1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
|
/*
* Copyright 2009- ECMWF.
*
* This software is licensed under the terms of the Apache Licence version 2.0
* which can be obtained at http://www.apache.org/licenses/LICENSE-2.0.
* In applying this licence, ECMWF does not waive the privileges and immunities
* granted to it by virtue of its status as an intergovernmental organisation
* nor does it submit to any jurisdiction.
*/
#include <boost/test/unit_test.hpp>
#include "ecflow/base/cts/user/CtsCmd.hpp"
#include "ecflow/client/ClientInvoker.hpp"
#include "ecflow/core/CommandLine.hpp"
#include "ecflow/core/Filesystem.hpp"
#include "ecflow/core/Host.hpp"
#include "ecflow/server/ServerEnvironment.hpp"
#include "ecflow/test/scaffold/Provisioning.hpp"
class MockServerInvoker {
public:
explicit MockServerInvoker(const std::string& commandline) : env_(CommandLine(commandline)) {}
const ServerEnvironment& environment() const { return env_; };
private:
ServerEnvironment env_;
};
BOOST_AUTO_TEST_SUITE(U_Server)
/*
* The following exports an environment variable used for tests, which changes the location of the SSL certificates.
* Instead of the default location (HOME/.ecflowrc/ssl), we use the current test directory.
*/
WithTestEnvironmentVariable ecf_ssl_dir("ECF_SSL_DIR", "./");
std::string somehost = ecf::Host().name();
std::string someport = "31415";
std::string someuser = "someuser";
std::string somepass = "somepass";
BOOST_AUTO_TEST_SUITE(T_ServerConfiguration)
BOOST_AUTO_TEST_CASE(can_setup_environment__env_request_shared__options_none__certificates_shared_and_specific) {
WithTestFile shared_crt(NamedTestFile{"server.crt"});
WithTestFile specific_crt(NamedTestFile{somehost + '.' + someport + ".crt"});
WithTestEnvironmentVariable ecf_port("ECF_PORT", someport);
WithTestEnvironmentVariable ecf_ssl("ECF_SSL", "1");
MockServerInvoker server("ecflow_server -d");
const ServerEnvironment& env = server.environment();
BOOST_CHECK_EQUAL(std::to_string(env.port()), someport);
BOOST_CHECK(env.ssl());
BOOST_CHECK_EQUAL(env.openssl().ssl(), "1");
}
BOOST_AUTO_TEST_CASE(can_setup_environment__env_request_specific__options_none__certificates_shared_and_specific) {
WithTestFile shared_crt(NamedTestFile{"server.crt"});
WithTestFile specific_crt(NamedTestFile{somehost + '.' + someport + ".crt"});
WithTestEnvironmentVariable ecf_port("ECF_PORT", someport);
WithTestEnvironmentVariable ecf_ssl("ECF_SSL", somehost + '.' + someport);
MockServerInvoker server("ecflow_server -d");
const ServerEnvironment& env = server.environment();
BOOST_CHECK_EQUAL(std::to_string(env.port()), someport);
BOOST_CHECK(env.ssl());
BOOST_CHECK_EQUAL(env.openssl().ssl(), somehost + '.' + someport);
// Note:
// The actual value of ECF_SSL is not used find the specific certificate.
// Instead, the host name is resolved by the OS, and the selected port is used.
}
BOOST_AUTO_TEST_CASE(can_setup_environment__env_request_shared__options_none__certificates_shared_only) {
WithTestFile shared_crt(NamedTestFile{"server.crt"});
WithTestEnvironmentVariable ecf_port("ECF_PORT", someport);
WithTestEnvironmentVariable ecf_ssl("ECF_SSL", "1");
MockServerInvoker server("ecflow_server -d");
const ServerEnvironment& env = server.environment();
BOOST_CHECK_EQUAL(std::to_string(env.port()), someport);
BOOST_CHECK(env.ssl());
BOOST_CHECK_EQUAL(env.openssl().ssl(), "1");
}
BOOST_AUTO_TEST_CASE(can_setup_environment__env_request_specific__options_none__certificates_shared_only) {
WithTestFile shared_crt(NamedTestFile{"server.crt"});
WithTestEnvironmentVariable ecf_port("ECF_PORT", someport);
WithTestEnvironmentVariable ecf_ssl("ECF_SSL", somehost + '.' + someport);
BOOST_CHECK_THROW(MockServerInvoker server("ecflow_server -d"), std::runtime_error);
}
BOOST_AUTO_TEST_CASE(can_setup_environment__env_request_shared__options_none__certificates_specific_only) {
WithTestFile specific_crt(NamedTestFile{somehost + '.' + someport + ".crt"});
WithTestEnvironmentVariable ecf_port("ECF_PORT", someport);
WithTestEnvironmentVariable ecf_ssl("ECF_SSL", "1");
MockServerInvoker server("ecflow_server -d");
const ServerEnvironment& env = server.environment();
BOOST_CHECK_EQUAL(std::to_string(env.port()), someport);
BOOST_CHECK(env.ssl());
BOOST_CHECK_EQUAL(env.openssl().ssl(), somehost + '.' + someport);
// Note:
// Even though ECF_SSL specifies the use of shared certificate, the specific certificate is selected
// since it is the only one kind available.
}
BOOST_AUTO_TEST_CASE(can_setup_environment__env_request_specific__options_none__certificates_specific_only) {
WithTestFile specific_crt(NamedTestFile{somehost + '.' + someport + ".crt"});
WithTestEnvironmentVariable ecf_port("ECF_PORT", someport);
WithTestEnvironmentVariable ecf_ssl("ECF_SSL", somehost + '.' + someport);
MockServerInvoker server("ecflow_server -d");
const ServerEnvironment& env = server.environment();
BOOST_CHECK_EQUAL(std::to_string(env.port()), someport);
BOOST_CHECK(env.ssl());
BOOST_CHECK_EQUAL(env.openssl().ssl(), somehost + '.' + someport);
}
BOOST_AUTO_TEST_CASE(can_setup_environment__env_request_none__options_ssl__certificates_shared_and_specific) {
WithTestFile shared_crt(NamedTestFile{"server.crt"});
WithTestFile specific_crt(NamedTestFile{somehost + '.' + someport + ".crt"});
WithTestEnvironmentVariable ecf_port("ECF_PORT", someport);
MockServerInvoker server("ecflow_server -d --ssl");
const ServerEnvironment& env = server.environment();
BOOST_CHECK_EQUAL(std::to_string(env.port()), someport);
BOOST_CHECK(env.ssl());
BOOST_CHECK_EQUAL(env.openssl().ssl(), "1");
// Note:
// When only using the command line option, if both shared and specific certificates are available,
// there is no way to select the specific certificate.
}
BOOST_AUTO_TEST_CASE(can_setup_environment__env_request_none__options_ssl__certificates_shared_only) {
WithTestFile shared_crt(NamedTestFile{"server.crt"});
WithTestEnvironmentVariable ecf_port("ECF_PORT", someport);
MockServerInvoker server("ecflow_server -d --ssl");
const ServerEnvironment& env = server.environment();
BOOST_CHECK_EQUAL(std::to_string(env.port()), someport);
BOOST_CHECK(env.ssl());
BOOST_CHECK_EQUAL(env.openssl().ssl(), "1");
}
BOOST_AUTO_TEST_CASE(can_setup_environment__env_request_none__options_ssl__certificates_specific_only) {
WithTestFile specific_crt(NamedTestFile{somehost + '.' + someport + ".crt"});
WithTestEnvironmentVariable ecf_port("ECF_PORT", someport);
MockServerInvoker server("ecflow_server -d --ssl");
const ServerEnvironment& env = server.environment();
BOOST_CHECK_EQUAL(std::to_string(env.port()), someport);
BOOST_CHECK(env.ssl());
BOOST_CHECK_EQUAL(env.openssl().ssl(), somehost + '.' + someport);
}
BOOST_AUTO_TEST_SUITE_END()
BOOST_AUTO_TEST_SUITE_END()
|
