PageRenderTime 67ms CodeModel.GetById 12ms RepoModel.GetById 0ms app.codeStats 0ms

/test/openssl/test_x509name.rb

https://gitlab.com/klauer/ruby
Ruby | 276 lines | 251 code | 25 blank | 0 comment | 1 complexity | 3aeb700505e0fba413c2467862bf9364 MD5 | raw file
    

  1. require_relative 'utils'
    2. 

  2. 

  3. if defined?(OpenSSL)
    4. 

  4. 

  5. class OpenSSL::TestX509Name < Test::Unit::TestCase
    6. 

  6.   OpenSSL::ASN1::ObjectId.register(
    7. 

  7.     "1.2.840.113549.1.9.1", "emailAddress", "emailAddress")
    8. 

  8.   OpenSSL::ASN1::ObjectId.register(
    9. 

  9.     "2.5.4.5", "serialNumber", "serialNumber")
    10. 

  10. 

  11.   def setup
    12. 

  12.     @obj_type_tmpl = Hash.new(OpenSSL::ASN1::PRINTABLESTRING)
    13. 

  13.     @obj_type_tmpl.update(OpenSSL::X509::Name::OBJECT_TYPE_TEMPLATE)
    14. 

  14.   end
    15. 

  15. 

  16.   def teardown
    17. 

  17.   end
    18. 

  18. 

  19.   def test_s_new
    20. 

  20.     dn = [ ["C", "JP"], ["O", "example"], ["CN", "www.example.jp"] ]
    21. 

  21.     name = OpenSSL::X509::Name.new(dn)
    22. 

  22.     ary = name.to_a
    23. 

  23.     assert_equal("/C=JP/O=example/CN=www.example.jp", name.to_s)
    24. 

  24.     assert_equal("C", ary[0][0])
    25. 

  25.     assert_equal("O", ary[1][0])
    26. 

  26.     assert_equal("CN", ary[2][0])
    27. 

  27.     assert_equal("JP", ary[0][1])
    28. 

  28.     assert_equal("example", ary[1][1])
    29. 

  29.     assert_equal("www.example.jp", ary[2][1])
    30. 

  30.     assert_equal(OpenSSL::ASN1::PRINTABLESTRING, ary[0][2])
    31. 

  31.     assert_equal(OpenSSL::ASN1::UTF8STRING, ary[1][2])
    32. 

  32.     assert_equal(OpenSSL::ASN1::UTF8STRING, ary[2][2])
    33. 

  33. 

  34.     dn = [
    35. 

  35.       ["countryName", "JP"],
    36. 

  36.       ["organizationName", "example"],
    37. 

  37.       ["commonName", "www.example.jp"]
    38. 

  38.     ]
    39. 

  39.     name = OpenSSL::X509::Name.new(dn)
    40. 

  40.     ary = name.to_a
    41. 

  41.     assert_equal("/C=JP/O=example/CN=www.example.jp", name.to_s)
    42. 

  42.     assert_equal("C", ary[0][0])
    43. 

  43.     assert_equal("O", ary[1][0])
    44. 

  44.     assert_equal("CN", ary[2][0])
    45. 

  45.     assert_equal("JP", ary[0][1])
    46. 

  46.     assert_equal("example", ary[1][1])
    47. 

  47.     assert_equal("www.example.jp", ary[2][1])
    48. 

  48.     assert_equal(OpenSSL::ASN1::PRINTABLESTRING, ary[0][2])
    49. 

  49.     assert_equal(OpenSSL::ASN1::UTF8STRING, ary[1][2])
    50. 

  50.     assert_equal(OpenSSL::ASN1::UTF8STRING, ary[2][2])
    51. 

  51. 

  52.     name = OpenSSL::X509::Name.new(dn, @obj_type_tmpl)
    53. 

  53.     ary = name.to_a
    54. 

  54.     assert_equal("/C=JP/O=example/CN=www.example.jp", name.to_s)
    55. 

  55.     assert_equal(OpenSSL::ASN1::PRINTABLESTRING, ary[0][2])
    56. 

  56.     assert_equal(OpenSSL::ASN1::PRINTABLESTRING, ary[1][2])
    57. 

  57.     assert_equal(OpenSSL::ASN1::PRINTABLESTRING, ary[2][2])
    58. 

  58. 

  59.     dn = [
    60. 

  60.       ["countryName", "JP", OpenSSL::ASN1::PRINTABLESTRING],
    61. 

  61.       ["organizationName", "example", OpenSSL::ASN1::PRINTABLESTRING],
    62. 

  62.       ["commonName", "www.example.jp", OpenSSL::ASN1::PRINTABLESTRING]
    63. 

  63.     ]
    64. 

  64.     name = OpenSSL::X509::Name.new(dn)
    65. 

  65.     ary = name.to_a
    66. 

  66.     assert_equal("/C=JP/O=example/CN=www.example.jp", name.to_s)
    67. 

  67.     assert_equal(OpenSSL::ASN1::PRINTABLESTRING, ary[0][2])
    68. 

  68.     assert_equal(OpenSSL::ASN1::PRINTABLESTRING, ary[1][2])
    69. 

  69.     assert_equal(OpenSSL::ASN1::PRINTABLESTRING, ary[2][2])
    70. 

  70. 

  71.     dn = [
    72. 

  72.       ["DC", "org"],
    73. 

  73.       ["DC", "ruby-lang"],
    74. 

  74.       ["CN", "GOTOU Yuuzou"],
    75. 

  75.       ["emailAddress", "gotoyuzo@ruby-lang.org"],
    76. 

  76.       ["serialNumber", "123"],
    77. 

  77.     ]
    78. 

  78.     name = OpenSSL::X509::Name.new(dn)
    79. 

  79.     ary = name.to_a
    80. 

  80.     assert_equal("/DC=org/DC=ruby-lang/CN=GOTOU Yuuzou/emailAddress=gotoyuzo@ruby-lang.org/serialNumber=123", name.to_s)
    81. 

  81.     assert_equal("DC", ary[0][0])
    82. 

  82.     assert_equal("DC", ary[1][0])
    83. 

  83.     assert_equal("CN", ary[2][0])
    84. 

  84.     assert_equal("emailAddress", ary[3][0])
    85. 

  85.     assert_equal("serialNumber", ary[4][0])
    86. 

  86.     assert_equal("org", ary[0][1])
    87. 

  87.     assert_equal("ruby-lang", ary[1][1])
    88. 

  88.     assert_equal("GOTOU Yuuzou", ary[2][1])
    89. 

  89.     assert_equal("gotoyuzo@ruby-lang.org", ary[3][1])
    90. 

  90.     assert_equal("123", ary[4][1])
    91. 

  91.     assert_equal(OpenSSL::ASN1::IA5STRING, ary[0][2])
    92. 

  92.     assert_equal(OpenSSL::ASN1::IA5STRING, ary[1][2])
    93. 

  93.     assert_equal(OpenSSL::ASN1::UTF8STRING, ary[2][2])
    94. 

  94.     assert_equal(OpenSSL::ASN1::IA5STRING, ary[3][2])
    95. 

  95.     assert_equal(OpenSSL::ASN1::PRINTABLESTRING, ary[4][2])
    96. 

  96. 

  97.     name_from_der = OpenSSL::X509::Name.new(name.to_der)
    98. 

  98.     assert_equal(name_from_der.to_s, name.to_s)
    99. 

  99.     assert_equal(name_from_der.to_a, name.to_a)
    100. 

  100.     assert_equal(name_from_der.to_der, name.to_der)
    101. 

  101.   end
    102. 

  102. 

  103.   def test_s_parse
    104. 

  104.     dn = "/DC=org/DC=ruby-lang/CN=www.ruby-lang.org"
    105. 

  105.     name = OpenSSL::X509::Name.parse(dn)
    106. 

  106.     assert_equal(dn, name.to_s)
    107. 

  107.     ary = name.to_a
    108. 

  108.     assert_equal("DC", ary[0][0])
    109. 

  109.     assert_equal("DC", ary[1][0])
    110. 

  110.     assert_equal("CN", ary[2][0])
    111. 

  111.     assert_equal("org", ary[0][1])
    112. 

  112.     assert_equal("ruby-lang", ary[1][1])
    113. 

  113.     assert_equal("www.ruby-lang.org", ary[2][1])
    114. 

  114.     assert_equal(OpenSSL::ASN1::IA5STRING, ary[0][2])
    115. 

  115.     assert_equal(OpenSSL::ASN1::IA5STRING, ary[1][2])
    116. 

  116.     assert_equal(OpenSSL::ASN1::UTF8STRING, ary[2][2])
    117. 

  117. 

  118.     dn2 = "DC=org, DC=ruby-lang, CN=www.ruby-lang.org"
    119. 

  119.     name = OpenSSL::X509::Name.parse(dn2)
    120. 

  120.     ary = name.to_a
    121. 

  121.     assert_equal(dn, name.to_s)
    122. 

  122.     assert_equal("org", ary[0][1])
    123. 

  123.     assert_equal("ruby-lang", ary[1][1])
    124. 

  124.     assert_equal("www.ruby-lang.org", ary[2][1])
    125. 

  125. 

  126.     name = OpenSSL::X509::Name.parse(dn2, @obj_type_tmpl)
    127. 

  127.     ary = name.to_a
    128. 

  128.     assert_equal(OpenSSL::ASN1::IA5STRING, ary[0][2])
    129. 

  129.     assert_equal(OpenSSL::ASN1::IA5STRING, ary[1][2])
    130. 

  130.     assert_equal(OpenSSL::ASN1::PRINTABLESTRING, ary[2][2])
    131. 

  131.   end
    132. 

  132. 

  133.   def test_s_parse_rfc2253
    134. 

  134.     scanner = OpenSSL::X509::Name::RFC2253DN.method(:scan)
    135. 

  135. 

  136.     assert_equal([["C", "JP"]], scanner.call("C=JP"))
    137. 

  137.     assert_equal([
    138. 

  138.         ["DC", "org"],
    139. 

  139.         ["DC", "ruby-lang"],
    140. 

  140.         ["CN", "GOTOU Yuuzou"],
    141. 

  141.         ["emailAddress", "gotoyuzo@ruby-lang.org"],
    142. 

  142.       ],
    143. 

  143.       scanner.call(
    144. 

  144.         "emailAddress=gotoyuzo@ruby-lang.org,CN=GOTOU Yuuzou,"+
    145. 

  145.         "DC=ruby-lang,DC=org")
    146. 

  146.     )
    147. 

  147. 

  148.     u8 = OpenSSL::ASN1::UTF8STRING
    149. 

  149.     assert_equal([
    150. 

  150.         ["DC", "org"],
    151. 

  151.         ["DC", "ruby-lang"],
    152. 

  152.         ["O", ",=+<>#;"],
    153. 

  153.         ["O", ",=+<>#;"],
    154. 

  154.         ["OU", ""],
    155. 

  155.         ["OU", ""],
    156. 

  156.         ["L", "aaa=\"bbb, ccc\""],
    157. 

  157.         ["L", "aaa=\"bbb, ccc\""],
    158. 

  158.         ["CN", "\345\276\214\350\227\244\350\243\225\350\224\265"],
    159. 

  159.         ["CN", "\345\276\214\350\227\244\350\243\225\350\224\265"],
    160. 

  160.         ["CN", "\345\276\214\350\227\244\350\243\225\350\224\265"],
    161. 

  161.         ["CN", "\345\276\214\350\227\244\350\243\225\350\224\265", u8],
    162. 

  162.         ["2.5.4.3", "GOTOU, Yuuzou"],
    163. 

  163.         ["2.5.4.3", "GOTOU, Yuuzou"],
    164. 

  164.         ["2.5.4.3", "GOTOU, Yuuzou"],
    165. 

  165.         ["2.5.4.3", "GOTOU, Yuuzou"],
    166. 

  166.         ["CN", "GOTOU \"gotoyuzo\" Yuuzou"],
    167. 

  167.         ["CN", "GOTOU \"gotoyuzo\" Yuuzou"],
    168. 

  168.         ["1.2.840.113549.1.9.1", "gotoyuzo@ruby-lang.org"],
    169. 

  169.         ["emailAddress", "gotoyuzo@ruby-lang.org"],
    170. 

  170.       ],
    171. 

  171.       scanner.call(
    172. 

  172.         "emailAddress=gotoyuzo@ruby-lang.org," +
    173. 

  173.         "1.2.840.113549.1.9.1=gotoyuzo@ruby-lang.org," +
    174. 

  174.         'CN=GOTOU \"gotoyuzo\" Yuuzou,' +
    175. 

  175.         'CN="GOTOU \"gotoyuzo\" Yuuzou",' +
    176. 

  176.         '2.5.4.3=GOTOU\,\20Yuuzou,' +
    177. 

  177.         '2.5.4.3=GOTOU\, Yuuzou,' +
    178. 

  178.         '2.5.4.3="GOTOU, Yuuzou",' +
    179. 

  179.         '2.5.4.3="GOTOU\, Yuuzou",' +
    180. 

  180.         "CN=#0C0CE5BE8CE897A4E8A395E894B5," +
    181. 

  181.         'CN=\E5\BE\8C\E8\97\A4\E8\A3\95\E8\94\B5,' +
    182. 

  182.         "CN=\"\xE5\xBE\x8C\xE8\x97\xA4\xE8\xA3\x95\xE8\x94\xB5\"," +
    183. 

  183.         "CN=\xE5\xBE\x8C\xE8\x97\xA4\xE8\xA3\x95\xE8\x94\xB5," +
    184. 

  184.         'L=aaa\=\"bbb\, ccc\",' +
    185. 

  185.         'L="aaa=\"bbb, ccc\"",' +
    186. 

  186.         'OU=,' +
    187. 

  187.         'OU="",' +
    188. 

  188.         'O=\,\=\+\<\>\#\;,' +
    189. 

  189.         'O=",=+<>#;",' +
    190. 

  190.         "DC=ruby-lang," +
    191. 

  191.         "DC=org")
    192. 

  192.     )
    193. 

  193. 

  194.     [
    195. 

  195.       "DC=org+DC=jp",
    196. 

  196.       "DC=org,DC=ruby-lang+DC=rubyist,DC=www"
    197. 

  197.     ].each{|dn|
    198. 

  198.       ex = scanner.call(dn) rescue $!
    199. 

  199.       dn_r = Regexp.escape(dn)
    200. 

  200.       assert_match(/^multi-valued RDN is not supported: #{dn_r}/, ex.message)
    201. 

  201.     }
    202. 

  202. 

  203.     [
    204. 

  204.       ["DC=org,DC=exapmle,CN", "CN"],
    205. 

  205.       ["DC=org,DC=example,", ""],
    206. 

  206.       ["DC=org,DC=exapmle,CN=www.example.org;", "CN=www.example.org;"],
    207. 

  207.       ["DC=org,DC=exapmle,CN=#www.example.org", "CN=#www.example.org"],
    208. 

  208.       ["DC=org,DC=exapmle,CN=#777777.example.org", "CN=#777777.example.org"],
    209. 

  209.       ["DC=org,DC=exapmle,CN=\"www.example\".org", "CN=\"www.example\".org"],
    210. 

  210.       ["DC=org,DC=exapmle,CN=www.\"example.org\"", "CN=www.\"example.org\""],
    211. 

  211.       ["DC=org,DC=exapmle,CN=www.\"example\".org", "CN=www.\"example\".org"],
    212. 

  212.     ].each{|dn, msg|
    213. 

  213.       ex = scanner.call(dn) rescue $!
    214. 

  214.       assert_match(/^malformed RDN: .*=>#{Regexp.escape(msg)}/, ex.message)
    215. 

  215.     }
    216. 

  216. 

  217.     dn = "CN=www.ruby-lang.org,DC=ruby-lang,DC=org"
    218. 

  218.     name = OpenSSL::X509::Name.parse_rfc2253(dn)
    219. 

  219.     assert_equal(dn, name.to_s(OpenSSL::X509::Name::RFC2253))
    220. 

  220.     ary = name.to_a
    221. 

  221.     assert_equal("DC", ary[0][0])
    222. 

  222.     assert_equal("DC", ary[1][0])
    223. 

  223.     assert_equal("CN", ary[2][0])
    224. 

  224.     assert_equal("org", ary[0][1])
    225. 

  225.     assert_equal("ruby-lang", ary[1][1])
    226. 

  226.     assert_equal("www.ruby-lang.org", ary[2][1])
    227. 

  227.     assert_equal(OpenSSL::ASN1::IA5STRING, ary[0][2])
    228. 

  228.     assert_equal(OpenSSL::ASN1::IA5STRING, ary[1][2])
    229. 

  229.     assert_equal(OpenSSL::ASN1::UTF8STRING, ary[2][2])
    230. 

  230.   end
    231. 

  231. 

  232.   def test_add_entry
    233. 

  233.     dn = [
    234. 

  234.       ["DC", "org"],
    235. 

  235.       ["DC", "ruby-lang"],
    236. 

  236.       ["CN", "GOTOU Yuuzou"],
    237. 

  237.       ["emailAddress", "gotoyuzo@ruby-lang.org"],
    238. 

  238.       ["serialNumber", "123"],
    239. 

  239.     ]
    240. 

  240.     name = OpenSSL::X509::Name.new
    241. 

  241.     dn.each{|attr| name.add_entry(*attr) }
    242. 

  242.     ary = name.to_a
    243. 

  243.     assert_equal("/DC=org/DC=ruby-lang/CN=GOTOU Yuuzou/emailAddress=gotoyuzo@ruby-lang.org/serialNumber=123", name.to_s)
    244. 

  244.     assert_equal("DC", ary[0][0])
    245. 

  245.     assert_equal("DC", ary[1][0])
    246. 

  246.     assert_equal("CN", ary[2][0])
    247. 

  247.     assert_equal("emailAddress", ary[3][0])
    248. 

  248.     assert_equal("serialNumber", ary[4][0])
    249. 

  249.     assert_equal("org", ary[0][1])
    250. 

  250.     assert_equal("ruby-lang", ary[1][1])
    251. 

  251.     assert_equal("GOTOU Yuuzou", ary[2][1])
    252. 

  252.     assert_equal("gotoyuzo@ruby-lang.org", ary[3][1])
    253. 

  253.     assert_equal("123", ary[4][1])
    254. 

  254.     assert_equal(OpenSSL::ASN1::IA5STRING, ary[0][2])
    255. 

  255.     assert_equal(OpenSSL::ASN1::IA5STRING, ary[1][2])
    256. 

  256.     assert_equal(OpenSSL::ASN1::UTF8STRING, ary[2][2])
    257. 

  257.     assert_equal(OpenSSL::ASN1::IA5STRING, ary[3][2])
    258. 

  258.     assert_equal(OpenSSL::ASN1::PRINTABLESTRING, ary[4][2])
    259. 

  259.   end
    260. 

  260. 

  261.   def test_equals2
    262. 

  262.     n1 = OpenSSL::X509::Name.parse 'CN=a'
    263. 

  263.     n2 = OpenSSL::X509::Name.parse 'CN=a'
    264. 

  264. 

  265.     assert_equal n1, n2
    266. 

  266.   end
    267. 

  267. 

  268.   def test_spaceship
    269. 

  269.     n1 = OpenSSL::X509::Name.parse 'CN=a'
    270. 

  270.     n2 = OpenSSL::X509::Name.parse 'CN=b'
    271. 

  271. 

  272.     assert_equal -1, n1 <=> n2
    273. 

  273.   end
    274. 

  274. end
    275. 

  275. 

  276. end
    277. 

  277.