mirror of
https://github.com/docker-mailserver/docker-mailserver.git
synced 2024-01-19 02:48:50 +00:00
66 lines
2.2 KiB
Bash
66 lines
2.2 KiB
Bash
load 'test_helper/common'
|
|
|
|
# Test case
|
|
# ---------
|
|
# By default, this image is using audited FFDHE groups (https://github.com/tomav/docker-mailserver/pull/1463)
|
|
# However, an advanced user could want to supply custom DHE parameters.
|
|
#
|
|
# This test suite cover the described situation when ONE_DIR=0 is set.
|
|
#
|
|
# Description:
|
|
# - when using a CUSTOM DHE parameters:
|
|
# ~ custom dhe params file is copied in postfix and dovecot configuration.
|
|
# ~ a warning is raised about usage of insecure parameters.
|
|
|
|
|
|
function setup() {
|
|
run_setup_file_if_necessary
|
|
}
|
|
|
|
function teardown() {
|
|
run_teardown_file_if_necessary
|
|
}
|
|
|
|
function setup_file() {
|
|
# copy the custom DHE params in local config
|
|
cp `pwd`/test/test-files/ssl/custom-dhe-params.pem `pwd`/test/config/dhparams.pem
|
|
|
|
docker run -d --name mail_manual_dhparams_not_one_dir \
|
|
-v "`pwd`/test/config":/tmp/docker-mailserver \
|
|
-v "`pwd`/test/test-files":/tmp/docker-mailserver-test:ro \
|
|
-e DMS_DEBUG=0 \
|
|
-e ONE_DIR=0 \
|
|
-h mail.my-domain.com -t ${NAME}
|
|
wait_for_finished_setup_in_container mail_manual_dhparams_not_one_dir
|
|
}
|
|
|
|
function teardown_file() {
|
|
# remove custom dhe file
|
|
rm `pwd`/test/config/dhparams.pem
|
|
docker rm -f mail_manual_dhparams_not_one_dir
|
|
}
|
|
|
|
@test "first" {
|
|
skip 'this test must come first to reliably identify when to run setup_file'
|
|
}
|
|
|
|
@test "checking dhparams: ONE_DIR=0 check manual dhparams is used" {
|
|
test_checksum=$(sha512sum "$(pwd)/test/test-files/ssl/custom-dhe-params.pem" | awk '{print $1}')
|
|
run echo "$test_checksum"
|
|
refute_output '' # checksum must not be empty
|
|
|
|
docker_dovecot_checksum=$(docker exec mail_manual_dhparams_not_one_dir sha512sum /etc/dovecot/dh.pem | awk '{print $1}')
|
|
docker_postfix_checksum=$(docker exec mail_manual_dhparams_not_one_dir sha512sum /etc/postfix/dhparams.pem | awk '{print $1}')
|
|
assert_equal "$docker_dovecot_checksum" "$test_checksum"
|
|
assert_equal "$docker_postfix_checksum" "$test_checksum"
|
|
}
|
|
|
|
@test "checking dhparams: ONE_DIR=0 check warning output when using manual dhparams" {
|
|
run sh -c "docker logs mail_manual_dhparams_not_one_dir | grep 'Using self-generated dhparams is considered as insecure'"
|
|
assert_success
|
|
}
|
|
|
|
@test "last" {
|
|
skip 'this test is only there to reliably mark the end for the teardown_file'
|
|
}
|