Revize 9cb4bc4e

Re #8708 - Added a test verifying the validity of the generate_pkcs_identity method in CertificateService when a chain of trust is empty

tests/integration_tests/services/certificate_service_test.py

@@ +1 @@
+import re
 import subprocess
 
 import pytest
@@ -430 +431 @@
     assert root_ca_cert.pem_data in pkcs_info
 
 
+def test_create_pkcs_identity_self_signed_cert(certificate_service_unique, private_key_service_unique):
+    # create tests certificates
+    root_ca_private_key = private_key_service_unique.create_new_key()
+
+    root_ca_cert = certificate_service_unique.create_root_ca(root_ca_private_key,
+                                                             Subject(common_name="RootFoo",
+                                                                     organization_unit="Department of Foo"))
+
+    # generate the identity
+    pkcs = certificate_service_unique.generate_pkcs_identity(root_ca_cert.certificate_id, root_ca_private_key, "Foo Child's Identity", "pass")
+
+    # print out the pkcs store in order to be able to check it
+    pkcs_info = subprocess.check_output(
+        ["openssl", "pkcs12", "-info", "-in", "-", "-nodes", "-passin", "pass:pass"],
+        input=pkcs,
+        stderr=subprocess.STDOUT).decode()
+
+    assert root_ca_cert.pem_data in pkcs_info
+    assert len(re.findall("BEGIN CERTIFICATE", pkcs_info)) == 1
+    assert len(re.findall("END CERTIFICATE", pkcs_info)) == 1
+
+
 def test_create_pkcs_identity_incorrect_id(certificate_service_unique):
     with pytest.raises(CertificateNotFoundException):
         certificate_service_unique.generate_pkcs_identity(999, None, None, None)