|
|
|
@ -12,22 +12,169 @@ func TestKeysCommand_implements(t *testing.T) {
|
|
|
|
|
var _ cli.Command = &KeysCommand{} |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
func TestKeysCommand_list(t *testing.T) { |
|
|
|
|
conf := agent.Config{EncryptKey: "HS5lJ+XuTlYKWaeGYyG+/A=="} |
|
|
|
|
func TestKeysCommandRun(t *testing.T) { |
|
|
|
|
key1 := "HS5lJ+XuTlYKWaeGYyG+/A==" |
|
|
|
|
key2 := "kZyFABeAmc64UMTrm9XuKA==" |
|
|
|
|
key3 := "2k5VRlBIIKUPc1v77rsswg==" |
|
|
|
|
|
|
|
|
|
// Begin with a single key
|
|
|
|
|
conf := agent.Config{EncryptKey: key1} |
|
|
|
|
a1 := testAgentWithConfig(&conf, t) |
|
|
|
|
defer a1.Shutdown() |
|
|
|
|
|
|
|
|
|
// The keyring was initialized with only the provided key
|
|
|
|
|
out := listKeys(t, a1.addr, false) |
|
|
|
|
if !strings.Contains(out, key1) { |
|
|
|
|
t.Fatalf("bad: %#v", out) |
|
|
|
|
} |
|
|
|
|
if strings.Contains(out, key2) { |
|
|
|
|
t.Fatalf("bad: %#v", out) |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
// The key was installed on the WAN gossip layer also
|
|
|
|
|
out = listKeys(t, a1.addr, true) |
|
|
|
|
if !strings.Contains(out, key1) { |
|
|
|
|
t.Fatalf("bad: %#v", out) |
|
|
|
|
} |
|
|
|
|
if strings.Contains(out, key3) { |
|
|
|
|
t.Fatalf("bad: %#v", out) |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
// Install the second key onto the keyring
|
|
|
|
|
installKey(t, a1.addr, false, key2) |
|
|
|
|
|
|
|
|
|
// Both keys should be present
|
|
|
|
|
out = listKeys(t, a1.addr, false) |
|
|
|
|
for _, key := range []string{key1, key2} { |
|
|
|
|
if !strings.Contains(out, key) { |
|
|
|
|
t.Fatalf("bad: %#v", out) |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
// Second key should not be installed on WAN
|
|
|
|
|
out = listKeys(t, a1.addr, true) |
|
|
|
|
if strings.Contains(out, key2) { |
|
|
|
|
t.Fatalf("bad: %#v", out) |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
// Change out the primary key
|
|
|
|
|
useKey(t, a1.addr, false, key2) |
|
|
|
|
|
|
|
|
|
// Remove the original key
|
|
|
|
|
removeKey(t, a1.addr, false, key1) |
|
|
|
|
|
|
|
|
|
// Make sure only the new key is present
|
|
|
|
|
out = listKeys(t, a1.addr, false) |
|
|
|
|
if strings.Contains(out, key1) { |
|
|
|
|
t.Fatalf("bad: %#v", out) |
|
|
|
|
} |
|
|
|
|
if !strings.Contains(out, key2) { |
|
|
|
|
t.Fatalf("bad: %#v", out) |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
// Original key still remains on WAN keyring
|
|
|
|
|
out = listKeys(t, a1.addr, true) |
|
|
|
|
if !strings.Contains(out, key1) { |
|
|
|
|
t.Fatalf("bad: %#v", out) |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
// Install second key on WAN keyring
|
|
|
|
|
installKey(t, a1.addr, true, key3) |
|
|
|
|
|
|
|
|
|
// Two keys now present on WAN keyring
|
|
|
|
|
out = listKeys(t, a1.addr, true) |
|
|
|
|
for _, key := range []string{key1, key3} { |
|
|
|
|
if !strings.Contains(out, key) { |
|
|
|
|
t.Fatalf("bad: %#v", out) |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
// Change WAN primary key
|
|
|
|
|
useKey(t, a1.addr, true, key3) |
|
|
|
|
|
|
|
|
|
// Remove original key from WAN keyring
|
|
|
|
|
removeKey(t, a1.addr, true, key1) |
|
|
|
|
|
|
|
|
|
// Only new key should exist on WAN keyring
|
|
|
|
|
out = listKeys(t, a1.addr, true) |
|
|
|
|
if !strings.Contains(out, key3) { |
|
|
|
|
t.Fatalf("bad: %#v", out) |
|
|
|
|
} |
|
|
|
|
if strings.Contains(out, key1) { |
|
|
|
|
t.Fatalf("bad: %#v", out) |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
func TestKeysCommandRun_help(t *testing.T) { |
|
|
|
|
ui := new(cli.MockUi) |
|
|
|
|
c := &KeysCommand{Ui: ui} |
|
|
|
|
code := c.Run(nil) |
|
|
|
|
if code != 1 { |
|
|
|
|
t.Fatalf("bad: %d. %#v", code, ui.ErrorWriter.String()) |
|
|
|
|
} |
|
|
|
|
if !strings.Contains(ui.ErrorWriter.String(), "Usage:") { |
|
|
|
|
t.Fatalf("bad: %#v", ui.ErrorWriter.String()) |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
func listKeys(t *testing.T, addr string, wan bool) string { |
|
|
|
|
ui := new(cli.MockUi) |
|
|
|
|
c := &KeysCommand{Ui: ui} |
|
|
|
|
args := []string{"-list", "-rpc-addr=" + a1.addr} |
|
|
|
|
|
|
|
|
|
args := []string{"-list", "-rpc-addr=" + addr} |
|
|
|
|
if wan { |
|
|
|
|
args = append(args, "-wan") |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
code := c.Run(args) |
|
|
|
|
if code != 0 { |
|
|
|
|
t.Fatalf("bad: %d. %#v", code, ui.ErrorWriter.String()) |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
return ui.OutputWriter.String() |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
func installKey(t *testing.T, addr string, wan bool, key string) { |
|
|
|
|
ui := new(cli.MockUi) |
|
|
|
|
c := &KeysCommand{Ui: ui} |
|
|
|
|
|
|
|
|
|
args := []string{"-install=" + key, "-rpc-addr=" + addr} |
|
|
|
|
if wan { |
|
|
|
|
args = append(args, "-wan") |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
code := c.Run(args) |
|
|
|
|
if code != 0 { |
|
|
|
|
t.Fatalf("bad: %d. %#v", code, ui.ErrorWriter.String()) |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
func useKey(t *testing.T, addr string, wan bool, key string) { |
|
|
|
|
ui := new(cli.MockUi) |
|
|
|
|
c := &KeysCommand{Ui: ui} |
|
|
|
|
|
|
|
|
|
args := []string{"-use=" + key, "-rpc-addr=" + addr} |
|
|
|
|
if wan { |
|
|
|
|
args = append(args, "-wan") |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
code := c.Run(args) |
|
|
|
|
if code != 0 { |
|
|
|
|
t.Fatalf("bad: %d. %#v", code, ui.ErrorWriter.String()) |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
if !strings.Contains(ui.OutputWriter.String(), conf.EncryptKey) { |
|
|
|
|
t.Fatalf("bad: %#v", ui.OutputWriter.String()) |
|
|
|
|
func removeKey(t *testing.T, addr string, wan bool, key string) { |
|
|
|
|
ui := new(cli.MockUi) |
|
|
|
|
c := &KeysCommand{Ui: ui} |
|
|
|
|
|
|
|
|
|
args := []string{"-remove=" + key, "-rpc-addr=" + addr} |
|
|
|
|
if wan { |
|
|
|
|
args = append(args, "-wan") |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
code := c.Run(args) |
|
|
|
|
if code != 0 { |
|
|
|
|
t.Fatalf("bad: %d. %#v", code, ui.ErrorWriter.String()) |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|