summaryrefslogtreecommitdiffstats
path: root/test/recipes/25-test_x509.t
diff options
context:
space:
mode:
Diffstat (limited to 'test/recipes/25-test_x509.t')
-rw-r--r--test/recipes/25-test_x509.t23
1 files changed, 22 insertions, 1 deletions
diff --git a/test/recipes/25-test_x509.t b/test/recipes/25-test_x509.t
index 7117e3381e..6be2d16216 100644
--- a/test/recipes/25-test_x509.t
+++ b/test/recipes/25-test_x509.t
@@ -16,7 +16,7 @@ use OpenSSL::Test qw/:DEFAULT srctop_file/;
setup("test_x509");
-plan tests => 126;
+plan tests => 132;
# Prevent MSys2 filename munging for arguments that look like file paths but
# aren't
@@ -400,6 +400,7 @@ cert_contains($attr_map_cert,
cert_contains($attr_map_cert,
"commonName:asdf == localityName:03:3E",
1, 'X.509 Attribute Mappings');
+
my $aaa_cert = srctop_file(@certs, "ext-allowedAttributeAssignments.pem");
cert_contains($aaa_cert,
"Attribute Type: commonName",
@@ -408,6 +409,26 @@ cert_contains($aaa_cert,
"Holder Domain: email:jonathan.wilbur",
1, 'X.509 Allowed Attribute Assignments');
+my $aa_idp_cert = srctop_file(@certs, "ext-aAissuingDistributionPoint.pem");
+cert_contains($aa_idp_cert,
+ "DirName:CN = Wildboar",
+ 1, 'X.509 Attribute Authority Issuing Distribution Point');
+cert_contains($aa_idp_cert,
+ "CA Compromise",
+ 1, 'X.509 Attribute Authority Issuing Distribution Point');
+cert_contains($aa_idp_cert,
+ "Indirect CRL: TRUE",
+ 1, 'X.509 Attribute Authority Issuing Distribution Point');
+cert_contains($aa_idp_cert,
+ "Contains User Attribute Certificates: TRUE",
+ 1, 'X.509 Attribute Authority Issuing Distribution Point');
+cert_contains($aa_idp_cert,
+ "Contains Attribute Authority \\(AA\\) Certificates: TRUE",
+ 1, 'X.509 Attribute Authority Issuing Distribution Point');
+cert_contains($aa_idp_cert,
+ "Contains Source Of Authority \\(SOA\\) Public Key Certificates: TRUE",
+ 1, 'X.509 Attribute Authority Issuing Distribution Point');
+
sub test_errors { # actually tests diagnostics of OSSL_STORE
my ($expected, $cert, @opts) = @_;
my $infile = srctop_file(@certs, $cert);