adssl_test.go

package adssl

import (
	"bytes"
	"net/http"
	"net/http/httptest"
	"testing"
)

func TestPrintKubeSecret(t *testing.T) {
	var output bytes.Buffer
	c := Certificate{
		PrivateKeyString: "key",
		Result:           "result",
		CaCert:           "ca cert",
	}
	PrintKubeSecret(&output, c)
	want := `apiVersion: v1
kind: Secret
name: tls-secret
data:
  ca.crt: Y2EgY2VydA==
  tls.key: a2V5
  tls.crt: cmVzdWx0
`
	if output.String() != want {
		t.Errorf("want %q, got %q", want, output.String())
	}

}

func TestNew(t *testing.T) {
	srv := serverMock()
	defer srv.Close()

	s := Server{
		Endpoint: srv.URL,
		Username: "user",
		Password: "pass",
	}

	r := Request{
		CommonName:  "foo.bar",
		Country:     "US",
		Province:    "New Jersey",
		Locality:    "Weehawken",
		DNSNames:    "boo.bar",
		IPAddresses: "1.2.3.4",
	}

	testCase := struct {
		CaCert, Result string
	}{
		CaCert: "-----BEGIN CERTIFICATE-----CA-----END CERTIFICATE-----",
		Result: "-----BEGIN CERTIFICATE-----666-----END CERTIFICATE-----",
	}
	got, err := New(s, r)
	if err != nil {
		t.Fatal(err)
	}

	if got.CaCert != testCase.CaCert {
		t.Errorf("got %q, want %q", got.CaCert, testCase.CaCert)
	}
	if got.Result != testCase.Result {
		t.Errorf("got %q, want %q", got.Result, testCase.Result)
	}
}

func TestGenerateCertFromCsr(t *testing.T) {
	srv := serverMock()
	defer srv.Close()

	c := Certificate{
		CertificateRequest: "this is a CSR request",
	}

	s := Server{
		Endpoint: srv.URL,
		Username: "user",
		Password: "pass",
	}

	want := "-----BEGIN CERTIFICATE-----666-----END CERTIFICATE-----"
	got, err := GenerateCertFromCsr(s, c)
	if err != nil {
		t.Fatal(err)
	}

	if got.Result != want {
		t.Errorf("want %q, got %q", want, got.Result)
	}
}

func serverMock() *httptest.Server {
	handler := http.NewServeMux()
	handler.HandleFunc("/certsrv/certcarc.asp", certcarcMock)
	handler.HandleFunc("/certsrv/certfnsh.asp", certfnshMock)
	handler.HandleFunc("/certsrv/certnew.cer", certnewMock)

	srv := httptest.NewServer(handler)

	return srv
}

func certcarcMock(w http.ResponseWriter, r *http.Request) {
	w.Write([]byte("nRenewals=111;"))
}

func certfnshMock(w http.ResponseWriter, r *http.Request) {
	w.Write([]byte("certnew.cer?ReqID=666&Enc=b64"))
}

func certnewMock(w http.ResponseWriter, r *http.Request) {
	switch r.FormValue("ReqID") {
	case "CACert":
		w.Write([]byte("-----BEGIN CERTIFICATE-----CA-----END CERTIFICATE-----"))
	case "666":
		w.Write([]byte("-----BEGIN CERTIFICATE-----666-----END CERTIFICATE-----"))
	}
}