1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
|
require 'spec_helper'
require 'utils/ssl'
require 'shared_examples/setup'
require 'tmpdir'
require 'fileutils'
require 'puppetserver/ca/action/setup'
require 'puppetserver/ca/logger'
require 'puppetserver/ca/utils/signing_digest'
require 'puppetserver/ca/host'
RSpec.describe Puppetserver::Ca::Action::Setup do
include Utils::SSL
let(:stdout) { StringIO.new }
let(:stderr) { StringIO.new }
let(:logger) { Puppetserver::Ca::Logger.new(:info, stdout, stderr) }
let(:usage) { /.*Usage:.* puppetserver ca setup.*Display this command-specific help output.*/m }
subject { Puppetserver::Ca::Action::Setup.new(logger) }
it 'prints the help output & returns 1 if invalid flags are given' do
_, exit_code = subject.parse(['--hello'])
expect(stderr.string).to match(/Error.*--hello/m)
expect(stderr.string).to match(usage)
expect(exit_code).to eq(1)
end
it 'does not print the help output if called correctly' do
Dir.mktmpdir do |tmpdir|
with_temp_dirs tmpdir do |conf|
exit_code = subject.run({ 'config' => conf,
'subject-alt-names' => '',
'ca-name' => '',
'root-ca-name' => '',
'certname' => '' })
puts stderr.string
expect(stderr.string).to be_empty
expect(stdout.string.strip).to eq("Generation succeeded. Find your files in #{tmpdir}/ca")
expect(exit_code).to eq(0)
end
end
end
include_examples 'properly sets up ca and ssl dir', Puppetserver::Ca::Action::Setup
describe 'command line name overrides' do
it 'uses the ca_name and root_ca_name as specified on the command line' do
Dir.mktmpdir do |tmpdir|
with_temp_dirs tmpdir do |conf|
exit_code = subject.run({ 'config' => conf,
'subject-alt-names' => '',
'ca-name' => 'Foo CA',
'root-ca-name' => 'Foo Root CA',
'certname' => '' })
expect(exit_code).to eq(0)
ca_cert_file = File.join(tmpdir, 'ca', 'ca_crt.pem')
expect(File.exist?(ca_cert_file)).to be true
ca_cert = OpenSSL::X509::Certificate.new(File.read(ca_cert_file))
expect(ca_cert.subject.to_s).to include('Foo CA')
expect(ca_cert.issuer.to_s).to include('Foo Root CA')
end
end
end
it 'uses the default ca_name if none specified' do
Dir.mktmpdir do |tmpdir|
with_temp_dirs tmpdir do |conf|
exit_code = subject.run({ 'config' => conf,
'subject-alt-names' => '',
'ca-name' => '',
'root-ca-name' => '',
'certname' => '' })
expect(exit_code).to eq(0)
ca_cert_file = File.join(tmpdir, 'ca', 'ca_crt.pem')
expect(File.exist?(ca_cert_file)).to be true
ca_cert = OpenSSL::X509::Certificate.new(File.read(ca_cert_file))
expect(ca_cert.subject.to_s).to include('Puppet CA')
expect(ca_cert.issuer.to_s).to match(/Puppet Root CA: ([0-9a-f]{14})/)
end
end
end
end
end
|
