#!/usr/bin/env bats

setup() {
    load '/usr/lib/bats/bats-assert/load'
    load '/usr/lib/bats/bats-support/load' # this is required by bats-assert!
}

grep_config_values() {
    grep "^$1 = " | sed "s/^${1} = //"
}

config_file="/etc/crypto-policies/back-ends/opensslcnf.config"
assert_ciphers_equal_cipherstring() {
    config_cipherstring=$(cat ${config_file} | grep_config_values "CipherString")
    expected_ciphers=$(openssl ciphers -v ${config_cipherstring})
    actual_ciphers=$(openssl ciphers -v)
    assert_equal "$expected_ciphers" "$actual_ciphers"
}
assert_ciphers_not_emtpy() {
    assert_not_equal "" "$(openssl ciphers)"
}
