Revize f76b8017

Re #8576 - Added integration test for empty CRL

tests/integration_tests/services/crl_service_test.py

@@ -187 +187 @@
     private_key_service_unique.delete_key(root_ca_cert.private_key_id)
     with pytest.raises(PrivateKeyNotFoundException) as e:
         crl_service_unique.generate_crl_response(root_ca_cert.certificate_id)
+
+
+def test_generate_empty_crl_response(certificate_service_unique, private_key_service_unique, crl_service_unique,
+                                     cryptography_service):
+    root_ca_private_key = private_key_service_unique.create_new_key(passphrase="foobar")
+
+    root_ca_cert = certificate_service_unique.create_root_ca(root_ca_private_key,
+                                                             Subject(common_name="RootFoo",
+                                                                     organization_unit="Department of Foo"))
+
+    # generate crl and decode it using openssl
+    crl = crl_service_unique.generate_crl_response(root_ca_cert.certificate_id)
+    with TemporaryFile("crl.pem", crl) as crl_file:
+        proc = subprocess.Popen(["openssl", "crl", "-in", crl_file, "-noout", "-text"], stdin=None,
+                                stdout=subprocess.PIPE,
+                                stderr=subprocess.PIPE)
+
+        out, err = proc.communicate(None)
+
+    assert "No Revoked Certificates." in out.decode("utf-8")