cfssl/api/gencrl/gencrl_test.go at 45ffe16b32d600c3040b74fb3ac22e954cc23a6f · cloudflare/cfssl · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
package gencrl

import (
	"bytes"
	"encoding/json"
	"io"
	"net/http"
	"net/http/httptest"
	"os"
	"testing"

	"github.com/cloudflare/cfssl/api"
)

const (
	cert       = "../../crl/testdata/caTwo.pem"
	key        = "../../crl/testdata/ca-keyTwo.pem"
	serialList = "../../crl/testdata/serialList"
	expiryTime = "2000"
)

type testJSON struct {
	Certificate        string
	SerialNumber       []string
	CRLNumber          int64
	PrivateKey         string
	ExpiryTime         string
	ExpectedHTTPStatus int
	ExpectedSuccess    bool
}

var tester = testJSON{
	Certificate:        cert,
	SerialNumber:       []string{"1", "2", "3"},
	CRLNumber:          1,
	PrivateKey:         key,
	ExpiryTime:         "2000",
	ExpectedHTTPStatus: 200,
	ExpectedSuccess:    true,
}

func newTestHandler(t *testing.T) http.Handler {
	return NewHandler()
}

func TestNewHandler(t *testing.T) {
	newTestHandler(t)
}

func newCRLServer(t *testing.T) *httptest.Server {
	ts := httptest.NewServer(newTestHandler(t))
	return ts
}

func testCRLCreation(t *testing.T, issuingKey, certFile string, expiry string, serialList []string, number int64) (resp *http.Response, body []byte) {
	ts := newCRLServer(t)
	defer ts.Close()

	obj := map[string]interface{}{}

	if certFile != "" {
		c, err := os.ReadFile(certFile)
		if err != nil {
			t.Fatal(err)
		}
		obj["certificate"] = string(c)
	}

	obj["serialNumber"] = serialList
	obj["crlNumber"] = number

	if issuingKey != "" {
		c, err := os.ReadFile(issuingKey)
		if err != nil {
			t.Fatal(err)
		}
		obj["issuingKey"] = string(c)
	}

	obj["expireTime"] = expiry

	blob, err := json.Marshal(obj)
	if err != nil {
		t.Fatal(err)
	}

	resp, err = http.Post(ts.URL, "application/json", bytes.NewReader(blob))
	if err != nil {
		t.Fatal(err)
	}
	body, err = io.ReadAll(resp.Body)
	if err != nil {
		t.Fatal(err)
	}
	return
}

func TestCRL(t *testing.T) {
	resp, body := testCRLCreation(t, tester.PrivateKey, tester.Certificate, tester.ExpiryTime, tester.SerialNumber, tester.CRLNumber)
	if resp.StatusCode != tester.ExpectedHTTPStatus {
		t.Logf("expected: %d, have %d", tester.ExpectedHTTPStatus, resp.StatusCode)
		t.Fatal(resp.Status, tester.ExpectedHTTPStatus, string(body))
	}

	message := new(api.Response)
	err := json.Unmarshal(body, message)
	if err != nil {
		t.Logf("failed to read response body: %v", err)
		t.Fatal(resp.Status, tester.ExpectedHTTPStatus, message)
	}
}