aboutsummaryrefslogtreecommitdiff
path: root/tests/rep-auth.test
diff options
context:
space:
mode:
Diffstat (limited to 'tests/rep-auth.test')
-rw-r--r--tests/rep-auth.test152
1 files changed, 152 insertions, 0 deletions
diff --git a/tests/rep-auth.test b/tests/rep-auth.test
index b2331aa..12815f9 100644
--- a/tests/rep-auth.test
+++ b/tests/rep-auth.test
@@ -43,6 +43,44 @@
cat <<<$cert_manifest >+$out/signed/repositories
$rc --key $key $out/signed &$out/signed/packages &$out/signed/signature
+ # Create the 'self-match' repository. Note that its certificate name is
+ # the '*build2.org' wildcard (matches build2.org and any single-level
+ # subdomain).
+ #
+ cp -r $src/unsigned $out/self-match
+
+ echo 'certificate: \' >+$out/self-match/repositories
+ cat <<<$src_base/auth/self-cert.pem >+$out/self-match/repositories
+ echo '\' >+$out/self-match/repositories
+
+ $rc --key $key $out/self-match &$out/self-match/packages \
+ &$out/self-match/signature
+
+ # Create the 'self-any-match' repository. Note that its certificate name is
+ # the '**build2.org' wildcard (matches build2.org and any subdomain).
+ #
+ cp -r $src/unsigned $out/self-any-match
+
+ echo 'certificate: \' >+$out/self-any-match/repositories
+ cat <<<$src_base/auth/self-any-cert.pem >+$out/self-any-match/repositories
+ echo '\' >+$out/self-any-match/repositories
+
+ $rc --key $key $out/self-any-match &$out/self-any-match/packages \
+ &$out/self-any-match/signature
+
+ # Create the 'subdomain-match' repository. Note that its certificate name is
+ # the '*.build2.org' wildcard (matches any single-level subdomain of
+ # build2.org).
+ #
+ cp -r $src/unsigned $out/subdomain-match
+
+ echo 'certificate: \' >+$out/subdomain-match/repositories
+ cat <<<$src_base/auth/subdomain-cert.pem >+$out/subdomain-match/repositories
+ echo '\' >+$out/subdomain-match/repositories
+
+ $rc --key $key $out/subdomain-match &$out/subdomain-match/packages \
+ &$out/subdomain-match/signature
+
# Create the 'name-mismatch' repository. Note that its certificate name
# mismatches the repository location.
#
@@ -278,6 +316,120 @@ sc = " " # Space character to append to here-document line when required.
$rep_info >'name:build2.org'
}
}
+
+ : subdomain-wildcard
+ :
+ {
+ rep_info += --auth all --trust-yes --cert-name
+
+ : self
+ :
+ {
+ : exact
+ :
+ $rep_info $rep/self-match >'name:*build2.org'
+
+ : subdomain
+ :
+ if ($remote != true)
+ {
+ : first-level
+ :
+ {
+ r = $canonicalize([dir_path] $~/pkg/1/a.build2.org/);
+ mkdir -p $r;
+ cp -r $rep/self-match $r;
+
+ $rep_info $r/self-match >'name:*build2.org'
+ }
+
+ : second-level
+ :
+ {
+ r = $canonicalize([dir_path] $~/pkg/1/b.a.build2.org/);
+ mkdir -p $r;
+ cp -r $rep/self-match $r;
+
+ $rep_info $r/self-match 2>>EOE != 0
+ error: certificate name mismatch for repository b.a.build2.org/self-match
+ info: certificate name is *build2.org
+ EOE
+ }
+ }
+ }
+
+ : self-any
+ :
+ {
+ : exact
+ :
+ $rep_info $rep/self-any-match >'name:**build2.org'
+
+ : subdomain
+ :
+ if ($remote != true)
+ {
+ : first-level
+ :
+ {
+ r = $canonicalize([dir_path] $~/pkg/1/a.build2.org/);
+ mkdir -p $r;
+ cp -r $rep/self-any-match $r;
+
+ $rep_info $r/self-any-match >'name:**build2.org'
+ }
+
+ : second-level
+ :
+ {
+ r = $canonicalize([dir_path] $~/pkg/1/b.a.build2.org/);
+ mkdir -p $r;
+ cp -r $rep/self-any-match $r;
+
+ $rep_info $r/self-any-match >'name:**build2.org'
+ }
+ }
+ }
+
+ : subdomain
+ :
+ {
+ : exact
+ :
+ $rep_info $rep/subdomain-match 2>>EOE != 0
+ error: certificate name mismatch for repository build2.org/rep-auth/subdomain-match
+ info: certificate name is *.build2.org
+ EOE
+
+ : subdomain
+ :
+ if ($remote != true)
+ {
+ : first-level
+ :
+ {
+ r = $canonicalize([dir_path] $~/pkg/1/a.build2.org/);
+ mkdir -p $r;
+ cp -r $rep/subdomain-match $r;
+
+ $rep_info $r/subdomain-match >'name:*.build2.org'
+ }
+
+ : second-level
+ :
+ {
+ r = $canonicalize([dir_path] $~/pkg/1/b.a.build2.org/);
+ mkdir -p $r;
+ cp -r $rep/subdomain-match $r;
+
+ $rep_info $r/subdomain-match 2>>EOE != 0
+ error: certificate name mismatch for repository b.a.build2.org/subdomain-match
+ info: certificate name is *.build2.org
+ EOE
+ }
+ }
+ }
+ }
}
: unsigned