FilesExpand file tree

 master

/

https_test.go

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

84 lines (71 loc) · 2.54 KB

 master

/

https_test.go

Copy path

Top

File metadata and controls

• Code
• Blame

84 lines (71 loc) · 2.54 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

package docker

import (

"crypto/tls"

"crypto/x509"

"io/ioutil"

"strings"

"testing"

"time"

"github.com/dotcloud/docker/api/client"

)

const (

errBadCertificate = "remote error: bad certificate"

errCaUnknown = "x509: certificate signed by unknown authority"

)

func getTlsConfig(certFile, keyFile string, t *testing.T) *tls.Config {

certPool := x509.NewCertPool()

file, err := ioutil.ReadFile("fixtures/https/ca.pem")

if err != nil {

t.Fatal(err)

}

certPool.AppendCertsFromPEM(file)

cert, err := tls.LoadX509KeyPair("fixtures/https/"+certFile, "fixtures/https/"+keyFile)

if err != nil {

t.Fatalf("Couldn't load X509 key pair: %s", err)

}

tlsConfig := &tls.Config{

RootCAs: certPool,

Certificates: []tls.Certificate{cert},

}

return tlsConfig

}

// TestHttpsInfo connects via two-way authenticated HTTPS to the info endpoint

func TestHttpsInfo(t *testing.T) {

cli := client.NewDockerCli(nil, ioutil.Discard, ioutil.Discard, testDaemonProto,

testDaemonHttpsAddr, getTlsConfig("client-cert.pem", "client-key.pem", t))

setTimeout(t, "Reading command output time out", 10*time.Second, func() {

if err := cli.CmdInfo(); err != nil {

t.Fatal(err)

}

})

}

// TestHttpsInfoRogueCert connects via two-way authenticated HTTPS to the info endpoint

// by using a rogue client certificate and checks that it fails with the expected error.

func TestHttpsInfoRogueCert(t *testing.T) {

cli := client.NewDockerCli(nil, ioutil.Discard, ioutil.Discard, testDaemonProto,

testDaemonHttpsAddr, getTlsConfig("client-rogue-cert.pem", "client-rogue-key.pem", t))

setTimeout(t, "Reading command output time out", 10*time.Second, func() {

err := cli.CmdInfo()

if err == nil {

t.Fatal("Expected error but got nil")

}

if !strings.Contains(err.Error(), errBadCertificate) {

t.Fatalf("Expected error: %s, got instead: %s", errBadCertificate, err)

}

})

}

// TestHttpsInfoRogueServerCert connects via two-way authenticated HTTPS to the info endpoint

// which provides a rogue server certificate and checks that it fails with the expected error

func TestHttpsInfoRogueServerCert(t *testing.T) {

cli := client.NewDockerCli(nil, ioutil.Discard, ioutil.Discard, testDaemonProto,

testDaemonRogueHttpsAddr, getTlsConfig("client-cert.pem", "client-key.pem", t))

setTimeout(t, "Reading command output time out", 10*time.Second, func() {

err := cli.CmdInfo()

if err == nil {

t.Fatal("Expected error but got nil")

}

if !strings.Contains(err.Error(), errCaUnknown) {

t.Fatalf("Expected error: %s, got instead: %s", errBadCertificate, err)

}

})

}