Provided by: xrootd-client_5.4.1-1_amd64 bug

NAME

       xrdgsitest - test crypto functionality relevant for the GSI implementation

SYNOPSIS

       xrdgsitest [-h, --help] [-v, --verbose]

DESCRIPTION

       The xrdgsitest utility runs a few tests of the crypto functionality implemented in
       XrdCrypto relevant for the XrdSecgsi module, i.e. handling of certificates, proxies,
       chains, verification and similar actions.

OPTIONS

       -h, --help display help

       -v, --verbose
              Print very detailed information about the tests.

FILES

       The program needs access to a user certificate file and its private key, and the related
       CA file(s); the CRL is downloaded using the information found in the CA certificate.  The
       location of the files are the standard ones and they can modified by the standard
       environment variables:

       X509_USER_CERT  [$HOME/.globus/usercert.pem]       user certificate

       X509_USER_KEY   [$HOME/.globus/userkey.pem]        user private key

       X509_USER_PROXY [/tmp/x509up_u<uid>]               user proxy

       X509_CERT_DIR   [/etc/grid-security/certificates/] CA certificates and CRL directories

OUTPUT

       The output is a list of PASSED/FAILED test similar to

       $ xrdgsitest
              ||
              ---------------------------------------------------------------------------------
              || Crypto functionality tests for GSI
              ----------------------------------------------
              ||
              ---------------------------------------------------------------------------------
              || Loading EEC .............................................................
              PASSED
              || Loading User Proxy ......................................................
              PASSED
              ||
              ---------------------------------------------------------------------------------
              || Recreate the proxy certificate
              --------------------------------------------------
              Enter PEM pass phrase:
              || Recreating User Proxy ...................................................
              PASSED
              ||
              ---------------------------------------------------------------------------------
              || Load CA certificates
              ------------------------------------------------------------
              || Loading CA certificate ..................................................
              PASSED
              || Loading CA certificate ..................................................
              PASSED
              ||
              ---------------------------------------------------------------------------------
              || Testing ParseFile
              ---------------------------------------------------------------
              || Chain reorder:  .........................................................
              PASSED
              || Chain verify:  ..........................................................
              PASSED
              ||
              ---------------------------------------------------------------------------------
              || Testing ExportChain
              -------------------------------------------------------------
              || Attach to X509ExportChain ...............................................
              PASSED
              ||
              ---------------------------------------------------------------------------------
              || Testing Chain Import
              ------------------------------------------------------------
              || Chain reorder:  .........................................................
              PASSED
              || Chain verify:  ..........................................................
              PASSED
              ||
              ---------------------------------------------------------------------------------
              || Testing GSI chain import and verification
              ---------------------------------------
              || GSI chain verify:  ......................................................
              PASSED
              ||
              ---------------------------------------------------------------------------------
              || Testing GSI chain copy
              ----------------------------------------------------------
              || GSI chain verify:  ......................................................
              PASSED
              ||
              ---------------------------------------------------------------------------------
              || Testing Cert verification
              -------------------------------------------------------
              || verify cert: EE signed by CA ............................................
              PASSED
              || verify cert: PX signed by EE ............................................
              PASSED
              || verify cert: PX not signed by CA ........................................
              PASSED
              ||
              ---------------------------------------------------------------------------------
              || Testing request creation
              --------------------------------------------------------
              || Creating request ........................................................
              PASSED
              ||
              ---------------------------------------------------------------------------------
              || Testing request signature
              -------------------------------------------------------
              || Check proxyCertInfo extension ...........................................
              PASSED
              ||
              ---------------------------------------------------------------------------------
              || Testing export of signed proxy
              --------------------------------------------------
              || Saving signed proxy chain to file .......................................
              PASSED
              ||
              ---------------------------------------------------------------------------------
              || Testing CRL identification
              ------------------------------------------------------
              || Check CRL distribution points extension OK ..............................
              PASSED
              ||
              ---------------------------------------------------------------------------------
              || Testing CRL loading
              -------------------------------------------------------------
              --2016-12-12 19:31:36--
              http://cafiles.cern.ch/cafiles/crl/CERN%20Root%20Certification%20Authority%202.crl
              Resolving cafiles.cern.ch (cafiles.cern.ch)... 137.138.4.52,
              2001:1458:201:96::100:26
              Connecting to cafiles.cern.ch (cafiles.cern.ch)|137.138.4.52|:80... connected.
              HTTP request sent, awaiting response... 200 OK
              Length: 1097 (1.1K) [application/pkix-crl]
              Saving to: ‘/tmp/5168735f.0.crltmp’

              /tmp/5168735f.0.crltmp
              100%[========================================================================>]
              1.07K  --.-KB/s    in 0s

              2016-12-12 19:31:36 (383 MB/s) - ‘/tmp/5168735f.0.crltmp’ saved [1097/1097]

              || Loading CA1 crl .........................................................
              PASSED
              || CRL signature OK ........................................................
              PASSED
              ||
              ---------------------------------------------------------------------------------

       The result of each test can be interleaved with details when the verbose option is chosen.

LICENSE

       License terms can be displayed by typing "xrootd -H".

SUPPORT LEVEL

       The xrdgsitest command is supported by the xrootd collaboration.  Contact information can
       be found at
                                     http://xrootd.org/contact.html

                                              v5.4.1                                xrdgsitest(1)