Function TestPrivateKeyTextMarshaling

internal/pki/encoding_test.go:92–183

(t *testing.T)

}

func TestPrivateKeyTextMarshaling(t *testing.T) {
	t.Run("Zero", func(t *testing.T) {
		// Zero cannot marshal.
		_, err := PrivateKey{}.MarshalText()
		assert.ErrorContains(t, err, "unknown")

		// Empty cannot unmarshal.
		var sink PrivateKey
		assert.ErrorContains(t, sink.UnmarshalText(nil), "PEM-encoded")
		assert.ErrorContains(t, sink.UnmarshalText([]byte{}), "PEM-encoded")
	})

	root, err := NewRootCertificateAuthority()
	assert.NilError(t, err)

	key := root.PrivateKey
	txt, err := key.MarshalText()
	assert.NilError(t, err)
	assert.Assert(t, bytes.HasPrefix(txt, []byte("-----BEGIN EC PRIVATE KEY-----\n")), "got %q", txt)
	assert.Assert(t, bytes.HasSuffix(txt, []byte("\n-----END EC PRIVATE KEY-----\n")), "got %q", txt)

	t.Run("RoundTrip", func(t *testing.T) {
		var sink PrivateKey
		assert.NilError(t, sink.UnmarshalText(txt))
		assert.DeepEqual(t, key, sink)
	})

	t.Run("Bundle", func(t *testing.T) {
		other, _ := NewRootCertificateAuthority()
		otherText, err := other.PrivateKey.MarshalText()
		assert.NilError(t, err)

		bundle := bytes.Join([][]byte{txt, otherText}, nil)

		// Only the first key of a bundle is parsed.
		var sink PrivateKey
		assert.NilError(t, sink.UnmarshalText(bundle))
		assert.DeepEqual(t, key, sink)
	})

	t.Run("EncodedEmpty", func(t *testing.T) {
		txt := []byte("-----BEGIN EC PRIVATE KEY-----\n\n-----END EC PRIVATE KEY-----\n")

		var sink PrivateKey
		assert.ErrorContains(t, sink.UnmarshalText(txt), "asn1")
	})

	t.Run("EncodedGarbage", func(t *testing.T) {
		txt := []byte("-----BEGIN EC PRIVATE KEY-----\nasdfasdf\n-----END EC PRIVATE KEY-----\n")

		var sink PrivateKey
		assert.ErrorContains(t, sink.UnmarshalText(txt), "asn1")
	})

	t.Run("ReadByOpenSSL", func(t *testing.T) {
		openssl := require.OpenSSL(t)
		dir := t.TempDir()