Examples with StringMatcher io.envoyproxy.envoy.type.matcher.v3.StringMatcher used on opensource projects

Example 21 with StringMatcher

use of io.envoyproxy.envoy.type.matcher.v3.StringMatcher in project grpc-java by grpc.

the class SdsX509TrustManagerTest method oneSanInPeerCerts_suffix.

@Test
public void oneSanInPeerCerts_suffix() throws CertificateException, IOException {
    StringMatcher stringMatcher = StringMatcher.newBuilder().setSuffix(".google.be").setIgnoreCase(false).build();
    CertificateValidationContext certContext = CertificateValidationContext.newBuilder().addMatchSubjectAltNames(stringMatcher).build();
    trustManager = new SdsX509TrustManager(certContext, mockDelegate);
    X509Certificate[] certs = CertificateUtils.toX509Certificates(TestUtils.loadCert(SERVER_1_PEM_FILE));
    trustManager.verifySubjectAltNameInChain(certs);
}

Example 22 with StringMatcher

use of io.envoyproxy.envoy.type.matcher.v3.StringMatcher in project grpc-java by grpc.

the class SdsX509TrustManagerTest method oneSanInPeerCerts_safeRegex1.

@Test
public void oneSanInPeerCerts_safeRegex1() throws CertificateException, IOException {
    StringMatcher stringMatcher = StringMatcher.newBuilder().setSafeRegex(RegexMatcher.newBuilder().setRegex("no-match-string|\\*\\.test\\.youtube\\.com")).build();
    CertificateValidationContext certContext = CertificateValidationContext.newBuilder().addMatchSubjectAltNames(stringMatcher).build();
    trustManager = new SdsX509TrustManager(certContext, mockDelegate);
    X509Certificate[] certs = CertificateUtils.toX509Certificates(TestUtils.loadCert(SERVER_1_PEM_FILE));
    trustManager.verifySubjectAltNameInChain(certs);
}

Example 23 with StringMatcher

use of io.envoyproxy.envoy.type.matcher.v3.StringMatcher in project grpc-java by grpc.

the class SdsX509TrustManagerTest method oneSanInPeerCerts_prefix.

@Test
public void oneSanInPeerCerts_prefix() throws CertificateException, IOException {
    StringMatcher stringMatcher = StringMatcher.newBuilder().setPrefix(// test.google.be
    "waterzooi.").setIgnoreCase(false).build();
    CertificateValidationContext certContext = CertificateValidationContext.newBuilder().addMatchSubjectAltNames(stringMatcher).build();
    trustManager = new SdsX509TrustManager(certContext, mockDelegate);
    X509Certificate[] certs = CertificateUtils.toX509Certificates(TestUtils.loadCert(SERVER_1_PEM_FILE));
    trustManager.verifySubjectAltNameInChain(certs);
}

Example 24 with StringMatcher

use of io.envoyproxy.envoy.type.matcher.v3.StringMatcher in project grpc-java by grpc.

the class SdsX509TrustManagerTest method oneSanInPeerCertsNotFoundException.

@Test
public void oneSanInPeerCertsNotFoundException() throws CertificateException, IOException {
    StringMatcher stringMatcher = StringMatcher.newBuilder().setExact("x.foo.com").build();
    CertificateValidationContext certContext = CertificateValidationContext.newBuilder().addMatchSubjectAltNames(stringMatcher).build();
    trustManager = new SdsX509TrustManager(certContext, mockDelegate);
    X509Certificate[] certs = CertificateUtils.toX509Certificates(TestUtils.loadCert(SERVER_1_PEM_FILE));
    try {
        trustManager.verifySubjectAltNameInChain(certs);
        fail("no exception thrown");
    } catch (CertificateException expected) {
        assertThat(expected).hasMessageThat().isEqualTo("Peer certificate SAN check failed");
    }
}

Example 25 with StringMatcher

use of io.envoyproxy.envoy.type.matcher.v3.StringMatcher in project grpc-java by grpc.

the class SdsX509TrustManagerTest method oneSanInPeerCerts_substring.

@Test
public void oneSanInPeerCerts_substring() throws CertificateException, IOException {
    StringMatcher stringMatcher = StringMatcher.newBuilder().setContains("zooi.test.google").setIgnoreCase(false).build();
    CertificateValidationContext certContext = CertificateValidationContext.newBuilder().addMatchSubjectAltNames(stringMatcher).build();
    trustManager = new SdsX509TrustManager(certContext, mockDelegate);
    X509Certificate[] certs = CertificateUtils.toX509Certificates(TestUtils.loadCert(SERVER_1_PEM_FILE));
    trustManager.verifySubjectAltNameInChain(certs);
}