Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

webpki: Authority Information Access tests #40

Merged
merged 3 commits into from
Oct 16, 2023
Merged

Conversation

tetsuo-cpp
Copy link
Contributor

No description provided.

@@ -421,4 +450,6 @@ def malformed_aia(builder: Builder) -> None:
)

builder = builder.server_validation()
builder.trusted_certs(root).peer_certificate(leaf).fails()
builder.trusted_certs(root).peer_certificate(leaf).expected_peer_name(
PeerName(kind="DNS", value="example.com")
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This was previously failing because we don't check the subject, not because of the malformed AIA.

@@ -395,6 +395,35 @@ def unicode_emoji_san(builder: Builder) -> None:
).fails()


@testcase
def aia(builder: Builder) -> None:
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I decided to add an extra test for the happy path when we have an AIA. On the pyca/cryptography side, I'm not doing much with this extension other than checking that it's well-formed.

@woodruffw woodruffw merged commit 8abb3f2 into main Oct 16, 2023
5 checks passed
@woodruffw woodruffw deleted the alex/aia-tests branch October 16, 2023 15:13
@woodruffw
Copy link
Collaborator

Whoops, I may have merged this prematurely: I believe this should go under rfc5280, not webpki (since AIA is specified there, at least as far as the current tests go).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants