Chris@1296: # Redmine - project management software Chris@1296: # Copyright (C) 2006-2012 Jean-Philippe Lang Chris@1296: # Chris@1296: # This program is free software; you can redistribute it and/or Chris@1296: # modify it under the terms of the GNU General Public License Chris@1296: # as published by the Free Software Foundation; either version 2 Chris@1296: # of the License, or (at your option) any later version. Chris@1296: # Chris@1296: # This program is distributed in the hope that it will be useful, Chris@1296: # but WITHOUT ANY WARRANTY; without even the implied warranty of Chris@1296: # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the Chris@1296: # GNU General Public License for more details. Chris@1296: # Chris@1296: # You should have received a copy of the GNU General Public License Chris@1296: # along with this program; if not, write to the Free Software Chris@1296: # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. Chris@1296: Chris@1296: require File.expand_path('../../../../test_helper', __FILE__) Chris@1296: Chris@1296: class Redmine::CipheringTest < ActiveSupport::TestCase Chris@1296: Chris@1296: def test_password_should_be_encrypted Chris@1296: Redmine::Configuration.with 'database_cipher_key' => 'secret' do Chris@1296: r = Repository::Subversion.create!(:password => 'foo', :url => 'file:///tmp', :identifier => 'svn') Chris@1296: assert_equal 'foo', r.password Chris@1296: assert r.read_attribute(:password).match(/\Aaes-256-cbc:.+\Z/) Chris@1296: end Chris@1296: end Chris@1296: Chris@1296: def test_password_should_be_clear_with_blank_key Chris@1296: Redmine::Configuration.with 'database_cipher_key' => '' do Chris@1296: r = Repository::Subversion.create!(:password => 'foo', :url => 'file:///tmp', :identifier => 'svn') Chris@1296: assert_equal 'foo', r.password Chris@1296: assert_equal 'foo', r.read_attribute(:password) Chris@1296: end Chris@1296: end Chris@1296: Chris@1296: def test_password_should_be_clear_with_nil_key Chris@1296: Redmine::Configuration.with 'database_cipher_key' => nil do Chris@1296: r = Repository::Subversion.create!(:password => 'foo', :url => 'file:///tmp', :identifier => 'svn') Chris@1296: assert_equal 'foo', r.password Chris@1296: assert_equal 'foo', r.read_attribute(:password) Chris@1296: end Chris@1296: end Chris@1296: Chris@1296: def test_blank_password_should_be_clear Chris@1296: Redmine::Configuration.with 'database_cipher_key' => 'secret' do Chris@1296: r = Repository::Subversion.create!(:password => '', :url => 'file:///tmp', :identifier => 'svn') Chris@1296: assert_equal '', r.password Chris@1296: assert_equal '', r.read_attribute(:password) Chris@1296: end Chris@1296: end Chris@1296: Chris@1296: def test_unciphered_password_should_be_readable Chris@1296: Redmine::Configuration.with 'database_cipher_key' => nil do Chris@1296: r = Repository::Subversion.create!(:password => 'clear', :url => 'file:///tmp', :identifier => 'svn') Chris@1296: end Chris@1296: Chris@1296: Redmine::Configuration.with 'database_cipher_key' => 'secret' do Chris@1296: r = Repository.first(:order => 'id DESC') Chris@1296: assert_equal 'clear', r.password Chris@1296: end Chris@1296: end Chris@1296: Chris@1296: def test_ciphered_password_with_no_cipher_key_configured_should_be_returned_ciphered Chris@1296: Redmine::Configuration.with 'database_cipher_key' => 'secret' do Chris@1296: r = Repository::Subversion.create!(:password => 'clear', :url => 'file:///tmp', :identifier => 'svn') Chris@1296: end Chris@1296: Chris@1296: Redmine::Configuration.with 'database_cipher_key' => '' do Chris@1296: r = Repository.first(:order => 'id DESC') Chris@1296: # password can not be deciphered Chris@1296: assert_nothing_raised do Chris@1296: assert r.password.match(/\Aaes-256-cbc:.+\Z/) Chris@1296: end Chris@1296: end Chris@1296: end Chris@1296: Chris@1296: def test_encrypt_all Chris@1296: Repository.delete_all Chris@1296: Redmine::Configuration.with 'database_cipher_key' => nil do Chris@1296: Repository::Subversion.create!(:password => 'foo', :url => 'file:///tmp', :identifier => 'foo') Chris@1296: Repository::Subversion.create!(:password => 'bar', :url => 'file:///tmp', :identifier => 'bar') Chris@1296: end Chris@1296: Chris@1296: Redmine::Configuration.with 'database_cipher_key' => 'secret' do Chris@1296: assert Repository.encrypt_all(:password) Chris@1296: r = Repository.first(:order => 'id DESC') Chris@1296: assert_equal 'bar', r.password Chris@1296: assert r.read_attribute(:password).match(/\Aaes-256-cbc:.+\Z/) Chris@1296: end Chris@1296: end Chris@1296: Chris@1296: def test_decrypt_all Chris@1296: Repository.delete_all Chris@1296: Redmine::Configuration.with 'database_cipher_key' => 'secret' do Chris@1296: Repository::Subversion.create!(:password => 'foo', :url => 'file:///tmp', :identifier => 'foo') Chris@1296: Repository::Subversion.create!(:password => 'bar', :url => 'file:///tmp', :identifier => 'bar') Chris@1296: Chris@1296: assert Repository.decrypt_all(:password) Chris@1296: r = Repository.first(:order => 'id DESC') Chris@1296: assert_equal 'bar', r.password Chris@1296: assert_equal 'bar', r.read_attribute(:password) Chris@1296: end Chris@1296: end Chris@1296: end