From 1d7d8ef5aedd0e1b251352a5fec21c67f3450395 Mon Sep 17 00:00:00 2001 From: Klaus Fischer <klaus.fischer@eloware.com> Date: Mon, 21 Nov 2022 08:05:44 +0100 Subject: [PATCH] Added test Test Pki against production root --- ....json => ValidCertificateFromProdPki.json} | 0 EncryptionTests/EncryptionTests.csproj | 2 +- EncryptionTests/RootCertificatesTests.cs | 31 ++++++++++++++----- 3 files changed, 24 insertions(+), 9 deletions(-) rename EncryptionTests/Certificates/{ProdZustelldienst.json => ValidCertificateFromProdPki.json} (100%) diff --git a/EncryptionTests/Certificates/ProdZustelldienst.json b/EncryptionTests/Certificates/ValidCertificateFromProdPki.json similarity index 100% rename from EncryptionTests/Certificates/ProdZustelldienst.json rename to EncryptionTests/Certificates/ValidCertificateFromProdPki.json diff --git a/EncryptionTests/EncryptionTests.csproj b/EncryptionTests/EncryptionTests.csproj index eb6ef4a9..61c37172 100644 --- a/EncryptionTests/EncryptionTests.csproj +++ b/EncryptionTests/EncryptionTests.csproj @@ -31,7 +31,7 @@ <None Update="Test.pdf"> <CopyToOutputDirectory>Always</CopyToOutputDirectory> </None> - <None Update="Certificates\ProdZustelldienst.json"> + <None Update="Certificates\ValidCertificateFromProdPki.json"> <CopyToOutputDirectory>Always</CopyToOutputDirectory> </None> <None Update="Certificates\TestPkiRootCertificate.pem"> diff --git a/EncryptionTests/RootCertificatesTests.cs b/EncryptionTests/RootCertificatesTests.cs index 96b90183..643c2764 100644 --- a/EncryptionTests/RootCertificatesTests.cs +++ b/EncryptionTests/RootCertificatesTests.cs @@ -13,7 +13,7 @@ using NUnit.Framework; namespace SenderTest; public class RootCertificatesTests { - private ILogger _logger; + private ILogger? _logger; [OneTimeSetUp] public void OneTimeSetup() { @@ -28,7 +28,7 @@ public class RootCertificatesTests { public void LoadRootCertificates_ShouldPass() { // Act var certificates = CertificateHelper.GetRootCertificates().Result; - + // Assert certificates.Count.Should().BeGreaterThan(2); } @@ -36,9 +36,9 @@ public class RootCertificatesTests { [Test] public void ProdSubmission_ValidCertificate_ShouldPass() { // Arrange - var certificate = File.ReadAllText("./Certificates/ProdZustelldienst.json"); + var certificate = File.ReadAllText("./Certificates/ValidCertificateFromProdPki.json"); var key = new JsonWebKeySet(certificate).Keys.First(); - + // Act var result = new CertificateHelper(_logger).ValidateCertificate(key, null, LogLevel.Trace) .Result; @@ -50,14 +50,14 @@ public class RootCertificatesTests { [Test] public void TestPki_ValidCertificate_ShouldPass() { // Arrange - var certificate = - new JsonWebKeySet( - File.ReadAllText("./Certificates/ValidCertificateFromTestPki.json")); - var root = X509Certificate2.CreateFromPem( File.ReadAllText("./Certificates/TestPkiRootCertificate.pem")); + var certificate = + new JsonWebKeySet( + File.ReadAllText("./Certificates/ValidCertificateFromTestPki.json")); + // Act var result = new CertificateHelper(_logger) .ValidateCertificate(certificate, new[] { root }, LogLevel.Trace) @@ -85,6 +85,21 @@ public class RootCertificatesTests { // Assert result.Should().BeFalse(); + } + [Test] + public void TestPkiCertificate_ValidatesAgainstProdPki_ShouldFail() { + // Arrange + var keySetToBeTested = + new JsonWebKey( + File.ReadAllText("./Certificates/RevokedCertificate.json")); + + // Act + var result = + new CertificateHelper(_logger).ValidateCertificate(keySetToBeTested, + logLevel: LogLevel.Trace).Result; + + // Assert + result.Should().BeFalse(); } } -- GitLab