Add test case for the reset command

2 files changed, 63 insertions, 0 deletions

diff --git a/nitrocli/src/tests/mod.rs b/nitrocli/src/tests/mod.rs
index e0b0cf0..e2e6ce0 100644
--- a/nitrocli/src/tests/mod.rs
+++ b/nitrocli/src/tests/mod.rs
@@ -41,6 +41,7 @@ mod lock;
 mod otp;
 mod pin;
 mod pws;
+mod reset;
 mod run;
 mod status;
 mod storage;
@@ -110,6 +111,14 @@ impl Nitrocli {
     result
   }
 
+  pub fn admin_pin(&mut self, pin: impl Into<ffi::OsString>) {
+    self.admin_pin = Some(pin.into())
+  }
+
+  pub fn new_admin_pin(&mut self, pin: impl Into<ffi::OsString>) {
+    self.new_admin_pin = Some(pin.into())
+  }
+
   pub fn user_pin(&mut self, pin: impl Into<ffi::OsString>) {
     self.user_pin = Some(pin.into())
   }
diff --git a/nitrocli/src/tests/reset.rs b/nitrocli/src/tests/reset.rs
new file mode 100644
index 0000000..2e567fa
--- /dev/null
+++ b/nitrocli/src/tests/reset.rs
@@ -0,0 +1,54 @@
+// reset.rs
+
+// *************************************************************************
+// * Copyright (C) 2019 Robin Krahl (robin.krahl@ireas.org)                *
+// *                                                                       *
+// * This program is free software: you can redistribute it and/or modify  *
+// * it under the terms of the GNU General Public License as published by  *
+// * the Free Software Foundation, either version 3 of the License, or     *
+// * (at your option) any later version.                                   *
+// *                                                                       *
+// * This program is distributed in the hope that it will be useful,       *
+// * but WITHOUT ANY WARRANTY; without even the implied warranty of        *
+// * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the         *
+// * GNU General Public License for more details.                          *
+// *                                                                       *
+// * You should have received a copy of the GNU General Public License     *
+// * along with this program.  If not, see <http://www.gnu.org/licenses/>. *
+// *************************************************************************
+
+use nitrokey::Authenticate;
+use nitrokey::GetPasswordSafe;
+
+use super::*;
+
+#[test_device]
+fn reset(device: nitrokey::DeviceWrapper) -> crate::Result<()> {
+  let new_admin_pin = "87654321";
+  let mut ncli = Nitrocli::with_dev(device);
+
+  // Change the admin PIN.
+  ncli.new_admin_pin(new_admin_pin);
+  let _ = ncli.handle(&["pin", "set", "admin"])?;
+
+  // Check that the admin PIN has been changed.
+  let device = nitrokey::connect_model(ncli.model().unwrap())?;
+  let _ = device.authenticate_admin(new_admin_pin).unwrap();
+
+  // Perform factory reset
+  ncli.admin_pin(new_admin_pin);
+  let out = ncli.handle(&["reset"])?;
+  assert!(out.is_empty());
+
+  // Check that the admin PIN has been reset.
+  let device = nitrokey::connect_model(ncli.model().unwrap())?;
+  let device = device
+    .authenticate_admin(NITROKEY_DEFAULT_ADMIN_PIN)
+    .unwrap();
+
+  // Check that the password store works, i.e., the AES key has been
+  // built.
+  let _ = device.get_password_safe(NITROKEY_DEFAULT_USER_PIN)?;
+
+  Ok(())
+}