Test unit for standalone certificates

Author: buchdag

.gitignore

@@ -9,3 +9,4 @@ nginx.tmpl
 test/local_test_env.sh
 test/tests/docker_api/expected-std-out.txt
 test/tests/container_restart/docker_event_out.txt
+test/tests/certs_standalone/letsencrypt_user_data

test/config.sh

@@ -13,6 +13,7 @@ imageTests+=(
 	certs_single
 	certs_san
 	certs_single_domain
+	certs_standalone
 	force_renew
 	certs_validity
 	container_restart

test/setup/setup-nginx-proxy.sh

@@ -9,6 +9,7 @@ case $SETUP in
       --name $NGINX_CONTAINER_NAME \
       --env "DHPARAM_BITS=256" \
       -v /etc/nginx/vhost.d \
+      -v /etc/nginx/conf.d \
       -v /usr/share/nginx/html \
       -v /var/run/docker.sock:/tmp/docker.sock:ro \
       --label com.github.jrcs.letsencrypt_nginx_proxy_companion.test_suite \

test/tests/certs_standalone/expected-std-out.txt

@@ -0,0 +1,8 @@
+Started letsencrypt container for test certs_standalone
+Symlink to le1.wtf certificate has been generated.
+The link is pointing to the file ./le1.wtf/fullchain.pem
+Domain le1.wtf is on certificate.
+Symlink to le2.wtf certificate has been generated.
+The link is pointing to the file ./le2.wtf/fullchain.pem
+Domain le2.wtf is on certificate.
+Domain le3.wtf is on certificate.

test/tests/certs_standalone/run.sh

@@ -0,0 +1,74 @@
+#!/bin/bash
+
+## Test for standalone certificates.
+
+if [[ -z $TRAVIS_CI ]]; then
+  le_container_name="$(basename ${0%/*})_$(date "+%Y-%m-%d_%H.%M.%S")"
+else
+  le_container_name="$(basename ${0%/*})"
+fi
+
+# Create the $domains array from comma separated domains in TEST_DOMAINS.
+IFS=',' read -r -a domains <<< "$TEST_DOMAINS"
+
+# Cleanup function with EXIT trap
+function cleanup {
+  # Cleanup the files created by this run of the test to avoid foiling following test(s).
+  docker exec "$le_container_name" bash -c 'rm -rf /etc/nginx/certs/le?.wtf*'
+  # Stop the LE container
+  docker stop "$le_container_name" > /dev/null
+}
+trap cleanup EXIT
+
+# Create letsencrypt_user_data with a single domain cert
+cat > ${TRAVIS_BUILD_DIR}/test/tests/certs_standalone/letsencrypt_user_data <<EOF
+LETSENCRYPT_STANDALONE_CERTS=('single')
+LETSENCRYPT_single_HOST=('${domains[0]}')
+EOF
+
+run_le_container ${1:?} "$le_container_name" \
+  "--volume ${TRAVIS_BUILD_DIR}/test/tests/certs_standalone/letsencrypt_user_data:/app/letsencrypt_user_data"
+
+# Wait for a symlink at /etc/nginx/certs/${domains[0]}.crt
+# then grab the certificate in text form ...
+wait_for_symlink "${domains[0]}" "$le_container_name"
+created_cert="$(docker exec "$le_container_name" \
+  openssl x509 -in /etc/nginx/certs/${domains[0]}/cert.pem -text -noout)"
+
+# Check if the domain is on the certificate.
+if grep -q "${domains[0]}" <<< "$created_cert"; then
+  echo "Domain ${domains[0]} is on certificate."
+else
+  echo "Domain ${domains[0]} did not appear on certificate."
+fi
+
+docker exec "$le_container_name" bash -c "[[ -f /etc/nginx/conf.d/standalone-cert-${domains[0]}.conf ]]" \
+  && echo "Standalone configuration for ${domains[0]} wasn't correctly removed."
+
+# Add another (SAN) certificate to letsencrypt_user_data
+cat > ${TRAVIS_BUILD_DIR}/test/tests/certs_standalone/letsencrypt_user_data <<EOF
+LETSENCRYPT_STANDALONE_CERTS=('single' 'san')
+LETSENCRYPT_single_HOST=('${domains[0]}')
+LETSENCRYPT_san_HOST=('${domains[1]}' '${domains[2]}')
+EOF
+
+# Manually trigger the service loop
+docker exec "$le_container_name" /app/signal_le_service > /dev/null
+
+# Wait for a symlink at /etc/nginx/certs/${domains[1]}.crt
+# then grab the certificate in text form ...
+wait_for_symlink "${domains[1]}" "$le_container_name"
+created_cert="$(docker exec "$le_container_name" \
+  openssl x509 -in /etc/nginx/certs/${domains[1]}/cert.pem -text -noout)"
+
+for domain in "${domains[1]}" "${domains[2]}"; do
+  # Check if the domain is on the certificate.
+  if grep -q "$domain" <<< "$created_cert"; then
+    echo "Domain $domain is on certificate."
+  else
+    echo "Domain $domain did not appear on certificate."
+  fi
+done
+
+docker exec "$le_container_name" bash -c "[[ ! -f /etc/nginx/conf.d/standalone-cert-${domains[1]}.conf ]]" \
+  || echo "Standalone configuration for ${domains[1]} wasn't correctly removed."