pkg/util/util_test.go · typeable/oauth2-proxy

git.iko.soy/typeable/oauth2-proxy

on ea261ca help sign in

typeable/oauth2-proxy/pkg/util/util_test.go

97 lines 3.6 kB history raw

1package util

3import (

4 "crypto/x509/pkix"

5 "encoding/asn1"

6 "io/ioutil"

7 "os"

8 "testing"

10 "github.com/stretchr/testify/assert"

11)

13// Test certificate created with an OpenSSL command in the following form:

14// openssl req -x509 -newkey rsa:4096 -keyout key-unused.pem -out cert.pem -nodes -subj "/CN=oauth-proxy test ca"

16var (

17 testCA1Subj = "CN=oauth-proxy test ca"

18 testCA1 = `-----BEGIN CERTIFICATE-----

19MIICuTCCAaGgAwIBAgIFAKuKEWowDQYJKoZIhvcNAQELBQAwHjEcMBoGA1UEAxMT

20b2F1dGgtcHJveHkgdGVzdCBjYTAeFw0xNzEwMjQyMDExMzJaFw0xOTEwMjQyMDEx

21MzJaMB4xHDAaBgNVBAMTE29hdXRoLXByb3h5IHRlc3QgY2EwggEiMA0GCSqGSIb3

22DQEBAQUAA4IBDwAwggEKAoIBAQC5/kmgKNiECuxlj27yTWBWOMVvIB0AaRhQrMA7

233iSCk/SHhaTabUuXUGRwmCAewT/y9oX3rTdfnSPCn7praU/27lRFBgOGFrTzAZH6

24voisF54I3ZxWZgHDJ/ig/KFwd0Y8OATj9/k9uAJSCe6aT7BouJPZVWNGF2dF5BOJ

25EwFsJiN2s8HpF14DhxFOMMtlckdMHGxi3wj3E/hBCfGvGGU4Wezz48vEWWC1ajWM

26qVq2vVWi1bcNft8FjWa5wTGpdlDQJM7yvKYJPwRkEjgIXtF1ra3JM3WTTFZO9Yhd

27QXwO7IWRTdTaypKTNbTDKuWQZsm7xQM9sNcFkukGb3o+uBpLAgMBAAEwDQYJKoZI

28hvcNAQELBQADggEBAHJNrUfHhN7VOUF60pG8sOEkx0ztjbtbYMj2N9Kb0oSya+re

29Kmb2Z4JgyV7XHCZ03Jch6L7UBI3Y6/Lp1zdwU03LFayVUchLkvFonoXpRRP5UFYN

30+36xP3ZL1qBYFphARsCk6/tl36czH4oF5gTlhWCRy3upNzn+INk467hnCKt5xuse

31zhm+xQv/VN1poI0S/oCg9HLA9iKpoqGJByN32yoFr3QViLPqkmJ1v8EiH0Ns+1m3

32pP5YlVqdRCVrxgT80PIMsvQhfcuIrbbeiRDEUdEX7FqebuGCEa2757MTdW7UYQiB

337kgECMnwAOlJME8aDKnmTBajaMy6xCSC87V7wps=

34-----END CERTIFICATE-----

35`

36 testCA2Subj = "CN=oauth-proxy second test ca"

37 testCA2 = `-----BEGIN CERTIFICATE-----

38MIICxzCCAa+gAwIBAgIFAKuMKewwDQYJKoZIhvcNAQELBQAwJTEjMCEGA1UEAxMa

39b2F1dGgtcHJveHkgc2Vjb25kIHRlc3QgY2EwHhcNMTcxMDI1MTYxMTQxWhcNMTkx

40MDI1MTYxMTQxWjAlMSMwIQYDVQQDExpvYXV0aC1wcm94eSBzZWNvbmQgdGVzdCBj

41YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKdTkEOJ+QpOHy0PqGDR

42fu8NFyo7BJwAnI+P1G32UXMeecCwBgGJEyv6eHEFV6jH/U2K2H0hynaCFxRuIdTA

43EeS4s4BAbKqFhQ62I9lF3HVuqRPOe5FYdUl80eQynME22fWQ6/sZdQds0sFqaJBz

44R4KQQxVULT19Br/6zwQZZhC1NtzSwCqi4CoO2OM7ctUKRvtC87LNGWapz5I4eh0A

45/q4XJaSObsBCAJD7OVMa1LM3sSINUnvvGoSBKTuJ8MRk/BQRAO/PwXxsa+2h+k+w

46D6sLExrBgWzAAPQKRKF+nLYVhz9AKn4JBpZt9j4PvTKz1SDcJ5wVEzOfVmii7Ui3

47EFcCAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAiy58XvhOka3drXv2bwl95FwNtodj

48L2MmIdF0pp01O0ryREcC1kogamdOS/UHQs4okuCjwinR/UgU+cFGCDYHfeENtUTw

49Ox2OikYD7bXUpNzbQ4QyF0+cKwAgxD4ai5xSV/NUvMkL1aE8tLyxGm6VkhhyvxU1

50U9kvLha6KBWOCNd2fBJxgg8RAxFV3vR+xLdEtXnBAeTURrHM19gwMtd16y6gUZTZ

51Xbl3Ix0t2+sqi0hpEF/iVFdCp5TXiicSnZCtePzCfHePAEfbh5hS0bq8Lbb9DZ6d

52+2jX3AVuYhQPuutxla+vNp2XRcMTbzwXyi/Ig4nHKmPLFXsEbv+4tSwxyQ==

53-----END CERTIFICATE-----

54`

55)

57func makeTestCertFile(t *testing.T, pem, dir string) *os.File {

58 file, err := ioutil.TempFile(dir, "test-certfile")

59 assert.NoError(t, err)

60 _, err = file.Write([]byte(pem))

61 assert.NoError(t, err)

62 return file

63}

65func TestGetCertPool_NoRoots(t *testing.T) {

66 _, err := GetCertPool([]string(nil))

67 assert.Error(t, err, "invalid empty list of Root CAs file paths")

68}

70func TestGetCertPool(t *testing.T) {

71 tempDir, err := ioutil.TempDir("", "certtest")

72 assert.NoError(t, err)

73 defer func(path string) {

74 rerr := os.RemoveAll(path)

75 if rerr != nil {

76 panic(rerr)

77 }

78 }(tempDir)

80 certFile1 := makeTestCertFile(t, testCA1, tempDir)

81 certFile2 := makeTestCertFile(t, testCA2, tempDir)

83 certPool, err := GetCertPool([]string{certFile1.Name(), certFile2.Name()})

84 assert.NoError(t, err)

86 subj := certPool.Subjects()

87 got := make([]string, 0)

88 for i := range subj {

89 var subject pkix.RDNSequence

90 _, err := asn1.Unmarshal(subj[i], &subject)

91 assert.NoError(t, err)

92 got = append(got, subject.String())

93 }

95 expectedSubjects := []string{testCA1Subj, testCA2Subj}

96 assert.Equal(t, expectedSubjects, got)

97}