| /* |
| Copyright 2018 The Kubernetes Authors. |
| |
| Licensed under the Apache License, Version 2.0 (the "License"); |
| you may not use this file except in compliance with the License. |
| You may obtain a copy of the License at |
| |
| http://www.apache.org/licenses/LICENSE-2.0 |
| |
| Unless required by applicable law or agreed to in writing, software |
| distributed under the License is distributed on an "AS IS" BASIS, |
| WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| See the License for the specific language governing permissions and |
| limitations under the License. |
| */ |
| |
| package renewal |
| |
| import ( |
| "crypto/x509" |
| "testing" |
| |
| certutil "k8s.io/client-go/util/cert" |
| "k8s.io/kubernetes/cmd/kubeadm/app/phases/certs" |
| ) |
| |
| func TestFileRenew(t *testing.T) { |
| caCertCfg := &certutil.Config{CommonName: "kubernetes"} |
| caCert, caKey, err := certs.NewCACertAndKey(caCertCfg) |
| if err != nil { |
| t.Fatalf("couldn't create CA: %v", err) |
| } |
| |
| fr := NewFileRenewal(caCert, caKey) |
| |
| certCfg := &certutil.Config{ |
| CommonName: "test-certs", |
| AltNames: certutil.AltNames{ |
| DNSNames: []string{"test-domain.space"}, |
| }, |
| Usages: []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth}, |
| } |
| |
| cert, _, err := fr.Renew(certCfg) |
| if err != nil { |
| t.Fatalf("unexpected error renewing cert: %v", err) |
| } |
| |
| pool := x509.NewCertPool() |
| pool.AddCert(caCert) |
| |
| _, err = cert.Verify(x509.VerifyOptions{ |
| DNSName: "test-domain.space", |
| Roots: pool, |
| KeyUsages: []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth}, |
| }) |
| if err != nil { |
| t.Errorf("couldn't verify new cert: %v", err) |
| } |
| |
| } |