use of com.venafi.vcert.sdk.certificate.CertificateRequest in project vcert-java by Venafi.
the class VCertClientTest method requestCertificateWithServerError.
@Test
@DisplayName("Request certificate with server error")
void requestCertificateWithServerError() throws VCertException {
final CertificateRequest certificateRequest = mock(CertificateRequest.class);
final ZoneConfiguration zoneConfiguration = mock(ZoneConfiguration.class);
zoneConfiguration.zoneId("test_zone");
doThrow(new FeignException.InternalServerError("Error", request, "".getBytes())).when(connector).requestCertificate(certificateRequest, zoneConfiguration);
assertThrows(VCertException.class, () -> classUnderTest.requestCertificate(certificateRequest, zoneConfiguration));
}
use of com.venafi.vcert.sdk.certificate.CertificateRequest in project vcert-java by Venafi.
the class ZoneConfigurationTest method invalidKeyPolices.
@Test
@DisplayName("Key Policies should fail if do not match")
void invalidKeyPolices() throws VCertException {
final ZoneConfiguration zoneConfiguration = getBaseZoneConfiguration();
final CertificateRequest certificateRequest = getDefaultCertificateRequest();
certificateRequest.keyType(KeyType.ECDSA);
final Throwable exception = assertThrows(VCertException.class, () -> zoneConfiguration.validateCertificateRequest(certificateRequest));
assertThat(exception.getMessage()).contains("Key Type and Size do not match");
}
use of com.venafi.vcert.sdk.certificate.CertificateRequest in project vcert-java by Venafi.
the class ZoneConfigurationTest method invalidProvince.
@Test
@DisplayName("Invalid match in the state province")
void invalidProvince() throws VCertException {
final ZoneConfiguration zoneConfiguration = getBaseZoneConfiguration();
final CertificateRequest certificateRequest = getDefaultCertificateRequest();
certificateRequest.subject().province(Arrays.asList("Test"));
final Throwable exception = assertThrows(VCertException.class, () -> zoneConfiguration.validateCertificateRequest(certificateRequest));
assertThat(exception.getMessage()).contains("does not match any of the allowed State/Province");
}
use of com.venafi.vcert.sdk.certificate.CertificateRequest in project vcert-java by Venafi.
the class TppTokenConnectorCertAT method retrieveCertificate.
@Test
void retrieveCertificate() throws VCertException, SocketException, UnknownHostException {
TppTokenConnector connector = connectorResource.connector();
ZoneConfiguration zoneConfiguration = connectorResource.zoneConfiguration();
CertificateRequest certificateRequest = connectorResource.certificateRequest();
certificateRequest = connector.generateRequest(zoneConfiguration, certificateRequest);
String certificateId = connector.requestCertificate(certificateRequest, zoneConfiguration);
assertThat(certificateId).isNotNull();
PEMCollection pemCollection = connector.retrieveCertificate(certificateRequest);
assertThat(pemCollection.certificate()).isNotNull();
assertThat(pemCollection.privateKey()).isNotNull();
}
use of com.venafi.vcert.sdk.certificate.CertificateRequest in project vcert-java by Venafi.
the class CloudConnectorUtils method buildCsrAttributes.
public static CsrAttributes buildCsrAttributes(CertificateRequest request, PolicySpecification policySpecification) throws VCertException {
CsrAttributes csrAttributes = new CsrAttributes();
// computing the commonName
String reqCN = request.subject() != null && isNotBlank(request.subject().commonName()) ? request.subject().commonName() : null;
if (reqCN != null) {
// validating that the request.subject.cn matches with the policy domains
String[] policyDomains = Optional.ofNullable(policySpecification).map(ps -> ps.policy()).map(p -> p.domains()).orElse(null);
if (policyDomains != null && !matchRegexes(reqCN, policyDomains))
throw new PolicyMatchException("CN", reqCN, "domains", policyDomains);
csrAttributes.commonName(reqCN);
}
// computing the organization
List<String> reqOrganizations = Optional.ofNullable(request).map(req -> req.subject()).map(s -> s.organization()).orElse(null);
if (reqOrganizations != null && reqOrganizations.size() > 0) {
String[] reqOrgsArray = reqOrganizations.toArray(new String[0]);
// validating that the req.subject.organization matches with the policy orgs
String[] policyOrgs = Optional.ofNullable(policySpecification).map(ps -> ps.policy()).map(p -> p.subject()).map(s -> s.orgs()).orElse(null);
if (policyOrgs != null && !matchRegexes(reqOrgsArray, policyOrgs))
throw new PolicyMatchException("organization", reqOrgsArray, "organization", policyOrgs);
csrAttributes.organization(reqOrgsArray[0]);
} else {
String defaultOrg = Optional.ofNullable(policySpecification).map(ps -> ps.defaults()).map(d -> d.subject()).map(s -> s.org()).orElse(null);
if (isNotBlank(defaultOrg))
csrAttributes.organization(defaultOrg);
}
// computing the organizational Units
List<String> reqOrgUnits = Optional.ofNullable(request).map(req -> req.subject()).map(s -> s.organizationalUnit()).orElse(null);
if (reqOrgUnits != null && reqOrgUnits.size() > 0) {
String[] reqOrgUnitsArray = reqOrgUnits.toArray(new String[0]);
// validating that the req.subject.organizationalUnit matches with the policy orgUnits
String[] policyOrgUnits = Optional.ofNullable(policySpecification).map(ps -> ps.policy()).map(p -> p.subject()).map(s -> s.orgUnits()).orElse(null);
if (policyOrgUnits != null && !matchRegexes(reqOrgUnitsArray, policyOrgUnits))
throw new PolicyMatchException("org unit", reqOrgUnitsArray, "org unit", policyOrgUnits);
csrAttributes.organizationalUnits(reqOrgUnitsArray);
} else {
String[] defaultOrgUnits = Optional.ofNullable(policySpecification).map(ps -> ps.defaults()).map(d -> d.subject()).map(s -> s.orgUnits()).orElse(null);
if (defaultOrgUnits != null && defaultOrgUnits.length > 0)
csrAttributes.organizationalUnits(defaultOrgUnits);
}
// computing the localities
List<String> reqLocalities = Optional.ofNullable(request).map(req -> req.subject()).map(s -> s.locality()).orElse(null);
if (reqLocalities != null && reqLocalities.size() > 0) {
String[] reqLocalitiesArray = reqLocalities.toArray(new String[0]);
// validating that the req.subject.locality matches with the policy localities
String[] policyLocalities = Optional.ofNullable(policySpecification).map(ps -> ps.policy()).map(p -> p.subject()).map(s -> s.localities()).orElse(null);
if (policyLocalities != null && !matchRegexes(reqLocalitiesArray, policyLocalities))
throw new PolicyMatchException("locality", reqLocalitiesArray, "localities", policyLocalities);
csrAttributes.locality(reqLocalitiesArray[0]);
} else {
String defaultLocality = Optional.ofNullable(policySpecification).map(ps -> ps.defaults()).map(d -> d.subject()).map(s -> s.locality()).orElse(null);
if (isNotBlank(defaultLocality))
csrAttributes.locality(defaultLocality);
}
// computing the province
List<String> reqProvince = Optional.ofNullable(request).map(req -> req.subject()).map(s -> s.province()).orElse(null);
if (reqProvince != null && reqProvince.size() > 0) {
String[] reqProvinceArray = reqProvince.toArray(new String[0]);
// validating that the req.subject.province matches with the policy states
String[] policyStates = Optional.ofNullable(policySpecification).map(ps -> ps.policy()).map(p -> p.subject()).map(s -> s.states()).orElse(null);
if (policyStates != null && !matchRegexes(reqProvinceArray, policyStates))
throw new PolicyMatchException("state", reqProvinceArray, "states", policyStates);
csrAttributes.state(reqProvinceArray[0]);
} else {
String defaultState = Optional.ofNullable(policySpecification).map(ps -> ps.defaults()).map(d -> d.subject()).map(s -> s.state()).orElse(null);
if (isNotBlank(defaultState))
csrAttributes.state(defaultState);
}
// computing the country
List<String> reqCountries = Optional.ofNullable(request).map(req -> req.subject()).map(s -> s.country()).orElse(null);
if (reqCountries != null && reqCountries.size() > 0) {
String[] reqCountriesArray = reqCountries.toArray(new String[0]);
// validating that the req.subject.country matches with the policy countries
String[] policyCountries = Optional.ofNullable(policySpecification).map(ps -> ps.policy()).map(p -> p.subject()).map(s -> s.countries()).orElse(null);
if (policyCountries != null && !matchRegexes(reqCountriesArray, policyCountries))
throw new PolicyMatchException("state", reqCountriesArray, "states", policyCountries);
csrAttributes.country(reqCountriesArray[0]);
} else {
String defaultCountry = Optional.ofNullable(policySpecification).map(ps -> ps.defaults()).map(d -> d.subject()).map(s -> s.country()).orElse(null);
if (isNotBlank(defaultCountry))
csrAttributes.country(defaultCountry);
}
if (request.dnsNames() != null && request.dnsNames().size() > 0) {
SubjectAlternativeNamesByType subjectAlternativeNamesByType = new SubjectAlternativeNamesByType().dnsNames(request.dnsNames().toArray(new String[0]));
csrAttributes.subjectAlternativeNamesByType(subjectAlternativeNamesByType);
}
return csrAttributes;
}
Aggregations