93 lines
2.6 KiB
Go
93 lines
2.6 KiB
Go
|
package main
|
||
|
|
|
||
|
|
import (
|
||
|
|
"bytes"
|
||
|
|
"io/ioutil"
|
||
|
|
"os"
|
||
|
|
"testing"
|
||
|
|
|
||
|
|
"github.com/stretchr/testify/assert"
|
||
|
|
"github.com/slackhq/nebula/cert"
|
||
|
|
)
|
||
|
|
|
||
|
|
//TODO: test file permissions
|
||
|
|
|
||
|
|
func Test_keygenSummary(t *testing.T) {
|
||
|
|
assert.Equal(t, "keygen <flags>: create a public/private key pair. the public key can be passed to `nebula-cert sign`", keygenSummary())
|
||
|
|
}
|
||
|
|
|
||
|
|
func Test_keygenHelp(t *testing.T) {
|
||
|
|
ob := &bytes.Buffer{}
|
||
|
|
keygenHelp(ob)
|
||
|
|
assert.Equal(
|
||
|
|
t,
|
||
|
|
"Usage of "+os.Args[0]+" keygen <flags>: create a public/private key pair. the public key can be passed to `nebula-cert sign`\n"+
|
||
|
|
" -out-key string\n"+
|
||
|
|
" \tRequired: path to write the private key to\n"+
|
||
|
|
" -out-pub string\n"+
|
||
|
|
" \tRequired: path to write the public key to\n",
|
||
|
|
ob.String(),
|
||
|
|
)
|
||
|
|
}
|
||
|
|
|
||
|
|
func Test_keygen(t *testing.T) {
|
||
|
|
ob := &bytes.Buffer{}
|
||
|
|
eb := &bytes.Buffer{}
|
||
|
|
|
||
|
|
// required args
|
||
|
|
assertHelpError(t, keygen([]string{"-out-pub", "nope"}, ob, eb), "-out-key is required")
|
||
|
|
assert.Equal(t, "", ob.String())
|
||
|
|
assert.Equal(t, "", eb.String())
|
||
|
|
|
||
|
|
assertHelpError(t, keygen([]string{"-out-key", "nope"}, ob, eb), "-out-pub is required")
|
||
|
|
assert.Equal(t, "", ob.String())
|
||
|
|
assert.Equal(t, "", eb.String())
|
||
|
|
|
||
|
|
// failed key write
|
||
|
|
ob.Reset()
|
||
|
|
eb.Reset()
|
||
|
|
args := []string{"-out-pub", "/do/not/write/pleasepub", "-out-key", "/do/not/write/pleasekey"}
|
||
|
|
assert.EqualError(t, keygen(args, ob, eb), "error while writing out-key: open /do/not/write/pleasekey: "+NoSuchDirError)
|
||
|
|
assert.Equal(t, "", ob.String())
|
||
|
|
assert.Equal(t, "", eb.String())
|
||
|
|
|
||
|
|
// create temp key file
|
||
|
|
keyF, err := ioutil.TempFile("", "test.key")
|
||
|
|
assert.Nil(t, err)
|
||
|
|
defer os.Remove(keyF.Name())
|
||
|
|
|
||
|
|
// failed pub write
|
||
|
|
ob.Reset()
|
||
|
|
eb.Reset()
|
||
|
|
args = []string{"-out-pub", "/do/not/write/pleasepub", "-out-key", keyF.Name()}
|
||
|
|
assert.EqualError(t, keygen(args, ob, eb), "error while writing out-pub: open /do/not/write/pleasepub: "+NoSuchDirError)
|
||
|
|
assert.Equal(t, "", ob.String())
|
||
|
|
assert.Equal(t, "", eb.String())
|
||
|
|
|
||
|
|
// create temp pub file
|
||
|
|
pubF, err := ioutil.TempFile("", "test.pub")
|
||
|
|
assert.Nil(t, err)
|
||
|
|
defer os.Remove(pubF.Name())
|
||
|
|
|
||
|
|
// test proper keygen
|
||
|
|
ob.Reset()
|
||
|
|
eb.Reset()
|
||
|
|
args = []string{"-out-pub", pubF.Name(), "-out-key", keyF.Name()}
|
||
|
|
assert.Nil(t, keygen(args, ob, eb))
|
||
|
|
assert.Equal(t, "", ob.String())
|
||
|
|
assert.Equal(t, "", eb.String())
|
||
|
|
|
||
|
|
// read cert and key files
|
||
|
|
rb, _ := ioutil.ReadFile(keyF.Name())
|
||
|
|
lKey, b, err := cert.UnmarshalX25519PrivateKey(rb)
|
||
|
|
assert.Len(t, b, 0)
|
||
|
|
assert.Nil(t, err)
|
||
|
|
assert.Len(t, lKey, 32)
|
||
|
|
|
||
|
|
rb, _ = ioutil.ReadFile(pubF.Name())
|
||
|
|
lPub, b, err := cert.UnmarshalX25519PublicKey(rb)
|
||
|
|
assert.Len(t, b, 0)
|
||
|
|
assert.Nil(t, err)
|
||
|
|
assert.Len(t, lPub, 32)
|
||
|
|
}
|