1#!/bin/bash 2# SPDX-License-Identifier: GPL-2.0 3 4set -e 5set -u 6set -o pipefail 7 8VERBOSE="${SELFTESTS_VERBOSE:=0}" 9LOG_FILE="$(mktemp /tmp/verify_sig_setup.log.XXXXXX)" 10 11x509_genkey_content="\ 12[ req ] 13default_bits = 2048 14distinguished_name = req_distinguished_name 15prompt = no 16string_mask = utf8only 17x509_extensions = myexts 18 19[ req_distinguished_name ] 20CN = eBPF Signature Verification Testing Key 21 22[ myexts ] 23basicConstraints=critical,CA:FALSE 24keyUsage=digitalSignature 25subjectKeyIdentifier=hash 26authorityKeyIdentifier=keyid 27" 28 29usage() 30{ 31 echo "Usage: $0 <setup|cleanup <existing_tmp_dir>" 32 exit 1 33} 34 35setup() 36{ 37 local tmp_dir="$1" 38 39 echo "${x509_genkey_content}" > ${tmp_dir}/x509.genkey 40 41 openssl req -new -nodes -utf8 -sha256 -days 36500 \ 42 -batch -x509 -config ${tmp_dir}/x509.genkey \ 43 -outform PEM -out ${tmp_dir}/signing_key.pem \ 44 -keyout ${tmp_dir}/signing_key.pem 2>&1 45 46 openssl x509 -in ${tmp_dir}/signing_key.pem -out \ 47 ${tmp_dir}/signing_key.der -outform der 48 49 key_id=$(cat ${tmp_dir}/signing_key.der | keyctl padd asymmetric ebpf_testing_key @s) 50 51 keyring_id=$(keyctl newring ebpf_testing_keyring @s) 52 keyctl link $key_id $keyring_id 53} 54 55cleanup() { 56 local tmp_dir="$1" 57 58 keyctl unlink $(keyctl search @s asymmetric ebpf_testing_key) @s 59 keyctl unlink $(keyctl search @s keyring ebpf_testing_keyring) @s 60 rm -rf ${tmp_dir} 61} 62 63catch() 64{ 65 local exit_code="$1" 66 local log_file="$2" 67 68 if [[ "${exit_code}" -ne 0 ]]; then 69 cat "${log_file}" >&3 70 fi 71 72 rm -f "${log_file}" 73 exit ${exit_code} 74} 75 76main() 77{ 78 [[ $# -ne 2 ]] && usage 79 80 local action="$1" 81 local tmp_dir="$2" 82 83 [[ ! -d "${tmp_dir}" ]] && echo "Directory ${tmp_dir} doesn't exist" && exit 1 84 85 if [[ "${action}" == "setup" ]]; then 86 setup "${tmp_dir}" 87 elif [[ "${action}" == "cleanup" ]]; then 88 cleanup "${tmp_dir}" 89 else 90 echo "Unknown action: ${action}" 91 exit 1 92 fi 93} 94 95trap 'catch "$?" "${LOG_FILE}"' EXIT 96 97if [[ "${VERBOSE}" -eq 0 ]]; then 98 # Save the stderr to 3 so that we can output back to 99 # it incase of an error. 100 exec 3>&2 1>"${LOG_FILE}" 2>&1 101fi 102 103main "$@" 104rm -f "${LOG_FILE}" 105