cert_test.go 3.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101
  1. // Copyright 2015 The Go Authors. All rights reserved.
  2. // Use of this source code is governed by a BSD-style
  3. // license that can be found in the LICENSE file.
  4. package main
  5. import (
  6. "crypto/rand"
  7. "crypto/x509"
  8. "encoding/pem"
  9. "os"
  10. "os/exec"
  11. "testing"
  12. )
  13. func TestSignPKCS7(t *testing.T) {
  14. // Setup RSA key.
  15. block, _ := pem.Decode([]byte(testKey))
  16. if block == nil {
  17. t.Fatal("no cert")
  18. }
  19. privKey, err := x509.ParsePKCS1PrivateKey(block.Bytes)
  20. if err != nil {
  21. t.Fatal(err)
  22. }
  23. content := "Hello world,\nThis is signed."
  24. cert, err := signPKCS7(rand.Reader, privKey, []byte(content))
  25. if err != nil {
  26. t.Fatal(err)
  27. }
  28. sig, err := os.CreateTemp("", "content.rsa")
  29. if err != nil {
  30. t.Fatal(err)
  31. }
  32. sigPath := sig.Name()
  33. defer os.Remove(sigPath)
  34. if _, err := sig.Write(cert); err != nil {
  35. t.Fatal(err)
  36. }
  37. if err := sig.Close(); err != nil {
  38. t.Fatal(err)
  39. }
  40. if openssl, err := exec.LookPath("openssl"); err != nil {
  41. t.Log("command openssl not found, skipping")
  42. } else {
  43. cmd := exec.Command(
  44. openssl, "asn1parse",
  45. "-inform", "DER",
  46. "-i",
  47. "-in", sigPath,
  48. )
  49. if err := cmd.Run(); err != nil {
  50. t.Errorf("bad asn.1: %v", err)
  51. }
  52. }
  53. if keytool, err := exec.LookPath("keytool"); err != nil {
  54. t.Log("command keytool not found, skipping")
  55. } else if err := exec.Command(keytool, "-v").Run(); err != nil {
  56. t.Logf("command keytool not functioning: %s, skipping", err)
  57. } else {
  58. cmd := exec.Command(keytool, "-v", "-printcert", "-file", sigPath)
  59. out, err := cmd.CombinedOutput()
  60. t.Logf("%v:\n%s", cmd.Args, out)
  61. if err != nil {
  62. t.Errorf("keytool cannot parse signature: %v", err)
  63. }
  64. }
  65. }
  66. const testKey = `
  67. -----BEGIN RSA PRIVATE KEY-----
  68. MIIEowIBAAKCAQEAy6ItnWZJ8DpX9R5FdWbS9Kr1U8Z7mKgqNByGU7No99JUnmyu
  69. NQ6Uy6Nj0Gz3o3c0BXESECblOC13WdzjsH1Pi7/L9QV8jXOXX8cvkG5SJAyj6hcO
  70. LOapjDiN89NXjXtyv206JWYvRtpexyVrmHJgRAw3fiFI+m4g4Qop1CxcIF/EgYh7
  71. rYrqh4wbCM1OGaCleQWaOCXxZGm+J5YNKQcWpjZRrDrb35IZmlT0bK46CXUKvCqK
  72. x7YXHgfhC8ZsXCtsScKJVHs7gEsNxz7A0XoibFw6DoxtjKzUCktnT0w3wxdY7OTj
  73. 9AR8mobFlM9W3yirX8TtwekWhDNTYEu8dwwykwIDAQABAoIBAA2hjpIhvcNR9H9Z
  74. BmdEecydAQ0ZlT5zy1dvrWI++UDVmIp+Ve8BSd6T0mOqV61elmHi3sWsBN4M1Rdz
  75. 3N38lW2SajG9q0fAvBpSOBHgAKmfGv3Ziz5gNmtHgeEXfZ3f7J95zVGhlHqWtY95
  76. JsmuplkHxFMyITN6WcMWrhQg4A3enKLhJLlaGLJf9PeBrvVxHR1/txrfENd2iJBH
  77. FmxVGILL09fIIktJvoScbzVOneeWXj5vJGzWVhB17DHBbANGvVPdD5f+k/s5aooh
  78. hWAy/yLKocr294C4J+gkO5h2zjjjSGcmVHfrhlXQoEPX+iW1TGoF8BMtl4Llc+jw
  79. lKWKfpECgYEA9C428Z6CvAn+KJ2yhbAtuRo41kkOVoiQPtlPeRYs91Pq4+NBlfKO
  80. 2nWLkyavVrLx4YQeCeaEU2Xoieo9msfLZGTVxgRlztylOUR+zz2FzDBYGicuUD3s
  81. EqC0Wv7tiX6dumpWyOcVVLmR9aKlOUzA9xemzIsWUwL3PpyONhKSq7kCgYEA1X2F
  82. f2jKjoOVzglhtuX4/SP9GxS4gRf9rOQ1Q8DzZhyH2LZ6Dnb1uEQvGhiqJTU8CXxb
  83. 7odI0fgyNXq425Nlxc1Tu0G38TtJhwrx7HWHuFcbI/QpRtDYLWil8Zr7Q3BT9rdh
  84. moo4m937hLMvqOG9pyIbyjOEPK2WBCtKW5yabqsCgYEAu9DkUBr1Qf+Jr+IEU9I8
  85. iRkDSMeusJ6gHMd32pJVCfRRQvIlG1oTyTMKpafmzBAd/rFpjYHynFdRcutqcShm
  86. aJUq3QG68U9EAvWNeIhA5tr0mUEz3WKTt4xGzYsyWES8u4tZr3QXMzD9dOuinJ1N
  87. +4EEumXtSPKKDG3M8Qh+KnkCgYBUEVSTYmF5EynXc2xOCGsuy5AsrNEmzJqxDUBI
  88. SN/P0uZPmTOhJIkIIZlmrlW5xye4GIde+1jajeC/nG7U0EsgRAV31J4pWQ5QJigz
  89. 0+g419wxIUFryGuIHhBSfpP472+w1G+T2mAGSLh1fdYDq7jx6oWE7xpghn5vb9id
  90. EKLjdwKBgBtz9mzbzutIfAW0Y8F23T60nKvQ0gibE92rnUbjPnw8HjL3AZLU05N+
  91. cSL5bhq0N5XHK77sscxW9vXjG0LJMXmFZPp9F6aV6ejkMIXyJ/Yz/EqeaJFwilTq
  92. Mc6xR47qkdzu0dQ1aPm4XD7AWDtIvPo/GG2DKOucLBbQc2cOWtKS
  93. -----END RSA PRIVATE KEY-----
  94. `