Added an Interface class to the CA to model puppetca's usage.

This class provides all of the semantics from puppetca,
and appears to entirely duplicate the behaviour of the existing
executable, with basically all of the code in a library
file, instead of the executable.

As such, I've deleted the test for the executable.  We should have
one, but it's not nearly as important.

1 files changed, 0 insertions, 115 deletions

diff --git a/test/executables/puppetca.rb b/test/executables/puppetca.rb
deleted file mode 100755
index cdc827079..000000000
--- a/test/executables/puppetca.rb
+++ /dev/null
@@ -1,115 +0,0 @@
-#!/usr/bin/env ruby
-
-require File.dirname(__FILE__) + '/../lib/puppettest'
-
-require 'puppettest'
-require 'mocha'
-
-class TestPuppetCA < Test::Unit::TestCase
-    include PuppetTest::ExeTest
-
-    def setup
-      super
-      Puppet::Util::SUIDManager.stubs(:asuser).yields
-    end
-    
-    def gen_cert(ca, host)
-        runca("-g #{host}")
-        ca.getclientcert(host)[0]
-    end
-    
-    def mkca
-        Puppet::Network::Handler.ca.new()
-    end
-    
-    def mkcert(hostname)
-        cert = nil
-        assert_nothing_raised {
-            cert = Puppet::SSLCertificates::Certificate.new(
-                :name => hostname
-            )
-            cert.mkcsr
-        }
-
-        return cert
-    end
-    
-    def runca(args)
-        debug = ""
-        if Puppet[:debug]
-            debug = "-d "
-        end
-        return %x{puppetca --user=#{Puppet[:user]} #{debug} --group=#{Puppet[:group]} --confdir=#{Puppet[:confdir]} --vardir=#{Puppet[:vardir]} #{args} 2>&1}
-    end
-
-    def test_signing
-        ca = mkca
-        Puppet[:autosign] = false
-        
-        %w{host.test.com Other.Testing.Com}.each do |host|
-            cert = mkcert(host)
-            resp = nil
-            assert_nothing_raised {
-                # We need to use a fake name so it doesn't think the cert is from
-                # itself.  Strangely, getcert stores the csr, because it's a server-side
-                # method, not client.
-                resp = ca.getcert(cert.csr.to_pem, host, "127.0.0.1")
-            }
-            assert_equal(["",""], resp)
-
-            output = nil
-            assert_nothing_raised {
-                output = runca("--list").chomp.split("\n").reject { |line| line =~ /warning:/ } # stupid ssl.rb
-            }
-            assert_equal($?,0)
-            assert_equal([host.downcase], output)
-            assert_nothing_raised {
-                output = runca("--sign -a").chomp.split("\n")
-            }
-
-
-            assert_equal($?,0)
-            assert_equal(["Signed #{host.downcase}"], output)
-
-            
-            signedfile = ca.ca.host2certfile(host)
-            assert(FileTest.exists?(signedfile), "cert does not exist")
-            assert(! FileTest.executable?(signedfile), "cert is executable")
-
-            uid = Puppet::Util.uid(Puppet[:user])
-
-            if Puppet::Util::SUIDManager.uid == 0
-                assert(! FileTest.owned?(signedfile), "cert is owned by root")
-            end
-            assert_nothing_raised {
-                output = runca("--list").chomp.split("\n")
-            }
-            assert_equal($?,0)
-            assert_equal(["No certificates to sign"], output)
-        end
-    end
-    
-    # This method takes a long time to run because of all of the external
-    # executable calls.
-    def test_revocation
-        ca = Puppet::SSLCertificates::CA.new()
-        host1 = gen_cert(ca, "host1.example.com")
-        host2 = gen_cert(ca, "host2.example.com")
-        host3 = gen_cert(ca, "host3.example.com")
-        runca("-r host1.example.com")
-        runca("-r #{host2.serial}")
-        runca("-r 0x#{host3.serial.to_s(16)}")
-        runca("-r 0xff")
-
-        # Recreate CA to force reading of CRL
-        ca = Puppet::SSLCertificates::CA.new()
-        crl = ca.crl
-        revoked = crl.revoked.collect { |r| r.serial }
-        exp = [host1.serial, host2.serial, host3.serial, 255]
-        assert_equal(exp, revoked)
-    end
-    
-    def test_case_insensitive_sign
-    end
-end
-