mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-25 16:31:08 -06:00
68 lines
2.2 KiB
Python
68 lines
2.2 KiB
Python
|
#
|
||
|
|
# Copyright (C) 2018 FreeIPA Contributors see COPYING for license
|
||
|
|
#
|
||
|
|
"""Misc test for 'ipa' CLI regressions
|
||
|
|
"""
|
||
|
|
from __future__ import absolute_import
|
||
|
|
|
||
|
|
import base64
|
||
|
|
import ssl
|
||
|
|
|
||
|
|
|
||
|
|
from ipaplatform.paths import paths
|
||
|
|
|
||
|
|
from ipatests.test_integration.base import IntegrationTest
|
||
|
|
from ipatests.pytest_plugins.integration import tasks
|
||
|
|
|
||
|
|
|
||
|
|
class TestIPACommand(IntegrationTest):
|
||
|
|
topology = 'line'
|
||
|
|
|
||
|
|
def get_cert_base64(self, host, path):
|
||
|
|
"""Retrieve cert and return content as single line, base64 encoded
|
||
|
|
"""
|
||
|
|
cacrt = host.get_file_contents(path, encoding='ascii')
|
||
|
|
cader = ssl.PEM_cert_to_DER_cert(cacrt)
|
||
|
|
return base64.b64encode(cader).decode('ascii')
|
||
|
|
|
||
|
|
def test_certmap_match_issue7520(self):
|
||
|
|
# https://pagure.io/freeipa/issue/7520
|
||
|
|
tasks.kinit_admin(self.master)
|
||
|
|
result = self.master.run_command(
|
||
|
|
['ipa', 'certmap-match', paths.IPA_CA_CRT],
|
||
|
|
raiseonerr=False
|
||
|
|
)
|
||
|
|
assert result.returncode == 1
|
||
|
|
assert not result.stderr_text
|
||
|
|
assert "0 users matched" in result.stdout_text
|
||
|
|
|
||
|
|
cab64 = self.get_cert_base64(self.master, paths.IPA_CA_CRT)
|
||
|
|
result = self.master.run_command(
|
||
|
|
['ipa', 'certmap-match', '--certificate', cab64],
|
||
|
|
raiseonerr=False
|
||
|
|
)
|
||
|
|
assert result.returncode == 1
|
||
|
|
assert not result.stderr_text
|
||
|
|
assert "0 users matched" in result.stdout_text
|
||
|
|
|
||
|
|
def test_cert_find_issue7520(self):
|
||
|
|
# https://pagure.io/freeipa/issue/7520
|
||
|
|
tasks.kinit_admin(self.master)
|
||
|
|
subject = 'CN=Certificate Authority,O={}'.format(
|
||
|
|
self.master.domain.realm)
|
||
|
|
|
||
|
|
# by cert file
|
||
|
|
result = self.master.run_command(
|
||
|
|
['ipa', 'cert-find', '--file', paths.IPA_CA_CRT]
|
||
|
|
)
|
||
|
|
assert subject in result.stdout_text
|
||
|
|
assert '1 certificate matched' in result.stdout_text
|
||
|
|
|
||
|
|
# by base64 cert
|
||
|
|
cab64 = self.get_cert_base64(self.master, paths.IPA_CA_CRT)
|
||
|
|
result = self.master.run_command(
|
||
|
|
['ipa', 'cert-find', '--certificate', cab64]
|
||
|
|
)
|
||
|
|
assert subject in result.stdout_text
|
||
|
|
assert '1 certificate matched' in result.stdout_text
|