added more integration tests
parent
2255f5e31a
commit
473ee13b64
|
@ -3,29 +3,347 @@
|
||||||
# and should not be used as examples of how to write Ansible roles #
|
# and should not be used as examples of how to write Ansible roles #
|
||||||
####################################################################
|
####################################################################
|
||||||
|
|
||||||
# Test code for the gpg_keypair module.
|
# Test code for the community.crypto.gpg_keypair module.
|
||||||
#
|
#
|
||||||
# Copyright (c) 2024, Austin Lucas Lake <53884490+austinlucaslake@users.noreply.github.com>
|
# Copyright (c) 2024, Austin Lucas Lake <53884490+austinlucaslake@users.noreply.github.com>
|
||||||
# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
|
# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
|
||||||
# SPDX-License-Identifier: GPL-3.0-or-later
|
# SPDX-License-Identifier: GPL-3.0-or-later
|
||||||
|
|
||||||
- name: Create GPG key
|
- name: Create default key
|
||||||
gpg_keypair:
|
community.crypto.gpg_keypair:
|
||||||
name: "{{ name }}"
|
name: '{{ name }}'
|
||||||
comment: "{{ comment }}"
|
comment: '{{ comment }}'
|
||||||
email: "{{ email }}"
|
email: '{{ email }}'
|
||||||
force: True
|
register: created_key
|
||||||
register: created_gpg_key
|
- name: Match default key
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
- name: Delete GPG key
|
name: '{{ name }}'
|
||||||
gpg_keypair:
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: matched_key
|
||||||
|
- name: Delete default key using fingerprint
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
state: absent
|
state: absent
|
||||||
name: "{{ name }}"
|
fingerprints: '{{ created_key.fingerprints }}'
|
||||||
comment: "{{ comment }}"
|
register: deleted_key
|
||||||
email: "{{ email }}"
|
- ansible.builtin.assert:
|
||||||
register: deleted_gpg_key
|
|
||||||
|
|
||||||
- assert:
|
|
||||||
that:
|
that:
|
||||||
- created_gpg_key.changed
|
- created_key.changed
|
||||||
- deleted_gpg_key.changed
|
- deleted_key.changed
|
||||||
|
- created_key.fingerprints == deleted_key.fingerprints
|
||||||
|
|
||||||
|
|
||||||
|
- name: Create default key
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: created_key
|
||||||
|
- name: Delete default key using user-id
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
state: absent
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: deleted_key
|
||||||
|
- ansible.builtin.assert:
|
||||||
|
that:
|
||||||
|
- created_key.changed
|
||||||
|
- deleted_key.changed
|
||||||
|
- created_key.fingerprints == deleted_key.fingerprints
|
||||||
|
|
||||||
|
|
||||||
|
- name: Create default RSA key
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
key_type: RSA
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: created_key
|
||||||
|
- name: Delete default RSA key
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
state: absent
|
||||||
|
key_type: RSA
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: deleted_key
|
||||||
|
- ansible.builtin.assert:
|
||||||
|
that:
|
||||||
|
- created_key.changed
|
||||||
|
- deleted_key.changed
|
||||||
|
- created_key.fingerprints == deleted_key.fingerprints
|
||||||
|
|
||||||
|
|
||||||
|
- name: Create 2048-bit RSA key
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
key_type: RSA
|
||||||
|
key_length: 2048
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: created_key
|
||||||
|
- name: Delete default RSA key
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
state: absent
|
||||||
|
key_length: 2048
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: deleted_key
|
||||||
|
- ansible.builtin.assert:
|
||||||
|
that:
|
||||||
|
- created_key.changed
|
||||||
|
- deleted_key.changed
|
||||||
|
- created_key.fingerprints == deleted_key.fingerprints
|
||||||
|
|
||||||
|
|
||||||
|
- name: Create default DSA key
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
key_type: DSA
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: created_key
|
||||||
|
- name: Delete default DSA key
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
state: absent
|
||||||
|
key_type: DSA
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: deleted_key
|
||||||
|
- ansible.builtin.assert:
|
||||||
|
that:
|
||||||
|
- created_key.changed
|
||||||
|
- deleted_key.changed
|
||||||
|
- created_key.fingerprints == deleted_key.fingerprints
|
||||||
|
|
||||||
|
|
||||||
|
- name: Create brainpoolP512r1 ECDSA key
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
key_type: ECDSA
|
||||||
|
key_curve: brainpoolP512r1
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: created_key
|
||||||
|
- name: Delete brainpoolP512r1 ECDSA key
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
state: absent
|
||||||
|
key_type: ECDSA
|
||||||
|
key_length: brainpoolP512r1
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: deleted_key
|
||||||
|
- ansible.builtin.assert:
|
||||||
|
that:
|
||||||
|
- created_key.changed
|
||||||
|
- deleted_key.changed
|
||||||
|
- created_key.fingerprints == deleted_key.fingerprints
|
||||||
|
|
||||||
|
|
||||||
|
- name: Create Ed25519 key
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
key_type: EDDSA
|
||||||
|
key_curve: ed25519
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: created_key
|
||||||
|
- name: Delete Ed25519 key
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
state: absent
|
||||||
|
key_type: EDDSA
|
||||||
|
key_curve: ed25519
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: deleted_key
|
||||||
|
- ansible.builtin.assert:
|
||||||
|
that:
|
||||||
|
- created_key.changed
|
||||||
|
- deleted_key.changed
|
||||||
|
- created_key.fingerprints == deleted_key.fingerprints
|
||||||
|
|
||||||
|
|
||||||
|
- name: Create default key with custom usage
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
key_usage:
|
||||||
|
- sign
|
||||||
|
- auth
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: created_key
|
||||||
|
- name: Delete default key with custom usage
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
state: absent
|
||||||
|
key_usage:
|
||||||
|
- sign
|
||||||
|
- auth
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: deleted_key
|
||||||
|
- ansible.builtin.assert:
|
||||||
|
that:
|
||||||
|
- created_key.changed
|
||||||
|
- deleted_key.changed
|
||||||
|
- created_key.fingerprints == deleted_key.fingerprints
|
||||||
|
|
||||||
|
|
||||||
|
- name: Create default key with default RSA subkey
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
subkeys:
|
||||||
|
- { subkey_type: RSA }
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: created_key
|
||||||
|
- name: Delete default key with default RSA subkey
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
state: absent
|
||||||
|
subkeys:
|
||||||
|
- { subkey_type: RSA }
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: deleted_key
|
||||||
|
- ansible.builtin.assert:
|
||||||
|
that:
|
||||||
|
- created_key.changed
|
||||||
|
- deleted_key.changed
|
||||||
|
- created_key.fingerprints == deleted_key.fingerprints
|
||||||
|
|
||||||
|
|
||||||
|
- name: Create default key with default DSA subkey
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
subkeys:
|
||||||
|
- { subkey_type: DSA }
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: created_key
|
||||||
|
- name: Delete default key with default DSA subkey
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
state: absent
|
||||||
|
subkeys:
|
||||||
|
- { subkey_type: DSA }
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: deleted_key
|
||||||
|
- ansible.builtin.assert:
|
||||||
|
that:
|
||||||
|
- created_key.changed
|
||||||
|
- deleted_key.changed
|
||||||
|
- created_key.fingerprints == deleted_key.fingerprints
|
||||||
|
|
||||||
|
|
||||||
|
- name: Create default key with default ELG subkey
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
subkeys:
|
||||||
|
- { subkey_type: ELG }
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
force: True
|
||||||
|
register: created_key
|
||||||
|
- name: Delete default key with default ELG subkey
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
state: absent
|
||||||
|
subkeys:
|
||||||
|
- { subkey_type: ELG }
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: deleted_key
|
||||||
|
- ansible.builtin.assert:
|
||||||
|
that:
|
||||||
|
- created_key.changed
|
||||||
|
- deleted_key.changed
|
||||||
|
- created_key.fingerprints == deleted_key.fingerprints
|
||||||
|
|
||||||
|
|
||||||
|
- name: Create default key with Ed25519 subkey
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
subkeys:
|
||||||
|
- { subkey_type: EDDSA, subkey_curve: ed25519 }
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: created_key
|
||||||
|
- name: Delete default key with Ed25519 subkey
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
state: absent
|
||||||
|
subkeys:
|
||||||
|
- { subkey_type: EDDSA, subkey_curve: ed25519 }
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: deleted_key
|
||||||
|
- ansible.builtin.assert:
|
||||||
|
that:
|
||||||
|
- created_key.changed
|
||||||
|
- deleted_key.changed
|
||||||
|
- created_key.fingerprints == deleted_key.fingerprints
|
||||||
|
|
||||||
|
|
||||||
|
- name: Create default key with Cv25519 ECDH subkey
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
subkeys:
|
||||||
|
- { subkey_type: ECDH, subkey_curve: cv25519 }
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: created_key
|
||||||
|
- name: Delete default key with Cv25519 ECDH subkey
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
state: absent
|
||||||
|
subkeys:
|
||||||
|
- { subkey_type: ECDH, subkey_curve: cv25519 }
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: deleted_key
|
||||||
|
- ansible.builtin.assert:
|
||||||
|
that:
|
||||||
|
- created_key.changed
|
||||||
|
- deleted_key.changed
|
||||||
|
- created_key.fingerprints == deleted_key.fingerprints
|
||||||
|
|
||||||
|
|
||||||
|
- name: Create default key with RSA subkey with custom usage
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
subkeys:
|
||||||
|
- {
|
||||||
|
subkey_type: RSA,
|
||||||
|
subkey_usage:
|
||||||
|
- auth
|
||||||
|
- encr
|
||||||
|
}
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: created_key
|
||||||
|
- name: Delete default key with RSA subkey with custom usage
|
||||||
|
community.crypto.gpg_keypair:
|
||||||
|
state: absent
|
||||||
|
subkeys:
|
||||||
|
- {
|
||||||
|
subkey_type: RSA,
|
||||||
|
subkey_usage:
|
||||||
|
- auth
|
||||||
|
- encr
|
||||||
|
}
|
||||||
|
name: '{{ name }}'
|
||||||
|
comment: '{{ comment }}'
|
||||||
|
email: '{{ email }}'
|
||||||
|
register: deleted_key
|
||||||
|
- ansible.builtin.assert:
|
||||||
|
that:
|
||||||
|
- created_key.changed
|
||||||
|
- deleted_key.changed
|
||||||
|
- created_key.fingerprints == deleted_key.fingerprints
|
||||||
|
|
Loading…
Reference in New Issue