From 4ddb1620bc7e3755242b6a0ed831e11e38ac161d Mon Sep 17 00:00:00 2001 From: David Bremner Date: Sun, 16 Aug 2015 19:41:12 +0200 Subject: [PATCH] [PATCH 4/8] test: initial tests for S/MIME and notmuch-emacs --- 55/42d18be03ada02047cddff39b1e0465c3c835f | 203 ++++++++++++++++++++++ 1 file changed, 203 insertions(+) create mode 100644 55/42d18be03ada02047cddff39b1e0465c3c835f diff --git a/55/42d18be03ada02047cddff39b1e0465c3c835f b/55/42d18be03ada02047cddff39b1e0465c3c835f new file mode 100644 index 000000000..bd41ecb0c --- /dev/null +++ b/55/42d18be03ada02047cddff39b1e0465c3c835f @@ -0,0 +1,203 @@ +Return-Path: +X-Original-To: notmuch@notmuchmail.org +Delivered-To: notmuch@notmuchmail.org +Received: from localhost (localhost [127.0.0.1]) + by arlo.cworth.org (Postfix) with ESMTP id 3E0E86DE1A52 + for ; Sun, 16 Aug 2015 10:43:26 -0700 (PDT) +X-Virus-Scanned: Debian amavisd-new at cworth.org +X-Spam-Flag: NO +X-Spam-Score: 0.126 +X-Spam-Level: +X-Spam-Status: No, score=0.126 tagged_above=-999 required=5 tests=[AWL=0.116, + T_HEADER_FROM_DIFFERENT_DOMAINS=0.01] autolearn=disabled +Received: from arlo.cworth.org ([127.0.0.1]) + by localhost (arlo.cworth.org [127.0.0.1]) (amavisd-new, port 10024) + with ESMTP id DN0rpnYLL_S3 for ; + Sun, 16 Aug 2015 10:43:24 -0700 (PDT) +Received: from gitolite.debian.net (gitolite.debian.net [87.98.215.224]) + by arlo.cworth.org (Postfix) with ESMTPS id 9E0346DE19E8 + for ; Sun, 16 Aug 2015 10:43:23 -0700 (PDT) +Received: from remotemail by gitolite.debian.net with local (Exim 4.80) + (envelope-from ) + id 1ZR1xB-0003cq-Pg; Sun, 16 Aug 2015 17:42:41 +0000 +Received: (nullmailer pid 26313 invoked by uid 1000); Sun, 16 Aug 2015 + 17:41:28 -0000 +From: David Bremner +To: notmuch@notmuchmail.org +Subject: [PATCH 4/8] test: initial tests for S/MIME and notmuch-emacs +Date: Sun, 16 Aug 2015 19:41:12 +0200 +Message-Id: <1439746876-23654-5-git-send-email-david@tethera.net> +X-Mailer: git-send-email 2.5.0 +In-Reply-To: <1439746876-23654-1-git-send-email-david@tethera.net> +References: <54CA467B.30408@gnome.org> + <1439746876-23654-1-git-send-email-david@tethera.net> +X-BeenThere: notmuch@notmuchmail.org +X-Mailman-Version: 2.1.18 +Precedence: list +List-Id: "Use and development of the notmuch mail system." + +List-Unsubscribe: , + +List-Archive: +List-Post: +List-Help: +List-Subscribe: , + +X-List-Received-Date: Sun, 16 Aug 2015 17:43:26 -0000 + +Test the ability of notmuch-mua-mail to send S/MIME signed (and +encrypted) messages; this really relies on existing functionality in +message-mode. + +The dependency on openssl to generate keys seems acceptable since +that's the method I got to work for smime signing in emacs. + +The generated keys and messages will later be useful for testing the +notmuch CLI. +--- + test/T355-smime.sh | 53 ++++++++++++++++++++++++++++++++++++++++++ + test/smime/openssl-ca-req.conf | 13 +++++++++++ + test/smime/openssl-req.conf | 13 +++++++++++ + test/test-lib.el | 10 ++++++++ + test/test-lib.sh | 2 +- + 5 files changed, 90 insertions(+), 1 deletion(-) + create mode 100755 test/T355-smime.sh + create mode 100644 test/smime/openssl-ca-req.conf + create mode 100644 test/smime/openssl-req.conf + +diff --git a/test/T355-smime.sh b/test/T355-smime.sh +new file mode 100755 +index 0000000..5f3ff12 +--- /dev/null ++++ b/test/T355-smime.sh +@@ -0,0 +1,53 @@ ++#!/usr/bin/env bash ++ ++test_description='S/MIME signature verification and decryption' ++. ./test-lib.sh ++ ++test_require_external_prereq openssl ++ ++test_begin_subtest "Generate CA Cert" ++openssl genpkey -algorithm RSA -out ca.key -pass pass:test -des3 1024 ++openssl req -new -x509 -key ca.key -passin pass:test \ ++ -config $TEST_DIRECTORY/smime/openssl-ca-req.conf -out ca.crt ++test_expect_equal "$(openssl verify ca.crt | tail -1)" "OK" ++ ++test_begin_subtest "Generate User Cert" ++openssl genpkey -algorithm RSA -out smime.key 1024 ++openssl req -config $TEST_DIRECTORY/smime/openssl-req.conf \ ++ -new -key smime.key -passin pass:test -nodes \ ++ -out smime.csr ++openssl x509 -req -in smime.csr -passin pass:test -CA ca.crt -CAkey ca.key -set_serial 1 -out test_suite.crt -setalias "Self Signed SMIME" -addtrust emailProtection -addreject clientAuth -addreject serverAuth -trustout ++# we need one file with the cert and private key ++cat test_suite.crt smime.key > test_suite.pem ++test_expect_equal "$(openssl verify -purpose smimesign -CAfile ca.crt test_suite.pem)" "test_suite.pem: OK" ++ ++test_expect_success 'emacs delivery of S/MIME signed message' \ ++ 'emacs_fcc_message \ ++ "test signed message 001" \ ++ "This is a test signed message." \ ++ "(mml-secure-message-sign \"smime\")"' ++ ++# Hard code the MML to avoid several interactive questions ++test_expect_success 'emacs delivery of S/MIME encrypted + signed message' \ ++'emacs_fcc_message \ ++ "test encrypted message 001" \ ++ "<#secure method=smime mode=signencrypt keyfile=\\\"test_suite.pem\\\" certfile=\\\"test_suite.pem\\\">\nThis is a test encrypted message.\n"' ++ ++test_begin_subtest "Signature verification (openssl)" ++notmuch show --format=raw subject:"test signed message 001" |\ ++ openssl smime -verify -CAfile ca.crt 2>OUTPUT ++cat < EXPECTED ++Verification successful ++EOF ++test_expect_equal_file OUTPUT EXPECTED ++ ++test_begin_subtest "Decryption and signature verification (openssl)" ++notmuch show --format=raw subject:"test encrypted message 001" |\ ++ openssl smime -decrypt -recip test_suite.pem |\ ++ openssl smime -verify -CAfile ca.crt 2>OUTPUT ++cat < EXPECTED ++Verification successful ++EOF ++test_expect_equal_file OUTPUT EXPECTED ++ ++test_done +diff --git a/test/smime/openssl-ca-req.conf b/test/smime/openssl-ca-req.conf +new file mode 100644 +index 0000000..49572ee +--- /dev/null ++++ b/test/smime/openssl-ca-req.conf +@@ -0,0 +1,13 @@ ++ [ req ] ++ distinguished_name = req_distinguished_name ++ prompt = no ++ ++ ++ [ req_distinguished_name ] ++ C = OZ ++ ST = Munchkinlandia ++ L = Emerald City ++ O = Organization Name ++ OU = Dept. of Fake Certs ++ CN = Fast Eddies Certs and Chips ++ emailAddress = fake-ca@example.com +diff --git a/test/smime/openssl-req.conf b/test/smime/openssl-req.conf +new file mode 100644 +index 0000000..c6b9de7 +--- /dev/null ++++ b/test/smime/openssl-req.conf +@@ -0,0 +1,13 @@ ++ [ req ] ++ distinguished_name = req_distinguished_name ++ prompt = no ++ ++ ++ [ req_distinguished_name ] ++ C = OZ ++ ST = Munchkinlandia ++ L = Emerald City ++ O = Not much organization ++ OU = Dept. of Testing ++ CN = Notmuch Test Suite ++ emailAddress = test_suite@notmuchmail.org +diff --git a/test/test-lib.el b/test/test-lib.el +index 04c8d63..596a705 100644 +--- a/test/test-lib.el ++++ b/test/test-lib.el +@@ -188,3 +188,13 @@ nothing." + ;; environments + + (setq mm-text-html-renderer 'html2text) ++ ++;; Set some variables for S/MIME tests. ++ ++(setq smime-keys '(("" "test_suite.pem" nil))) ++ ++(setq mml-smime-use 'openssl) ++ ++;; all test keys are without passphrase ++(eval-after-load 'smime ++ '(defun smime-ask-passphrase (cache) nil)) +diff --git a/test/test-lib.sh b/test/test-lib.sh +index 0bf7163..198d2bb 100644 +--- a/test/test-lib.sh ++++ b/test/test-lib.sh +@@ -1175,7 +1175,6 @@ test_C () { + sed "s,${PWD},CWD,g" OUTPUT.stdout OUTPUT.stderr > OUTPUT + } + +- + # Creates a script that counts how much time it is executed and calls + # notmuch. $notmuch_counter_command is set to the path to the + # generated script. Use notmuch_counter_value() function to get the +@@ -1320,4 +1319,5 @@ test_declare_external_prereq emacs + test_declare_external_prereq ${TEST_EMACSCLIENT} + test_declare_external_prereq gdb + test_declare_external_prereq gpg ++test_declare_external_prereq openssl + test_declare_external_prereq ${NOTMUCH_PYTHON} +-- +2.5.0 + -- 2.26.2