tests: integration tests for new revocation logic.

TODO: * Clean up, the Python is getting messy. * Double check coverage.
rustls · Jul 31, 2023 · 6517fee · 6517fee
1 parent 364a4e6
commit 6517fee
Show file tree

Hide file tree

Showing 68 changed files with 1,194 additions and 74 deletions.
diff --git a/.gitignore b/.gitignore
@@ -10,3 +10,6 @@ target/
 
 # Benchmark data
 benches/*.der
+
+# Python virtualenv
+.venv
diff --git a/tests/client_auth_revocation.rs b/tests/client_auth_revocation.rs
diff --git a/tests/client_auth_revocation/dp_chain.ee.der b/tests/client_auth_revocation/dp_chain.ee.der
diff --git a/tests/client_auth_revocation/dp_chain.int.a.ca.der b/tests/client_auth_revocation/dp_chain.int.a.ca.der
diff --git a/tests/client_auth_revocation/dp_chain.int.b.ca.der b/tests/client_auth_revocation/dp_chain.int.b.ca.der
diff --git a/tests/client_auth_revocation/dp_chain.root.ca.der b/tests/client_auth_revocation/dp_chain.root.ca.der
diff --git a/tests/client_auth_revocation/dp_chain.topbit.ee.der b/tests/client_auth_revocation/dp_chain.topbit.ee.der
diff --git a/tests/client_auth_revocation/ee_crl_mismatched_idp_unknown_status.crl.der b/tests/client_auth_revocation/ee_crl_mismatched_idp_unknown_status.crl.der
diff --git a/tests/client_auth_revocation/ee_crl_no_idp_unknown_status.crl.der b/tests/client_auth_revocation/ee_crl_no_idp_unknown_status.crl.der
diff --git a/tests/client_auth_revocation/ee_dp_idp_match.crl.der b/tests/client_auth_revocation/ee_dp_idp_match.crl.der
diff --git a/tests/client_auth_revocation/ee_dp_invalid.crl.der b/tests/client_auth_revocation/ee_dp_invalid.crl.der
diff --git a/tests/client_auth_revocation/ee_indirect_dp_unknown_status.crl.der b/tests/client_auth_revocation/ee_indirect_dp_unknown_status.crl.der
diff --git a/tests/client_auth_revocation/ee_no_dp_crl_idp.crl.der b/tests/client_auth_revocation/ee_no_dp_crl_idp.crl.der
diff --git a/tests/client_auth_revocation/ee_nofullname_dp_unknown_status.crl.der b/tests/client_auth_revocation/ee_nofullname_dp_unknown_status.crl.der
diff --git a/tests/client_auth_revocation/ee_not_revoked_ee_depth.crl.der b/tests/client_auth_revocation/ee_not_revoked_ee_depth.crl.der
diff --git a/tests/client_auth_revocation/ee_not_revoked_wrong_ku_ee_depth.crl.der b/tests/client_auth_revocation/ee_not_revoked_wrong_ku_ee_depth.crl.der
diff --git a/tests/client_auth_revocation/ee_reasons_dp_unknown_status.crl.der b/tests/client_auth_revocation/ee_reasons_dp_unknown_status.crl.der
diff --git a/tests/client_auth_revocation/ee_revoked_badsig_ee_depth.crl.der b/tests/client_auth_revocation/ee_revoked_badsig_ee_depth.crl.der
diff --git a/tests/client_auth_revocation/ee_revoked_chain_depth.crl.der b/tests/client_auth_revocation/ee_revoked_chain_depth.crl.der
diff --git a/tests/client_auth_revocation/ee_revoked_crl_ku_ee_depth.crl.der b/tests/client_auth_revocation/ee_revoked_crl_ku_ee_depth.crl.der
diff --git a/tests/client_auth_revocation/ee_revoked_no_ku_ee_depth.crl.der b/tests/client_auth_revocation/ee_revoked_no_ku_ee_depth.crl.der
diff --git a/tests/client_auth_revocation/ee_revoked_wrong_ku_ee_depth.crl.der b/tests/client_auth_revocation/ee_revoked_wrong_ku_ee_depth.crl.der
diff --git a/tests/client_auth_revocation/ee_with_top_bit_set_serial_revoked.crl.der b/tests/client_auth_revocation/ee_with_top_bit_set_serial_revoked.crl.der
diff --git a/tests/client_auth_revocation/indirect_dp_chain.ee.der b/tests/client_auth_revocation/indirect_dp_chain.ee.der
diff --git a/tests/client_auth_revocation/indirect_dp_chain.int.a.ca.der b/tests/client_auth_revocation/indirect_dp_chain.int.a.ca.der
diff --git a/tests/client_auth_revocation/indirect_dp_chain.int.b.ca.der b/tests/client_auth_revocation/indirect_dp_chain.int.b.ca.der
diff --git a/tests/client_auth_revocation/indirect_dp_chain.root.ca.der b/tests/client_auth_revocation/indirect_dp_chain.root.ca.der
diff --git a/tests/client_auth_revocation/indirect_dp_chain.topbit.ee.der b/tests/client_auth_revocation/indirect_dp_chain.topbit.ee.der
diff --git a/tests/client_auth_revocation/int_not_revoked_chain_depth.crl.der b/tests/client_auth_revocation/int_not_revoked_chain_depth.crl.der
diff --git a/tests/client_auth_revocation/int_revoked_badsig_chain_depth.crl.der b/tests/client_auth_revocation/int_revoked_badsig_chain_depth.crl.der
diff --git a/tests/client_auth_revocation/int_revoked_crl_ku_chain_depth.crl.der b/tests/client_auth_revocation/int_revoked_crl_ku_chain_depth.crl.der
diff --git a/tests/client_auth_revocation/int_revoked_ee_depth.crl.der b/tests/client_auth_revocation/int_revoked_ee_depth.crl.der
diff --git a/tests/client_auth_revocation/int_revoked_no_ku_chain_depth.crl.der b/tests/client_auth_revocation/int_revoked_no_ku_chain_depth.crl.der
diff --git a/tests/client_auth_revocation/int_revoked_wrong_ku_chain_depth.crl.der b/tests/client_auth_revocation/int_revoked_wrong_ku_chain_depth.crl.der
diff --git a/tests/client_auth_revocation/invalid_dp_chain.ee.der b/tests/client_auth_revocation/invalid_dp_chain.ee.der
diff --git a/tests/client_auth_revocation/invalid_dp_chain.int.a.ca.der b/tests/client_auth_revocation/invalid_dp_chain.int.a.ca.der
diff --git a/tests/client_auth_revocation/invalid_dp_chain.int.b.ca.der b/tests/client_auth_revocation/invalid_dp_chain.int.b.ca.der
diff --git a/tests/client_auth_revocation/invalid_dp_chain.root.ca.der b/tests/client_auth_revocation/invalid_dp_chain.root.ca.der
diff --git a/tests/client_auth_revocation/invalid_dp_chain.topbit.ee.der b/tests/client_auth_revocation/invalid_dp_chain.topbit.ee.der
diff --git a/tests/client_auth_revocation/ku_chain.ee.der b/tests/client_auth_revocation/ku_chain.ee.der
diff --git a/tests/client_auth_revocation/ku_chain.int.a.ca.der b/tests/client_auth_revocation/ku_chain.int.a.ca.der
diff --git a/tests/client_auth_revocation/ku_chain.int.b.ca.der b/tests/client_auth_revocation/ku_chain.int.b.ca.der
diff --git a/tests/client_auth_revocation/ku_chain.root.ca.der b/tests/client_auth_revocation/ku_chain.root.ca.der
diff --git a/tests/client_auth_revocation/ku_chain.topbit.ee.der b/tests/client_auth_revocation/ku_chain.topbit.ee.der
diff --git a/tests/client_auth_revocation/no_crl_ku_chain.ee.der b/tests/client_auth_revocation/no_crl_ku_chain.ee.der
diff --git a/tests/client_auth_revocation/no_crl_ku_chain.int.a.ca.der b/tests/client_auth_revocation/no_crl_ku_chain.int.a.ca.der
diff --git a/tests/client_auth_revocation/no_crl_ku_chain.int.b.ca.der b/tests/client_auth_revocation/no_crl_ku_chain.int.b.ca.der
diff --git a/tests/client_auth_revocation/no_crl_ku_chain.root.ca.der b/tests/client_auth_revocation/no_crl_ku_chain.root.ca.der
diff --git a/tests/client_auth_revocation/no_crl_ku_chain.topbit.ee.der b/tests/client_auth_revocation/no_crl_ku_chain.topbit.ee.der
diff --git a/tests/client_auth_revocation/no_ku_chain.ee.der b/tests/client_auth_revocation/no_ku_chain.ee.der
diff --git a/tests/client_auth_revocation/no_ku_chain.int.a.ca.der b/tests/client_auth_revocation/no_ku_chain.int.a.ca.der
diff --git a/tests/client_auth_revocation/no_ku_chain.int.b.ca.der b/tests/client_auth_revocation/no_ku_chain.int.b.ca.der
diff --git a/tests/client_auth_revocation/no_ku_chain.root.ca.der b/tests/client_auth_revocation/no_ku_chain.root.ca.der
diff --git a/tests/client_auth_revocation/no_ku_chain.topbit.ee.der b/tests/client_auth_revocation/no_ku_chain.topbit.ee.der
diff --git a/tests/client_auth_revocation/no_relevant_crl_chain_depth.crl.der b/tests/client_auth_revocation/no_relevant_crl_chain_depth.crl.der
diff --git a/tests/client_auth_revocation/no_relevant_crl_ee_depth.crl.der b/tests/client_auth_revocation/no_relevant_crl_ee_depth.crl.der
diff --git a/tests/client_auth_revocation/no_relevant_crl_ee_depth_allow_unknown.crl.der b/tests/client_auth_revocation/no_relevant_crl_ee_depth_allow_unknown.crl.der
diff --git a/tests/client_auth_revocation/nofullname_dp_chain.ee.der b/tests/client_auth_revocation/nofullname_dp_chain.ee.der
diff --git a/tests/client_auth_revocation/nofullname_dp_chain.int.a.ca.der b/tests/client_auth_revocation/nofullname_dp_chain.int.a.ca.der
diff --git a/tests/client_auth_revocation/nofullname_dp_chain.int.b.ca.der b/tests/client_auth_revocation/nofullname_dp_chain.int.b.ca.der
diff --git a/tests/client_auth_revocation/nofullname_dp_chain.root.ca.der b/tests/client_auth_revocation/nofullname_dp_chain.root.ca.der
diff --git a/tests/client_auth_revocation/nofullname_dp_chain.topbit.ee.der b/tests/client_auth_revocation/nofullname_dp_chain.topbit.ee.der
diff --git a/tests/client_auth_revocation/reasons_dp_chain.ee.der b/tests/client_auth_revocation/reasons_dp_chain.ee.der
diff --git a/tests/client_auth_revocation/reasons_dp_chain.int.a.ca.der b/tests/client_auth_revocation/reasons_dp_chain.int.a.ca.der
diff --git a/tests/client_auth_revocation/reasons_dp_chain.int.b.ca.der b/tests/client_auth_revocation/reasons_dp_chain.int.b.ca.der
diff --git a/tests/client_auth_revocation/reasons_dp_chain.root.ca.der b/tests/client_auth_revocation/reasons_dp_chain.root.ca.der
diff --git a/tests/client_auth_revocation/reasons_dp_chain.topbit.ee.der b/tests/client_auth_revocation/reasons_dp_chain.topbit.ee.der