1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
|
package certstore
import (
"crypto/ecdsa"
"crypto/elliptic"
"crypto/rand"
"crypto/rsa"
"crypto/x509"
"crypto/x509/pkix"
"testing"
"github.com/github/smimesign/fakeca"
)
var (
root = fakeca.New(fakeca.IsCA, fakeca.Subject(pkix.Name{
Organization: []string{"certstore"},
CommonName: "root",
}))
intermediate = root.Issue(fakeca.IsCA, fakeca.Subject(pkix.Name{
Organization: []string{"certstore"},
CommonName: "intermediate",
}))
leafKeyRSA, _ = rsa.GenerateKey(rand.Reader, 2048)
leafRSA = intermediate.Issue(fakeca.PrivateKey(leafKeyRSA), fakeca.Subject(pkix.Name{
Organization: []string{"certstore"},
CommonName: "leaf-rsa",
}))
leafKeyEC, _ = ecdsa.GenerateKey(elliptic.P256(), rand.Reader)
leafEC = intermediate.Issue(fakeca.PrivateKey(leafKeyEC), fakeca.Subject(pkix.Name{
Organization: []string{"certstore"},
CommonName: "leaf-ec",
}))
)
func init() {
// delete any fixtures from a previous test run.
clearFixtures()
}
func withStore(t *testing.T, cb func(Store)) {
store, err := Open()
if err != nil {
t.Fatal(err)
}
defer store.Close()
cb(store)
}
func withIdentity(t *testing.T, i *fakeca.Identity, cb func(Identity)) {
withStore(t, func(store Store) {
// Import an identity
if err := store.Import(i.PFX("asdf"), "asdf"); err != nil {
t.Fatal(err)
}
// Look for our imported identity
idents, err := store.Identities()
if err != nil {
t.Fatal(err)
}
for _, ident := range idents {
defer ident.Close()
}
var found Identity
for _, ident := range idents {
crt, err := ident.Certificate()
if err != nil {
t.Fatal(err)
}
if i.Certificate.Equal(crt) {
if found != nil {
t.Fatal("duplicate identity imported")
}
found = ident
}
}
if found == nil {
t.Fatal("imported identity not found")
}
// Clean up after ourselves.
defer func(f Identity) {
if err := f.Delete(); err != nil {
t.Fatal(err)
}
}(found)
cb(found)
})
}
func clearFixtures() {
store, err := Open()
if err != nil {
panic(err)
}
defer store.Close()
idents, err := store.Identities()
if err != nil {
panic(err)
}
for _, ident := range idents {
defer ident.Close()
}
for _, ident := range idents {
crt, err := ident.Certificate()
if err != nil {
panic(err)
}
if isFixture(crt) {
if err := ident.Delete(); err != nil {
panic(err)
}
}
}
}
func isFixture(crt *x509.Certificate) bool {
return len(crt.Subject.Organization) == 1 && crt.Subject.Organization[0] == "certstore"
}
|
