michael@0: #!/usr/bin/python
michael@0: 
michael@0: import tempfile, os, sys
michael@0: 
michael@0: libpath = os.path.abspath('../psm_common_py')
michael@0: sys.path.append(libpath)
michael@0: import CertUtils
michael@0: 
michael@0: srcdir = os.getcwd()
michael@0: db = tempfile.mkdtemp()
michael@0: 
michael@0: def generate_ca_cert(db_dir, dest_dir, noise_file, name):
michael@0:     return CertUtils.generate_ca_cert(db_dir, dest_dir, noise_file, name,
michael@0:                                       3, True)
michael@0: 
michael@0: def generate_child_cert(db_dir, dest_dir, noise_file, name, ca_nick, is_ee,
michael@0:                         ocsp_url):
michael@0:     return CertUtils.generate_child_cert(db_dir, dest_dir, noise_file, name,
michael@0:                                          ca_nick, 3, True, is_ee, ocsp_url)
michael@0: 
michael@0: def generate_certs():
michael@0:     [noise_file, pwd_file] = CertUtils.init_nss_db(srcdir)
michael@0:     generate_ca_cert(srcdir, srcdir, noise_file, 'ca')
michael@0:     generate_child_cert(srcdir, srcdir, noise_file, 'int', 'ca', False, '')
michael@0:     nick_baseurl = { 'no-path-url': "http://www.example.com:8888",
michael@0:                      'ftp-url': "ftp://www.example.com:8888/",
michael@0:                      'no-scheme-url': "www.example.com:8888/",
michael@0:                      'empty-scheme-url': "://www.example.com:8888/",
michael@0:                      'no-host-url': "http://:8888/",
michael@0:                      'hTTp-url': "hTTp://www.example.com:8888/hTTp-url",
michael@0:                      'https-url': "https://www.example.com:8888/https-url",
michael@0:                      'bad-scheme': "/www.example.com",
michael@0:                      'empty-port': "http://www.example.com:/",
michael@0:                      'unknown-scheme': "ttp://www.example.com",
michael@0:                      'negative-port': "http://www.example.com:-1",
michael@0:                      'no-scheme-host-port': "/" }
michael@0:     for nick, url in nick_baseurl.iteritems():
michael@0:         generate_child_cert(srcdir, srcdir, noise_file, nick, 'int', True, url)
michael@0: 
michael@0: generate_certs()