#!/bin/sh

. STlsVars

#########################################
# CERTIFICATE SETUP
#

# produce the certificates to use

# snmptrapd
HOSTNAME=`hostname`
CAPTURE $NSCERT gencert -t snmptrapdd   --cn $HOSTNAME $NSCERTARGS
SERVERFP=`$NSCERT showcerts --fingerprint --brief snmptrapdd  $NSCERTARGS`
CHECKVALUEISNT "$SERVERFP" "" "generated fingerprint for snmptrapdd certificate"

# user
CAPTURE $NSCERT gencert -t snmpapp --cn 'testuser'  $NSCERTARGS
TESTUSERFP=`$NSCERT showcerts --fingerprint --brief snmpapp $NSCERTARGS`
CHECKVALUEISNT "$TESTUSERFP" "" "generated fingerprint for testuser certificate"

# CA certificate

CAPTURE $NSCERT genca --cn ca-net-snmp.org  $NSCERTARGS
CAFP=`$NSCERT showcas --fingerprint --brief ca-net-snmp.org $NSCERTARGS`
CHECKVALUEISNT "$CAFP" "" "generated fingerprint for ca-net-snmp.org certificate"

# user 9: CA signed user cert
CAPTURE $NSCERT gencert -t causer --with-ca ca-net-snmp.org --san email:user9@test.net-snmp.org --email user9@test.net-snmp.org  $NSCERTARGS
CAUSERFP=`$NSCERT showcerts --fingerprint --brief causer $NSCERTARGS`
CHECKVALUEISNT "$CAUSERFP" "" "generated fingerprint for causer certificate"

#########################################
# AGENT CONFIGURATION
#

CONFIGTRAPD '[snmp]' debugTokens tsm
# ,tls,ssl,cert,tsm
CONFIGTRAPD '[snmp]' doDebugging 1
CONFIGTRAPD '[snmp]' serverCert $SERVERFP

CONFIGTRAPD '[snmp]' trustCert $CAFP

# common name mappings
CONFIGTRAPD certSecName 9  $TESTUSERFP     --cn

CONFIGTRAPD certSecName 100 $CAFP        --rfc822

CONFIGAPP   serverCert  	  $SERVERFP
CONFIGAPP   defSecurityModel      tsm

CONFIGTRAPD  authuser log -s tsm testuser authpriv

# this file contains tests common to both tls and dtls usages

# start the agent up
FLAGS="-Dtls -On $SNMP_FLAGS $SNMP_TRANSPORT_SPEC:$SNMP_TEST_DEST$SNMP_SNMPTRAPD_PORT"

STARTTRAPD

########################################
# POST-TRAPD-STARTUP Certificates
# user
CAPTURE $NSCERT gencert -t snmptrap --cn 'testuser'  $NSCERTARGS
TESTUSERFP=`$NSCERT showcerts --fingerprint --brief snmptrap $NSCERTARGS`
CHECKVALUEISNT "$TESTUSERFP" "" "generated fingerprint for testuser certificate"

######################################################################
# ACTUAL TESTS
#
# Run the actual list of tests
#

# using user 1 - a common name mapped certificate
# (using the default "snmpapp" certificate because we don't specify another)
DOTRAPTEST user1TrapTest "$FLAGS"

# failing using the CA signed cert without
DOFAILTRAPTEST user2UnknownUser "-T our_identity=snmptrap $FLAGS"

# using user 1 - sending an INFORM
# (using the default "snmpapp" certificate because we don't specify another)
DOTRAPTEST user1InformTest "-Ci $FLAGS"

STOPTRAPD

FINISHED