jschoubben
f8afaefba0
mesh/delivery closed: a newer head of the same pull request
mesh/check failed: ace: novox/mesh-catalog#505: checks/placement/go.mod names mesh-sdk 91413de33516, which is neither on mesh-sdk's trunk nor the grou…
33 lines
1.1 KiB
Go
33 lines
1.1 KiB
Go
package main
|
|
|
|
import (
|
|
"encoding/json"
|
|
"os"
|
|
"path/filepath"
|
|
"testing"
|
|
|
|
"git.novox.be/novox/mesh-sdk/go/delivery"
|
|
)
|
|
|
|
// Issue 1126 (ADR 0555 §3): the mesh's own certificate a composition carries is kept for the machine's record, and the
|
|
// record's keys read it; a composition carrying none changes nothing.
|
|
func TestTheAppliedAuthorityIsKeptForTheRecord(t *testing.T) {
|
|
state := filepath.Join(t.TempDir(), "state", "state.json")
|
|
res := func(id, content string) json.RawMessage {
|
|
raw, _ := json.Marshal(map[string]any{"id": id, "type": "file", "path": "/etc/x", "content": content})
|
|
return raw
|
|
}
|
|
if err := keepAuthority(state, delivery.Composed{Resources: []json.RawMessage{res("web.conf", "x")}}); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if _, err := os.Stat(authorityPath(state)); !os.IsNotExist(err) {
|
|
t.Fatalf("a composition with no authority kept one: %v", err)
|
|
}
|
|
if err := keepAuthority(state, delivery.Composed{Resources: []json.RawMessage{res("ca-trust.certificate-authority", "CA-1")}}); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if got := recordKeys(state)(); got.Authority != "CA-1" {
|
|
t.Errorf("the record's keys read the authority %q", got.Authority)
|
|
}
|
|
}
|