mirror of https://github.com/docker/docs.git
270 lines
8.1 KiB
Go
270 lines
8.1 KiB
Go
package main
|
|
|
|
import (
|
|
"bytes"
|
|
"crypto/ecdsa"
|
|
"crypto/elliptic"
|
|
"crypto/rand"
|
|
"crypto/x509"
|
|
"encoding/hex"
|
|
"fmt"
|
|
"io/ioutil"
|
|
"reflect"
|
|
"sort"
|
|
"strings"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/docker/notary/client"
|
|
"github.com/docker/notary/passphrase"
|
|
"github.com/docker/notary/trustmanager"
|
|
"github.com/docker/notary/tuf/data"
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
// --- tests for pretty printing keys ---
|
|
|
|
func TestTruncateWithEllipsis(t *testing.T) {
|
|
digits := "1234567890"
|
|
// do not truncate
|
|
assert.Equal(t, truncateWithEllipsis(digits, 10, true), digits)
|
|
assert.Equal(t, truncateWithEllipsis(digits, 10, false), digits)
|
|
assert.Equal(t, truncateWithEllipsis(digits, 11, true), digits)
|
|
assert.Equal(t, truncateWithEllipsis(digits, 11, false), digits)
|
|
|
|
// left and right truncate
|
|
assert.Equal(t, truncateWithEllipsis(digits, 8, true), "...67890")
|
|
assert.Equal(t, truncateWithEllipsis(digits, 8, false), "12345...")
|
|
}
|
|
|
|
func TestKeyInfoSorter(t *testing.T) {
|
|
expected := []keyInfo{
|
|
{role: data.CanonicalRootRole, gun: "", keyID: "a", location: "i"},
|
|
{role: data.CanonicalRootRole, gun: "", keyID: "a", location: "j"},
|
|
{role: data.CanonicalRootRole, gun: "", keyID: "z", location: "z"},
|
|
{role: "a", gun: "a", keyID: "a", location: "y"},
|
|
{role: "b", gun: "a", keyID: "a", location: "y"},
|
|
{role: "b", gun: "a", keyID: "b", location: "y"},
|
|
{role: "b", gun: "a", keyID: "b", location: "z"},
|
|
{role: "a", gun: "b", keyID: "a", location: "z"},
|
|
}
|
|
jumbled := make([]keyInfo, len(expected))
|
|
// randomish indices
|
|
for j, e := range []int{3, 6, 1, 4, 0, 7, 5, 2} {
|
|
jumbled[j] = expected[e]
|
|
}
|
|
|
|
sort.Sort(keyInfoSorter(jumbled))
|
|
assert.True(t, reflect.DeepEqual(expected, jumbled),
|
|
fmt.Sprintf("Expected %v, Got %v", expected, jumbled))
|
|
}
|
|
|
|
type otherMemoryStore struct {
|
|
trustmanager.KeyMemoryStore
|
|
}
|
|
|
|
func (l *otherMemoryStore) Name() string {
|
|
return strings.Repeat("z", 70)
|
|
}
|
|
|
|
// If there are no keys in any of the key stores, a message that there are no
|
|
// signing keys should be displayed.
|
|
func TestPrettyPrintZeroKeys(t *testing.T) {
|
|
ret := passphrase.ConstantRetriever("pass")
|
|
emptyKeyStore := trustmanager.NewKeyMemoryStore(ret)
|
|
|
|
var b bytes.Buffer
|
|
prettyPrintKeys([]trustmanager.KeyStore{emptyKeyStore}, &b)
|
|
text, err := ioutil.ReadAll(&b)
|
|
assert.NoError(t, err)
|
|
|
|
lines := strings.Split(strings.TrimSpace(string(text)), "\n")
|
|
assert.Len(t, lines, 1)
|
|
assert.Equal(t, "No signing keys found.", lines[0])
|
|
}
|
|
|
|
// Given a list of key stores, the keys should be pretty-printed with their
|
|
// roles, locations, IDs, and guns first in sorted order in the key store
|
|
func TestPrettyPrintRootAndSigningKeys(t *testing.T) {
|
|
ret := passphrase.ConstantRetriever("pass")
|
|
keyStores := []trustmanager.KeyStore{
|
|
trustmanager.NewKeyMemoryStore(ret),
|
|
&otherMemoryStore{KeyMemoryStore: *trustmanager.NewKeyMemoryStore(ret)},
|
|
}
|
|
|
|
longNameShortened := "..." + strings.Repeat("z", 37)
|
|
|
|
// just use the same key for testing
|
|
key, err := trustmanager.GenerateED25519Key(rand.Reader)
|
|
assert.NoError(t, err)
|
|
|
|
root := data.CanonicalRootRole
|
|
|
|
// add keys to the key stores
|
|
err = keyStores[0].AddKey(key.ID(), root, key)
|
|
assert.NoError(t, err)
|
|
|
|
err = keyStores[1].AddKey(key.ID(), root, key)
|
|
assert.NoError(t, err)
|
|
|
|
err = keyStores[0].AddKey(strings.Repeat("a/", 30)+key.ID(), "targets", key)
|
|
assert.NoError(t, err)
|
|
|
|
err = keyStores[1].AddKey("short/gun/"+key.ID(), "snapshot", key)
|
|
assert.NoError(t, err)
|
|
|
|
expected := [][]string{
|
|
{root, key.ID(), keyStores[0].Name()},
|
|
{root, key.ID(), longNameShortened},
|
|
{"targets", "..." + strings.Repeat("/a", 11), key.ID(), keyStores[0].Name()},
|
|
{"snapshot", "short/gun", key.ID(), longNameShortened},
|
|
}
|
|
|
|
var b bytes.Buffer
|
|
prettyPrintKeys(keyStores, &b)
|
|
text, err := ioutil.ReadAll(&b)
|
|
assert.NoError(t, err)
|
|
|
|
lines := strings.Split(strings.TrimSpace(string(text)), "\n")
|
|
assert.Len(t, lines, len(expected)+2)
|
|
|
|
// starts with headers
|
|
assert.True(t, reflect.DeepEqual(strings.Fields(lines[0]),
|
|
[]string{"ROLE", "GUN", "KEY", "ID", "LOCATION"}))
|
|
assert.Equal(t, "----", lines[1][:4])
|
|
|
|
for i, line := range lines[2:] {
|
|
// we are purposely not putting spaces in test data so easier to split
|
|
splitted := strings.Fields(line)
|
|
for j, v := range splitted {
|
|
assert.Equal(t, expected[i][j], strings.TrimSpace(v))
|
|
}
|
|
}
|
|
}
|
|
|
|
// --- tests for pretty printing targets ---
|
|
|
|
// If there are no targets, no table is printed, only a line saying that there
|
|
// are no targets.
|
|
func TestPrettyPrintZeroTargets(t *testing.T) {
|
|
var b bytes.Buffer
|
|
prettyPrintTargets([]*client.Target{}, &b)
|
|
text, err := ioutil.ReadAll(&b)
|
|
assert.NoError(t, err)
|
|
|
|
lines := strings.Split(strings.TrimSpace(string(text)), "\n")
|
|
assert.Len(t, lines, 1)
|
|
assert.Equal(t, "No targets present in this repository.", lines[0])
|
|
|
|
}
|
|
|
|
// Targets are sorted by name, and the name, SHA256 digest, and size are
|
|
// printed.
|
|
func TestPrettyPrintSortedTargets(t *testing.T) {
|
|
hashes := make([][]byte, 3)
|
|
var err error
|
|
for i, letter := range []string{"a012", "b012", "c012"} {
|
|
hashes[i], err = hex.DecodeString(letter)
|
|
assert.NoError(t, err)
|
|
}
|
|
unsorted := []*client.Target{
|
|
{Name: "zebra", Hashes: data.Hashes{"sha256": hashes[0]}, Length: 8},
|
|
{Name: "abracadabra", Hashes: data.Hashes{"sha256": hashes[1]}, Length: 1},
|
|
{Name: "bee", Hashes: data.Hashes{"sha256": hashes[2]}, Length: 5},
|
|
}
|
|
|
|
var b bytes.Buffer
|
|
prettyPrintTargets(unsorted, &b)
|
|
text, err := ioutil.ReadAll(&b)
|
|
assert.NoError(t, err)
|
|
|
|
expected := [][]string{
|
|
{"abracadabra", "b012", "1"},
|
|
{"bee", "c012", "5"},
|
|
{"zebra", "a012", "8"},
|
|
}
|
|
|
|
lines := strings.Split(strings.TrimSpace(string(text)), "\n")
|
|
assert.Len(t, lines, len(expected)+2)
|
|
|
|
// starts with headers
|
|
assert.True(t, reflect.DeepEqual(strings.Fields(lines[0]), strings.Fields(
|
|
"NAME DIGEST SIZE (BYTES)")))
|
|
assert.Equal(t, "----", lines[1][:4])
|
|
|
|
for i, line := range lines[2:] {
|
|
splitted := strings.Fields(line)
|
|
assert.Equal(t, expected[i], splitted)
|
|
}
|
|
}
|
|
|
|
// --- tests for pretty printing certs ---
|
|
|
|
func generateCertificate(t *testing.T, gun string, expireInHours int64) *x509.Certificate {
|
|
template, err := trustmanager.NewCertificate(gun)
|
|
assert.NoError(t, err)
|
|
template.NotAfter = template.NotBefore.Add(
|
|
time.Hour * time.Duration(expireInHours))
|
|
|
|
ecdsaPrivKey, err := ecdsa.GenerateKey(elliptic.P256(), rand.Reader)
|
|
assert.NoError(t, err)
|
|
|
|
certBytes, err := x509.CreateCertificate(rand.Reader, template, template,
|
|
ecdsaPrivKey.Public(), ecdsaPrivKey)
|
|
assert.NoError(t, err)
|
|
|
|
cert, err := x509.ParseCertificate(certBytes)
|
|
assert.NoError(t, err)
|
|
return cert
|
|
}
|
|
|
|
// If there are no certs in the cert store store, a message that there are no
|
|
// certs should be displayed.
|
|
func TestPrettyPrintZeroCerts(t *testing.T) {
|
|
var b bytes.Buffer
|
|
prettyPrintCerts([]*x509.Certificate{}, &b)
|
|
text, err := ioutil.ReadAll(&b)
|
|
assert.NoError(t, err)
|
|
|
|
lines := strings.Split(strings.TrimSpace(string(text)), "\n")
|
|
assert.Len(t, lines, 1)
|
|
assert.Equal(t, "No trusted root certificates present.", lines[0])
|
|
}
|
|
|
|
// Certificates are pretty-printed in table form sorted by gun and then expiry
|
|
func TestPrettyPrintSortedCerts(t *testing.T) {
|
|
unsorted := []*x509.Certificate{
|
|
generateCertificate(t, "xylitol", 77), // 3 days 5 hours
|
|
generateCertificate(t, "xylitol", 12), // less than 1 day
|
|
generateCertificate(t, "cheesecake", 25), // a little more than 1 day
|
|
generateCertificate(t, "baklava", 239), // almost 10 days
|
|
}
|
|
|
|
var b bytes.Buffer
|
|
prettyPrintCerts(unsorted, &b)
|
|
text, err := ioutil.ReadAll(&b)
|
|
assert.NoError(t, err)
|
|
|
|
expected := [][]string{
|
|
{"baklava", "9 days"},
|
|
{"cheesecake", "1 day"},
|
|
{"xylitol", "< 1 day"},
|
|
{"xylitol", "3 days"},
|
|
}
|
|
|
|
lines := strings.Split(strings.TrimSpace(string(text)), "\n")
|
|
assert.Len(t, lines, len(expected)+2)
|
|
|
|
// starts with headers
|
|
assert.True(t, reflect.DeepEqual(strings.Fields(lines[0]), strings.Fields(
|
|
"GUN FINGERPRINT OF TRUSTED ROOT CERTIFICATE EXPIRES IN")))
|
|
assert.Equal(t, "----", lines[1][:4])
|
|
|
|
for i, line := range lines[2:] {
|
|
splitted := strings.Fields(line)
|
|
assert.True(t, len(splitted) >= 3)
|
|
assert.Equal(t, expected[i][0], splitted[0])
|
|
assert.Equal(t, expected[i][1], strings.Join(splitted[2:], " "))
|
|
}
|
|
}
|