From 1bbbf24373758070e64271d9bec91fe57c13d7a7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Lauri=20V=C3=B5sandi?= <lauri.vosandi@gmail.com>
Date: Thu, 24 May 2018 17:22:46 +0300
Subject: [PATCH] tests: Add tests for NetworkManager config files

---
 tests/test_cli.py | 58 ++++++++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 57 insertions(+), 1 deletion(-)

diff --git a/tests/test_cli.py b/tests/test_cli.py
index c013c85..52b0025 100644
--- a/tests/test_cli.py
+++ b/tests/test_cli.py
@@ -21,6 +21,56 @@ coverage.process_startup()
 UA_FEDORA_FIREFOX = "Mozilla/5.0 (X11; Fedora; Linux x86_64) " \
     "AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
 
+NM_OPENVPN = """
+type = vpn
+
+[vpn]
+service-type = org.freedesktop.NetworkManager.openvpn
+connection-type = tls
+comp-lzo = no
+cert-pass-flags = 0
+tap-dev = no
+remote-cert-tls = server
+remote = vpn.example.lan
+key = /etc/certidude/authority/ca.example.lan/client_key.pem
+cert = /etc/certidude/authority/ca.example.lan/client_cert.pem
+ca = /etc/certidude/authority/ca.example.lan/ca_cert.pem
+tls-cipher = TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384
+cipher = AES-128-GCM
+auth = SHA384
+port = 1194
+
+[ipv4]
+method = auto
+never-default = true
+
+[ipv6]
+method = auto
+
+"""
+
+NM_STRONGSWAN = """
+type = vpn
+
+[vpn]
+service-type = org.freedesktop.NetworkManager.strongswan
+encap = no
+virtual = yes
+method = key
+ipcomp = no
+address = ipsec.example.lan
+userkey = /etc/certidude/authority/ca.example.lan/client_key.pem
+usercert = /etc/certidude/authority/ca.example.lan/client_cert.pem
+certificate = /etc/certidude/authority/ca.example.lan/ca_cert.pem
+ike = aes256-sha384-prfsha384-ecp384
+esp = aes128gcm16-aes128gmac-ecp384
+proposal = yes
+
+[ipv4]
+method = auto
+
+"""
+
 smtp=None
 inbox=[]
 
@@ -824,7 +874,9 @@ def test_cli_setup_authority():
     assert not os.path.exists("/run/certidude/ca.example.lan.pid"), result.output
     assert "Writing certificate to:" in result.output, result.output
     assert os.path.exists("/etc/NetworkManager/system-connections/OpenVPN to vpn.example.lan")
-
+    with open("/etc/NetworkManager/system-connections/OpenVPN to vpn.example.lan") as fh:
+        buf = fh.read()
+        assert buf.endswith(NM_OPENVPN), buf
 
     # Issue token, needs legit router ^
     os.system("certidude token issue userbot")
@@ -858,6 +910,7 @@ def test_cli_setup_authority():
 
     assert os.system("certidude enroll --skip-self") == 0
 
+
     ########################
     # Test image builder ###
     ########################
@@ -1133,6 +1186,9 @@ def test_cli_setup_authority():
     assert not os.path.exists("/run/certidude/ca.example.lan.pid"), result.output
     assert "Writing certificate to:" in result.output, result.output
     assert os.path.exists("/etc/NetworkManager/system-connections/IPSec to ipsec.example.lan")
+    with open("/etc/NetworkManager/system-connections/IPSec to ipsec.example.lan") as fh:
+        buf = fh.read()
+        assert buf.endswith(NM_STRONGSWAN), buf
 
     ######################################
     ### Test revocation on client side ###