1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
|
use std::path::Path;
use assert_cmd::Command;
/// A test onion address.
const ONION_ADDR: &str = "fpqqmiwzqiv63jczrshh4qcmlxw6gujcai3arobq23wikt7hk7ojadid.onion";
/// Length of the onion address without ".onion" suffix.
const ADDR_LEN: usize = 56;
/// Path to a test specific configuration
const CFG_PATH: &str = "./tests/testcases/hsc/conf/hsc.toml";
/// An `arti hsc` subcommand.
#[derive(Debug, Clone, Copy, Eq, PartialEq, derive_more::Display)]
enum ArtiHscCmd {
#[display("get")]
Get,
#[display("rotate")]
Rotate,
#[display("remove")]
Remove,
}
/// Build an `arti hsc` command, setting the state directory to `state_dir`.
fn build_hsc_cmd(sub_cmd: ArtiHscCmd, state_dir: &Path) -> Command {
let opts = format!(r#"storage.state_dir="{}""#, state_dir.to_str().unwrap());
let mut cmd = Command::cargo_bin("arti").unwrap();
cmd.args([
"-c",
CFG_PATH,
"-o",
&opts,
"hsc",
"key",
&sub_cmd.to_string(),
"--batch",
]);
// Add subcommand-specific args
match sub_cmd {
ArtiHscCmd::Get => {
cmd.args(["--key-type=service-discovery", "--output", "-"]);
}
ArtiHscCmd::Rotate => {
cmd.args(["--output", "-"]);
}
ArtiHscCmd::Remove => {}
}
cmd
}
#[test]
fn gen_key() {
let state_dir = tempfile::TempDir::new().unwrap();
let state_dir = state_dir.path();
let mut cmd = build_hsc_cmd(ArtiHscCmd::Get, state_dir);
cmd.write_stdin(ONION_ADDR);
let output = cmd.output().unwrap();
assert!(output.status.success());
assert!(
String::from_utf8(output.stdout)
.unwrap()
.contains("descriptor:x25519:")
);
let keystore_path = state_dir
.join("keystore/client")
.join(&ONION_ADDR[..ADDR_LEN]);
// Assert new private key has been generated
assert_eq!(
keystore_path
.read_dir()
.unwrap()
.flatten()
.next()
.unwrap()
.file_name(),
"ks_hsc_desc_enc.x25519_private"
);
}
#[test]
fn generate_then_rotate() {
let state_dir = tempfile::TempDir::new().unwrap();
let state_dir = state_dir.path();
let mut cmd = build_hsc_cmd(ArtiHscCmd::Get, state_dir);
cmd.write_stdin(ONION_ADDR);
let output = cmd.output().unwrap();
assert!(output.status.success());
let descriptor = String::from_utf8(output.stdout).unwrap();
assert!(descriptor.contains("descriptor:x25519:"));
let mut cmd = build_hsc_cmd(ArtiHscCmd::Rotate, state_dir);
cmd.write_stdin(ONION_ADDR);
let output = cmd.output().unwrap();
assert!(output.status.success());
let rotated_descriptor = String::from_utf8(output.stdout).unwrap();
assert!(rotated_descriptor.contains("descriptor:x25519:"));
// Assert key has been rotated
assert_ne!(descriptor, rotated_descriptor);
let keystore_path = state_dir
.join("keystore/client")
.join(&ONION_ADDR[..ADDR_LEN]);
// Assert new private key has been generated
assert_eq!(
keystore_path
.read_dir()
.unwrap()
.flatten()
.next()
.unwrap()
.file_name(),
"ks_hsc_desc_enc.x25519_private"
);
}
#[test]
fn generate_then_remove() {
let state_dir = tempfile::TempDir::new().unwrap();
let state_dir = state_dir.path();
let mut cmd = build_hsc_cmd(ArtiHscCmd::Get, state_dir);
cmd.write_stdin(ONION_ADDR);
let output = cmd.output().unwrap();
assert!(output.status.success());
assert!(
String::from_utf8(output.stdout)
.unwrap()
.contains("descriptor:x25519:")
);
let mut cmd = build_hsc_cmd(ArtiHscCmd::Remove, state_dir);
cmd.write_stdin(ONION_ADDR);
cmd.assert().success();
let keystore_path = state_dir
.join("keystore/client")
.join(&ONION_ADDR[..ADDR_LEN]);
let entries = keystore_path.read_dir().unwrap().flatten();
// Assert key has been removed
assert_eq!(entries.count(), 0);
}
|
