foremanctl/tests/certificate_bundle_test.py at c47817f86b2833358047317be3ef2f6d2ed70089 · theforeman/foremanctl · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
import pytest


HOSTNAME = 'proxy.example.com'
TARBALL = f'/root/{HOSTNAME}.tar.gz'

EXPECTED_CA_FILES = [
    'ssl-build/katello-server-ca.crt',
    'ssl-build/katello-default-ca.crt',
]

EXPECTED_SERVER_FILES = [
    f'ssl-build/{HOSTNAME}/{HOSTNAME}-apache.crt',
    f'ssl-build/{HOSTNAME}/{HOSTNAME}-apache.key',
    f'ssl-build/{HOSTNAME}/{HOSTNAME}-foreman-proxy.crt',
    f'ssl-build/{HOSTNAME}/{HOSTNAME}-foreman-proxy.key',
]

EXPECTED_CLIENT_FILES = [
    f'ssl-build/{HOSTNAME}/{HOSTNAME}-foreman-proxy-client.crt',
    f'ssl-build/{HOSTNAME}/{HOSTNAME}-foreman-proxy-client.key',
    f'ssl-build/{HOSTNAME}/{HOSTNAME}-puppet-client.crt',
    f'ssl-build/{HOSTNAME}/{HOSTNAME}-puppet-client.key',
]


@pytest.fixture(scope="module")
def tarball_members(server):
    result = server.run(f'tar tzf {TARBALL}')
    assert result.succeeded, f'Tarball {TARBALL} not found. Run foremanctl certificate-bundle {HOSTNAME} before tests.'
    return result.stdout.strip().splitlines()


def test_tarball_created(server):
    assert server.file(TARBALL).exists


@pytest.mark.parametrize("expected_file", EXPECTED_CA_FILES)
def test_tarball_contains_ca_certificate(tarball_members, expected_file):
    assert expected_file in tarball_members


@pytest.mark.parametrize("expected_file", EXPECTED_SERVER_FILES)
def test_tarball_contains_server_certificate(tarball_members, expected_file):
    assert expected_file in tarball_members


@pytest.mark.parametrize("expected_file", EXPECTED_CLIENT_FILES)
def test_tarball_contains_client_certificate(tarball_members, expected_file):
    assert expected_file in tarball_members


def test_server_certs_are_identical(server):
    apache = server.run(f'tar xzf {TARBALL} -O ssl-build/{HOSTNAME}/{HOSTNAME}-apache.crt')
    proxy = server.run(f'tar xzf {TARBALL} -O ssl-build/{HOSTNAME}/{HOSTNAME}-foreman-proxy.crt')
    assert apache.stdout == proxy.stdout


def test_client_certs_are_identical(server):
    proxy_client = server.run(f'tar xzf {TARBALL} -O ssl-build/{HOSTNAME}/{HOSTNAME}-foreman-proxy-client.crt')
    puppet_client = server.run(f'tar xzf {TARBALL} -O ssl-build/{HOSTNAME}/{HOSTNAME}-puppet-client.crt')
    assert proxy_client.stdout == puppet_client.stdout


def test_ca_certs_are_identical(server):
    server_ca = server.run(f'tar xzf {TARBALL} -O ssl-build/katello-server-ca.crt')
    default_ca = server.run(f'tar xzf {TARBALL} -O ssl-build/katello-default-ca.crt')
    assert server_ca.stdout == default_ca.stdout