Skip to content

Commit 6c8bf5c

Browse files
adityasakyadityasaky
committed
Multiple changes based on code review
* Add RSA private key encoded as PKCS8 * Refactor tests to use a table, DRY Signed-off-by: Aditya Sirish <[email protected]>
1 parent 217bba2 commit 6c8bf5c

File tree

2 files changed

+122
-63
lines changed

2 files changed

+122
-63
lines changed

‎signerverifier/signerverifier_test.go

+82-63
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,8 @@ package signerverifier
22

33
import (
44
_ "embed"
5+
"fmt"
6+
"strings"
57
"testing"
68

79
"github.com/stretchr/testify/assert"
@@ -10,6 +12,9 @@ import (
1012
//go:embed test-data/rsa-test-key
1113
var rsaPrivateKey []byte
1214

15+
//go:embed test-data/rsa-test-key-pkcs8
16+
var rsaPrivateKeyPKCS8 []byte
17+
1318
//go:embed test-data/rsa-test-key.pub
1419
var rsaPublicKey []byte
1520

@@ -27,8 +32,6 @@ var ecdsaPublicKey []byte
2732

2833
func TestLoadKey(t *testing.T) {
2934
// RSA expected values
30-
expectedRSAPrivateKey := "-----BEGIN RSA PRIVATE KEY-----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\nI+YQsJgrHE0TmYxxRkgeYUy7s5DoHE25rfvdy5Lx+xAOH8ZgD1SGOw==\n-----END RSA PRIVATE KEY-----"
31-
expectedRSAPublicKey := "-----BEGIN PUBLIC KEY-----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\nEm53T13mZzYUvbLJ0q3aljZVLIC3IZn3ZwA2yCWchBkVAgMBAAE=\n-----END PUBLIC KEY-----"
3235
expectedRSAKeyID := "4e8d20af09fcaed6c388a186427f94a5f7ff5591ec295f4aab2cff49ffe39e9b"
3336

3437
// ED25519 expected values
@@ -37,67 +40,83 @@ func TestLoadKey(t *testing.T) {
3740
expectedED25519KeyID := "52e3b8e73279d6ebdd62a5016e2725ff284f569665eb92ccb145d83817a02997"
3841

3942
// ECDSA expected values
40-
expectedECDSAPrivateKey := "-----BEGIN PRIVATE KEY-----\nMIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgCjoPFeWCpjL5OS+h\nwg7JaWoDcpW2np2VJjuVLeSR4QyhRANCAAS74cSqqlctrjyVcf2uRHKCx+wIqrVc\nzfqhfKYn3DGkzrycKqStkJWdn2WQR4LAPypZhM3EPnJ9ZfAmMWH4ruot\n-----END PRIVATE KEY-----"
41-
expectedECDSAPublicKey := "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEu+HEqqpXLa48lXH9rkRygsfsCKq1\nXM36oXymJ9wxpM68nCqkrZCVnZ9lkEeCwD8qWYTNxD5yfWXwJjFh+K7qLQ==\n-----END PUBLIC KEY-----"
4243
expectedECDSAKeyID := "98adf38602c48c5479e9a991ee3f8cbf541ee4f985e00f7a5fc4148d9a45b704"
4344

44-
t.Run("RSA private key", func(t *testing.T) {
45-
key, err := LoadKey(rsaPrivateKey)
46-
assert.Nil(t, err)
47-
assert.Equal(t, expectedRSAKeyID, key.KeyID)
48-
assert.Equal(t, expectedRSAPublicKey, key.KeyVal.Public)
49-
assert.Equal(t, expectedRSAPrivateKey, key.KeyVal.Private)
50-
assert.Equal(t, RSAKeyScheme, key.Scheme)
51-
assert.Equal(t, RSAKeyType, key.KeyType)
52-
})
53-
54-
t.Run("RSA public key", func(t *testing.T) {
55-
key, err := LoadKey(rsaPublicKey)
56-
assert.Nil(t, err)
57-
assert.Equal(t, expectedRSAKeyID, key.KeyID)
58-
assert.Equal(t, expectedRSAPublicKey, key.KeyVal.Public)
59-
assert.Equal(t, "", key.KeyVal.Private)
60-
assert.Equal(t, RSAKeyScheme, key.Scheme)
61-
assert.Equal(t, RSAKeyType, key.KeyType)
62-
})
63-
64-
t.Run("ED25519 private key", func(t *testing.T) {
65-
key, err := LoadKey(ed25519PrivateKey)
66-
assert.Nil(t, err)
67-
assert.Equal(t, expectedED25519KeyID, key.KeyID)
68-
assert.Equal(t, expectedED25519PublicKey, key.KeyVal.Public)
69-
assert.Equal(t, expectedED25519PrivateKey, key.KeyVal.Private)
70-
assert.Equal(t, ED25519KeyType, key.Scheme)
71-
assert.Equal(t, ED25519KeyType, key.KeyType)
72-
})
73-
74-
t.Run("ED25519 public key", func(t *testing.T) {
75-
key, err := LoadKey(ed25519PublicKey)
76-
assert.Nil(t, err)
77-
assert.Equal(t, expectedED25519KeyID, key.KeyID)
78-
assert.Equal(t, expectedED25519PublicKey, key.KeyVal.Public)
79-
assert.Equal(t, "", key.KeyVal.Private)
80-
assert.Equal(t, ED25519KeyType, key.Scheme)
81-
assert.Equal(t, ED25519KeyType, key.KeyType)
82-
})
83-
84-
t.Run("ECDSA private key", func(t *testing.T) {
85-
key, err := LoadKey(ecdsaPrivateKey)
86-
assert.Nil(t, err)
87-
assert.Equal(t, expectedECDSAKeyID, key.KeyID)
88-
assert.Equal(t, expectedECDSAPublicKey, key.KeyVal.Public)
89-
assert.Equal(t, expectedECDSAPrivateKey, key.KeyVal.Private)
90-
assert.Equal(t, ECDSAKeyScheme, key.Scheme)
91-
assert.Equal(t, ECDSAKeyType, key.KeyType)
92-
})
93-
94-
t.Run("ECDSA public key", func(t *testing.T) {
95-
key, err := LoadKey(ecdsaPublicKey)
96-
assert.Nil(t, err)
97-
assert.Equal(t, expectedECDSAKeyID, key.KeyID)
98-
assert.Equal(t, expectedECDSAPublicKey, key.KeyVal.Public)
99-
assert.Equal(t, "", key.KeyVal.Private)
100-
assert.Equal(t, ECDSAKeyScheme, key.Scheme)
101-
assert.Equal(t, ECDSAKeyType, key.KeyType)
102-
})
45+
tests := map[string]struct {
46+
keyBytes []byte
47+
expectedPrivateKey string
48+
expectedPublicKey string
49+
expectedKeyID string
50+
expectedKeyType string
51+
expectedScheme string
52+
}{
53+
"RSA private key": {
54+
keyBytes: rsaPrivateKey,
55+
expectedPrivateKey: strings.TrimSpace(string(rsaPrivateKey)),
56+
expectedPublicKey: strings.TrimSpace(string(rsaPublicKey)),
57+
expectedKeyID: expectedRSAKeyID,
58+
expectedKeyType: RSAKeyType,
59+
expectedScheme: RSAKeyScheme,
60+
},
61+
"RSA private key (PKCS8)": {
62+
keyBytes: rsaPrivateKeyPKCS8,
63+
expectedPrivateKey: strings.TrimSpace(string(rsaPrivateKeyPKCS8)),
64+
expectedPublicKey: strings.TrimSpace(string(rsaPublicKey)),
65+
expectedKeyID: expectedRSAKeyID,
66+
expectedKeyType: RSAKeyType,
67+
expectedScheme: RSAKeyScheme,
68+
},
69+
"RSA public key": {
70+
keyBytes: rsaPublicKey,
71+
expectedPrivateKey: "",
72+
expectedPublicKey: strings.TrimSpace(string(rsaPublicKey)),
73+
expectedKeyID: expectedRSAKeyID,
74+
expectedKeyType: RSAKeyType,
75+
expectedScheme: RSAKeyScheme,
76+
},
77+
"ED25519 private key": {
78+
keyBytes: ed25519PrivateKey,
79+
expectedPrivateKey: expectedED25519PrivateKey,
80+
expectedPublicKey: expectedED25519PublicKey,
81+
expectedKeyID: expectedED25519KeyID,
82+
expectedKeyType: ED25519KeyType,
83+
expectedScheme: ED25519KeyType,
84+
},
85+
"ED25519 public key": {
86+
keyBytes: ed25519PublicKey,
87+
expectedPrivateKey: "",
88+
expectedPublicKey: expectedED25519PublicKey,
89+
expectedKeyID: expectedED25519KeyID,
90+
expectedKeyType: ED25519KeyType,
91+
expectedScheme: ED25519KeyType,
92+
},
93+
"ECDSA private key": {
94+
keyBytes: ecdsaPrivateKey,
95+
expectedPrivateKey: strings.TrimSpace(string(ecdsaPrivateKey)),
96+
expectedPublicKey: strings.TrimSpace(string(ecdsaPublicKey)),
97+
expectedKeyID: expectedECDSAKeyID,
98+
expectedKeyType: ECDSAKeyType,
99+
expectedScheme: ECDSAKeyScheme,
100+
},
101+
"ECDSA public key": {
102+
keyBytes: ecdsaPublicKey,
103+
expectedPrivateKey: "",
104+
expectedPublicKey: strings.TrimSpace(string(ecdsaPublicKey)),
105+
expectedKeyID: expectedECDSAKeyID,
106+
expectedKeyType: ECDSAKeyType,
107+
expectedScheme: ECDSAKeyScheme,
108+
},
109+
}
110+
111+
for name, test := range tests {
112+
t.Run(name, func(t *testing.T) {
113+
key, err := LoadKey(test.keyBytes)
114+
assert.Nil(t, err, fmt.Sprintf("unexpected error in test '%s'", name))
115+
assert.Equal(t, test.expectedKeyID, key.KeyID)
116+
assert.Equal(t, test.expectedPublicKey, key.KeyVal.Public)
117+
assert.Equal(t, test.expectedPrivateKey, key.KeyVal.Private)
118+
assert.Equal(t, test.expectedScheme, key.Scheme)
119+
assert.Equal(t, test.expectedKeyType, key.KeyType)
120+
})
121+
}
103122
}

‎signerverifier/test-data/rsa-test-key-pkcs8

+40
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
-----BEGIN RSA PRIVATE KEY-----
2+
MIIG/gIBADANBgkqhkiG9w0BAQEFAASCBugwggbkAgEAAoIBgQDTh6BlGJz51kxW
3+
2JBznoN6NTgUXWrdo6RQqcP5DiVNuPXOno4MolNyS26matp3ryOq0yJIYbyF7oQs
4+
WzfvurxtuARQxaAB/7TpDygW9RJ85fNk0UjsflIw84ljloNYgwgRnwOVw7tN+QDs
5+
PeIAQlfHFM5VLdQAiTm6Y7tju3vJevw78Li7vySsZrMKehuVx6QwsllXg7/kGWhY
6+
0B78HVy9l1plR/dusPhlmvES1fD+15+GfVoexJRqNVbbDCNKkqGqPtnRdLdsNLdP
7+
3n/fGw3r6GVLoDusl+JakohEePS+HZJcsOaaFCXUifxMP9qLJxNTJZwFEdU+VgWB
8+
g+3pJpNVBKAzNLELjf/Z8g1vZ/K3xJtQcncK36bNHN3/UBCKRaEF2y0kvEid7DON
9+
gT+xv5zYKYLEw9AbYHCYBZdpq6Z4lxdU8GUyAByMxq0zxs8HJNtekoOdCyU4TuD+
10+
CzAMjCcSbndPXeZnNhS9ssnSrdqWNlUsgLchmfdnADbIJZyEGRUCAwEAAQKCAYAq
11+
zAB4I8wywhhM4+EJ+3K3aYgQmrvx3tdyWH6lZ6bFfFwDM1IjHT6L29Ylxm2wFFe/
12+
ipsfkOKvKExGmygMkTfpbPc2jl1quh0UoDPovSnB6lZdufgqnP4tGEDeTMgDQvOB
13+
eS4lAWZmhrAYnAabLdELntqGIlEH0LvEycPSkE6hu4fH6tK9bZVSai7kOkNVgQBn
14+
t9XannXXBQr3GRiDwr8OPs6TukVF+HkxOXF38aAiN2b3s2nl2rj6ahNKG0ESp+q+
15+
K/U58NrfYMhIA5wQqILaODQ73qSEPPZiMrjQcBtasaNUHW/7+RYpNYnr910tv4OT
16+
vsop5nilI8ph5QzuNeXJWKSe2YVPDgJcW+TZCo58nIHEDFzHh4H+fqPWaoi+ovpO
17+
OWhef8GFz/rkWvl56feEttGeG03FcFRHBWhhgnAvDu1k4wqq3nWpspTZepogjuJU
18+
cY9p4NRizg9oFJJb8TUUUBlsh3UZJ7j6YOImKnGzgzpL030U+BOZmWBD/SPpUyEC
19+
gcEA2vKCrYiyBGNzNU74WE4CaY/rGNtyggjnzYlO6fBvxh/golHwMzb3ktFxp+T0
20+
2ziXdAX+sRIryZkBsxSyMqUPhZwTZBM4ShBAFX6UksPJh4CGarbrzh2pogYDmMRb
21+
QZx8OmPjYeHL+qLLU9ZN787VoVotphXRtcs83UJMalz4N1GHmVft+2hNL8OjRT05
22+
/fSzTQGb0BXQsujIflaZekZZq05gEcfCiaLTy8yxsl6WAXMNA9GMd+mPv4RmHXB2
23+
p7xxAoHBAPdTxA/tlq0HnKYwux5+b8jpSivDPlKozKLP678Vz7giLxLAuxVDD4ih
24+
nLGh+QpNswRKuBCEtvMLn15FtRwXsZn6VlDDqAb/5gu/H0xhwRUZ6u7I+aVgWnqD
25+
683+oSI+zWhl6PyvVeM2Pbbxd1MwAnapNtkZXKEQwxsGB3kUXESq54Pn8QgtPrGP
26+
0HG9DWbYgVtUiRd86uF3AST5FxtcMDSf6tKSEFqNZDd5VAZjaFadgH7V+a6ZgWzy
27+
EBowAmUI5QKBwEK+LovL4chosJQNkLMKhL29O4OGUe/F2zPSqZWyz7/rs8SHidty
28+
5CGDa0wtBV9WbwTVVwCPc32vAM+gfXnmy0aFf3vASCZ7sa1butrKiEKgMVmSjWt1
29+
q2JSxwHoyZDErTH3hTcvZ8jtm2HhMDzsJj9biBLbD+SFIfao4TaDRL9IQTfDkC5V
30+
a0ImNz1CHs2FrKrK1L6oB8iiIYwxxfN6Qpdv+uUwqeLfGgVETt766mtisRL67AEZ
31+
19IgACj1QZZ8YQKBwQDykInioT68lpGRAIwUPSa/IeXng8YU5Y5FQ6xPLUIashP+
32+
zVzuXmXWt8HpCRUpgMjItctOEAsp1UVI/Q7B7Y72l+mdrjaWHtVswdYdYGYwnsml
33+
xR/qjNRQAh/7WPaJkpR8Bi7527Bdda4TRUClKpnP7OdpBpGtObZQQ5qCqnBPvFnx
34+
KUJgpZcuKADj++kv67j6bK9DhPULiV5q940s/T4d7pUsTaqSVMdsDKdW2JnVEQWb
35+
35nQHqcrxT/7nwhKNO0CgcEAuCoyikUg4zACGFqyesvc/PF/RYrMqaP/LbIQ/RVy
36+
2bSa6rEWcXA/DI4B3oc4Mk5KIU8PlU3iO8L5jD3pCfb2QcZdMqAvUn1xIvzPpDOV
37+
z5RgJ1LCZpkrmvfr40FMmC8pj0qumRcKRJpzliAhi1cyK2ar02Y29xIlaa66J6m3
38+
ccWXCRTel+bDMo0R6qLaOa4g6ojbMI6pfrsj5hCwmCscTROZjHFGSB5hTLuzkOgc
39+
Tbmt+93LkvH7EA4fxmAPVIY7
40+
-----END RSA PRIVATE KEY-----

0 commit comments

Comments
 (0)