freeipa/ipatests/test_ipaserver/test_secrets.py

# Copyright (C) 2015  FreeIPA Project Contributors - see LICENSE file

from __future__ import print_function
from ipaserver.secrets.store import iSecStore, NAME_DB_MAP, NSSCertDB
import os
import shutil
import subprocess
import tempfile

import pytest


def _test_password_callback():
    with open('test-ipa-sec-store/pwfile') as f:
        password = f.read()
    return password


class TestiSecStore:
    certdb = None
    cert2db = None

    @pytest.fixture(autouse=True, scope="class")
    def isec_store_setup(self, request):
        cls = request.cls
        cls.testdir = tempfile.mkdtemp(suffix='ipa-sec-store')
        pwfile = os.path.join(cls.testdir, 'pwfile')
        with open(pwfile, 'w') as f:
            f.write('testpw')
        cls.certdb = os.path.join(cls.testdir, 'certdb')
        os.mkdir(cls.certdb)
        cls.cert2db = os.path.join(cls.testdir, 'cert2db')
        os.mkdir(cls.cert2db)
        seedfile = os.path.join(cls.testdir, 'seedfile')
        with open(seedfile, 'wb') as f:
            seed = os.urandom(1024)
            f.write(seed)
        subprocess.call(
            ['certutil', '-d', cls.certdb, '-N', '-f', pwfile],
            cwd=cls.testdir
        )
        subprocess.call(
            ['certutil', '-d', cls.cert2db, '-N', '-f', pwfile],
            cwd=cls.testdir
        )
        subprocess.call(
            ['certutil', '-d', cls.certdb, '-S', '-f', pwfile,
             '-s', 'CN=testCA', '-n', 'testCACert', '-x',
             '-t', 'CT,C,C', '-m', '1', '-z', seedfile],
            cwd=cls.testdir
        )

        def fin():
            shutil.rmtree(cls.testdir)
        request.addfinalizer(fin)

    def test_iSecStore(self):
        iss = iSecStore({})

        NAME_DB_MAP['test'] = {
            'type': 'NSSDB',
            'path': self.certdb,
            'handler': NSSCertDB,
            'pwcallback': _test_password_callback,
        }
        value = iss.get('keys/test/testCACert')

        NAME_DB_MAP['test']['path'] = self.cert2db
        iss.set('keys/test/testCACert', value)