bae5be3dc1
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
228 lines
6.5 KiB
PHP
228 lines
6.5 KiB
PHP
<?php
|
|
/**
|
|
* @copyright Copyright (c) 2016 Lukas Reschke <lukas@statuscode.ch>
|
|
*
|
|
* @license GNU AGPL version 3 or any later version
|
|
*
|
|
* This program is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU Affero General Public License as
|
|
* published by the Free Software Foundation, either version 3 of the
|
|
* License, or (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU Affero General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Affero General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*
|
|
*/
|
|
|
|
namespace Test\Security\IdentityProof;
|
|
|
|
use OC\Files\AppData\Factory;
|
|
use OC\Security\IdentityProof\Key;
|
|
use OC\Security\IdentityProof\Manager;
|
|
use OCP\Files\IAppData;
|
|
use OCP\Files\SimpleFS\ISimpleFile;
|
|
use OCP\Files\SimpleFS\ISimpleFolder;
|
|
use OCP\IConfig;
|
|
use OCP\IUser;
|
|
use OCP\Security\ICrypto;
|
|
use SebastianBergmann\Comparator\MockObjectComparator;
|
|
use Test\TestCase;
|
|
|
|
class ManagerTest extends TestCase {
|
|
/** @var Factory|\PHPUnit_Framework_MockObject_MockObject */
|
|
private $factory;
|
|
/** @var IAppData|\PHPUnit_Framework_MockObject_MockObject */
|
|
private $appData;
|
|
/** @var ICrypto|\PHPUnit_Framework_MockObject_MockObject */
|
|
private $crypto;
|
|
/** @var Manager|\PHPUnit_Framework_MockObject_MockObject */
|
|
private $manager;
|
|
/** @var IConfig|\PHPUnit_Framework_MockObject_MockObject */
|
|
private $config;
|
|
|
|
public function setUp() {
|
|
parent::setUp();
|
|
|
|
/** @var Factory|\PHPUnit_Framework_MockObject_MockObject $factory */
|
|
$this->factory = $this->createMock(Factory::class);
|
|
$this->appData = $this->createMock(IAppData::class);
|
|
$this->config = $this->createMock(IConfig::class);
|
|
$this->factory->expects($this->any())
|
|
->method('get')
|
|
->with('identityproof')
|
|
->willReturn($this->appData);
|
|
|
|
$this->crypto = $this->createMock(ICrypto::class);
|
|
$this->manager = $this->getManager(['generateKeyPair']);
|
|
}
|
|
|
|
/**
|
|
* create manager object
|
|
*
|
|
* @param array $setMethods
|
|
* @return Manager|\PHPUnit_Framework_MockObject_MockObject
|
|
*/
|
|
protected function getManager($setMethods = []) {
|
|
if (empty($setMethods)) {
|
|
return new Manager(
|
|
$this->factory,
|
|
$this->crypto,
|
|
$this->config
|
|
);
|
|
} else {
|
|
return $this->getMockBuilder(Manager::class)
|
|
->setConstructorArgs([
|
|
$this->factory,
|
|
$this->crypto,
|
|
$this->config
|
|
])->setMethods($setMethods)->getMock();
|
|
}
|
|
}
|
|
|
|
public function testGetKeyWithExistingKey() {
|
|
$user = $this->createMock(IUser::class);
|
|
$user
|
|
->expects($this->once())
|
|
->method('getUID')
|
|
->willReturn('MyUid');
|
|
$folder = $this->createMock(ISimpleFolder::class);
|
|
$privateFile = $this->createMock(ISimpleFile::class);
|
|
$privateFile
|
|
->expects($this->once())
|
|
->method('getContent')
|
|
->willReturn('EncryptedPrivateKey');
|
|
$publicFile = $this->createMock(ISimpleFile::class);
|
|
$publicFile
|
|
->expects($this->once())
|
|
->method('getContent')
|
|
->willReturn('MyPublicKey');
|
|
$this->crypto
|
|
->expects($this->once())
|
|
->method('decrypt')
|
|
->with('EncryptedPrivateKey')
|
|
->willReturn('MyPrivateKey');
|
|
$folder
|
|
->expects($this->at(0))
|
|
->method('getFile')
|
|
->with('private')
|
|
->willReturn($privateFile);
|
|
$folder
|
|
->expects($this->at(1))
|
|
->method('getFile')
|
|
->with('public')
|
|
->willReturn($publicFile);
|
|
$this->appData
|
|
->expects($this->once())
|
|
->method('getFolder')
|
|
->with('user-MyUid')
|
|
->willReturn($folder);
|
|
|
|
$expected = new Key('MyPublicKey', 'MyPrivateKey');
|
|
$this->assertEquals($expected, $this->manager->getKey($user));
|
|
}
|
|
|
|
public function testGetKeyWithNotExistingKey() {
|
|
$user = $this->createMock(IUser::class);
|
|
$user
|
|
->expects($this->once())
|
|
->method('getUID')
|
|
->willReturn('MyUid');
|
|
$this->appData
|
|
->expects($this->at(0))
|
|
->method('getFolder')
|
|
->with('user-MyUid')
|
|
->willThrowException(new \Exception());
|
|
$this->manager
|
|
->expects($this->once())
|
|
->method('generateKeyPair')
|
|
->willReturn(['MyNewPublicKey', 'MyNewPrivateKey']);
|
|
$this->appData
|
|
->expects($this->at(1))
|
|
->method('newFolder')
|
|
->with('user-MyUid');
|
|
$folder = $this->createMock(ISimpleFolder::class);
|
|
$this->crypto
|
|
->expects($this->once())
|
|
->method('encrypt')
|
|
->with('MyNewPrivateKey')
|
|
->willReturn('MyNewEncryptedPrivateKey');
|
|
$privateFile = $this->createMock(ISimpleFile::class);
|
|
$privateFile
|
|
->expects($this->once())
|
|
->method('putContent')
|
|
->with('MyNewEncryptedPrivateKey');
|
|
$publicFile = $this->createMock(ISimpleFile::class);
|
|
$publicFile
|
|
->expects($this->once())
|
|
->method('putContent')
|
|
->with('MyNewPublicKey');
|
|
$folder
|
|
->expects($this->at(0))
|
|
->method('newFile')
|
|
->with('private')
|
|
->willReturn($privateFile);
|
|
$folder
|
|
->expects($this->at(1))
|
|
->method('newFile')
|
|
->with('public')
|
|
->willReturn($publicFile);
|
|
$this->appData
|
|
->expects($this->at(2))
|
|
->method('getFolder')
|
|
->with('user-MyUid')
|
|
->willReturn($folder);
|
|
|
|
|
|
$expected = new Key('MyNewPublicKey', 'MyNewPrivateKey');
|
|
$this->assertEquals($expected, $this->manager->getKey($user));
|
|
}
|
|
|
|
public function testGenerateKeyPair() {
|
|
$manager = $this->getManager();
|
|
$data = 'MyTestData';
|
|
|
|
list($resultPublicKey, $resultPrivateKey) = self::invokePrivate($manager, 'generateKeyPair');
|
|
openssl_sign($data, $signature, $resultPrivateKey);
|
|
$details = openssl_pkey_get_details(openssl_pkey_get_public($resultPublicKey));
|
|
|
|
$this->assertSame(1, openssl_verify($data, $signature, $resultPublicKey));
|
|
$this->assertSame(2048, $details['bits']);
|
|
}
|
|
|
|
public function testGetSystemKey() {
|
|
$manager = $this->getManager(['retrieveKey']);
|
|
|
|
/** @var Key|\PHPUnit_Framework_MockObject_MockObject $key */
|
|
$key = $this->createMock(Key::class);
|
|
|
|
$this->config->expects($this->once())->method('getSystemValue')
|
|
->with('instanceid', null)->willReturn('instanceId');
|
|
|
|
$manager->expects($this->once())->method('retrieveKey')->with('system-instanceId')
|
|
->willReturn($key);
|
|
|
|
$this->assertSame($key, $manager->getSystemKey());
|
|
|
|
}
|
|
|
|
|
|
/**
|
|
* @expectedException \RuntimeException
|
|
*/
|
|
public function testGetSystemKeyFailure() {
|
|
$manager = $this->getManager(['retrieveKey']);
|
|
|
|
/** @var Key|\PHPUnit_Framework_MockObject_MockObject $key */
|
|
$key = $this->createMock(Key::class);
|
|
|
|
$this->config->expects($this->once())->method('getSystemValue')
|
|
->with('instanceid', null)->willReturn(null);
|
|
|
|
$manager->getSystemKey();
|
|
}
|
|
}
|