29 lines
1.2 KiB
Python
29 lines
1.2 KiB
Python
"""验证 Smail 的后台域名、别名跳转和根域名泛域名证书约束。"""
|
|
|
|
from pathlib import Path
|
|
import unittest
|
|
|
|
|
|
ROOT = Path(__file__).resolve().parents[2]
|
|
NGINX = (ROOT / 'deploy/nginx/smail.conf').read_text(encoding='utf-8')
|
|
CERTIFICATE = (ROOT / 'deploy/nginx/deploy_certificate.py').read_text(encoding='utf-8')
|
|
RENEWAL = (ROOT / 'deploy/nginx/renew_certificate.py').read_text(encoding='utf-8')
|
|
|
|
|
|
class DomainAcceptanceTest(unittest.TestCase):
|
|
def test_web_domain_is_the_only_public_web_proxy(self):
|
|
self.assertIn('server_name web.solit.cn;', NGINX)
|
|
self.assertIn('proxy_ssl_name web.solit.cn;', NGINX)
|
|
self.assertIn('return 308 https://web.solit.cn$request_uri;', NGINX)
|
|
self.assertNotIn('return 308 https://mail.solit.cn$request_uri;', NGINX)
|
|
|
|
def test_certificate_requests_root_and_wildcard(self):
|
|
self.assertIn("DOMAINS = ('solit.cn', '*.solit.cn')", CERTIFICATE)
|
|
self.assertIn("CERTIFICATE_SNI = 'web.solit.cn'", CERTIFICATE)
|
|
self.assertIn("'web.solit.cn'", CERTIFICATE)
|
|
self.assertIn('DOMAINS = deploy.DOMAINS', RENEWAL)
|
|
|
|
|
|
if __name__ == '__main__':
|
|
unittest.main(verbosity=2)
|