github.com/zmap/zlint@v1.1.0/lints/lint_sub_cert_or_sub_ca_using_sha1_test.go (about)

     1  package lints
     2  
     3  /*
     4   * ZLint Copyright 2018 Regents of the University of Michigan
     5   *
     6   * Licensed under the Apache License, Version 2.0 (the "License"); you may not
     7   * use this file except in compliance with the License. You may obtain a copy
     8   * of the License at http://www.apache.org/licenses/LICENSE-2.0
     9   *
    10   * Unless required by applicable law or agreed to in writing, software
    11   * distributed under the License is distributed on an "AS IS" BASIS,
    12   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
    13   * implied. See the License for the specific language governing
    14   * permissions and limitations under the License.
    15   */
    16  
    17  import (
    18  	"testing"
    19  )
    20  
    21  // As a note, these certificates were not built, but instead grabbed from censys.io/query
    22  // using the following query to find the raw data and match it to validity period
    23  // select raw, parsed.validity.start from certificates.pemtificates where parsed.signature_algorithm.oid = "1.2.840.113549.1.1.5" limit 200
    24  
    25  func TestSHA1After2016(t *testing.T) {
    26  	inputPath := "../testlint/testCerts/rsawithsha1after2016.pem"
    27  	expected := Error
    28  	out := Lints["e_sub_cert_or_sub_ca_using_sha1"].Execute(ReadCertificate(inputPath))
    29  	if out.Status != expected {
    30  		t.Errorf("%s: expected %s, got %s", inputPath, expected, out.Status)
    31  	}
    32  }
    33  
    34  func TestSHA1Before2016(t *testing.T) {
    35  	inputPath := "../testlint/testCerts/rsawithsha1before2016.pem"
    36  	expected := NE
    37  	out := Lints["e_sub_cert_or_sub_ca_using_sha1"].Execute(ReadCertificate(inputPath))
    38  	if out.Status != expected {
    39  		t.Errorf("%s: expected %s, got %s", inputPath, expected, out.Status)
    40  	}
    41  }