Package p11-kit-checkinstall: Scripts

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
TEST_DIR="$(mktemp -dt p11-kit-installcheckXXXXXXXX)"
cd "$TEST_DIR"
mkdir nssdb
certutil -N --empty-password -d nssdb
ln -rs /usr/lib64/pkcs11/p11-kit-trust.so nssdb/libnssckbi.so
certutil -L -d nssdb -h 'Builtin Object Token' | sed -r -n \
	's|^Default Trust:(.+[^[:blank:]])[[:blank:]]+[^[:blank:]]+[[:blank:]]*$|\1|p' \
	| sort >certutil.list
trust list --filter=certificates \
	| sed -n -r 's|^[[:blank:]]+label:[[:blank:]]+(.+)[[:blank:]]*$|\1|p' \
	| sort >trust.list
if [ ! -s certutil.list ]; then
	echo "certutil.list is empty" 1>&2
	exit 1
fi
if [ ! -s trust.list ]; then
	echo "trust.list is empty" 1>&2
	exit 1
fi

diff trust.list certutil.list || exit 1
cd - >/dev/null
rm -r -- "$TEST_DIR"