#!/bin/bash

set -eu

. debian/tests/testlib.sh

my_hostname=$(hostname -f)

echo "check installed cert"
do_basic_tests
assert_hostname "$my_hostname"
assert_san "DNS:$my_hostname"
copy_to_tmp
assert_unchanged "check infra"

make-ssl-cert generate-default-snakeoil
assert_unchanged "no overwrite"

check_perms /etc/ssl/private "directory:root:ssl-cert:710"

exit $RC
