mirror of
https://github.com/certbot/certbot.git
synced 2026-08-03 03:32:13 +02:00
Nicolas BachschmidtandBrad Warren
a2222d5bdf
Implement an Authenticator which can fulfill a dns-01 challenge using the OVH DNS API. Applicable only for domains using OVH DNS.
Testing Done:
* `tox -e py27`
* `tox -e lint`
* Manual testing:
* Used `certbot certonly --dns-ovh -d`, specifying a credentials file as a command line argument. Verified that a certificate was successfully obtained without user interaction.
* Used `certbot certonly --dns-ovh -d`, without specifying a credentials file as a command line argument. Verified that the user was prompted and that a certificate was successfully obtained.
* Used `certbot certonly -d`. Verified that the user was prompted for a credentials file after selecting dnsimple interactively and that a certificate was successfully obtained.
* Used `certbot renew --force-renewal`. Verified that certificates
were renewed without user interaction.
* Negative testing:
* Path to non-existent credentials file.
* Credentials file with unsafe permissions (644).
* Path to credentials file with an invalid application key.
* Path to credentials file with an invalid application secret.
* Path to credentials file with an invalid consumer key.
* Path to credentials file with missing properties.
* Domain name not registered to OVH account.
63 lines
1.9 KiB
Python
63 lines
1.9 KiB
Python
"""Tests for certbot_dns_ovh.dns_ovh."""
|
|
|
|
import os
|
|
import unittest
|
|
|
|
import mock
|
|
from requests.exceptions import HTTPError
|
|
|
|
from certbot.plugins import dns_test_common
|
|
from certbot.plugins import dns_test_common_lexicon
|
|
from certbot.tests import util as test_util
|
|
|
|
ENDPOINT = 'ovh-eu'
|
|
APPLICATION_KEY = 'foo'
|
|
APPLICATION_SECRET = 'bar'
|
|
CONSUMER_KEY = 'spam'
|
|
|
|
|
|
class AuthenticatorTest(test_util.TempDirTestCase,
|
|
dns_test_common_lexicon.BaseLexiconAuthenticatorTest):
|
|
|
|
def setUp(self):
|
|
super(AuthenticatorTest, self).setUp()
|
|
|
|
from certbot_dns_ovh.dns_ovh import Authenticator
|
|
|
|
path = os.path.join(self.tempdir, 'file.ini')
|
|
credentials = {
|
|
"ovh_endpoint": ENDPOINT,
|
|
"ovh_application_key": APPLICATION_KEY,
|
|
"ovh_application_secret": APPLICATION_SECRET,
|
|
"ovh_consumer_key": CONSUMER_KEY,
|
|
}
|
|
dns_test_common.write(credentials, path)
|
|
|
|
self.config = mock.MagicMock(ovh_credentials=path,
|
|
ovh_propagation_seconds=0) # don't wait during tests
|
|
|
|
self.auth = Authenticator(self.config, "ovh")
|
|
|
|
self.mock_client = mock.MagicMock()
|
|
# _get_ovh_client | pylint: disable=protected-access
|
|
self.auth._get_ovh_client = mock.MagicMock(return_value=self.mock_client)
|
|
|
|
|
|
class OVHLexiconClientTest(unittest.TestCase, dns_test_common_lexicon.BaseLexiconClientTest):
|
|
DOMAIN_NOT_FOUND = Exception('Domain example.com not found')
|
|
LOGIN_ERROR = HTTPError('403 Client Error: Forbidden for url: https://eu.api.ovh.com/1.0/...')
|
|
|
|
def setUp(self):
|
|
from certbot_dns_ovh.dns_ovh import _OVHLexiconClient
|
|
|
|
self.client = _OVHLexiconClient(
|
|
ENDPOINT, APPLICATION_KEY, APPLICATION_SECRET, CONSUMER_KEY, 0
|
|
)
|
|
|
|
self.provider_mock = mock.MagicMock()
|
|
self.client.provider = self.provider_mock
|
|
|
|
|
|
if __name__ == "__main__":
|
|
unittest.main() # pragma: no cover
|