package authority import ( "crypto/x509" "net/http" "reflect" "testing" "github.com/pkg/errors" "github.com/smallstep/assert" "github.com/smallstep/certificates/errs" "github.com/smallstep/cli/crypto/pemutil" ) func TestRoot(t *testing.T) { a := testAuthority(t) a.certificates.Store("invaliddata", "a string") // invalid cert for testing tests := map[string]struct { sum string err error code int }{ "not-found": {"foo", errors.New("certificate with fingerprint foo was not found"), http.StatusNotFound}, "invalid-stored-certificate": {"invaliddata", errors.New("stored value is not a *x509.Certificate"), http.StatusInternalServerError}, "success": {"189f573cfa159251e445530847ef80b1b62a3a380ee670dcb49e33ed34da0616", nil, http.StatusOK}, } for name, tc := range tests { t.Run(name, func(t *testing.T) { crt, err := a.Root(tc.sum) if err != nil { if assert.NotNil(t, tc.err) { sc, ok := err.(errs.StatusCoder) assert.Fatal(t, ok, "error does not implement StatusCoder interface") assert.Equals(t, sc.StatusCode(), tc.code) assert.HasPrefix(t, err.Error(), tc.err.Error()) } } else { if assert.Nil(t, tc.err) { assert.Equals(t, crt, a.rootX509Certs[0]) } } }) } } func TestAuthority_GetRootCertificate(t *testing.T) { cert, err := pemutil.ReadCertificate("testdata/certs/root_ca.crt") if err != nil { t.Fatal(err) } tests := []struct { name string want *x509.Certificate }{ {"ok", cert}, } for _, tt := range tests { t.Run(tt.name, func(t *testing.T) { a := testAuthority(t) if got := a.GetRootCertificate(); !reflect.DeepEqual(got, tt.want) { t.Errorf("Authority.GetRootCertificate() = %v, want %v", got, tt.want) } }) } } func TestAuthority_GetRootCertificates(t *testing.T) { cert, err := pemutil.ReadCertificate("testdata/certs/root_ca.crt") if err != nil { t.Fatal(err) } tests := []struct { name string want []*x509.Certificate }{ {"ok", []*x509.Certificate{cert}}, } for _, tt := range tests { t.Run(tt.name, func(t *testing.T) { a := testAuthority(t) if got := a.GetRootCertificates(); !reflect.DeepEqual(got, tt.want) { t.Errorf("Authority.GetRootCertificates() = %v, want %v", got, tt.want) } }) } } func TestAuthority_GetRoots(t *testing.T) { cert, err := pemutil.ReadCertificate("testdata/certs/root_ca.crt") if err != nil { t.Fatal(err) } tests := []struct { name string want []*x509.Certificate wantErr bool }{ {"ok", []*x509.Certificate{cert}, false}, } for _, tt := range tests { a := testAuthority(t) t.Run(tt.name, func(t *testing.T) { got, err := a.GetRoots() if (err != nil) != tt.wantErr { t.Errorf("Authority.GetRoots() error = %v, wantErr %v", err, tt.wantErr) return } if !reflect.DeepEqual(got, tt.want) { t.Errorf("Authority.GetRoots() = %v, want %v", got, tt.want) } }) } } func TestAuthority_GetFederation(t *testing.T) { cert, err := pemutil.ReadCertificate("testdata/certs/root_ca.crt") if err != nil { t.Fatal(err) } tests := []struct { name string wantFederation []*x509.Certificate wantErr bool fn func(a *Authority) }{ {"ok", []*x509.Certificate{cert}, false, nil}, {"fail", nil, true, func(a *Authority) { a.certificates.Store("foo", "bar") }}, } for _, tt := range tests { t.Run(tt.name, func(t *testing.T) { a := testAuthority(t) if tt.fn != nil { tt.fn(a) } gotFederation, err := a.GetFederation() if (err != nil) != tt.wantErr { t.Errorf("Authority.GetFederation() error = %v, wantErr %v", err, tt.wantErr) return } if !reflect.DeepEqual(gotFederation, tt.wantFederation) { t.Errorf("Authority.GetFederation() = %v, want %v", gotFederation, tt.wantFederation) } }) } }