control 'certificates' do
  title 'should be created'

  describe file('/etc/neo4j/cluster_policy/public.crt') do
    it { should exist }
    it { should be_file }
    its('mode') { should cmp '0640' }
    its('owner') { should eq 'neo4j' }
    its('group') { should eq 'root' }
  end

  describe file('/etc/neo4j/cluster_policy/private.key') do
    it { should exist }
    it { should be_file }
    its('mode') { should cmp '0600' }
    its('owner') { should eq 'neo4j' }
    its('group') { should eq 'root' }
  end

  describe file('/etc/neo4j/cluster_policy/trusted/public.crt') do
    it { should exist }
    it { should be_file }
    its('mode') { should cmp '0640' }
    its('owner') { should eq 'neo4j' }
    its('group') { should eq 'root' }
  end

  describe file('/etc/neo4j/cluster_policy/trusted/AWS_certificate_chain.crt') do
    it { should exist }
    it { should be_file }
    its('mode') { should cmp '0640' }
    its('owner') { should eq 'neo4j' }
    its('group') { should eq 'root' }
  end

  describe file('/etc/neo4j/cluster_policy/trusted/DigiCert_certificate_chain.crt') do
    it { should exist }
    it { should be_file }
    its('mode') { should cmp '0640' }
    its('owner') { should eq 'neo4j' }
    its('group') { should eq 'root' }
  end
end