1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
|
#! /usr/bin/env ruby
require 'spec_helper'
require 'puppet/ssl/inventory'
describe Puppet::SSL::Inventory, :unless => Puppet.features.microsoft_windows? do
let(:cert_inventory) { File.expand_path("/inven/tory") }
before do
@class = Puppet::SSL::Inventory
end
describe "when initializing" do
it "should set its path to the inventory file" do
Puppet[:cert_inventory] = cert_inventory
@class.new.path.should == cert_inventory
end
end
describe "when managing an inventory" do
before do
Puppet[:cert_inventory] = cert_inventory
Puppet::FileSystem.stubs(:exist?).with(cert_inventory).returns true
@inventory = @class.new
@cert = mock 'cert'
end
describe "and creating the inventory file" do
it "re-adds all of the existing certificates" do
inventory_file = StringIO.new
Puppet.settings.setting(:cert_inventory).stubs(:open).yields(inventory_file)
cert1 = Puppet::SSL::Certificate.new("cert1")
cert1.content = stub 'cert1',
:serial => 2,
:not_before => Time.now,
:not_after => Time.now,
:subject => "/CN=smocking"
cert2 = Puppet::SSL::Certificate.new("cert2")
cert2.content = stub 'cert2',
:serial => 3,
:not_before => Time.now,
:not_after => Time.now,
:subject => "/CN=mocking bird"
Puppet::SSL::Certificate.indirection.expects(:search).with("*").returns [cert1, cert2]
@inventory.rebuild
expect(inventory_file.string).to match(/\/CN=smocking/)
expect(inventory_file.string).to match(/\/CN=mocking bird/)
end
end
describe "and adding a certificate" do
it "should use the Settings to write to the file" do
Puppet.settings.setting(:cert_inventory).expects(:open).with("a")
@inventory.add(@cert)
end
it "should add formatted certificate information to the end of the file" do
cert = Puppet::SSL::Certificate.new("mycert")
cert.content = @cert
fh = StringIO.new
Puppet.settings.setting(:cert_inventory).expects(:open).with("a").yields(fh)
@inventory.expects(:format).with(@cert).returns "myformat"
@inventory.add(@cert)
expect(fh.string).to eq("myformat")
end
end
describe "and formatting a certificate" do
before do
@cert = stub 'cert', :not_before => Time.now, :not_after => Time.now, :subject => "mycert", :serial => 15
end
it "should print the serial number as a 4 digit hex number in the first field" do
@inventory.format(@cert).split[0].should == "0x000f" # 15 in hex
end
it "should print the not_before date in '%Y-%m-%dT%H:%M:%S%Z' format in the second field" do
@cert.not_before.expects(:strftime).with('%Y-%m-%dT%H:%M:%S%Z').returns "before_time"
@inventory.format(@cert).split[1].should == "before_time"
end
it "should print the not_after date in '%Y-%m-%dT%H:%M:%S%Z' format in the third field" do
@cert.not_after.expects(:strftime).with('%Y-%m-%dT%H:%M:%S%Z').returns "after_time"
@inventory.format(@cert).split[2].should == "after_time"
end
it "should print the subject in the fourth field" do
@inventory.format(@cert).split[3].should == "mycert"
end
it "should add a carriage return" do
@inventory.format(@cert).should =~ /\n$/
end
it "should produce a line consisting of the serial number, start date, expiration date, and subject" do
# Just make sure our serial and subject bracket the lines.
@inventory.format(@cert).should =~ /^0x.+mycert$/
end
end
it "should be able to find a given host's serial number" do
@inventory.should respond_to(:serial)
end
describe "and finding a serial number" do
it "should return nil if the inventory file is missing" do
Puppet::FileSystem.expects(:exist?).with(cert_inventory).returns false
@inventory.serial(:whatever).should be_nil
end
it "should return the serial number from the line matching the provided name" do
File.expects(:readlines).with(cert_inventory).returns ["0x00f blah blah /CN=me\n", "0x001 blah blah /CN=you\n"]
@inventory.serial("me").should == 15
end
it "should return the number as an integer" do
File.expects(:readlines).with(cert_inventory).returns ["0x00f blah blah /CN=me\n", "0x001 blah blah /CN=you\n"]
@inventory.serial("me").should == 15
end
end
describe "and finding all serial numbers" do
it "should return nil if the inventory file is missing" do
Puppet::FileSystem.expects(:exist?).with(cert_inventory).returns false
@inventory.serials(:whatever).should be_empty
end
it "should return the all the serial numbers from the lines matching the provided name" do
File.expects(:readlines).with(cert_inventory).returns ["0x00f blah blah /CN=me\n", "0x001 blah blah /CN=you\n", "0x002 blah blah /CN=me\n"]
@inventory.serials("me").should == [15, 2]
end
end
end
end
|
