mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-26 00:41:25 -06:00
a1f260d021
The dnssec and secrets subpackages and the p11helper module depend on ipaplatform. Move them to ipaserver as they are used only on the server. https://fedorahosted.org/freeipa/ticket/6474 Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
56 lines
1.8 KiB
Python
56 lines
1.8 KiB
Python
# Copyright (C) 2015 FreeIPA Project Contributors - see LICENSE file
|
|
|
|
from __future__ import print_function
|
|
from ipaserver.secrets.store import iSecStore, NAME_DB_MAP, NSSCertDB
|
|
import os
|
|
import shutil
|
|
import subprocess
|
|
import unittest
|
|
|
|
|
|
def _test_password_callback():
|
|
with open('test-ipa-sec-store/pwfile') as f:
|
|
password = f.read()
|
|
return password
|
|
|
|
|
|
class TestiSecStore(unittest.TestCase):
|
|
@classmethod
|
|
def setUpClass(cls):
|
|
try:
|
|
shutil.rmtree('test-ipa-sec-store')
|
|
except Exception: # pylint: disable=broad-except
|
|
pass
|
|
testdir = 'test-ipa-sec-store'
|
|
pwfile = os.path.join(testdir, 'pwfile')
|
|
os.mkdir(testdir)
|
|
with open(pwfile, 'w') as f:
|
|
f.write('testpw')
|
|
cls.certdb = os.path.join(testdir, 'certdb')
|
|
os.mkdir(cls.certdb)
|
|
cls.cert2db = os.path.join(testdir, 'cert2db')
|
|
os.mkdir(cls.cert2db)
|
|
seedfile = os.path.join(testdir, 'seedfile')
|
|
with open(seedfile, 'wb') as f:
|
|
seed = os.urandom(1024)
|
|
f.write(seed)
|
|
subprocess.call(['certutil', '-d', cls.certdb, '-N', '-f', pwfile])
|
|
subprocess.call(['certutil', '-d', cls.cert2db, '-N', '-f', pwfile])
|
|
subprocess.call(['certutil', '-d', cls.certdb, '-S', '-f', pwfile,
|
|
'-s', 'CN=testCA', '-n', 'testCACert', '-x',
|
|
'-t', 'CT,C,C', '-m', '1', '-z', seedfile])
|
|
|
|
def test_iSecStore(self):
|
|
iss = iSecStore({})
|
|
|
|
NAME_DB_MAP['test'] = {
|
|
'type': 'NSSDB',
|
|
'path': self.certdb,
|
|
'handler': NSSCertDB,
|
|
'pwcallback': _test_password_callback,
|
|
}
|
|
value = iss.get('keys/test/testCACert')
|
|
|
|
NAME_DB_MAP['test']['path'] = self.cert2db
|
|
iss.set('keys/test/testCACert', value)
|