1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
|
package cert_test
import (
"testing"
"github.com/lestrrat-go/jwx/v2/cert"
"github.com/stretchr/testify/assert"
"github.com/stretchr/testify/require"
)
var certBytes = []byte(`MIICdDCCAd2gAwIBAgIUEpq1vvAyaiEKhgEE/UKykUcnXi4wDQYJKoZIhvcNAQEL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`)
func TestChain(t *testing.T) {
goldenCert, err := cert.Parse(certBytes)
if !assert.NoError(t, err, `x509.ParseCertificate should succeed`) {
return
}
testcases := []struct {
Name string
Data []byte
}{
{
Name: `proper base64 in ASN.1 DER`,
Data: certBytes,
},
{
Name: `proper base64 in ASN.1 DER, but with markers`,
Data: append(append([]byte("----- BEGIN CERTIFICATE -----\n"), certBytes...), []byte("\n----- END CERTIFICATE -----")...),
},
}
var chain cert.Chain
for _, tc := range testcases {
tc := tc
t.Run(tc.Name, func(t *testing.T) {
if !assert.NoError(t, chain.Add(tc.Data), `chain.Add should succeed`) {
return
}
})
}
if !assert.Equal(t, len(testcases), chain.Len(), `certificates in chain should match`) {
return
}
for i := 0; i < chain.Len(); i++ {
der, ok := chain.Get(i)
if !assert.True(t, ok, `chain.Get(%d) should succeed`, i) {
return
}
c, err := cert.Parse(der)
if !assert.NoError(t, err, `cert.Parse should match`) {
return
}
if !assert.True(t, c.Equal(goldenCert), `certificates should match`) {
return
}
}
for _, i := range []int{-1, chain.Len()} {
_, ok := chain.Get(i)
require.False(t, ok, `out of bounds should properly error`)
}
}
|
