57 lines
1.6 KiB
Go
57 lines
1.6 KiB
Go
|
package autoconf
|
||
|
|
|
||
|
|
import (
|
||
|
|
"testing"
|
||
|
|
"time"
|
||
|
|
|
||
|
|
"github.com/hashicorp/consul/agent/connect"
|
||
|
|
"github.com/hashicorp/consul/agent/structs"
|
||
|
|
"github.com/stretchr/testify/require"
|
||
|
|
)
|
||
|
|
|
||
|
|
func newLeaf(t *testing.T, agentName, datacenter string, ca *structs.CARoot, idx uint64, expiration time.Duration) *structs.IssuedCert {
|
||
|
|
t.Helper()
|
||
|
|
|
||
|
|
pub, priv, err := connect.TestAgentLeaf(t, agentName, datacenter, ca, expiration)
|
||
|
|
require.NoError(t, err)
|
||
|
|
cert, err := connect.ParseCert(pub)
|
||
|
|
require.NoError(t, err)
|
||
|
|
|
||
|
|
spiffeID, err := connect.ParseCertURI(cert.URIs[0])
|
||
|
|
require.NoError(t, err)
|
||
|
|
|
||
|
|
agentID, ok := spiffeID.(*connect.SpiffeIDAgent)
|
||
|
|
require.True(t, ok, "certificate doesn't have an agent leaf cert URI")
|
||
|
|
|
||
|
|
return &structs.IssuedCert{
|
||
|
|
SerialNumber: cert.SerialNumber.String(),
|
||
|
|
CertPEM: pub,
|
||
|
|
PrivateKeyPEM: priv,
|
||
|
|
ValidAfter: cert.NotBefore,
|
||
|
|
ValidBefore: cert.NotAfter,
|
||
|
|
Agent: agentID.Agent,
|
||
|
|
AgentURI: agentID.URI().String(),
|
||
|
|
EnterpriseMeta: *structs.DefaultEnterpriseMeta(),
|
||
|
|
RaftIndex: structs.RaftIndex{
|
||
|
|
CreateIndex: idx,
|
||
|
|
ModifyIndex: idx,
|
||
|
|
},
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
func testCerts(t *testing.T, agentName, datacenter string) (*structs.CARoot, *structs.IndexedCARoots, *structs.IssuedCert) {
|
||
|
|
ca := connect.TestCA(t, nil)
|
||
|
|
ca.IntermediateCerts = make([]string, 0)
|
||
|
|
cert := newLeaf(t, agentName, datacenter, ca, 1, 10*time.Minute)
|
||
|
|
indexedRoots := structs.IndexedCARoots{
|
||
|
|
ActiveRootID: ca.ID,
|
||
|
|
TrustDomain: connect.TestClusterID,
|
||
|
|
Roots: []*structs.CARoot{
|
||
|
|
ca,
|
||
|
|
},
|
||
|
|
QueryMeta: structs.QueryMeta{Index: 1},
|
||
|
|
}
|
||
|
|
|
||
|
|
return ca, &indexedRoots, cert
|
||
|
|
}
|