diff options
author | Alex Gaynor <alex.gaynor@gmail.com> | 2015-07-01 18:46:25 -0400 |
---|---|---|
committer | Alex Gaynor <alex.gaynor@gmail.com> | 2015-07-01 18:46:25 -0400 |
commit | 246fc85526af4d5e48ca827ecb6baa3e8331f77d (patch) | |
tree | 83c452d579f49795b966013032113087b0f87d43 /tests/test_x509_ext.py | |
parent | 0a4c9ccf944cad5767a45f542ff170177b9b76dd (diff) | |
parent | 870d7e8986e38aba6bbd6d89a3e0f49dad25ae93 (diff) | |
download | cryptography-246fc85526af4d5e48ca827ecb6baa3e8331f77d.tar.gz cryptography-246fc85526af4d5e48ca827ecb6baa3e8331f77d.tar.bz2 cryptography-246fc85526af4d5e48ca827ecb6baa3e8331f77d.zip |
Merge pull request #2084 from reaperhulk/name-constraints-ossl
Name constraints ossl
Diffstat (limited to 'tests/test_x509_ext.py')
-rw-r--r-- | tests/test_x509_ext.py | 44 |
1 files changed, 44 insertions, 0 deletions
diff --git a/tests/test_x509_ext.py b/tests/test_x509_ext.py index 6d91ba41..15ee118a 100644 --- a/tests/test_x509_ext.py +++ b/tests/test_x509_ext.py @@ -2033,6 +2033,50 @@ class TestNameConstraints(object): assert nc != object() +@pytest.mark.requires_backend_interface(interface=RSABackend) +@pytest.mark.requires_backend_interface(interface=X509Backend) +class TestNameConstraintsExtension(object): + def test_permitted_excluded(self, backend): + cert = _load_cert( + os.path.join( + "x509", "custom", "nc_permitted_excluded_2.pem" + ), + x509.load_pem_x509_certificate, + backend + ) + nc = cert.extensions.get_extension_for_oid( + x509.OID_NAME_CONSTRAINTS + ).value + assert nc == x509.NameConstraints( + permitted_subtrees=[ + x509.DNSName(u"zombo.local"), + ], + excluded_subtrees=[ + x509.DirectoryName(x509.Name([ + x509.NameAttribute(x509.OID_COMMON_NAME, u"zombo") + ])) + ] + ) + + def test_permitted(self, backend): + cert = _load_cert( + os.path.join( + "x509", "custom", "nc_permitted_2.pem" + ), + x509.load_pem_x509_certificate, + backend + ) + nc = cert.extensions.get_extension_for_oid( + x509.OID_NAME_CONSTRAINTS + ).value + assert nc == x509.NameConstraints( + permitted_subtrees=[ + x509.DNSName(u"zombo.local"), + ], + excluded_subtrees=None + ) + + class TestDistributionPoint(object): def test_distribution_point_full_name_not_general_names(self): with pytest.raises(TypeError): |