testkit

Documentation

Index

• Constants
• func CheckCertificateChainOrder(t *testing.T, chain string)
• func CheckIfCertIsSigned(t *testing.T, clientCertStr, caCertStr string)
• func CheckIfChainContainsTwoCertificates(t *testing.T, certChain string)
• func CheckIfSubjectEquals(t *testing.T, expectedSubject, certificateStr string)
• func CreateCsr(strSubject string, keys *rsa.PrivateKey) (string, error)
• func CreateKey(t *testing.T) *rsa.PrivateKey
• func DecodeCertChain(t *testing.T, certificateChain string) []*x509.Certificate
• func GenerateKey() (*rsa.PrivateKey, error)
• func GetCertificateHash(t *testing.T, certificateStr string) string
• func ParseSubject(subject string) pkix.Name
• func WaitForFunction(interval time.Duration, timeout time.Duration, isReady func() bool) error
• type ConfigmapCleaner
  • func NewConfigMapCleaner(configListManager Manager, configMapName string) *ConfigmapCleaner
  • func (c *ConfigmapCleaner) CleanRevocationList(hash string) error
• type Manager
• type TestConfig
  • func ReadConfig() (TestConfig, error)

Constants

const (
	RSAKeySize = 2048
	RSAKey     = "rsa2048"
)

Functions

func CheckCertificateChainOrder

func CheckCertificateChainOrder(t *testing.T, chain string)

Certificate chain starts from leaf certificate and ends with a root certificate (https://tools.ietf.org/html/rfc5246#section-7.4.2). The correct certificate chain holds the following property: ith certificate in the chain is issued by (i+1)th certificate

func CheckIfCertIsSigned

func CheckIfCertIsSigned(t *testing.T, clientCertStr, caCertStr string)

func CheckIfChainContainsTwoCertificates

func CheckIfChainContainsTwoCertificates(t *testing.T, certChain string)

func CheckIfSubjectEquals

func CheckIfSubjectEquals(t *testing.T, expectedSubject, certificateStr string)

func CreateCsr

func CreateCsr(strSubject string, keys *rsa.PrivateKey) (string, error)

func CreateKey

func CreateKey(t *testing.T) *rsa.PrivateKey

func DecodeCertChain

func DecodeCertChain(t *testing.T, certificateChain string) []*x509.Certificate

func GenerateKey

func GenerateKey() (*rsa.PrivateKey, error)

func GetCertificateHash

func GetCertificateHash(t *testing.T, certificateStr string) string

func ParseSubject

func ParseSubject(subject string) pkix.Name

func WaitForFunction

func WaitForFunction(interval time.Duration, timeout time.Duration, isReady func() bool) error

Types

type ConfigmapCleaner

type ConfigmapCleaner struct {
	// contains filtered or unexported fields
}

func NewConfigMapCleaner

func NewConfigMapCleaner(configListManager Manager, configMapName string) *ConfigmapCleaner

func (*ConfigmapCleaner) CleanRevocationList

func (c *ConfigmapCleaner) CleanRevocationList(hash string) error

type Manager

type Manager interface {
	Get(name string, options metav1.GetOptions) (*v1.ConfigMap, error)
	Update(configmap *v1.ConfigMap) (*v1.ConfigMap, error)
}

type TestConfig

type TestConfig struct {
	ExternalConnectorURL         string `envconfig:"default=http://compass-connector:3000/graphql"`
	InternalConnectorURL         string `envconfig:"default=http://compass-connector:3001/graphql"`
	HydratorURL                  string `envconfig:"default=http://compass-connector:8080"`
	ConnectorURL                 string
	CertificateDataHeader        string `envconfig:"default=Certificate-Data"`
	RevocationConfigMapName      string `envconfig:"default=revocations-config"`
	RevocationConfigMapNamespace string `envconfig:"default=compass-system"`
}

func ReadConfig

func ReadConfig() (TestConfig, error)