mirror of
https://github.com/Av0idD4rk/firegex.git
synced 2026-10-24 19:29:24 +00:00
75c54f0155
- Add Nginx stream proxy module for transparent TLS termination in NFProxy and NFRegex - Add backend routes and SQLite schema for certificate management (upload, view, delete) - Implement DNAT nftables redirection rules for deterministic TLS ports - Add frontend React components (TLSConfigModal, TLSServiceFields) for certificate configuration - Update Dockerfile and docker-entrypoint.sh to support Nginx stream module and sysctl forwarding
122 lines
4.4 KiB
Python
122 lines
4.4 KiB
Python
#!/usr/bin/env python3
|
|
import sys
|
|
import os
|
|
from unittest.mock import MagicMock
|
|
sys.modules['socketio'] = MagicMock()
|
|
sys.modules['socketio.exceptions'] = MagicMock()
|
|
sys.path.insert(0, os.path.abspath(os.path.join(os.path.dirname(__file__), '../backend')))
|
|
sys.path.insert(0, os.path.abspath(os.path.join(os.path.dirname(__file__), 'utils')))
|
|
|
|
from modules.nfproxy.nginx import get_tls_ports, update_nginx, NGINX_CONF_PATH
|
|
from colors import colors, puts, sep
|
|
|
|
# Create mock services
|
|
services = [
|
|
{
|
|
"service_id": "a1b2c3d4",
|
|
"name": "test_service",
|
|
"port": 443,
|
|
"status": "active",
|
|
"proto": "tcp",
|
|
"ip_int": "127.0.0.1",
|
|
"tls_enabled": 1,
|
|
"tls_cert": "CERT_CONTENT",
|
|
"tls_key": "KEY_CONTENT"
|
|
},
|
|
{
|
|
"service_id": "e5f6a7b8",
|
|
"name": "test_service_ipv6",
|
|
"port": 8443,
|
|
"status": "active",
|
|
"proto": "tcp",
|
|
"ip_int": "::1",
|
|
"tls_enabled": 1,
|
|
"tls_cert": "CERT6_CONTENT",
|
|
"tls_key": "KEY6_CONTENT"
|
|
}
|
|
]
|
|
|
|
try:
|
|
# We monkey-patch subprocess.run to prevent it from calling real nginx if it fails
|
|
import subprocess
|
|
orig_run = subprocess.run
|
|
def mock_run(args, *a, **k):
|
|
# Just pretend it succeeded
|
|
class MockCompletedProcess:
|
|
returncode = 0
|
|
stdout = b""
|
|
stderr = b""
|
|
return MockCompletedProcess()
|
|
subprocess.run = mock_run
|
|
|
|
sep()
|
|
puts("Running Nginx Config Unit Test...", color=colors.cyan, is_bold=True)
|
|
update_nginx(services)
|
|
puts("Nginx update completed successfully! ✔", color=colors.green)
|
|
|
|
# Check if config exists and has valid contents
|
|
if os.path.exists(NGINX_CONF_PATH):
|
|
with open(NGINX_CONF_PATH, "r") as f:
|
|
content = f.read()
|
|
|
|
# Check pid and error_log paths
|
|
assert "pid /tmp/firegex_nginx.pid;" in content
|
|
assert "error_log /tmp/firegex_nginx_error.log info;" in content
|
|
|
|
# Check cert paths
|
|
assert "ssl_certificate /tmp/firegex_cert_a1b2c3d4.crt;" in content
|
|
assert "ssl_certificate /tmp/firegex_cert_e5f6a7b8.crt;" in content
|
|
|
|
# Verify deterministic ports for IPv4
|
|
# sha256("127.0.0.1:443")[:4] as int = 3737521872
|
|
# 3737521872 % 10000 = 3936
|
|
# ssl_port = 10000 + 3936 = 13936
|
|
# clear_port = 20000 + 3936 = 23936
|
|
assert "127.0.0.1:13936" in content
|
|
assert "127.0.0.1:23936" in content
|
|
|
|
# Verify deterministic ports & bracket wrapping for IPv6
|
|
# sha256("::1:8443")[:4] as int = 2439169896
|
|
# 2439169896 % 10000 = 9896
|
|
# ssl_port = 10000 + 9896 = 19896
|
|
# clear_port = 20000 + 9896 = 29896
|
|
assert "[::1]:19896" in content
|
|
assert "[::1]:29896" in content
|
|
assert "[::1]:8443" in content
|
|
|
|
puts("Configuration assertions passed! ✔", color=colors.green)
|
|
|
|
# Check temp files were created
|
|
assert os.path.exists("/tmp/firegex_cert_a1b2c3d4.crt")
|
|
assert os.path.exists("/tmp/firegex_key_a1b2c3d4.key")
|
|
assert os.path.exists("/tmp/firegex_cert_e5f6a7b8.crt")
|
|
assert os.path.exists("/tmp/firegex_key_e5f6a7b8.key")
|
|
puts("Temporary certificate files created! ✔", color=colors.green)
|
|
else:
|
|
puts("Error: nginx.conf not found! ✗", color=colors.red)
|
|
sys.exit(1)
|
|
|
|
# Write dummy files to simulate Nginx creating PID and error log files
|
|
with open("/tmp/firegex_nginx.pid", "w") as f:
|
|
f.write("12345")
|
|
with open("/tmp/firegex_nginx_error.log", "w") as f:
|
|
f.write("log info")
|
|
|
|
# Test cleanup by passing an empty list
|
|
update_nginx([])
|
|
|
|
assert not os.path.exists(NGINX_CONF_PATH)
|
|
assert not os.path.exists("/tmp/firegex_cert_a1b2c3d4.crt")
|
|
assert not os.path.exists("/tmp/firegex_key_a1b2c3d4.key")
|
|
assert not os.path.exists("/tmp/firegex_cert_e5f6a7b8.crt")
|
|
assert not os.path.exists("/tmp/firegex_key_e5f6a7b8.key")
|
|
assert not os.path.exists("/tmp/firegex_nginx.pid")
|
|
assert not os.path.exists("/tmp/firegex_nginx_error.log")
|
|
puts("Cleanup verified successfully! ✔", color=colors.green)
|
|
|
|
finally:
|
|
# Restore subprocess.run
|
|
subprocess.run = orig_run
|
|
puts("Test passed! ✔", color=colors.green, is_bold=True)
|
|
sep()
|