def test_verify_valid_certificate(self, mock_utcnow, mock_get_cert):
mock_utcnow.return_value = datetime.datetime(2017, 1, 1)
certs = self.load_certificates(
['self_signed_cert.pem', 'self_signed_cert.der',
'signed_cert.pem']
)
mock_get_cert.side_effect = certs
cert_uuid = '3'
trusted_cert_uuids = ['1', '2']
certificate_utils.verify_certificate(
None, cert_uuid, trusted_cert_uuids
)
def _verify_certs(context, img_sig_cert_uuid, trusted_certs):
try:
certificate_utils.verify_certificate(
context=context,
certificate_uuid=img_sig_cert_uuid,
trusted_certificate_uuids=trusted_certs.ids)
LOG.debug('Image signature certificate validation '
'succeeded for certificate: %s',
img_sig_cert_uuid)
except cursive_exception.SignatureVerificationError as e:
LOG.warning('Image signature certificate validation '
'failed for certificate: %s',
img_sig_cert_uuid)
raise exception.CertificateValidationFailed(
cert_uuid=img_sig_cert_uuid, reason=six.text_type(e))
def _verify_certs(context, img_sig_cert_uuid, trusted_certs):
try:
certificate_utils.verify_certificate(
context=context,
certificate_uuid=img_sig_cert_uuid,
trusted_certificate_uuids=trusted_certs.ids)
LOG.debug(
'Image signature certificate validation '
'succeeded for certificate: %s', img_sig_cert_uuid)
except cursive_exception.SignatureVerificationError as e:
LOG.warning(
'Image signature certificate validation '
'failed for certificate: %s', img_sig_cert_uuid)
raise exception.CertificateValidationFailed(
cert_uuid=img_sig_cert_uuid, reason=six.text_type(e))