[PATCH 2/3] build: generate tls config for unit tests

[James Prestwood <prestwoj@gmail.com>]

[-- Attachment #1: Type: text/plain, Size: 1675 bytes --]

To test embedded certs we need a settings file containing the same
PEMs that we generate during build time. In the same fashion generate
tls-settings.8021x file using the previously generated PEMs.
---
 Makefile.am | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

diff --git a/Makefile.am b/Makefile.am
index 7f01689a..1576d583 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -441,7 +441,8 @@ unit_test_eapol_DEPENDENCIES = $(ell_dependencies) \
 				unit/cert-server.pem \
 				unit/cert-server-key-pkcs8.pem \
 				unit/cert-client.pem \
-				unit/cert-client-key-pkcs8.pem
+				unit/cert-client-key-pkcs8.pem \
+				unit/tls-settings.8021x
 
 unit_test_util_SOURCES = src/util.h src/util.c \
 				unit/test-util.c
@@ -576,6 +577,20 @@ unit/cert-client.pem: unit/cert-client.csr unit/cert-ca.pem unit/gencerts.cnf
 			-CAserial $(builddir)/unit/cert-ca.srl \
 			-CAcreateserial -sha256 -days 10000 -out $@ $($(AM_V_P)_redirect_openssl)
 
+unit/tls-settings.8021x: unit/cert-ca.pem unit/cert-client.pem unit/cert-client-key-pkcs8.pem
+	$(file >$@,[Security])
+	$(file >>$@,EAP-Method=TLS)
+	$(file >>$@,EAP-Identity=abc(a)example.com)
+	$(file >>$@,EAP-TLS-CACert=embed:ca_cert)
+	$(file >>$@,EAP-TLS-ClientCert=embed:client_cert)
+	$(file >>$@,EAP-TLS-ClientKey=embed:client_key)
+	$(file >>$@,[@pem(a)ca_cert])
+	$(shell cat unit/cert-ca.pem >> $@)
+	$(file >>$@,[@pem(a)client_cert])
+	$(shell cat unit/cert-client.pem >> $@)
+	$(file >>$@,[@pem(a)client_key])
+	$(shell cat unit/cert-client-key-pkcs8.pem >> $@)
+
 BUILT_SOURCES = $(ell_built_sources) src/builtin.h
 
 ell/internal: Makefile
-- 
2.17.1