diff --git a/mozilla/security/nss/tests/fips/fips.sh b/mozilla/security/nss/tests/fips/fips.sh index cf94db9455e..72030fbe256 100755 --- a/mozilla/security/nss/tests/fips/fips.sh +++ b/mozilla/security/nss/tests/fips/fips.sh @@ -95,6 +95,12 @@ fips_init() ######################################################################## fips_140_1() { + echo "$SCRIPTNAME: Verify this module is in FIPS mode -----------------" + echo "modutil -dbdir ${P_R_FIPSDIR} -list" + modutil -dbdir ${P_R_FIPSDIR} -list 2>&1 + modutil -dbdir ${P_R_FIPSDIR} -chkfips true 2>&1 + html_msg $? 0 "Verify this module is in FIPS mode (modutil -chkfips true)" + echo "$SCRIPTNAME: List the FIPS module certificates -----------------" echo "certutil -d ${P_R_FIPSDIR} -L" certutil -d ${P_R_FIPSDIR} -L 2>&1 @@ -164,6 +170,18 @@ fips_140_1() echo "certutil -d ${P_R_FIPSDIR} -K -f ${R_FIPSPWFILE}" certutil -d ${P_R_FIPSDIR} -K -f ${R_FIPSPWFILE} 2>&1 html_msg $? 0 "List the FIPS module keys (certutil -K)" + + echo "$SCRIPTNAME: Detect mangled database --------------------------" + cp ${DIST}/${OBJDIR}/lib/libsoftokn3.so ${TMP}/libsoftokn3.sav + echo "mangling softokn3.so " + echo "mangle -i ${DIST}/${OBJDIR}lib/libsoftokn3.so -o 60000 -b 5" + mangle -i ${DIST}/${OBJDIR}/lib/libsoftokn3.so -o 60000 -b 5 2>&1 + diff ${DIST}/${OBJDIR}/lib/libsoftokn3.so ${TMP}/libsoftokn3.sav 2>&1 + echo "dbtest -r -d ${P_R_FIPSDIR} " + dbtest -r -d ${P_R_FIPSDIR} 2>&1 + html_msg $? 46 "Init NSS with a corrupted library (dbtest -r)" + cp ${TMP}/libsoftokn3.sav ${DIST}/${OBJDIR}/lib/libsoftokn3.so + rm ${TMP}/libsoftokn3.sav } ############################## fips_cleanup ############################