diff options
| author | Paul Kehrer <paul.l.kehrer@gmail.com> | 2015-07-01 21:07:37 -0500 |
|---|---|---|
| committer | Paul Kehrer <paul.l.kehrer@gmail.com> | 2015-07-10 11:11:19 -0500 |
| commit | a72ebaf84b9f41dcd9535ce9481ecc1966a7a930 (patch) | |
| tree | 98a87d0ce87feea26171a09730ad340a486745c3 /tests | |
| parent | cfb8aa2f39095d33d19b17123aed065dd5e9efd3 (diff) | |
| download | cryptography-a72ebaf84b9f41dcd9535ce9481ecc1966a7a930.tar.gz cryptography-a72ebaf84b9f41dcd9535ce9481ecc1966a7a930.tar.bz2 cryptography-a72ebaf84b9f41dcd9535ce9481ecc1966a7a930.zip | |
simplify and handle /32 and /128
Diffstat (limited to 'tests')
| -rw-r--r-- | tests/test_x509_ext.py | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/tests/test_x509_ext.py b/tests/test_x509_ext.py index 7a7e79e6..af0ffafb 100644 --- a/tests/test_x509_ext.py +++ b/tests/test_x509_ext.py @@ -2206,6 +2206,25 @@ class TestNameConstraintsExtension(object): ] ) + def test_single_ip_netmask(self, backend): + cert = _load_cert( + os.path.join( + "x509", "custom", "nc_single_ip_netmask.pem" + ), + x509.load_pem_x509_certificate, + backend + ) + nc = cert.extensions.get_extension_for_oid( + x509.OID_NAME_CONSTRAINTS + ).value + assert nc == x509.NameConstraints( + permitted_subtrees=[ + x509.IPAddress(ipaddress.IPv6Network(u"FF:0:0:0:0:0:0:0/128")), + x509.IPAddress(ipaddress.IPv4Network(u"192.168.0.1/32")), + ], + excluded_subtrees=None + ) + def test_invalid_netmask(self, backend): cert = _load_cert( os.path.join( |