()
| 156 | |
| 157 | #[test] |
| 158 | fn generate_pki_produces_valid_pem() { |
| 159 | let bundle = generate_pki(&["10.0.0.1".to_string(), "myhost.example.com".to_string()]) |
| 160 | .expect("generate_pki failed"); |
| 161 | |
| 162 | // All PEM strings should be non-empty and contain PEM markers |
| 163 | assert!(bundle.ca_cert_pem.contains("BEGIN CERTIFICATE")); |
| 164 | assert!(bundle.ca_key_pem.contains("BEGIN PRIVATE KEY")); |
| 165 | assert!(bundle.server_cert_pem.contains("BEGIN CERTIFICATE")); |
| 166 | assert!(bundle.server_key_pem.contains("BEGIN PRIVATE KEY")); |
| 167 | assert!(bundle.client_cert_pem.contains("BEGIN CERTIFICATE")); |
| 168 | assert!(bundle.client_key_pem.contains("BEGIN PRIVATE KEY")); |
| 169 | assert!(bundle.jwt_signing_key_pem.contains("BEGIN PRIVATE KEY")); |
| 170 | assert!(bundle.jwt_public_key_pem.contains("BEGIN PUBLIC KEY")); |
| 171 | assert_eq!(bundle.jwt_key_id.len(), 32, "kid is 16 bytes hex-encoded"); |
| 172 | } |
| 173 | |
| 174 | #[test] |
| 175 | fn generate_pki_no_extra_sans() { |
nothing calls this directly
no test coverage detected