Exemplo n.º 1
0
def test_create_certificates_ca_not_initialized(
        ca: certs.CertificateAuthority) -> None:
    with pytest.raises(RuntimeError,
                       match="Certificate authority is not initialized yet"):
        ca.create_site_certificate("xyz")
    with pytest.raises(RuntimeError,
                       match="Certificate authority is not initialized yet"):
        ca.create_agent_receiver_certificate()
Exemplo n.º 2
0
def test_write_agent_receiver_certificate(ca: CertificateAuthority) -> None:
    assert not ca.agent_receiver_certificate_exists

    ca.create_agent_receiver_certificate(days_valid=100)
    assert ca.agent_receiver_certificate_exists
    assert _file_permissions_is_660(ca._agent_receiver_cert_path)

    cert, key = load_cert_and_private_key(ca._agent_receiver_cert_path)
    assert check_cn(
        cert,
        "localhost",
    )
    check_certificate_against_private_key(
        cert,
        key,
    )
    check_certificate_against_public_key(
        cert,
        _rsa_public_key_from_cert_or_csr(ca.root_ca.cert),
    )
Exemplo n.º 3
0
def test_write_agent_receiver_certificate(
        ca: certs.CertificateAuthority) -> None:
    ca.initialize()
    assert not ca.agent_receiver_certificate_exists

    ca.create_agent_receiver_certificate()
    assert ca.agent_receiver_certificate_exists
    assert _file_permissions_is_660(ca._agent_receiver_cert_path)

    cert, key = load_cert_and_private_key(ca._agent_receiver_cert_path)
    assert check_cn(
        cert,
        "localhost",
    )
    check_certificate_against_private_key(
        cert,
        key,
    )
    check_certificate_against_public_key(
        cert,
        rsa_public_key_from_cert_or_csr(ca._get_root_certificate()[0]),
    )