forked from TrueCloudLab/certificates
106 lines
4.2 KiB
Go
106 lines
4.2 KiB
Go
package provisioner
|
|
|
|
import (
|
|
"bytes"
|
|
"reflect"
|
|
"testing"
|
|
|
|
"go.step.sm/crypto/sshutil"
|
|
)
|
|
|
|
func TestCustomSSHTemplateOptions(t *testing.T) {
|
|
cr := sshutil.CertificateRequest{
|
|
Type: "user",
|
|
KeyID: "foo@smallstep.com",
|
|
Principals: []string{"foo"},
|
|
}
|
|
crCertificate := `{"Key":null,"Type":"user","KeyID":"foo@smallstep.com","Principals":["foo"]}`
|
|
data := sshutil.CreateTemplateData(sshutil.HostCert, "smallstep.com", []string{"smallstep.com"})
|
|
type args struct {
|
|
o *Options
|
|
data sshutil.TemplateData
|
|
defaultTemplate string
|
|
userOptions SignSSHOptions
|
|
}
|
|
tests := []struct {
|
|
name string
|
|
args args
|
|
want sshutil.Options
|
|
wantErr bool
|
|
}{
|
|
{"ok", args{nil, data, sshutil.DefaultTemplate, SignSSHOptions{}}, sshutil.Options{
|
|
CertBuffer: bytes.NewBufferString(`{
|
|
"type": "host",
|
|
"keyId": "smallstep.com",
|
|
"principals": ["smallstep.com"],
|
|
"extensions": null,
|
|
"criticalOptions": null
|
|
}`),
|
|
}, false},
|
|
{"okNoData", args{nil, nil, sshutil.DefaultTemplate, SignSSHOptions{}}, sshutil.Options{
|
|
CertBuffer: bytes.NewBufferString(`{
|
|
"type": null,
|
|
"keyId": null,
|
|
"principals": null,
|
|
"extensions": null,
|
|
"criticalOptions": null
|
|
}`),
|
|
}, false},
|
|
{"okTemplateData", args{&Options{SSH: &SSHOptions{TemplateData: []byte(`{"foo":"bar"}`)}}, data, sshutil.DefaultTemplate, SignSSHOptions{}}, sshutil.Options{
|
|
CertBuffer: bytes.NewBufferString(`{
|
|
"type": "host",
|
|
"keyId": "smallstep.com",
|
|
"principals": ["smallstep.com"],
|
|
"extensions": null,
|
|
"criticalOptions": null
|
|
}`),
|
|
}, false},
|
|
{"okNullTemplateData", args{&Options{SSH: &SSHOptions{TemplateData: []byte(`null`)}}, data, sshutil.DefaultTemplate, SignSSHOptions{}}, sshutil.Options{
|
|
CertBuffer: bytes.NewBufferString(`{
|
|
"type": "host",
|
|
"keyId": "smallstep.com",
|
|
"principals": ["smallstep.com"],
|
|
"extensions": null,
|
|
"criticalOptions": null
|
|
}`),
|
|
}, false},
|
|
// Note: `{{ toJson .Insecure.CR }}` is not a valid ssh template
|
|
{"okTemplate", args{&Options{SSH: &SSHOptions{Template: "{{ toJson .Insecure.CR }}"}}, data, sshutil.DefaultTemplate, SignSSHOptions{}}, sshutil.Options{
|
|
CertBuffer: bytes.NewBufferString(crCertificate)}, false},
|
|
{"okFile", args{&Options{SSH: &SSHOptions{TemplateFile: "./testdata/templates/cr.tpl"}}, data, sshutil.DefaultTemplate, SignSSHOptions{}}, sshutil.Options{
|
|
CertBuffer: bytes.NewBufferString(crCertificate)}, false},
|
|
{"okBase64", args{&Options{SSH: &SSHOptions{Template: "e3sgdG9Kc29uIC5JbnNlY3VyZS5DUiB9fQ=="}}, data, sshutil.DefaultTemplate, SignSSHOptions{}}, sshutil.Options{
|
|
CertBuffer: bytes.NewBufferString(crCertificate)}, false},
|
|
{"okUserOptions", args{&Options{SSH: &SSHOptions{Template: `{"foo": "{{.Insecure.User.foo}}"}`}}, data, sshutil.DefaultTemplate, SignSSHOptions{TemplateData: []byte(`{"foo":"bar"}`)}}, sshutil.Options{
|
|
CertBuffer: bytes.NewBufferString(`{"foo": "bar"}`),
|
|
}, false},
|
|
{"okNulUserOptions", args{&Options{SSH: &SSHOptions{Template: `{"foo": "{{.Insecure.User.foo}}"}`}}, data, sshutil.DefaultTemplate, SignSSHOptions{TemplateData: []byte(`null`)}}, sshutil.Options{
|
|
CertBuffer: bytes.NewBufferString(`{"foo": "<no value>"}`),
|
|
}, false},
|
|
{"okBadUserOptions", args{&Options{SSH: &SSHOptions{Template: `{"foo": "{{.Insecure.User.foo}}"}`}}, data, sshutil.DefaultTemplate, SignSSHOptions{TemplateData: []byte(`{"badJSON"}`)}}, sshutil.Options{
|
|
CertBuffer: bytes.NewBufferString(`{"foo": "<no value>"}`),
|
|
}, false},
|
|
{"fail", args{&Options{SSH: &SSHOptions{TemplateData: []byte(`{"badJSON`)}}, data, sshutil.DefaultTemplate, SignSSHOptions{}}, sshutil.Options{}, true},
|
|
}
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
cof, err := CustomSSHTemplateOptions(tt.args.o, tt.args.data, tt.args.defaultTemplate)
|
|
if (err != nil) != tt.wantErr {
|
|
t.Errorf("CustomSSHTemplateOptions() error = %v, wantErr %v", err, tt.wantErr)
|
|
return
|
|
}
|
|
var opts sshutil.Options
|
|
if cof != nil {
|
|
for _, fn := range cof.Options(tt.args.userOptions) {
|
|
if err := fn(cr, &opts); err != nil {
|
|
t.Errorf("x509util.Options() error = %v", err)
|
|
return
|
|
}
|
|
}
|
|
}
|
|
if !reflect.DeepEqual(opts, tt.want) {
|
|
t.Errorf("CustomSSHTemplateOptions() = %v, want %v", opts, tt.want)
|
|
}
|
|
})
|
|
}
|
|
}
|