| @ -0,0 +1,42 @@ | |||||
| #! /usr/bin/env bats | |||||
| load '/bats-support/load.bash' | |||||
| load '/bats-assert/load.bash' | |||||
| load '/getssl/test/test_helper.bash' | |||||
| # This is run for every test | |||||
| setup() { | |||||
| export CURL_CA_BUNDLE=/root/pebble-ca-bundle.crt | |||||
| } | |||||
| @test "Create certificate to check revoke" { | |||||
| if [ -n "$STAGING" ]; then | |||||
| CONFIG_FILE="getssl-staging-dns01-no-suffix.cfg" | |||||
| else | |||||
| CONFIG_FILE="getssl-http01-no-suffix.cfg" | |||||
| fi | |||||
| . "${CODE_DIR}/test/test-config/${CONFIG_FILE}" | |||||
| setup_environment | |||||
| init_getssl | |||||
| create_certificate | |||||
| assert_success | |||||
| check_output_for_errors | |||||
| } | |||||
| @test "Check we can revoke a certificate" { | |||||
| if [ -n "$STAGING" ]; then | |||||
| CONFIG_FILE="getssl-staging-dns01.cfg" | |||||
| else | |||||
| CONFIG_FILE="getssl-http01.cfg" | |||||
| fi | |||||
| . "${CODE_DIR}/test/test-config/${CONFIG_FILE}" | |||||
| CERT=${INSTALL_DIR}/.getssl/${GETSSL_CMD_HOST}/${GETSSL_CMD_HOST}.crt | |||||
| KEY=${INSTALL_DIR}/.getssl/${GETSSL_CMD_HOST}/${GETSSL_CMD_HOST}.key | |||||
| run ${CODE_DIR}/getssl -d --revoke $CERT $KEY $CA | |||||
| assert_success | |||||
| check_output_for_errors | |||||
| } | |||||
| @ -0,0 +1,30 @@ | |||||
| # Uncomment and modify any variables you need | |||||
| # see https://github.com/srvrco/getssl/wiki/Config-variables for details | |||||
| # see https://github.com/srvrco/getssl/wiki/Example-config-files for example configs | |||||
| # | |||||
| CA="https://pebble:14000/dir" | |||||
| CA="https://pebble:14000" | |||||
| # Additional domains - this could be multiple domains / subdomains in a comma separated list | |||||
| SANS="" | |||||
| # Acme Challenge Location. | |||||
| ACL=('/var/www/html/.well-known/acme-challenge') | |||||
| #Set USE_SINGLE_ACL="true" to use a single ACL for all checks | |||||
| USE_SINGLE_ACL="false" | |||||
| # Location for all your certs, these can either be on the server (full path name) | |||||
| # or using ssh /sftp as for the ACL | |||||
| DOMAIN_CERT_LOCATION="/etc/nginx/pki/server.crt" | |||||
| DOMAIN_KEY_LOCATION="/etc/nginx/pki/private/server.key" | |||||
| CA_CERT_LOCATION="/etc/nginx/pki/chain.crt" | |||||
| DOMAIN_CHAIN_LOCATION="" # this is the domain cert and CA cert | |||||
| DOMAIN_PEM_LOCATION="" # this is the domain_key, domain cert and CA cert | |||||
| # The command needed to reload apache / nginx or whatever you use | |||||
| RELOAD_CMD="cp /getssl/test/test-config/nginx-ubuntu-ssl ${NGINX_CONFIG} && /getssl/test/restart-nginx" | |||||
| # Define the server type and confirm correct certificate is installed | |||||
| SERVER_TYPE="https" | |||||
| CHECK_REMOTE="true" | |||||
| @ -0,0 +1,37 @@ | |||||
| # Test that the script works with external dns provider and staging server | |||||
| # | |||||
| CA="https://acme-staging-v02.api.letsencrypt.org" | |||||
| VALIDATE_VIA_DNS=true | |||||
| DNS_ADD_COMMAND="/getssl/dns_scripts/dns_add_duckdns" | |||||
| DNS_DEL_COMMAND="/getssl/dns_scripts/dns_del_duckdns" | |||||
| PUBLIC_DNS_SERVER=ns2.duckdns.org | |||||
| CHECK_ALL_AUTH_DNS=true | |||||
| DNS_EXTRA_WAIT=60 | |||||
| ACCOUNT_KEY_TYPE="rsa" | |||||
| PRIVATE_KEY_ALG="rsa" | |||||
| # Additional domains - this could be multiple domains / subdomains in a comma separated list | |||||
| SANS="" | |||||
| # Acme Challenge Location. The first line for the domain, the following ones for each additional domain. | |||||
| ACL=('/var/www/html/.well-known/acme-challenge') | |||||
| #Set USE_SINGLE_ACL="true" to use a single ACL for all checks | |||||
| USE_SINGLE_ACL="false" | |||||
| # Location for all your certs, these can either be on the server (full path name) | |||||
| # or using ssh /sftp as for the ACL | |||||
| DOMAIN_CERT_LOCATION="/etc/nginx/pki/server.crt" | |||||
| DOMAIN_KEY_LOCATION="/etc/nginx/pki/private/server.key" | |||||
| CA_CERT_LOCATION="/etc/nginx/pki/chain.crt" | |||||
| DOMAIN_CHAIN_LOCATION="" # this is the domain cert and CA cert | |||||
| DOMAIN_PEM_LOCATION="" # this is the domain_key, domain cert and CA cert | |||||
| # The command needed to reload apache / nginx or whatever you use | |||||
| RELOAD_CMD="cp /getssl/test/test-config/nginx-ubuntu-ssl ${NGINX_CONFIG} && /getssl/test/restart-nginx" | |||||
| # Define the server type and confirm correct certificate is installed (using a custom port) | |||||
| SERVER_TYPE="https" | |||||
| CHECK_REMOTE="true" | |||||