mirror of
https://github.com/awatertrevi/infisical.git
synced 2026-10-07 12:27:28 +00:00
75 lines
4.2 KiB
Gherkin
75 lines
4.2 KiB
Gherkin
Feature: Order
|
|
|
|
Scenario: Create a new order
|
|
Given I have an ACME cert profile as "acme_profile"
|
|
When I have an ACME client connecting to {BASE_URL}/api/v1/pki/acme/profiles/{acme_profile.id}/directory
|
|
# # TODO: make it I have an account already instead?
|
|
Then I register a new ACME account with email [email protected] and EAB key id "{acme_profile.eab_kid}" with secret "{acme_profile.eab_secret}" as acme_account
|
|
When I create certificate signing request as csr
|
|
Then I add names to certificate signing request csr
|
|
"""
|
|
{
|
|
"COMMON_NAME": "localhost"
|
|
}
|
|
"""
|
|
Then I create a RSA private key pair as cert_key
|
|
Then I sign the certificate signing request csr with private key cert_key and output it as csr_pem in PEM format
|
|
Then I submit the certificate signing request PEM csr_pem certificate order to the ACME server as order
|
|
Then the value order.uri with jq "." should match pattern {BASE_URL}/api/v1/pki/acme/profiles/{acme_profile.id}/orders/(.+)
|
|
Then the value order.body with jq ".status" should be equal to "pending"
|
|
Then the value order.body with jq ".identifiers" should be equal to [{"type": "dns", "value": "localhost"}]
|
|
Then the value order.body with jq ".finalize" should match pattern {BASE_URL}/api/v1/pki/acme/profiles/{acme_profile.id}/orders/(.+)/finalize
|
|
Then the value order.body with jq "all(.authorizations[]; startswith('{BASE_URL}/api/v1/pki/acme/profiles/{acme_profile.id}/authorizations/'))" should be equal to true
|
|
|
|
Scenario: Create a new order with SANs
|
|
Given I have an ACME cert profile as "acme_profile"
|
|
When I have an ACME client connecting to {BASE_URL}/api/v1/pki/acme/profiles/{acme_profile.id}/directory
|
|
# # TODO: make it I have an account already instead?
|
|
Then I register a new ACME account with email [email protected] and EAB key id "{acme_profile.eab_kid}" with secret "{acme_profile.eab_secret}" as acme_account
|
|
When I create certificate signing request as csr
|
|
Then I add names to certificate signing request csr
|
|
"""
|
|
{
|
|
"COMMON_NAME": "localhost"
|
|
}
|
|
"""
|
|
Then I add subject alternative name to certificate signing request csr
|
|
"""
|
|
[
|
|
"example.com",
|
|
"infisical.com"
|
|
]
|
|
"""
|
|
Then I create a RSA private key pair as cert_key
|
|
Then I sign the certificate signing request csr with private key cert_key and output it as csr_pem in PEM format
|
|
Then I submit the certificate signing request PEM csr_pem certificate order to the ACME server as order
|
|
Then the value order.body with jq ".identifiers | sort_by(.value)" should be equal to json
|
|
"""
|
|
[
|
|
{"type": "dns", "value": "example.com"},
|
|
{"type": "dns", "value": "infisical.com"},
|
|
{"type": "dns", "value": "localhost"}
|
|
]
|
|
"""
|
|
|
|
Scenario: Fetch an order
|
|
Given I have an ACME cert profile as "acme_profile"
|
|
When I have an ACME client connecting to {BASE_URL}/api/v1/pki/acme/profiles/{acme_profile.id}/directory
|
|
# # TODO: make it I have an account already instead?
|
|
Then I register a new ACME account with email [email protected] and EAB key id "{acme_profile.eab_kid}" with secret "{acme_profile.eab_secret}" as acme_account
|
|
When I create certificate signing request as csr
|
|
Then I add names to certificate signing request csr
|
|
"""
|
|
{
|
|
"COMMON_NAME": "localhost"
|
|
}
|
|
"""
|
|
Then I create a RSA private key pair as cert_key
|
|
Then I sign the certificate signing request csr with private key cert_key and output it as csr_pem in PEM format
|
|
Then I submit the certificate signing request PEM csr_pem certificate order to the ACME server as order
|
|
Then I send an ACME post-as-get to order.uri as fetched_order
|
|
Then the value fetched_order with jq ".status" should be equal to "pending"
|
|
Then the value fetched_order with jq ".identifiers" should be equal to [{"type": "dns", "value": "localhost"}]
|
|
Then the value fetched_order with jq ".finalize" should match pattern {BASE_URL}/api/v1/pki/acme/profiles/{acme_profile.id}/orders/(.+)/finalize
|
|
Then the value fetched_order with jq "all(.authorizations[]; startswith('{BASE_URL}/api/v1/pki/acme/profiles/{acme_profile.id}/authorizations/'))" should be equal to true
|