FortiManager SSL SSH Security Profiles (#47152)
* Initial Commit * Initial Commit * Initial Commit * Fixing syntax errors * After running sanity tests, fixed pylint and pep8 errors * After running sanity tests, fixed pylint and pep8 errors * Fixing more syntax issues * Fixing more syntax issues * Adding username to doc block * PR candidate * PR candidate * fixed pep8 and docs issues * fixed 2.6 function issues * fixed 2.6 function issues part duex * Initial commit for security profile group module * Adding better playbook example to module * Adding another commit to test shippable tests * Fixing shippable errors, pep8 in unit test file and doc block problem in main module * Fixing documentation module error * Fixing pep8 line too long in unit test * Fixing utility function with nested dictionaries * Fixing utility function with pep8 issue * Adding change to allow for multiple list of dictionaries to be submitted via a single playbook * Initial commit for FMG Security Profile Web Application Firewall * adding extra line at bottom for pep8 conditions * Adding descriptions to documentation * Fixing more pep8 issues * New commit for new PR * Removing todo in documentation * Changing module name in documentation to match actual module name * Fixing yaml syntax for long choices list * Fixing yaml syntax for long choices list * Initial commit for fmgr web filter security profile * Initial commit for SSL and SSH security profiles in FMG * Fixing pep8 syntax issues * Adding better playbook example * Fixing review changes * Adding @ in author names per @Gundalow's request per Ansible's guidelines
This commit is contained in:
ftntcorecse
Sumit Jaiswal
parent
6965cea86a
commit
199cd1bc77
3 changed files with 1432 additions and 0 deletions
1095
lib/ansible/modules/network/fortimanager/fmgr_secprof_ssl_ssh.py
Normal file
1095
lib/ansible/modules/network/fortimanager/fmgr_secprof_ssl_ssh.py
Normal file
File diff suppressed because it is too large
Load diff
|
|
@ -0,0 +1,202 @@
|
||||||
|
{
|
||||||
|
"fmgr_firewall_ssl_ssh_profile_addsetdelete": [
|
||||||
|
{
|
||||||
|
"paramgram_used": {
|
||||||
|
"comment": null,
|
||||||
|
"untrusted-caname": null,
|
||||||
|
"mapi-over-https": null,
|
||||||
|
"whitelist": null,
|
||||||
|
"caname": null,
|
||||||
|
"ftps": {
|
||||||
|
"status": null,
|
||||||
|
"allow-invalid-server-cert": null,
|
||||||
|
"unsupported-ssl": null,
|
||||||
|
"client-cert-request": null,
|
||||||
|
"ports": null,
|
||||||
|
"untrusted-cert": null
|
||||||
|
},
|
||||||
|
"ssl-exemptions-log": null,
|
||||||
|
"https": {
|
||||||
|
"status": null,
|
||||||
|
"allow-invalid-server-cert": null,
|
||||||
|
"unsupported-ssl": null,
|
||||||
|
"client-cert-request": null,
|
||||||
|
"ports": null,
|
||||||
|
"untrusted-cert": null
|
||||||
|
},
|
||||||
|
"imaps": {
|
||||||
|
"status": null,
|
||||||
|
"allow-invalid-server-cert": null,
|
||||||
|
"unsupported-ssl": null,
|
||||||
|
"client-cert-request": null,
|
||||||
|
"ports": null,
|
||||||
|
"untrusted-cert": null
|
||||||
|
},
|
||||||
|
"server-cert-mode": null,
|
||||||
|
"adom": "root",
|
||||||
|
"ssl-exempt": {
|
||||||
|
"regex": null,
|
||||||
|
"wildcard-fqdn": null,
|
||||||
|
"fortiguard-category": null,
|
||||||
|
"address6": null,
|
||||||
|
"address": null,
|
||||||
|
"type": null
|
||||||
|
},
|
||||||
|
"ssl": {
|
||||||
|
"inspect-all": null,
|
||||||
|
"allow-invalid-server-cert": null,
|
||||||
|
"client-cert-request": null,
|
||||||
|
"untrusted-cert": null,
|
||||||
|
"unsupported-ssl": null
|
||||||
|
},
|
||||||
|
"ssh": {
|
||||||
|
"status": null,
|
||||||
|
"inspect-all": null,
|
||||||
|
"ssh-tun-policy-check": null,
|
||||||
|
"ssh-policy-check": null,
|
||||||
|
"ssh-algorithm": null,
|
||||||
|
"unsupported-version": null,
|
||||||
|
"ports": null
|
||||||
|
},
|
||||||
|
"use-ssl-server": null,
|
||||||
|
"server-cert": null,
|
||||||
|
"name": "Ansible_SSL_SSH_Profile",
|
||||||
|
"ssl-anomalies-log": null,
|
||||||
|
"ssl-server": {
|
||||||
|
"pop3s-client-cert-request": null,
|
||||||
|
"imaps-client-cert-request": null,
|
||||||
|
"smtps-client-cert-request": null,
|
||||||
|
"ip": null,
|
||||||
|
"ssl-other-client-cert-request": null,
|
||||||
|
"https-client-cert-request": null,
|
||||||
|
"ftps-client-cert-request": null
|
||||||
|
},
|
||||||
|
"smtps": {
|
||||||
|
"status": null,
|
||||||
|
"allow-invalid-server-cert": null,
|
||||||
|
"unsupported-ssl": null,
|
||||||
|
"client-cert-request": null,
|
||||||
|
"ports": null,
|
||||||
|
"untrusted-cert": null
|
||||||
|
},
|
||||||
|
"rpc-over-https": null,
|
||||||
|
"mode": "delete",
|
||||||
|
"pop3s": {
|
||||||
|
"status": null,
|
||||||
|
"allow-invalid-server-cert": null,
|
||||||
|
"unsupported-ssl": null,
|
||||||
|
"client-cert-request": null,
|
||||||
|
"ports": null,
|
||||||
|
"untrusted-cert": null
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"raw_response": {
|
||||||
|
"status": {
|
||||||
|
"message": "OK",
|
||||||
|
"code": 0
|
||||||
|
},
|
||||||
|
"url": "/pm/config/adom/root/obj/firewall/ssl-ssh-profile/Ansible_SSL_SSH_Profile"
|
||||||
|
},
|
||||||
|
"post_method": "delete"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"raw_response": {
|
||||||
|
"status": {
|
||||||
|
"message": "OK",
|
||||||
|
"code": 0
|
||||||
|
},
|
||||||
|
"url": "/pm/config/adom/root/obj/firewall/ssl-ssh-profile"
|
||||||
|
},
|
||||||
|
"paramgram_used": {
|
||||||
|
"comment": "Created by Ansible Module TEST",
|
||||||
|
"untrusted-caname": null,
|
||||||
|
"mapi-over-https": "enable",
|
||||||
|
"whitelist": "enable",
|
||||||
|
"caname": null,
|
||||||
|
"ftps": {
|
||||||
|
"status": null,
|
||||||
|
"allow-invalid-server-cert": null,
|
||||||
|
"unsupported-ssl": null,
|
||||||
|
"untrusted-cert": null,
|
||||||
|
"client-cert-request": null,
|
||||||
|
"ports": null
|
||||||
|
},
|
||||||
|
"ssl-exemptions-log": "enable",
|
||||||
|
"https": {
|
||||||
|
"status": null,
|
||||||
|
"allow-invalid-server-cert": null,
|
||||||
|
"unsupported-ssl": null,
|
||||||
|
"untrusted-cert": null,
|
||||||
|
"client-cert-request": null,
|
||||||
|
"ports": null
|
||||||
|
},
|
||||||
|
"pop3s": {
|
||||||
|
"status": null,
|
||||||
|
"allow-invalid-server-cert": null,
|
||||||
|
"unsupported-ssl": null,
|
||||||
|
"untrusted-cert": null,
|
||||||
|
"client-cert-request": null,
|
||||||
|
"ports": null
|
||||||
|
},
|
||||||
|
"server-cert-mode": "replace",
|
||||||
|
"adom": "root",
|
||||||
|
"ssl-exempt": {
|
||||||
|
"regex": null,
|
||||||
|
"wildcard-fqdn": null,
|
||||||
|
"fortiguard-category": null,
|
||||||
|
"address6": null,
|
||||||
|
"address": null,
|
||||||
|
"type": null
|
||||||
|
},
|
||||||
|
"ssl": {
|
||||||
|
"unsupported-ssl": null,
|
||||||
|
"inspect-all": null,
|
||||||
|
"allow-invalid-server-cert": null,
|
||||||
|
"untrusted-cert": null,
|
||||||
|
"client-cert-request": null
|
||||||
|
},
|
||||||
|
"ssh": {
|
||||||
|
"status": null,
|
||||||
|
"inspect-all": null,
|
||||||
|
"ssh-tun-policy-check": null,
|
||||||
|
"ssh-policy-check": null,
|
||||||
|
"ssh-algorithm": null,
|
||||||
|
"unsupported-version": null,
|
||||||
|
"ports": null
|
||||||
|
},
|
||||||
|
"server-cert": null,
|
||||||
|
"name": "Ansible_SSL_SSH_Profile",
|
||||||
|
"ssl-anomalies-log": "enable",
|
||||||
|
"ssl-server": {
|
||||||
|
"pop3s-client-cert-request": null,
|
||||||
|
"imaps-client-cert-request": null,
|
||||||
|
"smtps-client-cert-request": null,
|
||||||
|
"ip": null,
|
||||||
|
"ssl-other-client-cert-request": null,
|
||||||
|
"https-client-cert-request": null,
|
||||||
|
"ftps-client-cert-request": null
|
||||||
|
},
|
||||||
|
"smtps": {
|
||||||
|
"status": null,
|
||||||
|
"allow-invalid-server-cert": null,
|
||||||
|
"unsupported-ssl": null,
|
||||||
|
"untrusted-cert": null,
|
||||||
|
"client-cert-request": null,
|
||||||
|
"ports": null
|
||||||
|
},
|
||||||
|
"imaps": {
|
||||||
|
"status": null,
|
||||||
|
"allow-invalid-server-cert": null,
|
||||||
|
"unsupported-ssl": null,
|
||||||
|
"untrusted-cert": null,
|
||||||
|
"client-cert-request": null,
|
||||||
|
"ports": null
|
||||||
|
},
|
||||||
|
"rpc-over-https": "enable",
|
||||||
|
"mode": "set",
|
||||||
|
"use-ssl-server": "enable"
|
||||||
|
},
|
||||||
|
"post_method": "set"
|
||||||
|
}
|
||||||
|
]
|
||||||
|
}
|
||||||
|
|
@ -0,0 +1,135 @@
|
||||||
|
# Copyright 2018 Fortinet, Inc.
|
||||||
|
#
|
||||||
|
# This program is free software: you can redistribute it and/or modify
|
||||||
|
# it under the terms of the GNU General Public License as published by
|
||||||
|
# the Free Software Foundation, either version 3 of the License, or
|
||||||
|
# (at your option) any later version.
|
||||||
|
#
|
||||||
|
# This program is distributed in the hope that it will be useful,
|
||||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||||
|
# GNU General Public License for more details.
|
||||||
|
#
|
||||||
|
# You should have received a copy of the GNU General Public License
|
||||||
|
# along with Ansible. If not, see <https://www.gnu.org/licenses/>.
|
||||||
|
|
||||||
|
# Make coding more python3-ish
|
||||||
|
from __future__ import (absolute_import, division, print_function)
|
||||||
|
__metaclass__ = type
|
||||||
|
|
||||||
|
import os
|
||||||
|
import json
|
||||||
|
from pyFMG.fortimgr import FortiManager
|
||||||
|
import pytest
|
||||||
|
|
||||||
|
try:
|
||||||
|
from ansible.modules.network.fortimanager import fmgr_secprof_ssl_ssh
|
||||||
|
except ImportError:
|
||||||
|
pytest.skip("Could not load required modules for testing", allow_module_level=True)
|
||||||
|
|
||||||
|
fmg_instance = FortiManager("1.1.1.1", "admin", "")
|
||||||
|
|
||||||
|
|
||||||
|
def load_fixtures():
|
||||||
|
fixture_path = os.path.join(
|
||||||
|
os.path.dirname(__file__),
|
||||||
|
'fixtures') + "/{filename}.json".format(
|
||||||
|
filename=os.path.splitext(
|
||||||
|
os.path.basename(__file__))[0])
|
||||||
|
try:
|
||||||
|
with open(fixture_path, "r") as fixture_file:
|
||||||
|
fixture_data = json.load(fixture_file)
|
||||||
|
except IOError:
|
||||||
|
return []
|
||||||
|
return [fixture_data]
|
||||||
|
|
||||||
|
|
||||||
|
@pytest.fixture(scope="function", params=load_fixtures())
|
||||||
|
def fixture_data(request):
|
||||||
|
func_name = request.function.__name__.replace("test_", "")
|
||||||
|
return request.param.get(func_name, None)
|
||||||
|
|
||||||
|
|
||||||
|
def test_fmgr_firewall_ssl_ssh_profile_addsetdelete(fixture_data, mocker):
|
||||||
|
mocker.patch("pyFMG.fortimgr.FortiManager._post_request", side_effect=fixture_data)
|
||||||
|
# Fixture sets used:###########################
|
||||||
|
|
||||||
|
##################################################
|
||||||
|
# comment: None
|
||||||
|
# untrusted-caname: None
|
||||||
|
# mapi-over-https: None
|
||||||
|
# whitelist: None
|
||||||
|
# caname: None
|
||||||
|
# ftps: {'status': None, 'allow-invalid-server-cert': None, 'unsupported-ssl': None, 'client-cert-request': None,
|
||||||
|
# 'ports': None, 'untrusted-cert': None}
|
||||||
|
# ssl-exemptions-log: None
|
||||||
|
# https: {'status': None, 'allow-invalid-server-cert': None, 'unsupported-ssl': None, 'client-cert-request': None,
|
||||||
|
# 'ports': None, 'untrusted-cert': None}
|
||||||
|
# imaps: {'status': None, 'allow-invalid-server-cert': None, 'unsupported-ssl': None, 'client-cert-request': None,
|
||||||
|
# 'ports': None, 'untrusted-cert': None}
|
||||||
|
# server-cert-mode: None
|
||||||
|
# adom: root
|
||||||
|
# ssl-exempt: {'regex': None, 'wildcard-fqdn': None, 'fortiguard-category': None, 'address6': None,
|
||||||
|
# 'address': None, 'type': None}
|
||||||
|
# ssl: {'inspect-all': None, 'allow-invalid-server-cert': None, 'client-cert-request': None,
|
||||||
|
# 'untrusted-cert': None, 'unsupported-ssl': None}
|
||||||
|
# ssh: {'status': None, 'inspect-all': None, 'ssh-tun-policy-check': None, 'ssh-policy-check': None,
|
||||||
|
# 'ssh-algorithm': None, 'unsupported-version': None, 'ports': None}
|
||||||
|
# use-ssl-server: None
|
||||||
|
# server-cert: None
|
||||||
|
# name: Ansible_SSL_SSH_Profile
|
||||||
|
# ssl-anomalies-log: None
|
||||||
|
# ssl-server: {'pop3s-client-cert-request': None, 'imaps-client-cert-request': None,
|
||||||
|
# 'smtps-client-cert-request': None, 'ip': None, 'ssl-other-client-cert-request': None,
|
||||||
|
# 'https-client-cert-request': None, 'ftps-client-cert-request': None}
|
||||||
|
# smtps: {'status': None, 'allow-invalid-server-cert': None, 'unsupported-ssl': None, 'client-cert-request': None,
|
||||||
|
# 'ports': None, 'untrusted-cert': None}
|
||||||
|
# rpc-over-https: None
|
||||||
|
# mode: delete
|
||||||
|
# pop3s: {'status': None, 'allow-invalid-server-cert': None, 'unsupported-ssl': None, 'client-cert-request': None,
|
||||||
|
# 'ports': None, 'untrusted-cert': None}
|
||||||
|
##################################################
|
||||||
|
##################################################
|
||||||
|
# comment: Created by Ansible Module TEST
|
||||||
|
# untrusted-caname: None
|
||||||
|
# mapi-over-https: enable
|
||||||
|
# whitelist: enable
|
||||||
|
# caname: None
|
||||||
|
# ftps: {'status': None, 'allow-invalid-server-cert': None, 'unsupported-ssl': None, 'untrusted-cert': None,
|
||||||
|
# 'client-cert-request': None, 'ports': None}
|
||||||
|
# ssl-exemptions-log: enable
|
||||||
|
# https: {'status': None, 'allow-invalid-server-cert': None, 'unsupported-ssl': None, 'untrusted-cert': None,
|
||||||
|
# 'client-cert-request': None, 'ports': None}
|
||||||
|
# pop3s: {'status': None, 'allow-invalid-server-cert': None, 'unsupported-ssl': None, 'untrusted-cert': None,
|
||||||
|
# 'client-cert-request': None, 'ports': None}
|
||||||
|
# server-cert-mode: replace
|
||||||
|
# adom: root
|
||||||
|
# ssl-exempt: {'regex': None, 'wildcard-fqdn': None, 'fortiguard-category': None, 'address6': None,
|
||||||
|
# 'address': None, 'type': None}
|
||||||
|
# ssl: {'unsupported-ssl': None, 'inspect-all': None, 'allow-invalid-server-cert': None, 'untrusted-cert': None,
|
||||||
|
# 'client-cert-request': None}
|
||||||
|
# ssh: {'status': None, 'inspect-all': None, 'ssh-tun-policy-check': None, 'ssh-policy-check': None,
|
||||||
|
# 'ssh-algorithm': None, 'unsupported-version': None, 'ports': None}
|
||||||
|
# server-cert: None
|
||||||
|
# name: Ansible_SSL_SSH_Profile
|
||||||
|
# ssl-anomalies-log: enable
|
||||||
|
# ssl-server: {'pop3s-client-cert-request': None, 'imaps-client-cert-request': None,
|
||||||
|
# 'smtps-client-cert-request': None, 'ip': None, 'ssl-other-client-cert-request': None,
|
||||||
|
# 'https-client-cert-request': None, 'ftps-client-cert-request': None}
|
||||||
|
# smtps: {'status': None, 'allow-invalid-server-cert': None, 'unsupported-ssl': None, 'untrusted-cert': None,
|
||||||
|
# 'client-cert-request': None, 'ports': None}
|
||||||
|
# imaps: {'status': None, 'allow-invalid-server-cert': None, 'unsupported-ssl': None, 'untrusted-cert': None,
|
||||||
|
# 'client-cert-request': None, 'ports': None}
|
||||||
|
# rpc-over-https: enable
|
||||||
|
# mode: set
|
||||||
|
# use-ssl-server: enable
|
||||||
|
##################################################
|
||||||
|
|
||||||
|
# Test using fixture 1 #
|
||||||
|
output = fmgr_secprof_ssl_ssh.fmgr_firewall_ssl_ssh_profile_addsetdelete(
|
||||||
|
fmg_instance, fixture_data[0]['paramgram_used'])
|
||||||
|
assert output['raw_response']['status']['code'] == 0
|
||||||
|
# Test using fixture 2 #
|
||||||
|
output = fmgr_secprof_ssl_ssh.fmgr_firewall_ssl_ssh_profile_addsetdelete(
|
||||||
|
fmg_instance, fixture_data[1]['paramgram_used'])
|
||||||
|
assert output['raw_response']['status']['code'] == 0
|
||||||
Loading…
Reference in a new issue