mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-01-11 08:41:55 -06:00
b431e9b684
Python 2 had old style and new style classes. Python 3 has only new style classes. There is no point to subclass from object any more. See: https://pagure.io/freeipa/issue/7715 Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
136 lines
4.4 KiB
Python
136 lines
4.4 KiB
Python
#
|
|
# Copyright (C) 2015 FreeIPA Contributors see COPYING for license
|
|
#
|
|
import base64
|
|
|
|
from cryptography import x509
|
|
from cryptography.hazmat.backends import default_backend
|
|
import pytest
|
|
|
|
from ipalib.errors import MutuallyExclusiveError, RequirementError
|
|
from ipapython.dn import DN
|
|
from ipatests.util import assert_deepequal
|
|
|
|
|
|
class CertmapdataMixin:
|
|
certmapdata_options = {u'issuer', u'subject', u'certificate',
|
|
u'ipacertmapdata'}
|
|
|
|
def _data_from_options(self, **options):
|
|
issuer = None
|
|
subject = None
|
|
|
|
if not self.certmapdata_options & set(options):
|
|
raise RequirementError(name=u'certmapdata')
|
|
|
|
if ({u'issuer', u'subject'} & set(options) and
|
|
{u'ipacertmapdata', u'certificate'} & set(options)):
|
|
raise MutuallyExclusiveError(reason=u'Mutually exclusive options '
|
|
u'provided at the same time.')
|
|
|
|
if u'issuer' in options and u'subject' not in options:
|
|
raise RequirementError(name=u'subject')
|
|
|
|
if u'subject' in options and u'issuer' not in options:
|
|
raise RequirementError(name=u'issuer')
|
|
|
|
if {u'ipacertmapdata', u'certificate'} & set(options):
|
|
try:
|
|
data = options[u'ipacertmapdata']
|
|
except KeyError:
|
|
data = []
|
|
else:
|
|
if not isinstance(data, list):
|
|
data = [data]
|
|
|
|
try:
|
|
certs = options[u'certificate']
|
|
except KeyError:
|
|
certs = []
|
|
else:
|
|
if not isinstance(certs, list):
|
|
certs = [certs]
|
|
|
|
for cert in certs:
|
|
cert = x509.load_der_x509_certificate(
|
|
base64.b64decode(cert),
|
|
backend=default_backend()
|
|
)
|
|
issuer = DN(cert.issuer).x500_text()
|
|
subject = DN(cert.subject).x500_text()
|
|
|
|
data.append(
|
|
u'X509:<I>{i}<S>{s}'.format(i=issuer, s=subject)
|
|
)
|
|
else:
|
|
issuer = DN(options[u'issuer']).x500_text()
|
|
subject = DN(options[u'subject']).x500_text()
|
|
|
|
data = [u'X509:<I>{i}<S>{s}'.format(i=issuer, s=subject)]
|
|
|
|
return set(data)
|
|
|
|
def _make_add_certmap(self):
|
|
raise NotImplementedError("_make_add_certmap method must be "
|
|
"implemented in instance.")
|
|
|
|
def _make_remove_certmap(self):
|
|
raise NotImplementedError("_make_remove_certmap method must be "
|
|
"implemented in instance.")
|
|
|
|
def add_certmap(self, **kwargs):
|
|
cmd = self._make_add_certmap()
|
|
|
|
try:
|
|
expected_certmapdata = self._data_from_options(**kwargs)
|
|
except Exception as e:
|
|
with pytest.raises(type(e)):
|
|
cmd(**kwargs)
|
|
else:
|
|
result = cmd(**kwargs)
|
|
self.attrs.setdefault(u'ipacertmapdata', []).extend(
|
|
expected_certmapdata)
|
|
|
|
expected = dict(
|
|
summary=(u'Added certificate mappings to user '
|
|
u'"{}"'.format(self.name)),
|
|
value=self.name,
|
|
result=dict(
|
|
uid=(self.name,),
|
|
),
|
|
)
|
|
|
|
if self.attrs[u'ipacertmapdata']:
|
|
expected[u'result'][u'ipacertmapdata'] = (
|
|
self.attrs[u'ipacertmapdata'])
|
|
|
|
assert_deepequal(expected, result)
|
|
|
|
def remove_certmap(self, **kwargs):
|
|
cmd = self._make_remove_certmap()
|
|
|
|
try:
|
|
expected_certmapdata = self._data_from_options(**kwargs)
|
|
except Exception as e:
|
|
with pytest.raises(type(e)):
|
|
cmd(**kwargs)
|
|
else:
|
|
result = cmd(**kwargs)
|
|
|
|
for data in expected_certmapdata:
|
|
self.attrs[u'ipacertmapdata'].remove(data)
|
|
|
|
expected = dict(
|
|
summary=(u'Removed certificate mappings from user '
|
|
u'"{}"'.format(self.name)),
|
|
value=self.name,
|
|
result=dict(
|
|
uid=(self.name,),
|
|
),
|
|
)
|
|
if self.attrs[u'ipacertmapdata']:
|
|
expected[u'result'][u'ipacertmapdata'] = (
|
|
self.attrs[u'ipacertmapdata'])
|
|
|
|
assert_deepequal(expected, result)
|