summaryrefslogtreecommitdiff
path: root/spec/unit/plugins/fips_spec.rb
blob: c91ef5b280f923c56700fe74c78993f1a219b5b2 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
#
# Author:: Matt Wrock (<matt@mattwrock.com>)
# Copyright:: Copyright (c) 2016-2020 Chef Software, Inc.
# License:: Apache License, Version 2.0
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#

require "spec_helper"
require "openssl"

describe Ohai::System, "plugin fips" do
  subject do
    plugin.run
    plugin["fips"]["kernel"]["enabled"]
  end

  let(:enabled) { 0 }
  let(:plugin) { get_plugin("fips") }
  let(:openssl_test_mode) { false }

  before do
    allow(plugin).to receive(:collect_os).and_return(:linux)
  end

  around do |ex|

    $FIPS_TEST_MODE = openssl_test_mode
    ex.run
  ensure
    $FIPS_TEST_MODE = false

  end

  context "with OpenSSL.fips_mode == false" do
    before { allow(OpenSSL).to receive(:fips_mode).and_return(false) }

    it "does not set fips plugin" do
      expect(subject).to be(false)
    end
  end

  context "with OpenSSL.fips_mode == true" do
    before { allow(OpenSSL).to receive(:fips_mode).and_return(true) }

    it "sets fips plugin" do
      expect(subject).to be(true)
    end
  end
end