Bip70\Test\X509\RequestSignerTest::testSignOperation()

Complexity

Conditions	6
Paths	8

Size

Total Lines	61
Code Lines	38

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
    public function testSignOperation(CertificateBundle $trustStore, PrivateKeyInfo $privateKey, Certificate $cert, CertificateBundle $certBundle)
    {
        $now = time();

        $details = new PaymentDetails();
        $details->setTime($now);

        $requestSigner = new RequestSigner();
        // 10/12/2017 ish
        $now = new \DateTimeImmutable();
        $now = $now->setTimestamp(1509692666);

        $requestValidator = new RequestValidation(new PathValidationConfig($now, 10), $trustStore);

        foreach ([PKIType::X509_SHA256, PKIType::X509_SHA1] as $pkiType) {
            $request = $requestSigner->sign($details, $pkiType, $privateKey, $cert, $certBundle);
            $this->assertTrue($request->hasSignature());
            $this->assertTrue($request->hasPkiData());
            $this->assertTrue($request->hasPkiType());

            $this->assertEquals($pkiType, $request->getPkiType());

            try {
                $requestValidator->validateX509Signature($cert, $request);
            } catch (\Exception $e) {
                $this->fail("verification of own signature should always succeed");
                return;
            }

            $x509 = new X509Certificates();
            $x509->parse($request->getPkiData());

            $this->assertEquals(1 + count($certBundle), count($x509->getCertificateList()));

            /** @var Certificate[] $allCerts */
            $allCerts = array_merge([$cert], $certBundle->all());
            foreach ($allCerts as $i => $certificate) {
                $this->assertEquals($certificate->toDER(), $x509->getCertificate($i));
            }

            try {
                $qualifiedCert = $requestValidator->validateCertificateChain($x509);
            } catch (\Exception $e) {
                $this->fail("certificate chain validation shouldn't fail");
                return;
            }

            $this->assertTrue($cert->equals($qualifiedCert->getPath()->endEntityCertificate()));

            try {
                $result = $requestValidator->verifyX509Details($request);
                $threw = false;
            } catch (\Exception $e) {
                $threw = true;
            }

            $this->assertFalse($threw, "verifying cert details shouldn't fail");

            $this->assertTrue($result->certificate()->equals($cert));
        }
    }
}