Add and update tests

test/fixtures/ca_cert.pem

@@ -0,0 +1,32 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

test/unit/backend/storage_test.rb

@@ -3,7 +3,7 @@
 class Backend::StorageTest < ActiveSupport::TestCase
 
   def given_redis_config(yaml)
-    FakeFS do
+    FakeFS.with_fresh do
       config = Rails.root.join('config', 'backend_redis.yml')
       FakeFS::FileSystem.clone(config.dirname, '/tmp/config')
       config.open('w') { |f| f.puts(yaml) }

test/unit/three_scale/redis_config_test.rb

@@ -43,5 +43,51 @@ class RedisConfigTest < ActiveSupport::TestCase
       assert config.key? :size
       assert_equal 5, config[:size]
     end
+
+    %i[ca_file ca_path].each do |param|
+      test "it takes given #{param} when provided" do
+        value = 'any_value'
+        raw_config = { url: 'rediss://my-secure-redis/1', ssl_params: {}}
+        raw_config[:ssl_params][param] = value
+
+        result = RedisConfig.new(raw_config)
+
+        assert result.key? :ssl_params
+        assert result[:ssl_params].key? param
+        assert_equal value, result[:ssl_params][param]
+      end
+    end
+
+    test 'it trusts on CAs in config/ca_cert.pem if no ca_file or ca_path are provided' do
+      FakeFS.with_fresh do
+        FakeFS::FileSystem.clone(file_fixture_path)
+        FakeFS::FileSystem.clone(Rails.root.join('config'))
+        FileUtils.cp file_fixture('ca_cert.pem'), Rails.root.join('config')
+
+        result = RedisConfig.new(url: 'rediss://my-secure-redis/1')
+
+        assert result.key? :ssl_params
+        assert result[:ssl_params].key? :ca_file
+        assert_equal Rails.root.join('config/ca_cert.pem').to_s, result[:ssl_params][:ca_file]
+      end
+    end
+
+    test 'it trusts on CAs in config/ca_cert.pem if ca_file or ca_path are provided empty' do
+      FakeFS.with_fresh do
+        FakeFS::FileSystem.clone(file_fixture_path)
+        FakeFS::FileSystem.clone(Rails.root.join('config'))
+        FileUtils.cp file_fixture('ca_cert.pem'), Rails.root.join('config')
+
+        result = RedisConfig.new(url: 'rediss://my-secure-redis/1', ssl_params: { ca_file: nil, ca_path: ''})
+
+        assert_equal Rails.root.join('config/ca_cert.pem').to_s, result[:ssl_params][:ca_file]
+      end
+    end
+
+    test "it doesn't trust any CA if no ca_file or ca_path are provided and config/ca_cert.pem doesn't exist" do
+      result = RedisConfig.new(url: 'rediss://my-secure-redis/1')
+
+      assert_not result.key? :ssl_params
+    end
   end
 end