Remove tlsconfigutil.CABundle.IsEqual and ensure that tlsconfigutil.NewCABundle handles nil/empty input

Co-authored-by: Ryan Richard <richardry@vmware.com>

internal/controller/tlsconfigutil/ca_bundle_test.go

@@ -43,10 +43,19 @@ func TestPEMBytes(t *testing.T) {
 		require.Equal(t, []byte("here are some bytes"), caBundle.PEMBytes())
 	})
 
+	t.Run("handles nil bundle by returning nil", func(t *testing.T) {
+		caBundle, _ := NewCABundle(nil)
+		require.Nil(t, caBundle.PEMBytes())
+	})
+
+	t.Run("handles empty bundle by returning empty byte array", func(t *testing.T) {
+		caBundle, _ := NewCABundle([]byte{})
+		require.Equal(t, []byte{}, caBundle.PEMBytes())
+	})
+
 	t.Run("handles nil receiver by returning nil", func(t *testing.T) {
 		var nilCABundle *CABundle
-		var expected []byte
-		require.Equal(t, expected, nilCABundle.PEMBytes())
+		require.Nil(t, nilCABundle.PEMBytes())
 	})
 }
 
@@ -57,23 +66,49 @@ func TestPEMString(t *testing.T) {
 		require.Equal(t, "here is a string", caBundle.PEMString())
 	})
 
-	t.Run("handles nil receiver by returning empty sstring", func(t *testing.T) {
+	t.Run("handles nil bundle by returning empty string", func(t *testing.T) {
+		caBundle, _ := NewCABundle(nil)
+
+		require.Equal(t, "", caBundle.PEMString())
+	})
+
+	t.Run("handles empty bundle by returning empty string", func(t *testing.T) {
+		caBundle, _ := NewCABundle([]byte{})
+
+		require.Equal(t, "", caBundle.PEMString())
+	})
+
+	t.Run("handles nil receiver by returning empty string", func(t *testing.T) {
 		var nilCABundle *CABundle
-		require.Equal(t, "", nilCABundle.PEMString())
+		require.Empty(t, nilCABundle.PEMString())
 	})
 }
 
 func TestCertPool(t *testing.T) {
-	t.Run("returns the generated cert pool", func(t *testing.T) {
+	t.Run("returns the certPool when the caBundle is valid", func(t *testing.T) {
+		testCA, err := certauthority.New("Test CA", 1*time.Hour)
+		require.NoError(t, err)
+
+		caBundle, _ := NewCABundle(testCA.Bundle())
+
+		require.True(t, testCA.Pool().Equal(caBundle.CertPool()))
+	})
+
+	t.Run("returns a nil certPool when the caBundle is nil", func(t *testing.T) {
 		caBundle, _ := NewCABundle(nil)
 
-		require.Equal(t, x509.NewCertPool(), caBundle.CertPool())
+		require.Nil(t, caBundle.CertPool())
+	})
+
+	t.Run("returns a nil certPool when the caBundle is empty", func(t *testing.T) {
+		caBundle, _ := NewCABundle([]byte{})
+
+		require.Nil(t, caBundle.CertPool())
 	})
 
 	t.Run("handles nil receiver by returning nil", func(t *testing.T) {
 		var nilCABundle *CABundle
-		var expected *x509.CertPool
-		require.Equal(t, expected, nilCABundle.CertPool())
+		require.Nil(t, nilCABundle.CertPool())
 	})
 }
 
@@ -92,6 +127,18 @@ func TestHash(t *testing.T) {
 		require.Equal(t, sha256OfTest, caBundle.Hash())
 	})
 
+	t.Run("returns the SHA256 when the PEM is nil", func(t *testing.T) {
+		caBundle, _ := NewCABundle(nil)
+
+		require.Equal(t, sha256OfNil, caBundle.Hash())
+	})
+
+	t.Run("returns the SHA256 when the PEM is empty", func(t *testing.T) {
+		caBundle, _ := NewCABundle([]byte{})
+
+		require.Equal(t, sha256OfNil, caBundle.Hash())
+	})
+
 	t.Run("handles nil receiver by returning the hash of nil", func(t *testing.T) {
 		var nilCABundle *CABundle
 
@@ -112,68 +159,3 @@ func TestHash(t *testing.T) {
 		require.Equal(t, sha256OfTest, caBundle.Hash())
 	})
 }
-
-func TestCABundleIsEqual(t *testing.T) {
-	testCA, err := certauthority.New("Test CA", 1*time.Hour)
-	require.NoError(t, err)
-	certPool := x509.NewCertPool()
-	require.True(t, certPool.AppendCertsFromPEM(testCA.Bundle()))
-
-	tests := []struct {
-		name     string
-		left     *CABundle
-		right    *CABundle
-		expected bool
-	}{
-		{
-			name:     "should return equal when left and right are nil",
-			left:     nil,
-			right:    nil,
-			expected: true,
-		},
-		{
-			name:     "should return equal when left is nil and right is empty",
-			left:     nil,
-			right:    &CABundle{},
-			expected: true,
-		},
-		{
-			name:     "should return equal when right is nil and left is empty",
-			left:     &CABundle{},
-			right:    nil,
-			expected: true,
-		},
-		{
-			name: "should return equal when both left and right have same CA certificate bytes",
-			left: func() *CABundle {
-				caBundle, _ := NewCABundle(testCA.Bundle())
-				return caBundle
-			}(),
-			right: func() *CABundle {
-				caBundle, _ := NewCABundle(testCA.Bundle())
-				return caBundle
-			}(),
-			expected: true,
-		},
-		{
-			name: "should return not equal when both left and right do not have same CA certificate bytes",
-			left: func() *CABundle {
-				caBundle, _ := NewCABundle(testCA.Bundle())
-				return caBundle
-			}(),
-			right: func() *CABundle {
-				caBundle, _ := NewCABundle([]byte("something that is not a cert"))
-				return caBundle
-			}(),
-			expected: false,
-		},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			t.Parallel()
-			require.Equal(t, tt.expected, tt.left.IsEqual(tt.right))
-			require.Equal(t, tt.expected, tt.right.IsEqual(tt.left))
-		})
-	}
-}