#! /bin/sh
#
# NSS Engine: common test OpenSSL sign->NSS verify
#
# This is free software; see Copyright file in the source
# distribution for precise wording.
#
# Copyright (C) 2012-2025 Roumen Petrov
#

file=dgst-$ALGO-$DIGEST-vrfy

(
privkey=$keyfiledir/client-$ALGO-priv.pem

data=$OPENSSL_CONF
signature=cfg-openssl-$ALGO-$DIGEST.sign

> $signature

echo === sign ===
OPENSSL_CONF=/dev/null \
$OPENSSL dgst -$DIGEST -sign $privkey -passin $keypass $data > $signature

echo === verify-engine ===
$OPENSSL dgst -$DIGEST -verify "$nickname" -keyform ENGINE -engine $engine_name -signature $signature $data
) > $file.out 2> $file.err

# OpenSSL 0.9.7x commands exit always with zero => test scan output
grep 'Verified OK' $file.out > /dev/null
