selftests/bpf/verify_sig_setup.sh

2 # SPDX-License-Identifier: GPL-2.0
4 set -e
5 set -u
6 set -o pipefail
23 basicConstraints=critical,CA:FALSE
41 	openssl req -new -nodes -utf8 -sha256 -days 36500 \
42 			-batch -x509 -config ${tmp_dir}/x509.genkey \
43 			-outform PEM -out ${tmp_dir}/signing_key.pem \
44 			-keyout ${tmp_dir}/signing_key.pem 2>&1
46 	openssl x509 -in ${tmp_dir}/signing_key.pem -out \
47 		${tmp_dir}/signing_key.der -outform der
60 	rm -rf ${tmp_dir}
66 	data_file=${tmp_dir}/data-file
67 	sig_file=${tmp_dir}/sig-file
69 	fsverity sign --key ${tmp_dir}/signing_key.pem $data_file $sig_file
73 	touch ${tmp_dir}/tmp-file
74 	fsverity enable ${tmp_dir}/tmp-file
80 	data_file=${tmp_dir}/data-file
89 	if [[ "${exit_code}" -ne 0 ]]; then
93 	rm -f "${log_file}"
99 	[[ $# -ne 2 ]] && usage
101 	local action="$1"
104 	[[ ! -d "${tmp_dir}" ]] && echo "Directory ${tmp_dir} doesn't exist" && exit 1
106 	if [[ "${action}" == "setup" ]]; then
108 	elif [[ "${action}" == "cleanup" ]]; then
110 	elif [[ "${action}" == "fsverity-create-sign" ]]; then
112 	elif [[ "${action}" == "fsverity-enable" ]]; then
115 		echo "Unknown action: ${action}"
122 if [[ "${VERBOSE}" -eq 0 ]]; then
129 rm -f "${LOG_FILE}"