summaryrefslogtreecommitdiff
path: root/tests/test_crypto.py
diff options
context:
space:
mode:
authorRomuald Brunet <romuald@chivil.com>2019-01-21 19:38:33 +0100
committerAlex Gaynor <alex.gaynor@gmail.com>2019-01-21 12:38:33 -0600
commit4183beb4bc3f72d656dd9f18acb0ddcabca5ca79 (patch)
treea1bebfdc1db26a115c03e8fa3b2abe3d90128932 /tests/test_crypto.py
parent7d5a3bfd55c7c9de71af877e773dce4554cf455b (diff)
downloadpyopenssl-git-4183beb4bc3f72d656dd9f18acb0ddcabca5ca79.tar.gz
Handle NULL bytes in get_components() values (#804)
* Handle NULL bytes in get_components() values Some old software may generate "bogus" CN with each character preceded by a NULL. This is already handled in commonName, but wasn't in get_components() * review fixes (fix py3 test & avoid unpack/cast)
Diffstat (limited to 'tests/test_crypto.py')
-rw-r--r--tests/test_crypto.py11
1 files changed, 11 insertions, 0 deletions
diff --git a/tests/test_crypto.py b/tests/test_crypto.py
index ec632d9..c938021 100644
--- a/tests/test_crypto.py
+++ b/tests/test_crypto.py
@@ -1214,6 +1214,17 @@ class TestX509Name(object):
subject = cert.get_subject()
assert "null.python.org\x00example.org" == subject.commonName
+ def test_load_nul_byte_components(self):
+ """
+ An `X509Name` from an `X509` instance loaded from a file can have a
+ NUL byte in the value of its components
+ """
+ cert = load_certificate(FILETYPE_PEM, nulbyteSubjectAltNamePEM)
+ subject = cert.get_subject()
+ components = subject.get_components()
+ ccn = [value for name, value in components if name == b'CN']
+ assert ccn[0] == b'null.python.org\x00example.org'
+
def test_set_attribute_failure(self):
"""
If the value of an attribute cannot be set for some reason then