mirror of
https://github.com/inspec/inspec
synced 2024-11-27 15:10:44 +00:00
491a1b9968
An update to the openssl cookbook modified the defaults for `state` and `city` in the `openssl_x509` resource. That change modified the output of `issuer_dn` and `subject_dn` in InSpec's `x509_certificate` resource. This modifies the expected output of the integration tests to match these new defaults. Signed-off-by: Jerry Aldrich <jerryaldrichiii@gmail.com>
24 lines
801 B
Ruby
24 lines
801 B
Ruby
# encoding: utf-8
|
|
|
|
if os.windows?
|
|
STDERR.puts "\033[1;33mTODO: Not running #{__FILE__} because we are not on Linux.\033[0m"
|
|
return
|
|
end
|
|
|
|
describe x509_certificate('/tmp/mycert.pem') do
|
|
it { should be_certificate }
|
|
it { should be_valid }
|
|
its('signature_algorithm') { should eq 'sha256WithRSAEncryption' }
|
|
its('validity_in_days') { should_not be < 100 }
|
|
its('validity_in_days') { should be >= 100 }
|
|
its('subject_dn') { should eq '/C=US/ST= /L= /O=Foo Bar/OU=Lab/CN=www.f00bar.com' }
|
|
its('subject.C') { should eq 'US' }
|
|
its('issuer_dn') { should eq '/C=US/ST= /L= /O=Foo Bar/OU=Lab/CN=www.f00bar.com' }
|
|
its('key_length') { should be >= 2048 }
|
|
end
|
|
|
|
describe key_rsa('/tmp/server.key') do
|
|
it { should be_private }
|
|
it { should be_public }
|
|
its('key_length') { should eq 2048 }
|
|
end
|