303 lines
10 KiB
Python
303 lines
10 KiB
Python
# coding= utf-8
|
|
|
|
# Copyright (c) 2015 Rackspace, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
|
# implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
import ddt
|
|
import random
|
|
|
|
from tests.api import base
|
|
|
|
|
|
@ddt.ddt
|
|
class TestSanCertService(base.TestBase):
|
|
|
|
def setUp(self):
|
|
super(TestSanCertService, self).setUp()
|
|
if self.test_config.run_operator_tests is False:
|
|
self.skipTest(
|
|
'Test Operator Functions is disabled in configuration')
|
|
|
|
self.service_name = self.generate_random_string(prefix='API-Test-')
|
|
self.flavor_id = self.test_flavor
|
|
|
|
domain = self.generate_random_string(
|
|
prefix='api-test-domain') + '.com'
|
|
self.domain_list = [
|
|
{"domain": domain, "protocol": "https", "certificate": "san"}
|
|
]
|
|
|
|
origin = self.generate_random_string(
|
|
prefix='api-test-origin') + u'.com'
|
|
self.origin_list = [
|
|
{
|
|
u"origin": origin,
|
|
u"port": 443,
|
|
u"ssl": True,
|
|
u"rules": [{
|
|
u"name": u"default",
|
|
u"request_url": u"/*"
|
|
}]
|
|
}
|
|
]
|
|
|
|
self.caching_list = [
|
|
{
|
|
u"name": u"default",
|
|
u"ttl": 3600,
|
|
u"rules": [{
|
|
u"name": "default",
|
|
u"request_url": "/*"
|
|
}]
|
|
},
|
|
{
|
|
u"name": u"home",
|
|
u"ttl": 1200,
|
|
u"rules": [{
|
|
u"name": u"index",
|
|
u"request_url": u"/index.htm"
|
|
}]
|
|
}
|
|
]
|
|
|
|
self.restrictions_list = [
|
|
{
|
|
u"name": u"website only",
|
|
u"rules": [
|
|
{
|
|
u"name": domain,
|
|
u"referrer": domain,
|
|
u"request_url": "/*"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
|
|
resp = self.setup_service(
|
|
service_name=self.service_name,
|
|
domain_list=self.domain_list,
|
|
origin_list=self.origin_list,
|
|
caching_list=self.caching_list,
|
|
restrictions_list=self.restrictions_list,
|
|
flavor_id=self.flavor_id)
|
|
|
|
self.service_url = resp.headers["location"]
|
|
|
|
def test_migrate(self):
|
|
|
|
new_certs = self.akamai_config.san_certs
|
|
new_certs_list = new_certs.split(',')
|
|
index = random.randint(0, len(new_certs_list) - 1)
|
|
new_cert = new_certs_list[index]
|
|
|
|
get_resp = self.client.get_service(location=self.service_url)
|
|
get_resp_body = get_resp.json()
|
|
domain = get_resp_body['domains'][0]['domain']
|
|
resp = self.operator_client.admin_migrate_domain(
|
|
project_id=self.user_project_id, service_id=get_resp_body['id'],
|
|
domain=domain, new_cert=new_cert)
|
|
|
|
self.assertEqual(resp.status_code, 202)
|
|
|
|
new_resp = self.client.get_service(location=self.service_url)
|
|
new_resp_body = new_resp.json()
|
|
|
|
for link in new_resp_body['links']:
|
|
if link['rel'] == 'access_url':
|
|
access_url = link['href']
|
|
|
|
dns_suffix = str(self.dns_config.dns_url_suffix)
|
|
akamai_access_url_suffix = str(self.akamai_config.access_url_suffix)
|
|
data = self.dns_client.verify_domain_migration(access_url=access_url,
|
|
suffix=dns_suffix)
|
|
# Akamai specific suffix
|
|
if not new_cert.endswith(akamai_access_url_suffix):
|
|
new_cert = new_cert + "." + akamai_access_url_suffix
|
|
|
|
self.assertEqual(data, new_cert)
|
|
|
|
def test_migrate_negative_invalid_projectid(self):
|
|
|
|
new_certs = self.akamai_config.san_certs
|
|
new_certs_list = new_certs.split(',')
|
|
index = random.randint(0, len(new_certs_list) - 1)
|
|
new_cert = new_certs_list[index]
|
|
|
|
get_resp = self.client.get_service(location=self.service_url)
|
|
get_resp_body = get_resp.json()
|
|
domain = get_resp_body['domains'][0]['domain']
|
|
project_id = self.generate_random_string(prefix=self.user_project_id)
|
|
resp = self.operator_client.admin_migrate_domain(
|
|
project_id=project_id, service_id=get_resp_body['id'],
|
|
domain=domain, new_cert=new_cert)
|
|
|
|
self.assertEqual(resp.status_code, 404)
|
|
|
|
def test_migrate_negative_invalid_serviceid(self):
|
|
|
|
new_certs = self.akamai_config.san_certs
|
|
new_certs_list = new_certs.split(',')
|
|
index = random.randint(0, len(new_certs_list) - 1)
|
|
new_cert = new_certs_list[index]
|
|
|
|
get_resp = self.client.get_service(location=self.service_url)
|
|
get_resp_body = get_resp.json()
|
|
domain = get_resp_body['domains'][0]['domain']
|
|
service_id = self.generate_random_string(prefix=get_resp_body['id'])
|
|
resp = self.operator_client.admin_migrate_domain(
|
|
project_id=self.user_project_id, service_id=service_id,
|
|
domain=domain, new_cert=new_cert)
|
|
|
|
self.assertEqual(resp.status_code, 404)
|
|
|
|
def test_migrate_negative_invalid_domain(self):
|
|
|
|
new_certs = self.akamai_config.san_certs
|
|
new_certs_list = new_certs.split(',')
|
|
index = random.randint(0, len(new_certs_list) - 1)
|
|
new_cert = new_certs_list[index]
|
|
|
|
get_resp = self.client.get_service(location=self.service_url)
|
|
get_resp_body = get_resp.json()
|
|
domain = "1234"
|
|
service_id = self.generate_random_string(prefix=get_resp_body['id'])
|
|
resp = self.operator_client.admin_migrate_domain(
|
|
project_id=self.user_project_id, service_id=service_id,
|
|
domain=domain, new_cert=new_cert)
|
|
|
|
self.assertEqual(resp.status_code, 400)
|
|
|
|
def tearDown(self):
|
|
self.client.delete_service(location=self.service_url)
|
|
if self.test_config.generate_flavors:
|
|
self.client.delete_flavor(flavor_id=self.flavor_id)
|
|
super(TestSanCertService, self).tearDown()
|
|
|
|
|
|
@ddt.ddt
|
|
class TestSanCertServiceWithLogDelivery(base.TestBase):
|
|
|
|
def setUp(self):
|
|
super(TestSanCertServiceWithLogDelivery, self).setUp()
|
|
|
|
if self.test_config.run_operator_tests is False:
|
|
self.skipTest(
|
|
'Test Operator Functions is disabled in configuration')
|
|
|
|
self.service_name = self.generate_random_string(prefix='API-Test-')
|
|
self.flavor_id = self.test_flavor
|
|
|
|
domain = self.generate_random_string(
|
|
prefix='api-test-domain') + '.com'
|
|
self.domain_list = [
|
|
{"domain": domain, "protocol": "https", "certificate": "san"}
|
|
]
|
|
|
|
origin = self.generate_random_string(
|
|
prefix='api-test-origin') + u'.com'
|
|
self.origin_list = [
|
|
{
|
|
u"origin": origin,
|
|
u"port": 443,
|
|
u"ssl": True,
|
|
u"rules": [{
|
|
u"name": u"default",
|
|
u"request_url": u"/*"
|
|
}]
|
|
}
|
|
]
|
|
|
|
self.caching_list = [
|
|
{
|
|
u"name": u"default",
|
|
u"ttl": 3600,
|
|
u"rules": [{
|
|
u"name": "default",
|
|
u"request_url": "/*"
|
|
}]
|
|
},
|
|
{
|
|
u"name": u"home",
|
|
u"ttl": 1200,
|
|
u"rules": [{
|
|
u"name": u"index",
|
|
u"request_url": u"/index.htm"
|
|
}]
|
|
}
|
|
]
|
|
|
|
self.restrictions_list = [
|
|
{
|
|
u"name": u"website only",
|
|
u"rules": [
|
|
{
|
|
u"name": domain,
|
|
u"referrer": domain,
|
|
u"request_url": "/*"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
|
|
self.log_delivery = {"enabled": True}
|
|
|
|
resp = self.setup_service(
|
|
service_name=self.service_name,
|
|
domain_list=self.domain_list,
|
|
origin_list=self.origin_list,
|
|
caching_list=self.caching_list,
|
|
restrictions_list=self.restrictions_list,
|
|
flavor_id=self.flavor_id,
|
|
log_delivery=self.log_delivery)
|
|
|
|
self.service_url = resp.headers["location"]
|
|
|
|
def test_migrate(self):
|
|
new_certs = self.akamai_config.san_certs
|
|
new_certs_list = new_certs.split(',')
|
|
index = random.randint(0, len(new_certs_list) - 1)
|
|
new_cert = new_certs_list[index]
|
|
get_resp = self.client.get_service(location=self.service_url)
|
|
get_resp_body = get_resp.json()
|
|
domain = get_resp_body['domains'][0]['domain']
|
|
|
|
resp = self.operator_client.admin_migrate_domain(
|
|
project_id=self.user_project_id, service_id=get_resp_body['id'],
|
|
domain=domain, new_cert=new_cert)
|
|
self.assertEqual(resp.status_code, 202)
|
|
|
|
new_resp = self.client.get_service(location=self.service_url)
|
|
new_resp_body = new_resp.json()
|
|
|
|
for link in new_resp_body['links']:
|
|
if link['rel'] == 'access_url':
|
|
access_url = link['href']
|
|
|
|
dns_suffix = str(self.dns_config.dns_url_suffix)
|
|
akamai_access_url_suffix = str(self.akamai_config.access_url_suffix)
|
|
data = self.dns_client.verify_domain_migration(access_url=access_url,
|
|
suffix=dns_suffix)
|
|
# Akamai specific suffix
|
|
if not new_cert.endswith(akamai_access_url_suffix):
|
|
new_cert = new_cert + "." + akamai_access_url_suffix
|
|
|
|
self.assertEqual(str(data), str(new_cert))
|
|
|
|
def tearDown(self):
|
|
self.client.delete_service(location=self.service_url)
|
|
if self.test_config.generate_flavors:
|
|
self.client.delete_flavor(flavor_id=self.flavor_id)
|
|
super(TestSanCertServiceWithLogDelivery, self).tearDown()
|