added option for cvc and x509 directory

npa/src/Makefile.am

@@ -1,10 +1,12 @@
 do_subst = $(SED) \
+	   -e 's,[@]CVCDIR[@],$(CVCDIR),g' \
 	   -e 's,[@]PACKAGE[@],$(PACKAGE),g' \
+	   -e 's,[@]PACKAGE_BUGREPORT[@],$(PACKAGE_BUGREPORT),g' \
 	   -e 's,[@]PACKAGE_NAME[@],$(PACKAGE_NAME),g' \
 	   -e 's,[@]PACKAGE_TARNAME[@],$(PACKAGE_TARNAME),g' \
-	   -e 's,[@]PACKAGE_BUGREPORT[@],$(PACKAGE_BUGREPORT),g' \
 	   -e 's,[@]PACKAGE_URL[@],$(PACKAGE_URL),g' \
-	   -e 's,[@]PACKAGE_VERSION[@],$(PACKAGE_VERSION),g'
+	   -e 's,[@]PACKAGE_VERSION[@],$(PACKAGE_VERSION),g' \
+	   -e 's,[@]X509DIR[@],$(X509DIR),g'
 
 BUILT_SOURCES = cmdline.h cmdline.c
 

npa/src/npa-tool.c

@@ -348,6 +348,10 @@ main (int argc, char **argv)
         npa_default_flags |= NPA_FLAG_DISABLE_CHECK_TA;
     if (cmdline.disable_ca_checks_flag)
         npa_default_flags |= NPA_FLAG_DISABLE_CHECK_CA;
+    if (cmdline.cvc_dir_given)
+        cvc_default_dir = cmdline.cvc_dir_arg;
+    if (cmdline.x509_dir_given)
+        x509_default_dir = cmdline.cvc_dir_arg;
 
 
     if (cmdline.info_flag)

npa/src/npa-tool.ggo.in

@@ -74,10 +74,22 @@ option "auxiliary-data" A
     typestr="HEX_STRING"
     optional
 option "private-key"    P
-    "Terminal's private key."
+    "Terminal's private key"
     string
     typestr="FILENAME"
     optional
+option "cvc-dir"        -
+    "Where to look for the CVCA's certificate"
+    string
+    typestr="DIRECTORY"
+    default="@CVCDIR@"
+    optional
+option "x509-dir"        -
+    "Where to look for the CSCA's certificate"
+    string
+    typestr="DIRECTORY"
+    default="@X509DIR@"
+    optional
 option "disable-ta-checks"   -
     "Disable checking the validity period of CV certifcates"
     flag off

npa/test_vicc_with_npa-tool.sh

@@ -49,7 +49,7 @@ for KA in ecdh dh
 do
     $VICC --type nPA --ef-cardsecurity=$DATA/$KA/$SECURITY \
         --ef-cardaccess=$DATA/$KA/$ACCESS --ca-key=$DATA/$KA/$NPA_KEY \
-        --cvca=$DATA/$KA/$CVCA --disable-checks &
+        --cvca=$DATA/$KA/$CVCA --disable-ta-checks >/dev/null 2>&1 &
     VICC_PID=$!
     if test $? -ne 0
     then
@@ -64,7 +64,7 @@ do
         --older-than=19991231 --verify-validity \
         --read-dg1 --read-dg2 --read-dg3 --read-dg4 --read-dg5 --read-dg6 --read-dg7 --read-dg8 --read-dg9 --read-dg10 --read-dg11 --read-dg12 --read-dg13 --read-dg14 --read-dg15 --read-dg16 --read-dg17 --read-dg18 --read-dg19 --read-dg20 --read-dg21 \
         --write-dg17=0107 --write-dg18=0108 --write-dg19=0109 --write-dg20=0200 --write-dg21=0201 \
-        --disable-ta-check --disable-ca-check
+        --cvc-dir=$DATA/$KA --disable-ta-checks --disable-ca-checks
     NPA_RESULT=$?
 
     kill $VICC_PID 2>/dev/null