mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-24 16:10:02 -06:00
1b320ac3e7
test_ipap11helper no longer changes directory for the entire test suite. The fix revealed a bug in another test suite. test_secrets now uses a proper temporary directory. Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-By: Rob Crittenden <rcritten@redhat.com>
65 lines
1.9 KiB
Python
65 lines
1.9 KiB
Python
# Copyright (C) 2015 FreeIPA Project Contributors - see LICENSE file
|
|
|
|
from __future__ import print_function
|
|
from ipaserver.secrets.store import iSecStore, NAME_DB_MAP, NSSCertDB
|
|
import os
|
|
import shutil
|
|
import subprocess
|
|
import tempfile
|
|
import unittest
|
|
|
|
|
|
def _test_password_callback():
|
|
with open('test-ipa-sec-store/pwfile') as f:
|
|
password = f.read()
|
|
return password
|
|
|
|
|
|
class TestiSecStore(unittest.TestCase):
|
|
@classmethod
|
|
def setUpClass(cls):
|
|
cls.testdir = tempfile.mkdtemp(suffix='ipa-sec-store')
|
|
pwfile = os.path.join(cls.testdir, 'pwfile')
|
|
with open(pwfile, 'w') as f:
|
|
f.write('testpw')
|
|
cls.certdb = os.path.join(cls.testdir, 'certdb')
|
|
os.mkdir(cls.certdb)
|
|
cls.cert2db = os.path.join(cls.testdir, 'cert2db')
|
|
os.mkdir(cls.cert2db)
|
|
seedfile = os.path.join(cls.testdir, 'seedfile')
|
|
with open(seedfile, 'wb') as f:
|
|
seed = os.urandom(1024)
|
|
f.write(seed)
|
|
subprocess.call(
|
|
['certutil', '-d', cls.certdb, '-N', '-f', pwfile],
|
|
cwd=cls.testdir
|
|
)
|
|
subprocess.call(
|
|
['certutil', '-d', cls.cert2db, '-N', '-f', pwfile],
|
|
cwd=cls.testdir
|
|
)
|
|
subprocess.call(
|
|
['certutil', '-d', cls.certdb, '-S', '-f', pwfile,
|
|
'-s', 'CN=testCA', '-n', 'testCACert', '-x',
|
|
'-t', 'CT,C,C', '-m', '1', '-z', seedfile],
|
|
cwd=cls.testdir
|
|
)
|
|
|
|
@classmethod
|
|
def tearDownClass(cls):
|
|
shutil.rmtree(cls.testdir)
|
|
|
|
def test_iSecStore(self):
|
|
iss = iSecStore({})
|
|
|
|
NAME_DB_MAP['test'] = {
|
|
'type': 'NSSDB',
|
|
'path': self.certdb,
|
|
'handler': NSSCertDB,
|
|
'pwcallback': _test_password_callback,
|
|
}
|
|
value = iss.get('keys/test/testCACert')
|
|
|
|
NAME_DB_MAP['test']['path'] = self.cert2db
|
|
iss.set('keys/test/testCACert', value)
|