Changeset - 92e93e67b2b6
Parent rev.
Child rev.
[Not reviewed]
0 3 0
Branko Majic (branko) - 4 years ago 2020-07-08 23:53:44
branko@majic.rs
GC-37: Update status command to include relevant/correct information about ECDSA algorithms:

- Updated functional test to include case where CA hierarchy has been
initialised with the ECDSA keys.
- Updated unit tests to include testing of output for entities that
use ECDSA keys.
- Use the key_specification_from_public_key function to obtain
information about key in use (instead of assuming it's RSA).
3 files changed with 51 insertions and 3 deletions:
functional_tests/test_status.py
15
gimmecert/commands.py
4
3
tests/test_commands.py
32
0 comments (0 inline, 0 general)
functional_tests/test_status.py
➞
Show inline comments
 
@@ -69,12 +69,13 @@ def test_status_on_uninitialised_directory(tmpdir):
 
    assert exit_code == 0
 
    assert "CA hierarchy has not been initialised in current directory." in stdout
 

			




	
	
	
		
 

			




	
	
	
		
 
@pytest.mark.parametrize("ca_key_specification, default_key_representation", [

			




	
	
	
		
 
    ("rsa:2048", "2048-bit RSA"),

			




	
	
	
		
 
    ("ecdsa:secp521r1", "secp521r1 ECDSA"),

			




	
	
	
		
 
])

			




	
	
	
		
 
def test_status_on_initialised_directory(tmpdir, ca_key_specification, default_key_representation):

			




	
	
	
		
 
    # John is interested in finding out a bit more about what

			




	
	
	
		
 
    # certificates have been already issued in one of the projects he

			




	
	
	
		
 
    # had initialised before.

			




	
	
	
		
 
    tmpdir.chdir()

			




	
	
		
 
@@ -83,18 +84,20 @@ def test_status_on_initialised_directory(tmpdir, ca_key_specification, default_k

			




	
	
	
		
 

			




	
	
	
		
 
    run_command('gimmecert', 'server', 'myserver1', '-k', 'rsa:1024')

			




	
	
	
		
 
    run_command('gimmecert', 'server', 'myserver2', 'myservice.example.com', 'myotherservice.example.com')

			




	
	
	
		
 
    run_command("openssl", "req", "-new", "-newkey", "rsa:2048", "-nodes", "-keyout", "myserver3.key.pem",

			




	
	
	
		
 
                "-subj", "/CN=myserver3", "-out", "myserver3.csr.pem")

			




	
	
	
		
 
    run_command('gimmecert', 'server', '--csr', 'myserver3.csr.pem', 'myserver3')

			




	
	
	
		
 
    run_command('gimmecert', 'server', 'myserver4', '-k', 'ecdsa:secp256r1')

			




	
	
	
		
 

			




	
	
	
		
 
    run_command('gimmecert', 'client', 'myclient1', '-k', 'rsa:1024')

			




	
	
	
		
 
    run_command('gimmecert', 'client', 'myclient2')

			




	
	
	
		
 
    run_command("openssl", "req", "-new", "-newkey", "rsa:2048", "-nodes", "-keyout", "myclient3.key.pem",

			




	
	
	
		
 
                "-subj", "/CN=myclient3", "-out", "myclient3.csr.pem")

			




	
	
	
		
 
    run_command('gimmecert', 'client', '--csr', 'myclient3.csr.pem', 'myclient3')

			




	
	
	
		
 
    run_command('gimmecert', 'client', 'myclient4', '-k', 'ecdsa:secp192r1')

			




	
	
	
		
 

			




	
	
	
		
 
    # John switches to project directory.

			




	
	
	
		
 
    tmpdir.chdir()

			




	
	
	
		
 

			




	
	
	
		
 
    # John runs the status command.

			




	
	
	
		
 
    stdout, stderr, exit_code = run_command('gimmecert', 'status')

			




	
	
		
 
@@ -146,12 +149,13 @@ def test_status_on_initialised_directory(tmpdir, ca_key_specification, default_k

			




	
	
	
		
 
    # not before, not after, and included DNS names. Information for

			




	
	
	
		
 
    # each server is followed by key algorithm information, and paths

			




	
	
	
		
 
    # to private key and certificate.

			




	
	
	
		
 
    index_myserver1 = stdout_lines.index("CN=myserver1")  # Should not raise

			




	
	
	
		
 
    index_myserver2 = stdout_lines.index("CN=myserver2")  # Should not raise

			




	
	
	
		
 
    index_myserver3 = stdout_lines.index("CN=myserver3")  # Should not raise

			




	
	
	
		
 
    index_myserver4 = stdout_lines.index("CN=myserver4")  # Should not raise

			




	
	
	
		
 

			




	
	
	
		
 
    assert stdout_lines[index_myserver1+1].startswith("    Validity: ")

			




	
	
	
		
 
    assert stdout_lines[index_myserver1+2] == "    DNS: myserver1"

			




	
	
	
		
 
    assert stdout_lines[index_myserver1+3] == "    Key algorithm: 1024-bit RSA"

			




	
	
	
		
 
    assert stdout_lines[index_myserver1+4] == "    Private key: .gimmecert/server/myserver1.key.pem"

			




	
	
	
		
 
    assert stdout_lines[index_myserver1+5] == "    Certificate: .gimmecert/server/myserver1.cert.pem"

			




	
	
		
 
@@ -165,19 +169,25 @@ def test_status_on_initialised_directory(tmpdir, ca_key_specification, default_k

			




	
	
	
		
 
    assert stdout_lines[index_myserver3+1].startswith("    Validity: ")

			




	
	
	
		
 
    assert stdout_lines[index_myserver3+2] == "    DNS: myserver3"

			




	
	
	
		
 
    assert stdout_lines[index_myserver3+3] == "    Key algorithm: 2048-bit RSA"

			




	
	
	
		
 
    assert stdout_lines[index_myserver3+4] == "    CSR: .gimmecert/server/myserver3.csr.pem"

			




	
	
	
		
 
    assert stdout_lines[index_myserver3+5] == "    Certificate: .gimmecert/server/myserver3.cert.pem"

			




	
	
	
		
 

			




	
	
	
		
 
    assert stdout_lines[index_myserver4+2] == "    DNS: myserver4"

			




	
	
	
		
 
    assert stdout_lines[index_myserver4+3] == "    Key algorithm: secp256r1 ECDSA"

			




	
	
	
		
 
    assert stdout_lines[index_myserver4+4] == "    Private key: .gimmecert/server/myserver4.key.pem"

			




	
	
	
		
 
    assert stdout_lines[index_myserver4+5] == "    Certificate: .gimmecert/server/myserver4.cert.pem"

			




	
	
	
		
 

			




	
	
	
		
 
    # For client certificates, John can see that for each certificate

			




	
	
	
		
 
    # he can see its subject DN and validity. Information for each

			




	
	
	
		
 
    # client is followed by key algorithm and paths to private key and

			




	
	
	
		
 
    # certificate.

			




	
	
	
		
 
    index_myclient1 = stdout_lines.index("CN=myclient1")  # Should not raise

			




	
	
	
		
 
    index_myclient2 = stdout_lines.index("CN=myclient2")  # Should not raise

			




	
	
	
		
 
    index_myclient3 = stdout_lines.index("CN=myclient3")  # Should not raise

			




	
	
	
		
 
    index_myclient4 = stdout_lines.index("CN=myclient4")  # Should not raise

			




	
	
	
		
 

			




	
	
	
		
 
    assert stdout_lines[index_myclient1+1].startswith("    Validity: ")

			




	
	
	
		
 
    assert stdout_lines[index_myclient1+2] == "    Key algorithm: 1024-bit RSA"

			




	
	
	
		
 
    assert stdout_lines[index_myclient1+3] == "    Private key: .gimmecert/client/myclient1.key.pem"

			




	
	
	
		
 
    assert stdout_lines[index_myclient1+4] == "    Certificate: .gimmecert/client/myclient1.cert.pem"

			




	
	
	
		
 

			




	
	
		
 
@@ -187,6 +197,11 @@ def test_status_on_initialised_directory(tmpdir, ca_key_specification, default_k

			




	
	
	
		
 
    assert stdout_lines[index_myclient2+4] == "    Certificate: .gimmecert/client/myclient2.cert.pem"

			




	
	
	
		
 

			




	
	
	
		
 
    assert stdout_lines[index_myclient3+1].startswith("    Validity: ")

			




	
	
	
		
 
    assert stdout_lines[index_myclient3+2] == "    Key algorithm: 2048-bit RSA"

			




	
	
	
		
 
    assert stdout_lines[index_myclient3+3] == "    CSR: .gimmecert/client/myclient3.csr.pem"

			




	
	
	
		
 
    assert stdout_lines[index_myclient3+4] == "    Certificate: .gimmecert/client/myclient3.cert.pem"

			




	
	
	
		
 

			




	
	
	
		
 
    assert stdout_lines[index_myclient4+1].startswith("    Validity: ")

			




	
	
	
		
 
    assert stdout_lines[index_myclient4+2] == "    Key algorithm: secp192r1 ECDSA"

			




	
	
	
		
 
    assert stdout_lines[index_myclient4+3] == "    Private key: .gimmecert/client/myclient4.key.pem"

			




	
	
	
		
 
    assert stdout_lines[index_myclient4+4] == "    Certificate: .gimmecert/client/myclient4.cert.pem"

			




        

    


    
    

    

        

                

                    gimmecert/commands.py
                

                

                  
                      
                        

                      ➞

                      
                        
                  

                  
                      
                  
                      
                  
                      
                  
                      
                  
                  
                

                

                    Show inline comments
                    
                

        

        

            



	
	
		
 
@@ -539,13 +539,14 @@ def status(stdout, stderr, project_directory):

			




	
	
	
		
 

			




	
	
	
		
 
    print(get_section_title("CA hierarchy"), file=stdout)

			




	
	
	
		
 

			




	
	
	
		
 
    ca_hierarchy = gimmecert.storage.read_ca_hierarchy(os.path.join(project_directory, '.gimmecert', 'ca'))

			




	
	
	
		
 

			




	
	
	
		
 
    # Derive key specification from the issuing CA certificate.

			




	
	
	
		
 
    key_algorithm = gimmecert.crypto.KeyGenerator('rsa', ca_hierarchy[-1][1].public_key().key_size)

			




	
	
	
		
 
    key_specification = gimmecert.crypto.key_specification_from_public_key(ca_hierarchy[-1][1].public_key())

			




	
	
	
		
 
    key_algorithm = gimmecert.crypto.KeyGenerator(key_specification[0], key_specification[1])

			




	
	
	
		
 
    print("", file=stdout)  # Separator

			




	
	
	
		
 
    print("Default key algorithm: %s" % key_algorithm, file=stdout)

			




	
	
	
		
 

			




	
	
	
		
 
    for i, (_, certificate) in enumerate(ca_hierarchy, 1):

			




	
	
	
		
 
        # Separator.

			




	
	
	
		
 
        print("", file=stdout)

			




	
	
		
 
@@ -581,13 +582,13 @@ def status(stdout, stderr, project_directory):

			




	
	
	
		
 

			




	
	
	
		
 
    if certificate_files:

			




	
	
	
		
 
        for certificate_file in certificate_files:

			




	
	
	
		
 
            certificate = gimmecert.storage.read_certificate(os.path.join(project_directory, '.gimmecert', 'server', certificate_file))

			




	
	
	
		
 
            private_key_path = os.path.join(project_directory, '.gimmecert', 'server', certificate_file.replace('.cert.pem', '.key.pem'))

			




	
	
	
		
 
            csr_path = os.path.join(project_directory, '.gimmecert', 'server', certificate_file.replace('.cert.pem', '.csr.pem'))

			




	
	
	
		
 
            key_algorithm = str(gimmecert.crypto.KeyGenerator("rsa", certificate.public_key().key_size))

			




	
	
	
		
 
            key_algorithm = str(gimmecert.crypto.KeyGenerator(*gimmecert.crypto.key_specification_from_public_key(certificate.public_key())))

			




	
	
	
		
 

			




	
	
	
		
 
            # Separator.

			




	
	
	
		
 
            print("", file=stdout)

			




	
	
	
		
 

			




	
	
	
		
 
            if certificate.not_valid_before > now:

			




	
	
	
		
 
                validity_status = " [NOT VALID YET]"

			




	
	
		
 
@@ -623,13 +624,13 @@ def status(stdout, stderr, project_directory):

			




	
	
	
		
 

			




	
	
	
		
 
    if certificate_files:

			




	
	
	
		
 
        for certificate_file in certificate_files:

			




	
	
	
		
 
            certificate = gimmecert.storage.read_certificate(os.path.join(project_directory, '.gimmecert', 'client', certificate_file))

			




	
	
	
		
 
            private_key_path = os.path.join(project_directory, '.gimmecert', 'client', certificate_file.replace('.cert.pem', '.key.pem'))

			




	
	
	
		
 
            csr_path = os.path.join(project_directory, '.gimmecert', 'client', certificate_file.replace('.cert.pem', '.csr.pem'))

			




	
	
	
		
 
            key_algorithm = str(gimmecert.crypto.KeyGenerator("rsa", certificate.public_key().key_size))

			




	
	
	
		
 
            key_algorithm = str(gimmecert.crypto.KeyGenerator(*gimmecert.crypto.key_specification_from_public_key(certificate.public_key())))

			




	
	
	
		
 

			




	
	
	
		
 
            # Separator.

			




	
	
	
		
 
            print("", file=stdout)

			




	
	
	
		
 

			




	
	
	
		
 
            if certificate.not_valid_before > now:

			




	
	
	
		
 
                validity_status = " [NOT VALID YET]"

			




        

    


    
    

    

        

                

                    tests/test_commands.py
                

                

                  
                      
                        

                      ➞

                      
                        
                  

                  
                      
                  
                      
                  
                      
                  
                      
                  
                  
                

                

                    Show inline comments
                    
                

        

        

            



	
	
		
 
@@ -21,12 +21,13 @@

			




	
	
	
		
 
import argparse

			




	
	
	
		
 
import io

			




	
	
	
		
 
import os

			




	
	
	
		
 
import sys

			




	
	
	
		
 

			




	
	
	
		
 
import cryptography.x509

			




	
	
	
		
 
from cryptography.hazmat.primitives.asymmetric import ec

			




	
	
	
		
 

			




	
	
	
		
 
import gimmecert.commands

			




	
	
	
		
 
import gimmecert.crypto

			




	
	
	
		
 

			




	
	
	
		
 
import pytest

			




	
	
	
		
 
from unittest import mock

			




	
	
		
 
@@ -628,12 +629,13 @@ def test_status_reports_uninitialised_directory(tmpdir):

			




	
	
	
		
 
    assert "CA hierarchy has not been initialised in current directory." in stdout

			




	
	
	
		
 

			




	
	
	
		
 

			




	
	
	
		
 
@pytest.mark.parametrize('ca_key_specification,ca_key_representation', [

			




	
	
	
		
 
    (('rsa', 1024), '1024-bit RSA'),

			




	
	
	
		
 
    (('rsa', 2048), '2048-bit RSA'),

			




	
	
	
		
 
    (('ecdsa', ec.SECP521R1), 'secp521r1 ECDSA'),

			




	
	
	
		
 
])

			




	
	
	
		
 
def test_status_reports_ca_hierarchy_information(tmpdir, ca_key_specification, ca_key_representation):

			




	
	
	
		
 
    stdout_stream = io.StringIO()

			




	
	
	
		
 
    stderr_stream = io.StringIO()

			




	
	
	
		
 

			




	
	
	
		
 
    with freeze_time('2018-01-01 00:15:00'):

			




	
	
		
 
@@ -695,12 +697,15 @@ def test_status_reports_server_certificate_information(tmpdir):

			




	
	
	
		
 
    with freeze_time('2018-03-01 00:15:00'):

			




	
	
	
		
 
        gimmecert.commands.server(io.StringIO(), io.StringIO(), tmpdir.strpath, 'myserver2', ['myservice1.example.com', 'myservice2.example.com'], None, None)

			




	
	
	
		
 

			




	
	
	
		
 
    with freeze_time('2018-04-01 00:15:00'):

			




	
	
	
		
 
        gimmecert.commands.server(io.StringIO(), io.StringIO(), tmpdir.strpath, 'myserver3', None, myserver3_csr_file.strpath, None)

			




	
	
	
		
 

			




	
	
	
		
 
    with freeze_time('2018-05-01 00:15:00'):

			




	
	
	
		
 
        gimmecert.commands.server(io.StringIO(), io.StringIO(), tmpdir.strpath, 'myserver4', None, None, ("ecdsa", ec.SECP256R1))

			




	
	
	
		
 

			




	
	
	
		
 
    with freeze_time('2018-06-01 00:15:00'):

			




	
	
	
		
 
        status_code = gimmecert.commands.status(stdout_stream, stderr_stream, tmpdir.strpath)

			




	
	
	
		
 

			




	
	
	
		
 
    stdout = stdout_stream.getvalue()

			




	
	
	
		
 
    stdout_lines = stdout.split("\n")

			




	
	
	
		
 
    stderr = stderr_stream.getvalue()

			




	
	
		
 
@@ -710,12 +715,13 @@ def test_status_reports_server_certificate_information(tmpdir):

			




	
	
	
		
 
    assert "Server certificates\n-------------------\n" in stdout

			




	
	
	
		
 
    assert "No server certificates" not in stdout

			




	
	
	
		
 

			




	
	
	
		
 
    index_myserver1 = stdout_lines.index("CN=myserver1")  # Should not raise

			




	
	
	
		
 
    index_myserver2 = stdout_lines.index("CN=myserver2")  # Should not raise

			




	
	
	
		
 
    index_myserver3 = stdout_lines.index("CN=myserver3")  # Should not raise

			




	
	
	
		
 
    index_myserver4 = stdout_lines.index("CN=myserver4")  # Should not raise

			




	
	
	
		
 

			




	
	
	
		
 
    myserver1_validity = stdout_lines[index_myserver1 + 1]

			




	
	
	
		
 
    myserver1_dns = stdout_lines[index_myserver1 + 2]

			




	
	
	
		
 
    myserver1_key_algorithm = stdout_lines[index_myserver1 + 3]

			




	
	
	
		
 
    myserver1_private_key_path = stdout_lines[index_myserver1 + 4]

			




	
	
	
		
 
    myserver1_certificate_path = stdout_lines[index_myserver1 + 5]

			




	
	
		
 
@@ -729,12 +735,18 @@ def test_status_reports_server_certificate_information(tmpdir):

			




	
	
	
		
 
    myserver3_validity = stdout_lines[index_myserver3 + 1]

			




	
	
	
		
 
    myserver3_dns = stdout_lines[index_myserver3 + 2]

			




	
	
	
		
 
    myserver3_key_algorithm = stdout_lines[index_myserver3 + 3]

			




	
	
	
		
 
    myserver3_csr_path = stdout_lines[index_myserver3 + 4]

			




	
	
	
		
 
    myserver3_certificate_path = stdout_lines[index_myserver3 + 5]

			




	
	
	
		
 

			




	
	
	
		
 
    myserver4_validity = stdout_lines[index_myserver4 + 1]

			




	
	
	
		
 
    myserver4_dns = stdout_lines[index_myserver4 + 2]

			




	
	
	
		
 
    myserver4_key_algorithm = stdout_lines[index_myserver4 + 3]

			




	
	
	
		
 
    myserver4_private_key_path = stdout_lines[index_myserver4 + 4]

			




	
	
	
		
 
    myserver4_certificate_path = stdout_lines[index_myserver4 + 5]

			




	
	
	
		
 

			




	
	
	
		
 
    assert myserver1_validity == "    Validity: 2018-02-01 00:00:00 UTC - 2019-01-01 00:15:00 UTC"

			




	
	
	
		
 
    assert myserver1_dns == "    DNS: myserver1"

			




	
	
	
		
 
    assert myserver1_key_algorithm == "    Key algorithm: 1024-bit RSA"

			




	
	
	
		
 
    assert myserver1_private_key_path == "    Private key: .gimmecert/server/myserver1.key.pem"

			




	
	
	
		
 
    assert myserver1_certificate_path == "    Certificate: .gimmecert/server/myserver1.cert.pem"

			




	
	
	
		
 

			




	
	
		
 
@@ -747,12 +759,18 @@ def test_status_reports_server_certificate_information(tmpdir):

			




	
	
	
		
 
    assert myserver3_validity == "    Validity: 2018-04-01 00:00:00 UTC - 2019-01-01 00:15:00 UTC"

			




	
	
	
		
 
    assert myserver3_dns == "    DNS: myserver3"

			




	
	
	
		
 
    assert myserver3_key_algorithm == "    Key algorithm: 2048-bit RSA"

			




	
	
	
		
 
    assert myserver3_csr_path == "    CSR: .gimmecert/server/myserver3.csr.pem"

			




	
	
	
		
 
    assert myserver3_certificate_path == "    Certificate: .gimmecert/server/myserver3.cert.pem"

			




	
	
	
		
 

			




	
	
	
		
 
    assert myserver4_validity == "    Validity: 2018-05-01 00:00:00 UTC - 2019-01-01 00:15:00 UTC"

			




	
	
	
		
 
    assert myserver4_dns == "    DNS: myserver4"

			




	
	
	
		
 
    assert myserver4_key_algorithm == "    Key algorithm: secp256r1 ECDSA"

			




	
	
	
		
 
    assert myserver4_private_key_path == "    Private key: .gimmecert/server/myserver4.key.pem"

			




	
	
	
		
 
    assert myserver4_certificate_path == "    Certificate: .gimmecert/server/myserver4.cert.pem"

			




	
	
	
		
 

			




	
	
	
		
 

			




	
	
	
		
 
def test_status_reports_client_certificate_information(tmpdir):

			




	
	
	
		
 
    stdout_stream = io.StringIO()

			




	
	
	
		
 
    stderr_stream = io.StringIO()

			




	
	
	
		
 

			




	
	
	
		
 
    myclient3_csr_file = tmpdir.join('client3.csr.pem')

			




	
	
		
 
@@ -769,12 +787,15 @@ def test_status_reports_client_certificate_information(tmpdir):

			




	
	
	
		
 
    with freeze_time('2018-03-01 00:15:00'):

			




	
	
	
		
 
        gimmecert.commands.client(io.StringIO(), io.StringIO(), tmpdir.strpath, 'myclient2', None, None)

			




	
	
	
		
 

			




	
	
	
		
 
    with freeze_time('2018-04-01 00:15:00'):

			




	
	
	
		
 
        gimmecert.commands.client(io.StringIO(), io.StringIO(), tmpdir.strpath, 'myclient3', myclient3_csr_file.strpath, None)

			




	
	
	
		
 

			




	
	
	
		
 
    with freeze_time('2018-05-01 00:15:00'):

			




	
	
	
		
 
        gimmecert.commands.client(io.StringIO(), io.StringIO(), tmpdir.strpath, 'myclient4', None, ("ecdsa", ec.SECP384R1))

			




	
	
	
		
 

			




	
	
	
		
 
    with freeze_time('2018-06-01 00:15:00'):

			




	
	
	
		
 
        status_code = gimmecert.commands.status(stdout_stream, stderr_stream, tmpdir.strpath)

			




	
	
	
		
 

			




	
	
	
		
 
    stdout = stdout_stream.getvalue()

			




	
	
	
		
 
    stdout_lines = stdout.split("\n")

			




	
	
	
		
 
    stderr = stderr_stream.getvalue()

			




	
	
		
 
@@ -784,12 +805,13 @@ def test_status_reports_client_certificate_information(tmpdir):

			




	
	
	
		
 
    assert "Client certificates\n-------------------\n" in stdout

			




	
	
	
		
 
    assert "No client certificates" not in stdout

			




	
	
	
		
 

			




	
	
	
		
 
    index_myclient1 = stdout_lines.index("CN=myclient1")  # Should not raise

			




	
	
	
		
 
    index_myclient2 = stdout_lines.index("CN=myclient2")  # Should not raise

			




	
	
	
		
 
    index_myclient3 = stdout_lines.index("CN=myclient3")  # Should not raise

			




	
	
	
		
 
    index_myclient4 = stdout_lines.index("CN=myclient4")  # Should not raise

			




	
	
	
		
 

			




	
	
	
		
 
    myclient1_validity = stdout_lines[index_myclient1 + 1]

			




	
	
	
		
 
    myclient1_key_algorithm = stdout_lines[index_myclient1 + 2]

			




	
	
	
		
 
    myclient1_private_key_path = stdout_lines[index_myclient1 + 3]

			




	
	
	
		
 
    myclient1_certificate_path = stdout_lines[index_myclient1 + 4]

			




	
	
	
		
 

			




	
	
		
 
@@ -800,12 +822,17 @@ def test_status_reports_client_certificate_information(tmpdir):

			




	
	
	
		
 

			




	
	
	
		
 
    myclient3_validity = stdout_lines[index_myclient3 + 1]

			




	
	
	
		
 
    myclient3_key_algorithm = stdout_lines[index_myclient3 + 2]

			




	
	
	
		
 
    myclient3_csr_path = stdout_lines[index_myclient3 + 3]

			




	
	
	
		
 
    myclient3_certificate_path = stdout_lines[index_myclient3 + 4]

			




	
	
	
		
 

			




	
	
	
		
 
    myclient4_validity = stdout_lines[index_myclient4 + 1]

			




	
	
	
		
 
    myclient4_key_algorithm = stdout_lines[index_myclient4 + 2]

			




	
	
	
		
 
    myclient4_private_key_path = stdout_lines[index_myclient4 + 3]

			




	
	
	
		
 
    myclient4_certificate_path = stdout_lines[index_myclient4 + 4]

			




	
	
	
		
 

			




	
	
	
		
 
    assert myclient1_validity == "    Validity: 2018-02-01 00:00:00 UTC - 2019-01-01 00:15:00 UTC"

			




	
	
	
		
 
    assert myclient1_key_algorithm == "    Key algorithm: 1024-bit RSA"

			




	
	
	
		
 
    assert myclient1_private_key_path == "    Private key: .gimmecert/client/myclient1.key.pem"

			




	
	
	
		
 
    assert myclient1_certificate_path == "    Certificate: .gimmecert/client/myclient1.cert.pem"

			




	
	
	
		
 

			




	
	
	
		
 
    assert myclient2_validity == "    Validity: 2018-03-01 00:00:00 UTC - 2019-01-01 00:15:00 UTC"

			




	
	
		
 
@@ -815,12 +842,17 @@ def test_status_reports_client_certificate_information(tmpdir):

			




	
	
	
		
 

			




	
	
	
		
 
    assert myclient3_validity == "    Validity: 2018-04-01 00:00:00 UTC - 2019-01-01 00:15:00 UTC"

			




	
	
	
		
 
    assert myclient3_key_algorithm == "    Key algorithm: 2048-bit RSA"

			




	
	
	
		
 
    assert myclient3_csr_path == "    CSR: .gimmecert/client/myclient3.csr.pem"

			




	
	
	
		
 
    assert myclient3_certificate_path == "    Certificate: .gimmecert/client/myclient3.cert.pem"

			




	
	
	
		
 

			




	
	
	
		
 
    assert myclient4_validity == "    Validity: 2018-05-01 00:00:00 UTC - 2019-01-01 00:15:00 UTC"

			




	
	
	
		
 
    assert myclient4_key_algorithm == "    Key algorithm: secp384r1 ECDSA"

			




	
	
	
		
 
    assert myclient4_private_key_path == "    Private key: .gimmecert/client/myclient4.key.pem"

			




	
	
	
		
 
    assert myclient4_certificate_path == "    Certificate: .gimmecert/client/myclient4.cert.pem"

			




	
	
	
		
 

			




	
	
	
		
 

			




	
	
	
		
 
def test_status_reports_no_server_certificates_were_issued(tmpdir):

			




	
	
	
		
 
    stdout_stream = io.StringIO()

			




	
	
	
		
 
    stderr_stream = io.StringIO()

			




	
	
	
		
 

			




	
	
	
		
 
    # Just create some sample data, but no server certificates.

			




        

    



    


    



    



      

      





    
    0 comments (0 inline, 0 general)
    





    


  

  







  


    




    








    
        
    
    
        This site is powered by
            Kallithea 0.7.0,
        which is
        © 2010–2023 by various authors & licensed under GPLv3.