require 'serverspec'
set :backend, :exec

def service_name()
  return case os[:family]
    when 'debian', 'ubuntu' then 'ssh'
    else 'sshd'
  end
end

def root_group()
  return case os[:family]
    when 'freebsd' then 'wheel'
    else 'root'
  end
end

describe 'openssl/config.sls' do

  describe service(service_name()) do
    it { should be_running }
  end

  describe file('/etc/ssh/sshd_config') do
    it { should be_mode 600 }
    it { should be_owned_by 'root' }
    it { should be_grouped_into root_group() }
  end

  describe file('/etc/ssh/ssh_config') do
    it { should be_mode 644 }
    it { should be_owned_by 'root' }
    it { should be_grouped_into root_group() }
  end

end