Revize 6abfb037

Re #8573 - Added some CertificateService tests and improved CryptographyService tests of methods that extract public keys

src/services/key_service.py

@@ -68 +68 @@
         :param private_key: private key from which a public key should be extracted
         :return: a string containing the extracted public key in PEM format
         """
-        return self.cryptography_service.extract_public_key_from_private_key(private_key.private_key, private_key.password)
+        return self.cryptography_service.extract_public_key_from_private_key(private_key.private_key,
+                                                                             private_key.password)

tests/integration_tests/services/certificate_service_test.py

@@ -243 +243 @@
     assert subject.locality is None
     assert subject.state is None
     assert subject.country == "CZ"
+
+
+def test_extract_public_key_from_certificate(private_key_service, certificate_service, cryptography_service):
+    private_key = private_key_service.create_new_key()
+
+    certificate = certificate_service.create_root_ca(private_key, Subject(common_name="CZ"))
+
+    pub_key_extracted_from_cert = certificate_service.get_public_key_from_certificate(certificate)
+
+    expected_pub_key_from_cert = cryptography_service.extract_public_key_from_certificate(certificate.pem_data)
+    expected_pub_key_from_key = cryptography_service.extract_public_key_from_private_key(private_key.private_key)
+
+    assert expected_pub_key_from_cert == expected_pub_key_from_key == pub_key_extracted_from_cert
+
+
+def test_extract_public_key_from_certificate_encrypted(private_key_service, certificate_service, cryptography_service):
+    private_key = private_key_service.create_new_key(passphrase="foobar")
+
+    certificate = certificate_service.create_root_ca(private_key, Subject(common_name="CZ"))
+
+    pub_key_extracted_from_cert = certificate_service.get_public_key_from_certificate(certificate)
+
+    expected_pub_key_from_cert = cryptography_service.extract_public_key_from_certificate(certificate.pem_data)
+    expected_pub_key_from_key = cryptography_service.extract_public_key_from_private_key(private_key.private_key,
+                                                                                         passphrase="foobar")
+
+    assert expected_pub_key_from_cert == expected_pub_key_from_key == pub_key_extracted_from_cert

tests/unit_tests/services/cryptography/conftest.py

@@ -79 +79 @@
 
 
 @pytest.fixture
-def certificate_pem():
+def certificate_pk():
     return """
 -----BEGIN CERTIFICATE-----
 MIIDazCCAlOgAwIBAgIUTQwIafNfZdJmqZ+TvhtWT3dKLbMwDQYJKoZIhvcNAQEL
@@ -102 +102 @@
 NyJXVOPghVAqaFbgaeBsXkL3QQYVR5wQl7delo0dn36crlckUPi+13INDhnLYgq7
 GO9Jbty2Qeomxyf+i+SB
 -----END CERTIFICATE-----
+    """, """
+-----BEGIN RSA PRIVATE KEY-----
+MIIEpAIBAAKCAQEA4fzrmp2RO1YNgsbyVEgGPlt5QxwjiVC6hGsXA0TX698Xd9si
+L+gZ8KjtapXIXsdinjDdj1ri0DRSNEkOwn2NEooYmz6qwClFtl8DU9pajAeDpzg9
+CRg3vlkQCRJlW2m5wH2LYT2dINgWwoqwuXF6S+TUw6+XM4+Xdh/9VyvLnszWx0ax
+Helvj9F9utoIShnm4w95quYvdnmTIxPF62p7kz7VZ/RvpRoy1vTMYDQtEDl+9azA
+5EyBFWo+q9JCFYoLvHUiC9wD1+a6nTojxDw2H/ZNQGfJod9dz9xH9f+P1hadqqiG
+in84wHRGRt0rs0LRN1yrk3rwJuD3/Iyl60nDdQIDAQABAoIBADj1TFSt/hrcd49M
+oWtIs/oniAq4HuTPKhOSAjzarylOE1YsLxOwBkm36g8BLX1l958zZcRp/dzIMyfm
+egffKR1RHR6Tzumb/WwXynjqAgRlKHOPIyMVrYcWX4pJzq4Zma3Ads7Nfrr2e9YQ
+qrYyucZDKLUhnpRqTpyBN5MvAKVHNlmJXCiw2bo4K4D5D/qc7++H+Uq6fxJ4Qvgg
++wUbPkgIFsWpi5ADaVbg1IZa4VismDGxXPQk9zBc8JEliXjPlEgT2f4dLt2JyiGA
+MPatCCr5pUN+XKsJtAVEF1fFS1tJ6HtcrUSablq1qV2l2ucNnccugJmNUZ85U7De
+AdmSxsECgYEA9s858JhVWR65eGQsYdYzcRaBUiGJLhblRkYZRkV0byNO41HCpc26
+4evzmPw+e3Rb1bMj3Ip3nuK6Vqm9YB32NgBreTX3qA4Cc2KrtikesljTe539WFcy
+mcXgnVVsYB/RGEemB1gAd41145EVH8lSy84EY3YWZ0WVmZrvkMT4bvkCgYEA6mc1
+LRoJN4eJcPjADCBRyuCMp2LecyWAkG3zKmgWitooEV2yzs69flLHPx6pKwdssk5x
+ukPrFmAgQQ9I0r4QDUkZxs9FhHHh7XlRutXyWsT4Gh4Y+zRSFasxrxfHDplFLwLH
+WIZYZa4MrH4P02yUaePG0Y1qUBYJJWAxRAXay10CgYEAxCZbgOhAZGyzsIfEchkf
+lw/wxUpb0OJnYxtQ+PU4HR+tkaIoFUfU77prRjmqmskWN1eA98SgXwkIWNnb5OjL
+BY393D5Uzh4cOoG/wC0b9Vf887DTaQMb9vQ5mDEMybRfpHFE9W8uJ9WoTKzAYhvJ
+jqnz+Owf0AGQbJyjKqYwX1kCgYAtENqwaSkMfAp4pdqGelA/aRyhseiCytsE6Z6u
+sIRk/bxmWlVeXXEhMFkOUZ7EnxDO1zYWUaiJDMImwAGIQvJjG4LRLlh3Nk3xkjmc
+ajXGLchlfRPgeBawA9Hxj+i9bcpXV3lsE6g7JFNbdoEkbOO72AcJkt61twbbILtY
+EKgYIQKBgQC8L1pRnK/GIJztjh04leZHDubPc7yNuXu24nWzjVfqKP7Lt4cxg+3p
+T+QipcFdlQbEPC3crNu3MW42Zal2O6X7EzEmr1HXbBeZb0+jZ9ecmKS+LrDPMj7C
+IHZQtBxUbmbi8uNWqos/l0lhJdE9BBt5sLqfXAe+qz6g21alg1Vttg==
+-----END RSA PRIVATE KEY-----
     """
 
 
 # contains certificate, private key as well as PK passphrase
 @pytest.fixture
-def certificate_with_encrypted_pk_pem():
+def certificate_encrypted_pk():
     return """
 -----BEGIN CERTIFICATE-----
 MIIDazCCAlOgAwIBAgIUAWW0ebo18+AtvjzxLvIPEa4lIUkwDQYJKoZIhvcNAQEL

tests/unit_tests/services/cryptography/extract_public_key_from_certificate_test.py

@@ -1 +1 @@
 import subprocess
 
 
-def test_extract_public_key_encrypted(service, certificate_with_encrypted_pk_pem):
-    public_key = service.extract_public_key_from_certificate(certificate_with_encrypted_pk_pem[0])
+def test_extract_public_key_encrypted(service, certificate_encrypted_pk):
+    public_key = service.extract_public_key_from_certificate(certificate_encrypted_pk[0])
 
     # get modulus from the private key
     modulus_pk = subprocess.check_output(
-        ["openssl", "rsa", "-noout", "-in", "-", "-modulus", "-passin", f"pass:{certificate_with_encrypted_pk_pem[2]}"],
-        input=bytes(certificate_with_encrypted_pk_pem[1], encoding="utf-8"),
+        ["openssl", "rsa", "-noout", "-in", "-", "-modulus", "-passin", f"pass:{certificate_encrypted_pk[2]}"],
+        input=bytes(certificate_encrypted_pk[1], encoding="utf-8"),
         stderr=subprocess.STDOUT).decode()
 
     # get the modulus from the extracted public key
@@ -21 +21 @@
     assert modulus_pk == modulus_from_extracted_public_key
 
 
-def test_extract_public_key(service, certificate_pem):
-    public_key = service.extract_public_key_from_certificate(certificate_pem)
+def test_extract_public_key(service, certificate_pk):
+    public_key = service.extract_public_key_from_certificate(certificate_pk[0])
 
     # get public key from the certificate
     expected_public_key = subprocess.check_output(
         ["openssl", "x509", "-in", "-", "-noout", "-pubkey"],
-        input=bytes(certificate_pem, encoding="utf-8"),
+        input=bytes(certificate_pk[0], encoding="utf-8"),
         stderr=subprocess.STDOUT).decode()
 
     assert expected_public_key == public_key
 
+    # get modulus from the private key
+    modulus_pk = subprocess.check_output(
+        ["openssl", "rsa", "-noout", "-in", "-", "-modulus"],
+        input=bytes(certificate_pk[1], encoding="utf-8"),
+        stderr=subprocess.STDOUT).decode()
+
+    # get the modulus from the extracted public key
+    modulus_from_extracted_public_key = subprocess.check_output(
+        ["openssl", "rsa", "-noout", "-pubin", "-in", "-", "-modulus"],
+        input=bytes(public_key,
+                    encoding="utf-8"),
+        stderr=subprocess.STDOUT).decode()
+
+    # moduli should match
+    assert modulus_pk == modulus_from_extracted_public_key
+