Made x11vnc tests and fixed rsa certificate display

.github/scripts/x11vnc/test_x11vnc.sh

@@ -0,0 +1,173 @@
+#!/bin/bash
+
+SCRIPTS_DIR="$GITHUB_WORKSPACE/.github/scripts/x11vnc"
+
+killall x11vnc > /dev/null 2> /dev/null
+killall Xvfb > /dev/null 2> /dev/null
+
+X11VNC_TEST_FAIL=0
+
+
+# CA / cert generation
+
+
+echo -e "\n\nTesting -sslGenCA\n" > x11vnc_test.log
+
+$SCRIPTS_DIR/x11vnc_sslgenca.exp >> x11vnc_test.log 2>> x11vnc_test.log
+
+if [ $? -eq 0 ] && [ -f "ca-dir/CA/cacert.pem" ] && [ -f "ca-dir/CA/private/cakey.pem" ]
+then
+    echo "[ PASSED ] -sslGenCA"
+else
+    echo "[ FAILED ] -sslGenCA"
+    X11VNC_TEST_FAIL=1
+fi
+
+
+echo -e "\n\nTesting -sslGenCert client\n" >> x11vnc_test.log
+
+$SCRIPTS_DIR/x11vnc_sslgencert_client.exp >> x11vnc_test.log 2>> x11vnc_test.log
+
+if [ $? -eq 0 ] && [ -f "ca-dir/clients/wolf.pem" ] && [ -f "ca-dir/clients/wolf.crt" ]
+then
+    echo "[ PASSED ] -sslGenCert client"
+else
+    echo "[ FAILED ] -sslGenCert client"
+    X11VNC_TEST_FAIL=1
+fi
+
+
+echo -e "\n\nTesting -sslGenCert server\n" >> x11vnc_test.log
+
+$SCRIPTS_DIR/x11vnc_sslgencert_server.exp >> x11vnc_test.log 2>> x11vnc_test.log
+
+if [ $? -eq 0 ] && [ -f "ca-dir/server-wolf.pem" ] && [ -f "ca-dir/server-wolf.crt" ]
+then
+    echo "[ PASSED ] -sslGenCert server"
+else
+    echo "[ FAILED ] -sslGenCert server"
+    X11VNC_TEST_FAIL=1
+fi
+
+
+echo -e "\n\nTesting -sslCertInfo\n" >> x11vnc_test.log
+
+OPENSSL_CONF='' OPENSSL_MODULES='' timeout 1 x11vnc -sslCertInfo ca-dir/server-wolf.pem > cert_info_ossl.txt
+timeout 1 x11vnc -sslCertInfo ca-dir/server-wolf.pem > cert_info.txt
+
+if [ $? -eq 0 ] && diff -y cert_info.txt cert_info_ossl.txt >> x11vnc_test.log 2>> x11vnc_test.log \
+    && cat cert_info.txt >> x11vnc_test.log
+then
+    echo "[ PASSED ] -sslCertInfo"
+else
+    echo "[ FAILED ] -sslCertInfo"
+    X11VNC_TEST_FAIL=1
+fi
+
+
+echo -e "\n\nTesting -sslEncKey\n" >> x11vnc_test.log
+
+$SCRIPTS_DIR/x11vnc_sslenckey.exp >> x11vnc_test.log 2>> x11vnc_test.log
+
+if [ $? -eq 0 ] && grep -q "BEGIN ENCRYPTED PRIVATE KEY" ca-dir/server-wolf.pem
+then
+    echo "[ PASSED ] -sslEncKey"
+else
+    echo "[ FAILED ] -sslEncKey"
+    X11VNC_TEST_FAIL=1
+fi
+
+
+# SSL
+
+
+# Setup Xvfb, which is a purely virtual display, i.e., humans cannot see it
+# but it works the same as any other X server
+Xvfb :0 -screen 0 100x100x8 2>> x11vnc_test.log &
+sleep 2
+
+
+# Testing with SSL will use the TLSNone security type
+echo -e "\n\nTesting -ssl handshake, authentication, initialization...\n" >> x11vnc_test.log
+
+PORT=`x11vnc -ssl TMP -display :0 -localhost -bg -o server.log`
+PORT=`echo "$PORT" | grep -m 1 "PORT=" | sed -e 's/PORT=//'`
+
+timeout 10 vncviewer -GnuTLSPriority=LEGACY -DesktopSize=0 -display :0 -log *:stderr:100 localhost::$PORT 2> client.log
+
+if grep -Eq "SSL: handshake with helper process[[0-9]+] succeeded" server.log \
+    && grep -q "CConnection: Authentication success" client.log \
+    && grep -q "CConnection: initialisation done" client.log
+then
+    echo "[ PASSED ] -ssl handshake, authentication, initialization"
+else
+    echo "[ FAILED ] -ssl handshake, authentication, initialization"
+    X11VNC_TEST_FAIL=1
+fi
+killall x11vnc > /dev/null 2> /dev/null
+cat server.log client.log >> x11vnc_test.log
+
+
+# Testing with a password changes the security type from TLSNone to TLSVnc
+echo -e "\n\nTesting -ssl with a password...\n" >> x11vnc_test.log
+
+x11vnc -storepasswd wolfprov passwd 2>> x11vnc_test.log
+
+PORT=`x11vnc -ssl TMP -display :0 -localhost -bg -o server.log -rfbauth passwd`
+PORT=`echo "$PORT" | grep -m 1 "PORT=" | sed -e 's/PORT=//'`
+
+timeout 10 vncviewer -GnuTLSPriority=LEGACY -DesktopSize=0 -display :0 -passwd passwd -log *:stderr:100 localhost::$PORT 2> client.log
+
+if grep -Eq "SSL: handshake with helper process[[0-9]+] succeeded" server.log \
+    && grep -q "CConnection: Authentication success" client.log \
+    && grep -q "CConnection: initialisation done" client.log
+then
+    echo "[ PASSED ] -ssl with a password"
+else
+    echo "[ FAILED ] -ssl with a password"
+    X11VNC_TEST_FAIL=1
+fi
+killall x11vnc > /dev/null 2> /dev/null
+cat server.log client.log >> x11vnc_test.log
+
+
+# HTTP HTTPS
+
+
+echo "<html><body>Use WolfSSL!</body></html>" > index.html
+
+
+PORT=`x11vnc -ssl TMP -display :0 -localhost -httpdir . -https 5678 -bg -o server.log`
+PORT=`echo "$PORT" | grep -m 1 -Eo "http://localhost:[0-9]+" server.log | sed -e 's/http:\/\/localhost://'`
+
+echo -e "\n\nTesting -https with http...\n" >> x11vnc_test.log
+
+if OPENSSL_CONF='' OPENSSL_MODULES='' curl -ks "http://localhost:$PORT/index.html" >> x11vnc_test.log
+then
+    echo "[ PASSED ] -https with an http request"
+else
+    echo "[ FAILED ] -https with an http request"
+    X11VNC_TEST_FAIL=1
+fi
+
+
+echo -e "\n\nTesting -https with https...\n" >> x11vnc_test.log
+
+if OPENSSL_CONF='' OPENSSL_MODULES='' curl -ks "https://localhost:5678/index.html" >> x11vnc_test.log
+then
+    echo "[ PASSED ] -https with an https request"
+else
+    echo "[ FAILED ] -https with an https request"
+    X11VNC_TEST_FAIL=1
+fi
+
+killall x11vnc > /dev/null 2> /dev/null
+killall Xvfb > /dev/null 2> /dev/null
+cat server.log >> x11vnc_test.log
+
+$GITHUB_WORKSPACE/.github/scripts/check-workflow-result.sh $X11VNC_TEST_FAIL "$WOLFPROV_FORCE_FAIL_STR" x11vnc
+X11VNC_TEST_FAIL=$?
+
+if [[ $X11VNC_TEST_FAIL -eq 1 ]]; then cat x11vnc_test.log; fi
+
+exit $X11VNC_TEST_FAIL

.github/scripts/x11vnc/x11vnc_sslenckey.exp

@@ -0,0 +1,23 @@
+#!/bin/expect
+
+set timeout 1
+
+spawn x11vnc -sslEncKey ca-dir/server-wolf.pem
+
+sleep 1
+
+# verify encryption is desired
+expect {
+    "Protect key with a passphrase?"    { send "y\r" }
+    eof                                 { exit 1 }
+}
+
+# supply password
+expect {
+    "Enter pass phrase:"    { send "wolfprov\r" }
+    eof                     { exit 1 }
+}
+expect "Verifying"  { send "wolfprov\r" }
+
+expect eof
+exit 0

.github/scripts/x11vnc/x11vnc_sslgenca.exp

@@ -0,0 +1,32 @@
+#!/bin/expect
+
+set timeout 1
+
+spawn x11vnc -sslGenCA ca-dir
+
+sleep 1
+
+# provide password and verify
+expect {
+    "PEM"   { send "wolfprov\r" }
+    eof     { exit 1 }
+}
+expect "PEM"            { send "wolfprov\r" }
+
+# provide CA information
+expect "Country Name"   { send "US\r" }
+expect "State"          { send "montana\r" }
+expect "Locality"       { send "bozeman\r" }
+expect "Organization"   { send "wolfssl\r" }
+expect "Organizational" { send "wolfssl\r" }
+expect "Common"         { send "wolfserver\r" }
+expect "Email"          { send "wolf@server.com\r" }
+
+# if CA creation has succeeded then the enter key will be expected
+expect {
+    "Enter" { send "\r" }
+    eof     { exit 1 }
+}
+
+expect eof
+exit 0

.github/scripts/x11vnc/x11vnc_sslgencert_client.exp

@@ -0,0 +1,39 @@
+#!/bin/expect
+
+set timeout 1
+
+# generate a cert for the client
+spawn x11vnc -ssldir ca-dir -sslGenCert client wolf
+
+sleep 1
+
+# provide CA information
+expect {
+    "Country Name"  { send "US\r" }
+    eof             { exit 1 }
+}
+expect "State"          { send "montana\r" }
+expect "Locality"       { send "bozeman\r" }
+expect "Organization"   { send "wolfssl\r" }
+expect "Organizational" { send "wolfssl\r" }
+expect "Common"         { send "wolfclient\r" }
+expect "Email"          { send "wolf@client.com\r" }
+
+# challenge password and company name
+expect "challenge"      { send "wolfprov\r" }
+expect "company"        { send "wolfssl\r" }
+
+# create the cert
+expect "passphrase"     { send "n\r" }
+expect "pass phrase"    { send "wolfprov\r" }
+expect "Sign"           { send "y\r" }
+expect "commit"         { send "y\r" }
+
+# if cert creation has succeeded then the enter key will be expected
+expect {
+    "Enter" { send "\r" }
+    eof     { exit 1 }
+}
+
+expect eof
+exit 0

.github/scripts/x11vnc/x11vnc_sslgencert_server.exp

@@ -0,0 +1,39 @@
+#!/bin/expect
+
+set timeout 1
+
+# generate a cert for the server
+spawn x11vnc -ssldir ca-dir -sslGenCert server wolf
+
+sleep 1
+
+# provide CA information
+expect {
+    "Country Name"  { send "US\r" }
+    eof             { exit 1 }
+}
+expect "State"          { send "montana\r" }
+expect "Locality"       { send "bozeman\r" }
+expect "Organization"   { send "wolfssl\r" }
+expect "Organizational" { send "wolfssl\r" }
+expect "Common"         { send "wolfserver\r" }
+expect "Email"          { send "wolf@server.com\r" }
+
+# challenge password and company name
+expect "challenge"      { send "wolfprov\r" }
+expect "company"        { send "wolfssl\r" }
+
+# create the cert
+expect "passphrase"     { send "n\r" }
+expect "pass phrase"    { send "wolfprov\r" }
+expect "Sign"           { send "y\r" }
+expect "commit"         { send "y\r" }
+
+# if cert creation has succeeded then the enter key will be expected
+expect {
+    "Enter" { send "\r" }
+    eof     { exit 1 }
+}
+
+expect eof
+exit 0