 ${.CURDIR}/revoked.crt 53 ${.CURDIR}/failocspcheck -v \ 54 -C ${.CURDIR}/chain.pem \ 55 -i ${.OBJDIR}/client.der \ 56 ${.CURDIR}/revoked.crt 57 ${.CURDIR}/failocspcheck -v \ 58 -C ${.CURDIR}/chain.pem \ 59 -i ${.OBJDIR}/server.der \ 60 ${.CURDIR}/client.crt 61 ${.CURDIR}/failocspcheck -v \ 62 -C ${.CURDIR}/chain.pem \ 63 -i ${.OBJDIR}/revoked.der \ 64 ${.CURDIR}/client.crt 65 ${.CURDIR}/failocspcheck -v \ 66 -C ${.CURDIR}/chain.pem \ 67 -i ${.CURDIR}/old-client-staple.der \ 68 ${.CURDIR}/client.crt 69 70REGRESS_TARGETS += run-regress-cleanup 71run-regress-cleanup: 72 ${.MAKE} -C ${.CURDIR} ocsp-stop 73 74.PHONY: ${REGRESS_TARGETS} ocsp-start ocsp-stop 75 76.include <bsd.regress.mk> 77