1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
|
//go:build !integration
// +build !integration
package ca_chain
import (
"crypto/x509"
"errors"
"math/big"
"testing"
"github.com/stretchr/testify/assert"
)
type resolverMockFactory func(t *testing.T) (resolver, func())
func newResolverMock(inputCerts, returnCerts []*x509.Certificate, returnErr error) resolverMockFactory {
return func(t *testing.T) (resolver, func()) {
mock := new(mockResolver)
cleanup := func() {
mock.AssertExpectations(t)
}
mock.
On("Resolve", inputCerts).
Return(returnCerts, returnErr).
Once()
return mock, cleanup
}
}
func TestChainResolver_Resolve(t *testing.T) {
testError := errors.New("test error")
certs := []*x509.Certificate{{SerialNumber: big.NewInt(1)}}
urlCerts := []*x509.Certificate{{SerialNumber: big.NewInt(2)}}
verifyCerts := []*x509.Certificate{{SerialNumber: big.NewInt(3)}}
noopMock := func(t *testing.T) (resolver, func()) { return nil, func() {} }
tests := map[string]struct {
urlResolver resolverMockFactory
verifyResolver resolverMockFactory
expectedError string
expectedCerts []*x509.Certificate
}{
"error on urlResolver": {
urlResolver: newResolverMock(certs, nil, testError),
verifyResolver: noopMock,
expectedError: "error while resolving certificates chain with URL: test error",
expectedCerts: nil,
},
"error on verifyResolver": {
urlResolver: newResolverMock(certs, urlCerts, nil),
verifyResolver: newResolverMock(urlCerts, nil, testError),
expectedError: "error while resolving certificates chain with verification: test error",
expectedCerts: nil,
},
"certificates resolved properly": {
urlResolver: newResolverMock(certs, urlCerts, nil),
verifyResolver: newResolverMock(urlCerts, verifyCerts, nil),
expectedError: "",
expectedCerts: verifyCerts,
},
}
for tn, tc := range tests {
t.Run(tn, func(t *testing.T) {
urlResolver, cleanupURLResolver := tc.urlResolver(t)
defer cleanupURLResolver()
verifyResolver, cleanupVerifyResolver := tc.verifyResolver(t)
defer cleanupVerifyResolver()
r := newChainResolver(urlResolver, verifyResolver)
newCerts, err := r.Resolve(certs)
if tc.expectedError != "" {
assert.EqualError(t, err, tc.expectedError)
} else {
assert.NoError(t, err)
}
assert.Equal(t, tc.expectedCerts, newCerts)
})
}
}
|
