From 47e9408311768cfdae8199bb2572ad0bcacbbb2b Mon Sep 17 00:00:00 2001 From: Ian Cordasco Date: Sun, 2 Aug 2015 11:34:47 -0500 Subject: Check for subject alternative name in test Slim RSA key too small test --- tests/test_x509.py | 23 ++++++++++++++++++----- 1 file changed, 18 insertions(+), 5 deletions(-) (limited to 'tests') diff --git a/tests/test_x509.py b/tests/test_x509.py index 088e617d..fb583965 100644 --- a/tests/test_x509.py +++ b/tests/test_x509.py @@ -819,6 +819,12 @@ class TestRSACertificateRequest(object): ) assert basic_constraints.value.ca is False assert basic_constraints.value.path_length is None + subject_alternative_name = cert.extensions.get_extension_for_oid( + x509.OID_SUBJECT_ALTERNATIVE_NAME + ) + assert list(subject_alternative_name.value) == [ + x509.DNSName(u"cryptography.io"), + ] class TestCertificateBuilder(object): @@ -1031,6 +1037,12 @@ class TestCertificateBuilder(object): ) assert basic_constraints.value.ca is False assert basic_constraints.value.path_length is None + subject_alternative_name = cert.extensions.get_extension_for_oid( + x509.OID_SUBJECT_ALTERNATIVE_NAME + ) + assert list(subject_alternative_name.value) == [ + x509.DNSName(u"cryptography.io"), + ] @pytest.mark.requires_backend_interface(interface=EllipticCurveBackend) @pytest.mark.requires_backend_interface(interface=X509Backend) @@ -1074,6 +1086,12 @@ class TestCertificateBuilder(object): ) assert basic_constraints.value.ca is False assert basic_constraints.value.path_length is None + subject_alternative_name = cert.extensions.get_extension_for_oid( + x509.OID_SUBJECT_ALTERNATIVE_NAME + ) + assert list(subject_alternative_name.value) == [ + x509.DNSName(u"cryptography.io"), + ] @pytest.mark.requires_backend_interface(interface=RSABackend) @pytest.mark.requires_backend_interface(interface=X509Backend) @@ -1092,11 +1110,6 @@ class TestCertificateBuilder(object): x509.NameAttribute(x509.OID_COUNTRY_NAME, u'US'), ])).public_key( subject_private_key.public_key() - ).add_extension( - x509.BasicConstraints(ca=False, path_length=None), True, - ).add_extension( - x509.SubjectAlternativeName([x509.DNSName(u"cryptography.io")]), - critical=False, ).not_valid_before( not_valid_before ).not_valid_after( -- cgit v1.2.3