97 lines
2.9 KiB
Rust
97 lines
2.9 KiB
Rust
|
use std::time::Duration;
|
||
|
|
|
||
|
|
use openpgp::parse::Parse;
|
||
|
|
use openpgp::Cert;
|
||
|
|
use openpgp::Result;
|
||
|
|
use sequoia_openpgp as openpgp;
|
||
|
|
|
||
|
|
mod common;
|
||
|
|
use common::sq_key_generate;
|
||
|
|
use common::STANDARD_POLICY;
|
||
|
|
use common::Sq;
|
||
|
|
use common::time_as_string;
|
||
|
|
|
||
|
|
#[test]
|
||
|
|
fn sq_key_expire() -> Result<()> {
|
||
|
|
let (tmpdir, cert_path, time) = sq_key_generate(None)?;
|
||
|
|
let cert_path = cert_path.display().to_string();
|
||
|
|
let _cert = Cert::from_file(&cert_path)?;
|
||
|
|
|
||
|
|
let mut sq = Sq::at(time.into());
|
||
|
|
|
||
|
|
// Two days go by.
|
||
|
|
sq.tick(2 * 24 * 60 * 60);
|
||
|
|
|
||
|
|
let updated_path = &tmpdir.path().join("updated.pgp");
|
||
|
|
let updated2_path = &tmpdir.path().join("updated2.pgp");
|
||
|
|
|
||
|
|
// Change the key to expire in one day.
|
||
|
|
let mut cmd = sq.command();
|
||
|
|
cmd.args([
|
||
|
|
"key", "expire", "1d",
|
||
|
|
"--cert-file", &cert_path,
|
||
|
|
"--output", &updated_path.to_string_lossy(),
|
||
|
|
]);
|
||
|
|
sq.run(cmd, true);
|
||
|
|
|
||
|
|
eprintln!("Updated certificate to expire in one day:\n{}",
|
||
|
|
sq.inspect(&updated_path));
|
||
|
|
|
||
|
|
let updated = Cert::from_file(&updated_path).expect("valid cert");
|
||
|
|
|
||
|
|
// It should be alive now.
|
||
|
|
let vc = updated.with_policy(STANDARD_POLICY, sq.now()).expect("valid");
|
||
|
|
assert!(matches!(vc.alive(), Ok(())));
|
||
|
|
|
||
|
|
// It should be alive in 1 day minus 1 second.
|
||
|
|
let t = sq.now() + Duration::new(24 * 60 * 60 - 1, 0);
|
||
|
|
eprintln!("Checking expiration status at {}", time_as_string(t.into()));
|
||
|
|
let vc = updated.with_policy(STANDARD_POLICY, t).expect("valid");
|
||
|
|
assert!(matches!(vc.alive(), Ok(())));
|
||
|
|
|
||
|
|
// But in exactly one day, it should be expired.
|
||
|
|
let t = sq.now() + Duration::new(24 * 60 * 60, 0);
|
||
|
|
eprintln!("Checking expiration status at {}", time_as_string(t.into()));
|
||
|
|
let vc = updated.with_policy(STANDARD_POLICY, t).expect("valid");
|
||
|
|
assert!(matches!(vc.alive(), Err(_)));
|
||
|
|
|
||
|
|
// 12 hours go by. Clear the expiration time.
|
||
|
|
sq.tick(12 * 60 * 60);
|
||
|
|
|
||
|
|
let mut cmd = sq.command();
|
||
|
|
cmd.args([
|
||
|
|
"key", "expire", "never",
|
||
|
|
"--cert-file", &updated_path.to_string_lossy(),
|
||
|
|
"--output", &updated2_path.to_string_lossy(),
|
||
|
|
]);
|
||
|
|
sq.run(cmd, true);
|
||
|
|
|
||
|
|
let updated = Cert::from_file(&updated2_path).expect("valid cert");
|
||
|
|
|
||
|
|
eprintln!("Updated certificate to never expire:\n{}",
|
||
|
|
sq.inspect(&updated2_path));
|
||
|
|
|
||
|
|
// It should be alive now.
|
||
|
|
let vc = updated.with_policy(STANDARD_POLICY, None)
|
||
|
|
.expect("valid");
|
||
|
|
assert!(matches!(vc.alive(), Ok(())));
|
||
|
|
|
||
|
|
// It should be alive in 1 day minus 1 second.
|
||
|
|
let vc = updated.with_policy(
|
||
|
|
STANDARD_POLICY,
|
||
|
|
sq.now() + Duration::new(24 * 60 * 60 - 1, 0))
|
||
|
|
.expect("valid");
|
||
|
|
assert!(matches!(vc.alive(), Ok(())));
|
||
|
|
|
||
|
|
// And in exactly one day...
|
||
|
|
let vc = updated.with_policy(
|
||
|
|
STANDARD_POLICY,
|
||
|
|
sq.now() + Duration::new(24 * 60 * 60, 0))
|
||
|
|
.expect("valid");
|
||
|
|
assert!(matches!(vc.alive(), Ok(())));
|
||
|
|
|
||
|
|
tmpdir.close()?;
|
||
|
|
|
||
|
|
Ok(())
|
||
|
|
}
|