mirror of
https://github.com/smallstep/certificates.git
synced 2024-11-17 15:29:21 +00:00
423 lines
13 KiB
Go
423 lines
13 KiB
Go
package templates
|
|
|
|
import (
|
|
"crypto/ecdsa"
|
|
"crypto/elliptic"
|
|
"crypto/rand"
|
|
"encoding/base64"
|
|
"fmt"
|
|
"io/ioutil"
|
|
"os"
|
|
"path/filepath"
|
|
"reflect"
|
|
"testing"
|
|
|
|
"github.com/smallstep/assert"
|
|
"golang.org/x/crypto/ssh"
|
|
)
|
|
|
|
func TestTemplates_Validate(t *testing.T) {
|
|
sshTemplates := &SSHTemplates{
|
|
User: []Template{
|
|
{Name: "known_host.tpl", Type: File, TemplatePath: "../authority/testdata/templates/known_hosts.tpl", Path: "ssh/known_host", Comment: "#"},
|
|
},
|
|
Host: []Template{
|
|
{Name: "ca.tpl", Type: File, TemplatePath: "../authority/testdata/templates/ca.tpl", Path: "/etc/ssh/ca.pub", Comment: "#"},
|
|
},
|
|
}
|
|
type fields struct {
|
|
SSH *SSHTemplates
|
|
Data map[string]interface{}
|
|
}
|
|
tests := []struct {
|
|
name string
|
|
fields fields
|
|
wantErr bool
|
|
}{
|
|
{"ok", fields{sshTemplates, nil}, false},
|
|
{"okWithData", fields{sshTemplates, map[string]interface{}{"Foo": "Bar"}}, false},
|
|
{"badSSH", fields{&SSHTemplates{User: []Template{{}}}, nil}, true},
|
|
{"badDataUser", fields{sshTemplates, map[string]interface{}{"User": "Bar"}}, true},
|
|
{"badDataStep", fields{sshTemplates, map[string]interface{}{"Step": "Bar"}}, true},
|
|
}
|
|
var nilValue *Templates
|
|
assert.NoError(t, nilValue.Validate())
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
tmpl := &Templates{
|
|
SSH: tt.fields.SSH,
|
|
Data: tt.fields.Data,
|
|
}
|
|
if err := tmpl.Validate(); (err != nil) != tt.wantErr {
|
|
t.Errorf("Templates.Validate() error = %v, wantErr %v", err, tt.wantErr)
|
|
}
|
|
})
|
|
}
|
|
}
|
|
|
|
func TestSSHTemplates_Validate(t *testing.T) {
|
|
user := []Template{
|
|
{Name: "include.tpl", Type: Snippet, TemplatePath: "../authority/testdata/templates/include.tpl", Path: "~/.ssh/config", Comment: "#"},
|
|
}
|
|
host := []Template{
|
|
{Name: "ca.tpl", Type: File, TemplatePath: "../authority/testdata/templates/ca.tpl", Path: "/etc/ssh/ca.pub", Comment: "#"},
|
|
}
|
|
|
|
type fields struct {
|
|
User []Template
|
|
Host []Template
|
|
}
|
|
tests := []struct {
|
|
name string
|
|
fields fields
|
|
wantErr bool
|
|
}{
|
|
{"ok", fields{user, host}, false},
|
|
{"user", fields{user, nil}, false},
|
|
{"host", fields{nil, host}, false},
|
|
{"badUser", fields{[]Template{{}}, nil}, true},
|
|
{"badHost", fields{nil, []Template{{}}}, true},
|
|
}
|
|
var nilValue *SSHTemplates
|
|
assert.NoError(t, nilValue.Validate())
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
tmpl := &SSHTemplates{
|
|
User: tt.fields.User,
|
|
Host: tt.fields.Host,
|
|
}
|
|
if err := tmpl.Validate(); (err != nil) != tt.wantErr {
|
|
t.Errorf("SSHTemplates.Validate() error = %v, wantErr %v", err, tt.wantErr)
|
|
}
|
|
})
|
|
}
|
|
}
|
|
|
|
func TestTemplate_Validate(t *testing.T) {
|
|
okPath := "~/.ssh/config"
|
|
okTmplPath := "../authority/testdata/templates/include.tpl"
|
|
|
|
type fields struct {
|
|
Name string
|
|
Type TemplateType
|
|
TemplatePath string
|
|
Path string
|
|
Comment string
|
|
}
|
|
tests := []struct {
|
|
name string
|
|
fields fields
|
|
wantErr bool
|
|
}{
|
|
{"okSnippet", fields{"include.tpl", Snippet, okTmplPath, okPath, "#"}, false},
|
|
{"okFile", fields{"file.tpl", File, okTmplPath, okPath, "#"}, false},
|
|
{"okDirectory", fields{"dir.tpl", Directory, "", "/tmp/dir", "#"}, false},
|
|
{"badName", fields{"", Snippet, okTmplPath, okPath, "#"}, true},
|
|
{"badType", fields{"include.tpl", "", okTmplPath, okPath, "#"}, true},
|
|
{"badType", fields{"include.tpl", "foo", okTmplPath, okPath, "#"}, true},
|
|
{"badTemplatePath", fields{"include.tpl", Snippet, "", okPath, "#"}, true},
|
|
{"badTemplatePath", fields{"include.tpl", File, "", okPath, "#"}, true},
|
|
{"badTemplatePath", fields{"include.tpl", Directory, okTmplPath, okPath, "#"}, true},
|
|
{"badPath", fields{"include.tpl", Snippet, okTmplPath, "", "#"}, true},
|
|
{"missingTemplate", fields{"include.tpl", Snippet, "./testdata/include.tpl", okTmplPath, "#"}, true},
|
|
{"directoryTemplate", fields{"include.tpl", File, "../authority/testdata", okTmplPath, "#"}, true},
|
|
}
|
|
var nilValue *Template
|
|
assert.NoError(t, nilValue.Validate())
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
tmpl := &Template{
|
|
Name: tt.fields.Name,
|
|
Type: tt.fields.Type,
|
|
TemplatePath: tt.fields.TemplatePath,
|
|
Path: tt.fields.Path,
|
|
Comment: tt.fields.Comment,
|
|
}
|
|
if err := tmpl.Validate(); (err != nil) != tt.wantErr {
|
|
t.Errorf("Template.Validate() error = %v, wantErr %v", err, tt.wantErr)
|
|
}
|
|
})
|
|
}
|
|
}
|
|
|
|
func TestLoadAll(t *testing.T) {
|
|
tmpl := &Templates{
|
|
SSH: &SSHTemplates{
|
|
User: []Template{
|
|
{Name: "include.tpl", Type: Snippet, TemplatePath: "../authority/testdata/templates/include.tpl", Path: "~/.ssh/config", Comment: "#"},
|
|
},
|
|
Host: []Template{
|
|
{Name: "ca.tpl", Type: File, TemplatePath: "../authority/testdata/templates/ca.tpl", Path: "/etc/ssh/ca.pub", Comment: "#"},
|
|
},
|
|
},
|
|
}
|
|
|
|
type args struct {
|
|
t *Templates
|
|
}
|
|
tests := []struct {
|
|
name string
|
|
args args
|
|
wantErr bool
|
|
}{
|
|
{"ok", args{tmpl}, false},
|
|
{"empty", args{&Templates{}}, false},
|
|
{"nil", args{nil}, false},
|
|
{"badUser", args{&Templates{SSH: &SSHTemplates{User: []Template{{}}}}}, true},
|
|
{"badHost", args{&Templates{SSH: &SSHTemplates{Host: []Template{{}}}}}, true},
|
|
}
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
if err := LoadAll(tt.args.t); (err != nil) != tt.wantErr {
|
|
t.Errorf("LoadAll() error = %v, wantErr %v", err, tt.wantErr)
|
|
}
|
|
})
|
|
}
|
|
}
|
|
|
|
func TestTemplate_Load(t *testing.T) {
|
|
type fields struct {
|
|
Name string
|
|
Type TemplateType
|
|
TemplatePath string
|
|
Path string
|
|
Comment string
|
|
}
|
|
tests := []struct {
|
|
name string
|
|
fields fields
|
|
wantErr bool
|
|
}{
|
|
{"ok", fields{"include.tpl", Snippet, "../authority/testdata/templates/include.tpl", "~/.ssh/config", "#"}, false},
|
|
{"error", fields{"error.tpl", Snippet, "../authority/testdata/templates/error.tpl", "/tmp/error", "#"}, true},
|
|
{"missing", fields{"include.tpl", Snippet, "./testdata/include.tpl", "~/.ssh/config", "#"}, true},
|
|
}
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
tmpl := &Template{
|
|
Name: tt.fields.Name,
|
|
Type: tt.fields.Type,
|
|
TemplatePath: tt.fields.TemplatePath,
|
|
Path: tt.fields.Path,
|
|
Comment: tt.fields.Comment,
|
|
}
|
|
if err := tmpl.Load(); (err != nil) != tt.wantErr {
|
|
t.Errorf("Template.Load() error = %v, wantErr %v", err, tt.wantErr)
|
|
}
|
|
})
|
|
}
|
|
}
|
|
|
|
func TestTemplate_Render(t *testing.T) {
|
|
key, err := ecdsa.GenerateKey(elliptic.P256(), rand.Reader)
|
|
assert.FatalError(t, err)
|
|
user, err := ssh.NewPublicKey(key.Public())
|
|
assert.FatalError(t, err)
|
|
userB64 := base64.StdEncoding.EncodeToString(user.Marshal())
|
|
|
|
key, err = ecdsa.GenerateKey(elliptic.P256(), rand.Reader)
|
|
assert.FatalError(t, err)
|
|
host, err := ssh.NewPublicKey(key.Public())
|
|
assert.FatalError(t, err)
|
|
hostB64 := base64.StdEncoding.EncodeToString(host.Marshal())
|
|
|
|
data := map[string]interface{}{
|
|
"Step": &Step{
|
|
SSH: StepSSH{
|
|
UserKey: user,
|
|
HostKey: host,
|
|
},
|
|
},
|
|
"User": map[string]string{
|
|
"StepPath": "/tmp/.step",
|
|
"User": "john",
|
|
"GOOS": "linux",
|
|
},
|
|
}
|
|
|
|
type fields struct {
|
|
Name string
|
|
Type TemplateType
|
|
TemplatePath string
|
|
Path string
|
|
Comment string
|
|
}
|
|
type args struct {
|
|
data interface{}
|
|
}
|
|
tests := []struct {
|
|
name string
|
|
fields fields
|
|
args args
|
|
want []byte
|
|
wantErr bool
|
|
}{
|
|
{"snippet", fields{"include.tpl", Snippet, "../authority/testdata/templates/include.tpl", "~/.ssh/config", "#"}, args{data}, []byte("Host *\n\tInclude /tmp/.step/ssh/config"), false},
|
|
{"file", fields{"known_hosts.tpl", File, "../authority/testdata/templates/known_hosts.tpl", "ssh/known_hosts", "#"}, args{data}, []byte(fmt.Sprintf("@cert-authority * %s %s", host.Type(), hostB64)), false},
|
|
{"file", fields{"ca.tpl", File, "../authority/testdata/templates/ca.tpl", "/etc/ssh/ca.pub", "#"}, args{data}, []byte(fmt.Sprintf("%s %s", user.Type(), userB64)), false},
|
|
{"directory", fields{"dir.tpl", Directory, "", "/tmp/dir", ""}, args{data}, nil, false},
|
|
{"error", fields{"error.tpl", File, "../authority/testdata/templates/error.tpl", "/tmp/error", "#"}, args{data}, nil, true},
|
|
}
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
tmpl := &Template{
|
|
Name: tt.fields.Name,
|
|
Type: tt.fields.Type,
|
|
TemplatePath: tt.fields.TemplatePath,
|
|
Path: tt.fields.Path,
|
|
Comment: tt.fields.Comment,
|
|
}
|
|
got, err := tmpl.Render(tt.args.data)
|
|
if (err != nil) != tt.wantErr {
|
|
t.Errorf("Template.Render() error = %v, wantErr %v", err, tt.wantErr)
|
|
return
|
|
}
|
|
if !reflect.DeepEqual(got, tt.want) {
|
|
t.Errorf("Template.Render() = %v, want %v", string(got), string(tt.want))
|
|
}
|
|
})
|
|
}
|
|
}
|
|
|
|
func TestTemplate_Output(t *testing.T) {
|
|
key, err := ecdsa.GenerateKey(elliptic.P256(), rand.Reader)
|
|
assert.FatalError(t, err)
|
|
user, err := ssh.NewPublicKey(key.Public())
|
|
assert.FatalError(t, err)
|
|
userB64 := base64.StdEncoding.EncodeToString(user.Marshal())
|
|
|
|
key, err = ecdsa.GenerateKey(elliptic.P256(), rand.Reader)
|
|
assert.FatalError(t, err)
|
|
host, err := ssh.NewPublicKey(key.Public())
|
|
assert.FatalError(t, err)
|
|
hostB64 := base64.StdEncoding.EncodeToString(host.Marshal())
|
|
|
|
data := map[string]interface{}{
|
|
"Step": &Step{
|
|
SSH: StepSSH{
|
|
UserKey: user,
|
|
HostKey: host,
|
|
},
|
|
},
|
|
"User": map[string]string{
|
|
"StepPath": "/tmp/.step",
|
|
},
|
|
}
|
|
|
|
type fields struct {
|
|
Name string
|
|
Type TemplateType
|
|
TemplatePath string
|
|
Path string
|
|
Comment string
|
|
}
|
|
type args struct {
|
|
data interface{}
|
|
}
|
|
tests := []struct {
|
|
name string
|
|
fields fields
|
|
args args
|
|
want []byte
|
|
wantErr bool
|
|
}{
|
|
{"snippet", fields{"include.tpl", Snippet, "../authority/testdata/templates/include.tpl", "~/.ssh/config", "#"}, args{data}, []byte("Host *\n\tInclude /tmp/.step/ssh/config"), false},
|
|
{"file", fields{"known_hosts.tpl", File, "../authority/testdata/templates/known_hosts.tpl", "ssh/known_hosts", "#"}, args{data}, []byte(fmt.Sprintf("@cert-authority * %s %s", host.Type(), hostB64)), false},
|
|
{"file", fields{"ca.tpl", File, "../authority/testdata/templates/ca.tpl", "/etc/ssh/ca.pub", "#"}, args{data}, []byte(fmt.Sprintf("%s %s", user.Type(), userB64)), false},
|
|
{"directory", fields{"dir.tpl", Directory, "", "/tmp/dir", ""}, args{data}, nil, false},
|
|
{"error", fields{"error.tpl", File, "../authority/testdata/templates/error.tpl", "/tmp/error", "#"}, args{data}, nil, true},
|
|
}
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
var want Output
|
|
if !tt.wantErr {
|
|
want = Output{
|
|
Name: tt.fields.Name,
|
|
Type: tt.fields.Type,
|
|
Path: tt.fields.Path,
|
|
Comment: tt.fields.Comment,
|
|
Content: tt.want,
|
|
}
|
|
}
|
|
|
|
tmpl := &Template{
|
|
Name: tt.fields.Name,
|
|
Type: tt.fields.Type,
|
|
TemplatePath: tt.fields.TemplatePath,
|
|
Path: tt.fields.Path,
|
|
Comment: tt.fields.Comment,
|
|
}
|
|
got, err := tmpl.Output(tt.args.data)
|
|
if (err != nil) != tt.wantErr {
|
|
t.Errorf("Template.Output() error = %v, wantErr %v", err, tt.wantErr)
|
|
return
|
|
}
|
|
if !reflect.DeepEqual(got, want) {
|
|
t.Errorf("Template.Output() = %v, want %v", got, want)
|
|
}
|
|
})
|
|
}
|
|
}
|
|
|
|
func TestOutput_Write(t *testing.T) {
|
|
dir, err := ioutil.TempDir("", "test-output-write")
|
|
assert.FatalError(t, err)
|
|
defer os.RemoveAll(dir)
|
|
|
|
join := func(elem ...string) string {
|
|
elems := append([]string{dir}, elem...)
|
|
return filepath.Join(elems...)
|
|
}
|
|
assert.FatalError(t, os.Mkdir(join("bad"), 0644))
|
|
|
|
type fields struct {
|
|
Name string
|
|
Type TemplateType
|
|
Path string
|
|
Comment string
|
|
Content []byte
|
|
}
|
|
tests := []struct {
|
|
name string
|
|
fields fields
|
|
wantErr bool
|
|
}{
|
|
{"snippet", fields{"snippet", Snippet, join("snippet"), "#", []byte("some content")}, false},
|
|
{"file", fields{"file", File, join("file"), "#", []byte("some content")}, false},
|
|
{"snippetInDir", fields{"file", Snippet, join("dir", "snippets", "snippet"), "#", []byte("some content")}, false},
|
|
{"fileInDir", fields{"file", File, join("dir", "files", "file"), "#", []byte("some content")}, false},
|
|
{"directory", fields{"directory", Directory, join("directory"), "", nil}, false},
|
|
{"snippetErr", fields{"snippet", Snippet, join("bad", "snippet"), "#", []byte("some content")}, true},
|
|
{"fileErr", fields{"file", File, join("bad", "file"), "#", []byte("some content")}, true},
|
|
{"directoryErr", fields{"directory", Directory, join("bad", "directory"), "", nil}, true},
|
|
}
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
o := &Output{
|
|
Name: tt.fields.Name,
|
|
Type: tt.fields.Type,
|
|
Comment: tt.fields.Comment,
|
|
Path: tt.fields.Path,
|
|
Content: tt.fields.Content,
|
|
}
|
|
if err := o.Write(); (err != nil) != tt.wantErr {
|
|
t.Errorf("Output.Write() error = %v, wantErr %v", err, tt.wantErr)
|
|
}
|
|
if !tt.wantErr {
|
|
st, err := os.Stat(o.Path)
|
|
if err != nil {
|
|
t.Errorf("os.Stat(%s) error = %v", o.Path, err)
|
|
} else {
|
|
if o.Type == Directory {
|
|
assert.True(t, st.IsDir())
|
|
assert.Equals(t, os.ModeDir|os.FileMode(0700), st.Mode())
|
|
} else {
|
|
assert.False(t, st.IsDir())
|
|
assert.Equals(t, os.FileMode(0600), st.Mode())
|
|
}
|
|
}
|
|
}
|
|
})
|
|
}
|
|
}
|