From a9885600b5ccb1054aa1ebdad216cb29e0f32b16 Mon Sep 17 00:00:00 2001 From: Alex Gaynor Date: Sat, 27 Feb 2016 09:53:46 -0500 Subject: Fixed #2732 -- added support for x.509 policy constraints extension --- tests/test_x509_ext.py | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) (limited to 'tests/test_x509_ext.py') diff --git a/tests/test_x509_ext.py b/tests/test_x509_ext.py index ceb11dfe..1a633b47 100644 --- a/tests/test_x509_ext.py +++ b/tests/test_x509_ext.py @@ -2280,6 +2280,28 @@ class TestPolicyConstraints(object): assert pc != object() + +@pytest.mark.requires_backend_interface(interface=RSABackend) +@pytest.mark.requires_backend_interface(interface=X509Backend) +class TestPolicyConstraintsExtension(object): + def test_SOMETHING(self, backend): + cert = _load_cert( + os.path.join( + "x509", "department-of-state-root.pem" + ), + x509.load_pem_x509_certificate, + backend + ) + ext = cert.extensions.get_extension_for_oid( + ExtensionOID.POLICY_CONSTRAINTS, + ) + assert ext.critical is True + + assert ext.value == x509.PolicyConstraints( + require_explicit_policy=None, inhibit_policy_mapping=0, + ) + + class TestAuthorityInformationAccess(object): def test_invalid_descriptions(self): with pytest.raises(TypeError): -- cgit v1.2.3