mirror of
https://github.com/SamTherapy/dnscrypt.git
synced 2024-10-02 16:32:51 +00:00
79 lines
2.5 KiB
Go
79 lines
2.5 KiB
Go
package dnscrypt
|
|
|
|
import (
|
|
"bytes"
|
|
"crypto/ed25519"
|
|
"crypto/rand"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
func TestCertSerialize(t *testing.T) {
|
|
cert, publicKey, _ := generateValidCert(t)
|
|
|
|
// not empty anymore
|
|
assert.False(t, bytes.Equal(cert.Signature[:], make([]byte, 64)))
|
|
|
|
// verify the signature
|
|
assert.True(t, cert.VerifySignature(publicKey))
|
|
|
|
// serialize
|
|
b, err := cert.Serialize()
|
|
assert.Nil(t, err)
|
|
assert.Equal(t, 124, len(b))
|
|
|
|
// check that we can deserialize it
|
|
cert2 := Cert{}
|
|
err = cert2.Deserialize(b)
|
|
assert.Nil(t, err)
|
|
assert.Equal(t, cert.Serial, cert2.Serial)
|
|
assert.Equal(t, cert.NotBefore, cert2.NotBefore)
|
|
assert.Equal(t, cert.NotAfter, cert2.NotAfter)
|
|
assert.Equal(t, cert.EsVersion, cert2.EsVersion)
|
|
assert.True(t, bytes.Equal(cert.ClientMagic[:], cert2.ClientMagic[:]))
|
|
assert.True(t, bytes.Equal(cert.ResolverPk[:], cert2.ResolverPk[:]))
|
|
assert.True(t, bytes.Equal(cert.Signature[:], cert2.Signature[:]))
|
|
}
|
|
|
|
func TestCertDeserialize(t *testing.T) {
|
|
// dig -t txt 2.dnscrypt-cert.opendns.com. -p 443 @208.67.220.220
|
|
b, err := unpackTxtString("DNSC\\000\\001\\000\\000\\200\\226E:H\\156\\203%\\134\\218\\127]\\168\\239\\027u\\011$\\191\\008\\239\\176F\\133\\017\\171\\161\\219\\154\\142i\\164\\010\\239\\017f\\168dS\\210f\\197\\194\\169\\171w\\2499\\1891\\155<\\130\\218@/\\155\\023v\\153#d\\024\\004\\136\\180\\228K5\\233d\\180\\144\\189\\218\\186\\232%\\162K\\004\\021\\160\\139\\225\\157}\\219\\135\\163<\\215~\\223\\142/qc78aWoo]\\221\\184`]\\221\\184`_\\190\\235\\224")
|
|
assert.Nil(t, err)
|
|
|
|
cert := &Cert{}
|
|
err = cert.Deserialize(b)
|
|
assert.Nil(t, err)
|
|
assert.Equal(t, uint32(1574811744), cert.Serial)
|
|
assert.Equal(t, XSalsa20Poly1305, cert.EsVersion)
|
|
assert.Equal(t, uint32(1574811744), cert.NotBefore)
|
|
assert.Equal(t, uint32(1606347744), cert.NotAfter)
|
|
}
|
|
|
|
func generateValidCert(t *testing.T) (*Cert, ed25519.PublicKey, ed25519.PrivateKey) {
|
|
cert := &Cert{
|
|
Serial: 1,
|
|
NotAfter: uint32(time.Now().Add(1 * time.Hour).Unix()),
|
|
NotBefore: uint32(time.Now().Add(-1 * time.Hour).Unix()),
|
|
EsVersion: XChacha20Poly1305,
|
|
}
|
|
|
|
// generate short-term resolver private key
|
|
resolverSk, resolverPk := generateRandomKeyPair()
|
|
copy(cert.ResolverPk[:], resolverPk[:])
|
|
copy(cert.ResolverSk[:], resolverSk[:])
|
|
|
|
// empty at first
|
|
assert.True(t, bytes.Equal(cert.Signature[:], make([]byte, 64)))
|
|
|
|
// generate private key
|
|
publicKey, privateKey, err := ed25519.GenerateKey(rand.Reader)
|
|
assert.Nil(t, err)
|
|
|
|
// sign the data
|
|
cert.Sign(privateKey)
|
|
|
|
return cert, publicKey, privateKey
|
|
}
|