aboutsummaryrefslogtreecommitdiffstats
path: root/tests
diff options
context:
space:
mode:
authorIan Cordasco <graffatcolmingov@gmail.com>2015-08-02 11:34:47 -0500
committerIan Cordasco <graffatcolmingov@gmail.com>2015-08-02 14:00:37 -0500
commit47e9408311768cfdae8199bb2572ad0bcacbbb2b (patch)
tree29958c8a3cfe1d635479f4b40cde178e1bbc238b /tests
parent8f57142489a0d0d832b0ba7fa56eec84e1f00cc4 (diff)
downloadcryptography-47e9408311768cfdae8199bb2572ad0bcacbbb2b.tar.gz
cryptography-47e9408311768cfdae8199bb2572ad0bcacbbb2b.tar.bz2
cryptography-47e9408311768cfdae8199bb2572ad0bcacbbb2b.zip
Check for subject alternative name in test
Slim RSA key too small test
Diffstat (limited to 'tests')
-rw-r--r--tests/test_x509.py23
1 files changed, 18 insertions, 5 deletions
diff --git a/tests/test_x509.py b/tests/test_x509.py
index 088e617d..fb583965 100644
--- a/tests/test_x509.py
+++ b/tests/test_x509.py
@@ -819,6 +819,12 @@ class TestRSACertificateRequest(object):
)
assert basic_constraints.value.ca is False
assert basic_constraints.value.path_length is None
+ subject_alternative_name = cert.extensions.get_extension_for_oid(
+ x509.OID_SUBJECT_ALTERNATIVE_NAME
+ )
+ assert list(subject_alternative_name.value) == [
+ x509.DNSName(u"cryptography.io"),
+ ]
class TestCertificateBuilder(object):
@@ -1031,6 +1037,12 @@ class TestCertificateBuilder(object):
)
assert basic_constraints.value.ca is False
assert basic_constraints.value.path_length is None
+ subject_alternative_name = cert.extensions.get_extension_for_oid(
+ x509.OID_SUBJECT_ALTERNATIVE_NAME
+ )
+ assert list(subject_alternative_name.value) == [
+ x509.DNSName(u"cryptography.io"),
+ ]
@pytest.mark.requires_backend_interface(interface=EllipticCurveBackend)
@pytest.mark.requires_backend_interface(interface=X509Backend)
@@ -1074,6 +1086,12 @@ class TestCertificateBuilder(object):
)
assert basic_constraints.value.ca is False
assert basic_constraints.value.path_length is None
+ subject_alternative_name = cert.extensions.get_extension_for_oid(
+ x509.OID_SUBJECT_ALTERNATIVE_NAME
+ )
+ assert list(subject_alternative_name.value) == [
+ x509.DNSName(u"cryptography.io"),
+ ]
@pytest.mark.requires_backend_interface(interface=RSABackend)
@pytest.mark.requires_backend_interface(interface=X509Backend)
@@ -1092,11 +1110,6 @@ class TestCertificateBuilder(object):
x509.NameAttribute(x509.OID_COUNTRY_NAME, u'US'),
])).public_key(
subject_private_key.public_key()
- ).add_extension(
- x509.BasicConstraints(ca=False, path_length=None), True,
- ).add_extension(
- x509.SubjectAlternativeName([x509.DNSName(u"cryptography.io")]),
- critical=False,
).not_valid_before(
not_valid_before
).not_valid_after(