Function TestIDFromCertFileFailures

internal/credentials/spiffe/spiffe_test.go:213–246

(t *testing.T)

}

func TestIDFromCertFileFailures(t *testing.T) {
	certWithNoURIs := loadX509Cert(t, testdata.Path("spiffe/client_spiffe.pem"))
	certWithNoURIs.URIs = nil
	certWithInvalidSPIFFEID := loadX509Cert(t, testdata.Path("spiffe/client_spiffe.pem"))
	certWithInvalidSPIFFEID.URIs = []*url.URL{{Path: "non-spiffe.bad"}}
	tests := []struct {
		name string
		cert *x509.Certificate
	}{
		{
			name: "certificate with multiple URIs",
			cert: loadX509Cert(t, testdata.Path("x509/multiple_uri_cert.pem")),
		},
		{
			name: "certificate with invalidSPIFFE ID",
			cert: certWithInvalidSPIFFEID,
		},
		{
			name: "nil cert",
			cert: nil,
		},
		{
			name: "cert with no URIs",
			cert: certWithNoURIs,
		},
	}
	for _, tt := range tests {
		t.Run(tt.name, func(t *testing.T) {
			if _, err := idFromCert(tt.cert); err == nil {
				t.Fatalf("idFromCert() succeeded but want error")
			}
		})
	}
}