mirrors/opendht
1
0 Fork 0
mirror of https://github.com/savoirfairelinux/opendht.git synced 2026-11-08 04:21:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

python: validate restored keys through certificate chains

Browse Source
This commit is contained in:
Adrien Beraud committed 2026-10-26 00:51:27 -04:00
1 parent 2703cf129d
commit 91c3f62c0c
1 file changed
+15 -2
Download Patch File Download Diff File Expand all files Collapse all files
python/tests/opendht_tests.py
+15 -2
View File
@@ -25,13 +25,21 @@ class OpenDhtTester(unittest.TestCase):
restored_public = dht.PublicKey(public_key.serialize())
self.assertEqual(restored_public.getLongId(), public_key.getLongId())
self.assertEqual(bytes(restored_public), public_key.serialize())
ca_cert = dht.Certificate.generate(key, "root", is_ca=True)
trust = dht.TrustList()
trust.add(ca_cert)
for password in ("", "test-password"):
with self.subTest(algorithm=generate.__name__, encrypted=bool(password)):
encoded = key.serialize(password)
self.assertIsInstance(encoded, bytes)
restored_key = dht.PrivateKey(encoded, password)
self.assertEqual(restored_key.getLongId(), key.getLongId())
self.assertTrue(restored_public.checkSignature(message, restored_key.sign(message)))
certificate = dht.Certificate.generate(
dht.PrivateKey.generateEC(), "restored", dht.Identity(restored_key, ca_cert)
)
self.assertTrue(trust.verify(certificate))
if generate.__name__ == "generate":
self.assertTrue(restored_public.checkSignature(message, restored_key.sign(message)))
self.assertEqual(dht.PrivateKey(bytes(key)).getLongId(), key.getLongId())
def test_key_import_errors(self):
@@ -44,10 +52,15 @@ class OpenDhtTester(unittest.TestCase):
key_type().serialize()
with self.assertRaises(ValueError):
bytes(key_type())
encoded = dht.PrivateKey.generateEC().serialize("test-password")
key = dht.PrivateKey.generateEC()
encoded = key.serialize("test-password")
for password in ("", "wrong-password"):
with self.assertRaises(RuntimeError):
dht.PrivateKey(encoded, password)
with self.assertRaises(ValueError):
key.serialize("test\0password")
with self.assertRaises(ValueError):
dht.PrivateKey(encoded, "test\0password")
def test_identity_persistence(self):
ca_key = dht.PrivateKey.generateEC()