diff --git a/roles/xmpp_server/molecule/default/tests/test_default.py b/roles/xmpp_server/molecule/default/tests/test_default.py index 141d92148069d7f79942ec9b306c689995ccf0bf..1049cde7880b741954a34557029785294ea9671f 100644 --- a/roles/xmpp_server/molecule/default/tests/test_default.py +++ b/roles/xmpp_server/molecule/default/tests/test_default.py @@ -145,6 +145,31 @@ def test_xmpp_server_dh_parameters_file(host): assert "DH Parameters: (2048 bit)" in dhparam_info.stdout +def test_prosody_tls_files(host): + """ + Tests if Prosody TLS private key and certificage have been deployed + correctly. + """ + + hostname = host.run('hostname -f').stdout.strip() + + with host.sudo(): + + tls_file = host.file('/etc/ssl/private/%s_xmpp.key' % hostname) + assert tls_file.is_file + assert tls_file.user == 'root' + assert tls_file.group == 'prosody' + assert tls_file.mode == 0o640 + assert tls_file.content_string == open("tests/data/x509/%s_xmpp.key.pem" % hostname, "r").read().rstrip() + + tls_file = host.file('/etc/ssl/certs/%s_xmpp.pem' % hostname) + assert tls_file.is_file + assert tls_file.user == 'root' + assert tls_file.group == 'root' + assert tls_file.mode == 0o644 + assert tls_file.content_string == open("tests/data/x509/%s_xmpp.cert.pem" % hostname, "r").read().rstrip() + + # @TODO: Tests which were not implemented due to lack of out-of-box tools: # # - Proxy capability.