|
|
#!/usr/bin/env python
|
|
|
|
|
|
def check(a, b):
|
|
|
if a != b:
|
|
|
print (a, b)
|
|
|
|
|
|
from mercurial.url import _verifycert
|
|
|
|
|
|
# Test non-wildcard certificates
|
|
|
check(_verifycert({'subject': ((('commonName', 'example.com'),),)}, 'example.com'),
|
|
|
None)
|
|
|
check(_verifycert({'subject': ((('commonName', 'example.com'),),)}, 'www.example.com'),
|
|
|
'certificate is for example.com')
|
|
|
check(_verifycert({'subject': ((('commonName', 'www.example.com'),),)}, 'example.com'),
|
|
|
'certificate is for www.example.com')
|
|
|
|
|
|
# Test wildcard certificates
|
|
|
check(_verifycert({'subject': ((('commonName', '*.example.com'),),)}, 'www.example.com'),
|
|
|
None)
|
|
|
check(_verifycert({'subject': ((('commonName', '*.example.com'),),)}, 'example.com'),
|
|
|
'certificate is for *.example.com')
|
|
|
check(_verifycert({'subject': ((('commonName', '*.example.com'),),)}, 'w.w.example.com'),
|
|
|
'certificate is for *.example.com')
|
|
|
|
|
|
# Avoid some pitfalls
|
|
|
check(_verifycert({'subject': ((('commonName', '*.foo'),),)}, 'foo'),
|
|
|
'certificate is for *.foo')
|
|
|
check(_verifycert({'subject': ((('commonName', '*o'),),)}, 'foo'),
|
|
|
'certificate is for *o')
|
|
|
|
|
|
import time
|
|
|
lastyear = time.gmtime().tm_year - 1
|
|
|
nextyear = time.gmtime().tm_year + 1
|
|
|
check(_verifycert({'notAfter': 'May 9 00:00:00 %s GMT' % lastyear}, 'example.com'),
|
|
|
'certificate expired May 9 00:00:00 %s GMT' % lastyear)
|
|
|
check(_verifycert({'notBefore': 'May 9 00:00:00 %s GMT' % nextyear}, 'example.com'),
|
|
|
'certificate not valid before May 9 00:00:00 %s GMT' % nextyear)
|
|
|
check(_verifycert({'notAfter': 'Sep 29 15:29:48 %s GMT' % nextyear, 'subject': ()}, 'example.com'),
|
|
|
'no commonName found in certificate')
|
|
|
check(_verifycert(None, 'example.com'),
|
|
|
'no certificate received')
|
|
|
|
