File: filter_test.go

package info (click to toggle)
golang-github-docker-libtrust 0.0~git20150526.0.9cbd2a1-3
  • links: PTS, VCS
  • area: main
  • in suites: bullseye, buster, sid
  • size: 288 kB
  • ctags: 297
  • sloc: makefile: 3
file content (81 lines) | stat: -rw-r--r-- 2,228 bytes parent folder | download | duplicates (3)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
package libtrust

import (
	"testing"
)

func compareKeySlices(t *testing.T, sliceA, sliceB []PublicKey) {
	if len(sliceA) != len(sliceB) {
		t.Fatalf("slice size %d, expected %d", len(sliceA), len(sliceB))
	}

	for i, itemA := range sliceA {
		itemB := sliceB[i]
		if itemA != itemB {
			t.Fatalf("slice index %d not equal: %#v != %#v", i, itemA, itemB)
		}
	}
}

func TestFilter(t *testing.T) {
	keys := make([]PublicKey, 0, 8)

	// Create 8 keys and add host entries.
	for i := 0; i < cap(keys); i++ {
		key, err := GenerateECP256PrivateKey()
		if err != nil {
			t.Fatal(err)
		}

		// we use both []interface{} and []string here because jwt uses
		// []interface{} format, while PEM uses []string
		switch {
		case i == 0:
			// Don't add entries for this key, key 0.
			break
		case i%2 == 0:
			// Should catch keys 2, 4, and 6.
			key.AddExtendedField("hosts", []interface{}{"*.even.example.com"})
		case i == 7:
			// Should catch only the last key, and make it match any hostname.
			key.AddExtendedField("hosts", []string{"*"})
		default:
			// should catch keys 1, 3, 5.
			key.AddExtendedField("hosts", []string{"*.example.com"})
		}

		keys = append(keys, key)
	}

	// Should match 2 keys, the empty one, and the one that matches all hosts.
	matchedKeys, err := FilterByHosts(keys, "foo.bar.com", true)
	if err != nil {
		t.Fatal(err)
	}
	expectedMatch := []PublicKey{keys[0], keys[7]}
	compareKeySlices(t, expectedMatch, matchedKeys)

	// Should match 1 key, the one that matches any host.
	matchedKeys, err = FilterByHosts(keys, "foo.bar.com", false)
	if err != nil {
		t.Fatal(err)
	}
	expectedMatch = []PublicKey{keys[7]}
	compareKeySlices(t, expectedMatch, matchedKeys)

	// Should match keys that end in "example.com", and the key that matches anything.
	matchedKeys, err = FilterByHosts(keys, "foo.example.com", false)
	if err != nil {
		t.Fatal(err)
	}
	expectedMatch = []PublicKey{keys[1], keys[3], keys[5], keys[7]}
	compareKeySlices(t, expectedMatch, matchedKeys)

	// Should match all of the keys except the empty key.
	matchedKeys, err = FilterByHosts(keys, "foo.even.example.com", false)
	if err != nil {
		t.Fatal(err)
	}
	expectedMatch = keys[1:]
	compareKeySlices(t, expectedMatch, matchedKeys)
}