Tests: ACME configuration parsing test.

Author: bavshin-f5

t/acme_conf_issuer.t

@@ -0,0 +1,174 @@
+#!/usr/bin/perl
+
+# (C) Aleksei Bavshin
+# (C) Nginx, Inc.
+
+# Tests for ACME client: configuration parsing and validation.
+
+###############################################################################
+
+use warnings;
+use strict;
+
+use Test::More;
+
+use IO::Select;
+
+BEGIN { use FindBin; chdir($FindBin::Bin); }
+
+use lib 'lib';
+use Test::Nginx;
+
+###############################################################################
+
+select STDERR; $| = 1;
+select STDOUT; $| = 1;
+
+my $t = Test::Nginx->new()->has(qw/http socket_ssl/)->plan(8);
+
+use constant TEMPLATE_CONF => <<'EOF';
+
+%%TEST_GLOBALS%%
+
+daemon off;
+
+events {
+}
+
+http {
+    %%TEST_GLOBALS_HTTP%%
+
+    server {
+        listen       127.0.0.1:8080;
+        server_name  example.test;
+    }
+
+    server {
+        listen       127.0.0.1:8443 ssl;
+        server_name  example.test;
+
+        acme_certificate example.test
+                         issuer=example;
+
+        ssl_certificate $acme_certificate;
+        ssl_certificate_key $acme_certificate_key;
+    }
+
+    %%ACME_ISSUER%%
+}
+
+EOF
+
+###############################################################################
+
+is(check($t, <<'EOF' ), undef, 'valid');
+
+acme_shared_zone 1M;
+
+acme_issuer example {
+    uri https://localhost:%%PORT_9000%%/dir;
+    account_key ecdsa:256;
+    contact mailto:[email protected];
+    resolver 127.0.0.1:%%PORT_8980_UDP%%;
+    resolver_timeout 5s;
+    state_path %%TESTDIR%%;
+}
+
+EOF
+
+
+is(check($t, <<'EOF' ), undef, 'valid - resolver in server');
+
+acme_issuer example {
+    uri https://localhost:%%PORT_9000%%/dir;
+}
+
+resolver 127.0.0.1:%%PORT_8980_UDP%%;
+
+EOF
+
+
+like(check($t, <<'EOF' ), qr/\[emerg].*resolver is not/, 'no resolver');
+
+acme_issuer example {
+    uri https://localhost:%%PORT_9000%%/dir;
+}
+
+EOF
+
+like(check($t, <<'EOF' ), qr/\[emerg].*invalid zone size/, 'bad zone size');
+
+acme_shared_zone bad-value;
+
+acme_issuer example {
+    uri https://localhost:%%PORT_9000%%/dir;
+    resolver 127.0.0.1:%%PORT_8980_UDP%%;
+}
+
+EOF
+
+
+like(check($t, <<'EOF' ), qr/\[emerg].*bad account key/, 'bad key file');
+
+acme_issuer example {
+    uri https://localhost:%%PORT_9000%%/dir;
+    account_key no-such-file.key;
+    resolver 127.0.0.1:%%PORT_8980_UDP%%;
+}
+
+EOF
+
+
+like(check($t, <<'EOF' ), qr/\[emerg].*unsupported curve/, 'bad key curve');
+
+acme_issuer example {
+    uri https://localhost:%%PORT_9000%%/dir;
+    account_key ecdsa:234;
+    resolver 127.0.0.1:%%PORT_8980_UDP%%;
+}
+
+EOF
+
+
+like(check($t, <<'EOF' ), qr/\[emerg].*unsupported key size/, 'bad key size');
+
+acme_issuer example {
+    uri https://localhost:%%PORT_9000%%/dir;
+    account_key rsa:1024;
+    resolver 127.0.0.1:%%PORT_8980_UDP%%;
+}
+
+EOF
+
+
+like(check($t, ''), qr/\[emerg].*issuer "[^"]+" is missing/, 'no issuer');
+
+###############################################################################
+
+sub check {
+	my ($t, $issuer) = @_;
+
+	$t->write_file_expand('nginx.conf',
+		TEMPLATE_CONF =~ s/%%ACME_ISSUER%%/$issuer/r);
+
+	return try_run($t);
+}
+
+sub try_run {
+	my $t = shift;
+
+	# clean up after a successfull try
+
+	$t->stop();
+	unlink $t->testdir() . '/error.log';
+
+	eval {
+		open OLDERR, ">&", \*STDERR; close STDERR;
+		$t->run();
+		open STDERR, ">&", \*OLDERR;
+	};
+
+	return unless $@;
+
+	return $t->read_file('error.log');
+}