diff options
author | Paul Kehrer <paul.l.kehrer@gmail.com> | 2015-03-31 20:00:33 -0500 |
---|---|---|
committer | Paul Kehrer <paul.l.kehrer@gmail.com> | 2015-04-10 22:22:05 -0400 |
commit | 1eb82a604175923acd6c0512e86a746df7acbb59 (patch) | |
tree | e5f6baffa81eae8ccfbe293a5f6254f6c3eafa1c /tests/test_x509_ext.py | |
parent | 890081828d99159145e12c8654501c2d867c4327 (diff) | |
download | cryptography-1eb82a604175923acd6c0512e86a746df7acbb59.tar.gz cryptography-1eb82a604175923acd6c0512e86a746df7acbb59.tar.bz2 cryptography-1eb82a604175923acd6c0512e86a746df7acbb59.zip |
add subjectkeyidentifier support
Diffstat (limited to 'tests/test_x509_ext.py')
-rw-r--r-- | tests/test_x509_ext.py | 72 |
1 files changed, 72 insertions, 0 deletions
diff --git a/tests/test_x509_ext.py b/tests/test_x509_ext.py index c1512d5f..4f0ad13b 100644 --- a/tests/test_x509_ext.py +++ b/tests/test_x509_ext.py @@ -4,6 +4,7 @@ from __future__ import absolute_import, division, print_function +import binascii import os import pytest @@ -132,6 +133,45 @@ class TestKeyUsage(object): ku.decipher_only +class TestSubjectKeyIdentifier(object): + def test_properties(self): + hexdigest = "092384932230498bc980aa8098456f6ff7ff3ac9" + value = binascii.unhexlify(hexdigest) + ski = x509.SubjectKeyIdentifier(value) + assert ski.digest == value + assert ski.hexdigest == hexdigest + + def test_repr(self): + ski = x509.SubjectKeyIdentifier( + binascii.unhexlify("092384932230498bc980aa8098456f6ff7ff3ac9") + ) + ext = x509.Extension(x509.OID_SUBJECT_KEY_IDENTIFIER, False, ski) + assert repr(ext) == ( + "<Extension(oid=<ObjectIdentifier(oid=2.5.29.14, name=subjectKey" + "Identifier)>, critical=False, value=<SubjectKeyIdentifier(" + "value=092384932230498bc980aa8098456f6ff7ff3ac9)>)>" + ) + + def test_eq(self): + ski = x509.SubjectKeyIdentifier( + binascii.unhexlify("092384932230498bc980aa8098456f6ff7ff3ac9") + ) + ski2 = x509.SubjectKeyIdentifier( + binascii.unhexlify("092384932230498bc980aa8098456f6ff7ff3ac9") + ) + assert ski == ski2 + + def test_ne(self): + ski = x509.SubjectKeyIdentifier( + binascii.unhexlify("092384932230498bc980aa8098456f6ff7ff3ac9") + ) + ski2 = x509.SubjectKeyIdentifier( + binascii.unhexlify("aa8098456f6ff7ff3ac9092384932230498bc980") + ) + assert ski != ski2 + assert ski != object() + + class TestBasicConstraints(object): def test_ca_not_boolean(self): with pytest.raises(TypeError): @@ -345,3 +385,35 @@ class TestBasicConstraintsExtension(object): assert ext is not None assert ext.critical is False assert ext.value.ca is False + + +@pytest.mark.requires_backend_interface(interface=RSABackend) +@pytest.mark.requires_backend_interface(interface=X509Backend) +class TestSubjectKeyIdentifierExtension(object): + def test_subject_key_identifier(self, backend): + cert = _load_cert( + os.path.join("x509", "PKITS_data", "certs", "GoodCACert.crt"), + x509.load_der_x509_certificate, + backend + ) + ext = cert.extensions.get_extension_for_oid( + x509.OID_SUBJECT_KEY_IDENTIFIER + ) + ski = ext.value + assert ext is not None + assert ext.critical is False + assert ski.hexdigest == "580184241bbc2b52944a3da510721451f5af3ac9" + assert ski.digest == binascii.unhexlify( + "580184241bbc2b52944a3da510721451f5af3ac9" + ) + + def test_no_subject_key_identifier(self, backend): + cert = _load_cert( + os.path.join("x509", "custom", "bc_path_length_zero.pem"), + x509.load_pem_x509_certificate, + backend + ) + with pytest.raises(x509.ExtensionNotFound): + cert.extensions.get_extension_for_oid( + x509.OID_SUBJECT_KEY_IDENTIFIER + ) |