1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
|
import os
from unittest import mock
from cloudinit.config import cc_apt_configure
from cloudinit import subp
from cloudinit import util
TEST_KEY_HUMAN = '''
/etc/apt/cloud-init.gpg.d/my_key.gpg
--------------------------------------------
pub rsa4096 2021-10-22 [SC]
3A3E F34D FDED B3B7 F3FD F603 F83F 7712 9A5E BD85
uid [ unknown] Brett Holman <brett.holman@canonical.com>
sub rsa4096 2021-10-22 [A]
sub rsa4096 2021-10-22 [E]
'''
TEST_KEY_MACHINE = '''
tru::1:1635129362:0:3:1:5
pub:-:4096:1:F83F77129A5EBD85:1634912922:::-:::scESCA::::::23::0:
fpr:::::::::3A3EF34DFDEDB3B7F3FDF603F83F77129A5EBD85:
uid:-::::1634912922::64F1F1D6FA96316752D635D7C6406C52C40713C7::Brett Holman \
<brett.holman@canonical.com>::::::::::0:
sub:-:4096:1:544B39C9A9141F04:1634912922::::::a::::::23:
fpr:::::::::8BD901490D6EC986D03D6F0D544B39C9A9141F04:
sub:-:4096:1:F45D9443F0A87092:1634912922::::::e::::::23:
fpr:::::::::8CCCB332317324F030A45B19F45D9443F0A87092:
'''
TEST_KEY_FINGERPRINT_HUMAN = \
'3A3E F34D FDED B3B7 F3FD F603 F83F 7712 9A5E BD85'
TEST_KEY_FINGERPRINT_MACHINE = \
'3A3EF34DFDEDB3B7F3FDF603F83F77129A5EBD85'
class TestAptKey:
"""TestAptKey
Class to test apt-key commands
"""
@mock.patch.object(subp, 'subp', return_value=('fakekey', ''))
@mock.patch.object(util, 'write_file')
def _apt_key_add_success_helper(self, directory, *args, hardened=False):
file = cc_apt_configure.apt_key(
'add',
output_file='my-key',
data='fakekey',
hardened=hardened)
assert file == directory + '/my-key.gpg'
def test_apt_key_add_success(self):
"""Verify the correct directory path gets returned for unhardened case
"""
self._apt_key_add_success_helper('/etc/apt/trusted.gpg.d')
def test_apt_key_add_success_hardened(self):
"""Verify the correct directory path gets returned for hardened case
"""
self._apt_key_add_success_helper(
'/etc/apt/cloud-init.gpg.d',
hardened=True)
def test_apt_key_add_fail_no_file_name(self):
"""Verify that null filename gets handled correctly
"""
file = cc_apt_configure.apt_key(
'add',
output_file=None,
data='')
assert '/dev/null' == file
def _apt_key_fail_helper(self):
file = cc_apt_configure.apt_key(
'add',
output_file='my-key',
data='fakekey')
assert file == '/dev/null'
@mock.patch.object(subp, 'subp', side_effect=subp.ProcessExecutionError)
def test_apt_key_add_fail_no_file_name_subproc(self, *args):
"""Verify that bad key value gets handled correctly
"""
self._apt_key_fail_helper()
@mock.patch.object(
subp, 'subp', side_effect=UnicodeDecodeError('test', b'', 1, 1, ''))
def test_apt_key_add_fail_no_file_name_unicode(self, *args):
"""Verify that bad key encoding gets handled correctly
"""
self._apt_key_fail_helper()
def _apt_key_list_success_helper(self, finger, key, human_output=True):
@mock.patch.object(os, 'listdir', return_value=('/fake/dir/key.gpg',))
@mock.patch.object(subp, 'subp', return_value=(key, ''))
def mocked_list(*a):
keys = cc_apt_configure.apt_key('list', human_output)
assert finger in keys
mocked_list()
def test_apt_key_list_success_human(self):
"""Verify expected key output, human
"""
self._apt_key_list_success_helper(
TEST_KEY_FINGERPRINT_HUMAN,
TEST_KEY_HUMAN)
def test_apt_key_list_success_machine(self):
"""Verify expected key output, machine
"""
self._apt_key_list_success_helper(
TEST_KEY_FINGERPRINT_MACHINE,
TEST_KEY_MACHINE, human_output=False)
@mock.patch.object(os, 'listdir', return_value=())
@mock.patch.object(subp, 'subp', return_value=('', ''))
def test_apt_key_list_fail_no_keys(self, *args):
"""Ensure falsy output for no keys
"""
keys = cc_apt_configure.apt_key('list')
assert not keys
@mock.patch.object(os, 'listdir', return_value=('file_not_gpg_key.txt'))
@mock.patch.object(subp, 'subp', return_value=('', ''))
def test_apt_key_list_fail_no_keys_file(self, *args):
"""Ensure non-gpg file is not returned.
apt-key used file extensions for this, so we do too
"""
assert not cc_apt_configure.apt_key('list')
@mock.patch.object(subp, 'subp', side_effect=subp.ProcessExecutionError)
@mock.patch.object(os, 'listdir', return_value=('bad_gpg_key.gpg'))
def test_apt_key_list_fail_bad_key_file(self, *args):
"""Ensure bad gpg key doesn't throw exeption.
"""
assert not cc_apt_configure.apt_key('list')
|
