#! /bin/sh
#
# NSS Engine: common test OpenSSL sign->NSS(store) verify
#
# This is free software; see Copyright file in the source
# distribution for precise wording.
#
# Copyright (C) 2023-2026 Roumen Petrov
#
# Note activated if OpenSSL (3.0) digest utility supports Store2 API

XDIGEST=
test -n "$DIGEST" && XDIGEST=-$DIGEST
file=dgst3-$ALGO$XDIGEST-vrfy

(
privkey=$keyfiledir/client-$ALGO-priv.pem
pubkey="$SCHEME:$nickname"

data=$OPENSSL_CONF
signature=cfg-$ALGO$XDIGEST-openssl.sign3

> $signature

echo === sign ===
OPENSSL_CONF=/dev/null \
$OPENSSL dgst $XDIGEST -sign "$privkey" -passin $keypass $data > $signature

echo === verify-store ===
$OPENSSL dgst $XDIGEST -verify "$pubkey" -signature $signature $data
) > $file.out 2> $file.err

# Scan output for compatibility with other digest tests.
grep 'Verified OK' $file.out > /dev/null
