Files
NLnetLabs-krill/src/daemon/config.rs
T

855 lines
27 KiB
Rust

use std::env;
use std::fs::File;
use std::io;
use std::io::Read;
use std::net::{IpAddr, Ipv4Addr, SocketAddr};
use std::path::PathBuf;
use std::str::FromStr;
use clap::{App, Arg};
use log::{error, LevelFilter};
use serde::de;
use serde::{Deserialize, Deserializer};
#[cfg(unix)]
use syslog::Facility;
use rpki::uri;
use crate::commons::api::Token;
use crate::commons::util::ext_serde;
use crate::constants::*;
use crate::daemon::http::tls_keys;
lazy_static! {
pub static ref CONFIG: Config = {
match Config::create() {
Ok(config) => config,
Err(e) => {
eprintln!("{}", e);
::std::process::exit(1);
}
}
};
}
//------------ ConfigDefaults ------------------------------------------------
pub struct ConfigDefaults;
impl ConfigDefaults {
fn ip() -> IpAddr {
IpAddr::V4(Ipv4Addr::new(127, 0, 0, 1))
}
fn port() -> u16 {
3000
}
fn test_mode() -> bool {
env::var(KRILL_ENV_TEST).is_ok()
}
fn repo_enabled() -> bool {
env::var(KRILL_ENV_REPO_ENABLED).is_ok()
}
fn use_ta() -> bool {
env::var(KRILL_ENV_USE_TA).is_ok()
}
fn https_mode() -> HttpsMode {
HttpsMode::Generate
}
fn data_dir() -> PathBuf {
PathBuf::from("./data")
}
fn rsync_base() -> uri::Rsync {
uri::Rsync::from_str("rsync://localhost/repo/").unwrap()
}
fn service_uri() -> String {
"https://localhost:3000/".to_string()
}
fn log_level() -> LevelFilter {
match env::var(KRILL_ENV_LOG_LEVEL) {
Ok(level) => LevelFilter::from_str(&level).unwrap(),
_ => LevelFilter::Info,
}
}
fn log_type() -> LogType {
LogType::File
}
fn log_file() -> PathBuf {
PathBuf::from("./krill.log")
}
fn syslog_facility() -> String {
"daemon".to_string()
}
fn auth_token() -> Token {
match env::var(KRILL_ENV_AUTH_TOKEN) {
Ok(token) => Token::from(token),
Err(_) => {
eprintln!("You MUST provide a value for the master API key, either by setting \"auth_token\" in the config file, or by setting the KRILL_AUTH_TOKEN environment variable.");
::std::process::exit(1);
}
}
}
fn ca_refresh() -> u32 {
600
}
fn post_limit_api() -> u64 {
256 * 1024 // 256kB
}
fn post_limit_rfc8181() -> u64 {
32 * 1024 * 1024 // 32MB (roughly 8000 issued certificates, so a key roll for nicbr and 100% uptake should be okay)
}
fn rfc8181_log_dir() -> Option<PathBuf> {
if Self::test_mode() {
Some(PathBuf::from("./data/rfc8181_msgs"))
} else {
None
}
}
fn post_limit_rfc6492() -> u64 {
1024 * 1024 // 1MB (for ref. the NIC br cert is about 200kB)
}
fn rfc6492_log_dir() -> Option<PathBuf> {
if Self::test_mode() {
Some(PathBuf::from("./data/rfc6492_msgs"))
} else {
None
}
}
fn bgp_risdumps_enabled() -> bool {
true
}
fn bgp_risdumps_v4_uri() -> String {
"http://www.ris.ripe.net/dumps/riswhoisdump.IPv4.gz".to_string()
}
fn bgp_risdumps_v6_uri() -> String {
"http://www.ris.ripe.net/dumps/riswhoisdump.IPv6.gz".to_string()
}
fn roa_aggregate_threshold() -> usize {
100
}
fn roa_deaggregate_threshold() -> usize {
90
}
fn timing_publish_valid_days() -> i64 {
7
}
fn timing_publish_next_hours() -> i64 {
24
}
fn timing_publish_hours_before_next() -> i64 {
8
}
fn timing_child_certificate_valid_weeks() -> i64 {
52
}
fn timing_child_certificate_reissue_weeks_before() -> i64 {
4
}
fn timing_roa_valid_weeks() -> i64 {
52
}
fn timing_roa_reissue_weeks_before() -> i64 {
4
}
}
//------------ Config --------------------------------------------------------
/// Global configuration for the Krill Server.
///
/// This will parse a default config file ('./defaults/krill.conf') unless
/// another file is explicitly specified. Command line arguments may be used
/// to override any of the settings in the config file.
#[derive(Debug, Deserialize)]
pub struct Config {
#[serde(default = "ConfigDefaults::ip")]
ip: IpAddr,
#[serde(default = "ConfigDefaults::port")]
port: u16,
#[serde(default = "ConfigDefaults::test_mode")]
pub test_mode: bool,
#[serde(default = "ConfigDefaults::use_ta")]
use_ta: bool,
#[serde(default = "ConfigDefaults::repo_enabled")]
pub repo_enabled: bool,
#[serde(default = "ConfigDefaults::https_mode")]
https_mode: HttpsMode,
#[serde(default = "ConfigDefaults::data_dir")]
pub data_dir: PathBuf,
pub pid_file: Option<PathBuf>,
#[serde(default = "ConfigDefaults::rsync_base")]
pub rsync_base: uri::Rsync,
#[serde(default = "ConfigDefaults::service_uri")]
service_uri: String,
rrdp_service_uri: Option<String>,
#[serde(
default = "ConfigDefaults::log_level",
deserialize_with = "ext_serde::de_level_filter"
)]
log_level: LevelFilter,
#[serde(default = "ConfigDefaults::log_type")]
log_type: LogType,
#[serde(default = "ConfigDefaults::log_file")]
log_file: PathBuf,
#[serde(default = "ConfigDefaults::syslog_facility")]
syslog_facility: String,
#[serde(default = "ConfigDefaults::auth_token")]
pub auth_token: Token,
#[serde(default = "ConfigDefaults::ca_refresh")]
pub ca_refresh: u32,
#[serde(default = "ConfigDefaults::post_limit_api")]
pub post_limit_api: u64,
#[serde(default = "ConfigDefaults::post_limit_rfc8181")]
pub post_limit_rfc8181: u64,
#[serde(default = "ConfigDefaults::rfc8181_log_dir")]
pub rfc8181_log_dir: Option<PathBuf>,
#[serde(default = "ConfigDefaults::post_limit_rfc6492")]
pub post_limit_rfc6492: u64,
#[serde(default = "ConfigDefaults::rfc6492_log_dir")]
pub rfc6492_log_dir: Option<PathBuf>,
// RIS BGP
#[serde(default = "ConfigDefaults::bgp_risdumps_enabled")]
pub bgp_risdumps_enabled: bool,
#[serde(default = "ConfigDefaults::bgp_risdumps_v4_uri")]
pub bgp_risdumps_v4_uri: String,
#[serde(default = "ConfigDefaults::bgp_risdumps_v6_uri")]
pub bgp_risdumps_v6_uri: String,
// ROA Aggregation per ASN
#[serde(default = "ConfigDefaults::roa_aggregate_threshold")]
pub roa_aggregate_threshold: usize,
#[serde(default = "ConfigDefaults::roa_deaggregate_threshold")]
pub roa_deaggregate_threshold: usize,
// Timing settings for publication and certificate / ROA (re-)issuance
#[serde(default = "ConfigDefaults::timing_publish_valid_days")]
pub timing_publish_valid_days: i64,
#[serde(default = "ConfigDefaults::timing_publish_next_hours")]
pub timing_publish_next_hours: i64,
#[serde(default = "ConfigDefaults::timing_publish_hours_before_next")]
pub timing_publish_hours_before_next: i64,
#[serde(default = "ConfigDefaults::timing_child_certificate_valid_weeks")]
pub timing_child_certificate_valid_weeks: i64,
#[serde(default = "ConfigDefaults::timing_child_certificate_reissue_weeks_before")]
pub timing_child_certificate_reissue_weeks_before: i64,
#[serde(default = "ConfigDefaults::timing_roa_valid_weeks")]
pub timing_roa_valid_weeks: i64,
#[serde(default = "ConfigDefaults::timing_roa_reissue_weeks_before")]
pub timing_roa_reissue_weeks_before: i64,
}
/// # Accessors
impl Config {
pub fn socket_addr(&self) -> SocketAddr {
SocketAddr::new(self.ip, self.port)
}
pub fn test_ssl(&self) -> bool {
self.https_mode == HttpsMode::Generate
}
pub fn https_cert_file(&self) -> PathBuf {
let mut path = self.data_dir.clone();
path.push(tls_keys::HTTPS_SUB_DIR);
path.push(tls_keys::CERT_FILE);
path
}
pub fn https_key_file(&self) -> PathBuf {
let mut path = self.data_dir.clone();
path.push(tls_keys::HTTPS_SUB_DIR);
path.push(tls_keys::KEY_FILE);
path
}
pub fn service_uri(&self) -> uri::Https {
uri::Https::from_str(&self.service_uri).unwrap()
}
pub fn rrdp_service_uri(&self) -> uri::Https {
match &self.rrdp_service_uri {
None => uri::Https::from_string(format!("{}rrdp/", &self.service_uri)).unwrap(),
Some(uri) => uri::Https::from_str(uri).unwrap(),
}
}
pub fn ta_cert_uri(&self) -> uri::Https {
uri::Https::from_string(format!("{}ta/ta.cer", &self.service_uri)).unwrap()
}
pub fn use_ta(&self) -> bool {
self.use_ta
}
pub fn pid_file(&self) -> PathBuf {
match &self.pid_file {
None => {
let mut path = self.data_dir.clone();
path.push("krill.pid");
path
}
Some(file) => file.clone(),
}
}
pub fn republish_hours(&self) -> i64 {
if self.timing_publish_hours_before_next < self.timing_publish_next_hours {
self.timing_publish_next_hours - self.timing_publish_hours_before_next
} else {
0
}
}
}
/// # Create
impl Config {
fn test_config(data_dir: &PathBuf) -> Self {
let ip = ConfigDefaults::ip();
let port = ConfigDefaults::port();
let pid_file = None;
let test_mode = true;
let use_ta = true;
let repo_enabled = true;
let https_mode = HttpsMode::Generate;
let data_dir = data_dir.clone();
let rsync_base = ConfigDefaults::rsync_base();
let service_uri = ConfigDefaults::service_uri();
let rrdp_service_uri = Some("https://localhost:3000/test-rrdp/".to_string());
let log_level = LevelFilter::Trace;
let log_type = LogType::Stderr;
let mut log_file = data_dir.clone();
log_file.push("krill.log");
let syslog_facility = ConfigDefaults::syslog_facility();
let auth_token = Token::from("secret");
let ca_refresh = 3600;
let post_limit_api = ConfigDefaults::post_limit_api();
let post_limit_rfc8181 = ConfigDefaults::post_limit_rfc8181();
let rfc8181_log_dir = {
let mut dir = data_dir.clone();
dir.push("rfc8181");
Some(dir)
};
let post_limit_rfc6492 = ConfigDefaults::post_limit_rfc6492();
let rfc6492_log_dir = {
let mut dir = data_dir.clone();
dir.push("rfc6492");
Some(dir)
};
let bgp_risdumps_enabled = false;
let bgp_risdumps_v4_uri = ConfigDefaults::bgp_risdumps_v4_uri();
let bgp_risdumps_v6_uri = ConfigDefaults::bgp_risdumps_v6_uri();
let roa_aggregate_threshold = 3;
let roa_deaggregate_threshold = 2;
let timing_publish_valid_days = ConfigDefaults::timing_publish_valid_days();
let timing_publish_next_hours = ConfigDefaults::timing_publish_next_hours();
let timing_publish_hours_before_next = ConfigDefaults::timing_publish_hours_before_next();
let timing_child_certificate_valid_weeks = ConfigDefaults::timing_child_certificate_valid_weeks();
let timing_child_certificate_reissue_weeks_before =
ConfigDefaults::timing_child_certificate_reissue_weeks_before();
let timing_roa_valid_weeks = ConfigDefaults::timing_roa_valid_weeks();
let timing_roa_reissue_weeks_before = ConfigDefaults::timing_roa_reissue_weeks_before();
Config {
ip,
port,
pid_file,
test_mode,
use_ta,
repo_enabled,
https_mode,
data_dir,
rsync_base,
service_uri,
rrdp_service_uri,
log_level,
log_type,
log_file,
syslog_facility,
auth_token,
ca_refresh,
post_limit_api,
post_limit_rfc8181,
rfc8181_log_dir,
post_limit_rfc6492,
rfc6492_log_dir,
bgp_risdumps_enabled,
bgp_risdumps_v4_uri,
bgp_risdumps_v6_uri,
roa_aggregate_threshold,
roa_deaggregate_threshold,
timing_publish_valid_days,
timing_publish_next_hours,
timing_publish_hours_before_next,
timing_child_certificate_valid_weeks,
timing_child_certificate_reissue_weeks_before,
timing_roa_valid_weeks,
timing_roa_reissue_weeks_before,
}
}
pub fn test(data_dir: &PathBuf) -> Self {
let config = Self::test_config(data_dir);
config.init_logging().unwrap();
config.verify().unwrap();
config
}
pub fn pubd_test(data_dir: &PathBuf) -> Self {
let mut config = Self::test_config(data_dir);
config.port = 3001;
config.use_ta = false;
config.service_uri = "https://localhost:3001/".to_string();
config.rsync_base = uri::Rsync::from_str("rsync://remotehost/repo/").unwrap();
config
}
pub fn get_config_filename() -> String {
let matches = App::new(KRILL_SERVER_APP)
.version(KRILL_VERSION)
.arg(
Arg::with_name("config")
.short("c")
.long("config")
.value_name("FILE")
.help("Override the path to the config file (default: './defaults/krill.conf')")
.required(false),
)
.get_matches();
let config_file = matches.value_of("config").unwrap_or(KRILL_DEFAULT_CONFIG_FILE);
config_file.to_string()
}
/// Creates the config (at startup). Panics in case of issues.
pub fn create() -> Result<Self, ConfigError> {
if let Ok(test_dir) = env::var(KRILL_ENV_TEST_UNIT_DATA) {
let data_dir = PathBuf::from(test_dir);
Ok(Config::test(&data_dir))
} else {
let config_file = Self::get_config_filename();
let config = match Self::read_config(&config_file) {
Err(e) => {
if config_file == KRILL_DEFAULT_CONFIG_FILE {
Err(ConfigError::other(
"Cannot find config file. Please use --config to specify its location.",
))
} else {
Err(ConfigError::Other(format!(
"Error parsing config file: {}, error: {}",
config_file, e
)))
}
}
Ok(config) => {
config.init_logging()?;
info!("{} uses configuration file: {}", KRILL_SERVER_APP, config_file);
Ok(config)
}
}?;
config
.verify()
.map_err(|e| ConfigError::Other(format!("Error parsing config file: {}, error: {}", config_file, e)))?;
Ok(config)
}
}
pub fn verify(&self) -> Result<(), ConfigError> {
if self.port < 1024 {
return Err(ConfigError::other("Port number must be >1024"));
}
if self.test_mode {
// Set KRILL_TEST env var so that it can easily be accessed without the need to pass
// this setting down all over the application. Used by CertAuth in particular to allow
// the use of 'localhost' in Certificate Sign Requests in test mode only.
env::set_var(KRILL_ENV_TEST, "1");
}
if !self.test_mode
&& self.repo_enabled
&& self
.rsync_base
.to_string()
.to_lowercase()
.starts_with("rsync://localhost")
{
return Err(ConfigError::other(
"Cannot use localhost in rsync base unless test mode is used (KRILL_TEST)",
));
}
if !self.test_mode
&& self.repo_enabled
&& self
.rrdp_service_uri()
.to_string()
.to_lowercase()
.starts_with("https://localhost")
{
return Err(ConfigError::other(
"Cannot use localhost in RRDP service URI unless test mode is used (KRILL_TEST)",
));
}
if !self.rsync_base.to_string().ends_with('/') {
return Err(ConfigError::other("rsync base URI must end with '/'"));
}
if !self.service_uri.ends_with('/') {
return Err(ConfigError::other("service URI must end with '/'"));
} else {
uri::Https::from_str(&self.service_uri)
.map_err(|_| ConfigError::Other(format!("Invalid service uri: {}", self.service_uri)))?;
if self.service_uri.as_str().matches('/').count() != 3 {
return Err(ConfigError::other(
"Service URI MUST specify a host name only, e.g. https://rpki.example.com:3000/",
));
}
}
if !self.rrdp_service_uri().to_string().ends_with('/') {
return Err(ConfigError::other("service URI must end with '/'"));
}
if self.use_ta && !self.repo_enabled {
return Err(ConfigError::other("Cannot use embedded TA without embedded repository"));
}
if self.timing_publish_next_hours < 2 {
return Err(ConfigError::other("timing_publish_next_hours must be at least 2"));
}
if self.timing_publish_hours_before_next < 1 {
return Err(ConfigError::other(
"timing_publish_hours_before_next must be at least 1",
));
}
if self.timing_publish_hours_before_next >= self.timing_publish_next_hours {
return Err(ConfigError::other(
"timing_publish_hours_before_next must be smaller than timing_publish_hours",
));
}
if self.timing_publish_valid_days < 1 || self.timing_publish_valid_days < (self.timing_publish_next_hours / 24)
{
return Err(ConfigError::other("timing_publish_valid_days must be 1 or bigger, and must be at least as long as timing_publish_next_hours"));
}
if self.timing_child_certificate_valid_weeks < 2 {
return Err(ConfigError::other(
"timing_child_certificate_valid_weeks must be at least 2",
));
}
if self.timing_child_certificate_reissue_weeks_before < 1 {
return Err(ConfigError::other(
"timing_child_certificate_reissue_weeks_before must be at least 1",
));
}
if self.timing_child_certificate_reissue_weeks_before >= self.timing_child_certificate_valid_weeks {
return Err(ConfigError::other("timing_child_certificate_reissue_weeks_before must be smaller than timing_child_certificate_valid_weeks"));
}
if self.timing_roa_valid_weeks < 2 {
return Err(ConfigError::other("timing_roa_valid_weeks must be at least 2"));
}
if self.timing_roa_reissue_weeks_before < 1 {
return Err(ConfigError::other("timing_roa_reissue_weeks_before must be at least 1"));
}
if self.timing_roa_reissue_weeks_before >= self.timing_roa_valid_weeks {
return Err(ConfigError::other(
"timing_roa_reissue_weeks_before must be smaller than timing_roa_valid_week",
));
}
Ok(())
}
pub fn read_config(file: &str) -> Result<Self, ConfigError> {
let mut v = Vec::new();
let mut f = File::open(file)?;
f.read_to_end(&mut v)?;
let c: Config = toml::from_slice(v.as_slice())?;
Ok(c)
}
pub fn init_logging(&self) -> Result<(), ConfigError> {
match self.log_type {
LogType::File => self.file_logger(&self.log_file),
LogType::Stderr => self.stderr_logger(),
LogType::Syslog => {
let facility = Facility::from_str(&self.syslog_facility)
.map_err(|_| ConfigError::other("Invalid syslog_facility"))?;
self.syslog_logger(facility)
}
}
}
/// Creates a stderr logger.
fn stderr_logger(&self) -> Result<(), ConfigError> {
self.fern_logger()
.chain(io::stderr())
.apply()
.map_err(|e| ConfigError::Other(format!("Failed to init stderr logging: {}", e)))
}
/// Creates a file logger using the file provided by `path`.
fn file_logger(&self, path: &PathBuf) -> Result<(), ConfigError> {
let file = match fern::log_file(path) {
Ok(file) => file,
Err(err) => {
let error_string = format!("Failed to open log file '{}': {}", path.display(), err);
error!("{}", error_string.as_str());
return Err(ConfigError::Other(error_string));
}
};
self.fern_logger()
.chain(file)
.apply()
.map_err(|e| ConfigError::Other(format!("Failed to init file logging: {}", e)))
}
/// Creates a syslog logger and configures correctly.
#[cfg(unix)]
fn syslog_logger(&self, facility: syslog::Facility) -> Result<(), ConfigError> {
let process = env::current_exe()
.ok()
.and_then(|path| {
path.file_name()
.and_then(std::ffi::OsStr::to_str)
.map(ToString::to_string)
})
.unwrap_or_else(|| String::from("krill"));
let pid = unsafe { libc::getpid() };
let formatter = syslog::Formatter3164 {
facility,
hostname: None,
process,
pid,
};
let logger = syslog::unix(formatter.clone())
.or_else(|_| syslog::tcp(formatter.clone(), ("127.0.0.1", 601)))
.or_else(|_| syslog::udp(formatter, ("127.0.0.1", 0), ("127.0.0.1", 514)));
match logger {
Ok(logger) => self
.fern_logger()
.chain(logger)
.apply()
.map_err(|e| ConfigError::Other(format!("Failed to init syslog: {}", e))),
Err(err) => {
let msg = format!("Cannot connect to syslog: {}", err);
Err(ConfigError::Other(msg))
}
}
}
/// Creates and returns a fern logger with log level tweaks
fn fern_logger(&self) -> fern::Dispatch {
let framework_level = match self.log_level {
LevelFilter::Off => LevelFilter::Off,
LevelFilter::Error => LevelFilter::Error,
_ => LevelFilter::Warn, // more becomes too noisy
};
let krill_framework_level = match self.log_level {
LevelFilter::Off => LevelFilter::Off,
LevelFilter::Error => LevelFilter::Error,
LevelFilter::Warn => LevelFilter::Warn,
_ => LevelFilter::Debug, // more becomes too noisy
};
let show_target = self.log_level == LevelFilter::Trace || self.log_level == LevelFilter::Debug;
fern::Dispatch::new()
.format(move |out, message, record| {
if show_target {
out.finish(format_args!(
"{} [{}] [{}] {}",
chrono::Local::now().format("%Y-%m-%d %H:%M:%S"),
record.level(),
record.target(),
message
))
} else {
out.finish(format_args!(
"{} [{}] {}",
chrono::Local::now().format("%Y-%m-%d %H:%M:%S"),
record.level(),
message
))
}
})
.level(self.log_level)
.level_for("rustls", framework_level)
.level_for("hyper", framework_level)
.level_for("mio", framework_level)
.level_for("reqwest", framework_level)
.level_for("tokio_reactor", framework_level)
.level_for("want", framework_level)
.level_for("krill::commons::eventsourcing", krill_framework_level)
.level_for("krill::commons::util::file", krill_framework_level)
}
}
#[derive(Debug, Display)]
pub enum ConfigError {
#[display(fmt = "{}", _0)]
IoError(io::Error),
#[display(fmt = "{}", _0)]
TomlError(toml::de::Error),
#[display(fmt = "{}", _0)]
RpkiUriError(uri::Error),
#[display(fmt = "{}", _0)]
Other(String),
}
impl ConfigError {
pub fn other(s: &str) -> ConfigError {
ConfigError::Other(s.to_string())
}
}
impl From<io::Error> for ConfigError {
fn from(e: io::Error) -> Self {
ConfigError::IoError(e)
}
}
impl From<toml::de::Error> for ConfigError {
fn from(e: toml::de::Error) -> Self {
ConfigError::TomlError(e)
}
}
impl From<uri::Error> for ConfigError {
fn from(e: uri::Error) -> Self {
ConfigError::RpkiUriError(e)
}
}
//------------ LogType -------------------------------------------------------
/// The target to log to.
#[derive(Clone, Debug, Eq, PartialEq)]
pub enum LogType {
Stderr,
File,
Syslog,
}
impl<'de> Deserialize<'de> for LogType {
fn deserialize<D>(d: D) -> Result<LogType, D::Error>
where
D: Deserializer<'de>,
{
let string = String::deserialize(d)?;
match string.as_str() {
"stderr" => Ok(LogType::Stderr),
"file" => Ok(LogType::File),
"syslog" => Ok(LogType::Syslog),
_ => Err(de::Error::custom(format!(
"expected \"stderr\" or \"file\", found : \"{}\"",
string
))),
}
}
}
#[derive(Clone, Debug, Eq, PartialEq)]
pub enum HttpsMode {
Existing,
Generate,
}
impl<'de> Deserialize<'de> for HttpsMode {
fn deserialize<D>(d: D) -> Result<HttpsMode, D::Error>
where
D: Deserializer<'de>,
{
let string = String::deserialize(d)?;
match string.as_str() {
"existing" => Ok(HttpsMode::Existing),
"generate" => Ok(HttpsMode::Generate),
_ => Err(de::Error::custom(format!(
"expected \"existing\", or \"generate\", \
found: \"{}\"",
string
))),
}
}
}
//------------ Tests ---------------------------------------------------------
#[cfg(test)]
mod tests {
use super::*;
#[test]
fn should_parse_default_config_file() {
// Config for auth token is required! If there is nothing in the conf
// file, then an environment variable must be set.
use std::env;
env::set_var(KRILL_ENV_AUTH_TOKEN, "secret");
env::set_var(KRILL_ENV_TEST, "1");
let c = Config::read_config("./defaults/krill.conf").unwrap();
let expected_socket_addr: SocketAddr = ([127, 0, 0, 1], 3000).into();
assert_eq!(c.socket_addr(), expected_socket_addr);
}
}