redcar 0.3.2dev → 0.3.3

data/lib/openssl/test/test_java_smime.rb

@@ -0,0 +1,177 @@
+module PKCS7Test
+  class TestJavaSMIME < Test::Unit::TestCase
+    def test_read_pkcs7_should_raise_error_when_parsing_headers_fails
+      bio = BIO.new
+      mime = Mime.new
+      mime.stubs(:parseHeaders).returns(nil)
+
+      begin
+        SMIME.new(mime).readPKCS7(bio, nil)
+        assert false
+      rescue PKCS7Exception => e
+        assert_equal PKCS7::F_SMIME_READ_PKCS7, e.cause.get_method
+        assert_equal PKCS7::R_MIME_PARSE_ERROR, e.cause.get_reason
+      end
+    end
+
+    def test_read_pkcs7_should_raise_error_when_content_type_is_not_there
+      bio = BIO.new
+      mime = Mime.new
+
+      headers = ArrayList.new
+      mime.expects(:parseHeaders).with(bio).returns(headers)
+      mime.expects(:findHeader).with(headers, "content-type").returns(nil)
+
+      begin
+        SMIME.new(mime).readPKCS7(bio, nil)
+        assert false
+      rescue PKCS7Exception => e
+        assert_equal PKCS7::F_SMIME_READ_PKCS7, e.cause.get_method
+        assert_equal PKCS7::R_NO_CONTENT_TYPE, e.cause.get_reason
+      end
+
+
+      
+      
+      mime = Mime.new
+      mime.expects(:parseHeaders).with(bio).returns(headers)
+      mime.expects(:findHeader).with(headers, "content-type").returns(MimeHeader.new("content-type", nil))
+
+      begin
+        SMIME.new(mime).readPKCS7(bio, nil)
+        assert false
+      rescue PKCS7Exception => e
+        assert_equal PKCS7::F_SMIME_READ_PKCS7, e.cause.get_method
+        assert_equal PKCS7::R_NO_CONTENT_TYPE, e.cause.get_reason
+      end
+    end
+    
+    def test_read_pkcs7_should_set_the_second_arguments_contents_to_null_if_its_there
+      mime = Mime.new
+      mime.stubs(:parseHeaders).raises("getOutOfJailForFree")
+      
+      bio2 = BIO.new
+      arr = [bio2].to_java BIO
+      
+      begin
+        SMIME.new(mime).readPKCS7(nil, arr)
+      rescue
+      end
+
+      assert_nil arr[0]
+
+
+      arr = [bio2, bio2].to_java BIO
+      begin
+        SMIME.new(mime).readPKCS7(nil, arr)
+      rescue
+      end
+
+      assert_nil arr[0]
+      assert_equal bio2, arr[1]
+    end
+    
+    def test_read_pkcs7_should_call_methods_on_mime
+      bio = BIO.new
+      mime = Mime.new
+
+      headers = ArrayList.new
+      mime.expects(:parseHeaders).with(bio).returns(headers)
+      mime.expects(:findHeader).with(headers, "content-type").returns(MimeHeader.new("content-type", "application/pkcs7-mime"))
+
+      begin
+        SMIME.new(mime).readPKCS7(bio, nil)
+      rescue java.lang.UnsupportedOperationException
+        # This error is expected, since the bio used is not a real one
+      end
+    end
+
+    def test_read_pkcs7_throws_correct_exception_if_wrong_content_type
+      bio = BIO.new
+      mime = Mime.new
+
+      headers = ArrayList.new
+      mime.expects(:parseHeaders).with(bio).returns(headers)
+      mime.expects(:findHeader).with(headers, "content-type").returns(MimeHeader.new("content-type", "foo"))
+
+      begin
+        SMIME.new(mime).readPKCS7(bio, nil)
+        assert false
+      rescue PKCS7Exception => e
+        assert_equal PKCS7::F_SMIME_READ_PKCS7, e.cause.get_method
+        assert_equal PKCS7::R_INVALID_MIME_TYPE, e.cause.get_reason
+        assert_equal "type: foo", e.cause.error_data
+      end
+    end
+    
+    def test_read_pkcs7_with_multipart_should_fail_if_no_boundary_found
+      bio = BIO.new
+      mime = Mime.new
+
+      headers = ArrayList.new
+      hdr = MimeHeader.new("content-type", "multipart/signed")
+      mime.expects(:parseHeaders).with(bio).returns(headers)
+      mime.expects(:findHeader).with(headers, "content-type").returns(hdr)
+
+      mime.expects(:findParam).with(hdr, "boundary").returns(nil)
+      
+      begin
+        SMIME.new(mime).readPKCS7(bio, nil)
+        assert false
+      rescue PKCS7Exception => e
+        assert_equal PKCS7::F_SMIME_READ_PKCS7, e.cause.get_method
+        assert_equal PKCS7::R_NO_MULTIPART_BOUNDARY, e.cause.get_reason
+      end
+    end
+    
+    def test_read_pkcs7_with_multipart_should_fail_if_null_boundary_value
+      bio = BIO.new
+      mime = Mime.new
+
+      headers = ArrayList.new
+      hdr = MimeHeader.new("content-type", "multipart/signed")
+      mime.expects(:parseHeaders).with(bio).returns(headers)
+      mime.expects(:findHeader).with(headers, "content-type").returns(hdr)
+
+      mime.expects(:findParam).with(hdr, "boundary").returns(MimeParam.new("boundary", nil))
+      
+      begin
+        SMIME.new(mime).readPKCS7(bio, nil)
+        assert false
+      rescue PKCS7Exception => e
+        assert_equal PKCS7::F_SMIME_READ_PKCS7, e.cause.get_method
+        assert_equal PKCS7::R_NO_MULTIPART_BOUNDARY, e.cause.get_reason
+      end
+    end
+
+    # TODO: redo this test to be an integration test
+    def _test_read_pkcs7_happy_path_without_multipart
+      bio = BIO.new
+      mime = Mime.new
+
+      headers = ArrayList.new
+      mime.expects(:parseHeaders).with(bio).returns(headers)
+      mime.expects(:findHeader).with(headers, "content-type").returns(MimeHeader.new("content-type", "application/pkcs7-mime"))
+
+      SMIME.new(mime).readPKCS7(bio, nil)
+    end
+    
+    def test_read_pkcs7_happy_path_multipart
+      bio = BIO::from_string(MultipartSignedString)
+      mime = Mime::DEFAULT
+      p7 = SMIME.new(mime).readPKCS7(bio, nil)
+    end
+
+    def test_read_pkcs7_happy_path_without_multipart_enveloped
+      bio = BIO::from_string(MimeEnvelopedString)
+      mime = Mime::DEFAULT
+      p7 = SMIME.new(mime).readPKCS7(bio, nil)
+    end
+
+    def test_read_pkcs7_happy_path_without_multipart_signed
+      bio = BIO::from_string(MimeSignedString)
+      mime = Mime::DEFAULT
+      p7 = SMIME.new(mime).readPKCS7(bio, nil)
+    end
+  end
+end

data/lib/openssl/test/test_openssl.rb

@@ -0,0 +1,34 @@
+
+if defined?(JRUBY_VERSION)
+  require "java"
+  base = File.join(File.dirname(__FILE__), '..')
+  $CLASSPATH << File.join(base, 'pkg', 'classes')
+  $CLASSPATH << File.join(base, 'lib', 'bcprov-jdk14-139.jar')
+end
+
+def protect_require(name)
+  require name
+rescue Exception => e
+  $stderr.puts "Had exception in #{name}: #{e.inspect}"
+  $stderr.puts(*(e.backtrace))
+end
+
+protect_require 'openssl/test_asn1'
+protect_require 'openssl/test_cipher'
+protect_require 'openssl/test_digest'
+protect_require 'openssl/test_hmac'
+protect_require 'openssl/test_ns_spki'
+protect_require 'openssl/test_pair'
+protect_require 'openssl/test_pkcs7'
+protect_require 'openssl/test_pkey_rsa'
+protect_require 'openssl/test_ssl'
+protect_require 'openssl/test_x509cert'
+protect_require 'openssl/test_x509crl'
+protect_require 'openssl/test_x509ext'
+protect_require 'openssl/test_x509name'
+protect_require 'openssl/test_x509req'
+protect_require 'openssl/test_x509store'
+protect_require 'test_cipher'
+protect_require 'test_java'
+protect_require 'test_integration'
+protect_require 'test_pkey'

data/lib/openssl/test/test_openssl_x509.rb

@@ -0,0 +1,34 @@
+require 'openssl'
+require 'test/unit'
+
+# JRUBY-3468
+class TestOpensslX509 < Test::Unit::TestCase
+  def test_jruby3468
+    pem_cert = <<END
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+END
+
+    cert   = OpenSSL::X509::Certificate.new(pem_cert)
+    key_id = cert.extensions[2]
+
+    assert_equal "24:D1:34:18:66:91:2A:63:76:AA:19:CE:17:20:56:56:5E:10:8F:AA", key_id.value
+  end
+end

data/lib/openssl/test/test_parse_certificate.rb

@@ -0,0 +1,20 @@
+require 'openssl'
+require "test/unit"
+
+class TestParseCertificate < Test::Unit::TestCase
+  CERT = File.dirname(__FILE__) + '/cert_with_ec_pk.cer'
+
+  def test_certificate_parse_works_with_ec_pk_cert
+    cer = OpenSSL::X509::Certificate.new(File.read(CERT))
+    assert cer.to_s != nil
+    assert cer.issuer.to_s != nil
+    assert cer.subject.to_s != nil
+    assert cer.extensions.to_s != nil
+  end
+
+  def test_certificate_with_ec_pk_cert_fails_requesting_pk
+    cer = OpenSSL::X509::Certificate.new(File.read(CERT))
+    assert_raises(OpenSSL::X509::CertificateError) { cer.public_key }
+  end
+end
+

data/lib/openssl/test/test_pkey.rb

@@ -0,0 +1,46 @@
+if defined?(JRUBY_VERSION)
+  require "java"
+  base = File.dirname(__FILE__)
+  $CLASSPATH << File.join(base, '..', 'pkg', 'classes')
+  $CLASSPATH << File.join(base, '..', 'lib', 'bcprov-jdk14-139.jar')
+end
+
+begin
+  require "openssl"
+rescue LoadError
+end
+
+require "test/unit"
+
+class TestPKey < Test::Unit::TestCase
+  def test_has_correct_methods
+    pkey_methods = OpenSSL::PKey::PKey.instance_methods(false).sort - ["initialize"]
+    assert_equal ["sign", "verify"], pkey_methods
+
+    rsa_methods = OpenSSL::PKey::RSA.instance_methods(false).sort - ["initialize"]
+    assert_equal ["d", "d=", "dmp1", "dmp1=", "dmq1", "dmq1=", "e", "e=", "export", "iqmp", "iqmp=", "n", "n=", "p", "p=", "params", "private?", "private_decrypt", "private_encrypt", "public?", "public_decrypt", "public_encrypt", "public_key", "q", "q=", "to_der", "to_pem", "to_s", "to_text"], rsa_methods
+
+    assert_equal ["generate"], OpenSSL::PKey::RSA.methods(false)
+    
+#     dsa_methods = OpenSSL::PKey::DSA.instance_methods(false).sort - ["initialize"]
+#     assert_equal ["export", "g", "g=", "p", "p=", "params", "priv_key", "priv_key=", "private?", "pub_key", "pub_key=", "public?", "public_key", "q", "q=", "syssign", "sysverify", "to_der", "to_pem", "to_s", "to_text"], dsa_methods
+
+#     assert_equal ["generate"], OpenSSL::PKey::DSA.methods(false)
+  end
+  
+  #iqmp == coefficient
+  #e == public exponent
+  #n == modulus
+  #d == private exponent
+  #p == prime1
+  #q == prime2
+  #dmq1 == exponent2
+  #dmp1 == exponent1
+  
+  def test_can_generate_rsa_key
+    OpenSSL::PKey::RSA.generate(512)
+  end
+
+  def test_can_generate_dsa_key
+  end
+end

data/lib/openssl/test/test_x509store.rb

@@ -0,0 +1,155 @@
+if defined?(JRUBY_VERSION)
+  require "java"
+  base = File.dirname(__FILE__)
+  $CLASSPATH << File.join(base, '..', 'pkg', 'classes')
+  $CLASSPATH << File.join(base, '..', 'lib', 'bcprov-jdk14-139.jar')
+end
+
+begin
+  require "openssl"
+rescue LoadError
+end
+
+require "test/unit"
+require "tempfile"
+
+class TestX509Store < Test::Unit::TestCase
+  def setup
+    @store = OpenSSL::X509::Store.new
+  end
+
+  def teardown
+  end
+
+  def test_ns_cert_type
+    f = Tempfile.new("globalsign-root.pem")
+    f << GLOBALSIGN_ROOT_CA
+    f.close
+    @store.add_file(f.path)
+    f.unlink
+
+    # CAUTION !
+    #
+    # sgc is an issuing CA certificate so we should not verify it for the
+    # purpose 'PURPOSE_SSL_SERVER'. It's not a SSL server certificate.
+    # We're just checking the code for 'PURPOSE_SSL_SERVER'.
+    # jruby-openssl/0.5.2 raises the following exception around ASN.1
+    # nsCertType handling.
+    #   Purpose.java:344:in `call': java.lang.ClassCastException: org.bouncycastle.asn1.DEROctetString cannot be cast to org.bouncycastle.asn1.DERBitString
+    sgc = OpenSSL::X509::Certificate.new(GLOBALSIGN_ORGANIZATION_VALIDATION_CA)
+
+    @store.purpose = OpenSSL::X509::PURPOSE_SSL_SERVER
+    assert_nothing_raised do
+      @store.verify(sgc) # => should be false
+    end
+  end
+
+  def test_purpose_ssl_client
+    @store.add_file("test/fixture/purpose/cacert.pem")
+    cert = OpenSSL::X509::Certificate.new(File.read("test/fixture/purpose/sslclient.pem"))
+    @store.purpose = OpenSSL::X509::PURPOSE_SSL_CLIENT
+    assert_equal(true, @store.verify(cert))
+    @store.purpose = OpenSSL::X509::PURPOSE_SSL_SERVER
+    assert_equal(false, @store.verify(cert))
+    @store.purpose = OpenSSL::X509::PURPOSE_SSL_CLIENT
+    assert_equal(true, @store.verify(cert))
+  end
+
+  def test_purpose_ssl_server
+    @store.add_file("test/fixture/purpose/cacert.pem")
+    cert = OpenSSL::X509::Certificate.new(File.read("test/fixture/purpose/sslserver.pem"))
+    @store.purpose = OpenSSL::X509::PURPOSE_SSL_SERVER
+    assert_equal(true, @store.verify(cert))
+    @store.purpose = OpenSSL::X509::PURPOSE_SSL_CLIENT
+    assert_equal(false, @store.verify(cert))
+    @store.purpose = OpenSSL::X509::PURPOSE_SSL_SERVER
+    assert_equal(true, @store.verify(cert))
+  end
+
+  def test_add_file_multiple
+    f = Tempfile.new("globalsign-root.pem")
+    f << GLOBALSIGN_ROOT_CA
+    f << "junk junk\n"
+    f << "junk junk\n"
+    f << "junk junk\n"
+    f << File.read("test/fixture/purpose/cacert.pem")
+    f.close
+    @store.add_file(f.path)
+    f.unlink
+
+    cert = OpenSSL::X509::Certificate.new(File.read("test/fixture/purpose/sslserver.pem"))
+    @store.purpose = OpenSSL::X509::PURPOSE_SSL_SERVER
+    assert_equal(true, @store.verify(cert))
+    @store.purpose = OpenSSL::X509::PURPOSE_SSL_CLIENT
+    assert_equal(false, @store.verify(cert))
+    @store.purpose = OpenSSL::X509::PURPOSE_SSL_SERVER
+    assert_equal(true, @store.verify(cert))
+  end
+
+  def test_set_default_paths
+    @store.purpose = OpenSSL::X509::PURPOSE_SSL_SERVER
+    cert = OpenSSL::X509::Certificate.new(File.read("test/fixture/purpose/sslserver.pem"))
+    assert_equal(false, @store.verify(cert))
+    begin
+      backup = ENV['SSL_CERT_DIR']
+      ENV['SSL_CERT_DIR'] = 'test/fixture/purpose/'
+      @store.set_default_paths
+      assert_equal(true, @store.verify(cert))
+    ensure
+      ENV['SSL_CERT_DIR'] = backup if backup
+    end
+  end
+
+  GLOBALSIGN_ROOT_CA = <<__EOS__
+-----BEGIN CERTIFICATE-----
+MIIDdTCCAl2gAwIBAgILBAAAAAABFUtaw5QwDQYJKoZIhvcNAQEFBQAwVzELMAkG
+A1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExEDAOBgNVBAsTB1Jv
+b3QgQ0ExGzAZBgNVBAMTEkdsb2JhbFNpZ24gUm9vdCBDQTAeFw05ODA5MDExMjAw
+MDBaFw0yODAxMjgxMjAwMDBaMFcxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9i
+YWxTaWduIG52LXNhMRAwDgYDVQQLEwdSb290IENBMRswGQYDVQQDExJHbG9iYWxT
+aWduIFJvb3QgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDuaZ
+jc6j40+Kfvvxi4Mla+pIH/EqsLmVEQS98GPR4mdmzxzdzxtIK+6NiY6arymAZavp
+xy0Sy6scTHAHoT0KMM0VjU/43dSMUBUc71DuxC73/OlS8pF94G3VNTCOXkNz8kHp
+1Wrjsok6Vjk4bwY8iGlbKk3Fp1S4bInMm/k8yuX9ifUSPJJ4ltbcdG6TRGHRjcdG
+snUOhugZitVtbNV4FpWi6cgKOOvyJBNPc1STE4U6G7weNLWLBYy5d4ux2x8gkasJ
+U26Qzns3dLlwR5EiUWMWea6xrkEmCMgZK9FGqkjWZCrXgzT/LCrBbBlDSgeF59N8
+9iFo7+ryUp9/k5DPAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8E
+BTADAQH/MB0GA1UdDgQWBBRge2YaRQ2XyolQL30EzTSo//z9SzANBgkqhkiG9w0B
+AQUFAAOCAQEA1nPnfE920I2/7LqivjTFKDK1fPxsnCwrvQmeU79rXqoRSLblCKOz
+yj1hTdNGCbM+w6DjY1Ub8rrvrTnhQ7k4o+YviiY776BQVvnGCv04zcQLcFGUl5gE
+38NflNUVyRRBnMRddWQVDf9VMOyGj/8N7yy5Y0b2qvzfvGn9LhJIZJrglfCm7ymP
+AbEVtQwdpf5pLGkkeB6zpxxxYu7KyJesF12KwvhHhm4qxFYxldBniYUr+WymXUad
+DKqC5JlR3XC321Y9YeRq4VzW9v493kHMB65jUr9TU/Qr6cf9tveCX4XSQRjbgbME
+HMUfpIBvFSDJ3gyICh3WZlXi/EjJKSZp4A==
+-----END CERTIFICATE-----
+__EOS__
+
+  GLOBALSIGN_ORGANIZATION_VALIDATION_CA = <<__EOS__
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+__EOS__
+end