aswi2021jmsd-gitlab4/tests/services/cryptography/verify_ca_test.py @ 313b647b

import pytest

from src.model.subject import Subject
from src.services.cryptography import CryptographyException


def test_verify_valid_ca(service):
    # verify validation of valid certificates
    private_key = service.create_private_key()
    root_cert = service.create_sscrt(Subject(common_name="foo"), private_key)
    child_cert = service.create_crt(Subject(common_name="Expired Foo"), private_key, root_cert, private_key, days=1)

    assert service.verify_cert(root_cert)
    assert service.verify_cert(child_cert)


def test_verify_invalid_ca(service):
    # test whether expired certificate will fail to get verified
    private_key = service.create_private_key()
    root_cert = service.create_sscrt(Subject(common_name="foo"), private_key)

    expired_cert = service.create_crt(Subject(common_name="Expired Foo"), private_key, root_cert, private_key, days=0)

    assert not service.verify_cert(expired_cert)


def test_verify_invalid_cert_format(service):
    # verify that certificate in invalid format raises <CryptographyException>

    with pytest.raises(CryptographyException):
        service.verify_cert("invalid cert")