131 lines
4.5 KiB
Go
131 lines
4.5 KiB
Go
package config
|
||
|
||
import (
|
||
"bytes"
|
||
"context"
|
||
"os"
|
||
"path/filepath"
|
||
"strings"
|
||
"testing"
|
||
"time"
|
||
|
||
"git.pcux.cn/xuans/Smail/services/externalemail"
|
||
"git.pcux.cn/xuans/Smail/utils/credential"
|
||
"git.pcux.cn/xuans/Smail/utils/runtimepath"
|
||
)
|
||
|
||
func TestDataMigrationKeepsSecretsCertificatesAndBackupRestorable(t *testing.T) {
|
||
root := t.TempDir()
|
||
runtime := validMySQLRuntimeConfig(t, root)
|
||
vault, err := credential.NewVault(root)
|
||
if err != nil {
|
||
t.Fatal(err)
|
||
}
|
||
external, err := externalemail.NewVault(root)
|
||
if err != nil {
|
||
t.Fatal(err)
|
||
}
|
||
emailCipher, _ := external.Encrypt("test@example.com")
|
||
fingerprint, _ := external.Fingerprint("test@example.com")
|
||
private, certificate := testManagedCertificate(t, "example.com", time.Now().Add(-time.Hour), time.Now().Add(time.Hour), 2048)
|
||
reference, err := stageManagedSSLAtRoot(root, ManagedSSLModeUpload, private, certificate, nil, []string{"example.com"})
|
||
if err != nil {
|
||
t.Fatal(err)
|
||
}
|
||
runtime.SSL.TLS = SSLConfig{
|
||
Mode: ManagedSSLModeUpload, Management: SSLManagementCustom,
|
||
DefaultDirectory: "config/ssl", CustomDirectory: "config/ssl",
|
||
CertificateRef: strings.Replace(reference.CertificateRef, "data/", "config/", 1),
|
||
PrivateKeyRef: strings.Replace(reference.PrivateKeyRef, "data/", "config/", 1),
|
||
}
|
||
writeRuntimeFixture(t, root, runtime)
|
||
validation := RuntimeValidationOptions{HasSuperAdmin: true}
|
||
store := NewTransactionStore(root, validation)
|
||
if _, err := store.CreateBackup(runtime); err != nil {
|
||
t.Fatal(err)
|
||
}
|
||
writer, err := NewFileAuditWriter(root)
|
||
if err != nil {
|
||
t.Fatal(err)
|
||
}
|
||
if err := writer.WriteConfigAudit(context.Background(), ConfigAuditEvent{
|
||
Operation: ConfigOperationUpdate, Section: SectionSMTP, ActorID: "1", ActorRole: "super_admin",
|
||
FromGeneration: 1, ToGeneration: 2, Result: "success", CreatedAt: time.Now().UTC(),
|
||
}); err != nil {
|
||
t.Fatal(err)
|
||
}
|
||
// 构造旧版磁盘布局；文件内容及密文均来自真实实现，而不是手写假密钥。
|
||
// 模拟停服时释放暂存租约，真实进程退出后操作系统也会释放文件锁。
|
||
releaseManagedSSL(root, SSLConfig{CertificateRef: reference.CertificateRef})
|
||
entries, _ := os.ReadDir(filepath.Join(root, "data"))
|
||
for _, entry := range entries {
|
||
if err := os.Rename(filepath.Join(root, "data", entry.Name()), filepath.Join(root, "config", entry.Name())); err != nil {
|
||
t.Fatal(err)
|
||
}
|
||
}
|
||
before, _ := os.ReadFile(filepath.Join(root, "config", "ssl.json"))
|
||
if _, err := credential.NewVault(root); err == nil {
|
||
t.Fatal("未迁移的旧密钥必须阻止生成新密钥")
|
||
}
|
||
if _, err := runtimepath.Migrate(root); err != nil {
|
||
t.Fatal(err)
|
||
}
|
||
after, _ := os.ReadFile(filepath.Join(root, "config", "ssl.json"))
|
||
if !bytes.Equal(before, after) {
|
||
t.Fatal("目录迁移不得篡改当前配置代次或摘要")
|
||
}
|
||
newVault, err := credential.NewVault(root)
|
||
if err != nil {
|
||
t.Fatal(err)
|
||
}
|
||
secret, err := OpenStoredSecret(newVault, runtime.Root.Database.Password)
|
||
expected, _ := OpenStoredSecret(vault, runtime.Root.Database.Password)
|
||
if err != nil || secret != expected {
|
||
t.Fatal("配置密文无法继续解密")
|
||
}
|
||
newExternal, err := externalemail.NewVault(root)
|
||
if err != nil {
|
||
t.Fatal(err)
|
||
}
|
||
plain, err := newExternal.Decrypt(emailCipher)
|
||
newFingerprint, _ := newExternal.Fingerprint("test@example.com")
|
||
if err != nil || plain != "test@example.com" || newFingerprint != fingerprint {
|
||
t.Fatal("外部邮箱密文或指纹发生改变")
|
||
}
|
||
loaded, err := NewConfigLoader(root, ConfigLoaderOptions{Validation: validation}).Load()
|
||
if err != nil || !strings.HasPrefix(loaded.SSL.TLS.CertificateRef, "data/") {
|
||
t.Fatalf("旧配置未兼容新目录：%v", err)
|
||
}
|
||
resolved, err := resolveManagedSSLReferencesAtRoot(root, loaded.SSL.TLS)
|
||
if err != nil {
|
||
t.Fatal(err)
|
||
}
|
||
material, _ := os.ReadFile(resolved.CertificatePath)
|
||
if !bytes.Equal(material, certificate) {
|
||
t.Fatal("证书发生改变")
|
||
}
|
||
backup, err := store.LoadBackup(runtime.Generation)
|
||
if err != nil {
|
||
t.Fatal(err)
|
||
}
|
||
if _, err := resolveManagedSSLReferencesAtRoot(root, backup.SSL.TLS); err != nil {
|
||
t.Fatal("历史备份中的旧证书引用无法使用")
|
||
}
|
||
setCandidateGeneration(&backup, loaded.Generation+1)
|
||
if err := store.Commit(loaded, backup); err != nil {
|
||
t.Fatal(err)
|
||
}
|
||
writer, err = NewFileAuditWriter(root)
|
||
if err != nil {
|
||
t.Fatal(err)
|
||
}
|
||
items, err := writer.Query(context.Background(), ConfigAuditQuery{})
|
||
if err != nil || len(items) != 1 {
|
||
t.Fatal("历史审计丢失")
|
||
}
|
||
entries, _ = os.ReadDir(filepath.Join(root, "config"))
|
||
if len(entries) != 5 {
|
||
t.Fatal("保存或备份恢复又向 config 写入了运行文件")
|
||
}
|
||
}
|