From d342a45d98c4795b3a3fe1aaef5236ad4a782b55 Mon Sep 17 00:00:00 2001
From: Yuuta Liang <yuutaw@students.cs.ubc.ca>
Date: Thu, 12 Oct 2023 12:10:33 +0800
Subject: Implement data structures from X.680, X.501, X.509, and PKCS#10, with
 X.690 encoding / decoding support

The implementation took four days, and it is still a little bit rough. Updated version should arrive soon.

Signed-off-by: Yuuta Liang <yuutaw@students.cs.ubc.ca>
---
 .../model/pki/crl/CertificateListContentTest.java  | 37 +++++++++++++++
 src/test/model/pki/crl/CertificateListTest.java    | 52 ++++++++++++++++++++++
 src/test/model/pki/crl/RevokedCertificateTest.java | 25 +++++++++++
 3 files changed, 114 insertions(+)
 create mode 100644 src/test/model/pki/crl/CertificateListContentTest.java
 create mode 100644 src/test/model/pki/crl/CertificateListTest.java
 create mode 100644 src/test/model/pki/crl/RevokedCertificateTest.java

(limited to 'src/test/model/pki/crl')

diff --git a/src/test/model/pki/crl/CertificateListContentTest.java b/src/test/model/pki/crl/CertificateListContentTest.java
new file mode 100644
index 0000000..ec18629
--- /dev/null
+++ b/src/test/model/pki/crl/CertificateListContentTest.java
@@ -0,0 +1,37 @@
+package model.pki.crl;
+
+import model.TestConstants;
+import model.asn1.*;
+import model.asn1.exceptions.ParseException;
+import model.pki.AlgorithmIdentifier;
+import model.x501.AttributeTypeAndValue;
+import model.x501.Name;
+import model.x501.RelativeDistinguishedName;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+
+import java.time.ZoneId;
+import java.time.ZonedDateTime;
+
+import static model.TestConstants.*;
+import static org.junit.jupiter.api.Assertions.*;
+
+public class CertificateListContentTest {
+    @Test
+    void testConstructor() {
+        assertEquals(1, CRL_CONTENT_1.getVersion().getLong());
+        assertEquals("CN=Test CA", CRL_CONTENT_1.getIssuer().toString());
+        assertArrayEquals(ObjectIdentifier.OID_SHA256_WITH_RSA_ENCRYPTION,
+                CRL_CONTENT_1.getSignature().getType().getInts());
+        assertEquals(GeneralizedTime.TAG.getNumber(),
+                CRL_CONTENT_1.getThisUpdate().getTag().getNumber());
+        assertNull(CRL_CONTENT_1.getNextUpdate());
+        assertEquals(2, CRL_CONTENT_1.getRevokedCertificates().length);
+    }
+
+    @Test
+    void testEncode() {
+        assertArrayEquals(CRL_CONTENT_1_DER, CRL_CONTENT_1.encodeDER());
+        assertArrayEquals(CRL_CONTENT_2_DER, CRL_CONTENT_2.encodeDER());
+    }
+}
diff --git a/src/test/model/pki/crl/CertificateListTest.java b/src/test/model/pki/crl/CertificateListTest.java
new file mode 100644
index 0000000..0f4f06c
--- /dev/null
+++ b/src/test/model/pki/crl/CertificateListTest.java
@@ -0,0 +1,52 @@
+package model.pki.crl;
+
+import model.TestConstants;
+import model.asn1.ASN1Object;
+import model.asn1.BitString;
+import model.asn1.Null;
+import model.asn1.ObjectIdentifier;
+import model.asn1.exceptions.ParseException;
+import model.asn1.parsing.BytesReader;
+import model.pki.AlgorithmIdentifier;
+import model.pki.cert.Certificate;
+import model.pki.cert.TbsCertificate;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+
+import static model.TestConstants.combine;
+import static model.TestConstants.mutate;
+import static org.junit.jupiter.api.Assertions.*;
+
+public class CertificateListTest {
+    private CertificateList crl;
+
+    @BeforeEach
+    void setup() {
+        crl = new CertificateList(ASN1Object.TAG_SEQUENCE, null,
+                TestConstants.CRL_CONTENT_1,
+                new AlgorithmIdentifier(ASN1Object.TAG_SEQUENCE, null,
+                        new ObjectIdentifier(ObjectIdentifier.TAG, null, ObjectIdentifier.OID_RSA_ENCRYPTION),
+                        new Null(Null.TAG, null)),
+                new BitString(BitString.TAG, null, 0, new Byte[]{ 1, 2, 3 }));
+    }
+
+    @Test
+    void testConstructor() {
+        assertEquals(2, crl.getCrl().getRevokedCertificates().length);
+        assertArrayEquals(ObjectIdentifier.OID_RSA_ENCRYPTION,
+                crl.getSignatureAlgorithm().getType().getInts());
+        assertArrayEquals(new Byte[]{ 1, 2, 3 },
+                crl.getSignature().getConvertedVal());
+    }
+
+    @Test
+    void testEncode() {
+        assertArrayEquals(combine((byte) 0x30,
+                TestConstants.CRL_CONTENT_1_DER,
+                new AlgorithmIdentifier(ASN1Object.TAG_SEQUENCE, null,
+                        new ObjectIdentifier(ObjectIdentifier.TAG, null, ObjectIdentifier.OID_RSA_ENCRYPTION),
+                        new Null(Null.TAG, null)).encodeDER(),
+                new BitString(BitString.TAG, null, 0, new Byte[]{ 1, 2, 3 }).encodeDER()),
+                crl.encodeDER());
+    }
+}
diff --git a/src/test/model/pki/crl/RevokedCertificateTest.java b/src/test/model/pki/crl/RevokedCertificateTest.java
new file mode 100644
index 0000000..659e421
--- /dev/null
+++ b/src/test/model/pki/crl/RevokedCertificateTest.java
@@ -0,0 +1,25 @@
+package model.pki.crl;
+
+import model.asn1.*;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+
+import java.time.ZoneId;
+import java.time.ZonedDateTime;
+
+import static model.TestConstants.*;
+import static org.junit.jupiter.api.Assertions.*;
+
+public class RevokedCertificateTest {
+    @Test
+    void testConstructor() {
+        assertEquals(123, REVOKED_CESSATION.getSerialNumber().getLong());
+        assertEquals(UtcTime.TAG.getNumber(), REVOKED_CESSATION.getRevocationDate().getTag().getNumber());
+        assertEquals(Reason.CESSATION_OF_OPERATION, REVOKED_CESSATION.getReason());
+    }
+
+    @Test
+    void testEncode() {
+        assertArrayEquals(REVOKED_KEY_COMPROMISE_DER, REVOKED_KEY_COMPROMISE.encodeDER());
+    }
+}
-- 
cgit v1.2.3