3 # check bitlk images parsing
5 [ -z "$CRYPTSETUP_PATH" ] && CRYPTSETUP_PATH=".."
6 CRYPTSETUP=$CRYPTSETUP_PATH/cryptsetup
9 DUMP_VK_FILE=bitlk-test-vk
11 CRYPTSETUP_VALGRIND=../.libs/cryptsetup
12 CRYPTSETUP_LIB_VALGRIND=../.libs
14 [ -z "$srcdir" ] && srcdir="."
16 function remove_mapping()
18 [ -b /dev/mapper/$MAP ] && dmsetup remove --retry $MAP
24 [ -n "$1" ] && echo "$1"
26 echo "FAILED backtrace:"
27 while caller $frame; do ((frame++)); done
34 [ -n "$1" ] && echo "$1"
42 local file=$(echo $1 | sed -e s/^$TST_DIR\\/// | sed -e s/\.img$//)
43 source <(grep = <(grep -A8 "\[$file\]" $TST_DIR/images.conf))
51 # load variables for this image from config file
55 dump_size=$(echo "$dump" | grep "Volume size:" | cut -d: -f2 | tr -d "\t\n ")
56 [ "$dump_size" = "104857600[bytes]" -o "$dump_size" = "134217728[bytes]" ] || fail " volume size check from dump failed."
59 dump_desc=$(echo "$dump" | grep Description: | cut -d: -f2 | tr -d "\t\n ")
60 [ "${dump_desc:0:7}" = "DESKTOP" -o "${dump_desc:0:3}" = "WIN" ] || fail " Description check from dump failed."
63 dump_guid=$(echo "$dump" | grep Version -A 1 | tail -1 | cut -d: -f2 | tr -d "\t\n ")
64 [ ! -z "$GUID" -a "$dump_guid" = "$GUID" ] || fail " GUID check from dump failed."
67 dump_cipher=$(echo "$dump" | grep "Cipher name" | cut -d: -f2 | tr -d "\t\n ")
68 dump_mode=$(echo "$dump" | grep "Cipher mode" | cut -d: -f2 | tr -d "\t\n ")
69 cipher=$(echo "$dump_cipher-$dump_mode")
70 [ ! -z "$CIPHER" -a "$cipher" = "$CIPHER" ] || fail " cipher check from dump failed."
72 if echo "$file" | grep -q -e "smart-card"; then
73 # smart card protected VMK GUID
74 dump_sc_vmk=$(echo "$dump" | grep "VMK protected with smart card" -B 1 | head -1 | cut -d: -f2 | tr -d "\t ")
75 [ ! -z "$SC_VMK_GUID" -a "$dump_sc_vmk" = "$SC_VMK_GUID" ] || fail " smart card protected VMK GUID check from dump failed."
76 elif echo "$file" | grep -q -e "startup-key"; then
77 # startup key protected VMK GUID
78 dump_sk_vmk=$(echo "$dump" | grep "VMK protected with startup key" -B 1 | head -1 | cut -d: -f2 | tr -d "\t ")
79 [ ! -z "$SK_VMK_GUID" -a "$dump_sk_vmk" = "$SK_VMK_GUID" ] || fail " startup key protected VMK GUID check from dump failed."
81 # password protected VMK GUID
82 dump_pw_vmk=$(echo "$dump" | grep "VMK protected with passphrase" -B 1 | head -1 | cut -d: -f2 | tr -d "\t ")
83 [ ! -z "$PW_VMK_GUID" -a "$dump_pw_vmk" = "$PW_VMK_GUID" ] || fail " password protected VMK GUID check from dump failed."
86 # recovery password protected VMK GUID
87 dump_rp_vmk=$(echo "$dump" | grep "VMK protected with recovery passphrase" -B 1 | head -1 | cut -d: -f2 | tr -d "\t ")
88 [ ! -z "$RP_VMK_GUID" -a "$dump_rp_vmk" = "$RP_VMK_GUID" ] || fail " recovery password protected VMK GUID check from dump failed."
92 function valgrind_setup()
94 command -v valgrind >/dev/null || fail "Cannot find valgrind."
95 [ ! -f $CRYPTSETUP_VALGRIND ] && fail "Unable to get location of cryptsetup executable."
96 export LD_LIBRARY_PATH="$CRYPTSETUP_LIB_VALGRIND:$LD_LIBRARY_PATH"
99 function valgrind_run()
101 INFOSTRING="$(basename ${BASH_SOURCE[1]})-line-${BASH_LINENO[0]}" ./valg.sh ${CRYPTSETUP_VALGRIND} "$@"
105 [ ! -x "$CRYPTSETUP" ] && skip "Cannot find $CRYPTSETUP, test skipped."
106 [ ! -d $TST_DIR ] && tar xJSf $srcdir/bitlk-images.tar.xz --no-same-owner 2>/dev/null || skip "Incompatible tar."
108 [ -n "$VALG" ] && valgrind_setup && CRYPTSETUP=valgrind_run
111 for file in $(ls $TST_DIR/bitlk-*) ; do
113 out=$($CRYPTSETUP bitlkDump $file)
114 check_dump "$out" "$file"
118 if [ $(id -u) != 0 ]; then
119 echo "WARNING: You must be root to run activation part of test, test skipped."
124 echo "ACTIVATION FS UUID CHECK"
125 for file in $(ls $TST_DIR/bitlk-*) ; do
126 # load variables for this image from config file
129 # test with both passphrase and recovery passphrase
130 for PASSPHRASE in $PW $RP ; do
132 echo $PASSPHRASE | $CRYPTSETUP bitlkOpen -r $file --test-passphrase >/dev/null 2>&1
134 [ $ret -eq 1 ] && echo " [N/A]" && continue
135 echo $PASSPHRASE | $CRYPTSETUP bitlkOpen -r $file $MAP >/dev/null 2>&1
137 [ $ret -eq 1 ] && ( echo "$file" | grep -q -e "aes-cbc" ) && echo " [N/A]" && continue
138 [ $ret -eq 1 ] && ( echo "$file" | grep -q -e "aes-cbc-elephant" ) && echo " [N/A]" && continue
139 [ $ret -eq 1 ] && ( echo "$file" | grep -q -e "clearkey" ) && echo " [N/A]" && continue
140 [ $ret -eq 1 ] && ( echo "$file" | grep -q -e "eow" ) && echo " [N/A]" && continue
141 [ $ret -eq 1 ] && ( echo "$file" | grep -q -e "-4k.img" ) && echo " [N/A]" && continue
142 [ $ret -eq 0 ] || fail " failed to open $file ($ret)"
143 $CRYPTSETUP status $MAP >/dev/null || fail
144 $CRYPTSETUP status /dev/mapper/$MAP >/dev/null || fail
145 uuid=$(blkid -p -o value -s UUID /dev/mapper/$MAP)
146 sha256sum=$(sha256sum /dev/mapper/$MAP | cut -d" " -f1)
147 $CRYPTSETUP remove $MAP || fail
148 [ "$uuid" = "$UUID" ] || fail " UUID check failed."
149 [ "$sha256sum" = "$SHA256SUM" ] || fail " SHA256 sum check failed."
153 # test with volume key
154 rm -f $DUMP_VK_FILE >/dev/null 2>&1
156 echo $PASSPHRASE | $CRYPTSETUP bitlkDump -r $file --dump-volume-key --volume-key-file $DUMP_VK_FILE >/dev/null 2>&1
158 [ $ret -eq 0 ] || fail " failed to dump volume key"
159 $CRYPTSETUP bitlkOpen -r $file $MAP --volume-key-file $DUMP_VK_FILE >/dev/null 2>&1
161 [ $ret -eq 1 ] && ( echo "$file" | grep -q -e "aes-cbc" ) && echo " [N/A]" && continue
162 [ $ret -eq 1 ] && ( echo "$file" | grep -q -e "aes-cbc-elephant" ) && echo " [N/A]" && continue
163 [ $ret -eq 1 ] && ( echo "$file" | grep -q -e "clearkey" ) && echo " [N/A]" && continue
164 [ $ret -eq 1 ] && ( echo "$file" | grep -q -e "eow" ) && echo " [N/A]" && continue
165 [ $ret -eq 1 ] && ( echo "$file" | grep -q -e "-4k.img" ) && echo " [N/A]" && continue
166 [ $ret -eq 0 ] || fail " failed to open $file using volume key ($ret)"
167 $CRYPTSETUP status $MAP >/dev/null || fail
168 $CRYPTSETUP status /dev/mapper/$MAP >/dev/null || fail
169 uuid=$(blkid -p -o value -s UUID /dev/mapper/$MAP)
170 sha256sum=$(sha256sum /dev/mapper/$MAP | cut -d" " -f1)
171 $CRYPTSETUP remove $MAP || fail
172 [ "$uuid" = "$UUID" ] || fail " UUID check failed."
173 [ "$sha256sum" = "$SHA256SUM" ] || fail " SHA256 sum check failed."
175 rm -f $DUMP_VK_FILE >/dev/null 2>&1
177 # startup key test -- we need to use BEK file from the archive
178 if echo "$file" | grep -q -e "startup-key"; then
180 bek_file=$(echo $SK_VMK_GUID.BEK | tr /a-z/ /A-Z/)
181 $CRYPTSETUP bitlkOpen -r $file --test-passphrase --key-file $TST_DIR/$bek_file
183 [ $ret -eq 1 ] && echo " [N/A]" && continue
184 $CRYPTSETUP bitlkOpen -r $file $MAP --key-file $TST_DIR/$bek_file >/dev/null 2>&1
186 [ $ret -eq 0 ] || fail " failed to open $file ($ret)"
187 $CRYPTSETUP status $MAP >/dev/null || fail
188 $CRYPTSETUP status /dev/mapper/$MAP >/dev/null || fail
189 uuid=$(blkid -p -o value -s UUID /dev/mapper/$MAP)
190 sha256sum=$(sha256sum /dev/mapper/$MAP | cut -d" " -f1)
191 $CRYPTSETUP remove $MAP || fail
192 [ "$uuid" = "$UUID" ] || fail " UUID check failed."
193 [ "$sha256sum" = "$SHA256SUM" ] || fail " SHA256 sum check failed."