(Better links, and add Geo trust file) |
m (Stefw moved page Test Day:2013-03-28 Shared System Certificates/Prerequisites to QA:Testcase Certificate Trust:Prerequisites: Rename this page so it lives with the test cases.) |
(No difference)
|
Revision as of 09:18, 21 March 2013
The various test cases for the require some preparation. Some of this is done for you by using the live CD.
Necessary Software
Install this software:
$ sudo yum install gnutls-utils nss-tools openssl firefox epiphany java-1.7.0-openjdk-devel wget
Make sure the following software is at least these versions:
- p11-kit: 0.17.4
- p11-kit-trust: 0.17.4
- ca-certficates: 2012.87-9
- nss: 3.14.3-10
$ sudo yum update p11-kit p11-kit-trust ca-certificates nss
Ensure you have sudo permission
Because we are configuring the default system behaviour, the user account that you will use for testing needs permission to use the sudo command. You can test using
sudo bash
If it works, good. If not, you must login to your system as the root user, edit file /etc/sudoers and add the following line. Replace the word myself with the name of your user account.
myself ALL=(ALL) ALL
Firefox Profiles
For tests that involve firefox, please use a fresh Firefox profile (firefox -P) prior to a each new test cycle. This is to make sure that changes made to CA trust settings from earlier tests will be cleaned, and that you will get the exact behaviour as described on this page. An alternative to creating a fresh profile, quit Firefox and run
$ rm -f ~/.mozilla/firefox/*/*.db $ ls ~/.mozilla/firefox/*/*.db ls: cannot access ~/.mozilla/firefox/*/*.db: No such file or directory
Test Fixture Files
Download a few files and tools that we'll use later:
$ mkdir -p ~/certificate-trust-test-cases $ cd ~/certificate-trust-test-cases $ wget https://fedoraproject.org/w/uploads/b/b1/Cert-trust-test-ca.pem \ https://fedoraproject.org/w/uploads/7/7c/GeoTrustGlobalCA.pem \ https://fedoraproject.org/w/uploads/2/29/Distrust-intermediate-by-serial.p11-kit \ https://fedoraproject.org/w/uploads/5/5f/TestCertTrust.java $ javac TestCertTrust.java