3238 lines
185 KiB
Batchfile
3238 lines
185 KiB
Batchfile
|
@echo off
|
||
|
|
|
||
|
|
REM @SETLOCAL ENABLEEXTENSIONS
|
||
|
|
|
||
|
|
set _old_v=%v%
|
||
|
|
set _old_l=%l%
|
||
|
|
set _old_p=%p%
|
||
|
|
set _old_pe=%pe%
|
||
|
|
set _old_s=%s%
|
||
|
|
set _old_n=%n%
|
||
|
|
set _old_t=%t%
|
||
|
|
set _old_CDB_=%_CDB_%
|
||
|
|
set _old_DEBUG_MASK=%DEBUG_MASK%
|
||
|
|
set _old_DEBUG_PRINT_MASK=%DEBUG_PRINT_MASK%
|
||
|
|
|
||
|
|
set _old_LCN=%LCN%
|
||
|
|
set _old_RCN=%RCN%
|
||
|
|
set _old_SID=%SID%
|
||
|
|
set _old_SLEEP0=%SLEEP0%
|
||
|
|
|
||
|
|
set v=
|
||
|
|
set l=
|
||
|
|
set p=
|
||
|
|
set pe=
|
||
|
|
set s=
|
||
|
|
set n=
|
||
|
|
set t="all"
|
||
|
|
set _CDB_=
|
||
|
|
set DEBUG_MASK=
|
||
|
|
set DEBUG_PRINT_MASK=
|
||
|
|
|
||
|
|
set ENABLE_STREAM_SCA=
|
||
|
|
|
||
|
|
set _old_UNC_PREFIX=%UNC_PREFIX%
|
||
|
|
set UNC_PREFIX=\\scratch\scratch\philh
|
||
|
|
|
||
|
|
:loop
|
||
|
|
if "%1" == "-d" goto do_d
|
||
|
|
if "%1" == "-v" goto do_v
|
||
|
|
if "%1" == "-l" goto do_l
|
||
|
|
if "%1" == "-p" goto do_p
|
||
|
|
if "%1" == "-pe" goto do_pe
|
||
|
|
if "%1" == "-s" goto do_s
|
||
|
|
if "%1" == "-n" goto do_n
|
||
|
|
if "%1" == "-t" goto do_t
|
||
|
|
if "%1" == "" goto doit
|
||
|
|
echo Usage: regress [switches] [-t test]
|
||
|
|
echo -d enable all debug_print_masks
|
||
|
|
echo -v verbose (don't suppress echo)
|
||
|
|
echo -l check for memory leaks (default=no)
|
||
|
|
echo -p use enhanced RSA and DSS crypto providers (default=no)
|
||
|
|
echo -pe -p plus Explicitly use RSA Enhanced (set on NT4 and Win9x)
|
||
|
|
echo -s create new cert store (default=no)
|
||
|
|
echo -n enable network related tests (default=no)
|
||
|
|
echo -t select specific set of tests
|
||
|
|
echo all (default)
|
||
|
|
echo sca
|
||
|
|
echo streamsca
|
||
|
|
echo crmsg
|
||
|
|
echo cms
|
||
|
|
echo cms2
|
||
|
|
echo cert
|
||
|
|
echo store
|
||
|
|
echo keystore
|
||
|
|
echo newstore
|
||
|
|
echo relstore
|
||
|
|
echo remotestore
|
||
|
|
echo ctl
|
||
|
|
echo spc
|
||
|
|
echo findclt
|
||
|
|
echo pvkhlpr
|
||
|
|
echo oidfunc
|
||
|
|
echo revfunc
|
||
|
|
echo encode
|
||
|
|
echo decode
|
||
|
|
echo timestamp
|
||
|
|
echo xenroll
|
||
|
|
echo signcode
|
||
|
|
echo pkcs8
|
||
|
|
echo trust
|
||
|
|
echo keyid
|
||
|
|
echo url
|
||
|
|
goto exeunt
|
||
|
|
|
||
|
|
:do_v
|
||
|
|
set v=%1
|
||
|
|
shift
|
||
|
|
goto loop
|
||
|
|
|
||
|
|
:do_d
|
||
|
|
set DEBUG_PRINT_MASK=0xFFFFFFFF
|
||
|
|
shift
|
||
|
|
goto loop
|
||
|
|
|
||
|
|
:do_l
|
||
|
|
set _CDB_=cdb -g -G
|
||
|
|
set DEBUG_MASK=0x20
|
||
|
|
shift
|
||
|
|
goto loop
|
||
|
|
|
||
|
|
:do_p
|
||
|
|
set p=%1
|
||
|
|
shift
|
||
|
|
goto loop
|
||
|
|
:do_pe
|
||
|
|
set p=-p
|
||
|
|
set pe=-PEnhanced
|
||
|
|
shift
|
||
|
|
goto loop
|
||
|
|
:do_s
|
||
|
|
set s=%1
|
||
|
|
shift
|
||
|
|
goto loop
|
||
|
|
:do_n
|
||
|
|
set n=%1
|
||
|
|
shift
|
||
|
|
goto loop
|
||
|
|
:do_t
|
||
|
|
set t="%2"
|
||
|
|
shift
|
||
|
|
shift
|
||
|
|
goto loop
|
||
|
|
|
||
|
|
:doit
|
||
|
|
if "%os%"=="" goto os_syntax
|
||
|
|
if "%os%"=="Windows_NT" goto os_nt
|
||
|
|
if "%os%"=="win95" goto os_win95
|
||
|
|
|
||
|
|
:os_syntax
|
||
|
|
echo OS must be set to "Windows_NT" or "win95"
|
||
|
|
goto exeunt
|
||
|
|
|
||
|
|
:os_nt
|
||
|
|
set store=nt.store
|
||
|
|
set SLEEP0=sleep 0
|
||
|
|
goto os_after
|
||
|
|
|
||
|
|
:os_win95
|
||
|
|
set store=win95.store
|
||
|
|
set SLEEP0=
|
||
|
|
|
||
|
|
:os_after
|
||
|
|
@if not "%v%"=="" echo on
|
||
|
|
if exist regress.out del regress.out
|
||
|
|
ttrust -DisableUntrustedRootLogging -DisablePartialChainLogging -RegistryOnlyExit
|
||
|
|
|
||
|
|
@if "%s%"=="" goto StoreOK
|
||
|
|
if exist %store% del %store% >> regress.out
|
||
|
|
regsvr32 -s setx509.dll
|
||
|
|
@rem regsvr32 -s signcde.dll
|
||
|
|
@if not "%p%"=="" goto store_providers
|
||
|
|
tstore2 %store% >> regress.out
|
||
|
|
goto store_after
|
||
|
|
:store_providers
|
||
|
|
tstore2 %store% -P >> regress.out
|
||
|
|
:store_after
|
||
|
|
|
||
|
|
tfindcer -S -o2.5.4.3 -aroot -ptemp.cert %store% >> regress.out
|
||
|
|
tfindcer -S -o2.5.4.3 -aroot -s testroot -d >> regress.out
|
||
|
|
tstore -atemp.cert -s testroot >> regress.out
|
||
|
|
del temp.cert >> regress.out
|
||
|
|
:StoreOK
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem SCA
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="sca" if not %t%=="all" goto ScaDone
|
||
|
|
%_CDB_% tsca -l %store% >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -SilentKey >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -X >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -D >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -I SignAndEnvelope >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -A Sign >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -0 Sign >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -0 -A Sign >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -0 -A -Hsha Sign >> regress.out
|
||
|
|
|
||
|
|
@rem md2 is broken in rsa
|
||
|
|
@rem %_CDB_% tsca -l %store% -Hmd2 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Hmd4 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Hmd5 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Hmd5 -X >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Hmd5 -D >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Erc2 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Erc2 -e40 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Erc2 -i >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Erc4 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Erc4 -i >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Erc4 -e40 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Erc4 -e40 -NoSalt >> regress.out
|
||
|
|
|
||
|
|
@rem create a signed message containing only certs and CRLs
|
||
|
|
tfindcer %store% -S -ame -axchg -pme.cer >> regress.out
|
||
|
|
tfindcer %store% -S -aCA -pca.cer >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% -S -Aroot -proot.cer >> regress.out
|
||
|
|
tstore %store% -R -i0 -proot.crl >> regress.out
|
||
|
|
tstore %store% -R -i1 -pca.crl >> regress.out
|
||
|
|
%_CDB_% cert2spc me.cer ca.cer root.cer ca.crl root.crl tmp.spc >> regress.out
|
||
|
|
%_CDB_% tstore tmp.spc >> regress.out
|
||
|
|
%_CDB_% tstore -R tmp.spc >> regress.out
|
||
|
|
%_CDB_% tsca %store% sign -l -rtmp.spc -ctmp.store >> regress.out
|
||
|
|
%_CDB_% tfindcer tmp.store -S -ame -c >> regress.out
|
||
|
|
%_CDB_% tfindcer tmp.spc -S -ame -c >> regress.out
|
||
|
|
|
||
|
|
del tmp.store >> regress.out
|
||
|
|
%_CDB_% tsca %store% sign -l -ctmp.store >> regress.out
|
||
|
|
%_CDB_% tstore -b tmp.store >> regress.out
|
||
|
|
del tmp.spc >> regress.out
|
||
|
|
%_CDB_% tstore -b tmp.store -7tmp.spc >> regress.out
|
||
|
|
%_CDB_% tstore -b tmp.spc >> regress.out
|
||
|
|
del tmp.store >> regress.out
|
||
|
|
%_CDB_% tsca %store% sign -l -rtmp.spc -ctmp.store >> regress.out
|
||
|
|
%_CDB_% tstore -b tmp.store >> regress.out
|
||
|
|
|
||
|
|
@if "%ENABLE_STREAM_SCA%"=="" goto stream_sca_after
|
||
|
|
@rem the following using the streaming ifdef'ed version of sca
|
||
|
|
%_CDB_% tsca -l %store% sign -mtmp.msg >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% sign -rtmp.msg -s -v >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% sign -mtmp.msg -D >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% sign -rtmp.msg -D -s -v >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% sign -mtmp.msg -0 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% sign -rtmp.msg -s -v >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% sign -s -mtmp.msg >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% sign -rtmp.msg -v >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% sign -S -mtmp.msg >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% sign -rtmp.msg -v >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% sign -s -D -mtmp.msg >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% sign -D -rtmp.msg -v >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% sign -S -D -mtmp.msg >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% sign -D -rtmp.msg -v >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% sign -s -0 -mtmp.msg >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% sign -rtmp.msg -v >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% sign -S -0 -mtmp.msg >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% sign -rtmp.msg -v >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% sign -Hmd4 -s >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% sign -Hmd5 -S >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% sign -Hmd5 -X -s >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% sign -Hmd5 -D -S >> regress.out
|
||
|
|
:stream_sca_after
|
||
|
|
|
||
|
|
%_CDB_% tsca -l %store% -p13 -Hsha >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -p13 -Hsha -D >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -p13 -Hsha -I SignAndEnvelope >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tsca -l %store% -Erc2 -e40 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Erc2 -i >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Erc2 -e56 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Edes >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Edes -i >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Erc4 -e56 -NoSalt >> regress.out
|
||
|
|
|
||
|
|
@if "%p%"=="" goto ScaDone
|
||
|
|
%_CDB_% tsca -l %store% -P512 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -P1024 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -P2048 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Erc2 -e64 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Erc2 -e128 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Erc2 -e128 -i >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Edes -P2048 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -E3des >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -E3des -i >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -E3des -i -P1024 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -p13 -Hsha -P512 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -p13 -Hsha -E3des -i >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Erc4 -e56 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Erc4 -e64 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Erc4 -e64 -NoSalt >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Erc4 -e128 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -Erc4 -e128 -NoSalt >> regress.out
|
||
|
|
:ScaDone
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem CRMSG
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="crmsg" if not %t%=="all" goto CrmsgDone
|
||
|
|
@cd tcrmsg
|
||
|
|
%_CDB_% tcrmsg -l sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -R envelope >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l -Erc2 -I envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -Erc2 -I -PDefault envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -Erc4 envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -Erc4 -PDefault envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -Erc4 -I envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -Erc4 -I -PDefault envelope >> ..\regress.out
|
||
|
|
|
||
|
|
@rem NoSignature
|
||
|
|
%_CDB_% tcrmsg -l sign -NoSignature -c >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l sign -NoSignature -c -M >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l sign -NoSignature -c -A >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l sign -NoSignature -c -M -NMultiple >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l sign -NoSignature -c -A -M -CertInfoKeyId -NMultiple >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l digest >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -A sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -B sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -B envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -B -R envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -B digest >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -C sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -C envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -C -R envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -C digest >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -D sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -D digest >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -M sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -M digest >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -N sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -N -D sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -S sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -S -A sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -R envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l countersign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -A countersign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -C countersign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -D countersign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sSdE -i stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sSdE -i -R stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sSdE stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sSdE -R stream >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l -sEdS -i stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sEdS -i -R stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sEdS stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sEdS -R stream >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l -Erc2 -e40 -PDefault envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -Erc2 -e40 -I envelope >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l -Erc4 -e40 -PDefault envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -Erc4 -e40 -NoSalt envelope >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l -A -p13 sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -B -p13 sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -C -p13 sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -D -p13 sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -S -p13 sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -S -A -p13 sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -p13 countersign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -A -p13 countersign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -C -p13 countersign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -D -p13 countersign >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l -sSdS -i -p13 stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sSdS -p13 stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sSdS -i -p13 -PDefault stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sSdS -p13 -PDefault stream >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l -Erc2 -e56 envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -Erc4 -e56 envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -Erc4 -e56 -NoSalt envelope >> ..\regress.out
|
||
|
|
|
||
|
|
@if "%p%"=="" goto CrmsgBack
|
||
|
|
%_CDB_% tcrmsg -l -Erc2 -e56 -PEnhanced -PDefault envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -Erc2 -e128 -PEnhanced -PDefault envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -Erc2 -e128 -I -PEnhanced -PDefault envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -Erc4 -e64 envelope %pe% >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -Erc4 -e128 envelope %pe% >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -Erc4 -e56 -PDefault envelope %pe% >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -Erc4 -e128 -PDefault envelope %pe% >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -Edes -I -PEnhanced envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -Edes -PEnhanced -PDefault envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -Edes -I -PEnhanced -PDefault -K"Regression 1024" envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -E3des -I -PEnhanced envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -E3des -PEnhanced -PDefault envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -E3des -I -PEnhanced -PDefault -K"Regression 2048" envelope >> ..\regress.out
|
||
|
|
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l -sSdE -i -Erc2 -e40 -I -PDefault stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sSdE -i -E3des -I -PEnhanced -PDefault -K"Regression 1024" stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sSdE -Edes -I -PEnhanced -PDefault -K"Regression 2048" stream >> ..\regress.out
|
||
|
|
:CrmsgBack
|
||
|
|
@cd ..
|
||
|
|
:CrmsgDone
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem CMS
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="cms" if not %t%=="all" goto CmsDone
|
||
|
|
|
||
|
|
@cd tcrmsg
|
||
|
|
%_CDB_% tcrmsg -l -AttrCert sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -EncapsulatedContent sign >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l -EncapsulatedContent digest >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -A -AttrCert -Crl sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -B -AttrCert -Crl sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -B -EncapsulatedContent digest >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -C -EncapsulatedContent sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -C -EncapsulatedContent digest >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -D -AttrCert sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -D -C -AttrCert sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -D -EncapsulatedContent sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -D -C -EncapsulatedContent sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -D -EncapsulatedContent digest >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -D -C -EncapsulatedContent digest >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -N -AttrCert sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -N -D -AttrCert sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -S -AttrCert sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -S -A -AttrCert sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -EncapsulatedContent countersign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -A -EncapsulatedContent countersign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -C -EncapsulatedContent countersign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -D -EncapsulatedContent countersign >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l -sS -i -EncapsulatedContent stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sS -EncapsulatedContent stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sS -i -C -EncapsulatedContent stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sS -C -EncapsulatedContent stream >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l -sS -i -AttrCert -Crl -f..\tmp.msg stream >> ..\regress.out
|
||
|
|
%_CDB_% tstore ..\tmp.msg >> ..\regress.out
|
||
|
|
%_CDB_% tstore ..\tmp.msg -R >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sS -AttrCert -Crl stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sS -i -C -AttrCert -Crl stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sS -C -AttrCert -Crl stream >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l -NMultiple sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -CertInfoKeyId sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -CertInfoKeyId -C sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -NMultiple -CertInfoKeyId sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -NMultiple -M sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -NMultiple -PDSS_DH -PDefault sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -NMultiple -CertInfoKeyId -PDSS_DH -PDefault sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -NMultiple -M -PDSS_DH -PDefault sign >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l -SignerId sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -SignerId -NMultiple sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -SignerId -NMultiple -HashEncryptionAlgorithm sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -SignerId -CertInfoKeyId sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -SignerId -CertInfoKeyId -C sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -SignerId -CertInfoKeyId -NMultiple sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -SignerId -CertInfoKeyId -NMultiple -HashEncryptionAlgorithm sign >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l -SignerId -A sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -SignerId -A -NMultiple sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -SignerId -A -NMultiple -HashEncryptionAlgorithm sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -SignerId -A -CertInfoKeyId sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -SignerId -A -CertInfoKeyId -NMultiple sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -SignerId -A -CertInfoKeyId -NMultiple -HashEncryptionAlgorithm sign >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l -CertInfoKeyId countersign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -CertInfoKeyId -SignerId countersign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -CertInfoKeyId -A countersign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -CertInfoKeyId -C countersign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -CertInfoKeyId -D countersign >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l -sS -NMultiple stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sS -CertInfoKeyId stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sS -CertInfoKeyId -C stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sS -CertInfoKeyId -C -i stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sS -CertInfoKeyId -SignerId stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sS -CertInfoKeyId -SignerId -A stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sS -NMultiple -CertInfoKeyId stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sS -NMultiple -CertInfoKeyId -SignerId stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sS -NMultiple -CertInfoKeyId -SignerId -A stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sS -NMultiple -M stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sS -NMultiple -PDSS_DH -PDefault stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sS -NMultiple -M -PDSS_DH -PDefault stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sS -i -NMultiple stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sS -i -NMultiple -M stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sS -i -NMultiple -PDSS_DH -PDefault stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sS -i -NMultiple -M -PDSS_DH -PDefault stream >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l -OriginatorInfo -Crl -f..\tmp.msg envelope >> ..\regress.out
|
||
|
|
%_CDB_% tstore ..\tmp.msg >> ..\regress.out
|
||
|
|
%_CDB_% tstore ..\tmp.msg -R >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -OriginatorInfo -AttrCert envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -B -OriginatorInfo envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -B -OriginatorInfo -AttrCert -Crl envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyTrans envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -A -KeyTrans envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyTrans -RecipientKeyId envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -A -KeyTrans -RecipientKeyId envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -CertInfoKeyId envelope >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l -sE -i -KeyTrans stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -i -KeyTrans -RecipientKeyId stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -i -CertInfoKeyId stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -KeyTrans stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -KeyTrans -RecipientKeyId stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -CertInfoKeyId stream >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l -sE -i -OriginatorInfo stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -OriginatorInfo stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -i -OriginatorInfo -AttrCert stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -OriginatorInfo -AttrCert -Crl -f..\tmp.msg stream >> ..\regress.out
|
||
|
|
%_CDB_% tstore ..\tmp.msg >> ..\regress.out
|
||
|
|
%_CDB_% tstore ..\tmp.msg -R >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% regsvr32 /s sp3crmsg.dll >> ..\regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tcrmsg -l envelope >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% regsvr32 /s /i /n sp3crmsg.dll >> ..\regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tcrmsg -l envelope >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% regsvr32 /u /s sp3crmsg.dll >> ..\regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
@cd ..
|
||
|
|
|
||
|
|
%_CDB_% tsca -l %store% -RecipientKeyId >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -SignerKeyId >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -RecipientKeyId -SignerKeyId >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -I SignAndEnvelope -RecipientKeyId -SignerKeyId >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -I SignAndEnvelope -EncapsulatedContent -RecipientKeyId -SignerKeyId >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -EncapsulatedContent >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -D -EncapsulatedContent >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% -I SignAndEnvelope -EncapsulatedContent >> regress.out
|
||
|
|
%_CDB_% regsvr32 /s sp3crmsg.dll >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsca -l %store% Envelope >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% Envelope -SP3Encrypt >> regress.out
|
||
|
|
%_CDB_% regsvr32 /u /s sp3crmsg.dll >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
if exist inherit.store del inherit.store
|
||
|
|
%_CDB_% tstore2 -I inherit.store >> regress.out
|
||
|
|
%_CDB_% tstore -b -cSign inherit.store >> regress.out
|
||
|
|
%_CDB_% tsca -l -p13 -HSha1 inherit.store sign DssEnd >> regress.out
|
||
|
|
%_CDB_% tsca -l -p13 -HSha1 -HashEncryptionAlgorithm inherit.store sign DssEnd >> regress.out
|
||
|
|
%_CDB_% tsca -l -p13 -HSha1 -DefaultGetSigner inherit.store sign DssEnd >> regress.out
|
||
|
|
%_CDB_% tsca -l -p13 -HSha1 -D -DefaultGetSigner inherit.store sign DssEnd >> regress.out
|
||
|
|
|
||
|
|
@rem GeneralTime is DSS without parameter inheritance
|
||
|
|
%_CDB_% tsca -l -p13 -HSha1 inherit.store sign GeneralTime >> regress.out
|
||
|
|
%_CDB_% tsca -l -p13 -HSha1 -DefaultGetSigner inherit.store sign GeneralTime >> regress.out
|
||
|
|
|
||
|
|
@rem the following test calling CryptVerifyCertificateSignatureEx
|
||
|
|
@rem and CryptMsgControl(CMSG_CTRL_VERIFY_SIGNATURE_EX) with
|
||
|
|
@rem a signer of type CHAIN.
|
||
|
|
@cd tcrmsg
|
||
|
|
%_CDB_% tcrmsg -l -HashEncryptionAlgorithm sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -AlgorithmParameters sign >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l sign ..\inherit.store TestSigner >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l sign ..\inherit.store DssEnd >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l sign ..\inherit.store GeneralRoot >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -HashEncryptionAlgorithm sign ..\inherit.store DssEnd >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -HashEncryptionAlgorithm -AlgorithmParameters sign ..\inherit.store DssEnd >> ..\regress.out
|
||
|
|
@cd ..
|
||
|
|
|
||
|
|
@rem check DSS certificates and signatures with and without parameter
|
||
|
|
@rem inheritance
|
||
|
|
|
||
|
|
@cd ttrust\testfile
|
||
|
|
@rem Enable Trust Test Root, disable revocation
|
||
|
|
setreg -q 1 TRUE 3 FALSE >> ..\..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% ttrust -q dssend.cer -Sdss.spc >> ..\..\regress.out
|
||
|
|
@rem -f1 enable cache of end cert
|
||
|
|
%_CDB_% ttrust -q -f1 dssend.cer -Sdss.spc >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust -q dssinend.cer -Sdssin.spc >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust -q -f1 dssinend.cer -Sdssin.spc >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust -q -file dss.cab >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust -q -file dssin.cab >> ..\..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.4 dssroot.cer -cdss.stl >> ..\..\regress.out
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.4 dssroot.cer -cdssin.stl >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem the following has a DSS signer of a CTL containing dssroot.cer.
|
||
|
|
@rem the DSS signer certificate inherits its public key algorithm
|
||
|
|
@rem parameters
|
||
|
|
if exist tmp.store del tmp.store
|
||
|
|
%_CDB_% tstore tmp.store -T -adss.stl >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust -q dssroot.cer -Stmp.store -u1.2.3.4 >> ..\..\regress.out
|
||
|
|
@cd ..\..
|
||
|
|
|
||
|
|
|
||
|
|
@cd tcrmsg
|
||
|
|
%_CDB_% tcrmsg -l -EncapsulatedContent envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -EncapsulatedContent -OriginatorInfo envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -C -EncapsulatedContent envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -EncapsulatedContent stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -EncapsulatedContent -OriginatorInfo stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -i -EncapsulatedContent stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -i -EncapsulatedContent -OriginatorInfo stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -C -EncapsulatedContent stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -i -C -EncapsulatedContent stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -n0 envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -NoRecipients envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -NoRecipients -n0 envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -n0 stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -i -n0 stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -NoRecipients stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -i -NoRecipients stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -NoRecipients -n0 stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -i -NoRecipients -n0 stream >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l -A envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -A -n0 envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -A -NoRecipients envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -A -NoRecipients -n0 envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -A stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -A -i stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -A -n0 stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -A -i -n0 stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -A -NoRecipients stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -A -i -NoRecipients stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -A -NoRecipients -n0 stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -A -i -NoRecipients -n0 stream >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l -NoRecipients -n0 -OriginatorInfo envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -NoRecipients -n0 -OriginatorInfo stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -i -NoRecipients -n0 -OriginatorInfo stream >> ..\regress.out
|
||
|
|
|
||
|
|
@cd ..
|
||
|
|
|
||
|
|
%_CDB_% tsca -l %store% Envelope -NoRecipients >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% Envelope -0 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% Envelope -NoRecipients -0 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% Envelope -rnoenv.msg >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% Envelope -rnoenv3.msg >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% makecert -sy 1 -sky exchange -sk testrsa1 testrsa1.cer >> regress.out
|
||
|
|
%_CDB_% tpvkdel -p1 -ctestrsa1 -d >> regress.out
|
||
|
|
%_CDB_% makecert -sy 1 -sky exchange -sk testrsa1 -len 512 -n "CN=Test RSA 1" testrsa1.cer >> regress.out
|
||
|
|
if exist testrsa.store del testrsa.store
|
||
|
|
%_CDB_% tstore testrsa.store -b -atestrsa1.cer >> regress.out
|
||
|
|
%_CDB_% tstore testrsa.store -PKey >> regress.out
|
||
|
|
%_CDB_% tstore testrsa.store >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tsca -l testrsa.store -AllRecipients Envelope >> regress.out
|
||
|
|
%_CDB_% tsca -l testrsa.store -RecipientKeyId -AllRecipients Envelope >> regress.out
|
||
|
|
|
||
|
|
@if "%p%"=="" goto CmsDone
|
||
|
|
%_CDB_% tsca -l testrsa.store -E3deS -AllRecipients Envelope >> regress.out
|
||
|
|
%_CDB_% tsca -l testrsa.store -Erc2 -e56 -AllRecipients Envelope >> regress.out
|
||
|
|
%_CDB_% tsca -l testrsa.store -Erc2 -e64 -AllRecipients Envelope >> regress.out
|
||
|
|
%_CDB_% tsca -l testrsa.store -Erc2 -e64 -AllRecipients -RecipientKeyId Envelope >> regress.out
|
||
|
|
%_CDB_% tsca -l testrsa.store -Erc2 -e128 -AllRecipients Envelope >> regress.out
|
||
|
|
|
||
|
|
:CmsDone
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem CMS2
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="cms2" if not %t%=="all" goto Cms2Done
|
||
|
|
|
||
|
|
%_CDB_% makecert -sy 13 -sky exchange -sk testdh1 testdh1.cer >> regress.out
|
||
|
|
%_CDB_% makecert -sy 13 -sky exchange -sk testdh2 testdh2.cer >> regress.out
|
||
|
|
%_CDB_% makecert -sy 1 -sky exchange -sk testrsa2 testrsa2.cer >> regress.out
|
||
|
|
%_CDB_% tpvkdel -p13 -ctestdh1 -d >> regress.out
|
||
|
|
%_CDB_% tpvkdel -p13 -ctestdh2 -d >> regress.out
|
||
|
|
%_CDB_% tpvkdel -p1 -ctestrsa2 -d >> regress.out
|
||
|
|
%_CDB_% makecert -sy 13 -sky exchange -sk testdh1 -len 512 -n "CN=Test Hellman 1" testdh1.cer >> regress.out
|
||
|
|
%_CDB_% makecert -sy 13 -sky exchange -sk testdh2 -dhp testdh1.cer -n "CN=Test Hellman 2" testdh2.cer >> regress.out
|
||
|
|
%_CDB_% makecert -sy 1 -sky exchange -sk testrsa2 -len 512 -n "CN=Test RSA 2" testrsa2.cer >> regress.out
|
||
|
|
%_CDB_% tstore -v testdh1.cer >> regress.out
|
||
|
|
%_CDB_% tstore -v testdh2.cer >> regress.out
|
||
|
|
if exist testdh.store del testdh.store
|
||
|
|
%_CDB_% tstore testdh.store -b -atestdh1.cer >> regress.out
|
||
|
|
%_CDB_% tstore testdh.store -b -atestdh2.cer >> regress.out
|
||
|
|
%_CDB_% tstore testdh.store -PKey >> regress.out
|
||
|
|
%_CDB_% tstore testdh.store >> regress.out
|
||
|
|
|
||
|
|
if exist testdh1.store del testdh1.store
|
||
|
|
%_CDB_% tstore testdh1.store -b -atestdh1.cer >> regress.out
|
||
|
|
%_CDB_% tstore testdh1.store -PSilentKey >> regress.out
|
||
|
|
%_CDB_% tsca -l testdh1.store -AllRecipients Envelope >> regress.out
|
||
|
|
%_CDB_% tsca -l testdh1.store -AllRecipients -RecipientKeyId Envelope >> regress.out
|
||
|
|
if exist testdh2.store del testdh2.store
|
||
|
|
%_CDB_% tstore testdh2.store -b -atestdh2.cer >> regress.out
|
||
|
|
%_CDB_% tstore testdh2.store -PKey >> regress.out
|
||
|
|
%_CDB_% tsca -l testdh2.store -AllRecipients Envelope >> regress.out
|
||
|
|
%_CDB_% tsca -l testdh2.store -AllRecipients -RecipientKeyId Envelope >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tsca -l testdh.store -AllRecipients Envelope >> regress.out
|
||
|
|
%_CDB_% tsca -l testdh.store -RecipientKeyId -AllRecipients Envelope >> regress.out
|
||
|
|
%_CDB_% tsca -l testdh.store -p13 -AllRecipients -RecipientKeyId Envelope >> regress.out
|
||
|
|
%_CDB_% tsca -l testdh.store -Erc2 -e56 -AllRecipients -RecipientKeyId Envelope >> regress.out
|
||
|
|
%_CDB_% tsca -l testdh.store -p13 -Erc2 -e56 -AllRecipients Envelope >> regress.out
|
||
|
|
|
||
|
|
if exist testdhrsa.store del testdhrsa.store
|
||
|
|
%_CDB_% tcopycer testdh.store testdhrsa.store >> regress.out
|
||
|
|
%_CDB_% tstore testdhrsa.store -b -atestrsa2.cer >> regress.out
|
||
|
|
%_CDB_% tsca -l testdhrsa.store -v -AllRecipients Envelope >> regress.out
|
||
|
|
%_CDB_% tsca -l testdhrsa.store -v -RecipientKeyId -AllRecipients Envelope >> regress.out
|
||
|
|
%_CDB_% tstore testdhrsa.store -PKey >> regress.out
|
||
|
|
%_CDB_% tsca -l testdhrsa.store -v -AllRecipients Envelope >> regress.out
|
||
|
|
%_CDB_% tsca -l testdhrsa.store -v -RecipientKeyId -AllRecipients Envelope >> regress.out
|
||
|
|
|
||
|
|
|
||
|
|
@cd tcrmsg
|
||
|
|
|
||
|
|
@rem tests export/import of symmetric key from CSP to another
|
||
|
|
%_CDB_% tcrmsg -l -KeyTrans -PRecipient envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyTrans -PRecipient -RecipientKeyId envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -KeyTrans -PRecipient stream >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -sE -KeyTrans -RecipientKeyId -PRecipient stream >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l -KeyTrans -PRecipient envelope -Erc4 >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyTrans -PRecipient envelope -Erc4 -e40 >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyTrans -PRecipient envelope -Erc4 -e40 -I >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyTrans -PRecipient envelope -Erc4 -e56 >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyTrans -PRecipient envelope -Erc4 -e56 -NoSalt >> ..\regress.out
|
||
|
|
|
||
|
|
@rem tests for MailList recipients
|
||
|
|
%_CDB_% tcrmsg -l -MailList envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -MailList -e40 envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -MailList -e56 envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -MailList -p13 envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -MailList -e40 -p13 envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -MailList -e56 -p13 envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -MailList -PDefault envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -MailList -PRecipient envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -MailList -KeyTrans envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -MailList -KeyTrans -PRecipient -RecipientKeyId envelope >> ..\regress.out
|
||
|
|
@rem tests for KeyAgree recipients
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -p13 envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -p13 -RecipientKeyId envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -p13 -e40 envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -p13 -e56 -I envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -p13 -PDefault envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -p13 -PRecipient envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -PDefault envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -PRecipient envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -KeyTrans -PDefault envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -KeyTrans -PRecipient envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -KeyTrans -PRecipient -PDefault envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -KeyTrans -MailList -PRecipient -PDefault envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -KeyTrans -MailList -PDefault envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -KeyTrans -MailList -PDefault -RecipientKeyId envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -MailList -p13 envelope >> ..\regress.out
|
||
|
|
@cd ..
|
||
|
|
|
||
|
|
@if "%p%"=="" goto Cms2Done
|
||
|
|
%_CDB_% tsca -l testdh.store -E3deS -AllRecipients Envelope >> regress.out
|
||
|
|
%_CDB_% tsca -l testdh.store -Erc2 -e64 -AllRecipients Envelope >> regress.out
|
||
|
|
%_CDB_% tsca -l testdh.store -Erc2 -e128 -AllRecipients Envelope >> regress.out
|
||
|
|
%_CDB_% tsca -l testdh.store -p13 -E3des -AllRecipients Envelope >> regress.out
|
||
|
|
%_CDB_% tsca -l testdh.store -p13 -Erc2 -e64 -AllRecipients Envelope >> regress.out
|
||
|
|
%_CDB_% tsca -l testdh.store -p13 -Erc2 -e128 -AllRecipients Envelope >> regress.out
|
||
|
|
|
||
|
|
@cd tcrmsg
|
||
|
|
%_CDB_% tcrmsg -l -KeyTrans -PRecipient envelope -Erc4 -e64 %pe% >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyTrans -PRecipient envelope -Erc4 -e128 %pe% >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l -MailList -e64 envelope %pe% >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -MailList -e128 envelope %pe% >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -MailList -Edes -PEnhanced envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -MailList -E3des -PEnhanced envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -MailList -Edes envelope %pe% >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -MailList -E3des envelope %pe% >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -MailList -Edes -p13 envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -MailList -E3des -p13 envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -MailList -e64 -p13 envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -MailList -e128 -p13 envelope >> ..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -p13 -Edes envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -p13 -E3des envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -p13 -e64 -I envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -p13 -e128 -I envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -MailList -Edes -p13 envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -MailList -E3des -p13 envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -KeyTrans -Edes envelope >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -KeyTrans -E3des -PDefault envelope %pe% >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -KeyTrans -MailList -Edes envelope %pe% >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -KeyTrans -MailList -E3des -PDefault envelope %pe% >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -KeyTrans -MailList -E3des -PDefault -PRecipient envelope %pe% >> ..\regress.out
|
||
|
|
%_CDB_% tcrmsg -l -KeyAgree -KeyTrans -MailList -E3des -PEnhanced -PDefault -PRecipient envelope >> ..\regress.out
|
||
|
|
@cd ..
|
||
|
|
|
||
|
|
:Cms2Done
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem STREAMSCA
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="streamsca" goto StreamScaDone
|
||
|
|
%_CDB_% tsca -l %store% Sign -s >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% Sign -S >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% Envelope -s >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% Envelope -S >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% SignAndEnvelope -s >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% SignAndEnvelope -S >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% SignAndEnvelope -s -EncapsulatedContent -I >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% SignAndEnvelope -S -EncapsulatedContent -I >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% Envelope -s -NoRecipients >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% Envelope -S -NoRecipients >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% Envelope -s -0 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% Envelope -S -0 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% Envelope -s -NoRecipients -0 >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% Envelope -S -NoRecipients -0 >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tsca -l %store% Envelope -rnoenv.msg -s >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% Envelope -rnoenv3.msg -s >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tsca -l %store% Sign -s -SignerKeyId >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% Sign -S -SignerKeyId >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% Envelope -s -RecipientKeyId >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% Envelope -S -RecipientKeyId >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% SignAndEnvelope -s -SignerKeyId -RecipientKeyId >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% SignAndEnvelope -S -SignerKeyId -RecipientKeyId >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% SignAndEnvelope -s -EncapsulatedContent -I -SignerKeyId -RecipientKeyId >> regress.out
|
||
|
|
%_CDB_% tsca -l %store% SignAndEnvelope -S -EncapsulatedContent -I -SignerKeyId -RecipientKeyId >> regress.out
|
||
|
|
|
||
|
|
:StreamScaDone
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem CERT
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="cert" if not %t%=="all" goto CertDone
|
||
|
|
%_CDB_% tcert -fAll -wtmp.cer >> regress.out
|
||
|
|
%_CDB_% tstore tmp.cer >> regress.out
|
||
|
|
%_CDB_% tcert -f crl >> regress.out
|
||
|
|
%_CDB_% tcert -f certReq >> regress.out
|
||
|
|
%_CDB_% tcert -N >> regress.out
|
||
|
|
%_CDB_% tcert -N -fAll >> regress.out
|
||
|
|
%_CDB_% tcert crl -N >> regress.out
|
||
|
|
%_CDB_% tcert certReq -N >> regress.out
|
||
|
|
%_CDB_% tcert certReq -o1.2.840.113549.2.5 >> regress.out
|
||
|
|
%_CDB_% tcert keygenReq -N >> regress.out
|
||
|
|
%_CDB_% tcert ContentInfo -N >> regress.out
|
||
|
|
%_CDB_% tcert -rvsgood.cer -fAll -N>> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcert CertPair -wtmp.pair -N >> regress.out
|
||
|
|
%_CDB_% tstore tmp.pair >> regress.out
|
||
|
|
%_CDB_% tcrobu file://tmp.pair cert -m >> regress.out
|
||
|
|
%_CDB_% tcert CertPair -wtmp.pair -N -Rvsrevoke.cer >> regress.out
|
||
|
|
%_CDB_% tstore tmp.pair >> regress.out
|
||
|
|
%_CDB_% tcrobu file://tmp.pair cert -m >> regress.out
|
||
|
|
%_CDB_% tcert CertPair -wtmp.pair -N -Fvsgood.cer >> regress.out
|
||
|
|
%_CDB_% tstore tmp.pair >> regress.out
|
||
|
|
%_CDB_% tcrobu file://tmp.pair cert -m >> regress.out
|
||
|
|
%_CDB_% tcert CertPair -wtmp.pair -Fvsgood.cer -Rvsrevoke.cer >> regress.out
|
||
|
|
%_CDB_% tcert CertPair -wtmp.pair -N -Fvsgood.cer -Rvsrevoke.cer >> regress.out
|
||
|
|
%_CDB_% tstore tmp.pair >> regress.out
|
||
|
|
%_CDB_% tcrobu file://tmp.pair cert -m >> regress.out
|
||
|
|
|
||
|
|
@rem modified self-signed der.cer
|
||
|
|
@rem ber1.cer - changed time to have 0 seconds
|
||
|
|
@rem ber2.cer - serial number has leading 0's
|
||
|
|
@rem ber3.cer - serial number has leading FF's
|
||
|
|
@rem badder.cer - removed last 40 bytes from file
|
||
|
|
%_CDB_% tcert -rder.cer >> regress.out
|
||
|
|
%_CDB_% tcert -rber1.cer >> regress.out
|
||
|
|
%_CDB_% tcert -rber2.cer >> regress.out
|
||
|
|
%_CDB_% tcert -rber3.cer >> regress.out
|
||
|
|
@rem OSS bug:: the following shortened file should return OSS error
|
||
|
|
@rem following doesn't fail, use Asn1UtilExtractValues instead of OSS
|
||
|
|
@rem %_CDB_% tcert -rbadder.cer >> regress.out
|
||
|
|
%_CDB_% tx500str -v >> regress.out
|
||
|
|
%_CDB_% tx500str -nCN=Joe -f0x1 -e0x80070057 >> regress.out
|
||
|
|
%_CDB_% tx500str -cvsgood.cer -fAll >> regress.out
|
||
|
|
%_CDB_% tx500str -cvsgood.cer -fAll -I >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tfindcer %store% -I -q -pnoname1.cer NoNameIssuer1 >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% -I -q -pnoname2.cer NoNameIssuer2 >> regress.out
|
||
|
|
|
||
|
|
@rem -g0x10000 - CERT_NAME_STR_DISABLE_IE4_UTF8_FLAG
|
||
|
|
@rem -g0x10000 - CERT_NAME_DISABLE_IE4_UTF8_FLAG
|
||
|
|
%_CDB_% tx500str -cnoname1.cer -S -g9 -e0x80070057 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname1.cer -S -g1 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname1.cer -S -g2 -e0x80092004 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname1.cer -S -g3 -e0x80092004 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname1.cer -S -g4 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname1.cer -I -g1 -e0x80092004 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname1.cer -I -g2 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname1.cer -I -g2 -f2 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname1.cer -I -g2 -f3 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname1.cer -I -g3 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname1.cer -I -g3 -a1.2.2 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname1.cer -I -g4 >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tx500str -cnoname2.cer -S -g1 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname2.cer -S -g2 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname2.cer -S -g0x10002 -f2 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname2.cer -S -g0x10002 -f3 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname2.cer -S -g3 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname2.cer -S -g3 -a2.5.4.11 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname2.cer -S -g3 -a2.5.4.3 -e0x80092004 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname2.cer -S -g4 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname2.cer -I -g1 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname2.cer -I -g2 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname2.cer -I -g2 -f2 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname2.cer -I -g2 -f3 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname2.cer -I -g3 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname2.cer -I -g3 -a2.5.4.11 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname2.cer -I -g3 -a2.5.4.3 >> regress.out
|
||
|
|
%_CDB_% tx500str -cnoname2.cer -I -g4 >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tx500str -cvsgood.cer -S -g0x10001 -v >> regress.out
|
||
|
|
%_CDB_% tx500str -cvsgood.cer -S -g0x10002 -v >> regress.out
|
||
|
|
%_CDB_% tx500str -cvsgood.cer -S -g2 -f0x10000 -v >> regress.out
|
||
|
|
%_CDB_% tx500str -cvsgood.cer -S -g0x10003 -v >> regress.out
|
||
|
|
%_CDB_% tx500str -cvsgood.cer -S -g0x10004 -v >> regress.out
|
||
|
|
%_CDB_% tx500str -cvsgood.cer -I -g1 -e0x80092004 >> regress.out
|
||
|
|
%_CDB_% tx500str -cvsgood.cer -I -g2 >> regress.out
|
||
|
|
%_CDB_% tx500str -cvsgood.cer -I -g3 >> regress.out
|
||
|
|
%_CDB_% tx500str -cvsgood.cer -I -g3 >> regress.out
|
||
|
|
%_CDB_% tx500str -cvsgood.cer -I -g4 >> regress.out
|
||
|
|
|
||
|
|
@rem the following files contain Unicode base64 encoded certs with a
|
||
|
|
@rem leading L'\xfeff inserted by notepad.exe.
|
||
|
|
%_CDB_% tstore unicode64.cer >> regress.out
|
||
|
|
%_CDB_% tstore unicode64a.cer >> regress.out
|
||
|
|
%_CDB_% tstore unicode64b.cer >> regress.out
|
||
|
|
:CertDone
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem STORE
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="store" if not %t%=="all" goto StoreDone
|
||
|
|
@del tmp.store >nul
|
||
|
|
|
||
|
|
regsvr32 -s setx509.dll
|
||
|
|
@rem regsvr32 -s signcde.dll
|
||
|
|
%_CDB_% tstore2 tmp.store >> regress.out
|
||
|
|
del tmp.spc >> regress.out
|
||
|
|
%_CDB_% tcopycer tmp.store tmp.spc -7 >> regress.out
|
||
|
|
%_CDB_% tstore tmp.store >> regress.out
|
||
|
|
%_CDB_% tstore tmp.spc >> regress.out
|
||
|
|
%_CDB_% tstore -R tmp.store >> regress.out
|
||
|
|
%_CDB_% tstore -R tmp.spc >> regress.out
|
||
|
|
%_CDB_% tstore -v tmp.store >> regress.out
|
||
|
|
%_CDB_% tstore -F tmp.store >> regress.out
|
||
|
|
%_CDB_% tcrobu file://tmp.spc cert -m >> regress.out
|
||
|
|
%_CDB_% tcrobu file://tmp.spc crl -m >> regress.out
|
||
|
|
%_CDB_% tcrobu file://tmp.spc pkcs7 >> regress.out
|
||
|
|
%_CDB_% tcrobu file://tmp.store any >> regress.out
|
||
|
|
@rem -f0x4 Defer close
|
||
|
|
%_CDB_% tstore -b -f0x4 tmp.store >> regress.out
|
||
|
|
%_CDB_% tstore -cSign tmp.store >> regress.out
|
||
|
|
%_CDB_% tfindcer tmp.store -S -aPhilPub -c >> regress.out
|
||
|
|
%_CDB_% tfindcer tmp.store -S -APhilPub -c >> regress.out
|
||
|
|
%_CDB_% tfindcer tmp.store -S -aphilpub -C >> regress.out
|
||
|
|
%_CDB_% tfindcer tmp.store -S -ApHILpUB -C >> regress.out
|
||
|
|
%_CDB_% tfindcer tmp.store -S recipient >> regress.out
|
||
|
|
%_CDB_% tfindcer tmp.store -I testroot >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tstore -dALL -s Test >> regress.out
|
||
|
|
%_CDB_% tstore -dALL -R -s Test >> regress.out
|
||
|
|
%_CDB_% tstore -dALL -T -s Test >> regress.out
|
||
|
|
%_CDB_% tcopycer tmp.store -s Test >> regress.out
|
||
|
|
%_CDB_% tstore -R -v -s Test -i2 >> regress.out
|
||
|
|
|
||
|
|
tstore -dALL -s Test >> regress.out
|
||
|
|
tstore -dALL -R -s Test >> regress.out
|
||
|
|
%_CDB_% tcopycer -R tmp.store -s Test >> regress.out
|
||
|
|
%_CDB_% tstore -R -v -s Test -i2 >> regress.out
|
||
|
|
|
||
|
|
@rem CERT_STORE_MAXIMUM_ALLOWED_FLAG -f0x1000
|
||
|
|
tstore -dALL -s lm:Test >> regress.out
|
||
|
|
tstore -dALL -s Test >> regress.out
|
||
|
|
%_CDB_% tcopycer tmp.store -s lm:Test -aduplicate1 >> regress.out
|
||
|
|
%_CDB_% tstore -v -s Test >> regress.out
|
||
|
|
%_CDB_% tstore -v -f0x1000 -s Test >> regress.out
|
||
|
|
%_CDB_% tstore -v -s Test -dAll -E >> regress.out
|
||
|
|
%_CDB_% tstore -v -s Test -f0x1000 -dAll >> regress.out
|
||
|
|
%_CDB_% tcopycer tmp.store -s lm:Test -aduplicate1 >> regress.out
|
||
|
|
%_CDB_% tstore -v -s phy:Test\.LocalMachine >> regress.out
|
||
|
|
%_CDB_% tstore -v -f0x1000 -s phy:Test\.LocalMachine >> regress.out
|
||
|
|
%_CDB_% tstore -s phy:Test\.LocalMachine -dAll -E >> regress.out
|
||
|
|
%_CDB_% tstore -f0x1000 -s phy:Test\.LocalMachine -dAll >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcopycer tmp.store -s Test -aduplicate1 >> regress.out
|
||
|
|
%_CDB_% tstore -v -s Test >> regress.out
|
||
|
|
%_CDB_% tcopycer tmp.store -s Test -aduplicate2 >> regress.out
|
||
|
|
%_CDB_% tstore -v -s Test >> regress.out
|
||
|
|
%_CDB_% tcopycer -R tmp.store -s Test -aduplicate2 >> regress.out
|
||
|
|
%_CDB_% tstore -v -s Test >> regress.out
|
||
|
|
%_CDB_% tcopycer -A tmp.store -s Test -aduplicate1 >> regress.out
|
||
|
|
%_CDB_% tstore -v -s Test >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tstore -P -i0 -s Test >> regress.out
|
||
|
|
%_CDB_% tstore -P -i0 -s Test -f0x18000 -E >> regress.out
|
||
|
|
%_CDB_% tstore -d -P -i0 -s Test -f0x18000 -E >> regress.out
|
||
|
|
%_CDB_% tstore -d -P -i0 -s Test >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tstore -P -i0 -s Test -R >> regress.out
|
||
|
|
%_CDB_% tstore -P -i0 -s Test -f0x18000 -E -R >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tstore -i0 -ptest.cer -s Test >> regress.out
|
||
|
|
%_CDB_% tstore test.cer >> regress.out
|
||
|
|
%_CDB_% tcrobu file://test.cer cert >> regress.out
|
||
|
|
%_CDB_% tcrobu file://test.cer cert -m >> regress.out
|
||
|
|
%_CDB_% tstore -i0 -ptest.crl -s Test -R >> regress.out
|
||
|
|
%_CDB_% tcrobu file://test.crl crl >> regress.out
|
||
|
|
%_CDB_% tcrobu file://test.crl crl -m >> regress.out
|
||
|
|
%_CDB_% tstore -d -i0 -s Test -f0x18000 -E >> regress.out
|
||
|
|
%_CDB_% tstore -d -i0 -s Test >> regress.out
|
||
|
|
%_CDB_% tstore -d -i0 -s Test -f0x18000 -E -R >> regress.out
|
||
|
|
%_CDB_% tstore -d -i0 -s Test -R >> regress.out
|
||
|
|
%_CDB_% tfindcer -d -s Test duplicate >> regress.out
|
||
|
|
%_CDB_% tstore -atest.cer -s Test -f0x18000 -E >> regress.out
|
||
|
|
%_CDB_% tstore -atest.cer -s Test >> regress.out
|
||
|
|
%_CDB_% tstore -Atest.cer -s Test >> regress.out
|
||
|
|
%_CDB_% tstore -atest.crl -s Test -R -f0x18000 -E >> regress.out
|
||
|
|
%_CDB_% tstore -atest.crl -s Test -R >> regress.out
|
||
|
|
%_CDB_% tstore -Atest.crl -s Test -R >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcopycer tmp.store -s Test -ame >> regress.out
|
||
|
|
%_CDB_% tfindcer -s Test -S -q -ame -axchg -pme.cer >> regress.out
|
||
|
|
%_CDB_% tfindcer -s Test -S -ame -axchg -v >> regress.out
|
||
|
|
%_CDB_% tstore -b -P -s Test >> regress.out
|
||
|
|
%_CDB_% tstore -b -Ime.cer -s Test >> regress.out
|
||
|
|
%_CDB_% tfindcer -s Test -S -ame -axchg -v >> regress.out
|
||
|
|
%_CDB_% tstore -b -Ame.cer -s Test >> regress.out
|
||
|
|
%_CDB_% tfindcer -s Test -S -ame -axchg -v >> regress.out
|
||
|
|
%_CDB_% tstore -b -P -s Test >> regress.out
|
||
|
|
%_CDB_% tcopycer tmp.store -s Test -ame -I >> regress.out
|
||
|
|
%_CDB_% tfindcer -s Test -S -ame -axchg -v >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tstore3 >> regress.out
|
||
|
|
%_CDB_% makecert -eku "2.3.2.3,2.2.2.2" teku.cer >> regress.out
|
||
|
|
%_CDB_% teku -fteku.cer >> regress.out
|
||
|
|
|
||
|
|
@rem check ADD_NEWER
|
||
|
|
if exist tmp2.store del tmp2.store
|
||
|
|
%_CDB_% tcopycer tmp.store tmp2.store -R >> regress.out
|
||
|
|
del tmp2.store
|
||
|
|
%_CDB_% tcopycer tmp.store tmp2.store -I >> regress.out
|
||
|
|
@rem following commit reverses entries in store
|
||
|
|
%_CDB_% tstore -b -C tmp.store >> regress.out
|
||
|
|
del tmp2.store
|
||
|
|
%_CDB_% tcopycer tmp.store tmp2.store -R >> regress.out
|
||
|
|
del tmp2.store
|
||
|
|
%_CDB_% tcopycer tmp.store tmp2.store -I >> regress.out
|
||
|
|
|
||
|
|
@rem check file commits
|
||
|
|
@rem -f0x4000 - Open existing
|
||
|
|
@rem -f0x2000 - Create new
|
||
|
|
if exist tmp.p7c del tmp.p7c
|
||
|
|
if exist tmp.spc del tmp.spc
|
||
|
|
if exist tmp.str del tmp.str
|
||
|
|
%_CDB_% tstore -avsgood.cer -C -f0x2000 tmp.p7c >> regress.out
|
||
|
|
%_CDB_% tstore -avsrevoke.cer -CClear -f0x4000 tmp.p7c >> regress.out
|
||
|
|
%_CDB_% tstore -b tmp.p7c >> regress.out
|
||
|
|
%_CDB_% tstore -avsrevoke.cer -C -f0x4000 tmp.p7c >> regress.out
|
||
|
|
%_CDB_% tstore -b tmp.p7c >> regress.out
|
||
|
|
%_CDB_% tstore -avsgood.cer -CForce tmp.spc >> regress.out
|
||
|
|
%_CDB_% tstore -b tmp.spc >> regress.out
|
||
|
|
%_CDB_% tstore -avsgood.cer -C -f0x2000 tmp.str >> regress.out
|
||
|
|
%_CDB_% tstore -avsrevoke.cer -CClear -f0x4000 tmp.str >> regress.out
|
||
|
|
%_CDB_% tstore -b tmp.str >> regress.out
|
||
|
|
%_CDB_% tstore -avsrevoke.cer -C -f0x4000 tmp.str >> regress.out
|
||
|
|
%_CDB_% tstore -b tmp.str >> regress.out
|
||
|
|
%_CDB_% tstore -i0 -d -C tmp.str >> regress.out
|
||
|
|
%_CDB_% tstore -b tmp.str >> regress.out
|
||
|
|
%_CDB_% tstore -P -C tmp.p7c >> regress.out
|
||
|
|
%_CDB_% tstore -i0 -d -C tmp.p7c >> regress.out
|
||
|
|
%_CDB_% tstore -v tmp.p7c >> regress.out
|
||
|
|
%_CDB_% tstore -P -C tmp.str >> regress.out
|
||
|
|
%_CDB_% tstore -v tmp.str >> regress.out
|
||
|
|
|
||
|
|
@rem -f0x800 - CERT_STORE_SHARE_FLAG
|
||
|
|
if exist tmp.store del tmp.store
|
||
|
|
%_CDB_% tcopycer -A vsgood.cer tmp.store >> regress.out
|
||
|
|
%_CDB_% tcopycer -A vsgood.cer tmp.store >> regress.out
|
||
|
|
%_CDB_% tcopycer -A vsgood.cer tmp.store >> regress.out
|
||
|
|
%_CDB_% tstore tmp.store -S >> regress.out
|
||
|
|
%_CDB_% tstore tmp.store -f0x800 >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tstore vsgood.cer -PKeyProvParam >> regress.out
|
||
|
|
|
||
|
|
@if "%p%"=="" goto StoreDone
|
||
|
|
%_CDB_% tstore -cSign -v dss512.cer >> regress.out
|
||
|
|
%_CDB_% tstore -cSign -v dss768.cer >> regress.out
|
||
|
|
%_CDB_% tstore -cSign -v dss1024.cer >> regress.out
|
||
|
|
:StoreDone
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem KEYSTORE
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="keystore" if not %t%=="all" goto KSDone
|
||
|
|
%_CDB_% tprov >> regress.out
|
||
|
|
if exist tmp.store del tmp.store
|
||
|
|
%_CDB_% tstore -avsgood.cer -b tmp.store >> regress.out
|
||
|
|
%_CDB_% tstore -PKey -E tmp.store >> regress.out
|
||
|
|
if exist tmp.store del tmp.store
|
||
|
|
%_CDB_% tstore -adss1024.cer -b tmp.store >> regress.out
|
||
|
|
%_CDB_% tstore -PKey -E tmp.store >> regress.out
|
||
|
|
if exist tmp.store del tmp.store
|
||
|
|
if exist mach.store del mach.store
|
||
|
|
@if "%p%"=="" goto ksproviders
|
||
|
|
%_CDB_% tstore2 -P tmp.store >> regress.out
|
||
|
|
%_CDB_% tstore2 -P -M mach.store >> regress.out
|
||
|
|
goto ksafter
|
||
|
|
:ksproviders
|
||
|
|
%_CDB_% tstore2 tmp.store >> regress.out
|
||
|
|
%_CDB_% tstore2 -M mach.store >> regress.out
|
||
|
|
:ksafter
|
||
|
|
%_CDB_% tfindcer tmp.store -I default -d -q >> regress.out
|
||
|
|
%_CDB_% tfindcer mach.store -I default -d -q >> regress.out
|
||
|
|
%_CDB_% tstore -PSilentKey mach.store >> regress.out
|
||
|
|
%_CDB_% tstore -PKey mach.store >> regress.out
|
||
|
|
%_CDB_% tstore -PKey tmp.store >> regress.out
|
||
|
|
%_CDB_% tstore -PSilentKey tmp.store >> regress.out
|
||
|
|
:KSDone
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem NEWSTORE
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="newstore" if not %t%=="all" goto NewStoreDone
|
||
|
|
regsvr32 -s textstor.dll
|
||
|
|
|
||
|
|
@rem CertStore dwFlags definitions
|
||
|
|
@rem CERT_SYSTEM_STORE_CURRENT_USER 0x00010000
|
||
|
|
@rem CERT_SYSTEM_STORE_LOCAL_MACHINE 0x00020000
|
||
|
|
@rem CERT_SYSTEM_STORE_DOMAIN_POLICY 0x00030000
|
||
|
|
@rem CERT_SYSTEM_STORE_CURRENT_SERVICE 0x00040000
|
||
|
|
@rem CERT_SYSTEM_STORE_SERVICES 0x00050000
|
||
|
|
@rem CERT_SYSTEM_STORE_USERS 0x00060000
|
||
|
|
@rem CERT_STORE_NO_CRYPT_RELEASE_FLAG 0x00000001
|
||
|
|
@rem CERT_STORE_DELETE_FLAG 0x00000010
|
||
|
|
@rem CERT_STORE_READONLY_FLAG 0x00008000
|
||
|
|
@rem CERT_STORE_OPEN_EXISTING_FLAG 0x00004000
|
||
|
|
@rem CERT_STORE_CREATE_NEW_FLAG 0x00002000
|
||
|
|
@rem CERT_STORE_MAXIMUM_ALLOWED_FLAG 0x00001000
|
||
|
|
@rem PhysicalStore dwFlags definitions
|
||
|
|
@rem CERT_PHYSICAL_STORE_ADD_ENABLE_FLAG 0x1
|
||
|
|
@rem CERT_PHYSICAL_STORE_OPEN_DISABLE_FLAG 0x2
|
||
|
|
@rem CERT_PHYSICAL_STORE_REMOTE_OPEN_DISABLE_FLAG 0x4
|
||
|
|
@rem CERT_PHYSICAL_STORE_INSERT_COMPUTER_NAME_ENABLE_FLAG 0x8
|
||
|
|
@rem Error definitions
|
||
|
|
@rem E_INVALID_ARG 0x80070057
|
||
|
|
@rem ERROR_FILE_EXISTS 80
|
||
|
|
@rem ERROR_FILE_NOT_FOUND 2
|
||
|
|
%_CDB_% tsstore unregsys TestCollection >> regress.out
|
||
|
|
%_CDB_% tsstore unregsys TestCollection2 >> regress.out
|
||
|
|
%_CDB_% tsstore unregsys TestCollection3 >> regress.out
|
||
|
|
%_CDB_% tsstore unregsys TestSibling100 >> regress.out
|
||
|
|
%_CDB_% tsstore unregsys TestSibling200 >> regress.out
|
||
|
|
%_CDB_% tsstore -f0x14000 -e0x80070057 regsys TestCollection >> regress.out
|
||
|
|
%_CDB_% tsstore -f0x12000 regsys TestCollection >> regress.out
|
||
|
|
%_CDB_% tsstore -f0x12000 -e80 regsys TestCollection >> regress.out
|
||
|
|
%_CDB_% tsstore regsys TestCollection >> regress.out
|
||
|
|
%_CDB_% tsstore enumphy TestCollection >> regress.out
|
||
|
|
%_CDB_% tsstore regphy TestCollection TestSibling100 -pOpenStoreProvider System -pOpenParameters TestSibling100 -pOpenEncodingType 0x00010001 -pOpenFlags 0x10000 -pFlags 0x1 -pPriority 100 >> regress.out
|
||
|
|
%_CDB_% tsstore regphy TestCollection TestSibling200 -pOpenStoreProvider TestExt -pOpenParameters TestSibling200 -pOpenFlags 0x10000 -pFlags 0x1 -pPriority 200 >> regress.out
|
||
|
|
|
||
|
|
tsstore regphy -f0x14000 -e0x80070057 TestCollection TestSibling500 -pOpenStoreProvider System -pOpenParameters TestSibling500 -pPriority 500 >> regress.out
|
||
|
|
tsstore regphy -f0x12000 TestCollection TestSibling500 -pOpenStoreProvider System -pOpenParameters TestSibling500 -pPriority 500 >> regress.out
|
||
|
|
tsstore regphy -f0x12000 -e80 TestCollection TestSibling500 -pOpenStoreProvider System -pOpenParameters TestSibling500 -pPriority 500 >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tsstore regphy TestCollection TestSibling600 -pOpenStoreProvider System -pOpenParameters TestSibling600 -pPriority 600 >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tsstore -v enumphy TestCollection >> regress.out
|
||
|
|
%_CDB_% tsstore unregphy -f0x14000 TestCollection TestSibling500 >> regress.out
|
||
|
|
%_CDB_% tsstore unregphy -f0x14000 -e2 TestCollection TestSibling500 >> regress.out
|
||
|
|
%_CDB_% tsstore unregphy TestCollection TestSibling600 >> regress.out
|
||
|
|
%_CDB_% tsstore -v enumphy TestCollection >> regress.out
|
||
|
|
%_CDB_% tsstore -v -f0x1000 enumphy TestCollection >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tstore -s TestCollection -avsgood.cer >> regress.out
|
||
|
|
%_CDB_% tstore -s TestCollection -b >> regress.out
|
||
|
|
%_CDB_% tstore -s TestSibling200 -b >> regress.out
|
||
|
|
%_CDB_% tstore -s TestSibling100 -avsrevoke.cer >> regress.out
|
||
|
|
%_CDB_% tstore -s TestCollection -b >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% -S -q -aMSPub -pmspub.cer >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% -S -q -aPhilPub -pphilpub.cer >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% -S -q -ame -axchg -pme.cer >> regress.out
|
||
|
|
%_CDB_% tstore -s TestCollection -amspub.cer >> regress.out
|
||
|
|
%_CDB_% tstore -s TestSibling100 -aphilpub.cer >> regress.out
|
||
|
|
%_CDB_% tstore -s TestCollection -b >> regress.out
|
||
|
|
%_CDB_% tsstore regphy TestCollection TestSibling300 -pOpenStoreProvider File -pOpenParameters me.cer -pOpenEncodingType 0x00010001 -pOpenFlags 0x8000 -pFlags 0x0 -pPriority 300 >> regress.out
|
||
|
|
%_CDB_% tsstore -v enumphy TestCollection >> regress.out
|
||
|
|
%_CDB_% tstore -s TestCollection -b >> regress.out
|
||
|
|
%_CDB_% tstore -s TestSibling200 -b >> regress.out
|
||
|
|
%_CDB_% tstore -s TestSibling100 -b >> regress.out
|
||
|
|
%_CDB_% tstore -s TestCollection -Aphilpub.cer >> regress.out
|
||
|
|
%_CDB_% tstore -s TestCollection -Avsrevoke.cer >> regress.out
|
||
|
|
%_CDB_% tstore -s TestCollection -b >> regress.out
|
||
|
|
%_CDB_% tstore -s TestSibling200 -b >> regress.out
|
||
|
|
%_CDB_% tstore -s TestSibling100 -b >> regress.out
|
||
|
|
|
||
|
|
@del test.store >nul
|
||
|
|
%_CDB_% tstore %store% -R -i0 -proot.crl >> regress.out
|
||
|
|
%_CDB_% tstore %store% -R -i1 -pca.crl >> regress.out
|
||
|
|
%_CDB_% tstore %store% -R -i4 -ptest.crl >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% -q -ptest.cer TestRecipient >> regress.out
|
||
|
|
%_CDB_% tcopycer %store% test.store >> regress.out
|
||
|
|
%_CDB_% tfindcer test.store -I -d -q default >> regress.out
|
||
|
|
%_CDB_% tfindctl test.store -d -q -LHttp2 >> regress.out
|
||
|
|
%_CDB_% tfindctl test.store -d -q -LCtl2 >> regress.out
|
||
|
|
%_CDB_% tstore test.store -R -dAll >> regress.out
|
||
|
|
%_CDB_% tstore test.store -R -aroot.crl >> regress.out
|
||
|
|
%_CDB_% tstore test.store -R -aca.crl >> regress.out
|
||
|
|
%_CDB_% tstore test.store -R -atest.crl >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tsstore regphy TestCollection2 TestCollection -pOpenStoreProvider System -pOpenParameters TestCollection -pOpenFlags 0x10000 -pFlags 0x1 >> regress.out
|
||
|
|
%_CDB_% tsstore regphy TestCollection2 .Default -pOpenStoreProvider System -pOpenParameters TestCollection2 -pOpenFlags 0x10000 -pFlags 0x0 -pPriority 1000 >> regress.out
|
||
|
|
%_CDB_% tsstore regphy TestCollection3 TestCollection2 -pOpenStoreProvider System -pOpenParameters TestCollection2 -pOpenFlags 0x10000 -pFlags 0x1 >> regress.out
|
||
|
|
%_CDB_% tsstore regphy TestCollection3 .Default -pOpenStoreProvider System -pOpenParameters DontOpen -pOpenFlags 0x0 -pFlags 0x2 -pPriority 2000 >> regress.out
|
||
|
|
%_CDB_% tsstore regphy TestSibling200 TestSibling200 -pOpenStoreProvider System -pOpenParameters TestSibling200 -pOpenFlags 0x10000 -pFlags 0x1 >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tstore -s TestSibling100 -atest.cer >> regress.out
|
||
|
|
%_CDB_% tstore -s TestCollection3 -P -b >> regress.out
|
||
|
|
%_CDB_% tfindcer -s TestCollection3 -v TestRecipient >> regress.out
|
||
|
|
%_CDB_% tcopycer test.store -s TestCollection3 >> regress.out
|
||
|
|
%_CDB_% tfindcer -s TestCollection3 -v TestRecipient >> regress.out
|
||
|
|
%_CDB_% tfindcer -s TestCollection3 -I -d -q verisign >> regress.out
|
||
|
|
%_CDB_% tstore -s TestCollection3 -P -b >> regress.out
|
||
|
|
%_CDB_% tstore -s TestCollection3 -P -d -i1 >> regress.out
|
||
|
|
%_CDB_% tstore -s TestSibling200 -b >> regress.out
|
||
|
|
%_CDB_% tstore -s TestSibling100 -b >> regress.out
|
||
|
|
%_CDB_% tstore -s -f0x12000 TestCollection3 -b >> regress.out
|
||
|
|
%_CDB_% tstore -s -f0x1C000 TestCollection3 -b >> regress.out
|
||
|
|
%_CDB_% tstore -s -f0x18000 TestCollection2 -b >> regress.out
|
||
|
|
%_CDB_% tstore -s -f0x14000 TestCollection -b >> regress.out
|
||
|
|
%_CDB_% tstore -s TestCollection3 -T >> regress.out
|
||
|
|
%_CDB_% tstore -s TestCollection3 -R >> regress.out
|
||
|
|
%_CDB_% tstore -s TestCollection3 -F -b >> regress.out
|
||
|
|
@rem -f0x4 Defer close
|
||
|
|
%_CDB_% tstore -s -f0x10004 TestCollection3 -b >> regress.out
|
||
|
|
%_CDB_% tstore -s -f0x10010 TestCollection3 >> regress.out
|
||
|
|
%_CDB_% tstore -s -f0x14000 TestCollection3 -b >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tsstore unregphy TestCollection TestSibling300 >> regress.out
|
||
|
|
|
||
|
|
@rem #13 is the SYSTEM_REGISTRY_W provider
|
||
|
|
%_CDB_% tstore -s prov:#13:TestSibling100 -f0x10000 >> regress.out
|
||
|
|
%_CDB_% tstore5 -L -P -b TestSibling100 me.cer prov:testext:TestSibling200 TestSibling200 >> regress.out
|
||
|
|
%_CDB_% tstore5 -L -C -P -b TestSibling100 me.cer prov:testext:TestSibling200 TestSibling200 >> regress.out
|
||
|
|
|
||
|
|
|
||
|
|
%_CDB_% tstore -s TestCollection -R -N -dall >> regress.out
|
||
|
|
%_CDB_% tstore -s prov:testext:TestCollection -T -N -dall >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tfindcer -s TestSibling100 -S -d -q PhilPub >> regress.out
|
||
|
|
%_CDB_% tstore5 -L test.cer TestSibling100 -v >> regress.out
|
||
|
|
%_CDB_% tstore5 -L TestSibling100 test.cer -v >> regress.out
|
||
|
|
%_CDB_% tstore5 -L test.cer TestSibling100 -R -v >> regress.out
|
||
|
|
%_CDB_% tstore5 -L TestSibling100 test.cer -R -v >> regress.out
|
||
|
|
%_CDB_% tstore5 -L test.cer TestSibling100 -A -v >> regress.out
|
||
|
|
%_CDB_% tstore5 -C -b me.cer vsgood.cer TestSibling100 prov:testext:TestSibling200 >> regress.out
|
||
|
|
%_CDB_% tstore5 -C -b me.cer vsgood.cer prov:testext:TestSibling200 TestSibling100 >> regress.out
|
||
|
|
%_CDB_% tstore5 -C -b me.cer vsgood.cer vsrevoke.cer >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tstore -s prov:testext:TestCollection -N -dall >> regress.out
|
||
|
|
|
||
|
|
|
||
|
|
%_CDB_% tstore -s prov:testext:TestSibling100 -avsrevoke.cer >> regress.out
|
||
|
|
%_CDB_% tstore -s prov:testext:TestCollection -Avsrevoke.cer >> regress.out
|
||
|
|
%_CDB_% tstore -s prov:testext:TestSibling100 -atest.cer >> regress.out
|
||
|
|
%_CDB_% tstore -s prov:testext:TestCollection2 -P -b >> regress.out
|
||
|
|
%_CDB_% tfindcer -s prov:testext:TestCollection2 -v TestRecipient >> regress.out
|
||
|
|
%_CDB_% tcopycer test.store -s prov:testext:TestCollection2 >> regress.out
|
||
|
|
%_CDB_% tfindcer -s prov:testext:TestCollection2 -v TestRecipient >> regress.out
|
||
|
|
%_CDB_% tfindcer -s prov:testext:TestCollection2 -I -d -q verisign >> regress.out
|
||
|
|
%_CDB_% tstore -s prov:testext:TestCollection2 -P -b >> regress.out
|
||
|
|
%_CDB_% tstore -s prov:testext:TestCollection2 -P -d -i1 >> regress.out
|
||
|
|
%_CDB_% tfindcer -s prov:testext:TestCollection2 -v TestRecipient >> regress.out
|
||
|
|
%_CDB_% tstore -s prov:testext:TestSibling200 -b >> regress.out
|
||
|
|
%_CDB_% tstore -s prov:testext:TestSibling100 -b >> regress.out
|
||
|
|
%_CDB_% tstore -s prov:testext:TestCollection2 -F -b >> regress.out
|
||
|
|
@rem -f0x4 Defer close
|
||
|
|
%_CDB_% tstore -s -f0x10004 prov:testext:TestCollection2 -b >> regress.out
|
||
|
|
%_CDB_% tstore -s -f0x12000 prov:testext:TestCollection2 -b >> regress.out
|
||
|
|
%_CDB_% tstore -s -f0x1C000 prov:testext:TestCollection2 -b >> regress.out
|
||
|
|
%_CDB_% tstore -s -f0x18000 prov:testext:TestCollection2 -b >> regress.out
|
||
|
|
%_CDB_% tstore -s -f0x14000 prov:testext:TestCollection -b >> regress.out
|
||
|
|
%_CDB_% tstore -s prov:testext:TestCollection2 -T >> regress.out
|
||
|
|
%_CDB_% tstore -s prov:testext:TestCollection2 -R >> regress.out
|
||
|
|
%_CDB_% tstore -s -f0x10010 prov:testext:TestCollection2 >> regress.out
|
||
|
|
%_CDB_% tstore -s -f0x14000 prov:testext:TestCollection2 -b >> regress.out
|
||
|
|
|
||
|
|
|
||
|
|
@rem -f0x800 CERT_STORE_BACKUP_RESTORE_FLAG
|
||
|
|
%_CDB_% tsstore enumphy root -f0x800 -v >> regress.out
|
||
|
|
%_CDB_% tsstore enumphy root -f0x800 -v -lLocalMachine >> regress.out
|
||
|
|
%_CDB_% tsstore enumphy root -f0x800 -v -lLocalMachine >> regress.out
|
||
|
|
%_CDB_% tstore -sFile -f0x800 %store% -i0 >> regress.out
|
||
|
|
%_CDB_% tstore -s -f0x800 root -i0 >> regress.out
|
||
|
|
%_CDB_% tstore -s -f0x800 request -i0 >> regress.out
|
||
|
|
|
||
|
|
:NewStoreDone
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem RELSTORE
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="relstore" if not %t%=="all" goto RelStoreDone
|
||
|
|
@rem create a "big" registry Serialized store
|
||
|
|
%_CDB_% tcopycer %store% -s lmgp:testgroup -A >> regress.out
|
||
|
|
%_CDB_% tcopycer %store% -s lmgp:testgroup -A >> regress.out
|
||
|
|
%_CDB_% tcopycer %store% -s lmgp:rel:hklm:testgroup -A >> regress.out
|
||
|
|
%_CDB_% tcopycer %store% -s lmgp:rel:hklm:testgroup -A >> regress.out
|
||
|
|
@rem should be 4 identical PhilPub certs
|
||
|
|
%_CDB_% tfindcer -s lmgp:testgroup -S -aMSPub -b >> regress.out
|
||
|
|
%_CDB_% tfindcer -s lmgp:rel:hklm:testgroup -S -aMSPub -b >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tstore -s cugp:rel:hkcu:testgroup -dAll >> regress.out
|
||
|
|
%_CDB_% tstore -s cugp:rel:hkcu:testgroup -dAll -T >> regress.out
|
||
|
|
%_CDB_% tstore -s cugp:rel:hkcu:testgroup -dAll -R >> regress.out
|
||
|
|
%_CDB_% tstore -s lmgp:rel:hklm:testgroup -dAll >> regress.out
|
||
|
|
%_CDB_% tstore -s lmgp:rel:hklm:testgroup -dAll -T >> regress.out
|
||
|
|
%_CDB_% tstore -s lmgp:rel:hklm:testgroup -dAll -R >> regress.out
|
||
|
|
%_CDB_% tstore -s cu:phy:testgroup\.default -dAll >> regress.out
|
||
|
|
%_CDB_% tstore -s cu:phy:testgroup\.default -dAll -T >> regress.out
|
||
|
|
%_CDB_% tstore -s cu:phy:testgroup\.default -dAll -R >> regress.out
|
||
|
|
%_CDB_% tstore -s lm:phy:testgroup\.default -dAll >> regress.out
|
||
|
|
%_CDB_% tstore -s lm:phy:testgroup\.default -dAll -T >> regress.out
|
||
|
|
%_CDB_% tstore -s lm:phy:testgroup\.default -dAll -R >> regress.out
|
||
|
|
%_CDB_% tstore -s testgroup -b >> regress.out
|
||
|
|
%_CDB_% tstore -s testgroup -b -T >> regress.out
|
||
|
|
%_CDB_% tstore -s testgroup -b -R >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tsstore -RNULL -lLMGP enumsys -e0x80070057 >> regress.out
|
||
|
|
%_CDB_% tsstore -RHKLM -lLMGP -v enumsys >> regress.out
|
||
|
|
%_CDB_% tsstore -RHKCU -lCUGP unregsys TestGroup2 >> regress.out
|
||
|
|
%_CDB_% tsstore -RHKCU -lCUGP regsys TestGroup2 >> regress.out
|
||
|
|
%_CDB_% tsstore -RHKCU -lCUGP -v enumsys >> regress.out
|
||
|
|
%_CDB_% tsstore -RHKCU -lCurrentUser enumphy TestCollection -v >> regress.out
|
||
|
|
%_CDB_% tsstore -RHKCU -lCurrentUser enumphy TestCollection2 >> regress.out
|
||
|
|
%_CDB_% tsstore -RHKCU -lCurrentUser enumphy TestSibling200 -v >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcopycer test.store -s cugp:rel:hkcu:testgroup >> regress.out
|
||
|
|
%_CDB_% tstore -s cugp:rel:hkcu:testgroup -b >> regress.out
|
||
|
|
%_CDB_% tstore -s cugp:relsys:hkcu:testgroup -b -T >> regress.out
|
||
|
|
%_CDB_% tstore -s cugp:relphy:hkcu:testgroup\.Default -b -R >> regress.out
|
||
|
|
%_CDB_% tstore -s lmgp:rel:hklm:testgroup -aphilpub.cer >> regress.out
|
||
|
|
%_CDB_% tstore -s testgroup -b >> regress.out
|
||
|
|
%_CDB_% tstore -s testgroup -b -T >> regress.out
|
||
|
|
%_CDB_% tstore -s testgroup -b -R >> regress.out
|
||
|
|
%_CDB_% tstore -s cu:relphy:hkcu:testgroup\.GroupPolicy -b >> regress.out
|
||
|
|
%_CDB_% tstore -s cu:relphy:hkcu:testgroup\.Default -b >> regress.out
|
||
|
|
%_CDB_% tstore -s lm:rel:hklm:testgroup -b >> regress.out
|
||
|
|
%_CDB_% tstore -s cu:relphy:hkcu:testgroup\.GroupPolicy -b -T >> regress.out
|
||
|
|
%_CDB_% tstore -s lm:rel:hklm:testgroup -b -T >> regress.out
|
||
|
|
%_CDB_% tstore -s cu:relphy:hkcu:testgroup\.GroupPolicy -b -R >> regress.out
|
||
|
|
%_CDB_% tstore -s lm:rel:hklm:testgroup -b -R >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tstore -s lmgp:rel:hklm:testgroup -b >> regress.out
|
||
|
|
%_CDB_% tstore -s lmgp:rel:hklm:testgroup -ame.cer -CClear >> regress.out
|
||
|
|
%_CDB_% tstore -s lmgp:rel:hklm:testgroup -b >> regress.out
|
||
|
|
%_CDB_% tstore -s lmgp:rel:hklm:testgroup -Ame.cer -C -N >> regress.out
|
||
|
|
%_CDB_% tstore -s lmgp:rel:hklm:testgroup -v >> regress.out
|
||
|
|
%_CDB_% tstore -s lmgp:rel:hklm:testgroup -P >> regress.out
|
||
|
|
%_CDB_% tstore -s lmgp:rel:hklm:testgroup -v >> regress.out
|
||
|
|
:RelStoreDone
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem REMOTESTORE
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="remotestore" if not %t%=="all" goto RemoteStoreDone
|
||
|
|
@if "%LocalComputerName%"=="" goto RemoteStoreDone
|
||
|
|
@if "%CurrentUserSID%"=="" goto RemoteStoreDone
|
||
|
|
set LCN=%LocalComputerName%
|
||
|
|
set SID=%CurrentUserSID%
|
||
|
|
|
||
|
|
%_CDB_% tsstore unregsys -lLocalMachine %LCN%\MacCol >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore unregsys -lLocalMachine MacSib0 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore unregsys -lLocalMachine %LCN%\MacSib1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore unregsys -lLocalMachine MacSib2 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore unregsys -lCurrentService SerCol >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore unregsys -lServices %SID%\SerSib1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore unregsys -lServices %LCN%\%SID%\SerSib2 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore unregsys -lCurrentService SerSib3 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore unregsys -lCurrentService SerSib4 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore unregsys -lUsers %SID%\UseCol >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore unregsys -lCurrentUser UseSib1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore unregsys -lUsers %LCN%\%SID%\UseSib2 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore unregsys -lUsers %SID%\UseSib3 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tsstore regsys -lLocalMachine -f0x4000 -e0x80070057 %LCN%\MacCol >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore regsys -lLocalMachine -f0x2000 %LCN%\MacCol >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore regsys -lLocalMachine -f0x2000 -e80 %LCN%\MacCol >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore regsys -lLocalMachine %LCN%\MacSib1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore regsys -lLocalMachine MacSib2 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore regsys -lCurrentService SerCol >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore regsys -lServices %SID%\SerSib1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore regsys -lServices %LCN%\%SID%\SerSib2 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore regsys -lUsers %SID%\UseCol >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore regsys -lCurrentUser UseSib1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore regsys -lUsers %LCN%\%SID%\UseSib2 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tsstore >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -P%LCN% >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
@rem CERT_STORE_PROV_SYSTEM_A ((LPCSTR) 9)
|
||
|
|
@rem CERT_STORE_PROV_SYSTEM_W ((LPCSTR) 10)
|
||
|
|
@rem CERT_STORE_PROV_SYSTEM_REGISTRY_A ((LPCSTR) 12)
|
||
|
|
@rem CERT_STORE_PROV_SYSTEM_REGISTRY_W ((LPCSTR) 13)
|
||
|
|
@rem CERT_STORE_PROV_PHYSICAL_W ((LPCSTR) 14)
|
||
|
|
|
||
|
|
@rem PhysicalStore dwFlags definitions
|
||
|
|
@rem CERT_PHYSICAL_STORE_ADD_ENABLE_FLAG 0x1
|
||
|
|
@rem CERT_PHYSICAL_STORE_OPEN_DISABLE_FLAG 0x2
|
||
|
|
@rem CERT_PHYSICAL_STORE_REMOTE_OPEN_DISABLE_FLAG 0x4
|
||
|
|
@rem CERT_PHYSICAL_STORE_INSERT_COMPUTER_NAME_ENABLE_FLAG 0x8
|
||
|
|
|
||
|
|
%_CDB_% tsstore -lLocalMachine regphy %LCN%\MacCol MacSib1 -pOpenStoreProvider System -pOpenParameters %LCN%\MacSib1 -pOpenFlags 0x20000 -pFlags 0x1 -pPriority 1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tsstore -lLocalMachine regphy %LCN%\MacCol MacSib2 -pOpenStoreProvider #9 -pOpenParameters MacSib2 -pOpenFlags 0x20000 -pFlags 0x1 -pPriority 2 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tsstore -lLocalMachine regphy MacCol ServiceStuff -pOpenStoreProvider System -pOpenParameters %SID%\SerSib4 -pOpenFlags 0x58000 -pFlags 0x0 -pPriority 4 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tsstore -lServices regphy %LCN%\%SID%\SerCol SerSib1 -pOpenStoreProvider #12 -pOpenParameters %LCN%\%SID%\SerSib1 -pOpenFlags 0x50000 -pFlags 0x1 -pPriority 1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lCurrentService regphy SerCol SerSib2 -pOpenStoreProvider #10 -pOpenParameters SerSib2 -pOpenFlags 0x40000 -pFlags 0x1 -pPriority 2 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lServices regphy %LCN%\%SID%\SerCol SerSib3 -pOpenStoreProvider Physical -pOpenParameters %LCN%\%SID%\SerSib3\SerSib3 -pOpenFlags 0x50000 -pFlags 0x1 -pPriority 3 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lServices regphy %SID%\SerCol SerSib4 -pOpenStoreProvider Physical -pOpenParameters %SID%\SerSib4\.Default -pOpenFlags 0x50000 -pFlags 0x1 -pPriority 4 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lCurrentService regphy SerCol LocalMachineStuff -pOpenStoreProvider System -pOpenParameters MacSib0 -pOpenFlags 0x28000 -pFlags 0x0 -pPriority 0 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tsstore -lCurrentService regphy SerSib1 SerSib1 -pOpenStoreProvider #9 -pOpenParameters %LCN%\%SID%\SerSib1 -pOpenFlags 0x50000 -pFlags 0x1 -pPriority 1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lCurrentService regphy SerSib2 SerSib2 -pOpenStoreProvider System -pOpenParameters %SID%\SerSib2 -pOpenFlags 0x50000 -pFlags 0x1 -pPriority 1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lCurrentService regphy SerSib3 SerSib3 -pOpenStoreProvider SystemRegistry -pOpenParameters SerSib3 -pOpenFlags 0x40000 -pFlags 0x1 -pPriority 1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lCurrentService regphy SerSib4 SerSib4 -pOpenStoreProvider Physical -pOpenParameters SerSib4\.Default -pOpenFlags 0x40000 -pFlags 0x1 -pPriority 1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tsstore -lUsers regphy %LCN%\%SID%\UseCol UseSib1 -pOpenStoreProvider System -pOpenParameters %LCN%\%SID%\UseSib1 -pOpenFlags 0x60000 -pFlags 0x1 -pPriority 1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lCurrentUser regphy UseCol UseSib2 -pOpenStoreProvider System -pOpenParameters UseSib2 -pOpenFlags 0x10000 -pFlags 0x1 -pPriority 2 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lUsers regphy %LCN%\%SID%\UseCol UseSib3 -pOpenStoreProvider Physical -pOpenParameters %SID%\UseSib3\.Default -pOpenFlags 0x60000 -pFlags 0x5 -pPriority 3 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lCurrentUser regphy UseCol LocalMachineStuff -pOpenStoreProvider System -pOpenParameters %LCN%\MacSib0 -pOpenFlags 0x20000 -pFlags 0x1 -pPriority 0 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lCurrentUser regphy UseCol ServiceStuff -pOpenStoreProvider System -pOpenParameters SerSib3 -pOpenFlags 0x48000 -pFlags 0x0 -pPriority 3 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tsstore -lCurrentUser regphy UseSib1 UseSib1 -pOpenStoreProvider #9 -pOpenParameters %LCN%\%SID%\UseSib1 -pOpenFlags 0x60000 -pFlags 0x1 -pPriority 1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lCurrentUser regphy UseSib2 UseSib2 -pOpenStoreProvider System -pOpenParameters %SID%\UseSib2 -pOpenFlags 0x60000 -pFlags 0x1 -pPriority 1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tsstore >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -v >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -P%LCN% >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -P%LCN% -v >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tsstore -lCurrentService enumphy SerCol -v >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lServices enumphy %SID%\SerCol -v >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lServices enumphy %LCN%\%SID%\SerCol -v >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lCurrentService enumphy SerSib1 -v >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lServices enumphy %SID%\SerSib1 -v >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lServices enumphy %LCN%\%SID%\SerSib1 -v >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lCurrentService enumphy SerSib2 -v >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lServices enumphy %SID%\SerSib2 -v >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lCurrentService enumphy SerSib3 -v >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lServices enumphy %LCN%\%SID%\SerSib3 -v >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lCurrentService enumphy SerSib4 -v >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lServices enumphy %SID%\SerSib4 -v >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tsstore -lCurrentUser enumphy UseCol -v >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lUsers enumphy %SID%\UseCol -v >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lUsers enumphy %LCN%\%SID%\UseCol -v >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lCurrentUser enumphy UseSib1 -v >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lUsers enumphy %SID%\UseSib1 -v >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lUsers enumphy %LCN%\%SID%\UseSib1 -v >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lCurrentUser enumphy UseSib2 -v >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lUsers enumphy %SID%\UseSib2 -v >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tfindcer %store% -S -q -aMSPub -pmspub.cer >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tfindcer %store% -S -q -aPhilPub -pphilpub.cer >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tfindcer %store% -S -q -ame -axchg -pme.cer >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tfindcer %store% -S -q -akevin -asign -pkevin.cer >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tstore -b -s LocalMachine:%LCN%\MacCol -amspub.cer >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s LocalMachine:%LCN%\MacSib1 -aphilpub.cer >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s LocalMachine:PHY:%LCN%\MacCol\MacSib1 -ame.cer >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tstore -b -s Services:PHY:%LCN%\%SID%\SerCol\SerSib1 -amspub.cer >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s Services:PHY:%SID%\SerCol\SerSib2 -aphilpub.cer >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s CurrentService:PHY:SerCol\SerSib3 -ame.cer >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s CurrentService:SerCol -avsgood.cer >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s Services:%LCN%\%SID%\SerCol -avsrevoke.cer >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s Users:%LCN%\%SID%\UseCol -amspub.cer >> regress.out
|
||
|
|
%_CDB_% tstore -b -s Users:%SID%\UseCol -aphilpub.cer >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s Users:PHY:%LCN%\%SID%\UseCol\UseSib1 -avsgood.cer >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s CurrentUser:PHY:UseCol\LocalMachineStuff -akevin.cer >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tstore -b -s LocalMachine:MacCol >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s LocalMachine:%LCN%\MacCol >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s LocalMachine:MacSib2 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s LocalMachine:%LCN%\MacSib2 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s LocalMachine:MacSib0 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tstore -b -s Services:%SID%\SerCol >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s Services:%LCN%\%SID%\SerCol >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s CurrentService:SerCol >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s CurrentService:SerSib4 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s CurrentService:SerSib3 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s CurrentService:SerSib2 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s CurrentService:SerSib1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tstore -b -s Users:%SID%\UseCol >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s Users:%LCN%\%SID%\UseCol >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s CurrentUser:UseCol >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s CurrentUser:UseSib3 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s CurrentUser:UseSib2 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s CurrentUser:UseSib1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
@if "%RemoteComputerName%"=="" goto RemoteStoreDone
|
||
|
|
set RCN=%RemoteComputerName%
|
||
|
|
|
||
|
|
%_CDB_% tsstore unregsys -lLocalMachine %RCN%\MacCol >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore unregsys -lLocalMachine %RCN%\MacSib1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore unregsys -lLocalMachine %RCN%\MacSib2 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore unregsys -lServices %RCN%\Remote\SerCol >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore unregsys -lServices %RCN%\Remote\SerSib1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore unregsys -lServices %RCN%\Remote\SerSib2 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore unregsys -lServices %RCN%\Remote\SerSib3 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore unregsys -lServices %RCN%\Remote\SerSib4 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore unregsys -lServices %RCN%\Remote\SerSib5 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tsstore regsys -lLocalMachine -f0x4000 -e0x80070057 %RCN%\MacCol >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore regsys -lLocalMachine -f0x2000 %RCN%\MacCol >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore regsys -lLocalMachine -f0x2000 -e80 %RCN%\MacCol >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore regsys -lLocalMachine %RCN%\MacSib1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore regsys -lServices %RCN%\Remote\SerCol >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore regsys -lServices %RCN%\Remote\SerSib1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tsstore -lLocalMachine -P%RCN% enumsys >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lServices -P%RCN% enumsys >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tsstore -lLocalMachine regphy %RCN%\MacCol MacSib1 -pOpenStoreProvider System -pOpenParameters %RCN%\MacSib1 -pOpenFlags 0x20000 -pFlags 0x1 -pPriority 1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tsstore -lLocalMachine regphy %RCN%\MacCol MacSib2 -pOpenStoreProvider #9 -pOpenParameters MacSib2 -pOpenFlags 0x20000 -pFlags 0x1 -pPriority 2 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tsstore -lServices regphy %RCN%\Remote\SerCol SerSib1 -pOpenStoreProvider #12 -pOpenParameters %RCN%\Remote\SerSib1 -pOpenFlags 0x50000 -pFlags 0x1 -pPriority 1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lServices regphy %RCN%\Remote\SerCol SerSib2 -pOpenStoreProvider #10 -pOpenParameters SerSib2 -pOpenFlags 0x40000 -pFlags 0x1 -pPriority 2 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lServices regphy %RCN%\Remote\SerCol SerSib3 -pOpenStoreProvider Physical -pOpenParameters Remote\SerSib3\SerSib3 -pOpenFlags 0x50000 -pFlags 0x1 -pPriority 3 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lServices regphy %RCN%\Remote\SerCol SerSib4 -pOpenStoreProvider Physical -pOpenParameters %RCN%\Remote\SerSib4\.Default -pOpenFlags 0x50000 -pFlags 0x1 -pPriority 4 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lServices regphy %RCN%\Remote\SerCol SerSib5 -pOpenStoreProvider System -pOpenParameters SerSib5 -pOpenFlags 0x40000 -pFlags 0x5 -pPriority 5 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lServices regphy %RCN%\Remote\SerSib3 SerSib3 -pOpenStoreProvider System -pOpenParameters SerSib3 -pOpenFlags 0x40000 -pFlags 0x1 -pPriority 1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tsstore -lLocalMachine -P%RCN% enumsys >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lServices -P%RCN% enumsys >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lLocalMachine -P%RCN% -v enumsys >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tsstore -lServices -P%RCN% -v enumsys >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tstore -b -s LocalMachine:%RCN%\MacCol -amspub.cer >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s LocalMachine:%RCN%\MacSib1 -aphilpub.cer >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s LocalMachine:PHY:%RCN%\MacCol\MacSib1 -ame.cer >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tstore -b -s Services:PHY:%RCN%\Remote\SerCol\SerSib1 -amspub.cer >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s Services:%RCN%\Remote\SerSib2 -aphilpub.cer >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s Services:PHY:%RCN%\Remote\SerCol\SerSib3 -ame.cer >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s Services:%RCN%\Remote\SerCol -avsgood.cer >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tstore -b -s LocalMachine:%RCN%\MacCol >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s LocalMachine:%RCN%\MacSib1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s LocalMachine:%RCN%\MacSib2 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
%_CDB_% tstore -b -s Services:%RCN%\Remote\SerCol >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s Services:%RCN%\Remote\SerSib1 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s Services:%RCN%\Remote\SerSib2 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s Services:%RCN%\Remote\SerSib3 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s Services:%RCN%\Remote\SerSib4 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
%_CDB_% tstore -b -s Services:%RCN%\Remote\SerSib5 >> regress.out
|
||
|
|
%SLEEP0%
|
||
|
|
|
||
|
|
|
||
|
|
:RemoteStoreDone
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem CTL
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="ctl" if not %t%=="all" goto CtlDone
|
||
|
|
@rem %_CDB_% regsvr32 -s msctl.dll
|
||
|
|
|
||
|
|
@rem find certs according to EnhancedKeyUsage extension and property
|
||
|
|
|
||
|
|
@rem dwFindFlag definitions
|
||
|
|
@rem CERT_FIND_OPTIONAL_ENHKEY_USAGE_FLAG 0x1
|
||
|
|
@rem CERT_FIND_EXT_ONLY_ENHKEY_USAGE_FLAG 0x2
|
||
|
|
@rem CERT_FIND_PROP_ONLY_ENHKEY_USAGE_FLAG 0x4
|
||
|
|
@rem CERT_FIND_NO_ENHKEY_USAGE_FLAG 0x8
|
||
|
|
@rem CERT_FIND_OR_ENHKEY_USAGE_FLAG 0x10
|
||
|
|
@rem CERT_FIND_VALID_ENHKEY_USAGE_FLAG 0x20
|
||
|
|
|
||
|
|
%_CDB_% tfindcer %store% -U >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% -U -F2 >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% -U -F4 >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% -U -F8 >> regress.out
|
||
|
|
|
||
|
|
@rem none should be found for the following
|
||
|
|
%_CDB_% tfindcer %store% -U -F6 >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tfindcer %store% -U1.2.3.0 -U1.2.3.1 -U1.2.3.2 -U1.2.3.2.1 >> regress.out
|
||
|
|
@rem none should be found for the following
|
||
|
|
%_CDB_% tfindcer %store% -U1.2.3.0.0 >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tfindcer %store% -U1.2.3.0 >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% -U1.2.3.0 -F1 >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% -U1.2.3.1 >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% -U1.2.3.2 -U1.2.3.2.1 >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% -U1.2.3.2 >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% -U1.2.3.2.1 >> regress.out
|
||
|
|
|
||
|
|
@rem only all ext
|
||
|
|
%_CDB_% tfindcer %store% -U1.2.3.2 -U1.2.3.2.1 -U1.2.3.1 -b >> regress.out
|
||
|
|
@rem "OR" of all usages
|
||
|
|
%_CDB_% tfindcer %store% -U1.2.3.2 -U1.2.3.2.1 -U1.2.3.1 -F0x10 -b >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% -U1.2.8 -U1.2.3.2 -U1.2.3.2.1 -U1.2.3.1 -U1.2.10 -F0x10 -b >> regress.out
|
||
|
|
@rem none should be found for following
|
||
|
|
%_CDB_% tfindcer %store% -U1.2.8 -U1.2.10 -F0x10 -b >> regress.out
|
||
|
|
|
||
|
|
if exist tmp.store del tmp.store
|
||
|
|
copy %store% tmp.store >> regress.out
|
||
|
|
%_CDB_% tfindcer tmp.store -U1.2 -F0x8 -d -q >> regress.out
|
||
|
|
%_CDB_% tfindcer tmp.store -U1.2.3.2 -U1.2.3.2.1 -F0x20 -b >> regress.out
|
||
|
|
%_CDB_% tfindcer tmp.store -U1.2.3.2.1 -U1.2.3.2 -F0x20 -b >> regress.out
|
||
|
|
%_CDB_% tfindcer tmp.store -U1.2.3.2.1 -U1.2.3.2.1 -U1.2.3.2 -U1.2.3.2 -U1.2.3.2.1 -F0x20 -b >> regress.out
|
||
|
|
@rem "OR" of all usages
|
||
|
|
%_CDB_% tfindcer tmp.store -U1.2.3.2 -U1.2.3.2.1 -F0x30 -b >> regress.out
|
||
|
|
%_CDB_% tfindcer tmp.store -U1.2.8 -U1.2.3.2 -U1.2.3.2.1 -U1.2.3.1 -U1.2.10 -F0x30 -b >> regress.out
|
||
|
|
@rem none should be found for following 3 tests
|
||
|
|
%_CDB_% tfindcer tmp.store -U1.2.3.2 -U1.2.3.2.1 -U1.2.3.1 -F0x20 -b >> regress.out
|
||
|
|
%_CDB_% tfindcer tmp.store -U1.2.8 -U1.2.10 -F0x30 -b >> regress.out
|
||
|
|
%_CDB_% tfindcer tmp.store -U1.2.3.2 -U1.2.10 -F0x20 -b >> regress.out
|
||
|
|
|
||
|
|
|
||
|
|
@rem get signer and subject certs
|
||
|
|
%_CDB_% tfindcer %store% -S -q -aCtl1 -pctl1.cer >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% -S -q -aCtl2 -pctl2.cer >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% -S -q -a"all ext" -pallext.cer >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% -S -q -aMSPub -pmspub.cer >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% -S -q -aPhilPub -pphilpub.cer >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tstore -T %store% >> regress.out
|
||
|
|
%_CDB_% tstore -T -c %store% >> regress.out
|
||
|
|
%_CDB_% tstore -T -v %store% >> regress.out
|
||
|
|
|
||
|
|
@rem find CTLs according to Usage, ListIdentifier
|
||
|
|
%_CDB_% tfindctl %store% -U1.2.3.0 >> regress.out
|
||
|
|
%_CDB_% tfindctl %store% -U1.2.3.0 -L -I >> regress.out
|
||
|
|
%_CDB_% tfindctl %store% -U1.2.3.0 -fTimeValid >> regress.out
|
||
|
|
|
||
|
|
@rem none should be found for the following
|
||
|
|
%_CDB_% tfindctl %store% -U1.2.3.0 -fTimeInvalid >> regress.out
|
||
|
|
|
||
|
|
@rem none should be found for the following
|
||
|
|
%_CDB_% tfindctl %store% -U1.2.3.0 -Ictl1.cer >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tfindctl %store% -Ictl1.cer -b >> regress.out
|
||
|
|
%_CDB_% tfindctl %store% -U1.2.3.2.1 -U1.2.3.2 -b >> regress.out
|
||
|
|
%_CDB_% tfindctl %store% -LCtl2 -b >> regress.out
|
||
|
|
%_CDB_% tfindctl %store% -U1.2.3.2 -U1.2.3.2.1 -LCtl2 -Ictl2.cer -b >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tfindctl %store% -U1.2.3.2.1 -U1.2.3.2 -b -fSameUsage >> regress.out
|
||
|
|
@rem none should be found for the following 2 finds
|
||
|
|
%_CDB_% tfindctl %store% -U1.2.3.2 -b -fSameUsage >> regress.out
|
||
|
|
%_CDB_% tfindctl %store% -U1.2.3.2.1 -b -fSameUsage >> regress.out
|
||
|
|
|
||
|
|
@rem find Subjects
|
||
|
|
%_CDB_% tfindctl %store% -Smspub.cer -fTimeValid >> regress.out
|
||
|
|
%_CDB_% tfindctl %store% -Smspub.cer -fTimeValid -A >> regress.out
|
||
|
|
%_CDB_% tfindctl %store% -Sphilpub.cer -fTimeValid >> regress.out
|
||
|
|
%_CDB_% tfindctl %store% -Sallext.cer -fTimeValid >> regress.out
|
||
|
|
%_CDB_% tfindctl %store% -U1.2.3.2 -U1.2.3.2.1 -LCtl2 -Ictl2.cer -Sallext.cer -fTimeValid -fSameUsage >> regress.out
|
||
|
|
%_CDB_% tfindctl %store% -U1.2.3.2 -U1.2.3.2.1 -LCtl2 -Ictl2.cer -Sallext.cer -fTimeValid -fSameUsage -A >> regress.out
|
||
|
|
|
||
|
|
@rem none should be found for the following
|
||
|
|
%_CDB_% tfindctl %store% -Sctl1.cer -fTimeValid >> regress.out
|
||
|
|
|
||
|
|
@rem get store without any time invalid or http CTLs
|
||
|
|
if exist ctl.store del ctl.store >> regress.out
|
||
|
|
%_CDB_% tcopycer %store% ctl.store -A >> regress.out
|
||
|
|
%_CDB_% tfindctl ctl.store -d -fTimeInvalid -q >> regress.out
|
||
|
|
%_CDB_% tfindctl ctl.store -d -LHttp2 -q >> regress.out
|
||
|
|
%_CDB_% tstore -b -T ctl.store >> regress.out
|
||
|
|
|
||
|
|
@rem clean out Trust store
|
||
|
|
%_CDB_% tfindctl -s Trust -d -U1.2.3.0 -q >> regress.out
|
||
|
|
%_CDB_% tfindctl -s Trust -d -U1.2.3.1 -q >> regress.out
|
||
|
|
%_CDB_% tfindctl -s Trust -d -U1.2.3.2 -q >> regress.out
|
||
|
|
%_CDB_% tstore -b -T -s Trust >> regress.out
|
||
|
|
|
||
|
|
if exist file1.ctl del file1.ctl >> regress.out
|
||
|
|
if exist file2.ctl del file2.ctl >> regress.out
|
||
|
|
|
||
|
|
@rem expected error definitions
|
||
|
|
@rem CRYPT_E_NO_VERIFY_USAGE_DLL 0x80092027L
|
||
|
|
@rem CRYPT_E_NO_VERIFY_USAGE_CHECK 0x80092028L
|
||
|
|
@rem CRYPT_E_VERIFY_USAGE_OFFLINE 0x80092029L
|
||
|
|
@rem CRYPT_E_NOT_IN_CTL 0x8009202AL
|
||
|
|
@rem CRYPT_E_NO_TRUSTED_SIGNER 0x8009202BL
|
||
|
|
|
||
|
|
@rem flag definitions
|
||
|
|
@rem CERT_VERIFY_INHIBIT_CTL_UPDATE_FLAG 0x1
|
||
|
|
@rem CERT_VERIFY_TRUSTED_SIGNERS_FLAG 0x2
|
||
|
|
@rem CERT_VERIFY_NO_TIME_CHECK_FLAG 0x4
|
||
|
|
@rem CERT_VERIFY_ALLOW_MORE_USAGE_FLAG 0x8
|
||
|
|
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2 -U1.2.3.2.1 philpub.cer -cctl.store >> regress.out
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2.1 -U1.2.3.2 philpub.cer -A -cctl.store >> regress.out
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2 philpub.cer -A -cctl.store -e0x80092028 >> regress.out
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2 philpub.cer -cctl.store -f8 >> regress.out
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2.1 philpub.cer -A -cctl.store -f8 >> regress.out
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2 -U1.2.3.2.1 -LCtl2 philpub.cer -cctl.store >> regress.out
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2.8 philpub.cer -cctl.store -e0x80092028 >> regress.out
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2.8 philpub.cer -cctl.store -cctl.store -c%store% -e0x80092028 >> regress.out
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2 -U1.2.3.2.1 mspub.cer -cctl.store -e0x8009202a >> regress.out
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.1 -cctl.store allext.cer >> regress.out
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.0 -cctl.store allext.cer -e0x8009202b >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2 -U1.2.3.2.1 -LCtl2 -cctl.store -sctl.store -f2 allext.cer >> regress.out
|
||
|
|
%_CDB_% tstore ctl.store -dAll >> regress.out
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2 -U1.2.3.2.1 -LCtl2 -cctl.store -sctl.store -sctl.store -f2 -e0x8009202b allext.cer >> regress.out
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2 -U1.2.3.2.1 -LCtl2 -cctl.store -cctl.store -sctl.store -s%store% -f2 allext.cer >> regress.out
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2 -U1.2.3.2.1 -LCtl2 -cctl.store -sctl.store -sctl.store -s%store% allext.cer >> regress.out
|
||
|
|
|
||
|
|
|
||
|
|
@rem get store without any time valid or http CTLs
|
||
|
|
if exist ctl.store del ctl.store >> regress.out
|
||
|
|
%_CDB_% tcopycer %store% ctl.store -A >> regress.out
|
||
|
|
%_CDB_% tfindctl ctl.store -d -fTimeValid -q >> regress.out
|
||
|
|
%_CDB_% tfindctl ctl.store -d -LHttp2 -q >> regress.out
|
||
|
|
%_CDB_% tstore -b -T ctl.store >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2 -U1.2.3.2.1 philpub.cer -cctl.store -e0x80092029 >> regress.out
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2 -U1.2.3.2.1 philpub.cer -cctl.store -f4 >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tfindctl %store% -U1.2.3.2 -LCtl2 -fTimeInvalid -pfile2.ctl -b >> regress.out
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2 -U1.2.3.2.1 philpub.cer -cctl.store -e0x80092029 >> regress.out
|
||
|
|
%_CDB_% tfindctl %store% -U1.2.3.2 -LCtl2 -fTimeValid -pfile1.ctl -b >> regress.out
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2 -U1.2.3.2.1 philpub.cer -cctl.store >> regress.out
|
||
|
|
|
||
|
|
@rem only look in default CTL stores (Trust)
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2 -U1.2.3.2.1 philpub.cer allext.cer -e0x80092028 >> regress.out
|
||
|
|
%_CDB_% tstore -T -afile2.ctl -s Trust -b >> regress.out
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2 -U1.2.3.2.1 philpub.cer allext.cer philpub.cer -b >> regress.out
|
||
|
|
@rem its property should not have been updated
|
||
|
|
%_CDB_% tstore -T -s Trust -v >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tstore -s TestTrust -dAll >> regress.out
|
||
|
|
%_CDB_% tstore -R -s TestTrust -dAll >> regress.out
|
||
|
|
%_CDB_% tstore -T -s TestTrust -dAll >> regress.out
|
||
|
|
%_CDB_% tctlfunc -CTestTrust -U1.2.3.2 -U1.2.3.2.1 philpub.cer allext.cer -e0x80092028 >> regress.out
|
||
|
|
|
||
|
|
@rem update TestTrust with only time invalid CTLs.
|
||
|
|
%_CDB_% tcopycer %store% -s TestTrust -A >> regress.out
|
||
|
|
%_CDB_% tfindctl -s TestTrust -d -fTimeValid -q >> regress.out
|
||
|
|
%_CDB_% tfindctl -s TestTrust -d -LHttp2 -q >> regress.out
|
||
|
|
%_CDB_% tstore -b -T -s TestTrust >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tctlfunc -CTestTrust -U1.2.3.2 -U1.2.3.2.1 philpub.cer allext.cer -f1 -b >> regress.out
|
||
|
|
%_CDB_% tstore -T -s TestTrust -v >> regress.out
|
||
|
|
%_CDB_% tctlfunc -CTestTrust -U1.2.3.2 -U1.2.3.2.1 philpub.cer allext.cer -b >> regress.out
|
||
|
|
@rem its property should have also been updated
|
||
|
|
%_CDB_% tstore -T -s TestTrust -v >> regress.out
|
||
|
|
|
||
|
|
@rem only do the following if network tests are enabled
|
||
|
|
@if "%n%"=="" goto CtlDone
|
||
|
|
@rem
|
||
|
|
@rem HTTP tests
|
||
|
|
|
||
|
|
@rem clean out Trust store
|
||
|
|
%_CDB_% tfindctl -s Trust -d -U1.2.3.0 -q >> regress.out
|
||
|
|
%_CDB_% tfindctl -s Trust -d -U1.2.3.1 -q >> regress.out
|
||
|
|
%_CDB_% tfindctl -s Trust -d -U1.2.3.2 -q >> regress.out
|
||
|
|
%_CDB_% tstore -b -T -s Trust >> regress.out
|
||
|
|
|
||
|
|
if exist file1.ctl del file1.ctl >> regress.out
|
||
|
|
if exist file2.ctl del file2.ctl >> regress.out
|
||
|
|
if exist \\timestamp\ctltest\http1.ctl del \\timestamp\ctltest\http1.ctl >> regress.out
|
||
|
|
if exist \\timestamp\ctltest\http2.ctl del \\timestamp\ctltest\http2.ctl >> regress.out
|
||
|
|
|
||
|
|
@rem flush URL caches
|
||
|
|
%_CDB_% turlread -d http://timestamp/ctltest/http1.ctl >> regress.out
|
||
|
|
%_CDB_% turlread -d http://timestamp/ctltest/http2.ctl >> regress.out
|
||
|
|
|
||
|
|
@rem get store with only time invalid http ctls
|
||
|
|
if exist ctl.store del ctl.store >> regress.out
|
||
|
|
%_CDB_% tcopycer %store% ctl.store -A >> regress.out
|
||
|
|
%_CDB_% tfindctl ctl.store -d -fTimeValid -q >> regress.out
|
||
|
|
%_CDB_% tfindctl ctl.store -d -LCtl1 -q >> regress.out
|
||
|
|
%_CDB_% tfindctl ctl.store -d -LCtl2 -q >> regress.out
|
||
|
|
%_CDB_% tstore -b -T ctl.store >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2 -U1.2.3.2.1 philpub.cer -cctl.store -e0x80092029 >> regress.out
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2 -U1.2.3.2.1 philpub.cer -cctl.store -f4 >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tfindctl %store% -U1.2.3.2 -U1.2.3.2.1 -LHttp2 -fTimeInvalid -p\\timestamp\ctltest\http1.ctl -b >> regress.out
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2 -U1.2.3.2.1 philpub.cer -cctl.store -e0x80092029 >> regress.out
|
||
|
|
%_CDB_% tfindctl %store% -U1.2.3.2 -U1.2.3.2.1 -LHttp2 -fTimeValid -p\\timestamp\ctltest\http2.ctl -b >> regress.out
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2 -U1.2.3.2.1 philpub.cer -cctl.store >> regress.out
|
||
|
|
|
||
|
|
@rem only look in default CTL stores (Trust)
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2 -U1.2.3.2.1 philpub.cer allext.cer -e0x80092028 >> regress.out
|
||
|
|
%_CDB_% tstore -T -a\\timestamp\ctltest\http2.ctl -s Trust -b >> regress.out
|
||
|
|
%_CDB_% tctlfunc -U1.2.3.2 -U1.2.3.2.1 philpub.cer allext.cer philpub.cer -b >> regress.out
|
||
|
|
%_CDB_% tstore -T -s Trust -v >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tstore -s TestTrust -dAll >> regress.out
|
||
|
|
%_CDB_% tstore -R -s TestTrust -dAll >> regress.out
|
||
|
|
%_CDB_% tstore -T -s TestTrust -dAll >> regress.out
|
||
|
|
%_CDB_% tctlfunc -CTestTrust -U1.2.3.2 -U1.2.3.2.1 philpub.cer allext.cer -e0x80092028 >> regress.out
|
||
|
|
|
||
|
|
@rem update TestTrust with only time invalid http ctls
|
||
|
|
%_CDB_% tcopycer %store% -s TestTrust -A >> regress.out
|
||
|
|
%_CDB_% tfindctl -s TestTrust -d -fTimeValid -q >> regress.out
|
||
|
|
%_CDB_% tfindctl -s TestTrust -d -LCtl2 -q >> regress.out
|
||
|
|
%_CDB_% tfindctl -s TestTrust -d -U1.2.3.1 -q >> regress.out
|
||
|
|
%_CDB_% tstore -b -T -s TestTrust >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tctlfunc -CTestTrust -U1.2.3.2 -U1.2.3.2.1 philpub.cer allext.cer -f1 -b >> regress.out
|
||
|
|
@rem TestTrust still has time invalid ctl
|
||
|
|
%_CDB_% tstore -T -s TestTrust -b >> regress.out
|
||
|
|
%_CDB_% tctlfunc -CTestTrust -U1.2.3.2 -U1.2.3.2.1 philpub.cer allext.cer -b >> regress.out
|
||
|
|
%_CDB_% tstore -T -s TestTrust -b >> regress.out
|
||
|
|
:CtlDone
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem SPC
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
|
||
|
|
@if not %t%=="spc" if not %t%=="all" goto SpcDone
|
||
|
|
@copy torgpe.exe testpe.exe >nul
|
||
|
|
@copy torg.cla animator.class >nul
|
||
|
|
@copy torg2.cab test2.cab >nul
|
||
|
|
|
||
|
|
@del test.spc >nul
|
||
|
|
@del test.cer >nul
|
||
|
|
%_CDB_% makecert -sv test.pvk -n "CN=regress;C=US;O=Microsoft;T=Mr Regress" -l "http://www.microsoft.com" test.cer >> regress.out
|
||
|
|
%_CDB_% cert2spc test.cer rooto.cer test.spc >> regress.out
|
||
|
|
@rem the following reports an erroneous memory leak for a redir allocation
|
||
|
|
@rem %_CDB_% signcode -spc test.spc -v test.pvk -n "Regress Program" testpe.exe >> regress.out
|
||
|
|
@rem %_CDB_% gentest2 -t -u testpe.exe >> regress.out
|
||
|
|
%_CDB_% pesigmgr -l testpe.exe >> regress.out
|
||
|
|
:SpcDone
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem DIGSIG (digsig.dll wouldn't be included in NT 5.0)
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem @if not %t%=="digsig" if not %t%=="all" goto DigsigDone
|
||
|
|
@rem %_CDB_% digtest -v >> regress.out
|
||
|
|
@rem :DigsigDone
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem TIMESTAMP
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="timestamp" if not %t%=="all" goto TimeStampDone
|
||
|
|
%_CDB_% tsca xxx timestamp >> regress.out
|
||
|
|
:TimeStampDone
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem XENROLL
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="xenroll" if not %t%=="all" goto XenrollDone
|
||
|
|
%_CDB_% txenrol >> regress.out
|
||
|
|
:XenrollDone
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem FINDCLT
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="findclt" if not %t%=="all" goto FindCltDone
|
||
|
|
|
||
|
|
@rem add CrossCert DP property
|
||
|
|
%_CDB_% tfindcer -s lm:ca "root agency" -x60 -xfile://abc.cer -xfile://vsgood.cer -xfile://%store% -v >> regress.out
|
||
|
|
|
||
|
|
@rem update my with TestRoot certificate from default store
|
||
|
|
tfindcer -s my -S -aTestRoot -d >> regress.out
|
||
|
|
tcopycer %store% -s my -aTestRoot >> regress.out
|
||
|
|
@rem update "my" store with "my" certificates from default store
|
||
|
|
tfindcer -s my -S -aTestSigner -d >> regress.out
|
||
|
|
tfindcer -s my -S -aTestRecipient -d >> regress.out
|
||
|
|
tfindcer -s my -S -ame -d >> regress.out
|
||
|
|
tcopycer %store% -s my -aTestSigner >> regress.out
|
||
|
|
tcopycer %store% -s my -aTestRecipient >> regress.out
|
||
|
|
tcopycer %store% -s my -ame >> regress.out
|
||
|
|
@rem save root cert to use in tfindclt
|
||
|
|
tfindcer %store% -S -aTestRoot -ptemp.cert >> regress.out
|
||
|
|
@rem create all chains having the testroot as an issuer
|
||
|
|
@rem tests FindClientAuthCertsByIssuer API
|
||
|
|
%_CDB_% tfindclt temp.cert >> regress.out
|
||
|
|
%_CDB_% tfindclt temp.cert sign >> regress.out
|
||
|
|
%_CDB_% tfindclt temp.cert xchg >> regress.out
|
||
|
|
@rem %_CDB_% tfindclt >> regress.out
|
||
|
|
@rem %_CDB_% tfindclt "" sign >> regress.out
|
||
|
|
@rem %_CDB_% tfindclt "" xchg >> regress.out
|
||
|
|
|
||
|
|
tfindcer %store% -S -Aroot -proot.cer >> regress.out
|
||
|
|
tfindcer %store% -S -ame -axchg -pme.cer >> regress.out
|
||
|
|
%_CDB_% tfindclt -cmy temp.cert -b >> regress.out
|
||
|
|
|
||
|
|
@rem add a time invalid CTL having a NextUpdate time and location
|
||
|
|
%_CDB_% tfindctl %store% -LUpdateCtl1 -fTimeInvalid -ptestupdate1.ctl -q >> regress.out
|
||
|
|
%_CDB_% tfindctl -LUpdateCtl1 -s reg:trust -d -q >> regress.out
|
||
|
|
%_CDB_% tstore -s reg:trust -T -atestupdate1.ctl >> regress.out
|
||
|
|
%_CDB_% tfindclt -cmy temp.cert -b >> regress.out
|
||
|
|
|
||
|
|
@rem Update the CTL's URL
|
||
|
|
%_CDB_% tfindctl %store% -LUpdateCtl1 -fTimeValid -ptestupdate1.ctl >> regress.out
|
||
|
|
%_CDB_% tfindclt -cmy temp.cert -b >> regress.out
|
||
|
|
|
||
|
|
|
||
|
|
%_CDB_% tfindclt -cmy -CompareKey -CacheOnly -ComplexChain temp.cert -b >> regress.out
|
||
|
|
%_CDB_% tfindclt -cmy temp.cert sign -b >> regress.out
|
||
|
|
%_CDB_% tfindclt -cmy temp.cert xchg -b >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tfindclt -C%store% -Stemp.cert -b >> regress.out
|
||
|
|
%_CDB_% tfindclt -C%store% -Stemp.cert -u1.2.3.1 -v "" sign >> regress.out
|
||
|
|
%_CDB_% tfindclt -C%store% -Stemp.cert -u1.2.3.8 -v "" sign >> regress.out
|
||
|
|
%_CDB_% tfindclt -C%store% -Sme.cer -Stemp.cert -b >> regress.out
|
||
|
|
%_CDB_% tfindclt -C%store% -Sme.cer -Stemp.cert -u1.2.3.1 -b >> regress.out
|
||
|
|
%_CDB_% tfindclt -C%store% -Sme.cer -Stemp.cert -u1.2.3.1 -b "" sign >> regress.out
|
||
|
|
%_CDB_% tfindclt -C%store% -Sme.cer -Stemp.cert -u1.2.3.1 -b "" xchg >> regress.out
|
||
|
|
%_CDB_% tfindclt -C%store% -CompareKey -Sme.cer -Stemp.cert -u1.2.3.2 -b >> regress.out
|
||
|
|
|
||
|
|
@rem remove CrossCert DP property
|
||
|
|
%_CDB_% tfindcer -s lm:ca "root agency" -xDelete -v >> regress.out
|
||
|
|
|
||
|
|
@rem remove the Ctl with a NextUpdate time and location
|
||
|
|
%_CDB_% tfindctl -LUpdateCtl1 -s reg:trust -d -q >> regress.out
|
||
|
|
|
||
|
|
@rem should find the lower quality chain matching root2cert for the
|
||
|
|
@rem Microsoft publisher cert
|
||
|
|
%_CDB_% tfindcer nokeyclt.sst Root2Cert -q -pnokeyclt.cer >> regress.out
|
||
|
|
%_CDB_% tfindclt -Cnokeyclt.sst -NoKey nokeyclt.cer >> regress.out
|
||
|
|
|
||
|
|
@rem del temp.cert >nul
|
||
|
|
:FindCltDone
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem PVKHLPR
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="pvkhlpr" if not %t%=="all" goto PvkHlprDone
|
||
|
|
%_CDB_% tpvkload test.pvk -cregress_container sign >> regress.out
|
||
|
|
%_CDB_% tpvkload test.pvk -F -E -cregress_container sign >> regress.out
|
||
|
|
%_CDB_% tpvkdel -d -cregress_container >> regress.out
|
||
|
|
%_CDB_% tpvkload test.pvk -m -E -cregress_container sign >> regress.out
|
||
|
|
%_CDB_% tpvkload test.pvk -m -F -cregress_container sign >> regress.out
|
||
|
|
%_CDB_% tpvkdel -d -cregress_container >> regress.out
|
||
|
|
:PvkHlprDone
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem OIDFUNC
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="oidfunc" if not %t%=="all" goto OIDFuncDone
|
||
|
|
%_CDB_% regsvr32 -s setx509.dll
|
||
|
|
%_CDB_% regsvr32 -s setx509.dll
|
||
|
|
%_CDB_% toidfunc enum >> regress.out
|
||
|
|
%_CDB_% toidfunc enuminfo >> regress.out
|
||
|
|
%_CDB_% toidfunc enuminfo -G5 >> regress.out
|
||
|
|
%_CDB_% toidfunc enuminfo -G6 >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% -v -S "all ext" >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% regsvr32 -u -s setx509.dll
|
||
|
|
%_CDB_% toidfunc enum >> regress.out
|
||
|
|
%_CDB_% toidfunc register -o2.99999.1 -fCryptDllEncodeObject -e1 -dsetx509.dll -FSetAsn1AccountAliasEncode >> regress.out
|
||
|
|
%_CDB_% toidfunc register -o2.99999.1 -fCryptDllDecodeObject -e1 -dsetx509.dll -FSetAsn1AccountAliasDecode >> regress.out
|
||
|
|
%_CDB_% toidfunc register -o2.99999.2 -fCryptDllEncodeObject -e1 -dsetx509.dll -FSetAsn1HashedRootKeyEncode >> regress.out
|
||
|
|
%_CDB_% toidfunc register -o2.99999.2 -fCryptDllDecodeObject -e1 -dsetx509.dll -FSetAsn1HashedRootKeyDecode >> regress.out
|
||
|
|
%_CDB_% toidfunc register -o2.99999.3 -fCryptDllEncodeObject -e1 -dsetx509.dll -FSetAsn1CertificateTypeEncode >> regress.out
|
||
|
|
%_CDB_% toidfunc register -o2.99999.3 -fCryptDllDecodeObject -e1 -dsetx509.dll -FSetAsn1CertificateTypeDecode >> regress.out
|
||
|
|
%_CDB_% toidfunc register -o2.99999.4 -fCryptDllEncodeObject -e1 -dsetx509.dll -FSetAsn1MerchantDataEncode >> regress.out
|
||
|
|
%_CDB_% toidfunc register -o2.99999.4 -fCryptDllDecodeObject -e1 -dsetx509.dll -FSetAsn1MerchantDataDecode >> regress.out
|
||
|
|
%_CDB_% toidfunc register -o2.99999.4 -fCryptDllEncodeObject -e1 -vREG_DWORD WordValue 0x12345678 >> regress.out
|
||
|
|
%_CDB_% toidfunc register -o2.99999.4 -fCryptDllEncodeObject -e1 -vREG_EXPAND_SZ ExpandValue example.dll >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% toidfunc register -O1000 -fCryptDllEncodeObject -e1 -dsetx509.dll -FSetAsn1AccountAliasEncode >> regress.out
|
||
|
|
%_CDB_% toidfunc register -O1000 -fCryptDllDecodeObject -e1 -dsetx509.dll -FSetAsn1AccountAliasDecode >> regress.out
|
||
|
|
%_CDB_% toidfunc register -O1001 -fCryptDllEncodeObject -e1 -dsetx509.dll -FSetAsn1HashedRootKeyEncode >> regress.out
|
||
|
|
%_CDB_% toidfunc register -O1001 -fCryptDllDecodeObject -e1 -dsetx509.dll -FSetAsn1HashedRootKeyDecode >> regress.out
|
||
|
|
%_CDB_% toidfunc register -O1002 -fCryptDllEncodeObject -e1 -dsetx509.dll -FSetAsn1CertificateTypeEncode >> regress.out
|
||
|
|
%_CDB_% toidfunc register -O1002 -fCryptDllDecodeObject -e1 -dsetx509.dll -FSetAsn1CertificateTypeDecode >> regress.out
|
||
|
|
%_CDB_% toidfunc register -O1003 -fCryptDllEncodeObject -e1 -dsetx509.dll -FSetAsn1MerchantDataEncode >> regress.out
|
||
|
|
%_CDB_% toidfunc register -O1003 -fCryptDllDecodeObject -e1 -dsetx509.dll -FSetAsn1MerchantDataDecode >> regress.out
|
||
|
|
%_CDB_% toidfunc register -O1003 -fCryptDllEncodeObject -e1 -vREG_DWORD WordValue 0x12345678 >> regress.out
|
||
|
|
%_CDB_% toidfunc register -O1003 -fCryptDllEncodeObject -e1 -vREG_EXPAND_SZ ExpandValue example.dll >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% toidfunc enum >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% -v -S "all ext" >> regress.out
|
||
|
|
%_CDB_% toidfunc unregister -o2.99999.1 -fCryptDllEncodeObject -e1 >> regress.out
|
||
|
|
%_CDB_% toidfunc unregister -o2.99999.2 -fCryptDllEncodeObject -e1 >> regress.out
|
||
|
|
%_CDB_% toidfunc unregister -o2.99999.3 -fCryptDllEncodeObject -e1 >> regress.out
|
||
|
|
%_CDB_% toidfunc unregister -o2.99999.4 -fCryptDllEncodeObject -e1 >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% toidfunc unregister -O1000 -fCryptDllEncodeObject -e1 >> regress.out
|
||
|
|
%_CDB_% toidfunc unregister -O1001 -fCryptDllEncodeObject -e1 >> regress.out
|
||
|
|
%_CDB_% toidfunc unregister -O1002 -fCryptDllEncodeObject -e1 >> regress.out
|
||
|
|
%_CDB_% toidfunc unregister -O1003 -fCryptDllEncodeObject -e1 >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% toidfunc unregister -o2.99999.1 -fCryptDllDecodeObject -e1 >> regress.out
|
||
|
|
%_CDB_% toidfunc unregister -o2.99999.2 -fCryptDllDecodeObject -e1 >> regress.out
|
||
|
|
%_CDB_% toidfunc unregister -o2.99999.3 -fCryptDllDecodeObject -e1 >> regress.out
|
||
|
|
%_CDB_% toidfunc unregister -o2.99999.4 -fCryptDllDecodeObject -e1 >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% toidfunc unregister -O1000 -fCryptDllDecodeObject -e1 >> regress.out
|
||
|
|
%_CDB_% toidfunc unregister -O1001 -fCryptDllDecodeObject -e1 >> regress.out
|
||
|
|
%_CDB_% toidfunc unregister -O1002 -fCryptDllDecodeObject -e1 >> regress.out
|
||
|
|
%_CDB_% toidfunc unregister -O1003 -fCryptDllDecodeObject -e1 >> regress.out
|
||
|
|
%_CDB_% toidfunc enum >> regress.out
|
||
|
|
%_CDB_% regsvr32 -s setx509.dll
|
||
|
|
:OIDFuncDone
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem REVFUNC
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="revfunc" if not %t%=="all" goto RevFuncDone
|
||
|
|
%_CDB_% regsvr32 -s setx509.dll
|
||
|
|
tfindcer %store% -S "setkeith" -pset.cer >> regress.out
|
||
|
|
tfindcer %store% -S "all ext" -psetall.cer >> regress.out
|
||
|
|
tfindcer %store% -S "setrevoked" -psetrevoke.cer >> regress.out
|
||
|
|
tfindcer %store% -S "MSPub" -psetnot.cer >> regress.out
|
||
|
|
tstore -s test -dAll >> regress.out
|
||
|
|
tstore -s test -dAll -R >> regress.out
|
||
|
|
%_CDB_% trevfunc set.cer -e0x80092013 -i0 >> regress.out
|
||
|
|
tcopycer %store% -s test >> regress.out
|
||
|
|
%_CDB_% trevfunc set.cer -e0 -i0 >> regress.out
|
||
|
|
%_CDB_% trevfunc setall.cer -e0 -i0 >> regress.out
|
||
|
|
%_CDB_% trevfunc setrevoke.cer -e0x80092010 -i0 >> regress.out
|
||
|
|
%_CDB_% trevfunc set.cer setall.cer setrevoke.cer setnot.cer -e0x80092010 -i2 >> regress.out
|
||
|
|
%_CDB_% trevfunc setnot.cer -e0x80092013 -i0 >> regress.out
|
||
|
|
%_CDB_% trevfunc set.cer setall.cer setnot.cer setrevoke.cer -e0x80092013 -i2 >> regress.out
|
||
|
|
tstore -s test -dAll >> regress.out
|
||
|
|
tstore -s test -dAll -R >> regress.out
|
||
|
|
%_CDB_% trevfunc -S%store% set.cer -e0 -i0 >> regress.out
|
||
|
|
%_CDB_% trevfunc -S%store% setall.cer -e0 -i0 >> regress.out
|
||
|
|
%_CDB_% trevfunc -S%store% setrevoke.cer -e0x80092010 -i0 >> regress.out
|
||
|
|
%_CDB_% trevfunc -S%store% set.cer setall.cer setrevoke.cer setnot.cer -e0x80092010 -i2 >> regress.out
|
||
|
|
%_CDB_% trevfunc -S%store% setnot.cer -e0 -i0 >> regress.out
|
||
|
|
|
||
|
|
@rem Freshness time of 1 second with accumulative and regular timeout
|
||
|
|
%_CDB_% trevfunc -S%store% setnot.cer -f1 -T5000 -e0x80092013 -i0 >> regress.out
|
||
|
|
%_CDB_% trevfunc -S%store% setnot.cer -f1 -t5000 -e0x80092013 -i0 >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% trevfunc -S%store% set.cer setall.cer setnot.cer setrevoke.cer -e0x80092010 -i3 >> regress.out
|
||
|
|
tcopycer %store% -s test >> regress.out
|
||
|
|
@rem verisign revocation has been turned off
|
||
|
|
@rem %_CDB_% trevfunc vsgood.cer -e0 -i0 >> regress.out
|
||
|
|
@rem %_CDB_% trevfunc vsrevoke.cer -e0x80092010 -i0 >> regress.out
|
||
|
|
@rem %_CDB_% trevfunc set.cer vsgood.cer setall.cer vsrevoke.cer -e0x80092010 -i3 >> regress.out
|
||
|
|
|
||
|
|
if exist delta.store del delta.store
|
||
|
|
if exist crltest1.p7b del crltest1.p7b
|
||
|
|
if exist crltest2.p7b del crltest2.p7b
|
||
|
|
%_CDB_% tfindcer %store% -ACA -S -pca.cer >> regress.out
|
||
|
|
%_CDB_% tstore delta.store -aca.cer >> regress.out
|
||
|
|
@rem deltanovalid doesn't have a basic constraints extension
|
||
|
|
%_CDB_% tfindcer %store% DeltaNoValid -pdeltanovalid.cer -b >> regress.out
|
||
|
|
@rem deltaendvalid has a freshest CRL extensions
|
||
|
|
%_CDB_% tfindcer %store% DeltaEndValid -pdeltaendvalid.cer -b >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% DeltaEndRevoked -pdeltaendrevoked.cer -b >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% DeltaCAValid -pdeltacavalid.cer -b >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% DeltaCARevoked -pdeltacarevoked.cer -b >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% NoCDPValid -pnocdpvalid.cer -b >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% NoCDPRevoked -pnocdprevoked.cer -b >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% UnsupportedCDP -punsupportedCDP.cer -b >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% "time invalid" -ptimeinvalid.cer -b >> regress.out
|
||
|
|
|
||
|
|
@rem CRYPT_E_REVOKED 0x80092010
|
||
|
|
@rem CRYPT_E_NO_REVOCATION_CHECK 0x80092012
|
||
|
|
@rem CRYPT_E_REVOCATION_OFFLINE 0x80092013
|
||
|
|
|
||
|
|
@rem on 4-8-01 reverted back to W2K semantics: expired certificate
|
||
|
|
@rem containing CDP is treated same as a time valid certificates
|
||
|
|
%_CDB_% trevfunc timeinvalid.cer -Sca.cer -e0x80092013 -i0 >> regress.out
|
||
|
|
|
||
|
|
@rem a CDP having only unsupported distribution points is considered no check
|
||
|
|
%_CDB_% trevfunc unsupportedcdp.cer -Sca.cer -e0x80092012 -i0 >> regress.out
|
||
|
|
|
||
|
|
@rem // Users Only: Base and Delta
|
||
|
|
@rem 1, ONLY_USERS_CRL_FLAG,
|
||
|
|
@rem 1, ONLY_USERS_CRL_FLAG | FRESHEST_CRL_FLAG,
|
||
|
|
%_CDB_% tcopycer %store% crltest1.p7b -7 -b1 -f1 >> regress.out
|
||
|
|
@rem if cert isn't in IDP, always considered as offline
|
||
|
|
%_CDB_% trevfunc deltanovalid.cer deltaendvalid.cer deltacavalid.cer -Sca.cer -e0x80092013 -i2 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltanovalid.cer deltaendvalid.cer deltacarevoked.cer -Sca.cer -e0x80092013 -i2 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltanovalid.cer deltaendvalid.cer deltaendrevoked.cer -Sca.cer -e0x80092010 -i2 >> regress.out
|
||
|
|
|
||
|
|
@rem // CAs Only: Base and Delta
|
||
|
|
@rem 2, ONLY_CAS_CRL_FLAG,
|
||
|
|
@rem 2, ONLY_CAS_CRL_FLAG | FRESHEST_CRL_FLAG,
|
||
|
|
%_CDB_% tcopycer %store% crltest1.p7b -7 -b2 -f2 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltacavalid.cer deltaendvalid.cer -Sca.cer -e0x80092013 -i1 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltacavalid.cer deltaendrevoked.cer -Sca.cer -e0x80092013 -i1 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltacavalid.cer deltacarevoked.cer -Sca.cer -e0x80092010 -i1 >> regress.out
|
||
|
|
|
||
|
|
@rem // Base has hold entries, Delta has no entries
|
||
|
|
@rem 3, HOLD_CRL_FLAG,
|
||
|
|
@rem 3, NO_ENTRIES_CRL_FLAG | FRESHEST_CRL_FLAG,
|
||
|
|
%_CDB_% tcopycer %store% crltest1.p7b -7 -b3 -f3 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltanovalid.cer deltaendvalid.cer deltacavalid.cer deltacarevoked.cer -Sca.cer -e0x80092010 -i3 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltaendrevoked.cer -Sca.cer -e0x80092010 -i0 >> regress.out
|
||
|
|
|
||
|
|
@rem // Base has no entries, Delta has entries
|
||
|
|
@rem 4, NO_ENTRIES_CRL_FLAG,
|
||
|
|
@rem 4, FRESHEST_CRL_FLAG,
|
||
|
|
%_CDB_% tcopycer %store% crltest1.p7b -7 -b4 -f4 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltanovalid.cer deltaendvalid.cer deltacavalid.cer deltaendrevoked.cer -Sca.cer -e0x80092010 -i3 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltacarevoked.cer -Sca.cer -e0x80092010 -i0 >> regress.out
|
||
|
|
%_CDB_% ttrust deltacarevoked.cer -Sca.cer -chain -f0x10000000 -e0x10004 -i0x200 >> regress.out
|
||
|
|
|
||
|
|
@rem // Base has hold entries, Delta has remove entries
|
||
|
|
@rem 5, HOLD_CRL_FLAG,
|
||
|
|
@rem 5, REMOVE_FROM_CRL_FLAG | FRESHEST_CRL_FLAG,
|
||
|
|
%_CDB_% tcopycer %store% crltest1.p7b -7 -b5 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltacarevoked.cer -Sca.cer -e0x80092010 -i0 >> regress.out
|
||
|
|
%_CDB_% ttrust deltacarevoked.cer -Sca.cer -chain -f0x10000000 -e0x10004 -i0x200 >> regress.out
|
||
|
|
%_CDB_% ttrust deltacarevoked.cer -Sca.cer -chain -f0x10000000 -r1 -t1000 -e0x10004 -i0x200 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltaendrevoked.cer -Sca.cer -e0x80092010 -i0 >> regress.out
|
||
|
|
%_CDB_% tcopycer %store% crltest1.p7b -7 -b5 -f5 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltacarevoked.cer deltanovalid.cer deltaendvalid.cer deltacavalid.cer deltaendrevoked.cer deltacarevoked.cer -Sca.cer -e0 >> regress.out
|
||
|
|
%_CDB_% ttrust deltacarevoked.cer -Sca.cer -chain -f0x10000000 -e0x10000 -i0x200 >> regress.out
|
||
|
|
%_CDB_% ttrust deltacarevoked.cer -Sca.cer -chain -f0x10000000 -r1 -e0x1010040 -i0x200 >> regress.out
|
||
|
|
|
||
|
|
@rem base higher than delta indicator is OK
|
||
|
|
%_CDB_% tcopycer %store% crltest1.p7b -7 -b6 -f5 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltacarevoked.cer deltanovalid.cer deltaendvalid.cer deltacavalid.cer deltaendrevoked.cer deltacarevoked.cer -Sca.cer -e0 >> regress.out
|
||
|
|
|
||
|
|
@rem base higher than delta indicator, however not hold entries, still revoked
|
||
|
|
%_CDB_% tcopycer %store% crltest1.p7b -7 -b8 -f5 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltacarevoked.cer deltanovalid.cer deltaendvalid.cer deltacavalid.cer deltaendrevoked.cer deltacarevoked.cer -Sca.cer -e0x80092010 -i0 >> regress.out
|
||
|
|
|
||
|
|
@rem delta indicator > base number, delta and base are considered offline
|
||
|
|
%_CDB_% tcopycer %store% crltest1.p7b -7 -b3 -f5 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltacavalid.cer -Sca.cer -e0x80092013 -i0 >> regress.out
|
||
|
|
@rem honor the remove, however, still treat as offline
|
||
|
|
%_CDB_% trevfunc deltacarevoked.cer -Sca.cer -e0x80092013 -i0 >> regress.out
|
||
|
|
|
||
|
|
@rem // Valid base, delta has unsupported IDP options
|
||
|
|
@rem 6, HOLD_CRL_FLAG,
|
||
|
|
@rem 6, FRESHEST_CRL_FLAG | UNSUPPORTED_IDP_OPTIONS_CRL_FLAG,
|
||
|
|
%_CDB_% tcopycer %store% crltest1.p7b -7 -b6 -f6 >> regress.out
|
||
|
|
@rem unsupported IDP, always considered as offline, however, in this case
|
||
|
|
@rem the base is still valid for revoked
|
||
|
|
%_CDB_% trevfunc deltanovalid.cer -Sca.cer -e0x80092013 -i0 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltaendvalid.cer -Sca.cer -e0x80092013 -i0 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltacavalid.cer -Sca.cer -e0x80092013 -i0 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltacarevoked.cer -Sca.cer -e0x80092010 -i0 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltaendrevoked.cer -Sca.cer -e0x80092010 -i0 >> regress.out
|
||
|
|
|
||
|
|
@rem // Expired base, valid delta
|
||
|
|
@rem 7, EXPIRED_CRL_FLAG,
|
||
|
|
@rem 7, FRESHEST_CRL_FLAG,
|
||
|
|
@rem if delta is valid, then, the base is considered to be valid
|
||
|
|
%_CDB_% tcopycer %store% crltest1.p7b -7 -b7 -f7 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltanovalid.cer deltaendvalid.cer deltacavalid.cer deltacarevoked.cer -Sca.cer -e0x80092010 -i3 >> regress.out
|
||
|
|
|
||
|
|
@rem case where get valid base #6 from store, get delta #7 from wire and
|
||
|
|
@rem retrieve time invalid #7 from wire. Since delta is valid, base is
|
||
|
|
@rem considered as being valid
|
||
|
|
%_CDB_% tcopycer %store% delta.store -b6 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltanovalid.cer deltaendvalid.cer deltacavalid.cer deltaendrevoked.cer -Sdelta.store -e0x80092010 -i3 >> regress.out
|
||
|
|
|
||
|
|
@rem case where delta is > base number, delta and base are
|
||
|
|
@rem always offline
|
||
|
|
%_CDB_% tcopycer %store% crltest1.p7b -7 -b6 -f7 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltaendvalid.cer -Sca.cer -e0x80092013 -i0 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltacavalid.cer -Sca.cer -e0x80092013 -i0 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltacarevoked.cer -Sca.cer -e0x80092010 -i0 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltaendrevoked.cer -Sca.cer -e0x80092010 -i0 >> regress.out
|
||
|
|
|
||
|
|
@rem base 4 has no entries
|
||
|
|
%_CDB_% tcopycer %store% crltest1.p7b -7 -b4 -f7 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltaendrevoked.cer -Sca.cer -e0x80092010 -i0 >> regress.out
|
||
|
|
|
||
|
|
@rem // Valid base, expired delta
|
||
|
|
@rem 8, 0,
|
||
|
|
@rem 8, EXPIRED_CRL_FLAG | FRESHEST_CRL_FLAG,
|
||
|
|
%_CDB_% tcopycer %store% crltest1.p7b -7 -b8 -f8 >> regress.out
|
||
|
|
@rem offline except for revoked
|
||
|
|
%_CDB_% trevfunc deltacavalid.cer -Sca.cer -e0x80092013 -i0 -L6 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltaendrevoked.cer -Sca.cer -e0x80092010 -i0 -L3 >> regress.out
|
||
|
|
|
||
|
|
@rem // Expired base, without a freshest CDP extension
|
||
|
|
@rem 9, EXPIRED_CRL_FLAG | NO_FRESHEST_CDP_CRL_FLAG,
|
||
|
|
@rem 9, FRESHEST_CRL_FLAG,
|
||
|
|
@rem deltaendvalid has freshestCrl ext
|
||
|
|
%_CDB_% tcopycer %store% crltest1.p7b -7 -b9 -f9 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltaendvalid.cer -Sca.cer -e0 -i0 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltanovalid.cer -Sca.cer -e0x80092013 -i0 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltacavalid.cer -Sca.cer -e0x80092013 -i0 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltaendrevoked.cer -Sca.cer -e0x80092010 -i0 >> regress.out
|
||
|
|
|
||
|
|
@rem // Base without IDP and no freshest, delta CRL
|
||
|
|
@rem 10, NO_IDP_CRL_FLAG | NO_FRESHEST_CDP_CRL_FLAG,
|
||
|
|
%_CDB_% tstore delta.store -R -dAll >> regress.out
|
||
|
|
%_CDB_% trevfunc nocdpvalid.cer -Sdelta.store -e0x80092012 -i0 >> regress.out
|
||
|
|
%_CDB_% tcopycer %store% delta.store -b10 >> regress.out
|
||
|
|
%_CDB_% trevfunc nocdpvalid.cer -Sdelta.store -e0 -i0 >> regress.out
|
||
|
|
%_CDB_% trevfunc nocdprevoked.cer -Sdelta.store -e0x80092010 -i0 >> regress.out
|
||
|
|
|
||
|
|
@rem // Base and Delta CRL with unsupported critical ext
|
||
|
|
@rem 11, UNSUPPORTED_CRITICAL_EXT_CRL_FLAG,
|
||
|
|
@rem 11, UNSUPPORTED_CRITICAL_EXT_CRL_FLAG | FRESHEST_CRL_FLAG,
|
||
|
|
%_CDB_% tcopycer %store% crltest1.p7b -7 -b11 -f9 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltaendvalid.cer -Sca.cer -e0x80092012 -i0 >> regress.out
|
||
|
|
@rem unsupported delta, treats the base as offline
|
||
|
|
%_CDB_% tcopycer %store% crltest1.p7b -7 -b100 -f11 >> regress.out
|
||
|
|
%_CDB_% trevfunc deltaendvalid.cer -Sca.cer -e0x80092013 -i0 >> regress.out
|
||
|
|
|
||
|
|
@rem // Valid base with number > above delta indicators
|
||
|
|
@rem 100, 0,
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
@rem CERT_E_EXPIRED 0x800b0101
|
||
|
|
@rem CERT_E_REVOKED 0x800b010c
|
||
|
|
@rem CERT_E_REVOCATION_FAILURE 0x800b010e
|
||
|
|
@rem CERT_E_UNTRUSTEDROOT 0x800b0109
|
||
|
|
@rem CERT_E_ROLE 0x800b0103
|
||
|
|
@rem CERT_E_PURPOSE 0x800b0106
|
||
|
|
|
||
|
|
@rem get a store without any CRLs
|
||
|
|
if exist tmp.store del tmp.store
|
||
|
|
%_CDB_% tcopycer %store% tmp.store >> regress.out
|
||
|
|
%_CDB_% tstore tmp.store -R -dAll >> regress.out
|
||
|
|
|
||
|
|
@rem enable expiration check
|
||
|
|
setreg -q 2 TRUE >> regress.out
|
||
|
|
@rem disable revocation check
|
||
|
|
setreg -q 3 FALSE >> regress.out
|
||
|
|
@rem disable individual and commercial offline OK
|
||
|
|
setreg -q 4 FALSE >> regress.out
|
||
|
|
setreg -q 5 FALSE >> regress.out
|
||
|
|
%_CDB_% ttrust setrevoke.cer -Stmp.store -RevokeChain -q0x800b010c >> regress.out
|
||
|
|
%_CDB_% ttrust setnot.cer -Stmp.store -RevokeChain -q0x800b010e >> regress.out
|
||
|
|
%_CDB_% ttrust vsgood.cer -RevokeChain -q0x800b0101 >> regress.out
|
||
|
|
|
||
|
|
@rem enable revocation check
|
||
|
|
setreg -q 3 TRUE >> regress.out
|
||
|
|
%_CDB_% ttrust setrevoke.cer -Stmp.store -q0x800b010c >> regress.out
|
||
|
|
%_CDB_% ttrust setnot.cer -S%store% -q0x800b0109 >> regress.out
|
||
|
|
%_CDB_% ttrust vsgood.cer -q0x800b0101 >> regress.out
|
||
|
|
|
||
|
|
@rem disable expiration check
|
||
|
|
setreg -q 2 FALSE >> regress.out
|
||
|
|
%_CDB_% ttrust vsgood.cer -q0x800b010e >> regress.out
|
||
|
|
|
||
|
|
@rem enable individual offline OK
|
||
|
|
setreg -q 4 TRUE >> regress.out
|
||
|
|
%_CDB_% ttrust vsgood.cer -q >> regress.out
|
||
|
|
|
||
|
|
@rem disable individual offline OK
|
||
|
|
setreg -q 4 FALSE >> regress.out
|
||
|
|
@rem enable expiration check
|
||
|
|
setreg -q 2 TRUE >> regress.out
|
||
|
|
@rem disable revocation check
|
||
|
|
setreg -q 3 FALSE >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% ttrust setrevoke.cer -Stmp.store -https -RevokeChain -q0x80092010 -httpsIgnoreUnknownCA >> regress.out
|
||
|
|
@rem setnot.cer has no issuance policy which takes precedence
|
||
|
|
@rem over offline revocation
|
||
|
|
%_CDB_% ttrust setnot.cer -Stmp.store -e0x2000430 -i0x500 >> regress.out
|
||
|
|
%_CDB_% ttrust setnot.cer -Stmp.store -https -RevokeChain -q0x800b0106 -HttpsIgnoreWrongUsage -httpsIgnoreUnknownCA >> regress.out
|
||
|
|
%_CDB_% ttrust setnot.cer -Stmp.store -https -q0x800b0106 -HttpsIgnoreWrongUsage -httpsIgnoreUnknownCA >> regress.out
|
||
|
|
%_CDB_% ttrust vsgood.cer -https -RevokeChain -q0x800b0101 -HttpsIgnoreWrongUsage -httpsIgnoreUnknownCA >> regress.out
|
||
|
|
%_CDB_% ttrust vsgood.cer -https -RevokeChain -q0x80092012 -httpsIgnoreCertDateInvalid -HttpsIgnoreWrongUsage -httpsIgnoreUnknownCA >> regress.out
|
||
|
|
|
||
|
|
@rem CERT_CHAIN_REVOCATION_CHECK_END_CERT 0x10000000
|
||
|
|
@rem CERT_CHAIN_REVOCATION_CHECK_CHAIN 0x20000000
|
||
|
|
@rem CERT_CHAIN_REVOCATION_CHECK_CHAIN_EXCLUDE_ROOT 0x40000000
|
||
|
|
|
||
|
|
%_CDB_% ttrust setrevoke.cer -S%store% -chain -f0x10000000 -q0x800b0109 >> regress.out
|
||
|
|
%_CDB_% ttrust setrevoke.cer -S%store% -chain -f0x20000000 -q0x800b0109 >> regress.out
|
||
|
|
%_CDB_% ttrust setrevoke.cer -S%store% -chain -f0x40000000 -q0x800b0109 >> regress.out
|
||
|
|
%_CDB_% ttrust vsgood.cer -chain -f0x20000000 -q0x800b0101 >> regress.out
|
||
|
|
|
||
|
|
:RevFuncDone
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem ENCODE
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="encode" if not %t%=="all" goto EncodeDone
|
||
|
|
%_CDB_% tencode >> regress.out
|
||
|
|
:EncodeDone
|
||
|
|
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem SIGNCODE
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="signcode" if not %t%=="all" goto SignCodeDone
|
||
|
|
|
||
|
|
@rem
|
||
|
|
@rem Trust the test root
|
||
|
|
@rem
|
||
|
|
%_CDB_% setreg -q 1 true >> regress.out
|
||
|
|
|
||
|
|
@copy texe.exe testexe.exe >nul
|
||
|
|
@copy texe.exe test.exe >nul
|
||
|
|
@copy tdll.dll testdll.dll >nul
|
||
|
|
@copy tcab.cab testcab.cab >nul
|
||
|
|
|
||
|
|
@rem
|
||
|
|
@rem sign an exe file with certificates in the store
|
||
|
|
@rem
|
||
|
|
@echo ------- signcode (exe) -------- >> regress.out
|
||
|
|
%_CDB_% makecert -sq foo.p10 signexe.cer >> regress.out
|
||
|
|
%_CDB_% certmgr signexe.cer >> regress.out
|
||
|
|
%_CDB_% makecert -sq foo.p10 -n "CN=xiaohs" signexe.cer >> regress.out
|
||
|
|
%_CDB_% certmgr signexe.cer >> regress.out
|
||
|
|
%_CDB_% makecert signexe.cer >> regress.out
|
||
|
|
%_CDB_% certmgr -add -all -c signexe.cer -s foosign >> regress.out
|
||
|
|
%_CDB_% certmgr -add -all -c signexe.cer -s signCab >> regress.out
|
||
|
|
%_CDB_% certmgr -del -all -c -s foosign >> regress.out
|
||
|
|
%_CDB_% makecert -ss foosign -$ commercial -n "CN=foosign's cert" signexe.cer >> regress.out
|
||
|
|
@rem %_CDB_% signcode -spc softkey.spc -v softkey.pvk testexe.exe >> regress.out
|
||
|
|
%_CDB_% signcode -s foosign -cn "foosign" -a md5 -i "http://xiaohs1" -n "xiaohong's test" -$ commercial testexe.exe >> regress.out
|
||
|
|
%_CDB_% chktrust -q -h0x0 testexe.exe >> regress.out
|
||
|
|
%_CDB_% signcode -s foosign -cn "foosign" -i "http://xiaohs1" -n "xiaohong's test" -$ commercial testexe.exe >> regress.out
|
||
|
|
%_CDB_% chktrust -q -h0x0 testexe.exe >> regress.out
|
||
|
|
|
||
|
|
@rem
|
||
|
|
@rem sign a dll file with pvk file and spc file
|
||
|
|
@rem
|
||
|
|
@echo ------- signcode (dll) -------- >> regress.out
|
||
|
|
%_CDB_% makecert -b 11/21/1996 -m 700 -sv test.pvk signdll.cer >> regress.out
|
||
|
|
%_CDB_% cert2spc signdll.cer signdll.spc >> regress.out
|
||
|
|
%_CDB_% signcode -spc signdll.spc -v test.pvk testdll.dll >> regress.out
|
||
|
|
%_CDB_% cert2spc signdll.spc signexe.cer signexe.spc >> regress.out
|
||
|
|
|
||
|
|
@rem
|
||
|
|
@rem sign a CTL file
|
||
|
|
@rem
|
||
|
|
@echo ------- signcode (ctl) -------- >> regress.out
|
||
|
|
%_CDB_% makecert -sk signCTL -b 02/02/1999 signCTL.cer >> regress.out
|
||
|
|
%_CDB_% makecert -ik signCTL -ic signCTL.cer -b 02/04/1999 sign2.cer >> regress.out
|
||
|
|
%_CDB_% cert2spc signCTL.cer signCTL.spc >> regress.out
|
||
|
|
%_CDB_% makeCTL signdll.spc signexe.cer testctl.ctl >> regress.out
|
||
|
|
%_CDB_% signcode -k signCTL -spc signCTL.spc -t http://timestamp.verisign.com/scripts/timstamp.dll -$ individual testctl.ctl >> regress.out
|
||
|
|
%_CDB_% chktrust -q -h0x0 testctl.ctl >> regress.out
|
||
|
|
%_CDB_% signcode -x -t http://timestamp.verisign.com/scripts/timstamp.dll testctl.ctl >> regress.out
|
||
|
|
%_CDB_% chktrust -q -h0x0 testctl.ctl >> regress.out
|
||
|
|
|
||
|
|
@rem
|
||
|
|
@rem sign a cab file
|
||
|
|
@rem
|
||
|
|
@echo ------- signcode (cab) -------- >> regress.out
|
||
|
|
%_CDB_% certmgr -del -all -c -s signCab >> regress.out
|
||
|
|
%_CDB_% makecert -sk signCab -ss ca signcab.cer -n "CN=SIGNCAB.CER" >> regress.out
|
||
|
|
%_CDB_% makecert -is ca -ic signcab.cer -ss signCab -n "CN=SignCab cert in signCab store" >> regress.out
|
||
|
|
%_CDB_% signcode -s signCab -$ individual testcab.cab >> regress.out
|
||
|
|
%_CDB_% chktrust -q -h0x0 testcab.cab >> regress.out
|
||
|
|
|
||
|
|
@rem
|
||
|
|
@rem test CertMgr
|
||
|
|
@rem
|
||
|
|
@echo ------- signcode (certmgr) -------- >> regress.out
|
||
|
|
%_CDB_% certmgr %store% -v >> regress.out
|
||
|
|
%_CDB_% certmgr %store% -v -m >> regress.out
|
||
|
|
%_CDB_% certmgr -eku "1.3.6.2.5.5.7.3.2,1.2.3.4.5.6.7" -add -c -all signcab.cer signcab.cer >> regress.out
|
||
|
|
%_CDB_% certmgr -s signCab >> regress.out
|
||
|
|
%_CDB_% certmgr -del -c -all %store% -s signcab >> regress.out
|
||
|
|
%_CDB_% certmgr -add -crl -all %store% -s signcab >> regress.out
|
||
|
|
%_CDB_% certmgr -add -all -c -s signCab sign.cer >> regress.out
|
||
|
|
%_CDB_% certmgr -del -all -c -s signCab >> regress.out
|
||
|
|
%_CDB_% certmgr -del -all sign.cer sign.mgr >> regress.out
|
||
|
|
%_CDB_% certmgr -v testexe.exe >> regress.out
|
||
|
|
%_CDB_% certmgr testctl.ctl >> regress.out
|
||
|
|
%_CDB_% certmgr signexe.spc >> regress.out
|
||
|
|
%_CDB_% makecert -sq foo.p10 -n "CN=xiaohs" -eku "1.2.3,2.3.4" -ss signcab >> regress.out
|
||
|
|
|
||
|
|
@rem
|
||
|
|
@rem cleanup the files and registry
|
||
|
|
@rem
|
||
|
|
@echo ------- signcode (cleanup) -------- >> regress.out
|
||
|
|
@del sign.mgr
|
||
|
|
@del sign.cer
|
||
|
|
@del signcab.cer
|
||
|
|
%_CDB_% certmgr -del -all -c -s signcab >> regress.out
|
||
|
|
%_CDB_% tstore -T -s signcab -dAll >> regress.out
|
||
|
|
@del testctl.ctl
|
||
|
|
@del signctl.spc
|
||
|
|
@del sign2.cer
|
||
|
|
@del signctl.cer
|
||
|
|
@del signexe.spc
|
||
|
|
@del signdll.spc
|
||
|
|
@del signdll.cer
|
||
|
|
@del signexe.cer
|
||
|
|
%_CDB_% certmgr -del -all -c -s foosign >>regress.out
|
||
|
|
@del testcab.cab
|
||
|
|
@del testdll.dll
|
||
|
|
@del test.exe
|
||
|
|
@del testexe.exe
|
||
|
|
|
||
|
|
:SignCodeDone
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem DECODE
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="decode" if not %t%=="all" goto DecodeDone
|
||
|
|
@echo ------- Decode -------- >> regress.out
|
||
|
|
%_CDB_% tdecode Ctdecode1.cer >> regress.out
|
||
|
|
%_CDB_% tdecode Ctdecode2.cer >> regress.out
|
||
|
|
%_CDB_% tdecode Stdecode3.spc >> regress.out
|
||
|
|
%_CDB_% tdecode Ctdecode4.cer >> regress.out
|
||
|
|
%_CDB_% tdecode Ctdecode5.spc >> regress.out
|
||
|
|
%_CDB_% tdecode Stdecode5.spc >> regress.out
|
||
|
|
:DecodeDone
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem PKCS8
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="pkcs8" if not %t%=="all" goto PKCS8Done
|
||
|
|
%_CDB_% pkcs8im -cpkcs8test -E pkcs8tst.pkcs8 Xchg >> regress.out
|
||
|
|
%_CDB_% pkcs8ex -cpkcs8test -d pkcs8out.pkcs8 Xchg >> regress.out
|
||
|
|
|
||
|
|
:PKCS8Done
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem TRUST
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="trust" if not %t%=="all" goto TrustDone
|
||
|
|
|
||
|
|
|
||
|
|
@rem
|
||
|
|
@rem get certs to be used for building chains
|
||
|
|
@rem
|
||
|
|
%_CDB_% tfindcer %store% -S -q -a"all ext" -pallext.cer >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% -S -q -akevin -asign -pkevin.cer >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% -S -q -ame -axchg -pme.cer >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% notpermitted -pnotpermitted.cer >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% excluded -pexcluded.cer >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% missingncend -pmissingncend.cer >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% DssEnd -pdssend.cer >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% Duplicate1 -pduplicate1.cer >> regress.out
|
||
|
|
|
||
|
|
@rem #define CERT_NAME_DNS_TYPE 6
|
||
|
|
@rem #define CERT_NAME_URL_TYPE 7
|
||
|
|
@rem #define CERT_NAME_UPN_TYPE 8
|
||
|
|
%_CDB_% tx500str -callext.cer -g6 >> regress.out
|
||
|
|
%_CDB_% tx500str -cme.cer -g6 >> regress.out
|
||
|
|
%_CDB_% tx500str -callext.cer -g7 >> regress.out
|
||
|
|
%_CDB_% tx500str -callext.cer -g8 >> regress.out
|
||
|
|
%_CDB_% tx500str -cme.cer -g8 >> regress.out
|
||
|
|
|
||
|
|
@rem disable revocation checking
|
||
|
|
%_CDB_% setreg -q 3 false >> regress.out
|
||
|
|
|
||
|
|
@rem ensure we don't have any cached authroot stuff
|
||
|
|
%_CDB_% turlread -d http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt >> regress.out
|
||
|
|
%_CDB_% turlread -d http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab >> regress.out
|
||
|
|
%_CDB_% tstore -s lm:authroot -dAll >> regress.out
|
||
|
|
|
||
|
|
@rem remove any VeriSign Publisher roots that could have been copied to
|
||
|
|
@rem the ca store
|
||
|
|
%_CDB_% tfindcer -s reg:ca "VeriSign Individual Software Publishers CA" -d >> regress.out
|
||
|
|
|
||
|
|
@rem with authroot auto update disabled the following should return
|
||
|
|
@rem CERT_E_CHAINING
|
||
|
|
%_CDB_% ttrust -DisableRootAutoUpdate vsgood.cer -q0x800b010a >> regress.out
|
||
|
|
|
||
|
|
@rem with authroot auto update disabled the following should return
|
||
|
|
@rem CERT_E_UNTRUSTEDROOT
|
||
|
|
%_CDB_% ttrust -DisableRootAutoUpdate testsslroot.cer -q0x800b0109 >> regress.out
|
||
|
|
|
||
|
|
@rem enabling authroot auto update should fetch the ctl
|
||
|
|
%_CDB_% ttrust -EnableRootAutoUpdate testsslroot.cer -q >> regress.out
|
||
|
|
%_CDB_% turlread -i http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt >> regress.out
|
||
|
|
%_CDB_% turlread -i http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab >> regress.out
|
||
|
|
|
||
|
|
@rem with authroot auto update enabled, the following should be
|
||
|
|
@rem CERT_E_EXPIRED
|
||
|
|
%_CDB_% ttrust vsgood.cer -q0x800b0101 >> regress.out
|
||
|
|
|
||
|
|
@rem fetch some Verisign 3rd party roots. Also, the following 2 certs
|
||
|
|
@rem will have 2 possible roots. Make sure the newer root is picked
|
||
|
|
|
||
|
|
@rem newer root has sha1 thumb=6782AAE0 EDEEE21A 5839D3C0 CD14680A 4F60142A
|
||
|
|
%_CDB_% ttrust -chain -f0x80 vsclass2ca.cer >> regress.out
|
||
|
|
@rem newer root has sha1 thumb=742C3192 E607E424 EB454954 2BE1BBC5 3E6174E2
|
||
|
|
%_CDB_% ttrust -chain -f0x80 vsclass3ca.cer >> regress.out
|
||
|
|
|
||
|
|
|
||
|
|
@rem verify we can create a CTL with property entries. Verify these
|
||
|
|
@rem can be added back to certs. Make an explicit check for the
|
||
|
|
@rem KEY_PROV_INFO property
|
||
|
|
if exist tmp.store del tmp.store
|
||
|
|
if exist tmp.stl del tmp.stl
|
||
|
|
%_CDB_% makerootctl -a %store% -c tmp.stl >> regress.out
|
||
|
|
%_CDB_% tstore -T -atmp.stl tmp.store >> regress.out
|
||
|
|
%_CDB_% tfindcer %store% TestRecipient2 >> regress.out
|
||
|
|
%_CDB_% tfindcer tmp.store TestRecipient2 >> regress.out
|
||
|
|
%_CDB_% makerootctl -d %store% tmp.stl >> regress.out
|
||
|
|
%_CDB_% tstore -T -atmp.stl tmp.store >> regress.out
|
||
|
|
%_CDB_% tstore tmp.store >> regress.out
|
||
|
|
|
||
|
|
@rem
|
||
|
|
@rem build chains and check the chain's TrustStatus
|
||
|
|
@rem
|
||
|
|
|
||
|
|
@rem TrustErrorStatus
|
||
|
|
|
||
|
|
@rem CERT_TRUST_NO_ERROR 0x00000000
|
||
|
|
@rem CERT_TRUST_IS_NOT_TIME_VALID 0x00000001
|
||
|
|
@rem CERT_TRUST_IS_NOT_TIME_NESTED 0x00000002
|
||
|
|
@rem CERT_TRUST_IS_REVOKED 0x00000004
|
||
|
|
@rem CERT_TRUST_IS_NOT_SIGNATURE_VALID 0x00000008
|
||
|
|
@rem CERT_TRUST_IS_NOT_VALID_FOR_USAGE 0x00000010
|
||
|
|
@rem CERT_TRUST_IS_UNTRUSTED_ROOT 0x00000020
|
||
|
|
@rem CERT_TRUST_REVOCATION_STATUS_UNKNOWN 0x00000040
|
||
|
|
@rem CERT_TRUST_IS_CYCLIC 0x00000080
|
||
|
|
@rem CERT_TRUST_INVALID_EXTENSION 0x00000100
|
||
|
|
@rem CERT_TRUST_INVALID_POLICY_CONSTRAINTS 0x00000200
|
||
|
|
@rem CERT_TRUST_INVALID_BASIC_CONSTRAINTS 0x00000400
|
||
|
|
@rem CERT_TRUST_INVALID_NAME_CONSTRAINTS 0x00000800
|
||
|
|
@rem CERT_TRUST_HAS_NOT_SUPPORTED_NAME_CONSTRAINT 0x00001000
|
||
|
|
@rem CERT_TRUST_HAS_NOT_DEFINED_NAME_CONSTRAINT 0x00002000
|
||
|
|
@rem CERT_TRUST_HAS_NOT_PERMITTED_NAME_CONSTRAINT 0x00004000
|
||
|
|
@rem CERT_TRUST_HAS_EXCLUDED_NAME_CONSTRAINT 0x00008000
|
||
|
|
@rem CERT_TRUST_IS_PARTIAL_CHAIN 0x00010000
|
||
|
|
@rem CERT_TRUST_CTL_IS_NOT_TIME_VALID 0x00020000
|
||
|
|
@rem CERT_TRUST_CTL_IS_NOT_SIGNATURE_VALID 0x00040000
|
||
|
|
@rem CERT_TRUST_CTL_IS_NOT_VALID_FOR_USAGE 0x00080000
|
||
|
|
@rem CERT_TRUST_IS_OFFLINE_REVOCATION 0x01000000
|
||
|
|
@rem CERT_TRUST_NO_ISSUANCE_CHAIN_POLICY 0x02000000
|
||
|
|
|
||
|
|
@rem TrustInfoStatus
|
||
|
|
@rem CERT_TRUST_HAS_EXACT_MATCH_ISSUER 0x00000001
|
||
|
|
@rem CERT_TRUST_HAS_KEY_MATCH_ISSUER 0x00000002
|
||
|
|
@rem CERT_TRUST_HAS_NAME_MATCH_ISSUER 0x00000004
|
||
|
|
@rem CERT_TRUST_IS_SELF_SIGNED 0x00000008
|
||
|
|
@rem CERT_TRUST_HAS_PREFERRED_ISSUER 0x00000100
|
||
|
|
@rem CERT_TRUST_HAS_ISSUANCE_CHAIN_POLICY 0x00000200
|
||
|
|
@rem CERT_TRUST_HAS_VALID_NAME_CONSTRAINTS 0x00000400
|
||
|
|
@rem CERT_TRUST_IS_COMPLEX_CHAIN 0x00010000
|
||
|
|
|
||
|
|
@rem ensure the test root is removed
|
||
|
|
%_CDB_% tfindcer -S -s lm:root -a"Root Agency" -d >> regress.out
|
||
|
|
%_CDB_% tfindcer -S -s unprotected:root -a"Root Agency" -d >> regress.out
|
||
|
|
|
||
|
|
@rem allext.cer and kevin.cer have valid name constraints
|
||
|
|
|
||
|
|
@rem check both issuance and application usage
|
||
|
|
%_CDB_% ttrust allext.cer -S%store% -chain -u1.2.3.2 -u1.2.3.1 -p1.1.1 -p1.1.22 -p1.1.4444 -e0x20 -i0x700 -DeleteSaferRegKey >> regress.out
|
||
|
|
@rem check issuance usage
|
||
|
|
%_CDB_% ttrust allext.cer -S%store% -chain -p1.1.22 -e0x20 -i0x700 >> regress.out
|
||
|
|
@rem check application usage
|
||
|
|
%_CDB_% ttrust allext.cer -S%store% -chain -u1.2.3.1 -e0x20 -i0x700 >> regress.out
|
||
|
|
@rem end usage without being mapped
|
||
|
|
%_CDB_% ttrust allext.cer -S%store% -chain -u1.1.55555 -e0x30 -i0x700 >> regress.out
|
||
|
|
|
||
|
|
@rem cert has any application usage, therefore, will match any issuance usage
|
||
|
|
%_CDB_% ttrust kevin.cer -S%store% -chain -u1.1.1 -u1.1.666666 -e0x20 -i0x700 >> regress.out
|
||
|
|
|
||
|
|
@rem do "or" matching of issuance policy
|
||
|
|
%_CDB_% ttrust kevin.cer -S%store% -chain -p1.1.1 -p1.1.666666 -p1.1.55555 -e0x30 -i0x700 >> regress.out
|
||
|
|
%_CDB_% ttrust kevin.cer -S%store% -chain -OrPolicy -p1.1.1 -p1.1.666666 -p1.1.55555 -e0x20 -i0x700 >> regress.out
|
||
|
|
|
||
|
|
@rem dssend.cer doesn't have required issuance chain policy
|
||
|
|
@rem for dssend.cer OrUsage must be selected to have valid usage
|
||
|
|
%_CDB_% ttrust dssend.cer -S%store% -chain -p1.1.4444 -e0x20 -i0x100 >> regress.out
|
||
|
|
%_CDB_% ttrust dssend.cer -S%store% -chain -u1.2.3.0 -u1.2.3.2 -e0x30 -i0x100 >> regress.out
|
||
|
|
%_CDB_% ttrust dssend.cer -S%store% -chain -OrUsage -u1.2.3.0 -u1.2.3.2 -e0x20 -i0x100 >> regress.out
|
||
|
|
|
||
|
|
@rem following has both not supported and not permitted name constraints
|
||
|
|
%_CDB_% ttrust notpermitted.cer -S%store% -chain -e0x5020 -i0x300 >> regress.out
|
||
|
|
|
||
|
|
@rem following has an excluded name constraint
|
||
|
|
%_CDB_% ttrust excluded.cer -S%store% -chain -e0x8020 -i0x300 >> regress.out
|
||
|
|
|
||
|
|
@rem following has not defined and not supported constraints
|
||
|
|
%_CDB_% ttrust missingncend.cer -S%store% -chain -e0x3020 -i0x300 >> regress.out
|
||
|
|
|
||
|
|
@rem following only does key matching
|
||
|
|
%_CDB_% ttrust me.cer -S%store% -chain -e0x20 -i0x0 >> regress.out
|
||
|
|
|
||
|
|
@rem enable revocation checking, no revocation errors, url timeout (5 seconds)
|
||
|
|
%_CDB_% ttrust allext.cer -S%store% -chain -f0x20000000 -t5000 -e0x20 -i0x700 >> regress.out
|
||
|
|
@rem enable revocation checking with invalid freshness (1 second)
|
||
|
|
%_CDB_% ttrust allext.cer -S%store% -chain -f0x20000000 -r1 -e0x1000060 -i0x700 >> regress.out
|
||
|
|
@rem enable revocation checking with valid freshness (1 year)
|
||
|
|
%_CDB_% ttrust allext.cer -S%store% -chain -f0x20000000 -r31536000 -e0x20 -i0x700 >> regress.out
|
||
|
|
|
||
|
|
@rem enable resync and revocation
|
||
|
|
%_CDB_% tchain allext.cer -A%store% -r1000 -i20 -f0x20000000 -t2 >> regress.out
|
||
|
|
|
||
|
|
@rem
|
||
|
|
@rem Test AIA URL retrieval
|
||
|
|
@rem
|
||
|
|
if exist testAIACA.p7b del testAIACA.p7b
|
||
|
|
%_CDB_% tfindcer -s reg:ca "TestAIA" -d >> regress.out
|
||
|
|
if exist testAIA.store del testAIA.store
|
||
|
|
%_CDB_% tcopycer %store% testAIA.store >> regress.out
|
||
|
|
%_CDB_% tfindcer testAIA.store TestAIAEnd -ptestAIAend.cer >> regress.out
|
||
|
|
%_CDB_% tfindcer testAIA.store -I TestAIARoot -d >> regress.out
|
||
|
|
%_CDB_% tfindcer testAIA.store TestAIACA -ptestAIACArevoke.cer >> regress.out
|
||
|
|
if exist testAIA.store del testAIA.store
|
||
|
|
%_CDB_% tcopycer %store% testAIA.store >> regress.out
|
||
|
|
%_CDB_% tfindcer testAIA.store -I TestAIARevokeRoot -d >> regress.out
|
||
|
|
%_CDB_% tfindcer testAIA.store TestAIACA -ptestAIACAgood.cer >> regress.out
|
||
|
|
if exist testAIA.store del testAIA.store
|
||
|
|
%_CDB_% tcopycer %store% testAIA.store >> regress.out
|
||
|
|
%_CDB_% tfindcer testAIA.store TestAIACA -d >> regress.out
|
||
|
|
|
||
|
|
@rem CERT_TRUST_IS_PARTIAL_CHAIN
|
||
|
|
%_CDB_% ttrust testAIAend.cer -StestAIA.store -chain -e0x10000 -i0x0 >> regress.out
|
||
|
|
%_CDB_% tstore testAIACA.p7b -atestAIACArevoke.cer -7 >> regress.out
|
||
|
|
@rem CERT_TRUST_IS_UNTRUSTED_ROOT, CERT_TRUST_HAS_PREFERRED_ISSUER
|
||
|
|
%_CDB_% ttrust testAIAend.cer -StestAIA.store -chain -e0x20 -i0x100 >> regress.out
|
||
|
|
@rem CERT_TRUST_IS_UNTRUSTED_ROOT, CERT_TRUST_IS_REVOKED, CERT_TRUST_HAS_PREFERRED_ISSUER
|
||
|
|
%_CDB_% ttrust testAIAend.cer -StestAIA.store -chain -f0x20000000 -e0x24 -i0x100 >> regress.out
|
||
|
|
%_CDB_% tstore testAIACA.p7b -atestAIACAgood.cer -7 >> regress.out
|
||
|
|
@rem CERT_TRUST_IS_UNTRUSTED_ROOT, CERT_TRUST_HAS_PREFERRED_ISSUER
|
||
|
|
%_CDB_% ttrust testAIAend.cer -StestAIA.store -chain -f0x20000000 -e0x20 -i0x100 >> regress.out
|
||
|
|
%_CDB_% tfindcer -s reg:ca "TestAIA" >> regress.out
|
||
|
|
%_CDB_% tfindcer -s reg:ca -I TestAIARoot -d >> regress.out
|
||
|
|
|
||
|
|
|
||
|
|
@rem
|
||
|
|
@rem test Cross Cert Distribution Point and CTL's with NextUpdate time
|
||
|
|
@rem and location
|
||
|
|
@rem
|
||
|
|
if exist %UNC_PREFIX%\tmp.store del %UNC_PREFIX%\tmp.store
|
||
|
|
if exist testupdate1.ctl del testupdate1.ctl
|
||
|
|
if exist testupdate2.ctl del testupdate2.ctl
|
||
|
|
%_CDB_% tfindctl -LUpdateCtl1 -s reg:trust -d -q >> regress.out
|
||
|
|
%_CDB_% tfindctl -LUpdateCtl2 -s reg:trust -d -q >> regress.out
|
||
|
|
%_CDB_% turlread -d file://%UNC_PREFIX%\tmp.store >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tfindcer -s lm:ca "root agency" -x3600 -xfile://nonexistant1.cer -Xfile://nonexistant2.cer -Xfile://%UNC_PREFIX%\tmp.store -Xfile://nonexistant3.cer -xfile://noexistant4.cer -xfile://%store% -v >> regress.out
|
||
|
|
%_CDB_% ttrust vsgood.cer -q0x800b0101 >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tstore %UNC_PREFIX%\tmp.store -aallext.cer >> regress.out
|
||
|
|
%_CDB_% ttrust vsgood.cer -q0x800b0101 >> regress.out
|
||
|
|
%_CDB_% turlread -i file://%UNC_PREFIX%\tmp.store >> regress.out
|
||
|
|
%_CDB_% ttrust vsgood.cer -q0x800b0101 >> regress.out
|
||
|
|
%_CDB_% turlread -i file://%UNC_PREFIX%\tmp.store >> regress.out
|
||
|
|
|
||
|
|
@rem set sync time back 2 hours. This should force a resync
|
||
|
|
%_CDB_% turlread -S-7200 file://%UNC_PREFIX%\tmp.store >> regress.out
|
||
|
|
%_CDB_% turlread -i file://%UNC_PREFIX%\tmp.store >> regress.out
|
||
|
|
%_CDB_% ttrust vsgood.cer -q0x800b0101 >> regress.out
|
||
|
|
%_CDB_% turlread -i file://%UNC_PREFIX%\tmp.store >> regress.out
|
||
|
|
|
||
|
|
@rem remove Distribution point from Url store
|
||
|
|
%_CDB_% tstore %UNC_PREFIX%\tmp.store -dAll >> regress.out
|
||
|
|
%_CDB_% turlread -S-7200 file://%UNC_PREFIX%\tmp.store >> regress.out
|
||
|
|
%_CDB_% turlread -i file://%UNC_PREFIX%\tmp.store >> regress.out
|
||
|
|
%_CDB_% ttrust vsgood.cer -q0x800b0101 >> regress.out
|
||
|
|
%_CDB_% turlread -i file://%UNC_PREFIX%\tmp.store >> regress.out
|
||
|
|
|
||
|
|
@rem Add Distribution point to Url store
|
||
|
|
%_CDB_% tstore %UNC_PREFIX%\tmp.store -aallext.cer >> regress.out
|
||
|
|
%_CDB_% turlread -S-7200 file://%UNC_PREFIX%\tmp.store >> regress.out
|
||
|
|
%_CDB_% turlread -i file://%UNC_PREFIX%\tmp.store >> regress.out
|
||
|
|
%_CDB_% ttrust vsgood.cer -q0x800b0101 >> regress.out
|
||
|
|
%_CDB_% turlread -i file://%UNC_PREFIX%\tmp.store >> regress.out
|
||
|
|
|
||
|
|
@rem time invalid CTL without an URL
|
||
|
|
%_CDB_% tfindctl %store% -LUpdateCtl1 -fTimeInvalid -ptestupdate1.ctl -q >> regress.out
|
||
|
|
%_CDB_% tstore -s reg:trust -T -atestupdate1.ctl >> regress.out
|
||
|
|
del testupdate1.ctl
|
||
|
|
%_CDB_% ttrust vsgood.cer -q0x800b0101 >> regress.out
|
||
|
|
|
||
|
|
@rem time invalid CTL with time invalid URL
|
||
|
|
%_CDB_% tfindctl %store% -LUpdateCtl1 -fTimeInvalid -ptestupdate1.ctl >> regress.out
|
||
|
|
%_CDB_% ttrust vsgood.cer -q0x800b0101 >> regress.out
|
||
|
|
|
||
|
|
@rem time invalid CTL with time valid URL
|
||
|
|
%_CDB_% tfindctl %store% -LUpdateCtl1 -fTimeValid -ptestupdate1.ctl >> regress.out
|
||
|
|
%_CDB_% tstore -s reg:Trust -T >> regress.out
|
||
|
|
%_CDB_% ttrust vsgood.cer -q0x800b0101 >> regress.out
|
||
|
|
%_CDB_% tstore -s reg:Trust -T >> regress.out
|
||
|
|
|
||
|
|
@rem 2 time invalid CTLs with time valid URLs
|
||
|
|
%_CDB_% tfindctl -LUpdateCtl1 -s reg:trust -d -q >> regress.out
|
||
|
|
%_CDB_% tfindctl %store% -LUpdateCtl1 -fTimeInvalid -ptestupdate1.ctl -q >> regress.out
|
||
|
|
%_CDB_% tstore -s reg:trust -T -atestupdate1.ctl >> regress.out
|
||
|
|
%_CDB_% tfindctl %store% -LUpdateCtl1 -fTimeValid -ptestupdate1.ctl >> regress.out
|
||
|
|
%_CDB_% tfindctl %store% -LUpdateCtl2 -fTimeInvalid -ptestupdate2.ctl -q >> regress.out
|
||
|
|
%_CDB_% tstore -s reg:trust -T -atestupdate2.ctl >> regress.out
|
||
|
|
%_CDB_% tfindctl %store% -LUpdateCtl2 -fTimeValid -ptestupdate2.ctl >> regress.out
|
||
|
|
%_CDB_% tstore -s reg:Trust -T >> regress.out
|
||
|
|
%_CDB_% ttrust vsgood.cer -q0x800b0101 >> regress.out
|
||
|
|
%_CDB_% tstore -s reg:Trust -T >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tfindctl -LUpdateCtl1 -s reg:trust -d -q >> regress.out
|
||
|
|
%_CDB_% tfindctl -LUpdateCtl2 -s reg:trust -d -q >> regress.out
|
||
|
|
%_CDB_% tfindcer -s lm:ca "root agency" -xDelete -v >> regress.out
|
||
|
|
|
||
|
|
@rem
|
||
|
|
@rem Trust the test root
|
||
|
|
@rem
|
||
|
|
%_CDB_% setreg -q 1 true >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem CERT_E_EXPIRED 0x800b0101
|
||
|
|
@rem CERT_E_VALIDITYPERIODNESTING 0x800b0102
|
||
|
|
@rem CERT_E_WRONG_USAGE 0x800b0110
|
||
|
|
@rem CERT_E_CN_NO_MATCH 0x800b010f
|
||
|
|
@rem CERT_E_ROLE 0x800b0103
|
||
|
|
@rem CERT_E_UNTRUSTEDTESTROOT 0x800b010d
|
||
|
|
@rem CERT_E_PURPOSE 0x800b0106
|
||
|
|
@rem TRUST_E_BASIC_CONSTRAINTS 0x80096019
|
||
|
|
@rem CERT_E_CHAINING 0x800b010a
|
||
|
|
|
||
|
|
@rem CERT_E_UNTRUSTEDROOT 0x800b0109
|
||
|
|
@rem CERT_E_UNTRUSTEDCA 0x800b0112
|
||
|
|
@rem TRUST_E_CERT_SIGNATURE 0x80096004
|
||
|
|
@rem TRUST_E_NOSIGNATURE 0x800b0100
|
||
|
|
|
||
|
|
@rem Match name as a DNS Name choice in an alternate name extension
|
||
|
|
%_CDB_% tfindcer %store% -S -q -a"all ext" -pallext.cer >> regress.out
|
||
|
|
%_CDB_% ttrust allext.cer -https -server -q -S%store% -HttpsIgnoreWrongUsage -HttpsIgnoreUnknownCA -n"DNS name" >> regress.out
|
||
|
|
%_CDB_% ttrust allext.cer -https -server -q0x800b010f -S%store% -HttpsIgnoreWrongUsage -HttpsIgnoreUnknownCA -n"DNS nameX" >> regress.out
|
||
|
|
@rem in allext.cer AltName has a DNS choice, therefore, don't look
|
||
|
|
@rem for CN in subject name
|
||
|
|
%_CDB_% ttrust allext.cer -https -server -q0x800b010f -S%store% -HttpsIgnoreWrongUsage -HttpsIgnoreUnknownCA -n"all ext" >> regress.out
|
||
|
|
@rem in kevin.cer AltName doesn't have a DNS choice, therefore, look
|
||
|
|
@rem for CN in subject name
|
||
|
|
%_CDB_% ttrust kevin.cer -https -server -q -S%store% -HttpsIgnoreWrongUsage -HttpsIgnoreUnknownCA -n"kevin" >> regress.out
|
||
|
|
%_CDB_% ttrust kevin.cer -https -server -q0x800b010f -S%store% -HttpsIgnoreWrongUsage -HttpsIgnoreUnknownCA -n"kevin2" >> regress.out
|
||
|
|
|
||
|
|
@rem in dssend.cer doesn't have an AltName extension, therefore, look
|
||
|
|
@rem for CN in subject name
|
||
|
|
%_CDB_% ttrust dssend.cer -https -server -q -S%store% -HttpsIgnoreWrongUsage -HttpsIgnoreUnknownCA -n"dssend" >> regress.out
|
||
|
|
%_CDB_% ttrust dssend.cer -https -server -q0x800b010f -S%store% -HttpsIgnoreWrongUsage -HttpsIgnoreUnknownCA -n"not dssend" >> regress.out
|
||
|
|
|
||
|
|
@rem not permitted, not supported name constraint
|
||
|
|
%_CDB_% ttrust notpermitted.cer -https -server -q0x800b010f -S%store% -HttpsIgnoreWrongUsage -HttpsIgnoreUnknownCA -n"www.excluded.dns.not" >> regress.out
|
||
|
|
|
||
|
|
@rem not excluded name constraint
|
||
|
|
%_CDB_% ttrust excluded.cer -https -server -q0x800b010f -S%store% -HttpsIgnoreWrongUsage -HttpsIgnoreUnknownCA -n"www.excluded.dns.com" >> regress.out
|
||
|
|
|
||
|
|
@rem not permitted name constraint. Also has an
|
||
|
|
@rem invalid policy constraint. For https, mapped to CERT_E_PURPOSE
|
||
|
|
%_CDB_% ttrust duplicate1.cer -https -server -q0x800b010f -S%store% -HttpsIgnoreWrongUsage -HttpsIgnoreUnknownCA >> regress.out
|
||
|
|
%_CDB_% ttrust duplicate1.cer -https -server -q0x800b0106 -S%store% -HttpsIgnoreWrongUsage -HttpsIgnoreUnknownCA -HttpsIgnoreCertCNInvalid >> regress.out
|
||
|
|
|
||
|
|
@rem without an additional store, use the AuthorityInfoAccess extension
|
||
|
|
@rem to find the issuer certificate. In this case, none of the URLs
|
||
|
|
@rem exist
|
||
|
|
%_CDB_% ttrust allext.cer -q0x800b010a >> regress.out
|
||
|
|
|
||
|
|
@rem test CryptInstallDefaultContext
|
||
|
|
%_CDB_% ttrust dss1024.cer -q0x800b0109 >> regress.out
|
||
|
|
%_CDB_% ttrust dss1024.cer -q0x800b0109 -InstallThreadDefaultContext >> regress.out
|
||
|
|
%_CDB_% ttrust dss1024.cer -q0x80096004 -InstallThreadDefaultContext -NullDefaultContext >> regress.out
|
||
|
|
|
||
|
|
@rem Test NTAuthNameConstraint policy
|
||
|
|
@rem CERT_E_UNTRUSTEDCA 0x800b0112
|
||
|
|
@rem allext.cer has valid name constraints, dssend.cer doesn't
|
||
|
|
@rem -NTAuthNameConstraint sets CERT_CHAIN_POLICY_ALLOW_UNKNOWN_CA_FLAG
|
||
|
|
%_CDB_% ttrust -DisableNTAuthRequired -chain -NTAuthNameConstraint allext.cer -q -S%store% >> regress.out
|
||
|
|
%_CDB_% ttrust -EnableNTAuthRequired -chain -NTAuthNameConstraint allext.cer -q0x800b0112 -S%store% >> regress.out
|
||
|
|
%_CDB_% ttrust -DisableNTAuthRequired -chain -NTAuthNameConstraint dssend.cer -q0x800b0112 -S%store% >> regress.out
|
||
|
|
%_CDB_% ttrust -EnableNTAuthRequired -chain -NTAuthNameConstraint dssend.cer -q0x800b0112 -S%store% >> regress.out
|
||
|
|
|
||
|
|
@cd ttrust\testfile
|
||
|
|
|
||
|
|
@rem driver and https no longer use setreg's trust test root
|
||
|
|
%_CDB_% ttrust indasind.cab -q0x800b010d -driver >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust comend3.cer -Scomend3.spc -q0x800b0109 -https -server -HttpsIgnoreWrongUsage >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem explicitly trust the "Root Agency" testroot
|
||
|
|
%_CDB_% tstore -s lm:root -a..\..\rooto.cer >> ..\..\regress.out
|
||
|
|
|
||
|
|
@ Test CertVerifyCertificateChainPolicy(CERT_CHAIN_POLICY_MICROSOFT_ROOT)
|
||
|
|
%_CDB_% ttrust -chain -e0x0 -NotMicrosoftRoot ..\..\rooto.cer >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust -chain -e0x1 -NotMicrosoftRoot ..\..\vsgood.cer >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust -chain -e0x0 -MicrosoftRoot msroot01.cer >> ..\..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% ttrust timestmp.dll -q -file -DisplayKnownUsages >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust timestmp.dll -q -file -chain >> ..\..\regress.out
|
||
|
|
@rem with LifetimeSigning, timestamped signatures can expire
|
||
|
|
%_CDB_% ttrust timestmp.dll -q0x800b0101 -file -LifetimeSigning >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem following timestamped cab, also has LIFTIME_SIGNING OID
|
||
|
|
%_CDB_% ttrust lifetime.cab -q0x800b0101 -file >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem following certs are valid before timestamp.
|
||
|
|
@rem First also has LIFETIME_SIGNING OID
|
||
|
|
%_CDB_% ttrust beforets.cab -q0x800b0101 -file >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust beforets2.cab -q0x800b0101 -file >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem following certs are valid after timestamp. Should be valid now
|
||
|
|
@rem First also has LIFETIME_SIGNING OID
|
||
|
|
%_CDB_% ttrust afterts.cab -q0x800b0101 -file >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust afterts2.cab -q0x800b0101 -file >> ..\..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% ttrust indasind.cab -q -file >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust indasind.cab -q -file -chain >> ..\..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% ttrust indasind.cab -q0x800b0110 -driver >> ..\..\regress.out
|
||
|
|
@rem individual cert signed as being commercial
|
||
|
|
|
||
|
|
@rem July 30, 2000 removed all the individual, commerical comparison junk
|
||
|
|
|
||
|
|
%_CDB_% ttrust indascom.cab -q -file >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust indascom.cab -q -file -chain >> ..\..\regress.out
|
||
|
|
@rem commercial cert signed as being individual
|
||
|
|
%_CDB_% ttrust comasind.cab -q -file >> ..\..\regress.out
|
||
|
|
@rem commercial cert issued by individual CA
|
||
|
|
%_CDB_% ttrust comend2.cer -Scomend2.spc -q >> ..\..\regress.out
|
||
|
|
@rem signed by commercial cert issued by individual CA
|
||
|
|
%_CDB_% ttrust indissue.cab -q -file >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem following was signed using a CA certificate
|
||
|
|
%_CDB_% ttrust notend.cab -q0x80096019 -file >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem Note, not a BASIC_CONSTRAINTS error to verify chain starting with CA
|
||
|
|
%_CDB_% ttrust indca.cer -q >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust comca.cer -q >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem Intermediate cert had a max depth of 0
|
||
|
|
%_CDB_% ttrust comend3.cer -Scomend3.spc -q0x80096019 >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust pathlen.cab -q0x80096019 -file >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust comend3.cer -q0x800b010a >> ..\..\regress.out
|
||
|
|
@rem https policy converts to CERT_E_ROLE
|
||
|
|
%_CDB_% ttrust comend3.cer -Scomend3.spc -q0x800b0103 -https -server -HttpsIgnoreWrongUsage >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem End certificate signing another certificate
|
||
|
|
%_CDB_% ttrust end2.cer -Send.spc -q0x80096019 >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem Sign with an email certificate (wrong usage)
|
||
|
|
%_CDB_% ttrust email.cer -q0x800b0110 >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust email.cer -u1.3.6.1.5.5.7.3.4 -q >>..\..\regress.out
|
||
|
|
%_CDB_% ttrust email.cab -q0x800b0110 -file >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem Code Signing EKU cert signed as being individual
|
||
|
|
%_CDB_% ttrust csasind.cab -q -file >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem Code Signing EKU cert signed as being commercial
|
||
|
|
%_CDB_% ttrust csascom.cab -q -file >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem Commercial EKU cert issued by CodeSigning EKU CA
|
||
|
|
%_CDB_% ttrust comend4.cer -Scomend4.spc -q >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust comend4.cer -q0x800b010a >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust csissue.cab -q -file >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem Commercial EKU cert issued by Commercial EKU CA
|
||
|
|
%_CDB_% ttrust comend5.cer -Scomend5.spc -q >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust comcsiss.cab -q -file >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem Commercial EKU cert issued by Individual EKU CA
|
||
|
|
%_CDB_% ttrust comend6.cer -Scomend6.spc -q >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust indcsiss.cab -q -file >> ..\..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% ttrust expired.cer -q0x800b0101 >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust expired.cer -chain -q0x800b0101 >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust expired.cer -https -q0x800b0101 >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust expired.cer -https -q -HttpsIgnoreCertDateInvalid >> ..\..\regress.out
|
||
|
|
@rem on Sep 10, 1998 disabled time nesting checking in authenticode and
|
||
|
|
@rem and SSL chain policy (-q0x800b0102)
|
||
|
|
%_CDB_% ttrust timenest.cer -q >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust timenest.cer -chain -q >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust timenest.cer -https -q >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust timenest.cer -https -q -HttpsIgnoreCertDateInvalid >> ..\..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% ttrust client.cer -cert -q0x800b0110 >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust client.cer -chain -q >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust client.cer -chain -u1.2.3.4 -q0x800b0110 >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust client.cer -https -client -q >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust client.cer -https -server -q0x800b0110 >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust client.cer -https -server -q -HttpsIgnoreWrongUsage >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust client.cer -https -server -q -HttpsIgnoreWrongUsage -HttpsIgnoreUnknownCA >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust client.cer -https -client -q -nClient >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust client.cer -https -client -q -n"LDAP/LDAP/Client@MoreLDAP" >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust client.cer -https -client -q -n"LDAP/Client@MoreLDAP" >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust client.cer -https -client -q -n"////LDAP/Client@Mo@reL@DAP" >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust client.cer -https -client -q0x800b010f -nCleent >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust client.cer -https -client -q0x800b010f -nCleent -RevokeChain >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust client.cer -https -client -q -HttpsIgnoreCertCNInvalid -nCleent >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust server.cer -https -server -q >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust server.cer -https -client -q0x800b0110 >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust server.cer -https -client -q -HttpsIgnoreWrongUsage >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust server.cer -https -client -q -HttpsIgnoreWrongUsage -HttpsIgnoreUnknownCA >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust server.cer -https -server -q -nServer >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust server.cer -https -server -q0x800b010f -nServerx >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust server.cer -https -server -q -HttpsIgnoreCertCNInvalid -nServerx >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust sgc.cer -https -server -q >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust sgcnet.cer -https -server -q >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem test CryptInstallDefaultContext
|
||
|
|
%_CDB_% ttrust indca.cer -q -InstallThreadDefaultContext >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust indca.cer -q -InstallThreadDefaultContext -MultiDefaultContext >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust indca.cer -q -InstallThreadDefaultContext -MultiDefaultContext -AutoReleaseDefaultContext >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust indca.cer -q -InstallThreadDefaultContext -NULLDefaultContext >> ..\..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% ttrust indca.cer -q -InstallProcessDefaultContext >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust indca.cer -q -InstallProcessDefaultContext -MultiDefaultContext >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust indca.cer -q -InstallProcessDefaultContext -MultiDefaultContext -AutoReleaseDefaultContext >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem Test NTAuth policy
|
||
|
|
%_CDB_% ttrust indasind.cab -q0x800b0112 -file -NTAuth >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust indasind.cab -q0x80092012 -file -NTAuth -RevokeChain >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust pathlen.cab -q0x80096019 -file -NTAuth >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust end2.cer -Send.spc -q0x80096019 -NTAuth >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust expired.cer -q0x800b0101 -NTAuth >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem Test Safer
|
||
|
|
|
||
|
|
@rem remove all TestSafer roots and trusted publishers
|
||
|
|
%_CDB_% tfindcer -s lm:TrustedPublisher TestSafer -d >> ..\..\regress.out
|
||
|
|
%_CDB_% tfindcer -s reg:TrustedPublisher TestSafer -d >> ..\..\regress.out
|
||
|
|
%_CDB_% tfindcer -s lm:Root TestSafer -d >> ..\..\regress.out
|
||
|
|
@rem remove all TestSafer disallowewd publishers
|
||
|
|
%_CDB_% tfindcer -s lm:Disallowed TestSafer -d >> ..\..\regress.out
|
||
|
|
%_CDB_% tfindcer -s reg:Disallowed TestSafer -d >> ..\..\regress.out
|
||
|
|
|
||
|
|
|
||
|
|
@rem TRUST_E_NO_SIGNATURE
|
||
|
|
%_CDB_% ttrust -file -Safer -DeleteSaferRegKey -q0x800b0100 torg2.cab >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem Safer maps TRUST_E_BAD_DIGEST to TRUST_E_NO_SIGNATURE
|
||
|
|
%_CDB_% ttrust -file -Safer -q0x800b0100 b_dig.cab >> ..\..\regress.out
|
||
|
|
@rem TRUST_E_BAD_DIGEST (without safer)
|
||
|
|
%_CDB_% ttrust -file -q0x80096010 b_dig.cab >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem TRUST_E_CERT_SIGNATURE
|
||
|
|
%_CDB_% ttrust -file -Safer -q0x80096004 bad_sign.cab >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem TRUST_E_COUNTER_SIGNER
|
||
|
|
%_CDB_% ttrust -file -Safer -q0x80096003 tscert.cab >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem CERT_E_UNTRUSTEDROOT
|
||
|
|
%_CDB_% ttrust -file -Safer -q0x800b0109 saferuntrusted.cab >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust -file -Safer -q0x800b0109 saferuntrusted2.cab >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust -file -Safer -q0x800b0109 saferuser.cab >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem explicitly trust publisher
|
||
|
|
%_CDB_% tstore -s reg:TrustedPublisher -asaferuser.cer >> ..\..\regress.out
|
||
|
|
@rem remains untrusted root
|
||
|
|
%_CDB_% ttrust -file -Safer -q0x800b0109 saferuser.cab >> ..\..\regress.out
|
||
|
|
%_CDB_% tfindcer -s reg:TrustedPublisher TestSafer -d >> ..\..\regress.out
|
||
|
|
|
||
|
|
%_CDB_% tstore -s lm:Root -asaferroot.cer >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust -file -DeleteSaferRegKey -Safer -q saferfull.cab >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem AuthenticodeFlags definitions
|
||
|
|
@rem CERT_TRUST_PUB_ALLOW_TRUST_MASK 0x00000003
|
||
|
|
@rem CERT_TRUST_PUB_ALLOW_END_USER_TRUST 0x00000000
|
||
|
|
@rem CERT_TRUST_PUB_ALLOW_MACHINE_ADMIN_TRUST 0x00000001
|
||
|
|
@rem CERT_TRUST_PUB_ALLOW_ENTERPRISE_ADMIN_TRUST 0x00000002
|
||
|
|
@rem CERT_TRUST_PUB_CHECK_PUBLISHER_REV_FLAG 0x00000100
|
||
|
|
@rem CERT_TRUST_PUB_CHECK_TIMESTAMP_REV_FLAG 0x00000200
|
||
|
|
|
||
|
|
@rem CRYPT_E_SECURITY_SETTINGS, don't allow end user trust
|
||
|
|
%_CDB_% ttrust -file -Safer -AuthenticodeFlags 0x1 -q0x80092026 saferfull.cab >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem both SAFER and default ignore NO_REVOCATION check
|
||
|
|
%_CDB_% ttrust -file -Safer -AuthenticodeFlags 0x300 -q saferfull.cab >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust -file -AuthenticodeFlags 0x300 -q saferfull.cab >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem explicitly trust publisher
|
||
|
|
%_CDB_% tstore -s reg:TrustedPublisher -asaferuser.cer >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust -file -Safer -AuthenticodeFlags 0x0 -q saferuser.cab >> ..\..\regress.out
|
||
|
|
@rem don't trust end user, should get CRYPT_E_SECURITY_SETTINGS
|
||
|
|
%_CDB_% ttrust -file -Safer -AuthenticodeFlags 0x1 -q0x80092026 saferuser.cab >> ..\..\regress.out
|
||
|
|
@rem shouldn't appear in TrustedPublisher store
|
||
|
|
%_CDB_% tstore -s TrustedPublisher >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem explicitly distrust publisher
|
||
|
|
%_CDB_% tstore -s reg:Disallowed -asaferuser.cer >> ..\..\regress.out
|
||
|
|
%_CDB_% ttrust -file -Safer -AuthenticodeFlags 0x0 -q0x800b0111 saferuser.cab >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem remove trusted publisher from CurrentUser and add to HKLM
|
||
|
|
%_CDB_% tfindcer -s reg:TrustedPublisher TestSafer -d >> ..\..\regress.out
|
||
|
|
%_CDB_% tfindcer -s reg:Disallowed TestSafer -d >> ..\..\regress.out
|
||
|
|
%_CDB_% tstore -s lm:TrustedPublisher -asaferuser.cer >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem don't allow end user trust, however trusted in HKLM
|
||
|
|
%_CDB_% ttrust -file -Safer -AuthenticodeFlags 0x1 -q saferuser.cab >> ..\..\regress.out
|
||
|
|
|
||
|
|
|
||
|
|
@rem CRYPT_E_SECURITY_SETTINGS, don't allow machine trust
|
||
|
|
%_CDB_% ttrust -file -Safer -AuthenticodeFlags 0x2 -q0x80092026 saferuser.cab >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem remove TestSafer stuff
|
||
|
|
%_CDB_% ttrust -file -Safer -DeleteSaferRegKey -q0x800b0100 torg2.cab >> ..\..\regress.out
|
||
|
|
%_CDB_% tfindcer -s lm:TrustedPublisher TestSafer -d >> ..\..\regress.out
|
||
|
|
%_CDB_% tfindcer -s reg:TrustedPublisher TestSafer -d >> ..\..\regress.out
|
||
|
|
%_CDB_% tfindcer -s lm:Root TestSafer -d >> ..\..\regress.out
|
||
|
|
%_CDB_% tfindcer -s lm:Disallowed TestSafer -d >> ..\..\regress.out
|
||
|
|
%_CDB_% tfindcer -s reg:Disallowed TestSafer -d >> ..\..\regress.out
|
||
|
|
|
||
|
|
@rem ensure the test root is removed
|
||
|
|
%_CDB_% tfindcer -S -s lm:root -a"Root Agency" -d >> ..\..\regress.out
|
||
|
|
|
||
|
|
@cd ..\..
|
||
|
|
:TrustDone
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem KEYID
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="keyid" if not %t%=="all" goto KeyIdDone
|
||
|
|
if exist tmp.store del tmp.store
|
||
|
|
%_CDB_% tcopycer %store% tmp.store -aTestRecipient2 >> regress.out
|
||
|
|
%_CDB_% tsca -l tmp.store envelope -mtmp.msg -v >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcopycer %store% tmp.store -aTestSigner2 >> regress.out
|
||
|
|
%_CDB_% tcopycer %store% tmp.store -aTestSigner >> regress.out
|
||
|
|
%_CDB_% tcopycer %store% tmp.store -aTestSigner3 >> regress.out
|
||
|
|
%_CDB_% tcopycer %store% tmp.store -aTestRecipient >> regress.out
|
||
|
|
%_CDB_% tstore tmp.store -b >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tfindcer -s archived:my TestSigner -d -q >> regress.out
|
||
|
|
%_CDB_% tfindcer -s archived:my TestRecipient -d -q >> regress.out
|
||
|
|
%_CDB_% tfindcer -s archived:lm:my TestSigner -d -q >> regress.out
|
||
|
|
%_CDB_% tfindcer -s archived:lm:my TestRecipient -d -q >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tcopycer tmp.store -s my >> regress.out
|
||
|
|
%_CDB_% tcopycer tmp.store -s lm:my >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tstore -s my -b >> regress.out
|
||
|
|
%_CDB_% tstore -s archived:my -b >> regress.out
|
||
|
|
%_CDB_% tstore -s lm:my -b >> regress.out
|
||
|
|
%_CDB_% tstore -s archived:lm:my -b >> regress.out
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
@rem CERT_STORE_MANIFOLD_FLAG 0x00000100
|
||
|
|
@rem CERT_STORE_ENUM_ARCHIVED_FLAG 0x00000200
|
||
|
|
|
||
|
|
%_CDB_% tstore tmp.store -b -f0x100 >> regress.out
|
||
|
|
%_CDB_% tstore tmp.store -f0x300 -S >> regress.out
|
||
|
|
%_CDB_% tstore tmp.store -b >> regress.out
|
||
|
|
%_CDB_% tstore tmp.store -b -f0x200 >> regress.out
|
||
|
|
%_CDB_% tsca -l tmp.store envelope -rtmp.msg -v >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tfindcer tmp.store TestSigner -ptestsign.cer >> regress.out
|
||
|
|
%_CDB_% tfindcer tmp.store TestRecipient -ptestxchg.cer >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tkeyid set -Stmp.store -ctestxchg.cer >> regress.out
|
||
|
|
%_CDB_% tkeyid set -Stmp.store -ctestsign.cer >> regress.out
|
||
|
|
%_CDB_% tkeyid enum -b >> regress.out
|
||
|
|
%_CDB_% tkeyid enum -v >> regress.out
|
||
|
|
%_CDB_% tkeyid delete -ctestxchg.cer -p20 >> regress.out
|
||
|
|
%_CDB_% tkeyid delete -ctestsign.cer -p4 >> regress.out
|
||
|
|
%_CDB_% tkeyid delete -ctestsign.cer -p3 >> regress.out
|
||
|
|
%_CDB_% tkeyid delete -ctestsign.cer -p15 >> regress.out
|
||
|
|
%_CDB_% tkeyid get -ctestxchg.cer -V >> regress.out
|
||
|
|
%_CDB_% tkeyid get -ctestsign.cer -V >> regress.out
|
||
|
|
|
||
|
|
%_CDB_% tfindcer -s archived:lm:my TestRecipient -d -q >> regress.out
|
||
|
|
if exist mach.store del mach.store
|
||
|
|
%_CDB_% tstore2 -M mach.store >> regress.out
|
||
|
|
%_CDB_% tfindcer mach.store -S -aTestRecipient -ptestxchg.cer >> regress.out
|
||
|
|
%_CDB_% tkeyid set -M -Smach.store -ctestxchg.cer >> regress.out
|
||
|
|
%_CDB_% tkeyid enum -M -b >> regress.out
|
||
|
|
%_CDB_% tkeyid enum -M -v >> regress.out
|
||
|
|
%_CDB_% tstore -s lm:my -atestxchg.cer >> regress.out
|
||
|
|
%_CDB_% tkeyid enum -M -v >> regress.out
|
||
|
|
%_CDB_% tkeyid delete -M -ctestxchg.cer -p20 >> regress.out
|
||
|
|
%_CDB_% tkeyid delete -M -ctestxchg.cer -p4 >> regress.out
|
||
|
|
%_CDB_% tkeyid get -M -ctestxchg.cer -V >> regress.out
|
||
|
|
%_CDB_% tkeyid get -M -ctestxchg.cer -V -p2 >> regress.out
|
||
|
|
%_CDB_% tkeyid get -M -ctestxchg.cer -V -p3 >> regress.out
|
||
|
|
|
||
|
|
:KeyIdDone
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem URL
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@if not %t%=="url" if not %t%=="all" goto UrlDone
|
||
|
|
%_CDB_% tcrobu "ldap://ntdev.microsoft.com/CN=Public Key Services,CN=Services,CN=Configuration,DC=ntdev,DC=microsoft,DC=com??sub" cert -m -k >> regress.out
|
||
|
|
%_CDB_% tcrobu "ldap://ntdev.microsoft.com/CN=Public Key Services,CN=Services,CN=Configuration,DC=ntdev,DC=microsoft,DC=com??sub" crl -m >> regress.out
|
||
|
|
%_CDB_% tcrobu "ldap://ntdev.microsoft.com/CN=Public Key Services,CN=Services,CN=Configuration,DC=ntdev,DC=microsoft,DC=com??sub" any -m -t 20000 >> regress.out
|
||
|
|
%_CDB_% tstore -s "prov:ldap:ldap://ntdev.microsoft.com/CN=Public Key Services,CN=Services,CN=Configuration,DC=ntdev,DC=microsoft,DC=com??sub" -f0x18000 >> regress.out
|
||
|
|
%_CDB_% tstore -R -s "prov:ldap:ldap://ntdev.microsoft.com/CN=Public Key Services,CN=Services,CN=Configuration,DC=ntdev,DC=microsoft,DC=com??sub" -f0x8000 >> regress.out
|
||
|
|
%_CDB_% tcrobu "ldap://ntdev.microsoft.com/CN=Public Key Services,CN=Services,CN=Configuration,DC=ntdev,DC=microsoft,DC=com?caCertificate?sub?objectclass=certificationAuthority" cert -m >> regress.out
|
||
|
|
%_CDB_% tcrobu "ldap://ntdev.microsoft.com/CN=Public Key Services,CN=Services,CN=Configuration,DC=ntdev,DC=microsoft,DC=com?certificateRevocationList,authorityrevocationlist?sub?objectclass=cRlDistributionPoint" crl -m >> regress.out
|
||
|
|
|
||
|
|
goto UrlDone
|
||
|
|
%_CDB_% tcrobu "ldap://157.59.132.34/c=us??sub" cert -m >> regress.out
|
||
|
|
%_CDB_% tcrobu "ldap://157.59.132.34/c=us??sub" crl -m >> regress.out
|
||
|
|
%_CDB_% tcrobu "ldap://157.59.132.34/c=us??sub" any -m >> regress.out
|
||
|
|
|
||
|
|
|
||
|
|
:UrlDone
|
||
|
|
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
@rem **** END ****
|
||
|
|
@rem ----------------------------------------------------------------
|
||
|
|
|
||
|
|
ttrust -EnableUntrustedRootLogging -EnablePartialChainLogging -RegistryOnlyExit
|
||
|
|
setreg -q 1 FALSE 2 TRUE 3 TRUE 4 TRUE 5 TRUE 6 TRUE 7 TRUE
|
||
|
|
|
||
|
|
@qgrep -y "pass succe" regress.out
|
||
|
|
@echo ****************************
|
||
|
|
@qgrep -y "leak fail" regress.out | qgrep -v -e "returned expected"
|
||
|
|
@qgrep -y -e "expected return:" regress.out
|
||
|
|
@qgrep -y -B -e "error:" regress.out
|
||
|
|
@rem @qgrep -e "Error at" regress.out
|
||
|
|
@echo ****************************
|
||
|
|
|
||
|
|
:exeunt
|
||
|
|
@echo off
|
||
|
|
set v=%_old_v%
|
||
|
|
set l=%_old_l%
|
||
|
|
set p=%_old_p%
|
||
|
|
set pe=%_old_pe%
|
||
|
|
set s=%_old_s%
|
||
|
|
set n=%_old_n%
|
||
|
|
set t=%_old_t%
|
||
|
|
set _CDB_=%_old_CDB_%
|
||
|
|
set DEBUG_MASK=%_old_DEBUG_MASK%
|
||
|
|
set DEBUG_PRINT_MASK=%_old_DEBUG_PRINT_MASK%
|
||
|
|
|
||
|
|
set LCN=%_old_LCN%
|
||
|
|
set RCN=%_old_RCN%
|
||
|
|
set SID=%_old_SID%
|
||
|
|
set SLEEP0=%_old_SLEEP0%
|
||
|
|
set UNC_PREFIX=%_old_UNC_PREFIX%
|
||
|
|
|
||
|
|
set _old_v=
|
||
|
|
set _old_l=
|
||
|
|
set _old_p=
|
||
|
|
set _old_pe=
|
||
|
|
set _old_s=
|
||
|
|
set _old_n=
|
||
|
|
set _old_t=
|
||
|
|
set _old_CDB_=
|
||
|
|
set _old_DEBUG_MASK=
|
||
|
|
|
||
|
|
set _old_LCN=
|
||
|
|
set _old_RCN=
|
||
|
|
set _old_SID=
|
||
|
|
set _old_SLEEP0=
|
||
|
|
set _old_UNC_PREFIX=
|
||
|
|
|
||
|
|
REM @ENDLOCAL
|