//

 //  MYCertificateTest.m

 //  MYCrypto-iPhone

 //

 //  Created by Jens Alfke on 6/15/09.

 //  Copyright 2009 Jens Alfke. All rights reserved.

 //

 #import "MYCertificateInfo.h"

 #import "MYCrypto.h"

 #import "MYCrypto_Private.h"

 #if DEBUG

 static MYCertificateInfo* testCertData(NSData *certData, BOOL selfSigned) {

     //Log(@"Cert Data =\n%@", certData);

     CAssert(certData!=nil);

     NSError *error = nil;

     MYCertificateInfo *pcert = [[MYCertificateInfo alloc] initWithCertificateData: certData 

                                                                             error: &error];

     CAssertNil(error);

     CAssert(pcert != nil);

     CAssertEq(pcert.isRoot, selfSigned);

     MYCertificateName *subject = pcert.subject;

     Log(@"Common Name = %@", subject.commonName);

     Log(@"Given Name  = %@", subject.givenName);

     Log(@"Surname     = %@", subject.surname);

     Log(@"Desc        = %@", subject.nameDescription);

     Log(@"Email       = %@", subject.emailAddress);

     CAssert(subject.commonName);

     MYPublicKey *pcertKey = pcert.subjectPublicKey;

     Log(@"Subject Public Key = %@", pcertKey);

     CAssert(pcertKey);

     // Now go through MYCertificate:

     Log(@"Creating a MYCertificate from the data...");

     MYCertificate *cert = [[MYCertificate alloc] initWithCertificateData: certData];

     Log(@"MYCertificate = %@", cert);

     CAssert(cert);

     CAssertEqual(cert.info, pcert);

     Log(@"Trust = %@", MYTrustResultDescribe([cert evaluateTrust]));

     MYPublicKey *certKey = cert.publicKey;

     Log(@"MYCertificate public key = ", certKey);

     CAssertEqual(certKey.keyData, pcert.subjectPublicKey.keyData);

     [cert release];

     /*TEMP

     Log(@"Adding to keychain...");

     cert = [[MYKeychain defaultKeychain] importCertificate: certData];

     Log(@"Imported as %@", cert);

     //CAssert(cert);

     if (cert) {

         Log(@"Removing from keychain...");

         CAssert([cert removeFromKeychain]);

     }

     */

     return pcert;

 }

 static NSData* readTestFile(NSString *filename) {

 #if TARGET_OS_IPHONE

     filename = [[NSBundle mainBundle] pathForResource: filename ofType: @"cer"];

 #else

     filename = [[@"../../Tests/" stringByAppendingPathComponent: filename]

                 stringByAppendingPathExtension: @"cer"];

 #endif

     Log(@"--- Testing certificate file %@", filename);

     NSData *data = [NSData dataWithContentsOfFile: filename];

     CAssert(data, @"Couldn't read file %@", filename);

     return data;

 }

 static MYCertificateInfo* testCert(NSString *filename, BOOL selfSigned) {

     return testCertData(readTestFile(filename), selfSigned);

 }

 TestCase(ParsedCert) {

     testCert(@"selfsigned", YES);

     testCert(@"iphonedev", NO);

     // Now test a self-signed cert with a bad signature:

     MYCertificate *cert = [[MYCertificate alloc] initWithCertificateData: readTestFile(@"selfsigned_altered")];

     Log(@"MYCertificate = %@", cert);

     CAssertNil(cert);

 }

 #import "MYCrypto_Private.h"

 TestCase(CreateCert) {

     MYPrivateKey *privateKey = [[MYKeychain defaultKeychain] generateRSAKeyPairOfSize: 512];

     CAssert(privateKey);

     Log(@"---- Generated key-pair with %@, %@", privateKey.publicKey, privateKey);

     MYIdentity *identity = nil;

     @try{

         MYCertificateRequest *pcert = [[MYCertificateRequest alloc] initWithPublicKey: privateKey.publicKey];

         MYCertificateName *subject = pcert.subject;

         subject.commonName = @"testcase";

         subject.givenName = @"Test";

         subject.surname = @"Case";

         subject.nameDescription = @"Just a test certificate created by MYCrypto";

         subject.emailAddress = @"testcase@example.com";

         subject = pcert.subject;

         CAssertEqual(subject.commonName, @"testcase");

         CAssertEqual(subject.givenName, @"Test");

         CAssertEqual(subject.surname, @"Case");

         CAssertEqual(subject.nameDescription, @"Just a test certificate created by MYCrypto");

         CAssertEqual(subject.emailAddress, @"testcase@example.com");

         CAssertEqual(pcert.subjectPublicKey.keyData, privateKey.publicKey.keyData);

         Log(@"---- Signing...");

         NSError *error;

         NSData *certData = [pcert selfSignWithPrivateKey: privateKey error: &error];

         Log(@"Generated cert = \n%@", certData);

         CAssert(certData);

         CAssertNil(error);

         CAssert(certData);

         MYCertificateInfo *pcert2 = testCertData(certData, YES);

         Log(@"---- Verifying Info...");

         MYCertificateName *subject2 = pcert2.subject;

         CAssertEqual(subject2,subject);

         CAssertEqual(subject2.commonName, @"testcase");

         CAssertEqual(subject2.givenName, @"Test");

         CAssertEqual(subject2.surname, @"Case");

         CAssertEqual(subject2.nameDescription, @"Just a test certificate created by MYCrypto");

         CAssertEqual(subject2.emailAddress, @"testcase@example.com");

         Log(@"---- Creating MYCertificate object...");

         MYCertificate *cert = [[MYCertificate alloc] initWithCertificateData: certData];

         Log(@"Loaded %@", cert);

         CAssert(cert);

         MYPublicKey *certKey = cert.publicKey;

         Log(@"Its public key has name %@", certKey.name);//TEMP

         Log(@"Its public key = %@", certKey);

         CAssertEqual(certKey.keyData, privateKey.publicKey.keyData);

         Log(@"X.509 trust = %@", MYTrustResultDescribe([cert evaluateTrust]));

         Log(@"SSL trust = %@", MYTrustResultDescribe([cert evaluateTrustWithPolicy: [MYCertificate SSLPolicy]]));

         Log(@"---- Adding cert to keychain...");

         MYCertificate *addedCert = [[MYKeychain defaultKeychain] importCertificate: certData];

         Log(@"Imported as %@", addedCert);

         //CAssert(addedCert);

         if (addedCert)

             CAssert([addedCert removeFromKeychain]);

         Log(@"---- Creating Identity...");

         identity = [pcert createSelfSignedIdentityWithPrivateKey: privateKey error: &error];

         Log(@"Identity = %@", identity);

         CAssert(identity);

         CAssertNil(error);

         CAssertEqual(identity.keychain, [MYKeychain defaultKeychain]);

         CAssertEqual(identity.privateKey.publicKeyDigest, privateKey.publicKeyDigest);

         CAssert([identity isEqualToCertificate: cert]);

         [pcert release];

     } @finally {

         // [privateKey removeFromKeychain];

         // [identity removeFromKeychain];

         // Currently I'm leaving them in, so the EnumerateXXX tests can chew on them later.

     }

 }

 #endif

 /*

  Copyright (c) 2009, Jens Alfke <jens@mooseyard.com>. All rights reserved.

  Redistribution and use in source and binary forms, with or without modification, are permitted

  provided that the following conditions are met:

  * Redistributions of source code must retain the above copyright notice, this list of conditions

  and the following disclaimer.

  * Redistributions in binary form must reproduce the above copyright notice, this list of conditions

  and the following disclaimer in the documentation and/or other materials provided with the

  distribution.

  THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR

  IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND 

  FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRI-

  BUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES

  (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR 

   PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 

  CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF 

  THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

  */