策略验证自动化修改
This commit is contained in:
@@ -1,4 +1,4 @@
|
||||
*** Settings ***
|
||||
*** Settings ***
|
||||
Test Teardown DeletePolicyAndObject ${policyIds} ${objectids}
|
||||
Force Tags tsg_bf_api Trusted_Certificate_Authorities
|
||||
Library String
|
||||
@@ -15,7 +15,7 @@ Resource ../../../02-Keyword/tsg_bfapi/LogVariable.robot
|
||||
Resource ../../../02-Keyword/tsg_bfapi/ApiRequest.robot
|
||||
Resource ../../../03-Variable/AllFlowCaseVariable.txt
|
||||
Resource ../../../03-Variable/Policy_Objects_Module.txt
|
||||
Library Custometest
|
||||
cc
|
||||
Resource ../../../02-Keyword/tsg_bfapi/PolicyObject.robot
|
||||
Resource ../../../02-Keyword/tsg_bfapi/policy_object/Policy.robot
|
||||
Resource ../../../02-Keyword/tsg_bfapi/policy_object/Object.robot
|
||||
@@ -28,11 +28,13 @@ ${url} /v1/policy/profile/trustedcacertobj
|
||||
${certId} ${EMPTY}
|
||||
|
||||
*** Test Cases ***
|
||||
VerifyProxy-Security-00001
|
||||
|
||||
|
||||
|
||||
VerifyProxy-Security-00001
|
||||
# 新增 对象
|
||||
# 创建源 ip
|
||||
${rescodeip} ${object_Source_Id} AddObject {"opAction":"add","returnData":1,"objectList":{"objectType":"ip","isValid":1,"isInitialize":0,"isExclusion":0,"objectName":"qwqweqw","objectDesc":"","subObjectIds":[],"addItemList":[{"ip":"192.168.50.25","ipIf":false,"portIf":false,"port":"0-65535","itemId":"","clientIp1":"192.168.50.25","clientIp2":"192.168.50.25","clientPort1":"0","clientPort2":"65535","clientIpFormat":"range","clientPortFormat":"range","addrType":4,"direction":0,"temporaryItemId":1596177068}],"updateItemList":[],"deleteItemIds":[],"iconColor":"#31739C","objectSubType":"endpoint"}}
|
||||
${rescodeip} ${object_Source_Id} AddObject {"opAction":"add",c"objectList":{"objectType":"ip","isValid":1,"isInitialize":0,"isExclusion":0,"objectName":"qwqweqw","objectDesc":"","subObjectIds":[],"addItemList":[{"ip":"192.168.50.25","ipIf":false,"portIf":false,"port":"0-65535","itemId":"","clientIp1":"192.168.50.25","clientIp2":"192.168.50.25","clientPort1":"0","clientPort2":"65535","clientIpFormat":"range","clientPortFormat":"range","addrType":4,"direction":0,"temporaryItemId":1596177068}],"updateItemList":[],"deleteItemIds":[],"iconColor":"#31739C","objectSubType":"endpoint"}}
|
||||
${objectids} set Variable ${object_Source_Id}
|
||||
# 创建目的ip
|
||||
${rescodeip} ${object_Destination_Id} AddObject {"opAction":"add","returnData":1,"objectList":{"objectType":"ip","isValid":1,"isInitialize":0,"isExclusion":0,"objectName":"1231231231231","objectDesc":"","subObjectIds":[],"addItemList":[{"ip":"254.253.252.251","ipIf":false,"portIf":false,"port":"0-65535","itemId":"","clientIp1":"254.253.252.251","clientIp2":"254.253.252.251","clientPort1":"0","clientPort2":"65535","clientIpFormat":"range","clientPortFormat":"range","addrType":4,"direction":0,"temporaryItemId":1596176949}],"updateItemList":[],"deleteItemIds":[],"iconColor":"#31739C","objectSubType":"endpoint"}}
|
||||
@@ -52,10 +54,10 @@ VerifyProxy-Security-00001
|
||||
# 获取对象id集合
|
||||
log ${objectids}
|
||||
# 新增策略
|
||||
${rescode} ${policyId} AddPolicy {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"VerifyProxy-Security-00001","policyType":"tsg_security","action":"monitor","userTags":"","doBlacklist":0,"doLog":1,"policyDesc":"","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"SSL"},"source":[{"objectId":${object_Source_Id},"protocolField":"TSG_SECURITY_SOURCE_ADDR"},{"objectId":${object_SubId_Id},"protocolField":null}],"destination":[{"objectId":${object_Destination_Id},"protocolField":"TSG_SECURITY_DESTINATION_ADDR"}],"filterList":[{"filter":[{"objectId":${object_SNI_Id},"protocolField":"TSG_FIELD_SSL_SNI"}]},{"filter":[{"objectId":${object_CN_Id},"protocolField":"TSG_FIELD_SSL_CN"}]},{"filter":[{"objectId":${object_SAN_Id},"protocolField":"TSG_FIELD_SSL_SAN"}]}],"appIdObjects":[3],"isValid":1,"scheduleId":[]}}
|
||||
# log ${policyId}
|
||||
${rescode} ${policyId} AddPolicy {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"VerifyProxy-Security-00001","policyType":"tsg_security","action":"monitor","userTags":"","doBlacklist":0,"doLog":1,"policyDesc":"","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"SSL"},"source":[{"objectId":${object_Source_Id},"protocolField":"TSG_SECURITY_SOURCE_ADDR"},{"objectId":${object_SubId_Id},"protocolField":null}],"destination":[{"objectId":${object_Destination_Id},"protocolField":"TSG_SECURITY_DESTINATION_ADDR"}],"filterList":[{"filter":[{"objectId":${object_SNI_Id},"protocolField":"TSG_FIELD_SSL_SNI"}]},{"filter":[{"objectId":${object_SAN_Id},"protocolField":"TSG_FIELD_SSL_SAN"}]},{"filter":[{"objectId":${object_CN_Id},"protocolField":"TSG_FIELD_SSL_CN"}]}],"appIdObjects":[44],"appSelectorObjects":[],"isValid":1,"scheduleId":[]}}
|
||||
#删除策略
|
||||
${policyIds} Create List {"policyType":"tsg_security","policyIds":[${policyId}]}
|
||||
log 1232132131231313
|
||||
# 获取策略id
|
||||
log ${policyIds}
|
||||
sleep 30
|
||||
@@ -67,7 +69,7 @@ VerifyProxy-Security-00001
|
||||
${app_id} Create Dictionary attributeType=string attributeName=app_id attributeValue={"string": "ssl."}
|
||||
${subscriberid} Create Dictionary attributeType=string attributeName=subscriberid attributeValue={"string": "test25"}
|
||||
${ipsource} Create Dictionary attributeType=ip attributeName=source attributeValue={"ip":"192.168.50.25","port":"1","addrType":4,"protocol":"6","tableName":"TSG_SECURITY_SOURCE_ADDR"}
|
||||
${ipdestination} Create Dictionary attributeType=ip attributeName=destination attributeValue={"ip":"254.253.252.251","port":"1","addrType":4,"protocol":"6","tableName":"TSG_SECURITY_DESTINATION_ADDR"}
|
||||
${ipdestination} Create Dictionary attributeType=ip attributeName=destination attributeValue={"ip":"254.253.252.251","port":"1","addrType":4,"protocol":"44","tableName":"TSG_SECURITY_DESTINATION_ADDR"}
|
||||
# 合成attributes字典集
|
||||
${attributes} Create List ${sni} ${san} ${cn} ${app_id} ${subscriberid} ${ipsource} ${ipdestination}
|
||||
${verifySession} Create Dictionary attributes=${attributes}
|
||||
@@ -94,17 +96,18 @@ VerifyProxy-Security-00002
|
||||
# 创建源 ip
|
||||
${rescodeip} ${object_Source_Id} AddObject {"opAction":"add","returnData":1,"objectList":{"objectType":"ip","isValid":1,"isInitialize":0,"isExclusion":0,"objectName":"zmmtest","objectDesc":"","subObjectIds":[],"addItemList":[{"ip":"fc00::2:25","ipIf":false,"portIf":false,"port":"80","itemId":"","clientIp1":"fc00::2:25","clientIp2":"fc00::2:25","clientPort1":"80","clientPort2":"80","clientIpFormat":"range","clientPortFormat":"range","addrType":6,"direction":0,"temporaryItemId":1595474423}],"updateItemList":[],"deleteItemIds":[],"iconColor":"#31739C","objectSubType":"endpoint"}}
|
||||
${objectids} set Variable ${object_Source_Id}
|
||||
|
||||
#创建 ip二层嵌套
|
||||
# 创建源 ip
|
||||
${rescodeip} ${object_Source_Id_2} AddObject {"opAction":"add","returnData":1,"objectList":{"objectType":"ip","isValid":1,"isInitialize":0,"isExclusion":0,"objectName":"source","objectDesc":"","subObjectIds":[${object_Source_Id}],"addItemList":[],"updateItemList":[],"deleteItemIds":[],"objectId":"","iconColor":"","objectSubType":"endpoint"}}
|
||||
${objectids} Catenate SEPARATOR=, ${objectids} ${object_Source_Id_2}
|
||||
# ${objectids} Catenate SEPARATOR=, ${objectids} ${object_Source_Id_2}
|
||||
|
||||
# 创建url
|
||||
${rescodeip} ${object_URL_Id} AddObject {"opAction":"add","returnData":1,"objectList":{"objectType":"url","isValid":1,"isInitialize":0,"isExclusion":0,"objectName":"1231212","objectDesc":"","subObjectIds":[],"addItemList":[{"keywordArray":["verifytest"],"itemId":"","isHexbin":0}],"updateItemList":[],"deleteItemIds":[],"objectId":"","iconColor":""}}
|
||||
${objectids} Catenate SEPARATOR=, ${objectids} ${object_URL_Id}
|
||||
# 创建url二层嵌套
|
||||
${rescodeip} ${object_URL_Id_2} AddObject {"opAction":"add","returnData":1,"objectList":{"objectType":"url","isValid":1,"isInitialize":0,"isExclusion":0,"objectName":"qwewqewq","objectDesc":"","subObjectIds":[${object_URL_Id}],"addItemList":[],"updateItemList":[],"deleteItemIds":[],"objectId":"","iconColor":""}}
|
||||
${objectids} Catenate SEPARATOR=, ${objectids} ${object_URL_Id_2}
|
||||
# ${objectids} Catenate SEPARATOR=, ${objectids} ${object_URL_Id_2}
|
||||
|
||||
#创建Host
|
||||
${rescodeip} ${object_Host_Id} AddObject {"opAction":"add","returnData":1,"objectList":{"objectType":"fqdn_category","isValid":1,"isInitialize":0,"isExclusion":0,"objectName":"asdfafa","objectDesc":"","subObjectIds":[],"addItemList":[{"keywordArray":["*verify.com"],"itemId":"","isHexbin":0}],"updateItemList":[],"deleteItemIds":[],"objectId":"","iconColor":""}}
|
||||
@@ -150,7 +153,7 @@ VerifyProxy-Security-00002
|
||||
${policyIds} Create List {"policyType":"tsg_security","policyIds":[${policyId}]}
|
||||
# # 获取策略id
|
||||
log ${policyIds}
|
||||
sleep 30
|
||||
sleep 60
|
||||
# # 新增策略验证
|
||||
# 创建attributes中的字典
|
||||
${url} Create Dictionary attributeType=string attributeName=url protocol=http attributeValue={"string": "verifytest"}
|
||||
|
||||
Reference in New Issue
Block a user