Joe Subbiani | 97cd599 | 2021-07-22 16:08:29 +0100 | [diff] [blame] | 1 | #!/bin/sh |
| 2 | |
| 3 | # Ciphers that will use translate_ciphers.py |
| 4 | M_CIPHERS="" |
| 5 | O_CIPHERS="" |
| 6 | G_CIPHERS="" |
| 7 | |
| 8 | # Ciphers taken directly from compat.sh |
| 9 | Mt_CIPHERS="" |
| 10 | Ot_CIPHERS="" |
| 11 | Gt_CIPHERS="" |
| 12 | |
| 13 | # Initial list to be split into 3 |
| 14 | CIPHERS="TLS-ECDHE-ECDSA-WITH-NULL-SHA \ |
| 15 | TLS-ECDHE-ECDSA-WITH-3DES-EDE-CBC-SHA \ |
| 16 | TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA \ |
| 17 | TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA \ |
| 18 | " |
| 19 | |
| 20 | M_CIPHERS="$M_CIPHERS \ |
| 21 | $CIPHERS" |
| 22 | |
| 23 | G=`python3 translate_ciphers.py g "$CIPHERS"` |
| 24 | G_CIPHERS="$G_CIPHERS \ |
| 25 | $G" |
| 26 | |
| 27 | O=`python3 translate_ciphers.py o "$CIPHERS"` |
| 28 | O_CIPHERS="$O_CIPHERS \ |
| 29 | $O" |
| 30 | |
| 31 | Mt_CIPHERS="$Mt_CIPHERS \ |
| 32 | TLS-ECDHE-ECDSA-WITH-NULL-SHA \ |
| 33 | TLS-ECDHE-ECDSA-WITH-3DES-EDE-CBC-SHA \ |
| 34 | TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA \ |
| 35 | TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA \ |
| 36 | " |
| 37 | Gt_CIPHERS="$Gt_CIPHERS \ |
| 38 | +ECDHE-ECDSA:+NULL:+SHA1 \ |
| 39 | +ECDHE-ECDSA:+3DES-CBC:+SHA1 \ |
| 40 | +ECDHE-ECDSA:+AES-128-CBC:+SHA1 \ |
| 41 | +ECDHE-ECDSA:+AES-256-CBC:+SHA1 \ |
| 42 | " |
| 43 | Ot_CIPHERS="$Ot_CIPHERS \ |
| 44 | ECDHE-ECDSA-NULL-SHA \ |
| 45 | ECDHE-ECDSA-DES-CBC3-SHA \ |
| 46 | ECDHE-ECDSA-AES128-SHA \ |
| 47 | ECDHE-ECDSA-AES256-SHA \ |
| 48 | " |
| 49 | |
| 50 | |
| 51 | # Initial list to be split into 3 |
| 52 | CIPHERS="TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256 \ |
| 53 | TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384 \ |
| 54 | TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \ |
| 55 | TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384 \ |
| 56 | " |
| 57 | |
| 58 | M_CIPHERS="$M_CIPHERS \ |
| 59 | $CIPHERS" |
| 60 | |
| 61 | G=`python3 translate_ciphers.py g "$CIPHERS"` |
| 62 | G_CIPHERS="$G_CIPHERS \ |
| 63 | $G" |
| 64 | |
| 65 | O=`python3 translate_ciphers.py o "$CIPHERS"` |
| 66 | O_CIPHERS="$O_CIPHERS \ |
| 67 | $O" |
| 68 | |
| 69 | Mt_CIPHERS="$Mt_CIPHERS \ |
| 70 | TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256 \ |
| 71 | TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384 \ |
| 72 | TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \ |
| 73 | TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384 \ |
| 74 | " |
| 75 | Gt_CIPHERS="$Gt_CIPHERS \ |
| 76 | +ECDHE-ECDSA:+AES-128-CBC:+SHA256 \ |
| 77 | +ECDHE-ECDSA:+AES-256-CBC:+SHA384 \ |
| 78 | +ECDHE-ECDSA:+AES-128-GCM:+AEAD \ |
| 79 | +ECDHE-ECDSA:+AES-256-GCM:+AEAD \ |
| 80 | " |
| 81 | Ot_CIPHERS="$Ot_CIPHERS \ |
| 82 | ECDHE-ECDSA-AES128-SHA256 \ |
| 83 | ECDHE-ECDSA-AES256-SHA384 \ |
| 84 | ECDHE-ECDSA-AES128-GCM-SHA256 \ |
| 85 | ECDHE-ECDSA-AES256-GCM-SHA384 \ |
| 86 | " |
| 87 | |
| 88 | # Normalise spacing |
| 89 | M_CIPHERS=$( echo "$M_CIPHERS" | sed -e 's/[[:space:]][[:space:]]*/ /g' -e 's/^ //' -e 's/ $//') |
| 90 | G_CIPHERS=$( echo "$G_CIPHERS" | sed -e 's/[[:space:]][[:space:]]*/ /g' -e 's/^ //' -e 's/ $//') |
| 91 | O_CIPHERS=$( echo "$O_CIPHERS" | sed -e 's/[[:space:]][[:space:]]*/ /g' -e 's/^ //' -e 's/ $//') |
| 92 | |
| 93 | Mt_CIPHERS=$( echo "$Mt_CIPHERS" | sed -e 's/[[:space:]][[:space:]]*/ /g' -e 's/^ //' -e 's/ $//') |
| 94 | Gt_CIPHERS=$( echo "$Gt_CIPHERS" | sed -e 's/[[:space:]][[:space:]]*/ /g' -e 's/^ //' -e 's/ $//') |
| 95 | Ot_CIPHERS=$( echo "$Ot_CIPHERS" | sed -e 's/[[:space:]][[:space:]]*/ /g' -e 's/^ //' -e 's/ $//') |
| 96 | |
| 97 | # Compare the compat.sh names with the translated names |
| 98 | # Upon fail, print them to view the differences |
| 99 | if [ "$Mt_CIPHERS" != "$M_CIPHERS" ] |
| 100 | then |
| 101 | echo "MBED Translated: $M_CIPHERS" |
| 102 | echo "MBED Original: $Mt_CIPHERS" |
| 103 | fi |
| 104 | if [ "$Gt_CIPHERS" != "$G_CIPHERS" ] |
| 105 | then |
| 106 | echo "GNU Translated: $G_CIPHERS" |
| 107 | echo "GNU Original: $Gt_CIPHERS" |
| 108 | fi |
| 109 | if [ "$Ot_CIPHERS" != "$O_CIPHERS" ] |
| 110 | then |
| 111 | echo "OpenSSL Translated: $O_CIPHERS" |
| 112 | echo "OpenSSL Original: $Ot_CIPHERS" |
| 113 | fi |