mirror of
https://github.com/nsacyber/HIRS.git
synced 2024-12-30 09:49:00 +00:00
46 lines
1.4 KiB
Bash
46 lines
1.4 KiB
Bash
#!/bin/bash
|
|
#########################################################################################
|
|
# HIRS ACA Policy System Tests
|
|
#
|
|
#########################################################################################
|
|
testResult=false
|
|
totalTests=0;
|
|
failedTests=0;
|
|
|
|
# Start ACA Policy Tests
|
|
# provision_tpm takes 1 parameter (the expected result): "pass" or "fail"
|
|
|
|
write_to_logs "ACA POLICY TEST 1: Test ACA default policy "
|
|
setPlatformCerts "laptop" "empty"
|
|
provision_tpm2 "pass"
|
|
|
|
write_to_logs "ACA POLICY TEST 2: Test EK cert Only Validation Policy without a EK Issuer Cert in the trust store"
|
|
setPolicyEkOnly
|
|
provision_tpm2 "fail"
|
|
|
|
write_to_logs "ACA POLICY TEST 3: Test EK Only Validation Policy"
|
|
uploadTrustedCerts
|
|
provision_tpm2 "pass"
|
|
|
|
write_to_logs "ACA POLICY TEST 4: Test PC Validation Policy with no PC"
|
|
setPolicyEkPc_noAttCheck
|
|
provision_tpm2 "fail"
|
|
|
|
write_to_logs "ACA POLICY TEST 5: Test FW and PC Validation Policy with no PC"
|
|
setPolicyEkPcFw
|
|
provision_tpm2 "fail"
|
|
|
|
write_to_logs "### ACA POLICY TEST 6: Test PC Validation Policy with valid PC ###"
|
|
clearAcaDb
|
|
setPolicyEkPc
|
|
uploadTrustedCerts
|
|
setPlatformCerts "laptop" "default"
|
|
provision_tpm2 "pass"
|
|
|
|
# Process Test Results, any single failure will send back a failed result.
|
|
if [[ $failedTests != 0 ]]; then
|
|
export TEST_STATUS=1;
|
|
echo "**** $failedTests out of $totalTests ACA Policy Tests Failed! ****"
|
|
else
|
|
echo "**** $totalTests ACA Policy Tests Passed! ****"
|
|
fi |