Feature: Command to generate keys for Rugged TUF locally.

@rugged @command @generate-keys @local
Feature: Command to generate keys for Rugged TUF locally.
  In order to sign and validate TUF metadata
  As an administrator
  I need to generate encryption keypairs locally.

  Background:
    Given I reset Rugged
    And I run "sudo sudo -u rugged ls /var/rugged/signing_keys/targets"
    And I should not get:
      """
      targets
      """
    And I run "sudo sudo -u rugged ls /var/rugged/verification_keys"
    And I should not get:
      """
      targets.pub
      """

  Scenario: Generate keypair locally.
    When I run "sudo -u rugged rugged --debug generate-keys --local --role targets"
    Then I should get:
      """
      Generating 'targets' keypair for 'targets' role.
      debug: Generating keypair at /tmp/
      debug: Copying signing key to /var/rugged/signing_keys/targets/targets.
      debug: Copying verification key to /var/rugged/verification_keys/targets.pub.
      Signing key:       /var/rugged/signing_keys/targets/targets
      Verification key:  /var/rugged/verification_keys/targets.pub
      """
    When I try to run "ls /var/rugged/signing_keys"
    Then I should get:
      """
      Permission denied
      """
    When I run "sudo ls /var/rugged/signing_keys"
    Then I should get:
      """
      targets
      """
    When I try to run "ls /var/rugged/verification_keys"
    Then I should get:
      """
      Permission denied
      """
    When I run "sudo ls /var/rugged/verification_keys"
    Then I should get:
      """
      targets.pub
      """

  Scenario: Generate keypairs locally for all roles by default.
    When I run "sudo -u rugged rugged generate-keys --local"
    Then I should get:
      """
      Generating 'root' keypair for 'root' role.
      Generating 'root1' keypair for 'root' role.
      Generating 'snapshot' keypair for 'snapshot' role.
      Generating 'targets' keypair for 'targets' role.
      Generating 'timestamp' keypair for 'timestamp' role.
      """
    When I run "sudo ls /var/rugged/signing_keys"
    Then I should get:
      """
      root
      snapshot
      targets
      timestamp
      """
    When I run "sudo ls /var/rugged/verification_keys"
    Then I should get:
      """
      root.pub
      root1.pub
      snapshot.pub
      targets.pub
      timestamp.pub
      """

  Scenario: Provide useful error and debugging messages when key generation fails locally.
    Given I run "sudo chmod 000 /var/rugged/signing_keys/targets"
    And I run "sudo chmod 000 /var/rugged/verification_keys"
    When I fail to run "sudo -u rugged rugged --debug generate-keys --local --role targets"
    Then I should not get:
      """
      debug: Moving signing key to /var/rugged/signing_keys/targets.
      debug: Moving verification key to /var/rugged/verification_keys/targets.pub.
      Signing key:       /var/rugged/signing_keys/targets
      Verification key:  /var/rugged/verification_keys/targets.pub
      """
    And I should get:
      """
      Generating 'targets' keypair for 'targets' role.
      debug: Generating keypair at /tmp/
      debug: Copying signing key to /var/rugged/signing_keys/targets/targets.
      error: PermissionError thrown in _copy_key: [Errno 13] Permission denied: '/var/rugged/signing_keys/targets/targets'
      debug: Copying verification key to /var/rugged/verification_keys/targets.pub.
      error: PermissionError thrown in _copy_key: [Errno 13] Permission denied: '/var/rugged/verification_keys/targets.pub'
      Failed to generate key pair. Check the logs for more detailed error reporting.
      Signing key:       Failed to generate signing key.
      Verification key:  Failed to generate verification key.
      """
    When I run "sudo -u rugged rugged logs --local"
    Then I should get:
      """
      INFO (generate_keys.generate_keys_cmd): Generating 'targets' keypair for 'targets' role.
      DEBUG (generate_keys.generate_keypair): Generating keypair at /tmp/
      DEBUG (generate_keys._copy_key): Copying signing key to /var/rugged/signing_keys/targets/targets.
      ERROR (logger.log_exception): PermissionError thrown in _copy_key: [Errno 13] Permission denied: '/var/rugged/signing_keys/targets/targets'
      DEBUG (generate_keys._copy_key): Copying verification key to /var/rugged/verification_keys/targets.pub.
      ERROR (logger.log_exception): PermissionError thrown in _copy_key: [Errno 13] Permission denied: '/var/rugged/verification_keys/targets.pub'
      """

3 scenarios (3 passed)
38 steps (38 passed)