mirror of
https://github.com/internetee/registry.git
synced 2025-07-27 04:58:29 +02:00
ae96863b88
- Replace hardcoded P12 password with randomly generated one - Add p12_password column to certificates table - Update certificate serializer to include p12 password in response - Remove deprecated certificate revocation logic - Add tests for certificate revocation functionality - Implement async P12 generation via Sidekiq job - Add job uniqueness to prevent parallel certificate generation Migration changes: - Replace p12_password_digest with p12_password column - Add safety measures for column removal
44 lines
2.4 KiB
Ruby
44 lines
2.4 KiB
Ruby
require 'test_helper'
|
|
|
|
class CertificateTest < ActiveSupport::TestCase
|
|
setup do
|
|
@certificate = certificates(:api)
|
|
@certificate.update!(csr: "-----BEGIN CERTIFICATE REQUEST-----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\n2w9PGO061z+tntdRcKQGuEpnIr9U5Vs=\n-----END CERTIFICATE REQUEST-----\n")
|
|
end
|
|
|
|
def test_certificate_sign_returns_false
|
|
assert_not @certificate.sign!(password: ENV['ca_key_password']), 'false'
|
|
end
|
|
|
|
# Revocation tests
|
|
def test_revoke_with_valid_password
|
|
assert @certificate.revoke!(password: ENV['ca_key_password'])
|
|
assert @certificate.revoked?
|
|
assert_not_nil @certificate.revoked_at
|
|
assert_equal Certificate::REVOCATION_REASONS[:unspecified], @certificate.revoked_reason
|
|
end
|
|
|
|
def test_revoke_with_invalid_password
|
|
assert_not @certificate.revoke!(password: 'wrong_password')
|
|
assert_not @certificate.revoked?
|
|
assert_nil @certificate.revoked_at
|
|
assert_nil @certificate.revoked_reason
|
|
end
|
|
|
|
def test_revoke_updates_certificate_status
|
|
assert_equal Certificate::SIGNED, @certificate.status
|
|
@certificate.revoke!(password: ENV['ca_key_password'])
|
|
assert_equal Certificate::REVOKED, @certificate.status
|
|
end
|
|
|
|
def test_revokable_for_different_interfaces
|
|
@certificate.update!(interface: Certificate::REGISTRAR)
|
|
assert @certificate.revokable?
|
|
|
|
@certificate.update!(interface: Certificate::API)
|
|
assert_not @certificate.revokable?
|
|
|
|
@certificate.update!(interface: Certificate::REGISTRAR, crt: nil)
|
|
assert_not @certificate.revokable?
|
|
end
|
|
end
|