PageRenderTime 26ms CodeModel.GetById 16ms RepoModel.GetById 0ms app.codeStats 0ms

/test/openssl/test_x509name.rb

http://github.com/ruby/ruby
Ruby | 469 lines | 404 code | 42 blank | 23 comment | 5 complexity | 4a082102ddfe01a645cd9b0d307cdf1d MD5 | raw file
Possible License(s): GPL-2.0, BSD-3-Clause, AGPL-3.0 
    

  1. # coding: ASCII-8BIT
    2. 

  2. # frozen_string_literal: true
    3. 

  3. require_relative 'utils'
    4. 

  4. 

  5. if defined?(OpenSSL)
    6. 

  6. 

  7. class OpenSSL::TestX509Name < OpenSSL::TestCase
    8. 

  8.   def setup
    9. 

  9.     super
    10. 

  10.     @obj_type_tmpl = Hash.new(OpenSSL::ASN1::PRINTABLESTRING)
    11. 

  11.     @obj_type_tmpl.update(OpenSSL::X509::Name::OBJECT_TYPE_TEMPLATE)
    12. 

  12.   end
    13. 

  13. 

  14.   def test_s_new
    15. 

  15.     dn = [ ["C", "JP"], ["O", "example"], ["CN", "www.example.jp"] ]
    16. 

  16.     name = OpenSSL::X509::Name.new(dn)
    17. 

  17.     ary = name.to_a
    18. 

  18.     assert_equal("/C=JP/O=example/CN=www.example.jp", name.to_s)
    19. 

  19.     assert_equal("C", ary[0][0])
    20. 

  20.     assert_equal("O", ary[1][0])
    21. 

  21.     assert_equal("CN", ary[2][0])
    22. 

  22.     assert_equal("JP", ary[0][1])
    23. 

  23.     assert_equal("example", ary[1][1])
    24. 

  24.     assert_equal("www.example.jp", ary[2][1])
    25. 

  25.     assert_equal(OpenSSL::ASN1::PRINTABLESTRING, ary[0][2])
    26. 

  26.     assert_equal(OpenSSL::ASN1::UTF8STRING, ary[1][2])
    27. 

  27.     assert_equal(OpenSSL::ASN1::UTF8STRING, ary[2][2])
    28. 

  28. 

  29.     dn = [
    30. 

  30.       ["countryName", "JP"],
    31. 

  31.       ["organizationName", "example"],
    32. 

  32.       ["commonName", "www.example.jp"]
    33. 

  33.     ]
    34. 

  34.     name = OpenSSL::X509::Name.new(dn)
    35. 

  35.     ary = name.to_a
    36. 

  36.     assert_equal("/C=JP/O=example/CN=www.example.jp", name.to_s)
    37. 

  37.     assert_equal("C", ary[0][0])
    38. 

  38.     assert_equal("O", ary[1][0])
    39. 

  39.     assert_equal("CN", ary[2][0])
    40. 

  40.     assert_equal("JP", ary[0][1])
    41. 

  41.     assert_equal("example", ary[1][1])
    42. 

  42.     assert_equal("www.example.jp", ary[2][1])
    43. 

  43.     assert_equal(OpenSSL::ASN1::PRINTABLESTRING, ary[0][2])
    44. 

  44.     assert_equal(OpenSSL::ASN1::UTF8STRING, ary[1][2])
    45. 

  45.     assert_equal(OpenSSL::ASN1::UTF8STRING, ary[2][2])
    46. 

  46. 

  47.     name = OpenSSL::X509::Name.new(dn, @obj_type_tmpl)
    48. 

  48.     ary = name.to_a
    49. 

  49.     assert_equal("/C=JP/O=example/CN=www.example.jp", name.to_s)
    50. 

  50.     assert_equal(OpenSSL::ASN1::PRINTABLESTRING, ary[0][2])
    51. 

  51.     assert_equal(OpenSSL::ASN1::PRINTABLESTRING, ary[1][2])
    52. 

  52.     assert_equal(OpenSSL::ASN1::PRINTABLESTRING, ary[2][2])
    53. 

  53. 

  54.     dn = [
    55. 

  55.       ["countryName", "JP", OpenSSL::ASN1::PRINTABLESTRING],
    56. 

  56.       ["organizationName", "example", OpenSSL::ASN1::PRINTABLESTRING],
    57. 

  57.       ["commonName", "www.example.jp", OpenSSL::ASN1::PRINTABLESTRING]
    58. 

  58.     ]
    59. 

  59.     name = OpenSSL::X509::Name.new(dn)
    60. 

  60.     ary = name.to_a
    61. 

  61.     assert_equal("/C=JP/O=example/CN=www.example.jp", name.to_s)
    62. 

  62.     assert_equal(OpenSSL::ASN1::PRINTABLESTRING, ary[0][2])
    63. 

  63.     assert_equal(OpenSSL::ASN1::PRINTABLESTRING, ary[1][2])
    64. 

  64.     assert_equal(OpenSSL::ASN1::PRINTABLESTRING, ary[2][2])
    65. 

  65. 

  66.     dn = [
    67. 

  67.       ["DC", "org"],
    68. 

  68.       ["DC", "ruby-lang"],
    69. 

  69.       ["CN", "GOTOU Yuuzou"],
    70. 

  70.       ["emailAddress", "gotoyuzo@ruby-lang.org"],
    71. 

  71.       ["serialNumber", "123"],
    72. 

  72.     ]
    73. 

  73.     name = OpenSSL::X509::Name.new(dn)
    74. 

  74.     ary = name.to_a
    75. 

  75.     assert_equal("/DC=org/DC=ruby-lang/CN=GOTOU Yuuzou/emailAddress=gotoyuzo@ruby-lang.org/serialNumber=123", name.to_s)
    76. 

  76.     assert_equal("DC", ary[0][0])
    77. 

  77.     assert_equal("DC", ary[1][0])
    78. 

  78.     assert_equal("CN", ary[2][0])
    79. 

  79.     assert_equal("emailAddress", ary[3][0])
    80. 

  80.     assert_equal("serialNumber", ary[4][0])
    81. 

  81.     assert_equal("org", ary[0][1])
    82. 

  82.     assert_equal("ruby-lang", ary[1][1])
    83. 

  83.     assert_equal("GOTOU Yuuzou", ary[2][1])
    84. 

  84.     assert_equal("gotoyuzo@ruby-lang.org", ary[3][1])
    85. 

  85.     assert_equal("123", ary[4][1])
    86. 

  86.     assert_equal(OpenSSL::ASN1::IA5STRING, ary[0][2])
    87. 

  87.     assert_equal(OpenSSL::ASN1::IA5STRING, ary[1][2])
    88. 

  88.     assert_equal(OpenSSL::ASN1::UTF8STRING, ary[2][2])
    89. 

  89.     assert_equal(OpenSSL::ASN1::IA5STRING, ary[3][2])
    90. 

  90.     assert_equal(OpenSSL::ASN1::PRINTABLESTRING, ary[4][2])
    91. 

  91. 

  92.     name_from_der = OpenSSL::X509::Name.new(name.to_der)
    93. 

  93.     assert_equal(name_from_der.to_s, name.to_s)
    94. 

  94.     assert_equal(name_from_der.to_a, name.to_a)
    95. 

  95.     assert_equal(name_from_der.to_der, name.to_der)
    96. 

  96.   end
    97. 

  97. 

  98.   def test_unrecognized_oid
    99. 

  99.     dn = [ ["1.2.3.4.5.6.7.8.9.7.5.3.1", "Unknown OID 1"],
    100. 

  100.            ["1.1.2.3.5.8.13.21.34", "Unknown OID 2"],
    101. 

  101.            ["C", "US"],
    102. 

  102.            ["postalCode", "60602"],
    103. 

  103.            ["ST", "Illinois"],
    104. 

  104.            ["L", "Chicago"],
    105. 

  105.            #["street", "123 Fake St"],
    106. 

  106.            ["O", "Some Company LLC"],
    107. 

  107.            ["CN", "mydomain.com"] ]
    108. 

  108. 

  109.     name = OpenSSL::X509::Name.new(dn)
    110. 

  110.     ary = name.to_a
    111. 

  111.     #assert_equal("/1.2.3.4.5.6.7.8.9.7.5.3.1=Unknown OID 1/1.1.2.3.5.8.13.21.34=Unknown OID 2/C=US/postalCode=60602/ST=Illinois/L=Chicago/street=123 Fake St/O=Some Company LLC/CN=mydomain.com", name.to_s)
    112. 

  112.     assert_equal("/1.2.3.4.5.6.7.8.9.7.5.3.1=Unknown OID 1/1.1.2.3.5.8.13.21.34=Unknown OID 2/C=US/postalCode=60602/ST=Illinois/L=Chicago/O=Some Company LLC/CN=mydomain.com", name.to_s)
    113. 

  113.     assert_equal("1.2.3.4.5.6.7.8.9.7.5.3.1", ary[0][0])
    114. 

  114.     assert_equal("1.1.2.3.5.8.13.21.34", ary[1][0])
    115. 

  115.     assert_equal("C", ary[2][0])
    116. 

  116.     assert_equal("postalCode", ary[3][0])
    117. 

  117.     assert_equal("ST", ary[4][0])
    118. 

  118.     assert_equal("L", ary[5][0])
    119. 

  119.     #assert_equal("street", ary[6][0])
    120. 

  120.     assert_equal("O", ary[6][0])
    121. 

  121.     assert_equal("CN", ary[7][0])
    122. 

  122.     assert_equal("Unknown OID 1", ary[0][1])
    123. 

  123.     assert_equal("Unknown OID 2", ary[1][1])
    124. 

  124.     assert_equal("US", ary[2][1])
    125. 

  125.     assert_equal("60602", ary[3][1])
    126. 

  126.     assert_equal("Illinois", ary[4][1])
    127. 

  127.     assert_equal("Chicago", ary[5][1])
    128. 

  128.     #assert_equal("123 Fake St", ary[6][1])
    129. 

  129.     assert_equal("Some Company LLC", ary[6][1])
    130. 

  130.     assert_equal("mydomain.com", ary[7][1])
    131. 

  131.   end
    132. 

  132. 

  133.   def test_unrecognized_oid_parse_encode_equality
    134. 

  134.     dn = [ ["1.2.3.4.5.6.7.8.9.7.5.3.2", "Unknown OID1"],
    135. 

  135.            ["1.1.2.3.5.8.13.21.35", "Unknown OID2"],
    136. 

  136.            ["C", "US"],
    137. 

  137.            ["postalCode", "60602"],
    138. 

  138.            ["ST", "Illinois"],
    139. 

  139.            ["L", "Chicago"],
    140. 

  140.            #["street", "123 Fake St"],
    141. 

  141.            ["O", "Some Company LLC"],
    142. 

  142.            ["CN", "mydomain.com"] ]
    143. 

  143. 

  144.     name1 = OpenSSL::X509::Name.new(dn)
    145. 

  145.     name2 = OpenSSL::X509::Name.parse(name1.to_s)
    146. 

  146.     assert_equal(name1.to_s, name2.to_s)
    147. 

  147.     assert_equal(name1.to_a, name2.to_a)
    148. 

  148.   end
    149. 

  149. 

  150.   def test_s_parse
    151. 

  151.     dn = "/DC=org/DC=ruby-lang/CN=www.ruby-lang.org/1.2.3.4.5.6=A=BCD"
    152. 

  152.     name = OpenSSL::X509::Name.parse(dn)
    153. 

  153.     assert_equal(dn, name.to_s)
    154. 

  154.     ary = name.to_a
    155. 

  155.     assert_equal [
    156. 

  156.       ["DC", "org", OpenSSL::ASN1::IA5STRING],
    157. 

  157.       ["DC", "ruby-lang", OpenSSL::ASN1::IA5STRING],
    158. 

  158.       ["CN", "www.ruby-lang.org", OpenSSL::ASN1::UTF8STRING],
    159. 

  159.       ["1.2.3.4.5.6", "A=BCD", OpenSSL::ASN1::UTF8STRING],
    160. 

  160.     ], ary
    161. 

  161. 

  162.     dn2 = "DC=org, DC=ruby-lang, CN=www.ruby-lang.org, 1.2.3.4.5.6=A=BCD"
    163. 

  163.     name = OpenSSL::X509::Name.parse(dn2)
    164. 

  164.     assert_equal(dn, name.to_s)
    165. 

  165.     assert_equal ary, name.to_a
    166. 

  166. 

  167.     name = OpenSSL::X509::Name.parse(dn2, @obj_type_tmpl)
    168. 

  168.     ary = name.to_a
    169. 

  169.     assert_equal(OpenSSL::ASN1::IA5STRING, ary[0][2])
    170. 

  170.     assert_equal(OpenSSL::ASN1::IA5STRING, ary[1][2])
    171. 

  171.     assert_equal(OpenSSL::ASN1::PRINTABLESTRING, ary[2][2])
    172. 

  172.     assert_equal(OpenSSL::ASN1::PRINTABLESTRING, ary[3][2])
    173. 

  173.   end
    174. 

  174. 

  175.   def test_s_parse_rfc2253
    176. 

  176.     scanner = OpenSSL::X509::Name::RFC2253DN.method(:scan)
    177. 

  177. 

  178.     assert_equal([["C", "JP"]], scanner.call("C=JP"))
    179. 

  179.     assert_equal([
    180. 

  180.         ["DC", "org"],
    181. 

  181.         ["DC", "ruby-lang"],
    182. 

  182.         ["CN", "GOTOU Yuuzou"],
    183. 

  183.         ["emailAddress", "gotoyuzo@ruby-lang.org"],
    184. 

  184.       ],
    185. 

  185.       scanner.call(
    186. 

  186.         "emailAddress=gotoyuzo@ruby-lang.org,CN=GOTOU Yuuzou,"+
    187. 

  187.         "DC=ruby-lang,DC=org")
    188. 

  188.     )
    189. 

  189. 

  190.     u8 = OpenSSL::ASN1::UTF8STRING
    191. 

  191.     assert_equal([
    192. 

  192.         ["DC", "org"],
    193. 

  193.         ["DC", "ruby-lang"],
    194. 

  194.         ["O", ",=+<>#;"],
    195. 

  195.         ["O", ",=+<>#;"],
    196. 

  196.         ["OU", ""],
    197. 

  197.         ["OU", ""],
    198. 

  198.         ["L", "aaa=\"bbb, ccc\""],
    199. 

  199.         ["L", "aaa=\"bbb, ccc\""],
    200. 

  200.         ["CN", "\345\276\214\350\227\244\350\243\225\350\224\265"],
    201. 

  201.         ["CN", "\345\276\214\350\227\244\350\243\225\350\224\265"],
    202. 

  202.         ["CN", "\345\276\214\350\227\244\350\243\225\350\224\265"],
    203. 

  203.         ["CN", "\345\276\214\350\227\244\350\243\225\350\224\265", u8],
    204. 

  204.         ["2.5.4.3", "GOTOU, Yuuzou"],
    205. 

  205.         ["2.5.4.3", "GOTOU, Yuuzou"],
    206. 

  206.         ["2.5.4.3", "GOTOU, Yuuzou"],
    207. 

  207.         ["2.5.4.3", "GOTOU, Yuuzou"],
    208. 

  208.         ["CN", "GOTOU \"gotoyuzo\" Yuuzou"],
    209. 

  209.         ["CN", "GOTOU \"gotoyuzo\" Yuuzou"],
    210. 

  210.         ["1.2.840.113549.1.9.1", "gotoyuzo@ruby-lang.org"],
    211. 

  211.         ["emailAddress", "gotoyuzo@ruby-lang.org"],
    212. 

  212.       ],
    213. 

  213.       scanner.call(
    214. 

  214.         "emailAddress=gotoyuzo@ruby-lang.org," +
    215. 

  215.         "1.2.840.113549.1.9.1=gotoyuzo@ruby-lang.org," +
    216. 

  216.         'CN=GOTOU \"gotoyuzo\" Yuuzou,' +
    217. 

  217.         'CN="GOTOU \"gotoyuzo\" Yuuzou",' +
    218. 

  218.         '2.5.4.3=GOTOU\,\20Yuuzou,' +
    219. 

  219.         '2.5.4.3=GOTOU\, Yuuzou,' +
    220. 

  220.         '2.5.4.3="GOTOU, Yuuzou",' +
    221. 

  221.         '2.5.4.3="GOTOU\, Yuuzou",' +
    222. 

  222.         "CN=#0C0CE5BE8CE897A4E8A395E894B5," +
    223. 

  223.         'CN=\E5\BE\8C\E8\97\A4\E8\A3\95\E8\94\B5,' +
    224. 

  224.         "CN=\"\xE5\xBE\x8C\xE8\x97\xA4\xE8\xA3\x95\xE8\x94\xB5\"," +
    225. 

  225.         "CN=\xE5\xBE\x8C\xE8\x97\xA4\xE8\xA3\x95\xE8\x94\xB5," +
    226. 

  226.         'L=aaa\=\"bbb\, ccc\",' +
    227. 

  227.         'L="aaa=\"bbb, ccc\"",' +
    228. 

  228.         'OU=,' +
    229. 

  229.         'OU="",' +
    230. 

  230.         'O=\,\=\+\<\>\#\;,' +
    231. 

  231.         'O=",=+<>#;",' +
    232. 

  232.         "DC=ruby-lang," +
    233. 

  233.         "DC=org")
    234. 

  234.     )
    235. 

  235. 

  236.     [
    237. 

  237.       "DC=org+DC=jp",
    238. 

  238.       "DC=org,DC=ruby-lang+DC=rubyist,DC=www"
    239. 

  239.     ].each{|dn|
    240. 

  240.       ex = scanner.call(dn) rescue $!
    241. 

  241.       dn_r = Regexp.escape(dn)
    242. 

  242.       assert_match(/^multi-valued RDN is not supported: #{dn_r}/, ex.message)
    243. 

  243.     }
    244. 

  244. 

  245.     [
    246. 

  246.       ["DC=org,DC=exapmle,CN", "CN"],
    247. 

  247.       ["DC=org,DC=example,", ""],
    248. 

  248.       ["DC=org,DC=exapmle,CN=www.example.org;", "CN=www.example.org;"],
    249. 

  249.       ["DC=org,DC=exapmle,CN=#www.example.org", "CN=#www.example.org"],
    250. 

  250.       ["DC=org,DC=exapmle,CN=#777777.example.org", "CN=#777777.example.org"],
    251. 

  251.       ["DC=org,DC=exapmle,CN=\"www.example\".org", "CN=\"www.example\".org"],
    252. 

  252.       ["DC=org,DC=exapmle,CN=www.\"example.org\"", "CN=www.\"example.org\""],
    253. 

  253.       ["DC=org,DC=exapmle,CN=www.\"example\".org", "CN=www.\"example\".org"],
    254. 

  254.     ].each{|dn, msg|
    255. 

  255.       ex = scanner.call(dn) rescue $!
    256. 

  256.       assert_match(/^malformed RDN: .*=>#{Regexp.escape(msg)}/, ex.message)
    257. 

  257.     }
    258. 

  258. 

  259.     dn = "CN=www.ruby-lang.org,DC=ruby-lang,DC=org"
    260. 

  260.     name = OpenSSL::X509::Name.parse_rfc2253(dn)
    261. 

  261.     assert_equal(dn, name.to_s(OpenSSL::X509::Name::RFC2253))
    262. 

  262.     ary = name.to_a
    263. 

  263.     assert_equal("DC", ary[0][0])
    264. 

  264.     assert_equal("DC", ary[1][0])
    265. 

  265.     assert_equal("CN", ary[2][0])
    266. 

  266.     assert_equal("org", ary[0][1])
    267. 

  267.     assert_equal("ruby-lang", ary[1][1])
    268. 

  268.     assert_equal("www.ruby-lang.org", ary[2][1])
    269. 

  269.     assert_equal(OpenSSL::ASN1::IA5STRING, ary[0][2])
    270. 

  270.     assert_equal(OpenSSL::ASN1::IA5STRING, ary[1][2])
    271. 

  271.     assert_equal(OpenSSL::ASN1::UTF8STRING, ary[2][2])
    272. 

  272.   end
    273. 

  273. 

  274.   def test_add_entry
    275. 

  275.     dn = [
    276. 

  276.       ["DC", "org"],
    277. 

  277.       ["DC", "ruby-lang"],
    278. 

  278.       ["CN", "GOTOU Yuuzou"],
    279. 

  279.       ["emailAddress", "gotoyuzo@ruby-lang.org"],
    280. 

  280.       ["serialNumber", "123"],
    281. 

  281.     ]
    282. 

  282.     name = OpenSSL::X509::Name.new
    283. 

  283.     dn.each{|attr| name.add_entry(*attr) }
    284. 

  284.     ary = name.to_a
    285. 

  285.     assert_equal("/DC=org/DC=ruby-lang/CN=GOTOU Yuuzou/emailAddress=gotoyuzo@ruby-lang.org/serialNumber=123", name.to_s)
    286. 

  286.     assert_equal("DC", ary[0][0])
    287. 

  287.     assert_equal("DC", ary[1][0])
    288. 

  288.     assert_equal("CN", ary[2][0])
    289. 

  289.     assert_equal("emailAddress", ary[3][0])
    290. 

  290.     assert_equal("serialNumber", ary[4][0])
    291. 

  291.     assert_equal("org", ary[0][1])
    292. 

  292.     assert_equal("ruby-lang", ary[1][1])
    293. 

  293.     assert_equal("GOTOU Yuuzou", ary[2][1])
    294. 

  294.     assert_equal("gotoyuzo@ruby-lang.org", ary[3][1])
    295. 

  295.     assert_equal("123", ary[4][1])
    296. 

  296.     assert_equal(OpenSSL::ASN1::IA5STRING, ary[0][2])
    297. 

  297.     assert_equal(OpenSSL::ASN1::IA5STRING, ary[1][2])
    298. 

  298.     assert_equal(OpenSSL::ASN1::UTF8STRING, ary[2][2])
    299. 

  299.     assert_equal(OpenSSL::ASN1::IA5STRING, ary[3][2])
    300. 

  300.     assert_equal(OpenSSL::ASN1::PRINTABLESTRING, ary[4][2])
    301. 

  301.   end
    302. 

  302. 

  303.   def test_add_entry_street
    304. 

  304.     # openssl/crypto/objects/obj_mac.h 1.83
    305. 

  305.     dn = [
    306. 

  306.       ["DC", "org"],
    307. 

  307.       ["DC", "ruby-lang"],
    308. 

  308.       ["CN", "GOTOU Yuuzou"],
    309. 

  309.       ["emailAddress", "gotoyuzo@ruby-lang.org"],
    310. 

  310.       ["serialNumber", "123"],
    311. 

  311.       ["street", "Namiki"],
    312. 

  312.     ]
    313. 

  313.     name = OpenSSL::X509::Name.new
    314. 

  314.     dn.each{|attr| name.add_entry(*attr) }
    315. 

  315.     ary = name.to_a
    316. 

  316.     assert_equal("/DC=org/DC=ruby-lang/CN=GOTOU Yuuzou/emailAddress=gotoyuzo@ruby-lang.org/serialNumber=123/street=Namiki", name.to_s)
    317. 

  317.     assert_equal("Namiki", ary[5][1])
    318. 

  318.   end
    319. 

  319. 

  320.   def test_add_entry_placing
    321. 

  321.     der = %w{ 30 2A
    322. 

  322.                  31 12
    323. 

  323.                     30 10 06 03 55 04 0A 0C 09 72 75 62 79 2D 6C 61 6E 67
    324. 

  324.                  31 14
    325. 

  325.                     30 08 06 03 55 04 0B 0C 01 61
    326. 

  326.                     30 08 06 03 55 04 0B 0C 01 62 }
    327. 

  327.     orig = OpenSSL::X509::Name.new([der.join].pack("H*"))
    328. 

  328.     assert_equal("OU=b+OU=a,O=ruby-lang", orig.to_s(OpenSSL::X509::Name::RFC2253))
    329. 

  329.     # Skip for now; they do not work
    330. 

  330.     #
    331. 

  331.     # dn = orig.dup
    332. 

  332.     # dn.add_entry("CN", "unya", loc: 0, set: 0)
    333. 

  333.     # assert_equal("OU=b+OU=a,O=ruby-lang,CN=unya", dn.dup.to_s(OpenSSL::X509::Name::RFC2253))
    334. 

  334.     # dn = orig.dup
    335. 

  335.     # dn.add_entry("CN", "unya", loc: 0, set: 1)
    336. 

  336.     # assert_equal("OU=b+OU=a,O=ruby-lang+CN=unya", dn.dup.to_s(OpenSSL::X509::Name::RFC2253))
    337. 

  337.     dn = orig.dup
    338. 

  338.     dn.add_entry("CN", "unya", loc: 1, set: -1)
    339. 

  339.     assert_equal("OU=b+OU=a,O=ruby-lang+CN=unya", dn.dup.to_s(OpenSSL::X509::Name::RFC2253))
    340. 

  340.     # dn = orig.dup
    341. 

  341.     # dn.add_entry("CN", "unya", loc: 1, set: 0)
    342. 

  342.     # assert_equal("OU=b+OU=a,CN=unya,O=ruby-lang", dn.dup.to_s(OpenSSL::X509::Name::RFC2253))
    343. 

  343.     dn = orig.dup
    344. 

  344.     dn.add_entry("CN", "unya", loc: 1, set: 1)
    345. 

  345.     assert_equal("CN=unya+OU=b+OU=a,O=ruby-lang", dn.dup.to_s(OpenSSL::X509::Name::RFC2253))
    346. 

  346.     dn = orig.dup
    347. 

  347.     dn.add_entry("CN", "unya", loc: -1, set: -1)
    348. 

  348.     assert_equal("CN=unya+OU=b+OU=a,O=ruby-lang", dn.dup.to_s(OpenSSL::X509::Name::RFC2253))
    349. 

  349.     dn = orig.dup
    350. 

  350.     dn.add_entry("CN", "unya", loc: -1, set: 0)
    351. 

  351.     assert_equal("CN=unya,OU=b+OU=a,O=ruby-lang", dn.dup.to_s(OpenSSL::X509::Name::RFC2253))
    352. 

  352.   end
    353. 

  353. 

  354.   def test_to_s
    355. 

  355.     dn = [
    356. 

  356.       ["DC", "org"],
    357. 

  357.       ["DC", "ruby-lang"],
    358. 

  358.       ["CN", "フー, バー"],
    359. 

  359.     ]
    360. 

  360.     name = OpenSSL::X509::Name.new
    361. 

  361.     dn.each { |x| name.add_entry(*x) }
    362. 

  362. 

  363.     assert_equal "/DC=org/DC=ruby-lang/" \
    364. 

  364.       "CN=\\xE3\\x83\\x95\\xE3\\x83\\xBC, \\xE3\\x83\\x90\\xE3\\x83\\xBC",
    365. 

  365.       name.to_s
    366. 

  366.     # OpenSSL escapes characters with MSB by default
    367. 

  367.     assert_equal \
    368. 

  368.       "CN=\\E3\\83\\95\\E3\\83\\BC\\, \\E3\\83\\90\\E3\\83\\BC," \
    369. 

  369.       "DC=ruby-lang,DC=org",
    370. 

  370.       name.to_s(OpenSSL::X509::Name::RFC2253)
    371. 

  371.     assert_equal "DC = org, DC = ruby-lang, " \
    372. 

  372.       "CN = \"\\E3\\83\\95\\E3\\83\\BC, \\E3\\83\\90\\E3\\83\\BC\"",
    373. 

  373.       name.to_s(OpenSSL::X509::Name::ONELINE)
    374. 

  374. 

  375.     empty = OpenSSL::X509::Name.new
    376. 

  376.     assert_equal "", empty.to_s
    377. 

  377.     assert_equal "", empty.to_s(OpenSSL::X509::Name::COMPAT)
    378. 

  378.     assert_equal "", empty.to_s(OpenSSL::X509::Name::RFC2253)
    379. 

  379.     assert_equal "", empty.to_s(OpenSSL::X509::Name::ONELINE)
    380. 

  380.   end
    381. 

  381. 

  382.   def test_to_utf8
    383. 

  383.     dn = [
    384. 

  384.       ["DC", "org"],
    385. 

  385.       ["DC", "ruby-lang"],
    386. 

  386.       ["CN", "フー, バー"],
    387. 

  387.     ]
    388. 

  388.     name = OpenSSL::X509::Name.new
    389. 

  389.     dn.each { |x| name.add_entry(*x) }
    390. 

  390. 

  391.     str = name.to_utf8
    392. 

  392.     expected = String.new("CN=フー\\, バー,DC=ruby-lang,DC=org").force_encoding("UTF-8")
    393. 

  393.     assert_equal expected, str
    394. 

  394.     assert_equal Encoding.find("UTF-8"), str.encoding
    395. 

  395. 

  396.     empty = OpenSSL::X509::Name.new
    397. 

  397.     assert_equal "", empty.to_utf8
    398. 

  398.   end
    399. 

  399. 

  400.   def test_equals2
    401. 

  401.     n1 = OpenSSL::X509::Name.parse_rfc2253 'CN=a'
    402. 

  402.     n2 = OpenSSL::X509::Name.parse_rfc2253 'CN=a'
    403. 

  403. 

  404.     assert_equal n1, n2
    405. 

  405. 

  406.     assert_equal(false, n1 == 'abc')
    407. 

  407.     assert_equal(false, n2 == nil)
    408. 

  408.   end
    409. 

  409. 

  410.   def test_spaceship
    411. 

  411.     n1 = OpenSSL::X509::Name.new([["CN", "a"]])
    412. 

  412.     n2 = OpenSSL::X509::Name.new([["CN", "a"]])
    413. 

  413.     n3 = OpenSSL::X509::Name.new([["CN", "ab"]])
    414. 

  414. 

  415.     assert_equal(0, n1 <=> n2)
    416. 

  416.     assert_equal(-1, n1 <=> n3)
    417. 

  417.     assert_equal(0, n2 <=> n1)
    418. 

  418.     assert_equal(-1, n2 <=> n3)
    419. 

  419.     assert_equal(1, n3 <=> n1)
    420. 

  420.     assert_equal(1, n3 <=> n2)
    421. 

  421.     assert_equal(nil, n1 <=> 'abc')
    422. 

  422.     assert_equal(nil, n2 <=> 123)
    423. 

  423.     assert_equal(nil, n3 <=> nil)
    424. 

  424.   end
    425. 

  425. 

  426.   def name_hash(name)
    427. 

  427.     # OpenSSL 1.0.0 uses SHA1 for canonical encoding (not just a der) of
    428. 

  428.     # X509Name for X509_NAME_hash.
    429. 

  429.     name.respond_to?(:hash_old) ? name.hash_old : name.hash
    430. 

  430.   end
    431. 

  431. 

  432.   def test_hash
    433. 

  433.     dn = "/DC=org/DC=ruby-lang/CN=www.ruby-lang.org"
    434. 

  434.     name = OpenSSL::X509::Name.parse(dn)
    435. 

  435.     d = OpenSSL::Digest::MD5.digest(name.to_der)
    436. 

  436.     expected = (d[0].ord & 0xff) | (d[1].ord & 0xff) << 8 | (d[2].ord & 0xff) << 16 | (d[3].ord & 0xff) << 24
    437. 

  437.     assert_equal(expected, name_hash(name))
    438. 

  438.     #
    439. 

  439.     dn = "/DC=org/DC=ruby-lang/CN=baz.ruby-lang.org"
    440. 

  440.     name = OpenSSL::X509::Name.parse(dn)
    441. 

  441.     d = OpenSSL::Digest::MD5.digest(name.to_der)
    442. 

  442.     expected = (d[0].ord & 0xff) | (d[1].ord & 0xff) << 8 | (d[2].ord & 0xff) << 16 | (d[3].ord & 0xff) << 24
    443. 

  443.     assert_equal(expected, name_hash(name))
    444. 

  444.   end
    445. 

  445. 

  446.   def test_equality
    447. 

  447.     name0 = OpenSSL::X509::Name.new([["DC", "org"], ["DC", "ruby-lang"], ["CN", "bar.ruby-lang.org"]])
    448. 

  448.     name1 = OpenSSL::X509::Name.new([["DC", "org"], ["DC", "ruby-lang"], ["CN", "bar.ruby-lang.org"]])
    449. 

  449.     name2 = OpenSSL::X509::Name.new([["DC", "org"], ["DC", "ruby-lang"], ["CN", "baz.ruby-lang.org"]])
    450. 

  450.     assert_equal true, name0 == name1
    451. 

  451.     assert_equal true, name0.eql?(name1)
    452. 

  452.     assert_equal false, name0 == name2
    453. 

  453.     assert_equal false, name0.eql?(name2)
    454. 

  454.   end
    455. 

  455. 

  456.   def test_marshal
    457. 

  457.     name = OpenSSL::X509::Name.new([["DC", "org"], ["DC", "ruby-lang"], ["CN", "bar.ruby-lang.org"]])
    458. 

  458.     deserialized = Marshal.load(Marshal.dump(name))
    459. 

  459. 

  460.     assert_equal name.to_der, deserialized.to_der
    461. 

  461.   end
    462. 

  462. 

  463.   def test_dup
    464. 

  464.     name = OpenSSL::X509::Name.parse("/CN=ruby-lang.org")
    465. 

  465.     assert_equal(name.to_der, name.dup.to_der)
    466. 

  466.   end
    467. 

  467. end
    468. 

  468. 

  469. end
    470. 

  470.