mirror of
https://github.com/siderolabs/talos.git
synced 2025-08-28 18:11:14 +02:00
5ee554128e
The gofumports does everything that gofumpt does with the addition of formatting imports. This change proposes the use of the `-local` flag so that we can have imports separated in the following order: - standard library - third party - Talos specific Signed-off-by: Andrew Rynhard <andrew@andrewrynhard.com>
44 lines
1.4 KiB
Go
44 lines
1.4 KiB
Go
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
|
|
|
|
// nolint: dupl
|
|
package userdata
|
|
|
|
import (
|
|
"github.com/hashicorp/go-multierror"
|
|
"golang.org/x/xerrors"
|
|
|
|
"github.com/talos-systems/talos/pkg/crypto/x509"
|
|
)
|
|
|
|
func (suite *validateSuite) TestValidateOSSecurity() {
|
|
var err error
|
|
|
|
// Test for missing required sections
|
|
os := &OSSecurity{}
|
|
err = os.Validate(CheckOSCA())
|
|
suite.Require().Error(err)
|
|
// Embedding the check in suite.Assert().Equal(true, xerrors.Is had issues )
|
|
if !xerrors.Is(err.(*multierror.Error).Errors[0], ErrRequiredSection) {
|
|
suite.T().Errorf("%+v", err)
|
|
}
|
|
|
|
os.CA = &x509.PEMEncodedCertificateAndKey{}
|
|
err = os.Validate(CheckOSCA())
|
|
suite.Require().Error(err)
|
|
suite.Assert().Equal(4, len(err.(*multierror.Error).Errors))
|
|
|
|
// Test for invalid certs
|
|
os.CA.Crt = []byte("-----BEGIN Rubbish-----\n-----END Rubbish-----")
|
|
os.CA.Key = []byte("-----BEGIN EC Fluffy KEY-----\n-----END EC Fluffy KEY-----")
|
|
err = os.Validate(CheckOSCA())
|
|
suite.Require().Error(err)
|
|
|
|
// Successful test
|
|
os.CA.Crt = []byte("-----BEGIN CERTIFICATE-----\n-----END CERTIFICATE-----")
|
|
os.CA.Key = []byte("-----BEGIN EC PRIVATE KEY-----\n-----END EC PRIVATE KEY-----")
|
|
err = os.Validate(CheckOSCA())
|
|
suite.Require().NoError(err)
|
|
}
|