595 lines
16 KiB
C#
595 lines
16 KiB
C#
//
|
|
// X509StoreTest.cs - NUnit tests for X509Store
|
|
//
|
|
// Author:
|
|
// Sebastien Pouliot (spouliot@motus.com)
|
|
//
|
|
// (C) 2003 Motus Technologies Inc. (http://www.motus.com)
|
|
//
|
|
|
|
#if NET_2_0
|
|
|
|
using NUnit.Framework;
|
|
|
|
using System;
|
|
using System.Collections;
|
|
using System.Security.Cryptography;
|
|
using System.Security.Cryptography.X509Certificates;
|
|
using System.Text;
|
|
|
|
namespace MonoTests.System.Security.Cryptography.X509Certificates {
|
|
|
|
[TestFixture]
|
|
public class X509StoreTest {
|
|
|
|
private X509Certificate2 cert_empty;
|
|
private X509Certificate2 cert1;
|
|
private X509Certificate2 cert2;
|
|
private X509Certificate2Collection coll_empty;
|
|
private X509Certificate2Collection coll;
|
|
|
|
[TestFixtureSetUp]
|
|
public void FixtureSetUp ()
|
|
{
|
|
cert_empty = new X509Certificate2 ();
|
|
cert1 = new X509Certificate2 (X509Certificate2Test.farscape_pfx, "farscape", X509KeyStorageFlags.Exportable);
|
|
cert2 = new X509Certificate2 (Encoding.ASCII.GetBytes (X509Certificate2Test.base64_cert));
|
|
coll_empty = new X509Certificate2Collection ();
|
|
coll = new X509Certificate2Collection ();
|
|
coll.Add (cert1);
|
|
coll.Add (cert2);
|
|
|
|
CleanUpStore ("ReadOnlyStore");
|
|
}
|
|
|
|
[SetUp]
|
|
public void SetUp ()
|
|
{
|
|
CleanUpStore ("ReadWriteStore");
|
|
}
|
|
|
|
private void CleanUpStore (string s)
|
|
{
|
|
X509Store xs = new X509Store (s);
|
|
xs.Open (OpenFlags.ReadWrite);
|
|
int n = xs.Certificates.Count;
|
|
if (n > 0) {
|
|
X509Certificate2[] array = new X509Certificate2[n];
|
|
xs.Certificates.CopyTo (array, 0);
|
|
foreach (X509Certificate2 x in array)
|
|
xs.Remove (x);
|
|
}
|
|
xs.Close ();
|
|
}
|
|
|
|
private void CheckDefaults (X509Store xs)
|
|
{
|
|
Assert.AreEqual (StoreLocation.CurrentUser, xs.Location, "Location");
|
|
Assert.AreEqual ("MY", xs.Name, "Name");
|
|
Assert.IsNotNull (xs.Certificates, "Certificates");
|
|
// always IntPtr.Zero for Mono, IntPtr.Zero before being opened on Windows
|
|
Assert.AreEqual (IntPtr.Zero, xs.StoreHandle, "StoreHandle");
|
|
}
|
|
|
|
[Test]
|
|
public void ConstructorEmpty ()
|
|
{
|
|
X509Store xs = new X509Store ();
|
|
CheckDefaults (xs);
|
|
}
|
|
|
|
[Test]
|
|
[ExpectedException (typeof (ArgumentNullException))]
|
|
public void ConstructorIntPtr ()
|
|
{
|
|
new X509Store (IntPtr.Zero);
|
|
}
|
|
|
|
[Test]
|
|
[ExpectedException (typeof (ArgumentException))]
|
|
public void ConstructorStoreLocation_Invalid ()
|
|
{
|
|
new X509Store ((StoreLocation) Int32.MinValue);
|
|
}
|
|
|
|
[Test]
|
|
public void ConstructorStoreLocationCurrentUser ()
|
|
{
|
|
X509Store xs = new X509Store (StoreLocation.CurrentUser);
|
|
CheckDefaults (xs);
|
|
}
|
|
|
|
[Test]
|
|
public void ConstructorStoreLocationLocalMachine ()
|
|
{
|
|
X509Store xs = new X509Store (StoreLocation.LocalMachine);
|
|
// default properties
|
|
Assert.AreEqual (StoreLocation.LocalMachine, xs.Location, "Location");
|
|
Assert.AreEqual ("MY", xs.Name, "Name");
|
|
Assert.IsNotNull (xs.Certificates, "Certificates");
|
|
}
|
|
|
|
[Test]
|
|
public void ConstructorStoreString_Null ()
|
|
{
|
|
X509Store xs = new X509Store (null);
|
|
Assert.AreEqual (StoreLocation.CurrentUser, xs.Location, "Location");
|
|
Assert.IsNull (xs.Name, "Name");
|
|
Assert.IsNotNull (xs.Certificates, "Certificates");
|
|
}
|
|
|
|
[Test]
|
|
public void ConstructorStoreString_Empty ()
|
|
{
|
|
X509Store xs = new X509Store (String.Empty);
|
|
Assert.AreEqual (StoreLocation.CurrentUser, xs.Location, "Location");
|
|
Assert.AreEqual (String.Empty, xs.Name, "Name");
|
|
Assert.IsNotNull (xs.Certificates, "Certificates");
|
|
}
|
|
|
|
[Test]
|
|
public void ConstructorStoreStringAddressBook ()
|
|
{
|
|
X509Store xs = new X509Store ("AddressBook");
|
|
// default properties
|
|
Assert.AreEqual (StoreLocation.CurrentUser, xs.Location, "Location");
|
|
Assert.AreEqual ("AddressBook", xs.Name, "Name");
|
|
Assert.IsNotNull (xs.Certificates, "Certificates");
|
|
}
|
|
|
|
[Test]
|
|
public void ConstructorStoreStringAuthRoot ()
|
|
{
|
|
X509Store xs = new X509Store ("AuthRoot");
|
|
// default properties
|
|
Assert.AreEqual (StoreLocation.CurrentUser, xs.Location, "Location");
|
|
Assert.AreEqual ("AuthRoot", xs.Name, "Name");
|
|
Assert.IsNotNull (xs.Certificates, "Certificates");
|
|
}
|
|
|
|
[Test]
|
|
public void ConstructorStoreStringCertificateAuthority ()
|
|
{
|
|
X509Store xs = new X509Store ("CA");
|
|
// default properties
|
|
Assert.AreEqual (StoreLocation.CurrentUser, xs.Location, "Location");
|
|
Assert.AreEqual ("CA", xs.Name, "Name");
|
|
Assert.IsNotNull (xs.Certificates, "Certificates");
|
|
}
|
|
|
|
[Test]
|
|
public void ConstructorStoreStringDisallowed ()
|
|
{
|
|
X509Store xs = new X509Store ("Disallowed");
|
|
// default properties
|
|
Assert.AreEqual (StoreLocation.CurrentUser, xs.Location, "Location");
|
|
Assert.AreEqual ("Disallowed", xs.Name, "Name");
|
|
Assert.IsNotNull (xs.Certificates, "Certificates");
|
|
}
|
|
|
|
[Test]
|
|
public void ConstructorStoreStringMy ()
|
|
{
|
|
X509Store xs = new X509Store ("My");
|
|
// default properties
|
|
Assert.AreEqual (StoreLocation.CurrentUser, xs.Location, "Location");
|
|
Assert.AreEqual ("My", xs.Name, "Name");
|
|
Assert.IsNotNull (xs.Certificates, "Certificates");
|
|
}
|
|
|
|
[Test]
|
|
public void ConstructorStoreStringRoot ()
|
|
{
|
|
X509Store xs = new X509Store ("Root");
|
|
// default properties
|
|
Assert.AreEqual (StoreLocation.CurrentUser, xs.Location, "Location");
|
|
Assert.AreEqual ("Root", xs.Name, "Name");
|
|
Assert.IsNotNull (xs.Certificates, "Certificates");
|
|
}
|
|
|
|
[Test]
|
|
public void ConstructorStoreStringTrustedPeople ()
|
|
{
|
|
X509Store xs = new X509Store ("TrustedPeople");
|
|
// default properties
|
|
Assert.AreEqual (StoreLocation.CurrentUser, xs.Location, "Location");
|
|
Assert.AreEqual ("TrustedPeople", xs.Name, "Name");
|
|
Assert.IsNotNull (xs.Certificates, "Certificates");
|
|
}
|
|
|
|
[Test]
|
|
public void ConstructorStoreStringTrustedPublisher ()
|
|
{
|
|
X509Store xs = new X509Store ("TrustedPublisher");
|
|
// default properties
|
|
Assert.AreEqual (StoreLocation.CurrentUser, xs.Location, "Location");
|
|
Assert.AreEqual ("TrustedPublisher", xs.Name, "Name");
|
|
Assert.IsNotNull (xs.Certificates, "Certificates");
|
|
}
|
|
|
|
[Test]
|
|
public void ConstructorStoreStringMono ()
|
|
{
|
|
// mono isn't defined the StoreName
|
|
X509Store xs = new X509Store ("Mono");
|
|
// default properties
|
|
Assert.AreEqual (StoreLocation.CurrentUser, xs.Location, "Location");
|
|
Assert.AreEqual ("Mono", xs.Name, "Name");
|
|
Assert.IsNotNull (xs.Certificates, "Certificates");
|
|
}
|
|
|
|
[Test]
|
|
[ExpectedException (typeof (ArgumentException))]
|
|
public void ConstructorStoreName_Invalid ()
|
|
{
|
|
new X509Store ((StoreName) Int32.MinValue);
|
|
}
|
|
|
|
[Test]
|
|
public void ConstructorStoreNameAddressBook ()
|
|
{
|
|
X509Store xs = new X509Store (StoreName.AddressBook);
|
|
// default properties
|
|
Assert.AreEqual (StoreLocation.CurrentUser, xs.Location, "Location");
|
|
Assert.AreEqual ("AddressBook", xs.Name, "Name");
|
|
Assert.IsNotNull (xs.Certificates, "Certificates");
|
|
}
|
|
|
|
[Test]
|
|
public void ConstructorStoreNameAuthRoot ()
|
|
{
|
|
X509Store xs = new X509Store (StoreName.AuthRoot);
|
|
// default properties
|
|
Assert.AreEqual (StoreLocation.CurrentUser, xs.Location, "Location");
|
|
Assert.AreEqual ("AuthRoot", xs.Name, "Name");
|
|
Assert.IsNotNull (xs.Certificates, "Certificates");
|
|
}
|
|
|
|
[Test]
|
|
public void ConstructorStoreNameCertificateAuthority ()
|
|
{
|
|
X509Store xs = new X509Store (StoreName.CertificateAuthority);
|
|
// default properties
|
|
Assert.AreEqual (StoreLocation.CurrentUser, xs.Location, "Location");
|
|
Assert.AreEqual ("CA", xs.Name, "Name");
|
|
Assert.IsNotNull (xs.Certificates, "Certificates");
|
|
}
|
|
|
|
[Test]
|
|
public void ConstructorStoreNameDisallowed ()
|
|
{
|
|
X509Store xs = new X509Store (StoreName.Disallowed);
|
|
// default properties
|
|
Assert.AreEqual (StoreLocation.CurrentUser, xs.Location, "Location");
|
|
Assert.AreEqual ("Disallowed", xs.Name, "Name");
|
|
Assert.IsNotNull (xs.Certificates, "Certificates");
|
|
}
|
|
|
|
[Test]
|
|
public void ConstructorStoreNameMy ()
|
|
{
|
|
X509Store xs = new X509Store (StoreName.My);
|
|
// default properties
|
|
Assert.AreEqual (StoreLocation.CurrentUser, xs.Location, "Location");
|
|
Assert.AreEqual ("My", xs.Name, "Name");
|
|
Assert.IsNotNull (xs.Certificates, "Certificates");
|
|
}
|
|
|
|
[Test]
|
|
public void ConstructorStoreNameRoot ()
|
|
{
|
|
X509Store xs = new X509Store (StoreName.Root);
|
|
// default properties
|
|
Assert.AreEqual (StoreLocation.CurrentUser, xs.Location, "Location");
|
|
Assert.AreEqual ("Root", xs.Name, "Name");
|
|
Assert.IsNotNull (xs.Certificates, "Certificates");
|
|
}
|
|
|
|
[Test]
|
|
public void ConstructorStoreNameTrustedPeople ()
|
|
{
|
|
X509Store xs = new X509Store (StoreName.TrustedPeople);
|
|
// default properties
|
|
Assert.AreEqual (StoreLocation.CurrentUser, xs.Location, "Location");
|
|
Assert.AreEqual ("TrustedPeople", xs.Name, "Name");
|
|
Assert.IsNotNull (xs.Certificates, "Certificates");
|
|
}
|
|
|
|
[Test]
|
|
public void ConstructorStoreNameTrustedPublisher ()
|
|
{
|
|
X509Store xs = new X509Store (StoreName.TrustedPublisher);
|
|
// default properties
|
|
Assert.AreEqual (StoreLocation.CurrentUser, xs.Location, "Location");
|
|
Assert.AreEqual ("TrustedPublisher", xs.Name, "Name");
|
|
Assert.IsNotNull (xs.Certificates, "Certificates");
|
|
}
|
|
|
|
[Test]
|
|
[ExpectedException (typeof (ArgumentNullException))]
|
|
public void Add_Null ()
|
|
{
|
|
new X509Store ().Add (null);
|
|
}
|
|
|
|
[Test]
|
|
[ExpectedException (typeof (CryptographicException))]
|
|
public void Add_NotOpened ()
|
|
{
|
|
// Open wasn't called
|
|
new X509Store ().Add (cert1);
|
|
}
|
|
|
|
[Test]
|
|
[ExpectedException (typeof (CryptographicException))]
|
|
public void Add_OpenReadOnly ()
|
|
{
|
|
X509Store xs = new X509Store ("ReadOnlyStore");
|
|
xs.Open (OpenFlags.ReadOnly);
|
|
xs.Add (cert1);
|
|
}
|
|
|
|
[Test]
|
|
public void Add_SameCertificate ()
|
|
{
|
|
X509Store xs = new X509Store ("ReadWriteStore");
|
|
xs.Open (OpenFlags.ReadWrite);
|
|
int n = xs.Certificates.Count;
|
|
xs.Add (cert1);
|
|
xs.Add (cert1);
|
|
Assert.AreEqual (n + 1, xs.Certificates.Count, "Count");
|
|
xs.Close ();
|
|
}
|
|
|
|
[Test]
|
|
[ExpectedException (typeof (CryptographicException))]
|
|
public void Add_Empty_Certificate ()
|
|
{
|
|
X509Store xs = new X509Store ("ReadWriteStore");
|
|
xs.Open (OpenFlags.ReadWrite);
|
|
xs.Add (cert_empty);
|
|
}
|
|
|
|
[Test]
|
|
[ExpectedException (typeof (CryptographicException))]
|
|
public void Add_ExistingCertificateReadOnly ()
|
|
{
|
|
X509Store xs = new X509Store ("ReadWriteStore");
|
|
xs.Open (OpenFlags.ReadWrite);
|
|
xs.Add (cert1);
|
|
xs.Close ();
|
|
xs.Open (OpenFlags.ReadOnly);
|
|
xs.Add (cert1);
|
|
xs.Close ();
|
|
}
|
|
|
|
[Test]
|
|
[ExpectedException (typeof (ArgumentNullException))]
|
|
public void AddRange_Null ()
|
|
{
|
|
new X509Store ().AddRange (null);
|
|
}
|
|
|
|
[Test]
|
|
public void AddRange_Empty_Closed ()
|
|
{
|
|
X509Store xs = new X509Store ("ReadWriteStore");
|
|
xs.AddRange (coll_empty);
|
|
Assert.AreEqual (coll_empty.Count, xs.Certificates.Count, "Count");
|
|
}
|
|
|
|
[Test]
|
|
public void AddRange_Empty_ReadOnly ()
|
|
{
|
|
X509Store xs = new X509Store ("ReadWriteStore");
|
|
xs.Open (OpenFlags.ReadOnly);
|
|
xs.AddRange (coll_empty);
|
|
Assert.AreEqual (coll_empty.Count, xs.Certificates.Count, "Count");
|
|
}
|
|
|
|
[Test]
|
|
public void AddRange_Empty_ReadWrite ()
|
|
{
|
|
X509Store xs = new X509Store ("ReadWriteStore");
|
|
xs.Open (OpenFlags.ReadWrite);
|
|
xs.AddRange (coll_empty);
|
|
Assert.AreEqual (coll_empty.Count, xs.Certificates.Count, "Count");
|
|
}
|
|
|
|
[Test]
|
|
[ExpectedException (typeof (CryptographicException))]
|
|
public void AddRange_Empty_Certificate ()
|
|
{
|
|
X509Store xs = new X509Store ("ReadWriteStore");
|
|
xs.Open (OpenFlags.ReadWrite);
|
|
xs.AddRange (new X509Certificate2Collection (cert_empty));
|
|
}
|
|
|
|
[Test]
|
|
public void AddRange ()
|
|
{
|
|
X509Store xs = new X509Store ("ReadWriteStore");
|
|
xs.Open (OpenFlags.ReadWrite);
|
|
xs.AddRange (coll);
|
|
Assert.AreEqual (coll.Count, xs.Certificates.Count, "Count");
|
|
}
|
|
|
|
[Test]
|
|
[ExpectedException (typeof (CryptographicException))]
|
|
public void AddRange_NotOpened ()
|
|
{
|
|
// Open wasn't called
|
|
new X509Store ().AddRange (coll);
|
|
}
|
|
|
|
[Test]
|
|
[ExpectedException (typeof (CryptographicException))]
|
|
public void AddRange_OpenReadOnly ()
|
|
{
|
|
X509Store xs = new X509Store ("ReadOnlyStore");
|
|
xs.Open (OpenFlags.ReadOnly);
|
|
xs.AddRange (coll);
|
|
}
|
|
|
|
[Test]
|
|
public void Close_NotOpen ()
|
|
{
|
|
new X509Store ().Close ();
|
|
}
|
|
|
|
[Test]
|
|
public void Close_Collection ()
|
|
{
|
|
X509Store xs = new X509Store ("ReadWriteStore");
|
|
xs.Open (OpenFlags.ReadWrite);
|
|
xs.Add (cert1);
|
|
Assert.AreEqual (1, xs.Certificates.Count, "Open");
|
|
xs.Close ();
|
|
Assert.AreEqual (0, xs.Certificates.Count, "Close");
|
|
}
|
|
|
|
[Test]
|
|
public void Open_Invalid ()
|
|
{
|
|
X509Store xs = new X509Store ("ReadWriteStore");
|
|
xs.Open ((OpenFlags) Int32.MinValue);
|
|
}
|
|
|
|
[Test]
|
|
[ExpectedException (typeof (CryptographicException))]
|
|
public void Open_OpenExistingOnly ()
|
|
{
|
|
new X509Store ("doesn't-exists").Open (OpenFlags.OpenExistingOnly);
|
|
}
|
|
|
|
[Test]
|
|
[ExpectedException (typeof (CryptographicException))]
|
|
public void Open_Store_Null ()
|
|
{
|
|
// ctor is valid (see test) but can't be opened
|
|
new X509Store (null).Open (OpenFlags.ReadOnly);
|
|
}
|
|
|
|
[Test]
|
|
[ExpectedException (typeof (CryptographicException))]
|
|
public void Open_Store_Empty ()
|
|
{
|
|
// ctor is valid (see test) but can't be opened
|
|
new X509Store (String.Empty).Open (OpenFlags.ReadOnly);
|
|
}
|
|
|
|
[Test]
|
|
[ExpectedException (typeof (ArgumentNullException))]
|
|
public void Remove_Null ()
|
|
{
|
|
new X509Store ().Remove (null);
|
|
}
|
|
|
|
[Test]
|
|
[ExpectedException (typeof (CryptographicException))]
|
|
public void Remove_NotOpened ()
|
|
{
|
|
// Open wasn't called
|
|
new X509Store ().Remove (cert1);
|
|
}
|
|
|
|
[Test]
|
|
public void Remove_OpenReadOnly_Unexisting ()
|
|
{
|
|
X509Store xs = new X509Store ("ReadOnlyStore");
|
|
xs.Open (OpenFlags.ReadOnly);
|
|
// note: cert1 wasn't present, remove "succeed"
|
|
xs.Remove (cert1);
|
|
}
|
|
|
|
[Test]
|
|
[ExpectedException (typeof (CryptographicException))]
|
|
public void Remove_OpenReadOnly_Existing ()
|
|
{
|
|
X509Store xs = new X509Store ("ReadWriteStore");
|
|
xs.Open (OpenFlags.ReadWrite);
|
|
xs.Add (cert1);
|
|
xs.Close ();
|
|
xs.Open (OpenFlags.ReadOnly);
|
|
xs.Remove (cert1);
|
|
}
|
|
|
|
[Test]
|
|
public void Remove_Empty_Certificate ()
|
|
{
|
|
X509Store xs = new X509Store ("ReadWriteStore");
|
|
xs.Open (OpenFlags.ReadWrite);
|
|
// note: impossible to add cert_empty, so we add something else
|
|
// to be sure we'll follow the complete code path (loop) of removal
|
|
xs.Add (cert1);
|
|
xs.Remove (cert_empty);
|
|
}
|
|
|
|
[Test]
|
|
[ExpectedException (typeof (ArgumentNullException))]
|
|
public void RemoveRange_Null ()
|
|
{
|
|
new X509Store ().RemoveRange (null);
|
|
}
|
|
|
|
[Test]
|
|
public void RemoveRange_Empty ()
|
|
{
|
|
X509Store xs = new X509Store ();
|
|
xs.RemoveRange (coll_empty);
|
|
}
|
|
|
|
[Test]
|
|
[ExpectedException (typeof (CryptographicException))]
|
|
public void RemoveRange_NotOpened ()
|
|
{
|
|
// Open wasn't called
|
|
new X509Store ().RemoveRange (coll);
|
|
}
|
|
|
|
[Test]
|
|
public void RemoveRange_OpenReadOnly_Unexisting ()
|
|
{
|
|
X509Store xs = new X509Store ("ReadOnlyStore");
|
|
xs.Open (OpenFlags.ReadOnly);
|
|
// note: cert1 wasn't present, RemoveRange "succeed"
|
|
xs.RemoveRange (coll);
|
|
}
|
|
|
|
[Test]
|
|
[ExpectedException (typeof (CryptographicException))]
|
|
public void RemoveRange_OpenReadOnly_Existing ()
|
|
{
|
|
X509Store xs = new X509Store ("ReadWriteStore");
|
|
xs.Open (OpenFlags.ReadWrite);
|
|
xs.AddRange (coll);
|
|
xs.Close ();
|
|
xs.Open (OpenFlags.ReadOnly);
|
|
xs.RemoveRange (coll);
|
|
}
|
|
|
|
[Test]
|
|
public void RemoveRange_Empty_Certificate ()
|
|
{
|
|
X509Store xs = new X509Store ("ReadWriteStore");
|
|
xs.Open (OpenFlags.ReadWrite);
|
|
// note: impossible to add cert_empty, so we add something else
|
|
// to be sure we'll follow the complete code path (loop) of removal
|
|
xs.AddRange (coll);
|
|
xs.RemoveRange (new X509Certificate2Collection (cert_empty));
|
|
}
|
|
|
|
[Test]
|
|
public void Collection_Add ()
|
|
{
|
|
X509Store xs = new X509Store ("ReadWriteStore");
|
|
xs.Certificates.Add (cert1);
|
|
Assert.AreEqual (0, xs.Certificates.Count, "Not Open");
|
|
xs.Close ();
|
|
Assert.AreEqual (0, xs.Certificates.Count, "Close");
|
|
}
|
|
}
|
|
}
|
|
|
|
#endif
|