43 lines
1.2 KiB
Ruby
43 lines
1.2 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
require 'spec_helper'
|
|
|
|
RSpec.describe Gitlab::Email::Smime::Signer do
|
|
include SmimeHelper
|
|
|
|
let_it_be(:root_ca) { generate_root }
|
|
let_it_be(:intermediate_ca) { generate_intermediate(signer_ca: root_ca) }
|
|
|
|
context 'when using an intermediate CA' do
|
|
it 'signs data appropriately with SMIME' do
|
|
cert = generate_cert(signer_ca: intermediate_ca)
|
|
|
|
sign_and_verify('signed content', cert[:cert], cert[:key], root_ca[:cert], ca_certs: intermediate_ca[:cert])
|
|
end
|
|
end
|
|
|
|
context 'when not using an intermediate CA' do
|
|
it 'signs data appropriately with SMIME' do
|
|
cert = generate_cert(signer_ca: root_ca)
|
|
|
|
sign_and_verify('signed content', cert[:cert], cert[:key], root_ca[:cert])
|
|
end
|
|
end
|
|
|
|
def sign_and_verify(data, cert, key, root_ca_cert, ca_certs: nil)
|
|
signed_content = described_class.sign(
|
|
cert: cert,
|
|
key: key,
|
|
ca_certs: ca_certs,
|
|
data: data)
|
|
|
|
expect(signed_content).not_to be_nil
|
|
|
|
p7enc = described_class.verify_signature(
|
|
ca_certs: root_ca_cert,
|
|
signed_data: signed_content)
|
|
|
|
expect(p7enc).not_to be_nil
|
|
expect(p7enc.data).to eq(data)
|
|
end
|
|
end
|