root
/
rabbitmq-server
mirror of https://github.com/rabbitmq/rabbitmq-server.git
1
0
Fork 0
Code Issues Actions Packages Projects Releases Wiki Activity

Introduce timers to change directory modification time 

The file system reports time to an accuracy of one second. So, unless
we wait for at least one second, we may see no change in modification
time. The trust-store relies on this to tell when the whitelist needs
to be refreshed.
This commit is contained in:
Joseph Yiasemides 2016-02-10 08:43:33 +01:00
parent b6bcc1627c
commit a92f993bb3
1 changed files with 19 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
deps/rabbitmq_trust_store/test/rabbit_trust_store_test.erl vendored
View File

@ -140,12 +140,15 @@ removed_certificate_denied_from_AMQP_client_test_() ->
ok = change_configuration(rabbitmq_trust_store, [
{whitelist, friendlies()}, {expiry, expiry()}]),
%% When: we remove the whitelisted certificate then wait for
%% it to take effect.
%% When: we wait for at least one second (the accuracy of the
%% file system's time), remove the whitelisted certificate,
%% then wait for the trust-store to refresh the whitelist.
ok = rabbit_networking:start_ssl_listener(port(), [
{cacerts, [R]}, {cert, _U}, {key, _V}|cfg()], 1),
wait_for_file_system_time(),
ok = delete("bob.pem"),
timer:sleep(2 * expiry()),
wait_for_trust_store_refresh(),
%% Then: a client presenting the removed whitelisted
%% certificate `C` is denied.
@ -176,12 +179,15 @@ installed_certificate_accepted_from_AMQP_client_test_() ->
ok = change_configuration(rabbitmq_trust_store, [
{whitelist, friendlies()}, {expiry, expiry()}]),
%% When: we add the certificate to the whitelist directory,
%% then wait for it to take effect.
%% When: we wait for at least one second (the accuracy of the
%% file system's time), add a certificate to the directory,
%% then wait for the trust-store to refresh the whitelist.
ok = rabbit_networking:start_ssl_listener(port(), [
{cacerts, [R]}, {cert, _U}, {key, _V}|cfg()], 1),
wait_for_file_system_time(),
ok = whitelist(friendlies(), "charlie", C, _X),
timer:sleep(2 * expiry()),
wait_for_trust_store_refresh(),
%% Then: a client presenting the whitelisted certificate `C`
%% is allowed.
@ -208,7 +214,13 @@ friendlies() ->
Name.
expiry() ->
timer:seconds(2).
timer:seconds(1).
wait_for_file_system_time() ->
timer:sleep(timer:seconds(1)).
wait_for_trust_store_refresh() ->
timer:sleep(2 * expiry()).
cfg() ->
{ok, Cfg} = application:get_env(rabbit, ssl_options),