pytests: wrapper for executing kresd python tests

diff --git a/tests/pytests/conftest.py b/tests/pytests/conftest.py
new file mode 100644 (file)
index 0000000..1f4a01a
--- /dev/null
+++ b/tests/pytests/conftest.py
@@ -0,0 +1,57 @@
+import random
+import socket
+
+import pytest
+
+from kresd import Kresd
+
+
+def is_port_free(port, ip=None, ip6=None):
+    def check(family, type_, dest):
+        sock = socket.socket(family, type_)
+        sock.bind(dest)
+        sock.close()
+
+    try:
+        if ip is not None:
+            check(socket.AF_INET, socket.SOCK_STREAM, (ip, port))
+            check(socket.AF_INET, socket.SOCK_DGRAM, (ip, port))
+        if ip6 is not None:
+            check(socket.AF_INET6, socket.SOCK_STREAM, (ip6, port, 0, 0))
+            check(socket.AF_INET6, socket.SOCK_DGRAM, (ip6, port, 0, 0))
+    except OSError as exc:
+        if exc.errno == 98:  # address alrady in use
+            return False
+        else:
+            raise
+    return True
+
+
+@pytest.fixture
+def kresd(tmpdir):
+    ip = '127.0.0.1'
+    ip6 = '::1'
+
+    def make_port():
+        for _ in range(10):  # max attempts
+            port = random.randint(1024, 65535)
+            if is_port_free(port, ip, ip6):
+                return port
+        raise RuntimeError("No available port found!")
+
+    port = make_port()
+    tls_port = make_port()
+    with Kresd(tmpdir, port, tls_port, ip, ip6) as kresd:
+        yield kresd
+        with open(kresd.logfile_path) as log:
+            print(log.read())  # display log for debugging purposes
+
+
+@pytest.fixture(params=[
+    'ip_tcp_socket',
+    'ip6_tcp_socket',
+    'ip_tls_socket',
+    'ip6_tls_socket',
+])
+def kresd_sock(request, kresd):
+    return getattr(kresd, request.param)()

diff --git a/tests/pytests/kresd.py b/tests/pytests/kresd.py
new file mode 100644 (file)
index 0000000..1dca985
--- /dev/null
+++ b/tests/pytests/kresd.py
@@ -0,0 +1,188 @@
+from contextlib import ContextDecorator
+import os
+import re
+import socket
+import ssl
+import subprocess
+import time
+
+import dns
+import jinja2
+import pytest
+
+import utils
+
+
+TEMPLATES_DIR = os.path.join(os.path.dirname(os.path.realpath(__file__)), 'templates')
+KRESD_CONF_TEMPLATE = 'kresd.conf.j2'
+
+
+def create_file_from_template(template_path, dest, data):
+    env = jinja2.Environment(
+        loader=jinja2.FileSystemLoader(TEMPLATES_DIR))
+    template = env.get_template(template_path)
+    rendered_template = template.render(**data)
+
+    with open(dest, "w") as fh:
+        fh.write(rendered_template)
+
+
+def make_ssl_context():
+    # set TLS v1.2+
+    context = ssl.SSLContext(ssl.PROTOCOL_TLS)
+    context.options |= ssl.OP_NO_SSLv2
+    context.options |= ssl.OP_NO_SSLv3
+    context.options |= ssl.OP_NO_TLSv1
+    context.options |= ssl.OP_NO_TLSv1_1
+
+    # turn off certificate verification
+    context.check_hostname = False
+    context.verify_mode = ssl.CERT_NONE
+
+    return context
+
+
+def ping_alive(sock):
+    msgid = utils.random_msgid()
+    buf = utils.get_msgbuf('localhost.', dns.rdatatype.A, msgid)
+    sock.sendall(buf)
+    answer = utils.receive_parse_answer(sock)
+    return answer.id == msgid
+
+
+class Kresd(ContextDecorator):
+    def __init__(self, workdir, port, tls_port, ip=None, ip6=None):
+        if ip is None and ip6 is None:
+            raise ValueError("IPv4 or IPv6 must be specified!")
+        self.workdir = str(workdir)
+        self.port = port
+        self.tls_port = tls_port
+        self.ip = ip
+        self.ip6 = ip6
+        self.process = None
+        self.sockets = []
+        self.logfile = None
+
+    @property
+    def config_path(self):
+        return str(os.path.join(self.workdir, 'kresd.conf'))
+
+    @property
+    def logfile_path(self):
+        return str(os.path.join(self.workdir, 'kresd.log'))
+
+    def __enter__(self):
+        create_file_from_template(KRESD_CONF_TEMPLATE, self.config_path, {'kresd': self})
+        self.logfile = open(self.logfile_path, 'w')
+        self.process = subprocess.Popen(
+            ['/usr/bin/env', 'kresd', '-c', self.config_path, self.workdir, '-f', '1'],
+            stdout=self.logfile, env=os.environ.copy())
+
+        try:
+            self._wait_for_tcp_port()  # wait for ports to be up and responding
+            if not self.all_ports_alive():
+                raise RuntimeError("Kresd not listening on all ports")
+            self.process.poll()
+            if self.process.returncode is not None:
+                raise RuntimeError("Kresd crashed with returncode: {}".format(
+                    self.process.returncode))
+        except RuntimeError:  # pylint: disable=try-except-raise
+            raise
+        finally:
+            # handle cases where we accidentally attempt to bind to same port
+            # as another test that runs in parallel
+            self.logfile.flush()
+            with open(self.logfile_path) as f:
+                for line in f:
+                    if re.search('Address already in use', line) is not None:
+                        pytest.skip(line)  # mark as skipped instead of failed/error
+
+        return self
+
+    def __exit__(self, exc_type, exc_value, traceback):
+        try:
+            if not self.all_ports_alive():
+                raise RuntimeError("Kresd crashed")
+        finally:
+            for sock in self.sockets:
+                sock.close()
+            self.process.terminate()
+            self.logfile.close()
+
+    def all_ports_alive(self):
+        alive = True
+        if self.ip:
+            alive &= ping_alive(self.ip_tcp_socket())
+            alive &= ping_alive(self.ip_tls_socket())
+        if self.ip6:
+            alive &= ping_alive(self.ip6_tcp_socket())
+            alive &= ping_alive(self.ip6_tls_socket())
+        return alive
+
+    def _wait_for_tcp_port(self, delay=0.1, max_attempts=20):
+        family = socket.AF_INET if self.ip else socket.AF_INET6
+        for _ in range(max_attempts):
+            try:
+                sock, dest = self.stream_socket(family, timeout=3)
+                sock.connect(dest)
+            except ConnectionRefusedError:
+                time.sleep(delay)
+                continue
+            else:
+                return ping_alive(sock)
+            finally:
+                sock.close()
+        raise RuntimeError("Kresd didn't start in time")
+
+    def socket_dest(self, family, tls=False):
+        port = self.tls_port if tls else self.port
+        if family == socket.AF_INET:
+            return self.ip, port
+        elif family == socket.AF_INET6:
+            return self.ip6, port, 0, 0
+        raise RuntimeError("Unsupported socket family: {}".format(family))
+
+    def stream_socket(self, family, tls=False, timeout=20):
+        sock = socket.socket(family, socket.SOCK_STREAM)
+        sock.settimeout(timeout)
+        sock.setsockopt(socket.IPPROTO_TCP, socket.TCP_NODELAY, 1)
+        dest = self.socket_dest(family, tls)
+        self.sockets.append(sock)
+        return sock, dest
+
+    def _tcp_socket(self, family):
+        sock, dest = self.stream_socket(family)
+        sock.connect(dest)
+        return sock
+
+    def ip_tcp_socket(self):
+        return self._tcp_socket(socket.AF_INET)
+
+    def ip6_tcp_socket(self):
+        return self._tcp_socket(socket.AF_INET6)
+
+    def _tls_socket(self, family):
+        sock, dest = self.stream_socket(family, tls=True)
+        ctx = make_ssl_context()
+        ssock = ctx.wrap_socket(sock)
+        try:
+            ssock.connect(dest)
+        except OSError as exc:
+            if exc.errno == 0:  # sometimes happens shortly after startup
+                return None
+        return ssock
+
+    def _tls_socket_with_retry(self, family):
+        sock = self._tls_socket(family)
+        if sock is None:
+            time.sleep(0.1)
+            sock = self._tls_socket(family)
+            if sock is None:
+                raise RuntimeError("Failed to create TLS socket!")
+        return sock
+
+    def ip_tls_socket(self):
+        return self._tls_socket_with_retry(socket.AF_INET)
+
+    def ip6_tls_socket(self):
+        return self._tls_socket_with_retry(socket.AF_INET6)

diff --git a/tests/pytests/templates/kresd.conf.j2 b/tests/pytests/templates/kresd.conf.j2
new file mode 100644 (file)
index 0000000..ab249f3
--- /dev/null
+++ b/tests/pytests/templates/kresd.conf.j2
@@ -0,0 +1,16 @@
+verbose(true)
+{% if kresd.ip %}
+net.listen('{{ kresd.ip }}', {{ kresd.port }})
+net.listen('{{ kresd.ip }}', {{ kresd.tls_port }}, {tls = true})
+{% endif %}
+{% if kresd.ip6 %}
+net.listen('{{ kresd.ip6 }}', {{ kresd.port }})
+net.listen('{{ kresd.ip6 }}', {{ kresd.tls_port }}, {tls = true})
+{% endif %}
+net.ipv4=true
+net.ipv6=false
+net.tcp_pipeline(65535)
+--net.tls("./certs/tt.cert.pem", "./certs/tt.key.pem")
+modules.unload("ta_signal_query")
+modules.unload("priming")
+modules.unload("detect_time_skew")