mirror of
https://github.com/NLnetLabs/krill.git
synced 2026-09-20 16:37:43 +02:00
236 lines
11 KiB
Rust
236 lines
11 KiB
Rust
//! Perform functional tests on a Krill instance, using the API
|
|
//!
|
|
use std::fs;
|
|
use std::str::FromStr;
|
|
|
|
use rpki::{
|
|
ca::{idexchange::CaHandle, provisioning::ResourceClassName},
|
|
repository::resources::ResourceSet,
|
|
};
|
|
|
|
use krill::{
|
|
commons::api::{AspaCustomer, AspaDefinition, AspaDefinitionList, AspaProvidersUpdate, ObjectName},
|
|
test::*,
|
|
};
|
|
use rpki::repository::aspa::ProviderAs;
|
|
|
|
#[tokio::test]
|
|
pub async fn functional_aspa() {
|
|
let krill_dir = start_krill_with_default_test_config(true, false, false, false).await;
|
|
|
|
info("##################################################################");
|
|
info("# #");
|
|
info("# Test ASPA support. #");
|
|
info("# #");
|
|
info("# Uses the following lay-out: #");
|
|
info("# #");
|
|
info("# TA #");
|
|
info("# | #");
|
|
info("# testbed #");
|
|
info("# | #");
|
|
info("# CA #");
|
|
info("# #");
|
|
info("# #");
|
|
info("##################################################################");
|
|
info("");
|
|
|
|
let testbed = ca_handle("testbed");
|
|
let ca = ca_handle("CA");
|
|
let ca_res = resources("AS65000", "10.0.0.0/16", "");
|
|
|
|
info("##################################################################");
|
|
info("# #");
|
|
info("# Wait for the *testbed* CA to get its certificate, this means #");
|
|
info("# that all CAs which are set up as part of krill_start under the #");
|
|
info("# testbed config have been set up. #");
|
|
info("# #");
|
|
info("##################################################################");
|
|
info("");
|
|
assert!(ca_contains_resources(&testbed, &ResourceSet::all()).await);
|
|
|
|
{
|
|
info("##################################################################");
|
|
info("# #");
|
|
info("# Set up CA under testbed #");
|
|
info("# #");
|
|
info("##################################################################");
|
|
info("");
|
|
set_up_ca_with_repo(&ca).await;
|
|
set_up_ca_under_parent_with_resources(&ca, &testbed, &ca_res).await;
|
|
}
|
|
|
|
// short hand to expect ASPAs under CA
|
|
async fn expect_aspa_objects(ca: &CaHandle, aspas: &[AspaDefinition]) {
|
|
let rcn_0 = ResourceClassName::from(0);
|
|
|
|
let mut expected_files = expected_mft_and_crl(ca, &rcn_0).await;
|
|
|
|
for aspa in aspas {
|
|
expected_files.push(ObjectName::aspa(aspa.customer()).to_string());
|
|
}
|
|
|
|
assert!(will_publish_embedded("published ASPAs do not match expectations", ca, &expected_files).await);
|
|
}
|
|
|
|
{
|
|
info("##################################################################");
|
|
info("# #");
|
|
info("# Reject ASPA without providers #");
|
|
info("# #");
|
|
info("##################################################################");
|
|
info("");
|
|
|
|
let aspa_65000 = AspaDefinition::from_str("AS65000 => <none>").unwrap();
|
|
|
|
ca_aspas_add_expect_error(&ca, aspa_65000.clone()).await;
|
|
|
|
let expected_aspas = vec![];
|
|
expect_aspa_objects(&ca, &expected_aspas).await;
|
|
expect_aspa_definitions(&ca, AspaDefinitionList::new(expected_aspas)).await;
|
|
}
|
|
|
|
{
|
|
info("##################################################################");
|
|
info("# #");
|
|
info("# Add an ASPA under CA #");
|
|
info("# #");
|
|
info("##################################################################");
|
|
info("");
|
|
|
|
let aspa_65000 = AspaDefinition::from_str("AS65000 => AS65002, AS65003(v4), AS65005(v6)").unwrap();
|
|
|
|
ca_aspas_add(&ca, aspa_65000.clone()).await;
|
|
|
|
let aspas = vec![aspa_65000];
|
|
expect_aspa_objects(&ca, &aspas).await;
|
|
expect_aspa_definitions(&ca, AspaDefinitionList::new(aspas)).await;
|
|
}
|
|
|
|
{
|
|
info("##################################################################");
|
|
info("# #");
|
|
info("# Update an existing ASPA #");
|
|
info("# #");
|
|
info("##################################################################");
|
|
info("");
|
|
|
|
let customer = AspaCustomer::from_str("AS65000").unwrap();
|
|
let aspa_update = AspaProvidersUpdate::new(
|
|
vec![ProviderAs::from_str("AS65006").unwrap()],
|
|
vec![ProviderAs::from_str("AS65002").unwrap()],
|
|
);
|
|
|
|
ca_aspas_update(&ca, customer, aspa_update).await;
|
|
|
|
let updated_aspa = AspaDefinition::from_str("AS65000 => AS65003(v4), AS65005(v6), AS65006").unwrap();
|
|
let aspas = vec![updated_aspa.clone()];
|
|
|
|
expect_aspa_objects(&ca, &aspas).await;
|
|
expect_aspa_definitions(&ca, AspaDefinitionList::new(aspas)).await;
|
|
}
|
|
|
|
{
|
|
info("##################################################################");
|
|
info("# #");
|
|
info("# Update ASPA to have no providers #");
|
|
info("# #");
|
|
info("##################################################################");
|
|
|
|
let customer = AspaCustomer::from_str("AS65000").unwrap();
|
|
let aspa_update = AspaProvidersUpdate::new(
|
|
vec![],
|
|
vec![
|
|
ProviderAs::from_str("AS65003(v4)").unwrap(),
|
|
ProviderAs::from_str("AS65005(v6)").unwrap(),
|
|
ProviderAs::from_str("AS65006").unwrap(),
|
|
],
|
|
);
|
|
|
|
ca_aspas_update(&ca, customer, aspa_update).await;
|
|
|
|
// expect that the ASPA definition and object will be removed
|
|
// when all providers are removed from the existing definition.
|
|
let expected_aspas = vec![];
|
|
expect_aspa_objects(&ca, &expected_aspas).await;
|
|
expect_aspa_definitions(&ca, AspaDefinitionList::new(expected_aspas)).await;
|
|
}
|
|
|
|
{
|
|
info("##################################################################");
|
|
info("# #");
|
|
info("# Add provider to non-existing definition, this should create a #");
|
|
info("# a new AspaDefinition. This is useful for two reasons: #");
|
|
info("# 1) it allows for automation using just updates #");
|
|
info("# 2) because empty provider lists were accepted in Krill <0.13.0 #");
|
|
info("# we need the code to deal with removing all providers, which #");
|
|
info("# will remove the AspaConfig when replayed, and then adding #");
|
|
info("# some provider again. #");
|
|
info("# #");
|
|
info("##################################################################");
|
|
|
|
let customer = AspaCustomer::from_str("AS65000").unwrap();
|
|
let aspa_update = AspaProvidersUpdate::new(
|
|
vec![
|
|
ProviderAs::from_str("AS65003(v4)").unwrap(),
|
|
ProviderAs::from_str("AS65005(v6)").unwrap(),
|
|
ProviderAs::from_str("AS65006").unwrap(),
|
|
],
|
|
vec![],
|
|
);
|
|
|
|
ca_aspas_update(&ca, customer, aspa_update).await;
|
|
|
|
let updated_aspa = AspaDefinition::from_str("AS65000 => AS65003(v4), AS65005(v6), AS65006").unwrap();
|
|
let aspas = vec![updated_aspa.clone()];
|
|
|
|
expect_aspa_objects(&ca, &aspas).await;
|
|
expect_aspa_definitions(&ca, AspaDefinitionList::new(aspas)).await;
|
|
}
|
|
|
|
{
|
|
info("##################################################################");
|
|
info("# #");
|
|
info("# Adding an existing provider, and removing a non-existing #");
|
|
info("# provider to/from an AspaDefinition should be idempotent. #");
|
|
info("# #");
|
|
info("##################################################################");
|
|
|
|
let customer = AspaCustomer::from_str("AS65000").unwrap();
|
|
let aspa_update = AspaProvidersUpdate::new(
|
|
vec![
|
|
ProviderAs::from_str("AS65003(v6)").unwrap(), // should add v6 to existing v4
|
|
ProviderAs::from_str("AS65005(v6)").unwrap(), // adding, but was already present
|
|
],
|
|
vec![
|
|
ProviderAs::from_str("AS65006(v4)").unwrap(), // removing v4, should retain v6
|
|
ProviderAs::from_str("AS65007").unwrap(), // removing, but was not present
|
|
],
|
|
);
|
|
|
|
ca_aspas_update(&ca, customer, aspa_update).await;
|
|
|
|
let updated_aspa = AspaDefinition::from_str("AS65000 => AS65003, AS65005(v6), AS65006(v6)").unwrap();
|
|
let aspas = vec![updated_aspa.clone()];
|
|
|
|
expect_aspa_objects(&ca, &aspas).await;
|
|
expect_aspa_definitions(&ca, AspaDefinitionList::new(aspas)).await;
|
|
}
|
|
|
|
{
|
|
info("##################################################################");
|
|
info("# #");
|
|
info("# Delete an existing ASPA #");
|
|
info("# #");
|
|
info("##################################################################");
|
|
info("");
|
|
|
|
let customer = AspaCustomer::from_str("AS65000").unwrap();
|
|
ca_aspas_remove(&ca, customer).await;
|
|
|
|
expect_aspa_objects(&ca, &[]).await;
|
|
expect_aspa_definitions(&ca, AspaDefinitionList::new(vec![])).await;
|
|
}
|
|
|
|
let _ = fs::remove_dir_all(krill_dir);
|
|
}
|