mirror of
https://github.com/gravitational/teleport.git
synced 2026-09-24 16:17:11 +08:00
Ev Kontsevoy
6150216653
- Renamed "dir" format to "openssh" - Replaced self-made key fingerprinting function with a standard one - Changed fingerprinting from legacy md5 to sha256
112 lines
3.0 KiB
Go
112 lines
3.0 KiB
Go
/*
|
|
Copyright 2016 Gravitational, Inc.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
|
|
*/
|
|
|
|
package client
|
|
|
|
import (
|
|
"io/ioutil"
|
|
"os"
|
|
|
|
"github.com/gravitational/teleport/lib/sshutils"
|
|
|
|
"gopkg.in/check.v1"
|
|
)
|
|
|
|
type ClientTestSuite struct {
|
|
client *TeleportClient
|
|
}
|
|
|
|
var _ = check.Suite(&ClientTestSuite{})
|
|
|
|
func (s *ClientTestSuite) TestHelperFunctions(c *check.C) {
|
|
c.Assert(nodeName("one"), check.Equals, "one")
|
|
c.Assert(nodeName("one:22"), check.Equals, "one")
|
|
}
|
|
|
|
func (s *ClientTestSuite) SetUpSuite(c *check.C) {
|
|
// create the client:
|
|
client, err := NewClient(&Config{
|
|
ProxyHostPort: "localhost:3023",
|
|
KeysDir: c.MkDir(),
|
|
})
|
|
c.Assert(err, check.IsNil)
|
|
c.Assert(client, check.NotNil)
|
|
s.client = client
|
|
}
|
|
|
|
func (s *ClientTestSuite) TestNewSession(c *check.C) {
|
|
nc := &NodeClient{
|
|
Namespace: "blue",
|
|
}
|
|
|
|
// defaults:
|
|
ses, err := newSession(nc, nil, nil, nil, nil, nil)
|
|
c.Assert(err, check.IsNil)
|
|
c.Assert(ses, check.NotNil)
|
|
c.Assert(ses.NodeClient(), check.Equals, nc)
|
|
c.Assert(ses.namespace, check.Equals, nc.Namespace)
|
|
c.Assert(ses.env, check.NotNil)
|
|
c.Assert(ses.stderr, check.Equals, os.Stderr)
|
|
c.Assert(ses.stdout, check.Equals, os.Stdout)
|
|
c.Assert(ses.stdin, check.Equals, os.Stdin)
|
|
|
|
// pass environ map
|
|
env := map[string]string{
|
|
sshutils.SessionEnvVar: "session-id",
|
|
}
|
|
ses, err = newSession(nc, nil, env, nil, nil, nil)
|
|
c.Assert(err, check.IsNil)
|
|
c.Assert(ses, check.NotNil)
|
|
c.Assert(ses.env, check.DeepEquals, env)
|
|
// the session ID must be taken from tne environ map, if passed:
|
|
c.Assert(string(ses.id), check.Equals, "session-id")
|
|
}
|
|
|
|
func (s *ClientTestSuite) TestIdentityFileMaking(c *check.C) {
|
|
keyFilePath := c.MkDir() + "openssh"
|
|
username := "joeuser"
|
|
|
|
var key Key
|
|
key.Cert = []byte("cert")
|
|
key.Priv = []byte("priv")
|
|
key.Pub = []byte("pub")
|
|
|
|
// test OpenSSH-compatible identity file creation:
|
|
err := MakeIdentityFile(username, keyFilePath, &key, IdentityFormatOpenSSH)
|
|
c.Assert(err, check.IsNil)
|
|
|
|
// key is OK:
|
|
out, err := ioutil.ReadFile(keyFilePath)
|
|
c.Assert(err, check.IsNil)
|
|
c.Assert(string(out), check.Equals, "priv")
|
|
|
|
// cert is OK:
|
|
out, err = ioutil.ReadFile(keyFilePath + "-cert.pub")
|
|
c.Assert(err, check.IsNil)
|
|
c.Assert(string(out), check.Equals, "cert")
|
|
|
|
// test standard Teleport identity file creation:
|
|
keyFilePath = c.MkDir() + "file"
|
|
err = MakeIdentityFile(username, keyFilePath, &key, IdentityFormatFile)
|
|
c.Assert(err, check.IsNil)
|
|
|
|
// key+cert are OK:
|
|
out, err = ioutil.ReadFile(keyFilePath)
|
|
c.Assert(err, check.IsNil)
|
|
c.Assert(string(out), check.Equals, "privcert")
|
|
}
|