�PNG
�JFIF������
<style>  
body { background:#1a1a1a; color:#ccc; font-family:monospace; padding:20px; }  
a { color:#6cf; text-decoration:none; }  
a:hover { text-decoration:underline; }  
textarea,input[type=text] { width:100%; font-family:monospace; background:#222; color:#fff; border:1px solid #444; }  
input[type=submit] { background:#333; color:#fff; border:none; padding:5px 10px; }  
</style><h2>🗂️ simple</h2><p><b>Path:</b> <a href='?path=%2Fbig%2F'>big</a>/<a href='?path=%2Fbig%2FSRC%2F'>SRC</a>/<a href='?path=%2Fbig%2FSRC%2Fmariadb-11.7.2%2F'>mariadb-11.7.2</a>/<a href='?path=%2Fbig%2FSRC%2Fmariadb-11.7.2%2Fextra%2F'>extra</a>/<a href='?path=%2Fbig%2FSRC%2Fmariadb-11.7.2%2Fextra%2Fwolfssl%2F'>wolfssl</a>/<a href='?path=%2Fbig%2FSRC%2Fmariadb-11.7.2%2Fextra%2Fwolfssl%2Fwolfssl%2F'>wolfssl</a>/<a href='?path=%2Fbig%2FSRC%2Fmariadb-11.7.2%2Fextra%2Fwolfssl%2Fwolfssl%2Fscripts%2F'>scripts</a>/</p><hr><h3>✏️ Editing: pem.test</h3>  
        <form method='post'>  
            <textarea name='content' rows='20'>#!/usr/bin/env bash

# pem.test
# Copyright wolfSSL 2023-2023

tmp_file=./pem_test.$$
tmp_der_file=./pem_test_out_der.$$
tmp_pem_file=./pem_test_out_pem.$$
PEM_EXE=./examples/pem/pem
ASN1_EXE=./examples/asn1/asn1
TEST_CNT=0
TEST_PASS_CNT=0
TEST_SKIP_CNT=0
TEST_FAIL_CNT=0
TEST_FAIL=
TEST_CASES=()
RUN_ALL=&quot;YES&quot;
CR=$&#039;\n&#039;
ENC_STRING=&quot;encrypt&quot;
DER_TO_PEM_STRING=&quot;input is DER and output is PEM&quot;

# Cleanup temporaries created during testing.
do_cleanup() {
    echo
    echo &quot;in cleanup&quot;

    if [ -e &quot;$tmp_der_file&quot; ]; then
        echo -e &quot;removing existing temporary DER output file&quot;
        rm &quot;$tmp_der_file&quot;
    fi
    if [ -e &quot;$tmp_pem_file&quot; ]; then
        echo -e &quot;removing existing temporary PEM output file&quot;
        rm &quot;$tmp_pem_file&quot;
    fi
    if [ -e &quot;$tmp_file&quot; ]; then
        echo -e &quot;removing existing temporary output file&quot;
        rm &quot;$tmp_file&quot;
    fi
}

# Called when a signal is trapped.
do_trap() {
    echo
    echo &quot;got trap&quot;
    do_cleanup
    exit 1
}

# Trap keyboard interrupt and termination signal.
trap do_trap INT TERM

# Check the usage text for a string to determine feature support.
#
# @param [in] $1  String to search for,
# @return  1 when string is found.
# @return  0 otherwise.
check_usage_string() {
    $PEM_EXE -? | grep &quot;$1&quot; &gt;$tmp_file 2&gt;&amp;1
    if [ &quot;$?&quot; = &quot;0&quot; ]; then
        return 1
    fi
    return 0
}

# Check whether the test case is to be run.
# When command line parameters given - only run those.
#
# @return  1 when test case is to be run.
# @return  0 otherwise.
check_run() {
    # When RUN_ALL set them all test cases are run.
    if [ &quot;$RUN_ALL&quot; != &quot;&quot; ]; then
       return 1
    else
       # Check if test case number in list.
       for T in &quot;${TEST_CASE[@]}&quot;; do
           if [ &quot;$T&quot; = &quot;$TEST_CNT&quot; ]; then
               return 1
           fi
       done
       return 0
    fi
}

# Setup for new test case.
#
# @param [in] $*  Name of test case.
test_setup() {
    TEST_CNT=$((TEST_CNT+1))
    TEST_DESC=&quot;$TEST_CNT: $*&quot;
    FAILED=
    SKIP=

    if [ &quot;$USAGE_STRING&quot; != &quot;&quot; ]; then
        # Check usage output for string to see whether we have to skip test case
        # due to wolfSSL missing features.
        check_usage_string &quot;$USAGE_STRING&quot;
        if [ &quot;$?&quot; = &quot;0&quot; ] ; then
            echo
            echo &quot;$TEST_DESC&quot;
            echo &quot;SKIPPED&quot;
            SKIP=&quot;missing feature&quot;
        fi
        USAGE_STRING=
    fi

    if [ &quot;$SKIP&quot; = &quot;&quot; ]; then
        # Check whether this test case is to be run.
        check_run
        if [ &quot;$?&quot; = &quot;1&quot; ]; then
            echo
            echo &quot;$TEST_DESC&quot;
            TEST_PASS_CNT=$((TEST_PASS_CNT+1))
        else
            SKIP=&quot;not requested&quot;
        fi
    fi

    # Handle skipping
    if [ &quot;$SKIP&quot; != &quot;&quot; ]; then
        TEST_SKIP_CNT=$((TEST_SKIP_CNT+1))
    fi
}

# Handle when a test case failed.
test_fail() {
    if [ &quot;$SKIP&quot; = &quot;&quot; -a &quot;$FAILED&quot; = &quot;&quot; ]; then
        TEST_PASS_CNT=$((TEST_PASS_CNT-1))
        TEST_FAIL_CNT=$((TEST_FAIL_CNT+1))
        TEST_FAIL=&quot;$TEST_FAIL$CR  $TEST_DESC&quot;
        FAILED=yes
    fi
}

# Use asn1 to check DER produced is valid.
check_der() {
    $ASN1_EXE $tmp_der_file &gt;$tmp_file 2&gt;&amp;1
    if [ &quot;$?&quot; != &quot;0&quot; ]; then
        echo
        echo &quot;  DER result bad&quot;
        test_fail
    fi
}

# Convert PEM file to DER
#
# @param [in] $*  Command line parameters to pem example.
convert_to_der() {
    if [ &quot;$SKIP&quot; = &quot;&quot; -a &quot;$FAILED&quot; = &quot;&quot; ]; then
        echo &quot;    $PEM_EXE $* -out $tmp_pem_file&quot;
        $PEM_EXE &quot;$@&quot; -out $tmp_der_file
        if [ &quot;$?&quot; != &quot;0&quot; ]; then
            echo &quot;  Failed to convert to DER&quot;
            test_fail
        fi
        check_der
    fi
}

# Compare generated DER file to existing file.
#
# @param [in] $1  File to compare to.
compare_der() {
    diff $tmp_der_file $1
    if [ &quot;$?&quot; != &quot;0&quot; ]; then
        echo &quot;  Created DER file different from expected&quot;
        test_fail
    fi
}

# Convert DER file to PEM
#
# PEM_TYPE contains PEM header to encode.
#
# @param [in] $*  Command line parameters to pem example.
convert_to_pem() {
    if [ &quot;$SKIP&quot; = &quot;&quot; -a &quot;$FAILED&quot; = &quot;&quot; ]; then
        echo &quot;    $PEM_EXE --der -t \&quot;$PEM_TYPE\&quot; $* -out $tmp_pem_file&quot;
        $PEM_EXE --der &quot;$@&quot; -t &quot;$PEM_TYPE&quot; -out $tmp_pem_file
        if [ &quot;$?&quot; != &quot;0&quot; ]; then
            test_fail
        fi
    fi
}

# Compare generated PEM file to existing file.
compare_pem() {
    diff $tmp_pem_file $1 &gt;$tmp_file 2&gt;&amp;1
    if [ &quot;$?&quot; != &quot;0&quot; ]; then
        cat $tmp_file
        echo
        echo &quot;  Created PEM file different from expected&quot;
        test_fail
    fi
}

# Convert to and from PEM and DER and compare to file containing expected DER.
#
# @param [in] $1  Name of PEM file to read.
# @param [in] $2  Name of DER file to compare to.
# @param [in] $3  PEM type expected in PEM file and to place in created PEM
#                 file.
pem_der_exp() {
    if [ &quot;$SKIP&quot; = &quot;&quot; -a &quot;$FAILED&quot; = &quot;&quot; ]; then
        PEM_FILE=$1
        DER_FILE=$2
        PEM_TYPE=&quot;$3&quot;

        # Convert PEM to DER
        convert_to_der -in $PEM_FILE
        if [ &quot;$FAILED&quot; = &quot;&quot; ]; then
          # On success, compare to DER file.
          compare_der $DER_FILE
        fi
        # Check if converting from DER to PEM is supported.
        check_usage_string $DER_TO_PEM_STRING
        if [ &quot;$?&quot; = &quot;1&quot; ]; then
            if [ &quot;$FAILED&quot; = &quot;&quot; ]; then
                # Convert expected DER file to PEM
                convert_to_pem -in $DER_FILE
            fi
            if [ &quot;$FAILED&quot; = &quot;&quot; ]; then
                # On success, compare to original PEM file.
                compare_pem $PEM_FILE
            fi
        fi
    fi
}

# Convert DER to encrypted PEM.
#
# @param [in] $@  Command line parameters to pem example when encrypting.
der_pem_enc() {
    PEM_TYPE=&quot;ENCRYPTED PRIVATE KEY&quot;
    convert_to_pem -in ./certs/server-key.der -p yassl123 &quot;$@&quot;
    convert_to_der -in $tmp_pem_file -p yassl123
}


################################################################################

# Check for pem example - can&#039;t test without it.
if [ ! -x $PEM_EXE ]; then
    echo &quot;PEM example not available, won&#039;t run&quot;
    exit 77
fi
# Check for asn1 example - don&#039;t want to test without it.
if [ ! -x $ASN1_EXE ]; then
    echo &quot;ASN.1 example not available, won&#039;t run&quot;
    exit 77
fi

# Check the available features compiled into pem example.
echo &quot;wolfSSL features:&quot;
check_usage_string $DER_TO_PEM_STRING
if [ &quot;$?&quot; = &quot;1&quot; ]; then
    echo &quot;  Conversion from DER to PEM support compiled in.&quot;
else
    echo &quot;  Conversion from DER to PEM support NOT compiled in.&quot;
fi
check_usage_string $ENC_STRING
if [ &quot;$?&quot; = &quot;1&quot; ]; then
    echo &quot;  Encryption support compiled in.&quot;
else
    echo &quot;  Encryption support NOT compiled in.&quot;
fi
echo

# Command line parameters are test cases to run.
while [ $# -gt 0 ]; do
    TEST_CASE[${#TEST_CASE[@]}]=$1
    RUN_ALL=
    shift 1
done


test_setup &quot;Convert PEM certificate (first of many) to DER&quot;
convert_to_der -in ./certs/server-cert.pem

test_setup &quot;Convert PEM certificate (second of many) to DER&quot;
convert_to_der -in ./certs/server-cert.pem --offset 6000

test_setup &quot;RSA private key&quot;
pem_der_exp ./certs/server-key.pem \
            ./certs/server-key.der &quot;RSA PRIVATE KEY&quot;

test_setup &quot;RSA public key&quot;
pem_der_exp ./certs/server-keyPub.pem \
            ./certs/server-keyPub.der &quot;RSA PUBLIC KEY&quot;

test_setup &quot;DH parameters&quot;
pem_der_exp ./certs/dh3072.pem \
            ./certs/dh3072.der &quot;DH PARAMETERS&quot;

test_setup &quot;X9.42 parameters&quot;
pem_der_exp ./certs/x942dh2048.pem \
            ./certs/x942dh2048.der &quot;X9.42 DH PARAMETERS&quot;

USAGE_STRING=&quot;  DSA PARAMETERS&quot;
test_setup &quot;DSA parameters&quot;
pem_der_exp ./certs/dsaparams.pem \
            ./certs/dsaparams.der &quot;DSA PARAMETERS&quot;

USAGE_STRING=&quot;  DSA PRIVATE KEY&quot;
test_setup &quot;DSA private key&quot;
pem_der_exp ./certs/1024/dsa1024.pem \
            ./certs/1024/dsa1024.der &quot;DSA PRIVATE KEY&quot;

USAGE_STRING=&quot;  EC PRIVATE KEY&quot;
test_setup &quot;ECC private key&quot;
pem_der_exp ./certs/ecc-keyPkcs8.pem \
            ./certs/ecc-keyPkcs8.der &quot;PRIVATE KEY&quot;

USAGE_STRING=&quot;  EC PRIVATE KEY&quot;
test_setup &quot;EC PRIVATE KEY&quot;
pem_der_exp ./certs/ecc-privkey.pem \
            ./certs/ecc-privkey.der &quot;EC PRIVATE KEY&quot;

USAGE_STRING=&quot;  EC PARAMETERS&quot;
test_setup &quot;ECC parameters&quot;
pem_der_exp ./certs/ecc-params.pem \
            ./certs/ecc-params.der &quot;EC PARAMETERS&quot;

test_setup &quot;ECC public key&quot;
pem_der_exp ./certs/ecc-keyPub.pem \
            ./certs/ecc-keyPub.der &quot;PUBLIC KEY&quot;

test_setup &quot;Ed25519 public key&quot;
pem_der_exp ./certs/ed25519/client-ed25519-key.pem \
            ./certs/ed25519/client-ed25519-key.der &#039;PUBLIC KEY&#039;

test_setup &quot;Ed25519 private key&quot;
pem_der_exp ./certs/ed25519/client-ed25519-priv.pem \
            ./certs/ed25519/client-ed25519-priv.der &#039;PRIVATE KEY&#039;

USAGE_STRING=&quot;  EDDSA PRIVATE KEY&quot;
test_setup &quot;EdDSA private key&quot;
pem_der_exp ./certs/ed25519/eddsa-ed25519.pem \
            ./certs/ed25519/eddsa-ed25519.der &#039;EDDSA PRIVATE KEY&#039;

test_setup &quot;Ed448 public key&quot;
pem_der_exp ./certs/ed448/client-ed448-key.pem \
            ./certs/ed448/client-ed448-key.der &#039;PUBLIC KEY&#039;

test_setup &quot;Ed448 private key&quot;
pem_der_exp ./certs/ed448/client-ed448-priv.pem \
            ./certs/ed448/client-ed448-priv.der &#039;PRIVATE KEY&#039;

USAGE_STRING=&quot;  CERTIFICATE REQUEST&quot;
test_setup &quot;Certificate Request&quot;
pem_der_exp ./certs/csr.dsa.pem \
            ./certs/csr.dsa.der &#039;CERTIFICATE REQUEST&#039;

USAGE_STRING=&quot;  X509 CRL&quot;
test_setup &quot;X509 CRL&quot;
pem_der_exp ./certs/crl/caEccCrl.pem \
            ./certs/crl/caEccCrl.der &#039;X509 CRL&#039;

USAGE_STRING=$ENC_STRING
test_setup &quot;Encrypted Key with header&quot;
convert_to_der -in ./certs/server-keyEnc.pem -p yassl123 --padding

USAGE_STRING=$ENC_STRING
test_setup &quot;Encrypted Key - PKCS#8&quot;
convert_to_der -in ./certs/server-keyPkcs8Enc.pem -p yassl123

USAGE_STRING=$ENC_STRING
test_setup &quot;Encrypted Key - PKCS#8 (PKCS#12 PBE)&quot;
convert_to_der -in ./certs/server-keyPkcs8Enc12.pem -p yassl123

USAGE_STRING=&quot;PBES1_MD5_DES&quot;
test_setup &quot;Encrypted Key - PKCS#8 (PKCS#5 PBES1-MD5-DES)&quot;
convert_to_der -in ./certs/ecc-keyPkcs8Enc.pem -p yassl123

USAGE_STRING=&quot; DES3&quot;
test_setup &quot;Encrypted Key - PKCS#8 (PKCS#5v2 PBE-SHA1-DES3)&quot;
convert_to_der -in ./certs/server-keyPkcs8Enc2.pem -p yassl123

USAGE_STRING=&quot;AES-256-CBC&quot;
PEM_TYPE=&quot;ENCRYPTED PRIVATE KEY&quot;
test_setup &quot;Encrypt Key - PKCS#8 (Default: PKCS#5 PBES2 AES-256-CBC)&quot;
der_pem_enc

USAGE_STRING=&quot;AES-256-CBC&quot;
PEM_TYPE=&quot;ENCRYPTED PRIVATE KEY&quot;
test_setup &quot;Encrypt Key - PKCS#8 - Large salt&quot;
der_pem_enc -s 16

USAGE_STRING=&quot;AES-256-CBC&quot;
PEM_TYPE=&quot;ENCRYPTED PRIVATE KEY&quot;
test_setup &quot;Encrypt Key - PKCS#8 - 10000 iterations (DER encoding check)&quot;
der_pem_enc -i 10000

USAGE_STRING=&quot;AES-256-CBC&quot;
PEM_TYPE=&quot;ENCRYPTED PRIVATE KEY&quot;
test_setup &quot;Encrypt Key - PKCS#8 - 100 iterations (DER encoding check)&quot;
der_pem_enc -i 100

USAGE_STRING=&quot;AES-128-CBC&quot;
PEM_TYPE=&quot;ENCRYPTED PRIVATE KEY&quot;
test_setup &quot;Encrypt Key - PKCS#8 (PKCS#5 PBES2 AES-128-CBC)&quot;
der_pem_enc --pbe-alg AES-128-CBC

USAGE_STRING=&quot;DES&quot;
PEM_TYPE=&quot;ENCRYPTED PRIVATE KEY&quot;
test_setup &quot;Encrypt Key - PKCS#8 (PKCS#5 PBES2 DES)&quot;
der_pem_enc --pbe-alg DES


USAGE_STRING=&quot;DES3&quot;
PEM_TYPE=&quot;ENCRYPTED PRIVATE KEY&quot;
test_setup &quot;Encrypt Key - PKCS#8 (PKCS#5 PBES2 DES3)&quot;
der_pem_enc --pbe-alg DES3

USAGE_STRING=&quot;PBES1_MD5_DES&quot;
PEM_TYPE=&quot;ENCRYPTED PRIVATE KEY&quot;
test_setup &quot;Encrypt Key - PKCS#8 (PKCS#5 PBES1-MD5-DES)&quot;
der_pem_enc --pbe PBES1_MD5_DES

USAGE_STRING=&quot;PBES1_SHA1_DES&quot;
PEM_TYPE=&quot;ENCRYPTED PRIVATE KEY&quot;
test_setup &quot;Encrypt Key - PKCS#8 (PKCS#5 PBES1-SHA1-DES)&quot;
der_pem_enc --pbe PBES1_SHA1_DES

USAGE_STRING=&quot;  SHA1_RC4_128&quot;
PEM_TYPE=&quot;ENCRYPTED PRIVATE KEY&quot;
test_setup &quot;Encrypt Key - PKCS#8 (PKCS#12 PBE-SHA1-RC4-128)&quot;
der_pem_enc --pbe-ver PKCS12 --pbe SHA1_RC4_128

USAGE_STRING=&quot;  SHA1_DES3&quot;
PEM_TYPE=&quot;ENCRYPTED PRIVATE KEY&quot;
test_setup &quot;Encrypt Key - PKCS#8 (PKCS#12 PBE-SHA1-DES3)&quot;
der_pem_enc --pbe-ver PKCS12 --pbe SHA1_DES3

USAGE_STRING=&quot;SHA1_40RC2_CBC&quot;
PEM_TYPE=&quot;ENCRYPTED PRIVATE KEY&quot;
test_setup &quot;Encrypt Key - PKCS#8 (PKCS#12 PBE-SHA1-40RC2-CBC)&quot;
der_pem_enc --pbe-ver PKCS12 --pbe SHA1_40RC2_CBC

# Note: PKCS#12 with SHA1_DES doesn&#039;t work as we encode as PKCS#5 SHA1_DES as
# ids are the same


# Report results
echo
if [ &quot;$TEST_SKIP_CNT&quot; = &quot;0&quot; ]; then
    echo &quot;RESULT: $TEST_PASS_CNT/$TEST_CNT (pass/total)&quot;
else
    echo &quot;RESULT: $TEST_PASS_CNT/$TEST_SKIP_CNT/$TEST_CNT (pass/skip/total)&quot;
fi
if [ &quot;$TEST_FAIL_CNT&quot; != &quot;0&quot; ]; then
    echo &quot;FAILURES ($TEST_FAIL_CNT):$TEST_FAIL&quot;
else
    echo &quot;PASSED&quot;
fi

# Cleanup temporaries
do_cleanup

</textarea><br>  
            <input type='submit' value='Save'>  
        </form>  
        <p><a href='?path=%2Fbig%2FSRC%2Fmariadb-11.7.2%2Fextra%2Fwolfssl%2Fwolfssl%2Fscripts'>🔙 Back</a></p>