From 284598d9f2b79ab3ec63cf23b4fabe1b02d7abcd Mon Sep 17 00:00:00 2001
From: Cedric Staub <cs@squareup.com>
Date: Fri, 18 Aug 2017 12:56:43 -0700
Subject: [PATCH] Add test for certificate with name constraints

---
 tests/dump-name-constraints-to-text.t | 56 +++++++++++++++++++++++++++
 1 file changed, 56 insertions(+)
 create mode 100644 tests/dump-name-constraints-to-text.t

diff --git a/tests/dump-name-constraints-to-text.t b/tests/dump-name-constraints-to-text.t
new file mode 100644
index 0000000..2741971
--- /dev/null
+++ b/tests/dump-name-constraints-to-text.t
@@ -0,0 +1,56 @@
+Set up test data.
+
+  $ cat > example-name-constraints.crt <<EOF
+  > -----BEGIN CERTIFICATE-----
+  > MIID1DCCArygAwIBAgIJAL8xOGAOaSzBMA0GCSqGSIb3DQEBCwUAMGExCzAJBgNV
+  > BAYTAlVTMQswCQYDVQQIEwJDQTEQMA4GA1UEChMHY2VydGlnbzEQMA4GA1UECxMH
+  > ZXhhbXBsZTEhMB8GA1UEAxMYZXhhbXBsZS1uYW1lLWNvbnN0cmFpbnRzMB4XDTE3
+  > MDgxODE5NDg1MFoXDTI0MDYyMjE5NDg1MFowYTELMAkGA1UEBhMCVVMxCzAJBgNV
+  > BAgTAkNBMRAwDgYDVQQKEwdjZXJ0aWdvMRAwDgYDVQQLEwdleGFtcGxlMSEwHwYD
+  > VQQDExhleGFtcGxlLW5hbWUtY29uc3RyYWludHMwggEiMA0GCSqGSIb3DQEBAQUA
+  > A4IBDwAwggEKAoIBAQDkrrryvC1a63Vc2yCBb0SliieU6TnqZAQ5rJzAa4zf7uq9
+  > obwLuGfZV5j/7nYl04M2gPiz4Rk8uia14tIqBjFjB5DH7czuaPiGKgMSKMXt9lPZ
+  > xu3ZnRLRmF+I/zlIjxqLU9bxem7Qs7RBoncbbd65gy8PPe2J09rJdrcj5V/hD2jZ
+  > pNWtrYA6ANGsMSxLchtpn3LKyDy/bW2HIhXmqVIq/2j2p2ljKf6E63L4S7e7FW8E
+  > MGiW9y+DLO5U7qSZUiqgAiXHjTKWtYgbnlqboPtZRV5quN2PE0KD3FOLhAQX5MKS
+  > 3P48+cjeswmruNVc8qjdCi1NLsRCTHukM/WxAC35AgMBAAGjgY4wgYswDgYDVR0P
+  > AQH/BAQDAgIEMBIGA1UdEwEB/wQIMAYBAf8CAQAwZQYDVR0eBF4wXKAsMA6CDC5l
+  > eGFtcGxlLmNvbTAKhwjAqAAA//8AADAOgQwuZXhhbXBsZS5jb22hLDAOggwuZXhh
+  > bXBsZS5vcmcwCocICgoAAP//AAAwDoEMLmV4YW1wbGUub3JnMA0GCSqGSIb3DQEB
+  > CwUAA4IBAQBDxhzTZc0fB7B2EvHmzz45J3xgk/aQksKFXeWxyX7UdgSY+gzABRMk
+  > txHCMZtdTJxi4BACpRlO4QMbJXSiofhGJQb+ThSvM1CQv+W5X4j7/40RBfRnWbQP
+  > ZGfxSyGhLYAIzUsHi6X7DbJmzV2EixPbYKCJ+5Vlf7IH0aDexzf4xKLQdy+cWy1g
+  > Y4bHiiQbVqfTjlzdsMuiFqoZe3/NhOP93XSMZErx6pJ/lrWiO+6ytM3gdwh1y0DE
+  > tFmaBKzI+2uQwt6DHQuPmOSEmI7NcrVS2WhPVPa7fIY/ExUy7jqIr2qM59eSl7OC
+  > AhzgLtgqfwLgbj5PWZENYlNRXmZGi4GD
+  > -----END CERTIFICATE-----
+  > EOF
+
+Dump an example certificate with name constraints (example-name-constraints.crt)
+
+  $ certigo --verbose dump example-name-constraints.crt
+  ** CERTIFICATE 1 **
+  Serial: 13776854720312847553
+  Valid: 2017-08-18 19:48 UTC to 2024-06-22 19:48 UTC
+  Signature: SHA256-RSA (self-signed)
+  Subject Info:
+  \tCountry: US (esc)
+  \tProvince: CA (esc)
+  \tOrganization: certigo (esc)
+  \tOrganizational Unit: example (esc)
+  \tCommonName: example-name-constraints (esc)
+  Issuer Info:
+  \tCountry: US (esc)
+  \tProvince: CA (esc)
+  \tOrganization: certigo (esc)
+  \tOrganizational Unit: example (esc)
+  \tCommonName: example-name-constraints (esc)
+  Basic Constraints: CA:true, pathlen:0
+  DNS Name Constraints:
+  Permitted:
+  \t.example.com (esc)
+  Excluded:
+  \t.example.org (esc)
+  Key Usage:
+  \tCert Sign (esc)
+