From a5f030cebb43d5b378c67d72bc8a0474d1ea846e Mon Sep 17 00:00:00 2001 From: Paul Kehrer Date: Tue, 28 Apr 2015 08:33:18 -0500 Subject: add support for ipaddress to general name parsing --- tests/test_x509_ext.py | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) (limited to 'tests') diff --git a/tests/test_x509_ext.py b/tests/test_x509_ext.py index 881dfbfa..5c35c970 100644 --- a/tests/test_x509_ext.py +++ b/tests/test_x509_ext.py @@ -809,3 +809,25 @@ class TestRSASubjectAlternativeNameExtension(object): u"lo", u"http://someregulardomain.com", ] + + def test_ipaddress(self, backend): + cert = _load_cert( + os.path.join( + "x509", "custom", "san_ipaddr.pem" + ), + x509.load_pem_x509_certificate, + backend + ) + ext = cert.extensions.get_extension_for_oid( + x509.OID_SUBJECT_ALTERNATIVE_NAME + ) + assert ext is not None + assert ext.critical is False + + san = ext.value + + ip = san.get_values_for_type(x509.IPAddress) + assert [ + ipaddress.ip_address(u"127.0.0.1"), + ipaddress.ip_address(u"ff::") + ] == ip -- cgit v1.2.3