From 764e0a41bd0fa062ff32287c53645fcbb650697e Mon Sep 17 00:00:00 2001
From: Joanna Jeremicz <joanna.jeremicz@nokia.com>
Date: Thu, 13 Aug 2020 14:43:49 +0200
Subject: [PATCH] Add CSITs for Truststore Merger

Issue-ID: DCAEGEN2-2253
Signed-off-by: Joanna Jeremicz <joanna.jeremicz@nokia.com>
Change-Id: Ie2d648108c99f4a1e61fe855f318078e6ffc0e21
---
 .../truststoremerger/setup.sh                      |  28 +++++++++
 .../truststoremerger/teardown.sh                   |  18 ++++++
 .../truststoremerger/testplan.txt                  |   3 +
 .../expected_truststores/jksAndPemAndP12.jks       | Bin 0 -> 3923 bytes
 .../assets/expected_truststores/pemAndP12.pem      |  63 +++++++++++++++++++
 .../assets/invalid_different_lists_size.env        |   2 +
 .../assets/invalid_duplicated_aliases.env          |   2 +
 .../assets/invalid_empty_certs.env                 |   2 +
 .../truststoremerger/assets/invalid_empty_file.env |   0
 .../assets/invalid_empty_passwords.env             |   2 +
 .../truststoremerger/assets/invalid_extension.env  |   2 +
 .../assets/invalid_file_password_pair.env          |   2 +
 .../assets/invalid_password_path.env               |   2 +
 .../assets/invalid_truststore_paths.env            |   2 +
 .../truststoremerger/assets/truststores/empty.pem  |   0
 .../assets/truststores/truststore.jks              | Bin 0 -> 1413 bytes
 .../assets/truststores/truststore.p12              | Bin 0 -> 1530 bytes
 .../assets/truststores/truststore.pem              |  28 +++++++++
 .../assets/truststores/truststoreJks.pass          |   1 +
 .../assets/truststores/truststoreP12.pass          |   1 +
 .../truststoremerger/assets/valid_jks_pem_p12.env  |   2 +
 .../truststoremerger/assets/valid_pem_p12.env      |   2 +
 .../assets/valid_single_truststore.env             |   2 +
 .../truststoremerger/libraries/EnvsReader.py       |  11 ++++
 .../libraries/JksTruststoreValidator.py            |  18 ++++++
 .../libraries/PemTruststoreValidator.py            |  19 ++++++
 .../libraries/TrustMergerManager.py                |  47 +++++++++++++++
 .../resources/trust-merger-keywords.robot          |  34 +++++++++++
 .../resources/trust-merger-properties.robot        |  35 +++++++++++
 .../truststoremerger/trust-merger-test.robot       |  67 +++++++++++++++++++++
 30 files changed, 395 insertions(+)
 create mode 100644 plans/oom-platform-cert-service/truststoremerger/setup.sh
 create mode 100644 plans/oom-platform-cert-service/truststoremerger/teardown.sh
 create mode 100755 plans/oom-platform-cert-service/truststoremerger/testplan.txt
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/assets/expected_truststores/jksAndPemAndP12.jks
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/assets/expected_truststores/pemAndP12.pem
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/assets/invalid_different_lists_size.env
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/assets/invalid_duplicated_aliases.env
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/assets/invalid_empty_certs.env
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/assets/invalid_empty_file.env
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/assets/invalid_empty_passwords.env
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/assets/invalid_extension.env
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/assets/invalid_file_password_pair.env
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/assets/invalid_password_path.env
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/assets/invalid_truststore_paths.env
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/assets/truststores/empty.pem
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/assets/truststores/truststore.jks
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/assets/truststores/truststore.p12
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/assets/truststores/truststore.pem
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/assets/truststores/truststoreJks.pass
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/assets/truststores/truststoreP12.pass
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/assets/valid_jks_pem_p12.env
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/assets/valid_pem_p12.env
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/assets/valid_single_truststore.env
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/libraries/EnvsReader.py
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/libraries/JksTruststoreValidator.py
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/libraries/PemTruststoreValidator.py
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/libraries/TrustMergerManager.py
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/resources/trust-merger-keywords.robot
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/resources/trust-merger-properties.robot
 create mode 100644 tests/oom-platform-cert-service/truststoremerger/trust-merger-test.robot

diff --git a/plans/oom-platform-cert-service/truststoremerger/setup.sh b/plans/oom-platform-cert-service/truststoremerger/setup.sh
new file mode 100644
index 00000000..9f618406
--- /dev/null
+++ b/plans/oom-platform-cert-service/truststoremerger/setup.sh
@@ -0,0 +1,28 @@
+#!/bin/bash
+#
+# Copyright 2020 Nokia.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+#export container name
+export MergerContainerName=TrustStoreMerger
+
+#install docker sdk
+echo "Uninstall docker-py and reinstall docker."
+pip uninstall -y docker-py
+pip uninstall -y docker
+pip install -U docker==2.7.0
+
+#install pyjks for .jks files management
+pip install pyjks
diff --git a/plans/oom-platform-cert-service/truststoremerger/teardown.sh b/plans/oom-platform-cert-service/truststoremerger/teardown.sh
new file mode 100644
index 00000000..a0ee4d26
--- /dev/null
+++ b/plans/oom-platform-cert-service/truststoremerger/teardown.sh
@@ -0,0 +1,18 @@
+#!/bin/bash
+#
+# Copyright 2017 ZTE, Inc. and others.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+kill-instance.sh ${MergerContainerName}
diff --git a/plans/oom-platform-cert-service/truststoremerger/testplan.txt b/plans/oom-platform-cert-service/truststoremerger/testplan.txt
new file mode 100755
index 00000000..11e00832
--- /dev/null
+++ b/plans/oom-platform-cert-service/truststoremerger/testplan.txt
@@ -0,0 +1,3 @@
+# Test suites are relative paths under [integration/csit.git]/tests/.
+# Place the suites in run order.
+oom-platform-cert-service/truststoremerger
diff --git a/tests/oom-platform-cert-service/truststoremerger/assets/expected_truststores/jksAndPemAndP12.jks b/tests/oom-platform-cert-service/truststoremerger/assets/expected_truststores/jksAndPemAndP12.jks
new file mode 100644
index 0000000000000000000000000000000000000000..1c9f111a743e6bff891ec059bd065246b1efefeb
GIT binary patch
literal 3923
zcmeI!do+~Y9tZHb7sfCRLoOlmPNJR}O)jMwBli)JOG*reQJQiKF$YtGXmY2FOUk8`
zCbvqi5utH=Npej|^`fR+k~nnEI;V9`=bUx^Ip?4Lc-CIOz4x=%e%ABdpS72#mZv}<
z5M=d%es6`{XwKdz-Duv<00;#3<J5w|Ah^SJBA^2T!6^V6z87FaRdb*aFa#n5%DO#O
zSHLgl0-^{ZwJ4LQc~LM}1P%h!@hAX^fZD=DkZ?;IeSIUmC?K*{3nO8c`}M8xB7o3Z
ziNHW?ZGcTuqIhj!CqTsS#1jeHj#8qU+JL4e{;%bKxf&a?`N!>m;UFj*A_fB35Mc-#
z0tVIT<eQ*NOKH-~O^*^859HF1nMm6xIm$Yfe_aSID&tm~*ix3yEReN(W2=rZvZk<5
za*0Jc*l<{Q8Z(_XBl08~=e3~Dovx>HYwq7?_@D>vs81tQ97n^5zbQPXJVvnd0-8sc
zUT>AF(0~bvCqNpUyFA<}M{(_yY1QYOCh43JHA*HuMctt@?z---_r=N&#i&Q_b0ee@
zIF=>Fxc9q?YoZ2)#C9{H1FpI(CcWdp9(pRq4dkU{h7b*$KQy-?<!<1P*3@I0YY)U;
zWUbiYhQ<?43hv!CJhwmEuAsX7Ox*eU#1%1m`RH@2KHdezf=A?s?PiNxLQl=GlY;e?
zX&3cU8#dgqwB04EL0#mv*ClWHKsoyf8RbwPRT-=>>QX@r|8^C9fNxl+<y|^Z&}aY3
z66!(iA!<+72wr{2XJ^dIST%SfI)@->60w7`T~E56q!D?nQH=dODzj7bCQIZB%3g&g
z+IUm##+{ST%gml?AAwb4TjNLpSQ_$%s6Q`-EbSGhH!!1W@8FX)loMZFVdN+U@RP27
z(&DK-F{iFubn@f}o?+OIl<#;vmSSR?-Nw>$Ej@QDPr1)s9cVaG-q9LkurwB%Wf775
z(Ez1-;UO?`sb8;CTw6^h{&NXdw>U*?P*1uRFMhkHmKJRHg(dXn>0!@n2hk8H7zEC9
z189K!Y6Rs`Ff2^M##U2c{=V}7uRiE<Jq{l-^KQx%P*@vQhDih1@Sjf*TbqCZgI8d1
z0J_=$sI?BUwGP<o0g3uChO4JyHHKgiNuh;N5|nLmha}@k+f$=q-O{}7*s{?b;&3!m
zS#t;fQ+f|HJrHqX5iLwYCCcVRgqb%xHzdl~#~x4TB}G!UA5N{EUR+jHs#0V!s;5br
zR;N082m;^FC5^dLZCvvPkF?p_z@?1fc1i8shvk>TP8_ONt>b=6?Jk7n`1lQP^b3l+
zl6lLJmiN`Hwf#=r5yPU~tizb3wk<cq-;x^|2_vOGry|R$?rAGFT^Ql0M82|$N0Wkb
zvhxM}-k^}l<1HNNo6m}4xq;=6Hl2x4wKXfbUu|yOeo_hiv8BSOCk-_c7&AwFAOkC-
zUdujz46YU$vim6^6z9|@hWb1-HySSaI#R=N7zXDBGHHA3Y!WW%M5Wdii{+~=hlfS#
z+o^8**uD^OsaOKXjEy{cV#bv%GZLq;Qdm%g)oc>MeZmbfI}`I)yu);4cnO;EvaNyl
z_TUu%xSC;%Dc9UF?lIy*+OseJT9J}HrmM!2@|uwYE?Q_EA0SoKZT-SG&w1{UYMsk{
zzkdiMe=GOHX_v}LX$D)at54T{hD-Lzm^;Yo9P_<fU~xpHGiGzu<pr@T&BbFwa;fhL
z>l4Z--usrVNcS$+VwD=t4Ie*1Kjaxn=8u!YzPZNP@7XXb9lC5@%;!ZaTVKi}Hpo2~
z3^^_K7P~R@4R@ydnU|bYK-70+CH;K^{QT+e8g6u7e=iR&H<~|P1HbC6zoG?N^l#q6
zDgidEbk$qgzj!O*@$hxDl3dD&_#bu^UC_cD$5$bse+U^s!z%+y2w|Z_)tDrKx;q$*
z#JFhyuG%|y5wvtP0Ud%Hp62d>mjp1YVTD1FNDCU1=1D(6XZjoHe}DHo(=vu;6a#%l
zgOf~unirGqt9T&5%k8+IKh4*F&1(VxXyJ)?0+C1{u6g}q`M=l#8+`T05C4uln6rvJ
zI2OVNM}P#$i&+&BA;SZA3J0PEEd_*Gk^r6PIy+&STfC{_X{bbZsU!SR$7!=K{c-|H
zV|t;7veww#g+Xyh|3mcv@4N9616S-z%Tn}>lt&*YuUNIa7GA@J-D?^s<-BIuFv7_p
zJ|PdD7wKYOZfE2+TD;5Z$b@taIc;sZE*ryO3{7neUg9{uvA*SOH!a?VRS<oPZg;q#
zJ8u+x{(15fgpZxtFwi^yb=@0CGA`~weaWrgy-v1Y&a=H3J7oUR{IPy<9|rPbhw@il
z)(Gf)go&n+w_nrj`ly8xnOvKkv(5IM!jQYWbB$JlC82$~U#y1>Lu9_$Wi-i&JF=u$
zj=k3lUy8k}yfWyt)O}D~q`Z-u?TON&|HhQj9ht~nXUw0?irqV%AWPMu&U<MfZ7bRF
z26@6`Xj5mW>$)OL->RKsY0clRS$$iQ*)!nNHW3CE?{3J*-xeEbM;2GT1u5)}pT;8g
zhAs=%S6k{@+dPQme|?#oX+E}bA^PA(zxqzH<=>J0CnSGl6>-K~qtn3HLPyH;PbjZ^
zx9E34TYq5rr^EjV+10<_fqa7Dx(;c-X=Cr}SlXH@F?ZW%A3n{B-h0g$(K<!5JM<|v
z<f}_^8r*$TmXlt8B=rw@rMoY@$l+4kVyuTHh^$@djuW4$bFDL&1ljc!_kqS^@H9OC
zsGsW@(^?a(Q*u$599n{+^5WdCknCp$62s*K&$R>rxgw&W$H%)lB>5?}GoMxEK%m)e
zSLfw9w0H`JH><|?oj{cxS4mL7NV%-IqxwmBY?^!EUaY9GgG#7~gP!+gQQ~L}QtH0T
zSb)mA=%LOk2?JXnSBkJ?k8mE_EO)g3qLa(%5>-x3VfwyplbTlrI*$pX_qeho)5V<#
zP}10#fb=_a!&x}l(rA>1CXAk4bZZQ1KPJ)5i_J0}*-;IvjGX9)-JZb9ai^~L8gTU5
z3^OKc$iW$19g-jXJV+^BVbi;Ha5W{0Hx1Xd-lpEM7MWbf@wN9OE<{6`o#h$(AhaTu
zK-!8BHcxcqZyC>P*Md)aAAVm;shWG~*~ClT-eqq%)%P8_ji=}*G=2u%+Qrgek-8uL
v3%WIeg^~Zx+F#K9g6?13CVxTqe}^s$G!UQ^@Z|$~(!)Vrdpy$x(X;8#fjUn-

literal 0
HcmV?d00001

diff --git a/tests/oom-platform-cert-service/truststoremerger/assets/expected_truststores/pemAndP12.pem b/tests/oom-platform-cert-service/truststoremerger/assets/expected_truststores/pemAndP12.pem
new file mode 100644
index 00000000..978e682d
--- /dev/null
+++ b/tests/oom-platform-cert-service/truststoremerger/assets/expected_truststores/pemAndP12.pem
@@ -0,0 +1,63 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+Bag Attributes
+    friendlyName: trusted-certificate-1
+    2.16.840.1.113894.746875.1.1: <Unsupported tag 6>
+subject=UID = c-0b8462793092c1adf, CN = ManagementCA, O = EJBCA Container Quickstart
+
+issuer=UID = c-0b8462793092c1adf, CN = ManagementCA, O = EJBCA Container Quickstart
+
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/tests/oom-platform-cert-service/truststoremerger/assets/invalid_different_lists_size.env b/tests/oom-platform-cert-service/truststoremerger/assets/invalid_different_lists_size.env
new file mode 100644
index 00000000..9edfaa41
--- /dev/null
+++ b/tests/oom-platform-cert-service/truststoremerger/assets/invalid_different_lists_size.env
@@ -0,0 +1,2 @@
+TRUSTSTORES_PATHS=/var/certs/truststore.jks:/var/certs/truststore.pem:/var/certs/truststore.p12
+TRUSTSTORES_PASSWORDS_PATHS=/var/certs/truststoreJks.pass:/var/certs/truststoreP12.pass
diff --git a/tests/oom-platform-cert-service/truststoremerger/assets/invalid_duplicated_aliases.env b/tests/oom-platform-cert-service/truststoremerger/assets/invalid_duplicated_aliases.env
new file mode 100644
index 00000000..f98b3366
--- /dev/null
+++ b/tests/oom-platform-cert-service/truststoremerger/assets/invalid_duplicated_aliases.env
@@ -0,0 +1,2 @@
+TRUSTSTORES_PATHS=/var/certs/truststore.jks:/var/certs/truststore.jks
+TRUSTSTORES_PASSWORDS_PATHS=/var/certs/truststoreJks.pass:/var/certs/truststoreJks.pass
diff --git a/tests/oom-platform-cert-service/truststoremerger/assets/invalid_empty_certs.env b/tests/oom-platform-cert-service/truststoremerger/assets/invalid_empty_certs.env
new file mode 100644
index 00000000..95c00fc2
--- /dev/null
+++ b/tests/oom-platform-cert-service/truststoremerger/assets/invalid_empty_certs.env
@@ -0,0 +1,2 @@
+TRUSTSTORES_PATHS=/var/certs/empty.pem:/var/certs/truststore.p12
+TRUSTSTORES_PASSWORDS_PATHS=:/var/certs/truststoreP12.pass
diff --git a/tests/oom-platform-cert-service/truststoremerger/assets/invalid_empty_file.env b/tests/oom-platform-cert-service/truststoremerger/assets/invalid_empty_file.env
new file mode 100644
index 00000000..e69de29b
diff --git a/tests/oom-platform-cert-service/truststoremerger/assets/invalid_empty_passwords.env b/tests/oom-platform-cert-service/truststoremerger/assets/invalid_empty_passwords.env
new file mode 100644
index 00000000..840728bb
--- /dev/null
+++ b/tests/oom-platform-cert-service/truststoremerger/assets/invalid_empty_passwords.env
@@ -0,0 +1,2 @@
+TRUSTSTORES_PATHS=/var/certs/truststore.jks:/var/certs/truststore.pem:/var/certs/truststore.p12
+TRUSTSTORES_PASSWORDS_PATHS=
diff --git a/tests/oom-platform-cert-service/truststoremerger/assets/invalid_extension.env b/tests/oom-platform-cert-service/truststoremerger/assets/invalid_extension.env
new file mode 100644
index 00000000..5b971616
--- /dev/null
+++ b/tests/oom-platform-cert-service/truststoremerger/assets/invalid_extension.env
@@ -0,0 +1,2 @@
+TRUSTSTORES_PATHS=/var/certs/truststore.txt:/var/certs/truststore.p12
+TRUSTSTORES_PASSWORDS_PATHS=/var/certs/truststoreJks.pass:/var/certs/truststoreP12.pass
diff --git a/tests/oom-platform-cert-service/truststoremerger/assets/invalid_file_password_pair.env b/tests/oom-platform-cert-service/truststoremerger/assets/invalid_file_password_pair.env
new file mode 100644
index 00000000..1a195116
--- /dev/null
+++ b/tests/oom-platform-cert-service/truststoremerger/assets/invalid_file_password_pair.env
@@ -0,0 +1,2 @@
+TRUSTSTORES_PATHS=/var/certs/truststore.jks
+TRUSTSTORES_PASSWORDS_PATHS=/var/certs/truststoreP12.pass
diff --git a/tests/oom-platform-cert-service/truststoremerger/assets/invalid_password_path.env b/tests/oom-platform-cert-service/truststoremerger/assets/invalid_password_path.env
new file mode 100644
index 00000000..b397f9ac
--- /dev/null
+++ b/tests/oom-platform-cert-service/truststoremerger/assets/invalid_password_path.env
@@ -0,0 +1,2 @@
+TRUSTSTORES_PATHS=/var/certs/truststore.jks
+TRUSTSTORES_PASSWORDS_PATHS=/var/certs/truststoreJks_invalid.pass
diff --git a/tests/oom-platform-cert-service/truststoremerger/assets/invalid_truststore_paths.env b/tests/oom-platform-cert-service/truststoremerger/assets/invalid_truststore_paths.env
new file mode 100644
index 00000000..52fa88c6
--- /dev/null
+++ b/tests/oom-platform-cert-service/truststoremerger/assets/invalid_truststore_paths.env
@@ -0,0 +1,2 @@
+TRUSTSTORES_PATHS=/invalid/truststore.jks:/invalid/truststore.p12
+TRUSTSTORES_PASSWORDS_PATHS=/var/certs/truststoreJks.pass:/var/certs/truststoreP12.pass
diff --git a/tests/oom-platform-cert-service/truststoremerger/assets/truststores/empty.pem b/tests/oom-platform-cert-service/truststoremerger/assets/truststores/empty.pem
new file mode 100644
index 00000000..e69de29b
diff --git a/tests/oom-platform-cert-service/truststoremerger/assets/truststores/truststore.jks b/tests/oom-platform-cert-service/truststoremerger/assets/truststores/truststore.jks
new file mode 100644
index 0000000000000000000000000000000000000000..3bd85a064a6e1cd017d4508fe2265d20d5dcff54
GIT binary patch
literal 1413
zcmb7DYdF&j9NvEy9k(s1SxktW<xu}wt0~&7$Z?luLa_=fB6Z~cV5coKx#gO<b_gpL
zbID~a<-R6QI(aZ2^`ztyU8Kz6JbmcH`Eow|p7(j*-~0TY--q{=&&p>Z5D0XAfPYcx
zEW<l6_$(vP8(f#Jq=*0jf^gqM1kE521Qlc<4udS1VG#@pK%t6|g8Q@W<q{zeR8>$k
z;@EJ$r~-g80s<Q2k)VnKj0RU$K{&ZuT3X{(LFEmuqyl$xv~<QRgNhqeK^;nS1$Stu
z;z{5>kci)hCz_HxG*k&BkU+ryp#Sq43%c{?cK`$g#)6_CAPcGlWkCT*yIGlyT5T-@
z6SU(|I`bhm=YkE!RnJ4~l<?bfbVVJn!G=baM=n!H&y$+Hm<6+F7^T`F2e2Afnp2<4
zo>%Tkz@1+<=FN53^V*u4m?3JTZuSH51|Ac!#9wuuP@gEUN<+IQzQ5j$tv7)yZcc-W
zy$AiyQBULg8?sxkKc4nYkr`3*eKU>SrQE*`?w{f7x1j93nt1UVX(>+CeB8`_ej8_0
z5p{@}5L)81lJPDD-r}#z9VyMsk0KuNUg+vm!B*l<w{@VqL@r4;W7gboV^e9ti;WMg
zt~n;SmA48bxz{_=*HFH~iI>j9f*ZQ!k0>quwkx}$FU_+uA}sY8H!ZTnTPmGs`?XB$
zR|Ng-w{|U1|6EexxOZ?GB6KEv>WOiyC2B4btGfpRYe&k5>93q%e)dB|(sbM6tA#RF
z?iWpGaiD^944S<)Y4p=z&tOkBQ4lksPXB_;mlCRCly4*H1`O5CDx=Dp;Foo_10*ka
zE4r6U4n;FmDpmgwWKuBaV=YGJ4e9P71!G0Yt@YL(8lWVjWa)swsK?HJ)5<A-NmwM4
zCKK*`GMQ;ZE9{H0I8%G=Ua9`@Ib%@lC4AbOc;x$JQh`JKtq(_#hBsP3S?b>w(#<3z
z&E${O=!5)B)TjkUgx`FBNW_S6`x>M8X28?`&IvUr41fToXF&$2y&gerBpeOj>PjOl
z+RaE^1Rddd9XNc{{JYuTL7k1YJ{$w0<Nn)#+AydCz#1F@!qx#qZV0Fi0lr=k&d)Ji
zZ^e2H0SH;An^_%R=ukt}^k<m2nH=x#+H^r~T|*pC2+}9)l`Q29!E(YBF0QC4k&)?I
zMe(tAUEbn!O?py5jv#|g-Q$@hnp=?@>NV>IF<a-z`OcS~4w)`q{#e~vJln^!6Z>U<
zx(}x2M)YqZ9rD!v9((a*hhaN!HS5`3cu~le@$FZ_xwrH0Susk#+4lC=w0l`q6c>1^
zXY}o=ihD~Dcbdv-LoTuFnj1;Fk8j9Q4A`%nlhw%KMTKRHlIP)3(*fNnn5q~2Bwm>C
z(T>POLz-=MQ>)#v{$M@eLwCLPP&QH)miU?YP!nEff2Z*J1%y#_)S&^>Xxyn`6!PQP
z=ZUy&uh}LZ<8Xu^EQoQq-8C)MjFTneqsolraj|SmH^bjP^e=~|^0(rGlGvv&&Yxjv
z%D6gfcgri#gvZLbCEQq$G`(ysFxE^{kVZ(>>J4i&$LYQ=$vvhnB<!8?llhR%kCxr3
z(4(slw)s<EGmC(V<=&|ga((;muM)eWm+o1|i+MASV-W3o#S2$`8m2K!7Itv>Abp-k
z3CaC@B1SrS`9ZmZmw_~KXLH^%>UI}@atxa_WBN;49X0T%+?m{%CqnCWUK<Z^@jdC!
zrbwp9v8!jebn`8rFwt^5zC^&*Kb~4j6k{KbMqNd{MQ@LO!<&Eh;yhL(loN1N)HX$M
S48ohm93up;HXF>o&-(|CgJH}7

literal 0
HcmV?d00001

diff --git a/tests/oom-platform-cert-service/truststoremerger/assets/truststores/truststore.p12 b/tests/oom-platform-cert-service/truststoremerger/assets/truststores/truststore.p12
new file mode 100644
index 0000000000000000000000000000000000000000..3a98c4a203e2a856be44eb3269ad8a22b6ae96a4
GIT binary patch
literal 1530
zcmV<W1qJ#rf(7;h0Ru3C1+NAPDuzgg_YDCD0ic2fpag;ioG^j~m@t9`lm-bZhDe6@
z4FLxRpn?U3FoFev0s#Opf(3d82`Yw2hW8Bt2LUiC1_~;MNQU<f0So~KFdGCEi`j0_
zCklI>nK%Eas|xh9uD2{J0s{cUP=JC3K%`b&-^h@EFHDysbpzcvNaFw@Zgy3JFnn*J
zPF4tdrc11B6tIq@@E_dNzsA}ow5P8Zt}Q5n1ogaf{^bGDN~Gb=LhUCLmgr`=yFi-R
zeI-H$u;=*(;>>$bs5u1W5EZz$8K%|a$5GmfnFm;9{rp*225)ks+fPc=z#yjYu}XOd
zGRceuMTgwWqJUdu>~=z>BdB-;xL?VNF`rTwTyCgL=INWq+x^!aQk|#}PLP7r;#lyN
zh!qs-hIX5apqzYm2k#iH;35U7N;y%n0wVpm$ln7Mh%B@Bj~Wx66@p-I-K6hbjQPwj
zV}^Em5j2G-di^m@4GvgF^?MMv*O@iHFW|iiDkagoY*QapE8K*L33rWRKPVKfa_wW?
zCXg<lh``!~2KNDlE?t&Z;Z>ldGZRp?8g&HbT>Bs^W@0qb1}@2&BI}fQ6Wc^+KEU3J
zpt)eNWRMJ=7Yo9Y?5YkE#gakQ*JJyn2iNb|jTI<c3M+|L7nh5c1vi~h2QPsKOQD)a
zK{0(Y`IcQBruPBegk$jX`!@ZUl)Z00i&HT%?&0Xm)*&P@x-|Q%-Xc`tqTH%W4r@lR
zrps6LS_9W7C2w?3X7hHBpL!XDQdE=bajG(Pv5^n{YRnso;klhQfUZ{$PUY;g(ZP@D
zLX8eS%U#Lg9oQFp;-v>fdVa#h`ucjk9jCB(lz~9KRmA%Clk9V@()7VEXK@V71q$DF
zN|&`V<AguwBaps=sa|4+TfJSRq6i#%lV^N8%iY}>dA(u>tHn?`2EB>9)89d>O6^{O
z%TlTkQ(T}di~KKJwI5_Tf`V}gW_%ZjP>`x@Gj28^Clm|o+D(y6PnpmBtqBOGWleck
ztcO9=1AGt;z;kzu6uO*32O7SaYC;f-;LjJ+nz~F}34k-e^^}FX`Y}N&M0DS5W^GZU
z;B-cW{70BP8d{gnXIURLFhY79EW%BWoixgq>DnTj!$fvshLN?Q<}Ch+)*;0N+A$)t
z?iC`k_A3$*_*puk3T#wE3^Ek~QUDG$!nbWH6keJrVS-{}zO93Cio?-;&4M-&*_~M(
zx3IGpG|JaZ8iBoGH<vvciBu9?(><SsB}{fRQ=R<7iaWJR;ro%Ni9N>gi+Cb3QkVc2
zdQ&(HT{3VqblweI8BBhVu(^OK*VW+(ED%;3Ry1pFzZ(Ch^b!onjg~PN|N3xx%JYXQ
z$M2>0yAn#-$G|cNpW!XN1P4aZbRV{Mis~<S_KjFKngZyPA}vy4BjV2>@z4hx=&%Ip
zS0El<asM9R@|9xr*7gp6V?{hCeuSR~(R{s_pi5=HcJmD3IL|I9290P5@+o6G3#HDr
zmWGD~|9S&mh_F|-JQHWo8y?-Xt2*o=UPUj~o!KTysOV<e)zu^kYkbY_SSr1JE_mv!
z_Re=e`WqMoaw+-z60;OyaDy?efC<Ps!j9K5^Zcr%EYKywOlXUJixt<js$rz+z5*{F
zKMm-UOXO>Sd8Tv;;7#6=2^2%D33T^CB^@(cd>D>xJ+IawEBnLO3aI`8B+=2=1WgwH
zWH}PTyq)~-d-OFY*y;e7nH^b!mcv=0M!N+85+W&cZt?jiy?m;0+5yq@QuDo8bAV}D
zFFVjr!?w3#_UFQ!Kz_ls(SALJ<po#^0~A*wvpYaY`+t^j6+|{aE={@1V5li8vtd-0
zkKC=BD%!3OJo^faLD-~@{PCAUQ3<cuG|WC0Q|``#lY;3EWI3XAD%A&t7(*e50`;vO
z)DoFG^XQokkRd)!pzbX=Dlk4UAutIB1uG5%0vZJX1Qf+8?-FeBgPC6k8XP=%0Gn;U
g94Q18K)-N%K~fU~Rb#RCPU!|m)16?I0s{etphm;HV*mgE

literal 0
HcmV?d00001

diff --git a/tests/oom-platform-cert-service/truststoremerger/assets/truststores/truststore.pem b/tests/oom-platform-cert-service/truststoremerger/assets/truststores/truststore.pem
new file mode 100644
index 00000000..8815d6cb
--- /dev/null
+++ b/tests/oom-platform-cert-service/truststoremerger/assets/truststores/truststore.pem
@@ -0,0 +1,28 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/tests/oom-platform-cert-service/truststoremerger/assets/truststores/truststoreJks.pass b/tests/oom-platform-cert-service/truststoremerger/assets/truststores/truststoreJks.pass
new file mode 100644
index 00000000..817b6194
--- /dev/null
+++ b/tests/oom-platform-cert-service/truststoremerger/assets/truststores/truststoreJks.pass
@@ -0,0 +1 @@
+WkTGRmhSe%PM;it?NRY888Ak
\ No newline at end of file
diff --git a/tests/oom-platform-cert-service/truststoremerger/assets/truststores/truststoreP12.pass b/tests/oom-platform-cert-service/truststoremerger/assets/truststores/truststoreP12.pass
new file mode 100644
index 00000000..48036abd
--- /dev/null
+++ b/tests/oom-platform-cert-service/truststoremerger/assets/truststores/truststoreP12.pass
@@ -0,0 +1 @@
+0TZd_x#qp$78hJsm0wzc1dm_
\ No newline at end of file
diff --git a/tests/oom-platform-cert-service/truststoremerger/assets/valid_jks_pem_p12.env b/tests/oom-platform-cert-service/truststoremerger/assets/valid_jks_pem_p12.env
new file mode 100644
index 00000000..4afa1a27
--- /dev/null
+++ b/tests/oom-platform-cert-service/truststoremerger/assets/valid_jks_pem_p12.env
@@ -0,0 +1,2 @@
+TRUSTSTORES_PATHS=/var/certs/truststore.jks:/var/certs/truststore.pem:/var/certs/truststore.p12
+TRUSTSTORES_PASSWORDS_PATHS=/var/certs/truststoreJks.pass::/var/certs/truststoreP12.pass
diff --git a/tests/oom-platform-cert-service/truststoremerger/assets/valid_pem_p12.env b/tests/oom-platform-cert-service/truststoremerger/assets/valid_pem_p12.env
new file mode 100644
index 00000000..e0240a74
--- /dev/null
+++ b/tests/oom-platform-cert-service/truststoremerger/assets/valid_pem_p12.env
@@ -0,0 +1,2 @@
+TRUSTSTORES_PATHS=/var/certs/truststore.pem:/var/certs/truststore.p12
+TRUSTSTORES_PASSWORDS_PATHS=:/var/certs/truststoreP12.pass
diff --git a/tests/oom-platform-cert-service/truststoremerger/assets/valid_single_truststore.env b/tests/oom-platform-cert-service/truststoremerger/assets/valid_single_truststore.env
new file mode 100644
index 00000000..66b6f66f
--- /dev/null
+++ b/tests/oom-platform-cert-service/truststoremerger/assets/valid_single_truststore.env
@@ -0,0 +1,2 @@
+TRUSTSTORES_PATHS=/var/certs/truststore.jks
+TRUSTSTORES_PASSWORDS_PATHS=/var/certs/truststoreJks.pass
diff --git a/tests/oom-platform-cert-service/truststoremerger/libraries/EnvsReader.py b/tests/oom-platform-cert-service/truststoremerger/libraries/EnvsReader.py
new file mode 100644
index 00000000..cc60eed6
--- /dev/null
+++ b/tests/oom-platform-cert-service/truststoremerger/libraries/EnvsReader.py
@@ -0,0 +1,11 @@
+
+class EnvsReader:
+
+  def read_env_list_from_file(self, path):
+    f = open(path, "r")
+    r_list = []
+    for line in f:
+      line = line.strip()
+      if line[0] != "#":
+        r_list.append(line)
+    return r_list
diff --git a/tests/oom-platform-cert-service/truststoremerger/libraries/JksTruststoreValidator.py b/tests/oom-platform-cert-service/truststoremerger/libraries/JksTruststoreValidator.py
new file mode 100644
index 00000000..e18ca12c
--- /dev/null
+++ b/tests/oom-platform-cert-service/truststoremerger/libraries/JksTruststoreValidator.py
@@ -0,0 +1,18 @@
+
+import jks
+
+class JksTruststoreValidator:
+
+  def get_truststore(self, truststore_path, password_path):
+    truststore = jks.KeyStore.load(truststore_path, open(password_path, 'rb').read())
+    return truststore.certs
+
+  def assert_jks_truststores_equal(self, result_truststore_path, password_path, expected_truststore_path):
+    result_certs = self.get_truststore(result_truststore_path, password_path)
+    expected_certs = self.get_truststore(expected_truststore_path, password_path)
+    if len(result_certs) != len(expected_certs):
+      return False
+    for k in result_certs:
+      if not (k in expected_certs and result_certs[k].cert == expected_certs[k].cert):
+        return False
+    return True
diff --git a/tests/oom-platform-cert-service/truststoremerger/libraries/PemTruststoreValidator.py b/tests/oom-platform-cert-service/truststoremerger/libraries/PemTruststoreValidator.py
new file mode 100644
index 00000000..8dc9623d
--- /dev/null
+++ b/tests/oom-platform-cert-service/truststoremerger/libraries/PemTruststoreValidator.py
@@ -0,0 +1,19 @@
+import re
+
+BEGIN_CERT = "-----BEGIN CERTIFICATE-----"
+END_CERT = "-----END CERTIFICATE-----"
+
+class PemTruststoreValidator:
+
+  def assert_pem_truststores_equal(self, result_pem_path, expected_pem_path):
+    result_certs = self.get_list_of_pem_certificates(result_pem_path)
+    expected_certs = self.get_list_of_pem_certificates(expected_pem_path)
+    result_certs.sort()
+    expected_certs.sort()
+    if len(result_certs) != len(expected_certs):
+      return False
+    return result_certs == expected_certs
+
+
+  def get_list_of_pem_certificates(self, path):
+    return re.findall(BEGIN_CERT + '(.+?)' + END_CERT, open(path, 'rb').read(), re.DOTALL)
diff --git a/tests/oom-platform-cert-service/truststoremerger/libraries/TrustMergerManager.py b/tests/oom-platform-cert-service/truststoremerger/libraries/TrustMergerManager.py
new file mode 100644
index 00000000..f7a493c4
--- /dev/null
+++ b/tests/oom-platform-cert-service/truststoremerger/libraries/TrustMergerManager.py
@@ -0,0 +1,47 @@
+import docker
+import os
+import shutil
+from EnvsReader import EnvsReader
+from docker.types import Mount
+
+ARCHIVES_PATH = os.getenv("WORKSPACE") + "/archives/"
+
+
+class TrustMergerManager:
+
+  def __init__(self, mount_path, truststores_path):
+    self.mount_path = mount_path
+    self.truststores_path = truststores_path
+
+  def run_merger_container(self, merger_image, merger_name, path_to_env):
+    self.remove_mount_dir()
+    shutil.copytree(self.truststores_path, self.mount_path)
+    client = docker.from_env()
+    environment = EnvsReader().read_env_list_from_file(path_to_env)
+    container = client.containers.run(
+        image=merger_image,
+        name=merger_name,
+        environment=environment,
+        user='root',  # Run container as root to avoid permission issues with volume mount access
+        mounts=[Mount(target='/var/certs', source=self.mount_path, type='bind')],
+        detach=True
+    )
+    exitcode = container.wait()
+    return exitcode
+
+  def create_mount_dir(self):
+    if not os.path.exists(self.mount_path):
+      os.makedirs(self.mount_path)
+
+  def remove_mount_dir(self):
+    if os.path.exists(self.mount_path):
+      shutil.rmtree(self.mount_path)
+
+  def remove_merger_container_and_save_logs(self, container_name, log_file_name):
+    client = docker.from_env()
+    container = client.containers.get(container_name)
+    text_file = open(ARCHIVES_PATH + "merger_container_" + log_file_name + ".log", "w")
+    text_file.write(container.logs())
+    text_file.close()
+    container.remove()
+    self.remove_mount_dir()
diff --git a/tests/oom-platform-cert-service/truststoremerger/resources/trust-merger-keywords.robot b/tests/oom-platform-cert-service/truststoremerger/resources/trust-merger-keywords.robot
new file mode 100644
index 00000000..1040afab
--- /dev/null
+++ b/tests/oom-platform-cert-service/truststoremerger/resources/trust-merger-keywords.robot
@@ -0,0 +1,34 @@
+*** Settings ***
+
+Resource          ../../../common.robot
+Resource          ./trust-merger-properties.robot
+Library           ../libraries/TrustMergerManager.py  ${MOUNT_PATH}  ${TRUSTSTORES_PATH}
+Library           ../libraries/JksTruststoreValidator.py
+Library           ../libraries/PemTruststoreValidator.py
+
+*** Keywords ***
+
+Run Trust Merger And Expect Error
+    [Documentation]  Run Truststore Merger Container And Validate Exit Code
+    [Arguments]   ${env_file}  ${expected_exit_code}
+    ${exit_code}=  Run Merger Container  ${DOCKER_MERGER_IMAGE}  ${MERGER_CONTAINER_NAME}  ${env_file}
+    Remove Merger Container And Save Logs  ${MERGER_CONTAINER_NAME}  negative_path
+    Should Be Equal As Strings  ${exit_code}  ${expected_exit_code}  Client return unexpected exit code return: ${exitcode} , but expected: ${expected_exit_code}
+
+Run Trust Merger And Merge Truststore Files To Jks
+    [Documentation]  Run Truststore Merger Container And Validate Exit Code And Files
+    [Arguments]  ${env_file}  ${expected_exit_code}  ${jks_path}  ${jks_password}  ${expected_jks_path}
+    ${exit_code}=  Run Merger Container  ${DOCKER_MERGER_IMAGE}  ${MERGER_CONTAINER_NAME}  ${env_file}
+    ${files_equal}=  Assert Jks Truststores Equal  ${jks_path}  ${jks_password}  ${expected_jks_path}
+    Remove Merger Container And Save Logs  ${MERGER_CONTAINER_NAME}  positive_path
+    Should Be Equal As Strings  ${exit_code}  ${expected_exit_code}  Client return unexpected exit code return: ${exitcode} , but expected: ${expected_exit_code}
+    Should Be True  ${files_equal}
+
+Run Trust Merger And Merge Truststore Files To Pem
+    [Documentation]  Run Truststore Merger Container And Validate Exit Code And Files
+    [Arguments]  ${env_file}  ${expected_exit_code}  ${pem_path}  ${expected_pem_path}
+    ${exit_code}=  Run Merger Container  ${DOCKER_MERGER_IMAGE}  ${MERGER_CONTAINER_NAME}  ${env_file}
+    ${files_equal}=  Assert Pem Truststores Equal  ${pem_path}  ${expected_pem_path}
+    Remove Merger Container And Save Logs  ${MERGER_CONTAINER_NAME}  positive_path
+    Should Be Equal As Strings  ${exit_code}  ${expected_exit_code}  Client return unexpected exit code return: ${exitcode} , but expected: ${expected_exit_code}
+    Should Be True  ${files_equal}
diff --git a/tests/oom-platform-cert-service/truststoremerger/resources/trust-merger-properties.robot b/tests/oom-platform-cert-service/truststoremerger/resources/trust-merger-properties.robot
new file mode 100644
index 00000000..d356f604
--- /dev/null
+++ b/tests/oom-platform-cert-service/truststoremerger/resources/trust-merger-properties.robot
@@ -0,0 +1,35 @@
+*** Variables ***
+
+${DOCKER_MERGER_IMAGE}                                nexus3.onap.org:10001/onap/org.onap.oom.platform.cert-service.oom-truststore-merger:latest
+${MERGER_CONTAINER_NAME}                              %{MergerContainerName}
+${MOUNT_PATH}                                         %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/tmp
+${TRUSTSTORES_PATH}                                   %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/assets/truststores
+${EXPECTED_TRUSTSTORES_PATH}                          %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/assets/expected_truststores
+
+${JKS_TRUSTSTORE_MOUNT_PATH}                          %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/tmp/truststore.jks
+${JKS_PASSWORD_MOUNT_PATH}                            %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/tmp/truststoreJks.pass
+${P12_TRUSTSTORE_MOUNT_PATH}                          %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/tmp/truststore.p12
+${P12_PASSWORD_MOUNT_PATH}                            %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/tmp/truststoreP12.pass
+${PEM_TRUSTSTORE_MOUNT_PATH}                          %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/tmp/truststore.pem
+
+${JKS_TRUSTSTORE_EXPECTED_PATH}                       %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/assets/expected_truststores/jksAndPemAndP12.jks
+${PEM_TRUSTSTORE_EXPECTED_PATH}                       %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/assets/expected_truststores/pemAndP12.pem
+
+${INVALID_ENV_EMPTY_FILE}                             %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/assets/invalid_empty_file.env
+${INVALID_ENV_LIST_SIZE}                              %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/assets/invalid_different_lists_size.env
+${INVALID_ENV_EMPTY_PASSWORDS}                        %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/assets/invalid_empty_passwords.env
+${INVALID_PASSWORD_PATHS}                             %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/assets/invalid_password_path.env
+${INVALID_ENV_TRUSTSTORE_PATHS}                       %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/assets/invalid_truststore_paths.env
+${INVALID_ENV_FILE_PASSWORD}                          %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/assets/invalid_file_password_pair.env
+${INVALID_ENV_EXTENSION}                              %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/assets/invalid_extension.env
+${INVALID_ENV_DUPLICATED_ALIASES}                     %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/assets/invalid_duplicated_aliases.env
+${INVALID_ENV_EMPTY_CERTS}                            %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/assets/invalid_empty_certs.env
+${VALID_ENV_JKS_PEM_P12}                              %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/assets/valid_jks_pem_p12.env
+${VALID_ENV_PEM_P12}                                  %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/assets/valid_pem_p12.env
+${VALID_ENV_SINGLE_TRUSTSTORE}                        %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/assets/valid_single_truststore.env
+
+${TRUSTSTORE_JKS}                                     %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/assets/truststores/truststore.jks
+${TRUSTSTORE_JKS_PASS}                                %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/assets/truststores/truststoreJks.pass
+${TRUSTSTORE_P12}                                     %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/assets/truststores/truststore.p12
+${TRUSTSTORE_P12_PASS}                                %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/assets/truststores/truststore.pass
+${TRUSTSTORE_PEM}                                     %{WORKSPACE}/tests/oom-platform-cert-service/truststoremerger/assets/truststores/truststore.pem
diff --git a/tests/oom-platform-cert-service/truststoremerger/trust-merger-test.robot b/tests/oom-platform-cert-service/truststoremerger/trust-merger-test.robot
new file mode 100644
index 00000000..966a4243
--- /dev/null
+++ b/tests/oom-platform-cert-service/truststoremerger/trust-merger-test.robot
@@ -0,0 +1,67 @@
+*** Settings ***
+
+Documentation     Truststore merger test case scenarios
+Library 	      RequestsLibrary
+Resource          ./resources/trust-merger-keywords.robot
+
+*** Test Cases ***
+
+Trust Merger fails when file extension is invalid
+    [Tags]      OOM-TRUST-STORE-MERGER
+    [Documentation]  Run with invalid truststore extension env and expect error code
+    Run Trust Merger And Expect Error  ${INVALID_ENV_EXTENSION}  1
+
+Trust Merger fails when truststore and passwords envs not provided
+    [Tags]      OOM-TRUST-STORE-MERGER
+    [Documentation]  Run with invalid empty envs and expect error code
+    Run Trust Merger And Expect Error  ${INVALID_ENV_EMPTY_FILE}  1
+
+Trust Merger fails when list sizes are different
+    [Tags]      OOM-TRUST-STORE-MERGER
+    [Documentation]  Run with different truststore and password envs size and expect error code
+    Run Trust Merger And Expect Error  ${INVALID_ENV_LIST_SIZE}  2
+
+Trust Merger fails when a variable is empty
+    [Tags]      OOM-TRUST-STORE-MERGER
+    [Documentation]  Run with empty truststore password path env and expect error code
+    Run Trust Merger And Expect Error  ${INVALID_ENV_EMPTY_PASSWORDS}  2
+
+Trust Merger fails when truststore paths are invalid
+    [Tags]      OOM-TRUST-STORE-MERGER
+    [Documentation]  Run with invalid truststore path and expect error code
+    Run Trust Merger And Expect Error  ${INVALID_ENV_TRUSTSTORE_PATHS}  3
+
+Trust Merger fails when password path is invalid
+    [Tags]      OOM-TRUST-STORE-MERGER
+    [Documentation]  Run with invalid password path and expect error code
+    Run Trust Merger And Expect Error  ${INVALID_PASSWORD_PATHS}  4
+
+Trust Merger fails when password file pair is invalid
+    [Tags]      OOM-TRUST-STORE-MERGER
+    [Documentation]  Run with incorrect password env and expect error code
+    Run Trust Merger And Expect Error  ${INVALID_ENV_FILE_PASSWORD}  7
+
+Trust Merger fails when pem does not contain cert
+    [Tags]      OOM-TRUST-STORE-MERGER
+    [Documentation]  Run with empty pem truststore and expect error code
+    Run Trust Merger And Expect Error  ${INVALID_ENV_EMPTY_CERTS}  9
+
+Trust Merger fails when aliases are duplicated
+    [Tags]      OOM-TRUST-STORE-MERGER
+    [Documentation]  Run with duplicated aliases in truststores and expect error code
+    Run Trust Merger And Expect Error  ${INVALID_ENV_DUPLICATED_ALIASES}  10
+
+Trust Merger merges successfully jks pem p12
+    [Tags]      OOM-TRUST-STORE-MERGER
+    [Documentation]  Run with valid env file and expect merged certs from jks, pem and p12
+    Run Trust Merger And Merge Truststore Files To Jks  ${VALID_ENV_JKS_PEM_P12}  0  ${JKS_TRUSTSTORE_MOUNT_PATH}  ${TRUSTSTORE_JKS_PASS}  ${JKS_TRUSTSTORE_EXPECTED_PATH}
+
+Trust Merger merges successfully pem p12
+    [Tags]      OOM-TRUST-STORE-MERGER
+    [Documentation]  Run with valid env file and expect merged certs from pem and p12
+    Run Trust Merger And Merge Truststore Files To Pem  ${VALID_ENV_PEM_P12}  0  ${PEM_TRUSTSTORE_MOUNT_PATH}  ${PEM_TRUSTSTORE_EXPECTED_PATH}
+
+Trust Merger ends successfully with single truststore
+    [Tags]      OOM-TRUST-STORE-MERGER
+    [Documentation]  Run with one truststore in env file and expect code 0
+    Run Trust Merger And Merge Truststore Files To Jks  ${VALID_ENV_SINGLE_TRUSTSTORE}  0  ${JKS_TRUSTSTORE_MOUNT_PATH}  ${TRUSTSTORE_JKS_PASS}  ${TRUSTSTORE_JKS}
-- 
2.16.6