certificate_authority 0.1.2 → 1.0.0

data/spec/units/ocsp_handler_spec.rb

@@ -1,104 +0,0 @@
-require File.dirname(__FILE__) + '/units_helper'
-
-describe CertificateAuthority::OCSPHandler do
-  before(:each) do
-    @ocsp_handler = CertificateAuthority::OCSPHandler.new
-    
-    @root_certificate = CertificateAuthority::Certificate.new
-    @root_certificate.signing_entity = true
-    @root_certificate.subject.common_name = "OCSP Root"
-    @root_certificate.key_material.generate_key
-    @root_certificate.serial_number.number = 1
-    @root_certificate.sign!
-    
-    @certificate = CertificateAuthority::Certificate.new
-    @certificate.key_material.generate_key
-    @certificate.subject.common_name = "http://questionablesite.com"
-    @certificate.parent = @root_certificate
-    @certificate.serial_number.number = 2
-    @certificate.sign!
-    
-    @ocsp_request = OpenSSL::OCSP::Request.new
-    openssl_cert_issuer = OpenSSL::X509::Certificate.new(@root_certificate.to_pem)
-    openssl_cert_subject = OpenSSL::X509::Certificate.new(@certificate.to_pem)
-    
-    cert_id = OpenSSL::OCSP::CertificateId.new(openssl_cert_subject, openssl_cert_issuer)
-    @ocsp_request.add_certid(cert_id)
-    @ocsp_handler.ocsp_request = @ocsp_request.to_der
-  end
-  
-  it "should be able to accept an OCSP Request" do
-    @ocsp_handler.ocsp_request = @ocsp_request
-    @ocsp_handler.ocsp_request.should_not be_nil
-  end
-  
-  it "should raise an error if you try and extract certificates without a raw request" do
-    @ocsp_handler.extract_certificate_serials
-    @ocsp_handler.ocsp_request = nil
-    lambda {@ocsp_handler.extract_certificate_serials}.should raise_error
-  end
-  
-  it "should return a hash of extracted certificates from OCSP requests" do
-    result = @ocsp_handler.extract_certificate_serials
-    result.size.should == 1
-  end
-  
-  it "should be able to generate an OCSP response" do
-    @ocsp_handler.extract_certificate_serials
-    @ocsp_handler << @certificate
-    @ocsp_handler.parent = @root_certificate
-    @ocsp_handler.response
-  end
-  
-  it "should require a 'parent' entity for signing" do
-    @ocsp_handler.parent = @root_certificate
-    @ocsp_handler.parent.should_not be_nil
-  end
-  
-  it "should raise an error if you ask for the signed OCSP response without generating it" do
-    @ocsp_handler.extract_certificate_serials
-    @ocsp_handler << @certificate
-    @ocsp_handler.parent = @root_certificate
-    lambda { @ocsp_handler.to_der }.should raise_error
-    @ocsp_handler.response
-    @ocsp_handler.to_der.should_not be_nil
-  end
-  
-  it "should raise an error if you generate a response without adding all certificates in request" do
-    @ocsp_handler.extract_certificate_serials
-    @ocsp_handler.parent = @root_certificate
-    lambda { @ocsp_handler.response }.should raise_error
-  end
-  
-  it "should raise an error if you generate a response without adding a parent signing entity" do
-    @ocsp_handler.extract_certificate_serials
-    @ocsp_handler << @certificate
-    lambda { @ocsp_handler.response }.should raise_error
-  end
-  
-  describe "Response" do
-    before(:each) do
-      @ocsp_handler.extract_certificate_serials
-      @ocsp_handler << @certificate
-      @ocsp_handler.parent = @root_certificate
-      @ocsp_handler.response
-      
-      @openssl_ocsp_response = OpenSSL::OCSP::Response.new(@ocsp_handler.to_der)
-    end
-    
-    it "should have a correct status/status string" do
-      @openssl_ocsp_response.status_string.should == "successful"
-      @openssl_ocsp_response.status.should == 0
-    end
-    
-    it "should have an embedded BasicResponse with certificate statuses" do
-      # [#<OpenSSL::OCSP::CertificateId:0x000001020ecad8>, 0, 1, nil, 2011-04-15 23:29:47 UTC, 2011-04-15 23:30:17 UTC, []]
-      @openssl_ocsp_response.basic.status.first[1].should == 0 # Everything is OK
-    end
-    
-    it "should have a next_update time" do
-      @openssl_ocsp_response.basic.status.first[5].should_not be_nil
-      @openssl_ocsp_response.basic.status.first[5].class.should == Time
-    end
-  end
-end

data/spec/units/serial_number_spec.rb

@@ -1,20 +0,0 @@
-require File.dirname(__FILE__) + '/units_helper'
-
-describe CertificateAuthority::SerialNumber do
-  before(:each) do
-    @serial_number = CertificateAuthority::SerialNumber.new
-  end
-  
-  it "should support basic integer serial numbers", :rfc3280 => true do
-    @serial_number.number = 25
-    @serial_number.should be_valid
-    @serial_number.number = "abc"
-    @serial_number.should_not be_valid
-  end
-  
-  it "should not allow negative serial numbers", :rfc3280 => true do
-    @serial_number.number = -5
-    @serial_number.should_not be_valid
-  end
-  
-end

data/spec/units/signing_entity_spec.rb

@@ -1,4 +0,0 @@
-require File.dirname(__FILE__) + '/units_helper'
-
-describe CertificateAuthority::SigningEntity do
-end

data/spec/units/units_helper.rb

@@ -1 +0,0 @@
-require File.dirname(__FILE__) + '/../spec_helper'