def test_create_certificates_ca_not_initialized( ca: certs.CertificateAuthority) -> None: with pytest.raises(RuntimeError, match="Certificate authority is not initialized yet"): ca.create_site_certificate("xyz") with pytest.raises(RuntimeError, match="Certificate authority is not initialized yet"): ca.create_agent_receiver_certificate()
def test_write_agent_receiver_certificate(ca: CertificateAuthority) -> None: assert not ca.agent_receiver_certificate_exists ca.create_agent_receiver_certificate(days_valid=100) assert ca.agent_receiver_certificate_exists assert _file_permissions_is_660(ca._agent_receiver_cert_path) cert, key = load_cert_and_private_key(ca._agent_receiver_cert_path) assert check_cn( cert, "localhost", ) check_certificate_against_private_key( cert, key, ) check_certificate_against_public_key( cert, _rsa_public_key_from_cert_or_csr(ca.root_ca.cert), )
def test_write_agent_receiver_certificate( ca: certs.CertificateAuthority) -> None: ca.initialize() assert not ca.agent_receiver_certificate_exists ca.create_agent_receiver_certificate() assert ca.agent_receiver_certificate_exists assert _file_permissions_is_660(ca._agent_receiver_cert_path) cert, key = load_cert_and_private_key(ca._agent_receiver_cert_path) assert check_cn( cert, "localhost", ) check_certificate_against_private_key( cert, key, ) check_certificate_against_public_key( cert, rsa_public_key_from_cert_or_csr(ca._get_root_certificate()[0]), )