mirror of
https://github.com/valitydev/salt.git
synced 2024-11-08 17:33:54 +00:00
0abb9e1842
Fixes failing tests on Windows on Py3 nacl.py - The keys have to be strings - Removes redundant `to_bytes` code in the enc and dec functions - Removes unnecessary if statement test_nacl.py - The compare data needs to be bytes
153 lines
3.8 KiB
Python
153 lines
3.8 KiB
Python
# -*- coding: utf-8 -*-
|
|
'''
|
|
Tests for the salt-run command
|
|
'''
|
|
# Import Python libs
|
|
from __future__ import absolute_import, print_function, unicode_literals
|
|
|
|
# Import Salt Testing libs
|
|
from tests.support.case import ShellCase
|
|
from tests.support.unit import skipIf
|
|
|
|
try:
|
|
import libnacl.secret # pylint: disable=unused-import
|
|
import libnacl.sealed # pylint: disable=unused-import
|
|
HAS_LIBNACL = True
|
|
except ImportError:
|
|
HAS_LIBNACL = False
|
|
|
|
|
|
@skipIf(not HAS_LIBNACL, 'skipping test_nacl, libnacl is unavailable')
|
|
class NaclTest(ShellCase):
|
|
'''
|
|
Test the nacl runner
|
|
'''
|
|
def test_keygen(self):
|
|
'''
|
|
Test keygen
|
|
'''
|
|
# Store the data
|
|
ret = self.run_run_plus(
|
|
'nacl.keygen',
|
|
)
|
|
self.assertIn('pk', ret['return'])
|
|
self.assertIn('sk', ret['return'])
|
|
|
|
def test_enc(self):
|
|
'''
|
|
Test keygen
|
|
'''
|
|
# Store the data
|
|
ret = self.run_run_plus(
|
|
'nacl.keygen',
|
|
)
|
|
self.assertIn('pk', ret['return'])
|
|
self.assertIn('sk', ret['return'])
|
|
pk = ret['return']['pk']
|
|
sk = ret['return']['sk']
|
|
|
|
unencrypted_data = 'hello'
|
|
|
|
# Encrypt with pk
|
|
ret = self.run_run_plus(
|
|
'nacl.enc',
|
|
data=unencrypted_data,
|
|
pk=pk,
|
|
)
|
|
self.assertIn('return', ret)
|
|
|
|
def test_enc_dec(self):
|
|
'''
|
|
Store, list, fetch, then flush data
|
|
'''
|
|
# Store the data
|
|
ret = self.run_run_plus(
|
|
'nacl.keygen',
|
|
)
|
|
self.assertIn('pk', ret['return'])
|
|
self.assertIn('sk', ret['return'])
|
|
pk = ret['return']['pk']
|
|
sk = ret['return']['sk']
|
|
|
|
unencrypted_data = b'hello'
|
|
|
|
# Encrypt with pk
|
|
ret = self.run_run_plus(
|
|
'nacl.enc',
|
|
data=unencrypted_data,
|
|
pk=pk,
|
|
)
|
|
self.assertIn('return', ret)
|
|
encrypted_data = ret['return']
|
|
|
|
# Decrypt with sk
|
|
ret = self.run_run_plus(
|
|
'nacl.dec',
|
|
data=encrypted_data,
|
|
sk=sk,
|
|
)
|
|
self.assertIn('return', ret)
|
|
self.assertEqual(unencrypted_data, ret['return'])
|
|
|
|
def test_sealedbox_enc_dec(self):
|
|
'''
|
|
Generate keys, encrypt, then decrypt.
|
|
'''
|
|
# Store the data
|
|
ret = self.run_run_plus(
|
|
'nacl.keygen',
|
|
)
|
|
self.assertIn('pk', ret['return'])
|
|
self.assertIn('sk', ret['return'])
|
|
pk = ret['return']['pk']
|
|
sk = ret['return']['sk']
|
|
|
|
unencrypted_data = b'hello'
|
|
|
|
# Encrypt with pk
|
|
ret = self.run_run_plus(
|
|
'nacl.sealedbox_encrypt',
|
|
data=unencrypted_data,
|
|
pk=pk,
|
|
)
|
|
encrypted_data = ret['return']
|
|
|
|
# Decrypt with sk
|
|
ret = self.run_run_plus(
|
|
'nacl.sealedbox_decrypt',
|
|
data=encrypted_data,
|
|
sk=sk,
|
|
)
|
|
self.assertEqual(unencrypted_data, ret['return'])
|
|
|
|
def test_secretbox_enc_dec(self):
|
|
'''
|
|
Generate keys, encrypt, then decrypt.
|
|
'''
|
|
# Store the data
|
|
ret = self.run_run_plus(
|
|
'nacl.keygen',
|
|
)
|
|
self.assertIn('pk', ret['return'])
|
|
self.assertIn('sk', ret['return'])
|
|
pk = ret['return']['pk']
|
|
sk = ret['return']['sk']
|
|
|
|
unencrypted_data = b'hello'
|
|
|
|
# Encrypt with pk
|
|
ret = self.run_run_plus(
|
|
'nacl.secretbox_encrypt',
|
|
data=unencrypted_data,
|
|
sk=sk,
|
|
)
|
|
encrypted_data = ret['return']
|
|
|
|
# Decrypt with sk
|
|
ret = self.run_run_plus(
|
|
'nacl.secretbox_decrypt',
|
|
data=encrypted_data,
|
|
sk=sk,
|
|
)
|
|
self.assertEqual(unencrypted_data, ret['return'])
|