mirror of
https://github.com/ruby/ruby.git
synced 2022-11-09 12:17:21 -05:00
035ef0a347
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@32693 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
90 lines
2.7 KiB
Ruby
90 lines
2.7 KiB
Ruby
require 'rubygems/test_case'
|
|
require 'rubygems/security'
|
|
require 'rubygems/fix_openssl_warnings' if RUBY_VERSION < "1.9"
|
|
|
|
class TestGemSecurity < Gem::TestCase
|
|
|
|
def test_class_build_cert
|
|
name = OpenSSL::X509::Name.parse "CN=nobody/DC=example"
|
|
key = OpenSSL::PKey::RSA.new 512
|
|
opt = { :cert_age => 60 }
|
|
|
|
cert = Gem::Security.build_cert name, key, opt
|
|
|
|
assert_kind_of OpenSSL::X509::Certificate, cert
|
|
|
|
assert_equal 2, cert.version
|
|
assert_equal 0, cert.serial
|
|
assert_equal key.public_key.to_pem, cert.public_key.to_pem
|
|
assert_in_delta Time.now, cert.not_before, 10
|
|
assert_in_delta Time.now + 60, cert.not_after, 10
|
|
assert_equal name.to_s, cert.subject.to_s
|
|
|
|
assert_equal 3, cert.extensions.length
|
|
|
|
constraints = cert.extensions.find { |ext| ext.oid == 'basicConstraints' }
|
|
assert_equal 'CA:FALSE', constraints.value
|
|
|
|
key_usage = cert.extensions.find { |ext| ext.oid == 'keyUsage' }
|
|
assert_equal 'Digital Signature, Key Encipherment, Data Encipherment',
|
|
key_usage.value
|
|
|
|
key_ident = cert.extensions.find { |ext| ext.oid == 'subjectKeyIdentifier' }
|
|
assert_equal 59, key_ident.value.length
|
|
|
|
assert_equal name.to_s, cert.issuer.to_s
|
|
assert_equal name.to_s, cert.subject.to_s
|
|
end
|
|
|
|
def test_class_build_self_signed_cert
|
|
email = 'nobody@example'
|
|
opt = {
|
|
:cert_age => 60,
|
|
:key_size => 512,
|
|
:save_cert => false,
|
|
:save_key => false,
|
|
}
|
|
|
|
result = Gem::Security.build_self_signed_cert email, opt
|
|
|
|
key = result[:key]
|
|
|
|
assert_kind_of OpenSSL::PKey::RSA, key
|
|
# assert_equal 512, key.something_here
|
|
|
|
cert = result[:cert]
|
|
|
|
assert_equal '/CN=nobody/DC=example', cert.issuer.to_s
|
|
end
|
|
|
|
def test_class_sign_cert
|
|
name = OpenSSL::X509::Name.parse "CN=nobody/DC=example"
|
|
key = OpenSSL::PKey::RSA.new 512
|
|
cert = OpenSSL::X509::Certificate.new
|
|
|
|
cert.subject = name
|
|
cert.public_key = key.public_key
|
|
|
|
signed = Gem::Security.sign_cert cert, key, cert
|
|
|
|
assert cert.verify key
|
|
assert_equal name.to_s, signed.subject.to_s
|
|
end
|
|
|
|
def test_class_email_to_name
|
|
munger = Gem::Security::OPT[:munge_re]
|
|
|
|
assert_equal '/CN=nobody/DC=example',
|
|
Gem::Security.email_to_name('nobody@example', munger).to_s
|
|
|
|
assert_equal '/CN=nobody/DC=example/DC=com',
|
|
Gem::Security.email_to_name('nobody@example.com', munger).to_s
|
|
|
|
assert_equal '/CN=no.body/DC=example',
|
|
Gem::Security.email_to_name('no.body@example', munger).to_s
|
|
|
|
assert_equal '/CN=no_body/DC=example',
|
|
Gem::Security.email_to_name('no+body@example', munger).to_s
|
|
end
|
|
|
|
end if defined?(OpenSSL)
|