agp-config 0.1.8

// Copyright AGNTCY Contributors (https://github.com/agntcy)
// SPDX-License-Identifier: Apache-2.0

use tracing::info;

use agp_config_tls::client::TlsClientConfig;
use agp_config_tls::common::{Config, RustlsConfigLoader};
use agp_config_tls::server::TlsServerConfig;

static TEST_PATH: &str = concat!(env!("CARGO_MANIFEST_DIR"), "/tests");

#[test]
fn test_new_config() {
    let expected_config = Config {
        ..Default::default()
    };
    let config = Config::default();

    assert_eq!(config, expected_config);
}

#[test]
fn test_new_client_config() {
    let expected_client_config = TlsClientConfig {
        ..Default::default()
    };
    let client_config = TlsClientConfig::default();

    assert_eq!(client_config, expected_client_config);
}

#[test]
fn test_new_server_config() {
    let expected_server_config = TlsServerConfig {
        ..Default::default()
    };
    let server_config = TlsServerConfig::default();

    assert_eq!(server_config, expected_server_config);
}

// debug trait
#[derive(Debug)]
enum ErrorMessage {
    Empty,
    Is(String),
}

impl Default for ErrorMessage {
    fn default() -> Self {
        ErrorMessage::Is(String::from("world"))
    }
}

// server config tests
fn test_load_rustls_config<T>(
    test_name: &str,
    config: &dyn RustlsConfigLoader<T>,
    error_expected: &bool,
    error_message: &ErrorMessage,
    print_error: &bool,
) {
    info!("Running test {}", test_name);

    // Try to create a tls config from the server config
    let result = config.load_rustls_config();
    match error_expected {
        true => assert!(result.is_err()),
        false => assert!(result.is_ok()),
    }

    if *print_error {
        info!(
            "Error in test {}: {:?}",
            test_name,
            result.as_ref().err().unwrap().to_string()
        );
    }

    match error_message {
        ErrorMessage::Empty => (),
        ErrorMessage::Is(message) => {
            if *error_expected {
                println!(
                    "Error in test {}: {:?}",
                    test_name,
                    result.as_ref().err().unwrap().to_string()
                );
                assert!(
                    result.as_ref().err().unwrap().to_string().contains(message),
                    "{}",
                    test_name
                );
            }
        }
    }
}

#[test]
fn test_load_rustls_client() {
    let tests = [
        (
            "test-valid-ca-1",
            Box::new(|| {
                return TlsClientConfig {
                    config: Config {
                        ca_file: Some(format!("{}/testdata/{}", TEST_PATH, "ca-1.crt")),
                        ..Default::default()
                    },
                    ..Default::default()
                };
            }) as Box<dyn Fn() -> TlsClientConfig>,
            false,
            ErrorMessage::Empty,
            false,
        ),
        (
            "test-valid-ca-2",
            Box::new(|| {
                return TlsClientConfig {
                    config: Config {
                        ca_file: Some(format!("{}/testdata/{}", TEST_PATH, "ca-2.crt")),
                        ..Default::default()
                    },
                    ..Default::default()
                };
            }) as Box<dyn Fn() -> TlsClientConfig>,
            false,
            ErrorMessage::Empty,
            false,
        ),
        (
            "test-ca-file-not-found",
            Box::new(|| {
                return TlsClientConfig {
                    config: Config {
                        ca_file: Some(format!("{}/testdata/{}", TEST_PATH, "ca-.crt")),
                        ..Default::default()
                    },
                    ..Default::default()
                };
            }) as Box<dyn Fn() -> TlsClientConfig>,
            true,
            ErrorMessage::Is(String::from("No such file or directory")),
            false,
        ),
        (
            "test-client-certificate-file",
            Box::new(|| {
                return TlsClientConfig {
                    config: Config {
                        cert_file: Some(format!("{}/testdata/{}", TEST_PATH, "client-1.crt")),
                        key_file: Some(format!("{}/testdata/{}", TEST_PATH, "client-1.key")),
                        ..Default::default()
                    },
                    ..Default::default()
                };
            }) as Box<dyn Fn() -> TlsClientConfig>,
            false,
            ErrorMessage::Empty,
            false,
        ),
        (
            "test-tls-version",
            Box::new(|| {
                return TlsClientConfig {
                    config: Config {
                        tls_version: String::from("tls1.2"),
                        ..Default::default()
                    },
                    ..Default::default()
                };
            }) as Box<dyn Fn() -> TlsClientConfig>,
            false,
            ErrorMessage::Empty,
            false,
        ),
        (
            "test-tls-version-invalid",
            Box::new(|| {
                return TlsClientConfig {
                    config: Config {
                        tls_version: String::from("tls1.4"),
                        ..Default::default()
                    },
                    ..Default::default()
                };
            }) as Box<dyn Fn() -> TlsClientConfig>,
            true,
            ErrorMessage::Is(String::from("invalid tls version")),
            false,
        ),
        (
            "test-ca-pem",
            Box::new(|| {
                // read ca pem from file and set it as ca pem
                let ca_pem =
                    std::fs::read_to_string(format!("{}/testdata/{}", TEST_PATH, "ca-2.crt"))
                        .expect("Unable to read file");

                return TlsClientConfig {
                    config: Config {
                        ca_pem: Some(ca_pem),
                        ..Default::default()
                    },
                    ..Default::default()
                };
            }) as Box<dyn Fn() -> TlsClientConfig>,
            false,
            ErrorMessage::Empty,
            false,
        ),
        (
            "test-ca-pem-invalid",
            Box::new(|| {
                // set wrong PEM
                return TlsClientConfig {
                    config: Config {
                        ca_pem: Some(String::from(
                            "-----BEGIN CERTIFICATE-----\nwrong\n-----END CERTIFICATE-----",
                        )),
                        ..Default::default()
                    },
                    ..Default::default()
                };
            }) as Box<dyn Fn() -> TlsClientConfig>,
            true,
            ErrorMessage::Is(String::from("invalid pem format")),
            false,
        ),
        (
            "test-client-certificate-pem",
            Box::new(|| {
                // read ca pem from file and set it as ca pem
                let cert_pem =
                    std::fs::read_to_string(format!("{}/testdata/{}", TEST_PATH, "client-1.crt"))
                        .expect("Unable to read cert file");

                let key_pem =
                    std::fs::read_to_string(format!("{}/testdata/{}", TEST_PATH, "client-1.key"))
                        .expect("Unable to read key file");

                return TlsClientConfig {
                    config: Config {
                        cert_pem: Some(cert_pem),
                        key_pem: Some(key_pem),
                        ..Default::default()
                    },
                    ..Default::default()
                };
            }) as Box<dyn Fn() -> TlsClientConfig>,
            false,
            ErrorMessage::Empty,
            false,
        ),
        (
            "test-client-certificate-pem-wrong",
            Box::new(|| {
                // read ca pem from file and set it as ca pem
                let cert_pem =
                    String::from("-----BEGIN CERTIFICATE-----\nwrong\n-----END CERTIFICATE-----");
                let key_pem = String::from("-----BEGIN PRIVATE-----\nwrong\n-----END PRIVATE-----");

                return TlsClientConfig {
                    config: Config {
                        cert_pem: Some(cert_pem),
                        key_pem: Some(key_pem),
                        ..Default::default()
                    },
                    ..Default::default()
                };
            }) as Box<dyn Fn() -> TlsClientConfig>,
            true,
            ErrorMessage::Is(String::from("invalid pem format")),
            false,
        ),
        (
            "test-insecure",
            Box::new(|| {
                return TlsClientConfig {
                    config: Config {
                        ..Default::default()
                    },
                    insecure: true,
                    ..Default::default()
                };
            }) as Box<dyn Fn() -> TlsClientConfig>,
            false,
            ErrorMessage::Empty,
            false,
        ),
        (
            "test-insecure-skip-validation",
            Box::new(|| {
                return TlsClientConfig {
                    config: Config {
                        ..Default::default()
                    },
                    insecure_skip_verify: true,
                    ..Default::default()
                };
            }) as Box<dyn Fn() -> TlsClientConfig>,
            false,
            ErrorMessage::Empty,
            false,
        ),
    ];

    for (test_name, client_config, error_expected, error_message, print_error) in tests.iter() {
        let config = (**client_config)();

        test_load_rustls_config(
            test_name,
            &config,
            error_expected,
            error_message,
            print_error,
        );
    }
}

#[test]
fn test_load_rustls_server() {
    let tests = [
        (
            "test-no-certificate-file",
            Box::new(|| {
                return TlsServerConfig {
                    config: Config {
                        key_file: Some(format!("{}/testdata/{}", TEST_PATH, "server-1.key")),
                        ..Default::default()
                    },
                    ..Default::default()
                };
            }) as Box<dyn Fn() -> TlsServerConfig>,
            true,
            ErrorMessage::Is(String::from("missing server cert and key")),
            true,
        ),
        (
            "test-no-key-file",
            Box::new(|| {
                return TlsServerConfig {
                    config: Config {
                        cert_file: Some(format!("{}/testdata/{}", TEST_PATH, "server-1.crt")),
                        ..Default::default()
                    },
                    ..Default::default()
                };
            }) as Box<dyn Fn() -> TlsServerConfig>,
            true,
            ErrorMessage::Is(String::from("missing server cert and key")),
            false,
        ),
        (
            "test-server-certificate-file",
            Box::new(|| {
                return TlsServerConfig {
                    config: Config {
                        cert_file: Some(format!("{}/testdata/{}", TEST_PATH, "server-1.crt")),
                        key_file: Some(format!("{}/testdata/{}", TEST_PATH, "server-1.key")),
                        ..Default::default()
                    },
                    ..Default::default()
                };
            }) as Box<dyn Fn() -> TlsServerConfig>,
            false,
            ErrorMessage::Empty,
            false,
        ),
        (
            "test-tls-version",
            Box::new(|| {
                return TlsServerConfig {
                    config: Config {
                        tls_version: String::from("tls1.2"),
                        cert_file: Some(format!("{}/testdata/{}", TEST_PATH, "server-1.crt")),
                        key_file: Some(format!("{}/testdata/{}", TEST_PATH, "server-1.key")),
                        ..Default::default()
                    },
                    ..Default::default()
                };
            }) as Box<dyn Fn() -> TlsServerConfig>,
            false,
            ErrorMessage::Empty,
            false,
        ),
        (
            "test-tls-version-invalid",
            Box::new(|| {
                return TlsServerConfig {
                    config: Config {
                        tls_version: String::from("tls1.4"),
                        cert_file: Some(format!("{}/testdata/{}", TEST_PATH, "server-1.crt")),
                        key_file: Some(format!("{}/testdata/{}", TEST_PATH, "server-1.key")),
                        ..Default::default()
                    },
                    ..Default::default()
                };
            }) as Box<dyn Fn() -> TlsServerConfig>,
            true,
            ErrorMessage::Is(String::from("invalid tls version")),
            false,
        ),
        (
            "test-client-ca-file",
            Box::new(|| {
                return TlsServerConfig {
                    config: Config {
                        cert_file: Some(format!("{}/testdata/{}", TEST_PATH, "server-1.crt")),
                        key_file: Some(format!("{}/testdata/{}", TEST_PATH, "server-1.key")),
                        ..Default::default()
                    },
                    client_ca_file: Some(format!("{}/testdata/{}", TEST_PATH, "ca-1.crt")),
                    ..Default::default()
                };
            }) as Box<dyn Fn() -> TlsServerConfig>,
            false,
            ErrorMessage::Empty,
            false,
        ),
        (
            "test-client-ca-file-not-found",
            Box::new(|| {
                return TlsServerConfig {
                    config: Config {
                        cert_file: Some(format!("{}/testdata/{}", TEST_PATH, "server-1.crt")),
                        key_file: Some(format!("{}/testdata/{}", TEST_PATH, "server-1.key")),
                        ..Default::default()
                    },
                    client_ca_file: Some(format!("{}/testdata/{}", TEST_PATH, "ca1.crt")),
                    ..Default::default()
                };
            }) as Box<dyn Fn() -> TlsServerConfig>,
            true,
            ErrorMessage::Is(String::from("No such file or directory")),
            false,
        ),
        (
            "test-client-ca-pem",
            Box::new(|| {
                // read ca pem from file and set it as ca pem
                let ca_pem =
                    std::fs::read_to_string(format!("{}/testdata/{}", TEST_PATH, "ca-2.crt"))
                        .expect("Unable to read file");

                return TlsServerConfig {
                    config: Config {
                        cert_file: Some(format!("{}/testdata/{}", TEST_PATH, "server-1.crt")),
                        key_file: Some(format!("{}/testdata/{}", TEST_PATH, "server-1.key")),
                        ..Default::default()
                    },
                    client_ca_pem: Some(ca_pem),
                    ..Default::default()
                };
            }) as Box<dyn Fn() -> TlsServerConfig>,
            false,
            ErrorMessage::Empty,
            false,
        ),
        (
            "test-client-ca-wrong-pem",
            Box::new(|| {
                return TlsServerConfig {
                    config: Config {
                        cert_file: Some(format!("{}/testdata/{}", TEST_PATH, "server-1.crt")),
                        key_file: Some(format!("{}/testdata/{}", TEST_PATH, "server-1.key")),
                        ..Default::default()
                    },
                    client_ca_pem: Some(String::from(
                        "-----BEGIN CERTIFICATE-----\nwrong\n-----END CERTIFICATE-----",
                    )),
                    ..Default::default()
                };
            }) as Box<dyn Fn() -> TlsServerConfig>,
            true,
            ErrorMessage::Is(String::from("invalid pem format")),
            false,
        ),
    ];

    for (test_name, server_config, error_expected, error_message, print_error) in tests.iter() {
        let config = (**server_config)();

        test_load_rustls_config(
            test_name,
            &config,
            error_expected,
            error_message,
            print_error,
        );
    }
}