def test_child_expire_date_exceeds_parent_expire_date(self):
dn_ca = DistinguishedNameFactory(
countryName="NL",
stateOrProvinceName="Noord-Holland",
localityName="Amsterdam",
organizationName="Repleo",
organizationalUnitName="IT Department",
emailAddress="*****@*****.**",
commonName="test.bounca.org",
subjectAltNames=["demo.bounca.org"],
)
dn_im = DistinguishedNameFactory(
countryName="NL",
stateOrProvinceName="Noord-Holland",
localityName="Amsterdam",
organizationName="Repleo",
organizationalUnitName="IT Department",
emailAddress="*****@*****.**",
commonName="test.bounca.org",
subjectAltNames=["demo.bounca.org"],
)
ca = CertificateFactory(type=CertificateTypes.ROOT, dn=dn_ca)
ca.expires_at = arrow.get(timezone.now()).shift(years=+10).date()
ca.save()
cert = CertificateFactory(type=CertificateTypes.INTERMEDIATE,
parent=ca,
dn=dn_im)
cert.expires_at = arrow.get(timezone.now()).shift(years=+20).date()
with self.assertRaises(ValidationError) as c:
cert.save()
self.assertEqual(
c.exception.message,
"Child Certificate (expire date: {}) should not "
"expire later than parent CA (expire date: {})".format(
cert.expires_at, ca.expires_at),
)
def test_days_valid(self):
dn_ca = DistinguishedNameFactory(
countryName="NL",
stateOrProvinceName="Noord-Holland",
localityName="Amsterdam",
organizationName="Repleo",
organizationalUnitName="IT Department",
emailAddress="*****@*****.**",
commonName="test.bounca.org",
subjectAltNames=["demo.bounca.org"],
)
cert = CertificateFactory(dn=dn_ca, type=CertificateTypes.ROOT)
cert.expires_at = arrow.get(timezone.now()).shift(years=+10).date()
self.assertEqual(cert.days_valid, 3652)
cert.save()
cert.refresh_from_db()
self.assertEqual(cert.days_valid, 3652)
