52 lines
1.7 KiB
PHP
52 lines
1.7 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
use OPNsense\NordVPN\SystemRunner;
|
||
|
|
use OPNsense\NordVPN\TunnelHealth;
|
||
|
|
use PHPUnit\Framework\TestCase;
|
||
|
|
|
||
|
|
final class SystemRunnerAndHealthTest extends TestCase
|
||
|
|
{
|
||
|
|
public function testTunnelHealthRequiresRecentHandshake(): void
|
||
|
|
{
|
||
|
|
$runner = new SystemRunner(static fn() => "public-key\t900\n");
|
||
|
|
$recent = new TunnelHealth($runner, 180, static fn() => 1000);
|
||
|
|
$stale = new TunnelHealth($runner, 50, static fn() => 1000);
|
||
|
|
|
||
|
|
$this->assertTrue($recent->check('wg0')['available']);
|
||
|
|
$this->assertFalse($stale->check('wg0')['available']);
|
||
|
|
$this->assertFalse($recent->check('invalid')['available']);
|
||
|
|
}
|
||
|
|
|
||
|
|
public function testWireGuardApplyFollowsRegistrationSequence(): void
|
||
|
|
{
|
||
|
|
$commands = [];
|
||
|
|
$runner = new SystemRunner(static function ($command) use (&$commands): string {
|
||
|
|
$commands[] = $command;
|
||
|
|
return '';
|
||
|
|
});
|
||
|
|
|
||
|
|
$runner->applyWireGuard();
|
||
|
|
|
||
|
|
$this->assertSame([
|
||
|
|
['/usr/local/sbin/configctl', 'interface', 'invoke', 'registration'],
|
||
|
|
['/usr/local/sbin/configctl', 'template', 'reload', 'OPNsense/Wireguard'],
|
||
|
|
['/usr/local/opnsense/scripts/wireguard/wg-service-control.php', '-a', 'configure'],
|
||
|
|
], $commands);
|
||
|
|
}
|
||
|
|
|
||
|
|
public function testFirewallApplyReloadsRulesBeforeEvictingPluginStates(): void
|
||
|
|
{
|
||
|
|
$commands = [];
|
||
|
|
$runner = new SystemRunner(static function ($command) use (&$commands): string {
|
||
|
|
$commands[] = $command;
|
||
|
|
return '';
|
||
|
|
});
|
||
|
|
|
||
|
|
$runner->applyFirewall();
|
||
|
|
|
||
|
|
$this->assertSame([
|
||
|
|
['/usr/local/etc/rc.filter_configure'],
|
||
|
|
['/sbin/pfctl', '-k', 'label', '-k', SystemRunner::FIREWALL_LABEL],
|
||
|
|
], $commands);
|
||
|
|
}
|
||
|
|
}
|