sendnrw/netbird
2
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-10-28 23:39:07 +01:00
Code Issues Packages Projects Releases Wiki Activity

[management] optimize posture cache (#8366)

Browse Source
This commit is contained in:
Pascal Fischer
2026-10-26 16:03:33 +01:00
committed by GitHub
parent afa6eec6a7
commit 2c68a84a97
11 changed files with 690 additions and 182 deletions
Download Patch File Download Diff File Expand all files Collapse all files
shared/management/certposture/certposture_test.go
+18
View File
@@ -175,6 +175,24 @@ func TestChainMatchesCAs(t *testing.T) {
assert.False(t, ChainMatchesCAs("not a pem", []string{ca.PEM}, now))
}
func TestAnyChainMatchesCAs(t *testing.T) {
ca := certtest.NewCA(t, "root")
otherCA := certtest.NewCA(t, "other-root")
chainPEM := EncodeChainPEM([]*x509.Certificate{ca.Issue(t, certtest.ECDSAKey(t), "device")})
otherPEM := EncodeChainPEM([]*x509.Certificate{otherCA.Issue(t, certtest.ECDSAKey(t), "device")})
assert.True(t, AnyChainMatchesCAs([]string{otherPEM, chainPEM}, []string{ca.PEM}, now))
assert.False(t, AnyChainMatchesCAs([]string{otherPEM}, []string{ca.PEM}, now))
assert.False(t, AnyChainMatchesCAs(nil, []string{ca.PEM}, now))
assert.False(t, AnyChainMatchesCAs([]string{chainPEM}, []string{"not a pem"}, now))
roots, err := ParseCAs([]string{ca.PEM})
require.NoError(t, err)
assert.True(t, AnyChainMatchesPool([]string{otherPEM, chainPEM}, roots, now))
assert.False(t, AnyChainMatchesPool([]string{otherPEM}, roots, now))
assert.False(t, AnyChainMatchesPool(nil, roots, now))
}
func TestChainPEM_RoundTrip(t *testing.T) {
ca := certtest.NewCA(t, "root")
leaf := ca.Issue(t, certtest.ECDSAKey(t), "device")