mosquitto/test/broker/23-security-password-file-reload.py

#!/usr/bin/env python3

from mosq_test_helper import *

from broker_config import BrokerConfig, ListenerConfig, PluginConfig
from mosquitto_broker import MosquittoBroker

mosq_test.require_features(["WITH_PLUGINS", "WITH_PLUGIN_PASSWORD_FILE", "WITH_TLS"])

def broker_config_default(port):
    return BrokerConfig(
        listeners=[ListenerConfig(port=port)],
        allow_anonymous=True,
        password_file=f"{port}.password",
    )

def broker_config_plugin(port):
    return BrokerConfig(
        listeners=[ListenerConfig(port=port)],
        plugins=[PluginConfig(
            path=mosq_paths.plugin_password_file,
            options={
                "plugin_opt_password_file": f"{port}.password"
            }
        )],
        allow_anonymous=True,
        password_file=f"{port}.password",
    )


def do_test(broker_config_func):
    connect_packet = mqtt_packets.gen_connect("password-change-test")
    connack_packet = mqtt_packets.gen_connack(rc=0)

    port = mosq_test.get_port()
    with open(f"{port}.password", "wt") as f:
        f.write("test:$7$1000$97ozvObcN5zP4MGzYUw4uRp8+mPQbThrHOX69vdHHNVwV4iZf2K2X23FS7weilZMKeV+9oLHdilybmpXcFApYg==$WlM0jUhsiQNQJe4IDt5K1rmtAdaenWGdntswJmDkp74W9pdrt/+RdIK3YaJ09o3pD1xbtokXq933bQh+CrjA4Q==\n")

    broker_config = broker_config_func(port)
    broker = MosquittoBroker(config=broker_config, expect_fail=True)
    broker.add_extra_file(f"{port}.acl")
    with broker:
        sock = mosq_test.do_client_connect(connect_packet, connack_packet, port=port)
        sock.close()

        with open(f"{port}.password", "wt") as f:
            f.write("test:bad\n")

        broker.reload()
        # Broker should terminate
        if mosq_test.wait_for_subprocess(broker.process) == 0 and broker.process.returncode == 3:
            pass
        else:
            raise RuntimeError("broker not terminated")

do_test(broker_config_default)
do_test(broker_config_plugin)