mirror of
https://github.com/angristan/openvpn-install.git
synced 2025-12-16 08:57:03 +01:00
0d4d2229f4
## Summary - Add end-to-end tests for certificate revocation functionality - Test that a revoked client certificate cannot connect to the VPN - Test that a new certificate can be created with the same name as a revoked one (validating the fix from #1185) - Test that the new certificate can successfully connect ## Test Flow 1. **Initial connectivity tests** - existing tests pass 2. **Certificate revocation test**: - Create a new client `revoketest` - Connect with the certificate (verifies it works) - Disconnect the client - Revoke the certificate via the install script - Try to reconnect with revoked cert (verifies connection is rejected) 3. **Reuse revoked name test**: - Create a new certificate with the same name `revoketest` - Verify both revoked and valid entries exist in `index.txt` - Connect with the new certificate (verifies it works) ## Changes | File | Changes | |------|---------| | `test/server-entrypoint.sh` | Start OpenVPN in background, add revocation test orchestration | | `test/client-entrypoint.sh` | Add revocation test phases with signal file coordination | | `docker-compose.yml` | Remove read-only restriction on shared volume for client | | `Makefile` | Increase timeout from 60 to 180 iterations | | `.github/workflows/docker-test.yml` | Increase timeouts, fix shared volume |
133 lines
2.8 KiB
Makefile
133 lines
2.8 KiB
Makefile
.PHONY: test test-build test-up test-down test-logs test-clean
|
|
|
|
# Run the full test suite
|
|
test: test-build test-up
|
|
@echo "Waiting for tests to complete..."
|
|
@for i in $$(seq 1 180); do \
|
|
if docker logs openvpn-client 2>&1 | grep -q "ALL TESTS PASSED"; then \
|
|
echo "✓ Tests passed!"; \
|
|
$(MAKE) test-down; \
|
|
exit 0; \
|
|
fi; \
|
|
if docker logs openvpn-client 2>&1 | grep -q "FAIL:"; then \
|
|
echo "✗ Tests failed!"; \
|
|
docker logs openvpn-client; \
|
|
$(MAKE) test-down; \
|
|
exit 1; \
|
|
fi; \
|
|
echo "Waiting... ($$i/180)"; \
|
|
sleep 2; \
|
|
done; \
|
|
echo "Timeout waiting for tests"; \
|
|
$(MAKE) test-down; \
|
|
exit 1
|
|
|
|
# Build test containers
|
|
test-build:
|
|
BASE_IMAGE=$(BASE_IMAGE) docker compose build
|
|
|
|
# Start test containers
|
|
test-up:
|
|
docker compose up -d
|
|
|
|
# Stop and remove test containers
|
|
test-down:
|
|
docker compose down -v --remove-orphans
|
|
|
|
# View logs
|
|
test-logs:
|
|
docker compose logs -f
|
|
|
|
# View server logs only
|
|
test-logs-server:
|
|
docker logs -f openvpn-server
|
|
|
|
# View client logs only
|
|
test-logs-client:
|
|
docker logs -f openvpn-client
|
|
|
|
# Full cleanup
|
|
test-clean: test-down
|
|
docker rmi openvpn-install-openvpn-server openvpn-install-openvpn-client 2>/dev/null || true
|
|
docker volume prune -f
|
|
|
|
# Interactive shell into server container
|
|
test-shell-server:
|
|
docker exec -it openvpn-server /bin/bash
|
|
|
|
# Interactive shell into client container
|
|
test-shell-client:
|
|
docker exec -it openvpn-client /bin/bash
|
|
|
|
# Test specific distributions
|
|
test-ubuntu-18.04:
|
|
$(MAKE) test BASE_IMAGE=ubuntu:18.04
|
|
|
|
test-ubuntu-20.04:
|
|
$(MAKE) test BASE_IMAGE=ubuntu:20.04
|
|
|
|
test-ubuntu-22.04:
|
|
$(MAKE) test BASE_IMAGE=ubuntu:22.04
|
|
|
|
test-ubuntu-24.04:
|
|
$(MAKE) test BASE_IMAGE=ubuntu:24.04
|
|
|
|
test-debian-11:
|
|
$(MAKE) test BASE_IMAGE=debian:11
|
|
|
|
test-debian-12:
|
|
$(MAKE) test BASE_IMAGE=debian:12
|
|
|
|
test-fedora-40:
|
|
$(MAKE) test BASE_IMAGE=fedora:40
|
|
|
|
test-fedora-41:
|
|
$(MAKE) test BASE_IMAGE=fedora:41
|
|
|
|
test-rocky-8:
|
|
$(MAKE) test BASE_IMAGE=rockylinux:8
|
|
|
|
test-rocky-9:
|
|
$(MAKE) test BASE_IMAGE=rockylinux:9
|
|
|
|
test-almalinux-8:
|
|
$(MAKE) test BASE_IMAGE=almalinux:8
|
|
|
|
test-almalinux-9:
|
|
$(MAKE) test BASE_IMAGE=almalinux:9
|
|
|
|
test-oracle-8:
|
|
$(MAKE) test BASE_IMAGE=oraclelinux:8
|
|
|
|
test-oracle-9:
|
|
$(MAKE) test BASE_IMAGE=oraclelinux:9
|
|
|
|
test-amazon-2023:
|
|
$(MAKE) test BASE_IMAGE=amazonlinux:2023
|
|
|
|
test-arch:
|
|
$(MAKE) test BASE_IMAGE=archlinux:latest
|
|
|
|
test-centos-stream-9:
|
|
$(MAKE) test BASE_IMAGE=quay.io/centos/centos:stream9
|
|
|
|
# Test all distributions (runs sequentially)
|
|
test-all:
|
|
$(MAKE) test-ubuntu-18.04
|
|
$(MAKE) test-ubuntu-20.04
|
|
$(MAKE) test-ubuntu-22.04
|
|
$(MAKE) test-ubuntu-24.04
|
|
$(MAKE) test-debian-11
|
|
$(MAKE) test-debian-12
|
|
$(MAKE) test-fedora-40
|
|
$(MAKE) test-fedora-41
|
|
$(MAKE) test-rocky-8
|
|
$(MAKE) test-rocky-9
|
|
$(MAKE) test-almalinux-8
|
|
$(MAKE) test-almalinux-9
|
|
$(MAKE) test-oracle-8
|
|
$(MAKE) test-oracle-9
|
|
$(MAKE) test-amazon-2023
|
|
$(MAKE) test-arch
|
|
$(MAKE) test-centos-stream-9
|