(t *testing.T)
| 94 | } |
| 95 | |
| 96 | func TestRejectRequestAfterSigning(t *testing.T) { |
| 97 | allConfig := SetupSignerdConfig(2, 0) |
| 98 | environment := "testing" |
| 99 | envConfig := allConfig[environment] |
| 100 | requestHandler := makeCertRequestHandler(allConfig) |
| 101 | |
| 102 | pubKey, _, _, _, err := ssh.ParseAuthorizedKey([]byte(boringUserCertString)) |
| 103 | if err != nil { |
| 104 | t.Fatalf("Parsing canned cert failed: %v", err) |
| 105 | } |
| 106 | cert := pubKey.(*ssh.Certificate) |
| 107 | _, err = requestHandler.saveSigningRequest(envConfig, environment, "reason: testing", "DEADBEEFDEADBEEF", 1, cert) |
| 108 | if err != nil { |
| 109 | t.Fatalf("Should have succeeded. Failed with: %v", err) |
| 110 | } |
| 111 | |
| 112 | err = requestHandler.addConfirmation("DEADBEEFDEADBEEF", "23:10:8d:d0:54:90:d5:d1:2e:4d:05:fe:4b:54:29:e4", envConfig) |
| 113 | if err != nil { |
| 114 | t.Fatalf("Sign should have worked. It failed: %v", err) |
| 115 | } |
| 116 | |
| 117 | err = requestHandler.rejectRequest("DEADBEEFDEADBEEF", "23:10:8d:d0:54:90:d5:d1:2e:4d:05:fe:4b:54:29:e4", envConfig) |
| 118 | if err != nil { |
| 119 | t.Fatalf("Should have succeeded. Failed with: %v", err) |
| 120 | } |
| 121 | |
| 122 | err = requestHandler.addConfirmation("DEADBEEFDEADBEEF", "23:10:8d:d0:54:90:d5:d1:2e:4d:05:fe:4b:54:29:e4", envConfig) |
| 123 | if err == nil { |
| 124 | t.Fatalf("Sign after reject should fail.") |
| 125 | } |
| 126 | } |
| 127 | |
| 128 | func TestSaveForeverCertDisallowed(t *testing.T) { |
| 129 | allConfig := SetupSignerdConfig(1, 14400) |
nothing calls this directly
no test coverage detected