diff options
| -rw-r--r-- | lib/puppet/ssl/inventory.rb | 38 | ||||
| -rwxr-xr-x | spec/unit/ssl/inventory.rb | 136 |
2 files changed, 174 insertions, 0 deletions
diff --git a/lib/puppet/ssl/inventory.rb b/lib/puppet/ssl/inventory.rb new file mode 100644 index 000000000..038c1e4b8 --- /dev/null +++ b/lib/puppet/ssl/inventory.rb @@ -0,0 +1,38 @@ +require 'puppet/ssl' +require 'puppet/ssl/certificate' + +# Manage private and public keys as a pair. +class Puppet::SSL::Inventory + attr_reader :path + + # Add a certificate to our inventory. + def add(cert) + Puppet.settings.write(:cert_inventory, "a") do |f| + f.print format(cert) + end + end + + # Format our certificate for output. + def format(cert) + iso = '%Y-%m-%dT%H:%M:%S%Z' + return "0x%04x %s %s %s" % [cert.serial, cert.not_before.strftime(iso), cert.not_after.strftime(iso), cert.subject] + end + + def initialize + @path = Puppet[:cert_inventory] + + rebuild unless FileTest.exist?(@path) + end + + # Rebuild the inventory from scratch. This should happen if + # the file is entirely missing or if it's somehow corrupted. + def rebuild + Puppet.notice "Rebuilding inventory file" + + Puppet.settings.write(:cert_inventory) do |f| + f.print "# Inventory of signed certificates\n# SERIAL NOT_BEFORE NOT_AFTER SUBJECT\n" + end + + Puppet::SSL::Certificate.search("*").each { |cert| add(cert) } + end +end diff --git a/spec/unit/ssl/inventory.rb b/spec/unit/ssl/inventory.rb new file mode 100755 index 000000000..8b5038af5 --- /dev/null +++ b/spec/unit/ssl/inventory.rb @@ -0,0 +1,136 @@ +#!/usr/bin/env ruby + +require File.dirname(__FILE__) + '/../../spec_helper' + +require 'puppet/ssl/inventory' + +describe Puppet::SSL::Inventory do + before do + @class = Puppet::SSL::Inventory + end + + it "should use the :certinventory setting for the path to the inventory file" do + Puppet.settings.expects(:value).with(:cert_inventory).returns "/inven/tory" + + @class.any_instance.stubs(:rebuild) + + @class.new.path.should == "/inven/tory" + end + + describe "when initializing" do + it "should build the inventory file if one does not exist" do + Puppet.settings.stubs(:value).with(:cert_inventory).returns "/inven/tory" + + FileTest.expects(:exist?).with("/inven/tory").returns false + + @class.any_instance.expects(:rebuild) + + @class.new + end + end + + describe "when creating the inventory file" do + before do + Puppet.settings.stubs(:value).with(:cert_inventory).returns "/inven/tory" + Puppet.settings.stubs(:write) + FileTest.stubs(:exist?).with("/inven/tory").returns false + + Puppet::SSL::Certificate.stubs(:search).returns [] + end + + it "should log that it is building a new inventory file" do + Puppet.expects(:notice) + + @class.new + end + + it "should use the Settings to write to the file" do + Puppet.settings.expects(:write).with(:cert_inventory) + + @class.new + end + + it "should add a header to the file" do + fh = mock 'filehandle' + Puppet.settings.stubs(:write).yields fh + fh.expects(:print).with { |str| str =~ /^#/ } + + @class.new + end + + it "should add formatted information on all existing certificates" do + cert1 = mock 'cert1' + cert2 = mock 'cert2' + + Puppet::SSL::Certificate.expects(:search).with("*").returns [cert1, cert2] + + @class.any_instance.expects(:add).with(cert1) + @class.any_instance.expects(:add).with(cert2) + + @class.new + end + end + + describe "when managing an inventory" do + before do + Puppet.settings.stubs(:value).with(:cert_inventory).returns "/inven/tory" + + FileTest.stubs(:exist?).with("/inven/tory").returns true + + @inventory = @class.new + + @cert = mock 'cert' + end + + describe "and adding a certificate" do + it "should use the Settings to write to the file" do + Puppet.settings.expects(:write).with(:cert_inventory, "a") + + @inventory.add(@cert) + end + + it "should add formatted certificate information to the end of the file" do + fh = mock 'filehandle' + + Puppet.settings.stubs(:write).yields fh + + @inventory.expects(:format).with(@cert).returns "myformat" + + fh.expects(:print).with("myformat") + + @inventory.add(@cert) + end + end + + describe "and formatting a certificate" do + before do + @cert = stub 'cert', :not_before => Time.now, :not_after => Time.now, :subject => "mycert", :serial => 15 + end + + it "should print the serial number as a 4 digit hex number in the first field" do + @inventory.format(@cert).split[0].should == "0x000f" # 15 in hex + end + + it "should print the not_before date in '%Y-%m-%dT%H:%M:%S%Z' format in the second field" do + @cert.not_before.expects(:strftime).with('%Y-%m-%dT%H:%M:%S%Z').returns "before_time" + + @inventory.format(@cert).split[1].should == "before_time" + end + + it "should print the not_after date in '%Y-%m-%dT%H:%M:%S%Z' format in the third field" do + @cert.not_after.expects(:strftime).with('%Y-%m-%dT%H:%M:%S%Z').returns "after_time" + + @inventory.format(@cert).split[2].should == "after_time" + end + + it "should print the subject in the fourth field" do + @inventory.format(@cert).split[3].should == "mycert" + end + + it "should produce a line consisting of the serial number, start date, expiration date, and subject" do + # Just make sure our serial and subject bracket the lines. + @inventory.format(@cert).should =~ /^0x.+mycert$/ + end + end + end +end |