mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-12-21 13:13:33 +00:00
59c28cab1c
> Starting in version 8.0.0, most options from the `imap` section have
been moved to the `mailbox` section.
6b2131f0e8
235 lines
7.5 KiB
Nix
235 lines
7.5 KiB
Nix
# This tests parsedmarc by sending a report to its monitored email
|
|
# address and reading the results out of Elasticsearch.
|
|
|
|
{ pkgs, ... }@args:
|
|
let
|
|
inherit (import ../../lib/testing-python.nix args) makeTest;
|
|
inherit (pkgs) lib;
|
|
|
|
dmarcTestReport = builtins.fetchurl {
|
|
name = "dmarc-test-report";
|
|
url = "https://github.com/domainaware/parsedmarc/raw/f45ab94e0608088e0433557608d9f4e9517d3afe/samples/aggregate/estadocuenta1.infonacot.gob.mx!example.com!1536853302!1536939702!2940.xml.zip";
|
|
sha256 = "0dq64cj49711kbja27pjl2hy0d3azrjxg91kqrh40x46fkn1dwkx";
|
|
};
|
|
|
|
sendEmail = address:
|
|
pkgs.writeScriptBin "send-email" ''
|
|
#!${pkgs.python3.interpreter}
|
|
import smtplib
|
|
from email import encoders
|
|
from email.mime.base import MIMEBase
|
|
from email.mime.multipart import MIMEMultipart
|
|
from email.mime.text import MIMEText
|
|
|
|
sender_email = "dmarc_tester@fake.domain"
|
|
receiver_email = "${address}"
|
|
|
|
message = MIMEMultipart()
|
|
message["From"] = sender_email
|
|
message["To"] = receiver_email
|
|
message["Subject"] = "DMARC test"
|
|
|
|
message.attach(MIMEText("Testing parsedmarc", "plain"))
|
|
|
|
attachment = MIMEBase("application", "zip")
|
|
|
|
with open("${dmarcTestReport}", "rb") as report:
|
|
attachment.set_payload(report.read())
|
|
|
|
encoders.encode_base64(attachment)
|
|
|
|
attachment.add_header(
|
|
"Content-Disposition",
|
|
"attachment; filename= estadocuenta1.infonacot.gob.mx!example.com!1536853302!1536939702!2940.xml.zip",
|
|
)
|
|
|
|
message.attach(attachment)
|
|
text = message.as_string()
|
|
|
|
with smtplib.SMTP('localhost') as server:
|
|
server.sendmail(sender_email, receiver_email, text)
|
|
server.quit()
|
|
'';
|
|
in
|
|
{
|
|
localMail = makeTest
|
|
{
|
|
name = "parsedmarc-local-mail";
|
|
meta = with lib.maintainers; {
|
|
maintainers = [ talyz ];
|
|
};
|
|
|
|
nodes.parsedmarc =
|
|
{ nodes, ... }:
|
|
{
|
|
virtualisation.memorySize = 2048;
|
|
|
|
services.postfix = {
|
|
enableSubmission = true;
|
|
enableSubmissions = true;
|
|
submissionsOptions = {
|
|
smtpd_sasl_auth_enable = "yes";
|
|
smtpd_client_restrictions = "permit";
|
|
};
|
|
};
|
|
|
|
services.parsedmarc = {
|
|
enable = true;
|
|
provision = {
|
|
geoIp = false;
|
|
localMail = {
|
|
enable = true;
|
|
hostname = "localhost";
|
|
};
|
|
};
|
|
};
|
|
|
|
services.elasticsearch.package = pkgs.elasticsearch-oss;
|
|
|
|
environment.systemPackages = [
|
|
(sendEmail "dmarc@localhost")
|
|
pkgs.jq
|
|
];
|
|
};
|
|
|
|
testScript = { nodes }:
|
|
let
|
|
esPort = toString nodes.parsedmarc.config.services.elasticsearch.port;
|
|
valueObject = lib.optionalString (lib.versionAtLeast nodes.parsedmarc.config.services.elasticsearch.package.version "7") ".value";
|
|
in ''
|
|
parsedmarc.start()
|
|
parsedmarc.wait_for_unit("postfix.service")
|
|
parsedmarc.wait_for_unit("dovecot2.service")
|
|
parsedmarc.wait_for_unit("parsedmarc.service")
|
|
parsedmarc.wait_until_succeeds(
|
|
"curl -sS -f http://localhost:${esPort}"
|
|
)
|
|
|
|
parsedmarc.fail(
|
|
"curl -sS -f http://localhost:${esPort}/_search?q=report_id:2940"
|
|
+ " | tee /dev/console"
|
|
+ " | jq -es 'if . == [] then null else .[] | .hits.total${valueObject} > 0 end'"
|
|
)
|
|
parsedmarc.succeed("send-email")
|
|
parsedmarc.wait_until_succeeds(
|
|
"curl -sS -f http://localhost:${esPort}/_search?q=report_id:2940"
|
|
+ " | tee /dev/console"
|
|
+ " | jq -es 'if . == [] then null else .[] | .hits.total${valueObject} > 0 end'"
|
|
)
|
|
'';
|
|
};
|
|
|
|
externalMail =
|
|
let
|
|
certs = import ../common/acme/server/snakeoil-certs.nix;
|
|
mailDomain = certs.domain;
|
|
parsedmarcDomain = "parsedmarc.fake.domain";
|
|
in
|
|
makeTest {
|
|
name = "parsedmarc-external-mail";
|
|
meta = with lib.maintainers; {
|
|
maintainers = [ talyz ];
|
|
};
|
|
|
|
nodes = {
|
|
parsedmarc =
|
|
{ nodes, ... }:
|
|
{
|
|
virtualisation.memorySize = 2048;
|
|
|
|
security.pki.certificateFiles = [
|
|
certs.ca.cert
|
|
];
|
|
|
|
networking.extraHosts = ''
|
|
127.0.0.1 ${parsedmarcDomain}
|
|
${nodes.mail.config.networking.primaryIPAddress} ${mailDomain}
|
|
'';
|
|
|
|
services.parsedmarc = {
|
|
enable = true;
|
|
provision.geoIp = false;
|
|
settings.imap = {
|
|
host = mailDomain;
|
|
port = 993;
|
|
ssl = true;
|
|
user = "alice";
|
|
password = "${pkgs.writeText "imap-password" "foobar"}";
|
|
};
|
|
};
|
|
|
|
services.elasticsearch.package = pkgs.elasticsearch-oss;
|
|
|
|
environment.systemPackages = [
|
|
pkgs.jq
|
|
];
|
|
};
|
|
|
|
mail =
|
|
{ nodes, ... }:
|
|
{
|
|
imports = [ ../common/user-account.nix ];
|
|
|
|
networking.extraHosts = ''
|
|
127.0.0.1 ${mailDomain}
|
|
${nodes.parsedmarc.config.networking.primaryIPAddress} ${parsedmarcDomain}
|
|
'';
|
|
|
|
services.dovecot2 = {
|
|
enable = true;
|
|
protocols = [ "imap" ];
|
|
sslCACert = "${certs.ca.cert}";
|
|
sslServerCert = "${certs.${mailDomain}.cert}";
|
|
sslServerKey = "${certs.${mailDomain}.key}";
|
|
};
|
|
|
|
services.postfix = {
|
|
enable = true;
|
|
origin = mailDomain;
|
|
config = {
|
|
myhostname = mailDomain;
|
|
mydestination = mailDomain;
|
|
};
|
|
enableSubmission = true;
|
|
enableSubmissions = true;
|
|
submissionsOptions = {
|
|
smtpd_sasl_auth_enable = "yes";
|
|
smtpd_client_restrictions = "permit";
|
|
};
|
|
};
|
|
environment.systemPackages = [ (sendEmail "alice@${mailDomain}") ];
|
|
|
|
networking.firewall.allowedTCPPorts = [ 993 ];
|
|
};
|
|
};
|
|
|
|
testScript = { nodes }:
|
|
let
|
|
esPort = toString nodes.parsedmarc.config.services.elasticsearch.port;
|
|
valueObject = lib.optionalString (lib.versionAtLeast nodes.parsedmarc.config.services.elasticsearch.package.version "7") ".value";
|
|
in ''
|
|
mail.start()
|
|
mail.wait_for_unit("postfix.service")
|
|
mail.wait_for_unit("dovecot2.service")
|
|
|
|
parsedmarc.start()
|
|
parsedmarc.wait_for_unit("parsedmarc.service")
|
|
parsedmarc.wait_until_succeeds(
|
|
"curl -sS -f http://localhost:${esPort}"
|
|
)
|
|
|
|
parsedmarc.fail(
|
|
"curl -sS -f http://localhost:${esPort}/_search?q=report_id:2940"
|
|
+ " | tee /dev/console"
|
|
+ " | jq -es 'if . == [] then null else .[] | .hits.total${valueObject} > 0 end'"
|
|
)
|
|
mail.succeed("send-email")
|
|
parsedmarc.wait_until_succeeds(
|
|
"curl -sS -f http://localhost:${esPort}/_search?q=report_id:2940"
|
|
+ " | tee /dev/console"
|
|
+ " | jq -es 'if . == [] then null else .[] | .hits.total${valueObject} > 0 end'"
|
|
)
|
|
'';
|
|
};
|
|
}
|