[PATCH v2 2/3] build: generate tls config for unit tests

[James Prestwood <prestwoj@gmail.com>]

[-- Attachment #1: Type: text/plain, Size: 2046 bytes --]

To test embedded certs we need a settings file containing the same
PEMs that we generate during build time. In the same fashion generate
tls-settings.8021x file using the previously generated PEMs.
---
 Makefile.am | 20 ++++++++++++++++++--
 1 file changed, 18 insertions(+), 2 deletions(-)

-v2:
 * Added AM_V_GEN to tls-settings.8021x generation
 * Remove tls-settings.8021x in clean-local

diff --git a/Makefile.am b/Makefile.am
index 7f01689a..3f647079 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -441,7 +441,8 @@ unit_test_eapol_DEPENDENCIES = $(ell_dependencies) \
 				unit/cert-server.pem \
 				unit/cert-server-key-pkcs8.pem \
 				unit/cert-client.pem \
-				unit/cert-client-key-pkcs8.pem
+				unit/cert-client-key-pkcs8.pem \
+				unit/tls-settings.8021x
 
 unit_test_util_SOURCES = src/util.h src/util.c \
 				unit/test-util.c
@@ -576,6 +577,21 @@ unit/cert-client.pem: unit/cert-client.csr unit/cert-ca.pem unit/gencerts.cnf
 			-CAserial $(builddir)/unit/cert-ca.srl \
 			-CAcreateserial -sha256 -days 10000 -out $@ $($(AM_V_P)_redirect_openssl)
 
+unit/tls-settings.8021x: unit/cert-ca.pem unit/cert-client.pem unit/cert-client-key-pkcs8.pem
+	$(AM_V_GEN) \
+	$(file >$@,[Security])
+	$(file >>$@,EAP-Method=TLS)
+	$(file >>$@,EAP-Identity=abc(a)example.com)
+	$(file >>$@,EAP-TLS-CACert=embed:ca_cert)
+	$(file >>$@,EAP-TLS-ClientCert=embed:client_cert)
+	$(file >>$@,EAP-TLS-ClientKey=embed:client_key)
+	$(file >>$@,[@pem(a)ca_cert])
+	$(shell cat unit/cert-ca.pem >> $@)
+	$(file >>$@,[@pem(a)client_cert])
+	$(shell cat unit/cert-client.pem >> $@)
+	$(file >>$@,[@pem(a)client_key])
+	$(shell cat unit/cert-client-key-pkcs8.pem >> $@)
+
 BUILT_SOURCES = $(ell_built_sources) src/builtin.h
 
 ell/internal: Makefile
@@ -627,7 +643,7 @@ endif
 endif
 
 clean-local:
-	-rm -f unit/cert-*.pem unit/cert-*.csr unit/cert-*.srl
+	-rm -f unit/cert-*.pem unit/cert-*.csr unit/cert-*.srl unit/*-settings.8021x
 
 maintainer-clean-local:
 	-rm -rf build-aux ell
-- 
2.17.1