Commit 5b22f024 authored by Vincent Pelletier's avatar Vincent Pelletier Committed by Vincent Pelletier

tests: Check CRL Distribution Points presence on a service certificate.

More realistic than checking server certificate.
parent 7b462d34
...@@ -1971,17 +1971,18 @@ class CaucaseTest(unittest.TestCase): ...@@ -1971,17 +1971,18 @@ class CaucaseTest(unittest.TestCase):
address in CRL distribution point extension. address in CRL distribution point extension.
""" """
self._stopServer() self._stopServer()
# Force generation of a new server certificate
os.unlink(self._server_key) os.unlink(self._server_key)
os.unlink(self._server_db)
self._server_netloc = '[::1]:8000' self._server_netloc = '[::1]:8000'
# Would raise self._caucase_url = 'http://' + self._server_netloc
self._startServer() self._startServer()
# To retrieve CAS CA crt. user_key_path = self._createFirstUser()
self._runClient() service_key = self._createAndApproveCertificate(
# Sanity checks user_key_path,
self.assertTrue(os.path.exists(self._server_key)) 'service',
)
distribution_point, = utils.load_certificate( distribution_point, = utils.load_certificate(
utils.getCert(self._server_key), utils.getCert(service_key),
[ [
utils.load_ca_certificate(x) utils.load_ca_certificate(x)
for x in utils.getCertList(self._client_ca_crt) for x in utils.getCertList(self._client_ca_crt)
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment