#!/bin/sh
# Copyright (C) 2003, 2005 Simon Josefsson.
#
# This file is part of Shishi.
#
# Shishi is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2, or (at your option)
# any later version.
#
# Shishi is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with Shishi; see the file COPYING.  If not, write to the Free
# Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
# MA 02110-1301, USA.

SHISA=$PWD/../src/shisa
DBDIR=shisa.db.tmp.$$

OUT=$DBDIR/out
ERR=$DBDIR/err
CONF=$DBDIR/conf

if test -n "$VERBOSE"; then
    set -x
fi

mkdir $DBDIR
if test ! -d $DBDIR; then
	echo Cannot create $DBDIR
	exit 1
fi

trap "rm -rf $DBDIR" EXIT

echo "db file $DBDIR" > $CONF
if test ! -f $CONF; then
	echo Cannot create $CONF
	exit 1
fi

if test ! -f $SHISA; then
    echo Cannot find $SHISA
    exit 1
fi

echo Dump empty database.
out=`$SHISA -c $CONF -d`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout=""
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Add realm.
out=`$SHISA -c $CONF -a TESTREALM`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="Adding realm \`TESTREALM'...
Adding realm \`TESTREALM'...done"
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo List database.
out=`$SHISA -c $CONF -l`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="TESTREALM"
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Add realm.
out=`$SHISA -c $CONF -a TESTREALM2`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="Adding realm \`TESTREALM2'...
Adding realm \`TESTREALM2'...done"
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Dump database.
out=`$SHISA -c $CONF -d`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="TESTREALM
TESTREALM2"
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Remove realm.
out=`$SHISA -c $CONF -r TESTREALM2`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="Removing realm \`TESTREALM2'...
Removing realm \`TESTREALM2'...done"
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Dump database.
out=`$SHISA -c $CONF -d`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="TESTREALM"
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Add principal.
out=`$SHISA -c $CONF -a TESTREALM test/principal`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="Adding principal \`test/principal@TESTREALM'...
Adding principal \`test/principal@TESTREALM'...done"
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Dump database.
out=`$SHISA -c $CONF -d`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="TESTREALM
	test/principal
		Account is enabled.
		Current key version 0 (0x0).
		Key 0 (0x0).
			Etype aes256-cts-hmac-sha1-96 (0x12, 18)."
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Add second principal.
out=`$SHISA -c $CONF -a TESTREALM test/principal2`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="Adding principal \`test/principal2@TESTREALM'...
Adding principal \`test/principal2@TESTREALM'...done"
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Dump database.
out=`$SHISA -c $CONF -d`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="TESTREALM
	test/principal
		Account is enabled.
		Current key version 0 (0x0).
		Key 0 (0x0).
			Etype aes256-cts-hmac-sha1-96 (0x12, 18).
	test/principal2
		Account is enabled.
		Current key version 0 (0x0).
		Key 0 (0x0).
			Etype aes256-cts-hmac-sha1-96 (0x12, 18)."
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Add third principal.
out=`$SHISA -c $CONF -a TESTREALM test/principal3`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="Adding principal \`test/principal3@TESTREALM'...
Adding principal \`test/principal3@TESTREALM'...done"
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Add third principal again.
out=`$SHISA -c $CONF -a TESTREALM test/principal3 2>&1`
if test $? != 1; then
    echo rc $?
    exit 1
fi

echo Remove second principal.
out=`$SHISA -c $CONF -r TESTREALM test/principal2`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="Removing principal \`test/principal2@TESTREALM'...
Removing principal \`test/principal2@TESTREALM'...done"
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Dump database.
out=`$SHISA -c $CONF -d`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="TESTREALM
	test/principal
		Account is enabled.
		Current key version 0 (0x0).
		Key 0 (0x0).
			Etype aes256-cts-hmac-sha1-96 (0x12, 18).
	test/principal3
		Account is enabled.
		Current key version 0 (0x0).
		Key 0 (0x0).
			Etype aes256-cts-hmac-sha1-96 (0x12, 18)."
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Tring to remove entire realm.
out=`$SHISA -c $CONF -r TESTREALM 2>&1`
if test $? != 1; then
    echo rc $?
    exit 1
fi

echo Dump database.
out=`$SHISA -c $CONF -d`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="TESTREALM
	test/principal
		Account is enabled.
		Current key version 0 (0x0).
		Key 0 (0x0).
			Etype aes256-cts-hmac-sha1-96 (0x12, 18).
	test/principal3
		Account is enabled.
		Current key version 0 (0x0).
		Key 0 (0x0).
			Etype aes256-cts-hmac-sha1-96 (0x12, 18)."
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Add principal with des key and password.
out=`$SHISA -c $CONF -a TESTREALM test/principal2 -E des --password=foo --keys`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="Adding principal \`test/principal2@TESTREALM'...
-----BEGIN SHISHI KEY-----
Keytype: 3 (des-cbc-md5)
Principal: test/principal2
Realm: TESTREALM

s3WXrcITWPE=
-----END SHISHI KEY-----
Adding principal \`test/principal2@TESTREALM'...done"
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Add aes key with password to principal.
out=`$SHISA -c $CONF -n TESTREALM test/principal2 -E aes --password=foo --keys`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="Adding key to \`test/principal2@TESTREALM'...
-----BEGIN SHISHI KEY-----
Keytype: 18 (aes256-cts-hmac-sha1-96)
Principal: test/principal2
Realm: TESTREALM

3XpVlkzCS2gGYbaShDQktrmYVkcqvMIMuJKLxq9a6oU=
-----END SHISHI KEY-----
Adding key to \`test/principal2@TESTREALM'...done"
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Dump database.
out=`$SHISA -c $CONF -d`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="TESTREALM
	test/principal
		Account is enabled.
		Current key version 0 (0x0).
		Key 0 (0x0).
			Etype aes256-cts-hmac-sha1-96 (0x12, 18).
	test/principal2
		Account is enabled.
		Current key version 0 (0x0).
		Key 0 (0x0).
			Etype des-cbc-md5 (0x3, 3).
		Key 1 (0x1).
			Etype aes256-cts-hmac-sha1-96 (0x12, 18).
	test/principal3
		Account is enabled.
		Current key version 0 (0x0).
		Key 0 (0x0).
			Etype aes256-cts-hmac-sha1-96 (0x12, 18)."
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Add 3des key with password to principal.
out=`$SHISA -c $CONF -n TESTREALM test/principal2 -E des3 --password=foo --keys`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="Adding key to \`test/principal2@TESTREALM'...
-----BEGIN SHISHI KEY-----
Keytype: 16 (des3-cbc-sha1-kd)
Principal: test/principal2
Realm: TESTREALM

nXV/NLyMwgSunRZATGitesFP466wyGfZ
-----END SHISHI KEY-----
Adding key to \`test/principal2@TESTREALM'...done"
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Dump database.
out=`$SHISA -c $CONF -d`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="TESTREALM
	test/principal
		Account is enabled.
		Current key version 0 (0x0).
		Key 0 (0x0).
			Etype aes256-cts-hmac-sha1-96 (0x12, 18).
	test/principal2
		Account is enabled.
		Current key version 0 (0x0).
		Key 0 (0x0).
			Etype des-cbc-md5 (0x3, 3).
		Key 1 (0x1).
			Etype aes256-cts-hmac-sha1-96 (0x12, 18).
		Key 2 (0x2).
			Etype des3-cbc-sha1-kd (0x10, 16).
	test/principal3
		Account is enabled.
		Current key version 0 (0x0).
		Key 0 (0x0).
			Etype aes256-cts-hmac-sha1-96 (0x12, 18)."
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Remove first principal.
out=`$SHISA -c $CONF -r TESTREALM test/principal`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="Removing principal \`test/principal@TESTREALM'...
Removing principal \`test/principal@TESTREALM'...done"
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Remove third principal.
out=`$SHISA -c $CONF -r TESTREALM test/principal3`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="Removing principal \`test/principal3@TESTREALM'...
Removing principal \`test/principal3@TESTREALM'...done"
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Remove aes key on second principal.
out=`$SHISA -c $CONF --key-remove TESTREALM test/principal2 -E aes`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="Removing key from \`test/principal2@TESTREALM'...
Removing key from \`test/principal2@TESTREALM'...done"
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Dump database.
out=`$SHISA -c $CONF -d`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="TESTREALM
	test/principal2
		Account is enabled.
		Current key version 0 (0x0).
		Key 0 (0x0).
			Etype des-cbc-md5 (0x3, 3).
		Key 1 (0x1).
			Etype des3-cbc-sha1-kd (0x10, 16)."
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Add 3des key with password to principal.
out=`$SHISA -c $CONF -n TESTREALM test/principal2 -E des3 --password=bar --keys`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="Adding key to \`test/principal2@TESTREALM'...
-----BEGIN SHISHI KEY-----
Keytype: 16 (des3-cbc-sha1-kd)
Principal: test/principal2
Realm: TESTREALM

wb9SbVsgCEmttWiFikwvGQLj5YZ2NFja
-----END SHISHI KEY-----
Adding key to \`test/principal2@TESTREALM'...done"
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Dump database.
out=`$SHISA -c $CONF -d --keys`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="TESTREALM
	test/principal2
		Account is enabled.
		Current key version 0 (0x0).
		Key 0 (0x0).
			Etype des-cbc-md5 (0x3, 3).
-----BEGIN SHISHI KEY-----
Keytype: 3 (des-cbc-md5)
Principal: test/principal2
Realm: TESTREALM

s3WXrcITWPE=
-----END SHISHI KEY-----
			Password foo.
		Key 1 (0x1).
			Etype des3-cbc-sha1-kd (0x10, 16).
-----BEGIN SHISHI KEY-----
Keytype: 16 (des3-cbc-sha1-kd)
Principal: test/principal2
Realm: TESTREALM

wb9SbVsgCEmttWiFikwvGQLj5YZ2NFja
-----END SHISHI KEY-----
			Password bar.
		Key 2 (0x2).
			Etype des3-cbc-sha1-kd (0x10, 16).
-----BEGIN SHISHI KEY-----
Keytype: 16 (des3-cbc-sha1-kd)
Principal: test/principal2
Realm: TESTREALM

nXV/NLyMwgSunRZATGitesFP466wyGfZ
-----END SHISHI KEY-----
			Password foo."
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Remove 3des key with password 'bar' on second principal.
out=`$SHISA -c $CONF --key-remove TESTREALM test/principal2 -E des3 --password=bar`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="Removing key from \`test/principal2@TESTREALM'...
Removing key from \`test/principal2@TESTREALM'...done"
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Remove 3des key with password 'foo' on second principal.
out=`$SHISA -c $CONF --key-remove TESTREALM test/principal2 -E des3 --password=foo`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="Removing key from \`test/principal2@TESTREALM'...
Removing key from \`test/principal2@TESTREALM'...done"
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Dump database.
out=`$SHISA -c $CONF -d`
if test $? != 0; then
    echo rc $?
    exit 1
fi
expectout="TESTREALM
	test/principal2
		Account is enabled.
		Current key version 0 (0x0).
		Key 0 (0x0).
			Etype des-cbc-md5 (0x3, 3)."
if test "$out" != "$expectout"; then
    echo expected: $expectout >&2
    echo -----got: $out >&2
    exit 1
fi

echo Tests finished
exit 0