From: Felix Dörre <felix@dogcraft.de>
Date: Sat, 26 Mar 2016 09:28:01 +0000 (+0100)
Subject: add: test for "fix: codesigning permission was inverted"
X-Git-Url: https://code.wpia.club/?p=gigi.git;a=commitdiff_plain;h=32b26fe04fff1c844266bad0cbbcd8318b5b1205;ds=sidebyside

add: test for "fix: codesigning permission was inverted"
---

diff --git a/tests/org/cacert/gigi/pages/account/TestCertificateRequest.java b/tests/org/cacert/gigi/pages/account/TestCertificateRequest.java
index 6fc5fc57..57d481d8 100644
--- a/tests/org/cacert/gigi/pages/account/TestCertificateRequest.java
+++ b/tests/org/cacert/gigi/pages/account/TestCertificateRequest.java
@@ -8,7 +8,6 @@ import java.security.GeneralSecurityException;
 import java.security.KeyPair;
 
 import org.cacert.gigi.GigiApiException;
-import org.cacert.gigi.dbObjects.EmailAddress;
 import org.cacert.gigi.dbObjects.Group;
 import org.cacert.gigi.pages.account.certs.CertificateRequest;
 import org.cacert.gigi.testUtils.ClientTest;
@@ -63,11 +62,8 @@ public class TestCertificateRequest extends ClientTest {
     @Test
     public void testCodesignModifiedName() throws Exception {
         try {
+            u.grantGroup(u, Group.CODESIGNING);
             CertificateRequest cr = new CertificateRequest(ac, generatePEMCSR(kp, "CN=a ab"));
-            System.out.println("eml");
-            for (EmailAddress e : u.getEmails()) {
-                System.out.println(e.getAddress());
-            }
             cr.update("name", "SHA512", "code-a", null, null, "email:" + email, null, null);
             cr.draft();
             fail();
@@ -76,4 +72,18 @@ public class TestCertificateRequest extends ClientTest {
         }
 
     }
+
+    // TODO annotate that this depends on default config
+    @Test
+    public void testCodesignNoPermModifiedName() throws Exception {
+        try {
+            CertificateRequest cr = new CertificateRequest(ac, generatePEMCSR(kp, "CN=a ab"));
+            cr.update("name", "SHA512", "code-a", null, null, "email:" + email, null, null);
+            cr.draft();
+            fail();
+        } catch (GigiApiException e) {
+            assertThat(e.getMessage(), containsString("Certificate Profile is invalid."));
+        }
+
+    }
 }