aswi2021jmsd-gitlab/tests/services/cryptography/private_keys_test.py @ cc51ca2c

import subprocess

import pytest


def test_private_key(service):
    private_key = service.create_private_key()

    # verify the private key
    subprocess.check_output(["openssl", "rsa", "-in", "-", "-check"], input=bytes(private_key, encoding="utf-8"),
                            stderr=subprocess.STDOUT)


def test_encrypted_private_key(service):
    private_key = service.create_private_key(passphrase="foobar")

    # verify the private key providing a correct passphrase
    subprocess.check_output(["openssl", "rsa", "-in", "-", "-passin", "pass:foobar", "-check"],
                            input=bytes(private_key, encoding="utf-8"), stderr=subprocess.STDOUT)


def test_encrypted_private_key_incorrect_pass(service):
    private_key = service.create_private_key(passphrase="foobar")

    # incorrect passphrase provided
    with pytest.raises(subprocess.CalledProcessError):
        subprocess.check_output(["openssl", "rsa", "-in", "-", "-passin", "pass:bazbaz", "-check"],
                                input=bytes(private_key, encoding="utf-8"), stderr=subprocess.STDOUT)