mirror of
https://github.com/CyberMind-FR/secubox-deb.git
synced 2026-07-29 13:59:40 +00:00
CyberMind-FR
6bd4fb3e11
- Reads cert from /etc/letsencrypt/live/{domain}/cert.pem
- Thresholds: >7j ok, 3-7j warn, <3j error, ≤0 expired
- 5 unit tests with mocked certificates
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
88 lines
3.4 KiB
Python
88 lines
3.4 KiB
Python
"""
|
|
SecuBox-Deb :: SSL Status Tests
|
|
CyberMind — https://cybermind.fr
|
|
Author: Gérald Kerma <gandalf@gk2.net>
|
|
License: Proprietary / ANSSI CSPN candidate
|
|
"""
|
|
|
|
import pytest
|
|
from datetime import datetime, timezone, timedelta
|
|
from unittest.mock import patch, MagicMock
|
|
from pathlib import Path
|
|
import sys
|
|
|
|
sys.path.insert(0, str(Path(__file__).parent.parent / "packages/secubox-metrics/api"))
|
|
from main import get_ssl_status
|
|
|
|
|
|
def test_ssl_status_ok():
|
|
"""Cert with 45 days remaining returns status ok."""
|
|
now = datetime(2025, 1, 1, 12, 0, 0, tzinfo=timezone.utc)
|
|
mock_cert = MagicMock()
|
|
mock_cert.not_valid_after_utc = now + timedelta(days=45)
|
|
|
|
with patch.object(Path, 'exists', return_value=True), \
|
|
patch.object(Path, 'read_bytes', return_value=b'cert data'), \
|
|
patch('main.x509.load_pem_x509_certificate', return_value=mock_cert), \
|
|
patch('main.datetime') as mock_datetime:
|
|
mock_datetime.now.return_value = now
|
|
result = get_ssl_status("example.com")
|
|
assert result["status"] == "ok"
|
|
assert result["days_remaining"] == 45
|
|
|
|
|
|
def test_ssl_status_warn():
|
|
"""Cert with 5 days remaining returns status warn."""
|
|
now = datetime(2025, 1, 1, 12, 0, 0, tzinfo=timezone.utc)
|
|
mock_cert = MagicMock()
|
|
mock_cert.not_valid_after_utc = now + timedelta(days=5)
|
|
|
|
with patch.object(Path, 'exists', return_value=True), \
|
|
patch.object(Path, 'read_bytes', return_value=b'cert data'), \
|
|
patch('main.x509.load_pem_x509_certificate', return_value=mock_cert), \
|
|
patch('main.datetime') as mock_datetime:
|
|
mock_datetime.now.return_value = now
|
|
result = get_ssl_status("example.com")
|
|
assert result["status"] == "warn"
|
|
assert result["days_remaining"] == 5
|
|
|
|
|
|
def test_ssl_status_error():
|
|
"""Cert with 2 days remaining returns status error."""
|
|
now = datetime(2025, 1, 1, 12, 0, 0, tzinfo=timezone.utc)
|
|
mock_cert = MagicMock()
|
|
mock_cert.not_valid_after_utc = now + timedelta(days=2)
|
|
|
|
with patch.object(Path, 'exists', return_value=True), \
|
|
patch.object(Path, 'read_bytes', return_value=b'cert data'), \
|
|
patch('main.x509.load_pem_x509_certificate', return_value=mock_cert), \
|
|
patch('main.datetime') as mock_datetime:
|
|
mock_datetime.now.return_value = now
|
|
result = get_ssl_status("example.com")
|
|
assert result["status"] == "error"
|
|
assert result["days_remaining"] == 2
|
|
|
|
|
|
def test_ssl_status_expired():
|
|
"""Cert with -3 days (expired) returns status expired."""
|
|
now = datetime(2025, 1, 1, 12, 0, 0, tzinfo=timezone.utc)
|
|
mock_cert = MagicMock()
|
|
mock_cert.not_valid_after_utc = now - timedelta(days=3)
|
|
|
|
with patch.object(Path, 'exists', return_value=True), \
|
|
patch.object(Path, 'read_bytes', return_value=b'cert data'), \
|
|
patch('main.x509.load_pem_x509_certificate', return_value=mock_cert), \
|
|
patch('main.datetime') as mock_datetime:
|
|
mock_datetime.now.return_value = now
|
|
result = get_ssl_status("example.com")
|
|
assert result["status"] == "expired"
|
|
assert result["days_remaining"] == -3
|
|
|
|
|
|
def test_ssl_status_not_found():
|
|
"""Missing cert file returns status unknown."""
|
|
with patch.object(Path, 'exists', return_value=False):
|
|
result = get_ssl_status("nonexistent.com")
|
|
assert result["status"] == "unknown"
|
|
assert result["days_remaining"] is None
|