object/cert_test.go

// Copyright 2023 The casbin Authors. All Rights Reserved.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//      http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

//go:build !skipCi
// +build !skipCi

package object

import (
	"fmt"
	"testing"

	"github.com/casbin/caswaf/casdoor"
	"github.com/casbin/caswaf/proxy"
	"github.com/casbin/caswaf/util"
)

func TestGetCertExpireTime(t *testing.T) {
	InitConfig()

	cert, err := getCert("admin", "casbin.com")
	if err != nil {
		panic(err)
	}

	expireTime, err := getCertExpireTime(cert.Certificate)
	if err != nil {
		panic(err)
	}

	println(expireTime)
}

func TestRenewCert(t *testing.T) {
	InitConfig()
	proxy.InitHttpClient()

	cert, err := GetCert("admin/cert")
	if err != nil {
		panic(err)
	}

	res, err := RenewCert(cert)
	if err != nil {
		panic(err)
	}

	fmt.Printf("Renewed cert: [%s] to [%s], res = %v\n", cert.Name, cert.ExpireTime, res)
}

func TestRenewAllCerts(t *testing.T) {
	InitConfig()
	proxy.InitHttpClient()

	certs, err := GetCerts("admin")
	if err != nil {
		panic(err)
	}

	filteredCerts := []*Cert{}
	for _, cert := range certs {
		if cert.Owner != "admin" || cert.Provider == "" {
			continue
		}

		if cert.Provider == "GoDaddy" {
			continue
		}

		var nearExpire bool
		nearExpire, err = cert.isCertNearExpire()
		if err != nil {
			panic(err)
		}
		if !nearExpire {
			continue
		}

		filteredCerts = append(filteredCerts, cert)
	}

	for i, cert := range filteredCerts {
		if cert.Owner != "admin" || cert.Provider == "" {
			continue
		}

		if cert.Provider == "GoDaddy" {
			continue
		}

		var nearExpire bool
		nearExpire, err = cert.isCertNearExpire()
		if err != nil {
			panic(err)
		}
		if !nearExpire {
			continue
		}

		var res bool
		res, err = RenewCert(cert)
		if err != nil {
			panic(err)
		}

		fmt.Printf("[%d/%d] Renewed cert: [%s] to [%s], res = %v\n", i+1, len(filteredCerts), cert.Name, cert.ExpireTime, res)
	}
}

func TestApplyAllCerts(t *testing.T) {
	InitConfig()

	baseDir := "F:/github_repos/nginx/conf/ssl"
	certs, err := GetCerts("admin")
	if err != nil {
		panic(err)
	}

	for _, cert := range certs {
		if cert.Certificate == "" || cert.PrivateKey == "" {
			continue
		}

		util.WriteStringToPath(cert.Certificate, fmt.Sprintf("%s/%s.pem", baseDir, cert.Name))
		util.WriteStringToPath(cert.PrivateKey, fmt.Sprintf("%s/%s.key", baseDir, cert.Name))
	}
}

func TestCheckCerts(t *testing.T) {
	InitConfig()
	casdoor.InitCasdoorConfig()
	proxy.InitHttpClient()

	var err error
	certMap, err = getCertMap()
	if err != nil {
		panic(err)
	}

	site, err := getSite("admin", "test-site")
	if err != nil {
		panic(err)
	}
	if site == nil {
		panic("site should not be nil")
	}

	err = site.checkCerts()
	if err != nil {
		panic(err)
	}
}