CODEWITHSUNDEEP
bashpattern-matchingexpect
cBoLsmUiEc
cBoLsmUiEc

Reputation: 53

expect doesn't match pattern correctly

I tried to automate the easyrsa request generation via expect. I came up with that bash script:

#!/bin/bash

firstname=$1
lastname=$2
mail=$3
department=$4
password=$5
[...]

cd /VPN-CA/

/usr/bin/expect -c "
    spawn ./easyrsa gen-req $mail
    expect \"Enter PEM pass phrase:\"
    send \"$password\r\"
    expect \"Verifying - Enter PEM pass phrase:\"
    send \"$password\r\"
    expect \"Country Name (2 letter code) \[DE\]:\"
    send \"\r\"
    expect \"State or Province Name (full name) \[MyState\]:\"
    send \"\r\"
    expect \"Locality Name (eg, city) \[MyCity\]:\"
    send \"\r\"
    expect \"Organization Name (eg, company) \[MyOrganization\]:\"
    send \"\r\"
    expect \"Organizational Unit Name (eg, section) \[MyDepartment\]:\"
    send \"$department\r\"
    expect \"Common Name (eg: your user, host, or server name) \[$mail\]:\"
    send \"$firstname $lastname\r\"
    expect \"Email Address \[[email protected]\]:\"
    send \"$mail\r\"
    expect eof
"

# do somethin else
[...]

exit 0

The script works and the request will be generated correctly, but expect is very slow. With -d it shows me for every expected pattern after the second password query something like that:

expect: does "test\r\n\r\n-----\r\nYou are about to be asked to enter information that will be incorporated\r\ninto your certificate request.\r\nWhat you are about to enter is what is called a Distinguished Name or a DN.\r\nThere are quite a few fields but you can leave some blank\r\nFor some fields there will be a default value,\r\nIf you enter '.', the field will be left blank.\r\n-----\r\n" (spawn_id exp3) match glob pattern "Country Name (2 letter code) [DE]:"? no
Country Name (2 letter code) [DE]:
expect: does "test\r\n\r\n-----\r\nYou are about to be asked to enter information that will be incorporated\r\ninto your certificate request.\r\nWhat you are about to enter is what is called a Distinguished Name or a DN.\r\nThere are quite a few fields but you can leave some blank\r\nFor some fields there will be a default value,\r\nIf you enter '.', the field will be left blank.\r\n-----\r\nCountry Name (2 letter code) [DE]:" (spawn_id exp3) match glob pattern "Country Name (2 letter code) [DE]:"? no
expect: timed out
send: sending "\r" to { exp3 }

I don't understand why the pattern doesn't match. I mean whilst the reply is send nevertheless after the timeout it works, but it is slow as hell... (and it is crap)

Has anybody an explanation or a solution for this problem?

Upvotes: 1

Views: 1200

Answers (3)

glenn jackman
glenn jackman

Reputation: 247210

The problem in your code is that the shell removes the backslashes while constructing the string, so expect sees un-escaped brackets -- a command substitution. In your code, you'll have to double backslash the opening brackets.

The same problem happens here:

expect -c "
   ...
   send \"$password\r\"

Suppose $password is "1234", then expect will see:

    send "1234r" ;# <= no carriage return!

Using a double quoted string to hold the expect code leads very quickly to quoting hell. Use a here-doc instead:

/usr/bin/expect <<END_EXPECT
    spawn ./easyrsa gen-req $mail
    expect "Enter PEM pass phrase:"
    send "$password\r"
    expect "Verifying - Enter PEM pass phrase:"
    send "$password\r"
    expect "Country Name (2 letter code) \[DE\]:"
    send "\r"
    expect "State or Province Name (full name) \[MyState\]:"
    send "\r"
    expect "Locality Name (eg, city) \[MyCity\]:"
    send "\r"
    expect "Organization Name (eg, company) \[MyOrganization\]:"
    send "\r"
    expect "Organizational Unit Name (eg, section) \[MyDepartment\]:"
    send "$department\r"
    expect "Common Name (eg: your user, host, or server name) \[$mail\]:"
    send "$firstname $lastname\r"
    expect "Email Address \[[email protected]\]:"
    send "$mail\r"
    expect eof
END_EXPECT

If you use braces (expect's single quoting mechanism) you don't have to escape the brackets:

    expect {Email Address [[email protected]]:}

Upvotes: 1

jeb
jeb

Reputation: 82420

It seems to be a problem of the escaping of \[, the closing square bracket doesn't need to be escaped.

This fails to detect the line. 

expect \"Country Name (2 letter code) \[DE\]:\"

But you can replace it with a wildcard ?

expect \"Country Name (2 letter code) ?DE]:\"

Or you could escape the opening square bracket with only 6 backslashes:

expect \"Country Name (2 letter code) \\\\\\[DE]:\"

Upvotes: 0

Devesh mehta
Devesh mehta

Reputation: 1533

Just to troubleshoot further, could you just check does the system is slow in general or only while running the expect command.

Sometimes because of delay in DNS name resolution also the system response slowly. Check and remove any unnecessary entries in the /etc/resolve.conf and then try.

Upvotes: 0

Related Questions