]>
git.ipfire.org Git - thirdparty/pdns.git/blob - regression-tests.api/test_cryptokeys.py
6 from test_helper
import ApiTestCase
, is_auth
8 @unittest.skipIf(not is_auth(), "Not applicable")
9 class Cryptokeys(ApiTestCase
):
11 def __init__(self
, *args
, **kwds
):
12 super(Cryptokeys
, self
).__init
__(*args
, **kwds
)
14 self
.zone
= "cryptokeys.org"
17 super(Cryptokeys
,self
).tearDown()
18 self
.remove_zone_key(self
.keyid
)
20 # Adding a key to self.zone using the pdnsutil command
21 def add_zone_key(self
, status
='inactive'):
23 return subprocess
.check_output(["../pdns/pdnsutil", "--config-dir=.", "add-zone-key", self
.zone
, "ksk", status
], stderr
=open(os
.devnull
, 'wb'))
24 except subprocess
.CalledProcessError
as e
:
25 self
.fail("pdnsutil add-zone-key failed: "+e
.output
)
27 # Removes a key from self.zone by id using the pdnsutil command
28 def remove_zone_key(self
, key_id
):
30 subprocess
.check_output(["../pdns/pdnsutil", "--config-dir=.", "remove-zone-key", self
.zone
, str(key_id
)])
31 except subprocess
.CalledProcessError
as e
:
32 self
.fail("pdnsutil remove-zone-key failed: "+e
.output
)
34 # This method tests the DELETE api call.
35 def test_delete(self
):
36 self
.keyid
= self
.add_zone_key()
38 #checks the status code. I don't know how to test explicit that the backend fail removing a key.
39 r
= self
.session
.delete(self
.url("/api/v1/servers/localhost/zones/"+self
.zone
+"/cryptokeys/"+self
.keyid
))
40 self
.assertEquals(r
.status_code
, 200)
41 self
.assertEquals(r
.content
, "")
43 # Check that the key is actually deleted
45 out
= subprocess
.check_output(["../pdns/pdnsutil", "--config-dir=.", "list-keys", self
.zone
])
46 self
.assertNotIn(self
.zone
, out
)
47 except subprocess
.CalledProcessError
as e
:
48 self
.fail("pdnsutil list-keys failed: " + e
.output
)
50 def test_get_wrong_zone(self
):
51 self
.keyid
= self
.add_zone_key()
52 r
= self
.session
.get(self
.url("/api/v1/servers/localhost/zones/"+self
.zone
+"fail/cryptokeys/"+self
.keyid
))
53 self
.assertEquals(r
.status_code
, 404)
55 def test_delete_wrong_zone(self
):
56 self
.keyid
= self
.add_zone_key()
57 #checks for not covered zonename
58 r
= self
.session
.delete(self
.url("/api/v1/servers/localhost/zones/"+self
.zone
+"fail/cryptokeys/"+self
.keyid
))
59 self
.assertEquals(r
.status_code
, 404)
61 def test_delete_key_is_gone(self
):
62 self
.keyid
= self
.add_zone_key()
63 self
.remove_zone_key(self
.keyid
)
64 #checks for key is gone. Its ok even if no key had to be deleted. Or something went wrong with the backend.
65 r
= self
.session
.delete(self
.url("/api/v1/servers/localhost/zones/"+self
.zone
+"/cryptokeys/"+self
.keyid
))
66 self
.assertEquals(r
.status_code
, 200)
67 self
.assertEquals(r
.content
, "")
69 # Prepares the json object for Post and sends it to the server
70 def add_key(self
, content
='', type='ksk', active
='true' , algo
='', bits
=0):
83 payload
['bits'] = bits
85 payload
['content'] = content
86 r
= self
.session
.post(
87 self
.url("/api/v1/servers/localhost/zones/"+self
.zone
+"/cryptokeys"),
88 data
=json
.dumps(payload
),
89 headers
={'content-type': 'application/json'})
93 # Test POST for a positive result and delete the added key
94 def post_helper(self
,content
='', algo
='', bits
=0):
95 r
= self
.add_key(content
=content
, algo
=algo
, bits
=bits
)
96 self
.assert_success_json(r
)
97 self
.assertEquals(r
.status_code
, 201)
99 # Only a ksk added, so expected type is csk
100 self
.assertEquals(response
['keytype'], 'csk')
101 self
.keyid
= response
['id']
102 # Check if the key is actually added
104 out
= subprocess
.check_output(["../pdns/pdnsutil", "--config-dir=.", "list-keys", self
.zone
])
105 self
.assertIn(self
.zone
, out
)
106 except subprocess
.CalledProcessError
as e
:
107 self
.fail("pdnsutil list-keys failed: " + e
.output
)
109 # Test POST to add a key with default algorithm
113 # Test POST to add a key with specific algorithm number
114 def test_post_specific_number(self
):
115 self
.post_helper(algo
=10, bits
=512)
117 # Test POST to add a key with specific name and bits
118 def test_post_specific_name_bits(self
):
119 self
.post_helper(algo
="rsasha256", bits
=256)
121 # Test POST to add a key with specific name
122 def test_post_specific_name(self
):
123 self
.post_helper(algo
='ecdsa256')
125 # Test POST to add a private key from external resource
126 def test_post_content(self
):
127 self
.post_helper(content
="Private-key-format: v1.2\n"+
128 "Algorithm: 8 (RSASHA256)\n"+
129 "Modulus: 4GlYLGgDI7ohnP8SmEW8EBERbNRusDcg0VQda/EPVHU=\n"+
130 "PublicExponent: AQAB\n"+
131 "PrivateExponent: JBnuXF5zOtkjtSz3odV+Fk5UNUTTeCsiI16dkcM7TVU=\n"+
132 "Prime1: /w7TM4118RoSEvP8+dgnCw==\n"+
133 "Prime2: 4T2KhkYLa3w7rdK3Cb2ifw==\n"+
134 "Exponent1: 3aeKj9Ct4JuhfWsgPBhGxQ==\n"+
135 "Exponent2: tfh1OMPQKBdnU6iATjNR2w==\n"+
136 "Coefficient: eVrHe/kauqOewSKndIImrg==)\n")
138 def test_post_wrong_key_format(self
):
139 r
= self
.add_key(content
="trollololoooolll")
140 self
.assert_error_json(r
)
141 self
.assertEquals(r
.status_code
, 422)
142 self
.assertIn("Key could not be parsed. Make sure your key format is correct.",r
.json()['error'])
144 def test_post_wrong_keytype(self
):
145 r
= self
.add_key(type='sdfdhhgj')
146 self
.assert_error_json(r
)
147 self
.assertEquals(r
.status_code
, 422)
148 self
.assertIn("Invalid keytype",r
.json()['error'])
150 def test_post_wrong_bits_format(self
):
151 r
= self
.add_key(bits
='sdfdhhgj')
152 self
.assert_error_json(r
)
153 self
.assertEquals(r
.status_code
, 422)
154 self
.assertIn("'bits' must be a positive integer value",r
.json()['error'])
156 r
= self
.add_key(bits
='5.5')
157 self
.assert_error_json(r
)
158 self
.assertEquals(r
.status_code
, 422)
159 self
.assertIn("'bits' must be a positive integer value",r
.json()['error'])
161 r
= self
.add_key(bits
='-6')
162 self
.assert_error_json(r
)
163 self
.assertEquals(r
.status_code
, 422)
164 self
.assertIn("'bits' must be a positive integer value",r
.json()['error'])
166 def test_post_unsupported_algorithm(self
):
167 r
= self
.add_key(algo
='lkjhgf')
168 self
.assert_error_json(r
)
169 self
.assertEquals(r
.status_code
, 422)
170 self
.assertIn("Unknown algorithm:",r
.json()['error'])
172 def test_post_forgot_bits(self
):
173 r
= self
.add_key(algo
="rsasha256")
174 self
.assert_error_json(r
)
175 self
.assertEquals(r
.status_code
, 422)
176 self
.assertIn("key requires the size (in bits) to be passed", r
.json()['error'])
178 def test_post_wrong_bit_size(self
):
179 r
= self
.add_key(algo
=10, bits
=30)
180 self
.assert_error_json(r
)
181 self
.assertEquals(r
.status_code
,422)
182 self
.assertIn("The algorithm does not support the given bit size.", r
.json()['error'])
184 def test_post_can_not_guess_key_size(self
):
185 r
= self
.add_key(algo
=17)
186 self
.assert_error_json(r
)
187 self
.assertEquals(r
.status_code
,422)
188 self
.assertIn("Can not guess key size for algorithm", r
.json()['error'])
190 def test_put_activate_key(self
):
191 self
.keyid
= self
.add_zone_key()
196 r
= self
.session
.put(
197 self
.url("/api/v1/servers/localhost/zones/"+self
.zone
+"/cryptokeys/"+self
.keyid
),
198 data
=json
.dumps(payload
),
199 headers
={'content-type': 'application/json'})
200 self
.assertEquals(r
.status_code
, 204)
201 self
.assertEquals(r
.content
, "")
203 # check if key is activated
205 out
= subprocess
.check_output(["../pdns/pdnsutil", "--config-dir=.", "show-zone", self
.zone
])
206 self
.assertIn("Active", out
)
207 except subprocess
.CalledProcessError
as e
:
208 self
.fail("pdnsutil show-zone failed: " + e
.output
)
210 def test_put_deactivate_key(self
):
211 self
.keyid
= self
.add_zone_key(status
='active')
217 r
= self
.session
.put(
218 self
.url("/api/v1/servers/localhost/zones/"+self
.zone
+"/cryptokeys/"+self
.keyid
),
219 data
=json
.dumps(payload2
),
220 headers
={'content-type': 'application/json'})
221 self
.assertEquals(r
.status_code
, 204)
222 self
.assertEquals(r
.content
, "")
224 # check if key is deactivated
226 out
= subprocess
.check_output(["../pdns/pdnsutil", "--config-dir=.", "show-zone", self
.zone
])
227 self
.assertIn("Inactive", out
)
228 except subprocess
.CalledProcessError
as e
:
229 self
.fail("pdnsutil show-zone failed: " + e
.output
)
231 def test_put_deactivate_inactive_key(self
):
232 self
.keyid
= self
.add_zone_key()
239 r
= self
.session
.put(
240 self
.url("/api/v1/servers/localhost/zones/"+self
.zone
+"/cryptokeys/"+self
.keyid
),
241 data
=json
.dumps(payload
),
242 headers
={'content-type': 'application/json'})
243 self
.assertEquals(r
.status_code
, 204)
244 self
.assertEquals(r
.content
, "")
246 # check if key is still deactivated
248 out
= subprocess
.check_output(["../pdns/pdnsutil", "--config-dir=.", "show-zone", self
.zone
])
249 self
.assertIn("Inactive", out
)
250 except subprocess
.CalledProcessError
as e
:
251 self
.fail("pdnsutil show-zone failed: " + e
.output
)
253 def test_put_activate_active_key(self
):
254 self
.keyid
=self
.add_zone_key(status
='active')
260 r
= self
.session
.put(
261 self
.url("/api/v1/servers/localhost/zones/"+self
.zone
+"/cryptokeys/"+self
.keyid
),
262 data
=json
.dumps(payload2
),
263 headers
={'content-type': 'application/json'})
264 self
.assertEquals(r
.status_code
, 204)
265 self
.assertEquals(r
.content
, "")
267 # check if key is activated
269 out
= subprocess
.check_output(["../pdns/pdnsutil", "--config-dir=.", "show-zone", self
.zone
])
270 self
.assertIn("Active", out
)
271 except subprocess
.CalledProcessError
as e
:
272 self
.fail("pdnsutil show-zone failed: " + e
.output
)