summaryrefslogtreecommitdiff
path: root/puppet/modules/sshd/spec/functions/ssh_keygen_spec.rb
blob: a6b511735ccffa5cafc076d356e486d4fa6e8115 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
#! /usr/bin/env ruby -S rspec
require 'spec_helper'
require 'rspec-puppet'
require 'mocha'
require 'fileutils'

describe 'ssh_keygen' do

  let(:scope) { PuppetlabsSpec::PuppetInternals.scope }

  it 'should exist' do
    Puppet::Parser::Functions.function("ssh_keygen").should == "function_ssh_keygen"
  end

  it 'should raise a ParseError if no argument is passed' do
    lambda {
      scope.function_ssh_keygen([])
    }.should(raise_error(Puppet::ParseError))
  end

  it 'should raise a ParseError if there is more than 1 arguments' do
    lambda {
      scope.function_ssh_keygen(["foo", "bar"])
    }.should( raise_error(Puppet::ParseError))
  end

  it 'should raise a ParseError if the argument is not fully qualified' do
    lambda {
      scope.function_ssh_keygen(["foo"])
    }.should( raise_error(Puppet::ParseError))
  end

  it "should raise a ParseError if the private key path is a directory" do
    File.stubs(:directory?).with("/some_dir").returns(true)
    lambda {
      scope.function_ssh_keygen(["/some_dir"])
    }.should( raise_error(Puppet::ParseError))
  end

  it "should raise a ParseError if the public key path is a directory" do
    File.stubs(:directory?).with("/some_dir.pub").returns(true)
    lambda {
      scope.function_ssh_keygen(["/some_dir.pub"])
    }.should( raise_error(Puppet::ParseError))
  end

  describe 'when executing properly' do
    before do
      File.stubs(:directory?).with('/tmp/a/b/c').returns(false)
      File.stubs(:directory?).with('/tmp/a/b/c.pub').returns(false)
      File.stubs(:read).with('/tmp/a/b/c').returns('privatekey')
      File.stubs(:read).with('/tmp/a/b/c.pub').returns('publickey')
    end

    it 'should fail if the public but not the private key exists' do
      File.stubs(:exists?).with('/tmp/a/b/c').returns(true)
      File.stubs(:exists?).with('/tmp/a/b/c.pub').returns(false)
      lambda {
        scope.function_ssh_keygen(['/tmp/a/b/c'])
      }.should( raise_error(Puppet::ParseError))
    end

    it "should fail if the private but not the public key exists" do
      File.stubs(:exists?).with("/tmp/a/b/c").returns(false)
      File.stubs(:exists?).with("/tmp/a/b/c.pub").returns(true)
      lambda {
        scope.function_ssh_keygen(["/tmp/a/b/c"])
      }.should( raise_error(Puppet::ParseError))
    end


    it "should return an array of size 2 with the right conent if the keyfiles exists" do
      File.stubs(:exists?).with("/tmp/a/b/c").returns(true)
      File.stubs(:exists?).with("/tmp/a/b/c.pub").returns(true)
      File.stubs(:directory?).with('/tmp/a/b').returns(true)
      Puppet::Util.expects(:execute).never
      result = scope.function_ssh_keygen(['/tmp/a/b/c'])
      result.length.should == 2
      result[0].should == 'privatekey'
      result[1].should == 'publickey'
    end

    it "should create the directory path if it does not exist" do
      File.stubs(:exists?).with("/tmp/a/b/c").returns(false)
      File.stubs(:exists?).with("/tmp/a/b/c.pub").returns(false)
      File.stubs(:directory?).with("/tmp/a/b").returns(false)
      FileUtils.expects(:mkdir_p).with("/tmp/a/b", :mode => 0700)
      Puppet::Util::Execution.expects(:execute).returns("")
      result = scope.function_ssh_keygen(['/tmp/a/b/c'])
      result.length.should == 2
      result[0].should == 'privatekey'
      result[1].should == 'publickey'
    end

    it "should generate the key if the keyfiles do not exist" do
      File.stubs(:exists?).with("/tmp/a/b/c").returns(false)
      File.stubs(:exists?).with("/tmp/a/b/c.pub").returns(false)
      File.stubs(:directory?).with("/tmp/a/b").returns(true)
      Puppet::Util::Execution.expects(:execute).with(['/usr/bin/ssh-keygen','-t', 'rsa', '-b', '4096', '-f', '/tmp/a/b/c', '-P', '', '-q']).returns("")
      result = scope.function_ssh_keygen(['/tmp/a/b/c'])
      result.length.should == 2
      result[0].should == 'privatekey'
      result[1].should == 'publickey'
    end

    it "should fail if something goes wrong during generation" do
      File.stubs(:exists?).with("/tmp/a/b/c").returns(false)
      File.stubs(:exists?).with("/tmp/a/b/c.pub").returns(false)
      File.stubs(:directory?).with("/tmp/a/b").returns(true)
      Puppet::Util::Execution.expects(:execute).with(['/usr/bin/ssh-keygen','-t', 'rsa', '-b', '4096', '-f', '/tmp/a/b/c', '-P', '', '-q']).returns("something is wrong")
      lambda {
        scope.function_ssh_keygen(["/tmp/a/b/c"])
      }.should( raise_error(Puppet::ParseError))
    end
  end
end