ocsp tests

Author: Falseclock

tests/AdvancedCMS/MainTest.php

@@ -48,11 +48,21 @@ public function getOCSPRequest()
         return file_get_contents(__DIR__ . '/../fixtures/OCSPRequest.pem');
     }
 
-    public function OCSPRequestWithSignature()
+    public function getOCSPRequestWithSignature()
     {
         return file_get_contents(__DIR__ . '/../fixtures/OCSPRequestWithSignature.pem');
     }
 
+	public function getRevokedCertificate()
+	{
+		return file_get_contents(__DIR__ . '/../fixtures/revokedCertificate.pem');
+	}
+
+	public function getDoubleOCSPRequest()
+	{
+		return file_get_contents(__DIR__ . '/../fixtures/DoubleOCSPRequest.pem');
+	}
+
     protected function curlRequest(string $url, string $binaryContent, string $requestContentType, string $responseContentType)
     {
         $curl = curl_init();

tests/AdvancedCMS/OCSPRequestTest.php

@@ -16,6 +16,38 @@
 
 class OCSPRequestTest extends MainTest
 {
+    public function testDouble()
+    {
+        $OCSPRequest = OCSPRequest::createFromContent($this->getDoubleOCSPRequest());
+        $requestList = $OCSPRequest->getTBSRequest()->getRequestList();
+
+        self::assertIsIterable($requestList);
+        self::assertCount(2, $requestList);
+    }
+
+    public function testRevoked()
+    {
+        $certificate = Certificate::createFromContent($this->getRevokedCertificate());
+        $intermediateCertificate = Certificate::createFromContent($this->getIntermediateCertificate());
+        $OCSPRequest = OCSPRequest::createSimple($certificate, $intermediateCertificate, Algorithm::OID_SHA256);
+
+        foreach ($certificate->getOcspUris() as $url) {
+            $result = $this->curlRequest($url, $OCSPRequest->getBinary(), OCSPRequest::CONTENT_TYPE, OCSPResponse::CONTENT_TYPE);
+
+            if (!is_null($result)) {
+                $OCSPResponse = OCSPResponse::createFromContent($result);
+                self::assertInstanceOf(OCSPResponse::class, $OCSPResponse);
+
+                $responses = $OCSPResponse->getBasicOCSPResponse()->getTbsResponseData()->getResponses();
+                foreach ($responses as $response) {
+                    self::assertTrue($response->getCertStatus()->isRevoked());
+                }
+
+                break;
+            }
+        }
+    }
+
     public function testSimple()
     {
         $signedData = SignedData::createFromContent($this->getFullCMS());
@@ -46,7 +78,7 @@ public function testSimple()
 
     public function testWithSignature()
     {
-        $OCSPRequest = OCSPRequest::createFromContent($this->OCSPRequestWithSignature());
+        $OCSPRequest = OCSPRequest::createFromContent($this->getOCSPRequestWithSignature());
 
         $optionalSignature = $OCSPRequest->getOptionalSignature();
 

tests/fixtures/DoubleOCSPRequest.pem

@@ -0,0 +1 @@
+MIIBBjCCAQIwgdowazBpMA0GCWCGSAFlAwQCAQUABCBv/tbEehijYyEUXBbteEiK7lPBCjYU56FYSrGBOu940gQgUBwm7z9f/+3WmAX3JB734Cy97Ptuf/w3qsvBbHHvV88CFDT3MRK0TLJZ9+5u0HgLpEfpEmJ0MGswaTANBglghkgBZQMEAgEFAAQgb/7WxHoYo2MhFFwW7XhIiu5TwQo2FOehWEqxgTrveNIEIFAcJu8/X//t1pgF9yQe9+Asvez7bn/8N6rLwWxx71fPAhQRyRBkRFOsgJrRSdJveJXNQsi6XaIjMCEwHwYJKwYBBQUHMAECBBIEEG7zEPwe6uJqZKaxFvkZy54=

tests/fixtures/revokedCertificate.pem

@@ -0,0 +1,37 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----