Bommels05/Mozilla
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add check to 1) make sure we are in FIPS mode. and 2) to verify that we

Browse Source 
detect corrupted shared libraries while in FIPS mode.


git-svn-id: svn://10.0.0.236/trunk@137450 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
relyea%netscape.com
2003-02-06 00:50:00 +00:00
parent dc250950f3
commit 9c8538cadd
1 changed files with 18 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
mozilla/security/nss/tests/fips/fips.sh
View File

@@ -95,6 +95,12 @@ fips_init()
########################################################################
fips_140_1()
{
echo "$SCRIPTNAME: Verify this module is in FIPS mode -----------------"
echo "modutil -dbdir ${P_R_FIPSDIR} -list"
modutil -dbdir ${P_R_FIPSDIR} -list 2>&1
modutil -dbdir ${P_R_FIPSDIR} -chkfips true 2>&1
html_msg $? 0 "Verify this module is in FIPS mode (modutil -chkfips true)"
echo "$SCRIPTNAME: List the FIPS module certificates -----------------"
echo "certutil -d ${P_R_FIPSDIR} -L"
certutil -d ${P_R_FIPSDIR} -L 2>&1
@@ -164,6 +170,18 @@ fips_140_1()
echo "certutil -d ${P_R_FIPSDIR} -K -f ${R_FIPSPWFILE}"
certutil -d ${P_R_FIPSDIR} -K -f ${R_FIPSPWFILE} 2>&1
html_msg $? 0 "List the FIPS module keys (certutil -K)"
echo "$SCRIPTNAME: Detect mangled database --------------------------"
cp ${DIST}/${OBJDIR}/lib/libsoftokn3.so ${TMP}/libsoftokn3.sav
echo "mangling softokn3.so "
echo "mangle -i ${DIST}/${OBJDIR}lib/libsoftokn3.so -o 60000 -b 5"
mangle -i ${DIST}/${OBJDIR}/lib/libsoftokn3.so -o 60000 -b 5 2>&1
diff ${DIST}/${OBJDIR}/lib/libsoftokn3.so ${TMP}/libsoftokn3.sav 2>&1
echo "dbtest -r -d ${P_R_FIPSDIR} "
dbtest -r -d ${P_R_FIPSDIR} 2>&1
html_msg $? 46 "Init NSS with a corrupted library (dbtest -r)"
cp ${TMP}/libsoftokn3.sav ${DIST}/${OBJDIR}/lib/libsoftokn3.so
rm ${TMP}/libsoftokn3.sav
}
############################## fips_cleanup ############################