[tests] Chmod 0400 PKI certificates

qgis · Nov 3, 2016 · d17a65c · d17a65c
1 parent c54d9d8
commit d17a65c
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 6 deletions.
diff --git a/tests/src/python/test_authmanager_pki_ows.py b/tests/src/python/test_authmanager_pki_ows.py
@@ -21,6 +21,7 @@
 import subprocess
 import tempfile
 import urllib
+import stat
 
 __author__ = 'Alessandro Pasotti'
 __date__ = '25/10/2016'
@@ -68,13 +69,16 @@ def setUpAuth(cls):
         cls.sslrootcert_path = os.path.join(cls.certsdata_path, 'chains_subissuer-issuer-root_issuer2-root2.pem')
         cls.sslcert = os.path.join(cls.certsdata_path, 'gerardus_cert.pem')
         cls.sslkey = os.path.join(cls.certsdata_path, 'gerardus_key.pem')
+        assert os.path.isfile(cls.sslcert)
+        assert os.path.isfile(cls.sslkey)
+        assert os.path.isfile(cls.sslrootcert_path)
+        os.chmod(cls.sslcert, stat.S_IRUSR)
+        os.chmod(cls.sslkey, stat.S_IRUSR)
+        os.chmod(cls.sslrootcert_path, stat.S_IRUSR)
         cls.auth_config = QgsAuthMethodConfig("PKI-Paths")
         cls.auth_config.setConfig('certpath', cls.sslcert)
         cls.auth_config.setConfig('keypath', cls.sslkey)
         cls.auth_config.setName('test_pki_auth_config')
-        assert os.path.isfile(cls.sslcert)
-        assert os.path.isfile(cls.sslkey)
-        assert os.path.isfile(cls.sslrootcert_path)
         cls.username = 'Gerardus'
         cls.sslrootcert = QSslCertificate.fromPath(cls.sslrootcert_path)
         assert cls.sslrootcert is not None
@@ -87,6 +91,9 @@ def setUpAuth(cls):
         cls.server_cert = os.path.join(cls.certsdata_path, 'localhost_ssl_cert.pem')
         cls.server_key = os.path.join(cls.certsdata_path, 'localhost_ssl_key.pem')
         cls.server_rootcert = cls.sslrootcert_path
+        os.chmod(cls.server_cert, stat.S_IRUSR)
+        os.chmod(cls.server_key, stat.S_IRUSR)
+        os.chmod(cls.server_rootcert, stat.S_IRUSR)
 
         os.environ['QGIS_SERVER_HOST'] = cls.hostname
         os.environ['QGIS_SERVER_PORT'] = str(cls.port)

diff --git a/tests/src/python/test_authmanager_pki_postgres.py b/tests/src/python/test_authmanager_pki_postgres.py
@@ -22,6 +22,7 @@
 import os
 import time
 import signal
+import stat
 import subprocess
 import tempfile
 
@@ -97,13 +98,16 @@ def setUpAuth(cls):
         cls.sslrootcert_path = os.path.join(cls.certsdata_path, 'chains_subissuer-issuer-root_issuer2-root2.pem')
         cls.sslcert = os.path.join(cls.certsdata_path, 'gerardus_cert.pem')
         cls.sslkey = os.path.join(cls.certsdata_path, 'gerardus_key.pem')
+        assert os.path.isfile(cls.sslcert)
+        assert os.path.isfile(cls.sslkey)
+        assert os.path.isfile(cls.sslrootcert_path)
+        os.chmod(cls.sslcert, stat.S_IRUSR)
+        os.chmod(cls.sslkey, stat.S_IRUSR)
+        os.chmod(cls.sslrootcert_path, stat.S_IRUSR)
         cls.auth_config = QgsAuthMethodConfig("PKI-Paths")
         cls.auth_config.setConfig('certpath', cls.sslcert)
         cls.auth_config.setConfig('keypath', cls.sslkey)
         cls.auth_config.setName('test_pki_auth_config')
-        assert os.path.isfile(cls.sslcert)
-        assert os.path.isfile(cls.sslkey)
-        assert os.path.isfile(cls.sslrootcert_path)
         cls.username = 'Gerardus'
         cls.sslrootcert = QSslCertificate.fromPath(cls.sslrootcert_path)
         assert cls.sslrootcert is not None
@@ -118,6 +122,9 @@ def setUpAuth(cls):
         cls.server_cert = os.path.join(cls.certsdata_path, 'localhost_ssl_cert.pem')
         cls.server_key = os.path.join(cls.certsdata_path, 'localhost_ssl_key.pem')
         cls.server_rootcert = cls.sslrootcert_path
+        os.chmod(cls.server_cert, stat.S_IRUSR)
+        os.chmod(cls.server_key, stat.S_IRUSR)
+        os.chmod(cls.server_rootcert, stat.S_IRUSR)
 
         # Place conf in the data folder
         with open(cls.pg_conf, 'w+') as f: