#!/bin/bash

# vim: dict=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k

# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

#

#   runtest.sh of /CoreOS/curl/Sanity/scp-and-sftp-download-test

#   Description: downloads test file through scp and sftp

#   Author: Karel Srot <ksrot@redhat.com>

#

# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

#

#   Copyright (c) 2012 Red Hat, Inc. All rights reserved.

#

#   This copyrighted material is made available to anyone wishing

#   to use, modify, copy, or redistribute it subject to the terms

#   and conditions of the GNU General Public License version 2.

#

#   This program is distributed in the hope that it will be

#   useful, but WITHOUT ANY WARRANTY; without even the implied

#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR

#   PURPOSE. See the GNU General Public License for more details.

#

#   You should have received a copy of the GNU General Public

#   License along with this program; if not, write to the Free

#   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,

#   Boston, MA 02110-1301, USA.

#

# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

# Include Beaker environment

. /usr/share/beakerlib/beakerlib.sh || exit 1

PACKAGE="curl"

# GLOBAL/ENVIRONMENT VARIABLE:

# PUBKEY_PARAM

if [ "$PUBKEY_PARAM" == 'none' ]; then

  PUBKEY_PARAM=""

elif [ "$PUBKEY_PARAM" == 'empty' ]; then

  PUBKEY_PARAM="--pubkey ''"

else

  PUBKEY_PARAM='--pubkey /root/.ssh/id_rsa.pub'

fi

FILESIZE=200 #MB

OPTIONS=""

rlIsRHEL 7 && OPTIONS="--insecure"

rlJournalStart

    rlPhaseStartSetup

        rlAssertRpm $PACKAGE

        rlFileBackup --clean  /root/.ssh/known_hosts /root/.ssh

        rlFileBackup --clean  /etc/ssh/sshd_config

        rlRun "useradd -m curltestuser"

        # In FIPS-140 we need to explicitly allow one of libssh2-implemented

        # Kex algorithms (eg. DH14-SHA1).

        rlRun "echo 'KexAlgorithms +diffie-hellman-group14-sha1' >> /etc/ssh/sshd_config" 0

        rlServiceStop "sshd"

        rlRun "service sshd start && sleep 5" 0

        # file for download test

        rlRun "su - curltestuser -c 'dd if=/dev/zero of=testfile bs=1M count=200'" 0 "Creating $FILESIZE MB large test file"

        SUM=`sha256sum /home/curltestuser/testfile | cut -d ' ' -f 1`

        rlRun "TmpDir=\$(mktemp -d)" 0 "Creating tmp directory"

        rlRun "pushd $TmpDir"

        rlRun "rm -vf /root/.ssh/*"

        rlRun "ssh-keygen -t rsa -f /root/.ssh/id_rsa -N ''" 0 "Generate ssh key"

        rlRun "mkdir /home/curltestuser/.ssh && cat /root/.ssh/id_rsa.pub > /home/curltestuser/.ssh/authorized_keys && chown -R curltestuser.curltestuser /home/curltestuser/.ssh/" 0 "Save the key to .ssh/authorized_keys"

        # this is a workaround as libssh2 is not able to use newer hashes

        #rlRun "ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/root/.ssh/known_hosts curltestuser@localhost 'exit'" 0 "First ssh login to add localhost to known_hosts"

        rlRun "ssh-keyscan localhost >>/root/.ssh/known_hosts"

        # files for upload test

        rlRun "dd if=/dev/zero of=uploadfile1 bs=1M count=50" 0 "Creating 50 MB large test file"

        UPSUM1=`sha256sum uploadfile1 | cut -d ' ' -f 1`

        rlRun "dd if=/dev/zero of=uploadfile2 bs=1M count=20" 0 "Creating 20 MB large test file"

        UPSUM2=`sha256sum uploadfile2 | cut -d ' ' -f 1`

    rlPhaseEnd

    rlPhaseStartTest "scp download test"

        rlRun "curl -o ./scp_file -u curltestuser: --key /root/.ssh/id_rsa $PUBKEY_PARAM $OPTIONS scp://localhost/home/curltestuser/testfile" 0 "Initiate curl scp download"

        rlAssertExists scp_file

        SCPSUM=`sha256sum ./scp_file | cut -d ' ' -f 1`

        rlAssertEquals "Checking that whole file was properly downloaded" $SUM $SCPSUM

        rm -f ./scp_file

    rlPhaseEnd

    rlPhaseStartTest "sftp download test"

        rlRun "curl -o ./sftp_file -u curltestuser: --key /root/.ssh/id_rsa $PUBKEY_PARAM $OPTIONS sftp://localhost/home/curltestuser/testfile" 0 "Initiate curl scp download"

        rlAssertExists sftp_file

        SFTPSUM=`sha256sum ./sftp_file | cut -d ' ' -f 1`

        rlAssertEquals "Checking that whole file was properly downloaded" $SUM $SFTPSUM

        rm -f ./sftp_file

    rlPhaseEnd

    rlPhaseStartTest "scp upload test"

        rlRun "curl -T '{uploadfile1,uploadfile2}' scp://localhost/home/curltestuser/ -u curltestuser: --key /root/.ssh/id_rsa $PUBKEY_PARAM $OPTIONS" 0 "Initiate curl scp upload"

        rlAssertExists /home/curltestuser/uploadfile1

        rlAssertExists /home/curltestuser/uploadfile2

        SCPUPSUM1=`sha256sum /home/curltestuser/uploadfile1 | cut -d ' ' -f 1`

        SCPUPSUM2=`sha256sum /home/curltestuser/uploadfile2 | cut -d ' ' -f 1`

        rlAssertEquals "Checking that 1st file was properly uploaded" ${UPSUM1} ${SCPUPSUM1}

        rlAssertEquals "Checking that 2nd file was properly uploaded" ${UPSUM2} ${SCPUPSUM2}

        rm -f /home/curltestuser/uploadfile1 /home/curltestuser/uploadfile2

    rlPhaseEnd

    rlPhaseStartTest "sftp upload test"

        rlRun "curl -T '{uploadfile1,uploadfile2}' sftp://localhost/home/curltestuser/ -u curltestuser: --key /root/.ssh/id_rsa $PUBKEY_PARAM $OPTIONS" 0 "Initiate curl sftp upload"

        rlAssertExists /home/curltestuser/uploadfile1

        rlAssertExists /home/curltestuser/uploadfile2

        SFTPUPSUM1=`sha256sum /home/curltestuser/uploadfile1 | cut -d ' ' -f 1`

        SFTPUPSUM2=`sha256sum /home/curltestuser/uploadfile2 | cut -d ' ' -f 1`

        rlAssertEquals "Checking that 1st file was properly uploaded" ${UPSUM1} ${SFTPUPSUM1}

        rlAssertEquals "Checking that 2nd file was properly uploaded" ${UPSUM2} ${SFTPUPSUM2}

        rm -f /home/curltestuser/uploadfile1 /home/curltestuser/uploadfile2

    rlPhaseEnd

    rlPhaseStartCleanup

        rlRun "userdel -r --force curltestuser"

        rlRun "popd"

        rlRun "rm -r $TmpDir" 0 "Removing tmp directory"

        rlFileRestore

        rlServiceRestore "sshd"

    rlPhaseEnd

rlJournalPrintText

rlJournalEnd