aboutsummaryrefslogtreecommitdiffstats
path: root/cmd/cert_test.go
blob: 4242d8915b3ed128acd26d1c8009b4e397a1495e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
// Copyright 2025 The Gitea Authors. All rights reserved.
// SPDX-License-Identifier: MIT

package cmd

import (
	"path/filepath"
	"testing"

	"github.com/stretchr/testify/assert"
	"github.com/stretchr/testify/require"
)

func TestCertCommand(t *testing.T) {
	cases := []struct {
		name string
		args []string
	}{
		{
			name: "RSA cert generation",
			args: []string{
				"cert-test",
				"--host", "localhost",
				"--rsa-bits", "2048",
				"--duration", "1h",
				"--start-date", "Jan 1 00:00:00 2024",
			},
		},
		{
			name: "ECDSA cert generation",
			args: []string{
				"cert-test",
				"--host", "localhost",
				"--ecdsa-curve", "P256",
				"--duration", "1h",
				"--start-date", "Jan 1 00:00:00 2024",
			},
		},
		{
			name: "mixed host, certificate authority",
			args: []string{
				"cert-test",
				"--host", "localhost,127.0.0.1",
				"--duration", "1h",
				"--start-date", "Jan 1 00:00:00 2024",
			},
		},
	}

	for _, c := range cases {
		t.Run(c.name, func(t *testing.T) {
			app := cmdCert()
			tempDir := t.TempDir()

			certFile := filepath.Join(tempDir, "cert.pem")
			keyFile := filepath.Join(tempDir, "key.pem")

			err := app.Run(t.Context(), append(c.args, "--out", certFile, "--keyout", keyFile))
			require.NoError(t, err)

			assert.FileExists(t, certFile)
			assert.FileExists(t, keyFile)
		})
	}
}

func TestCertCommandFailures(t *testing.T) {
	cases := []struct {
		name   string
		args   []string
		errMsg string
	}{
		{
			name: "Start Date Parsing failure",
			args: []string{
				"cert-test",
				"--host", "localhost",
				"--start-date", "invalid-date",
			},
			errMsg: "parsing time",
		},
		{
			name: "Unknown curve",
			args: []string{
				"cert-test",
				"--host", "localhost",
				"--ecdsa-curve", "invalid-curve",
			},
			errMsg: "unrecognized elliptic curve",
		},
		{
			name: "Key generation failure",
			args: []string{
				"cert-test",
				"--host", "localhost",
				"--rsa-bits", "invalid-bits",
			},
		},
		{
			name: "Missing parameters",
			args: []string{
				"cert-test",
			},
			errMsg: `"host" not set`,
		},
	}
	for _, c := range cases {
		t.Run(c.name, func(t *testing.T) {
			app := cmdCert()
			tempDir := t.TempDir()

			certFile := filepath.Join(tempDir, "cert.pem")
			keyFile := filepath.Join(tempDir, "key.pem")
			err := app.Run(t.Context(), append(c.args, "--out", certFile, "--keyout", keyFile))
			require.Error(t, err)
			if c.errMsg != "" {
				assert.ErrorContains(t, err, c.errMsg)
			}
			assert.NoFileExists(t, certFile)
			assert.NoFileExists(t, keyFile)
		})
	}
}