mirror of
https://github.com/ansible-collections/community.crypto.git
synced 2026-03-26 21:33:25 +00:00
96 lines
3.4 KiB
YAML
96 lines
3.4 KiB
YAML
---
|
|
# Copyright (c) Ansible Project
|
|
# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
|
|
# SPDX-License-Identifier: GPL-3.0-or-later
|
|
|
|
- ansible.builtin.debug:
|
|
msg: "Executing tests with backend {{ select_crypto_backend }}"
|
|
|
|
- name: ({{ select_crypto_backend }}) Get key 1 info
|
|
community.crypto.openssl_publickey_info:
|
|
path: '{{ remote_tmp_dir }}/publickey_1.pem'
|
|
select_crypto_backend: '{{ select_crypto_backend }}'
|
|
register: result
|
|
|
|
- name: Check that RSA key info is ok
|
|
ansible.builtin.assert:
|
|
that:
|
|
- "'fingerprints' in result"
|
|
- "'type' in result"
|
|
- "result.type == 'RSA'"
|
|
- "'public_data' in result"
|
|
- "2 ** (result.public_data.size - 1) < result.public_data.modulus < 2 ** result.public_data.size"
|
|
- "result.public_data.exponent > 5"
|
|
|
|
- name: ({{ select_crypto_backend }}) Read file
|
|
ansible.builtin.slurp:
|
|
src: '{{ remote_tmp_dir }}/publickey_1.pem'
|
|
register: slurp
|
|
|
|
- name: ({{ select_crypto_backend }}) Get key 1 info directly
|
|
community.crypto.openssl_publickey_info:
|
|
content: '{{ slurp.content | b64decode }}'
|
|
select_crypto_backend: '{{ select_crypto_backend }}'
|
|
register: result_direct
|
|
|
|
- name: ({{ select_crypto_backend }}) Compare output of direct and loaded info
|
|
ansible.builtin.assert:
|
|
that:
|
|
- >-
|
|
(result | dict2items | rejectattr("key", "equalto", "warnings") | list | items2dict)
|
|
==
|
|
(result_direct | dict2items | rejectattr("key", "equalto", "warnings") | list | items2dict)
|
|
|
|
- name: ({{ select_crypto_backend }}) Get key 2 info
|
|
community.crypto.openssl_publickey_info:
|
|
path: '{{ remote_tmp_dir }}/publickey_2.pem'
|
|
select_crypto_backend: '{{ select_crypto_backend }}'
|
|
register: result
|
|
|
|
- name: Check that RSA key info is ok
|
|
ansible.builtin.assert:
|
|
that:
|
|
- "'fingerprints' in result"
|
|
- "'type' in result"
|
|
- "result.type == 'RSA'"
|
|
- "'public_data' in result"
|
|
- "result.public_data.size == default_rsa_key_size"
|
|
- "2 ** (result.public_data.size - 1) < result.public_data.modulus < 2 ** result.public_data.size"
|
|
- "result.public_data.exponent > 5"
|
|
|
|
- name: ({{ select_crypto_backend }}) Get key 3 info
|
|
community.crypto.openssl_publickey_info:
|
|
path: '{{ remote_tmp_dir }}/publickey_3.pem'
|
|
select_crypto_backend: '{{ select_crypto_backend }}'
|
|
register: result
|
|
|
|
- name: Check that ECC key info is ok
|
|
ansible.builtin.assert:
|
|
that:
|
|
- "'fingerprints' in result"
|
|
- "'type' in result"
|
|
- "result.type == 'ECC'"
|
|
- "'public_data' in result"
|
|
- "result.public_data.curve is string"
|
|
- "result.public_data.x != 0"
|
|
- "result.public_data.y != 0"
|
|
- "result.public_data.exponent_size == (521 if (ansible_facts.distribution == 'CentOS' and ansible_facts.distribution_major_version == '6') else 256)"
|
|
|
|
- name: ({{ select_crypto_backend }}) Get key 4 info
|
|
community.crypto.openssl_publickey_info:
|
|
path: '{{ remote_tmp_dir }}/publickey_4.pem'
|
|
select_crypto_backend: '{{ select_crypto_backend }}'
|
|
register: result
|
|
|
|
- name: Check that DSA key info is ok
|
|
ansible.builtin.assert:
|
|
that:
|
|
- "'fingerprints' in result"
|
|
- "'type' in result"
|
|
- "result.type == 'DSA'"
|
|
- "'public_data' in result"
|
|
- "result.public_data.p > 2"
|
|
- "result.public_data.q > 2"
|
|
- "result.public_data.g >= 2"
|
|
- "result.public_data.y > 2"
|