1 | assert('certificate identity matching') do
|
---|
2 | def ok(ref_id, pr_id)
|
---|
3 | msg = "matching TLS identity: reference=#{ref_id.inspect}, presented=#{pr_id.inspect}"
|
---|
4 | assert_true(OpenSSLTest.match_dns_id(ref_id, pr_id), msg)
|
---|
5 | end
|
---|
6 | def ng(ref_id, pr_id)
|
---|
7 | msg = "matching TLS identity: reference=#{ref_id.inspect}, presented=#{pr_id.inspect}"
|
---|
8 | assert_false(OpenSSLTest.match_dns_id(ref_id, pr_id), msg)
|
---|
9 | end
|
---|
10 |
|
---|
11 | ok "www.example.com", "www.example.com"
|
---|
12 | ok "WwW.ExAmPlE.CoM", "wWw.eXaMpLe.cOm"
|
---|
13 |
|
---|
14 | ok "www.example.com", "*.example.com"
|
---|
15 | ok "WwW.ExAmPlE.CoM", "*.eXaMpLe.cOm"
|
---|
16 | ok "www.a.example.com", "*.a.example.com"
|
---|
17 |
|
---|
18 | ng "www.example.com", "*"
|
---|
19 | ng "www.example.com", "w*.example.com"
|
---|
20 | ng "www.example.com", "*w.example.com"
|
---|
21 | ng "www.example.com", "www.*.com"
|
---|
22 | ng "example.com", "*."
|
---|
23 | ng "example.com", "*.com"
|
---|
24 | ng "example.com.", "*.com."
|
---|
25 |
|
---|
26 | ng "example.com", "*.example.com"
|
---|
27 | ng "foo.bar.example.com", "*.example.com"
|
---|
28 | ng "foo.bar.example.com", "*.*.example.com"
|
---|
29 | end
|
---|