1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
|
require 'puppet'
require 'pathname'
require 'puppet/type/x509_request'
RSpec.configure { |c| c.mock_with :mocha }
describe 'The openssl provider for the x509_request type' do
let (:path) { '/tmp/foo.csr' }
let (:resource) { Puppet::Type::X509_request.new({:path => path}) }
subject { Puppet::Type.type(:x509_request).provider(:openssl).new(resource) }
context 'when not forcing key' do
it 'exists? should return true if csr exists' do
Pathname.any_instance.expects(:exist?).returns(true)
expect(subject.exists?).to eq(true)
end
it 'exists? should return false if csr exists' do
Pathname.any_instance.expects(:exist?).returns(false)
expect(subject.exists?).to eq(false)
end
it 'should create a certificate with the proper options' do
subject.expects(:openssl).with(
'req', '-new',
'-key', '/tmp/foo.key',
'-config', '/tmp/foo.cnf',
'-out', '/tmp/foo.csr'
)
subject.create
end
end
context 'when using password' do
it 'should create a certificate with the proper options' do
resource[:password] = '2x6${'
subject.expects(:openssl).with(
'req', '-new',
'-key', '/tmp/foo.key',
'-config', '/tmp/foo.cnf',
'-out', '/tmp/foo.csr',
'-passin', 'pass:2x6${'
)
subject.create
end
end
context 'when forcing key' do
it 'exists? should return true if certificate exists and is synced' do
resource[:force] = true
File.stubs(:read)
Pathname.any_instance.expects(:exist?).returns(true)
c = OpenSSL::X509::Request.new # Fake certificate for mocking
OpenSSL::X509::Request.stubs(:new).returns(c)
OpenSSL::PKey::RSA.expects(:new)
OpenSSL::X509::Request.any_instance.expects(:verify).returns(true)
expect(subject.exists?).to eq(true)
end
it 'exists? should return false if certificate exists and is not synced' do
resource[:force] = true
File.stubs(:read)
Pathname.any_instance.expects(:exist?).returns(true)
c = OpenSSL::X509::Request.new # Fake certificate for mocking
OpenSSL::X509::Request.stubs(:new).returns(c)
OpenSSL::PKey::RSA.expects(:new)
OpenSSL::X509::Request.any_instance.expects(:verify).returns(false)
expect(subject.exists?).to eq(false)
end
it 'exists? should return false if certificate does not exist' do
resource[:force] = true
Pathname.any_instance.expects(:exist?).returns(false)
expect(subject.exists?).to eq(false)
end
end
it 'should delete files' do
Pathname.any_instance.expects(:delete)
subject.destroy
end
end
|
