github.com/myafeier/fabric@v1.0.1-0.20170722181825-3a4b1f2bce86/common/tools/cryptogen/ca/ca_test.go (about) 1 /* 2 Copyright IBM Corp. 2017 All Rights Reserved. 3 4 Licensed under the Apache License, Version 2.0 (the "License"); 5 you may not use this file except in compliance with the License. 6 You may obtain a copy of the License at 7 8 http://www.apache.org/licenses/LICENSE-2.0 9 10 Unless required by applicable law or agreed to in writing, software 11 distributed under the License is distributed on an "AS IS" BASIS, 12 WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13 See the License for the specific language governing permissions and 14 limitations under the License. 15 */ 16 package ca_test 17 18 import ( 19 "crypto/ecdsa" 20 "crypto/x509" 21 "os" 22 "path/filepath" 23 "testing" 24 25 "github.com/hyperledger/fabric/common/tools/cryptogen/ca" 26 "github.com/hyperledger/fabric/common/tools/cryptogen/csp" 27 "github.com/stretchr/testify/assert" 28 ) 29 30 const ( 31 testCAName = "root0" 32 testCA2Name = "root1" 33 testName = "cert0" 34 ) 35 36 var testDir = filepath.Join(os.TempDir(), "ca-test") 37 38 func TestNewCA(t *testing.T) { 39 40 caDir := filepath.Join(testDir, "ca") 41 rootCA, err := ca.NewCA(caDir, testCAName, testCAName) 42 assert.NoError(t, err, "Error generating CA") 43 assert.NotNil(t, rootCA, "Failed to return CA") 44 assert.NotNil(t, rootCA.Signer, 45 "rootCA.Signer should not be empty") 46 assert.IsType(t, &x509.Certificate{}, rootCA.SignCert, 47 "rootCA.SignCert should be type x509.Certificate") 48 49 // check to make sure the root public key was stored 50 pemFile := filepath.Join(caDir, testCAName+"-cert.pem") 51 assert.Equal(t, true, checkForFile(pemFile), 52 "Expected to find file "+pemFile) 53 cleanup(testDir) 54 55 } 56 57 func TestGenerateSignCertificate(t *testing.T) { 58 59 caDir := filepath.Join(testDir, "ca") 60 certDir := filepath.Join(testDir, "certs") 61 // generate private key 62 priv, _, err := csp.GeneratePrivateKey(certDir) 63 assert.NoError(t, err, "Failed to generate signed certificate") 64 65 // get EC public key 66 ecPubKey, err := csp.GetECPublicKey(priv) 67 assert.NoError(t, err, "Failed to generate signed certificate") 68 assert.NotNil(t, ecPubKey, "Failed to generate signed certificate") 69 70 // create our CA 71 rootCA, err := ca.NewCA(caDir, testCA2Name, testCA2Name) 72 assert.NoError(t, err, "Error generating CA") 73 74 cert, err := rootCA.SignCertificate(certDir, testName, nil, ecPubKey, 75 x509.KeyUsageDigitalSignature|x509.KeyUsageKeyEncipherment, 76 []x509.ExtKeyUsage{x509.ExtKeyUsageAny}) 77 assert.NoError(t, err, "Failed to generate signed certificate") 78 // KeyUsage should be x509.KeyUsageDigitalSignature | x509.KeyUsageKeyEncipherment 79 assert.Equal(t, x509.KeyUsageDigitalSignature|x509.KeyUsageKeyEncipherment, 80 cert.KeyUsage) 81 assert.Contains(t, cert.ExtKeyUsage, x509.ExtKeyUsageAny) 82 83 cert, err = rootCA.SignCertificate(certDir, testName, nil, ecPubKey, 84 x509.KeyUsageDigitalSignature, []x509.ExtKeyUsage{}) 85 assert.NoError(t, err, "Failed to generate signed certificate") 86 assert.Equal(t, 0, len(cert.ExtKeyUsage)) 87 88 // check to make sure the signed public key was stored 89 pemFile := filepath.Join(certDir, testName+"-cert.pem") 90 assert.Equal(t, true, checkForFile(pemFile), 91 "Expected to find file "+pemFile) 92 93 _, err = rootCA.SignCertificate(certDir, "empty/CA", nil, ecPubKey, 94 x509.KeyUsageKeyEncipherment, []x509.ExtKeyUsage{x509.ExtKeyUsageAny}) 95 assert.Error(t, err, "Bad name should fail") 96 97 // use an empty CA to test error path 98 badCA := &ca.CA{ 99 Name: "badCA", 100 SignCert: &x509.Certificate{}, 101 } 102 _, err = badCA.SignCertificate(certDir, testName, nil, &ecdsa.PublicKey{}, 103 x509.KeyUsageKeyEncipherment, []x509.ExtKeyUsage{x509.ExtKeyUsageAny}) 104 assert.Error(t, err, "Empty CA should not be able to sign") 105 cleanup(testDir) 106 107 } 108 109 func cleanup(dir string) { 110 os.RemoveAll(dir) 111 } 112 113 func checkForFile(file string) bool { 114 if _, err := os.Stat(file); os.IsNotExist(err) { 115 return false 116 } 117 return true 118 }