mirror of
https://codeberg.org/forgejo/forgejo.git
synced 2024-09-20 04:35:35 +02:00
4de909747b
Some checks are pending
/ release (push) Waiting to run
testing / test-remote-cacher (map[image:redis:7.2 port:6379]) (push) Blocked by required conditions
testing / test-remote-cacher (map[image:registry.redict.io/redict:7.3.0-scratch port:6379]) (push) Blocked by required conditions
testing / test-mysql (push) Blocked by required conditions
testing / test-pgsql (push) Blocked by required conditions
testing / backend-checks (push) Waiting to run
testing / frontend-checks (push) Waiting to run
testing / test-unit (push) Blocked by required conditions
testing / test-remote-cacher (map[image:docker.io/valkey/valkey:7.2.5-alpine3.19 port:6379]) (push) Blocked by required conditions
testing / test-remote-cacher (map[image:ghcr.io/microsoft/garnet-alpine:1.0.14 port:6379]) (push) Blocked by required conditions
testing / test-sqlite (push) Blocked by required conditions
testing / security-check (push) Blocked by required conditions
go-require lint is ignored for now Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/4535 Reviewed-by: Gusted <gusted@noreply.codeberg.org> Co-authored-by: TheFox0x7 <thefox0x7@gmail.com> Co-committed-by: TheFox0x7 <thefox0x7@gmail.com>
62 lines
1.4 KiB
Go
62 lines
1.4 KiB
Go
// Copyright 2021 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package util
|
|
|
|
import (
|
|
"crypto"
|
|
"crypto/rand"
|
|
"crypto/rsa"
|
|
"crypto/sha256"
|
|
"crypto/x509"
|
|
"encoding/pem"
|
|
"regexp"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func TestKeygen(t *testing.T) {
|
|
priv, pub, err := GenerateKeyPair(2048)
|
|
require.NoError(t, err)
|
|
|
|
assert.NotEmpty(t, priv)
|
|
assert.NotEmpty(t, pub)
|
|
|
|
assert.Regexp(t, regexp.MustCompile("^-----BEGIN RSA PRIVATE KEY-----.*"), priv)
|
|
assert.Regexp(t, regexp.MustCompile("^-----BEGIN PUBLIC KEY-----.*"), pub)
|
|
}
|
|
|
|
func TestSignUsingKeys(t *testing.T) {
|
|
priv, pub, err := GenerateKeyPair(2048)
|
|
require.NoError(t, err)
|
|
|
|
privPem, _ := pem.Decode([]byte(priv))
|
|
if privPem == nil || privPem.Type != "RSA PRIVATE KEY" {
|
|
t.Fatal("key is wrong type")
|
|
}
|
|
|
|
privParsed, err := x509.ParsePKCS1PrivateKey(privPem.Bytes)
|
|
require.NoError(t, err)
|
|
|
|
pubPem, _ := pem.Decode([]byte(pub))
|
|
if pubPem == nil || pubPem.Type != "PUBLIC KEY" {
|
|
t.Fatal("key failed to decode")
|
|
}
|
|
|
|
pubParsed, err := x509.ParsePKIXPublicKey(pubPem.Bytes)
|
|
require.NoError(t, err)
|
|
|
|
// Sign
|
|
msg := "activity pub is great!"
|
|
h := sha256.New()
|
|
h.Write([]byte(msg))
|
|
d := h.Sum(nil)
|
|
sig, err := rsa.SignPKCS1v15(rand.Reader, privParsed, crypto.SHA256, d)
|
|
require.NoError(t, err)
|
|
|
|
// Verify
|
|
err = rsa.VerifyPKCS1v15(pubParsed.(*rsa.PublicKey), crypto.SHA256, d, sig)
|
|
require.NoError(t, err)
|
|
}
|