From b1648511b998e430ede12513fcd3e3383c7f982d Mon Sep 17 00:00:00 2001
From: arj-singh <arjunsingh@umail.ucsb.edu>
Date: Sun, 12 Nov 2023 19:41:12 -0800
Subject: [PATCH] as - basicConstraints unit tests

---
 test/x509_utils_test.dart | 97 ++++++++++++++++++++++++++++++++++++++-
 1 file changed, 95 insertions(+), 2 deletions(-)

diff --git a/test/x509_utils_test.dart b/test/x509_utils_test.dart
index f267e35..2eb2e56 100644
--- a/test/x509_utils_test.dart
+++ b/test/x509_utils_test.dart
@@ -1652,10 +1652,16 @@ SEQUENCE (1 elem)
       notBefore: notBefore,
     );
     var x509 = X509Utils.x509CertificateFromPem(pem);
-    expect(x509.tbsCertificate?.validity.notBefore.toIso8601String().substring(0, 10),
+    expect(
+        x509.tbsCertificate?.validity.notBefore
+            .toIso8601String()
+            .substring(0, 10),
         notBefore.toUtc().toIso8601String().substring(0, 10),
         reason: "notBefore match except milliseconds as utc");
-    expect(x509.tbsCertificate?.validity.notAfter.toIso8601String().substring(0, 10),
+    expect(
+        x509.tbsCertificate?.validity.notAfter
+            .toIso8601String()
+            .substring(0, 10),
         notAfter.toUtc().toIso8601String().substring(0, 10),
         reason: "notAfter match except milliseconds as utc");
   });
@@ -1707,6 +1713,93 @@ SEQUENCE (1 elem)
         KeyUsage.DECIPHER_ONLY);
   });
 
+  test('Test generateSelfSignedCertificate with cA true and valid pathlen', () {
+    var pair = CryptoUtils.generateEcKeyPair();
+    var dn = {
+      'CN': 'basic-utils.dev',
+      'O': 'Magic Company',
+      'L': 'Fakecity',
+      'S': 'FakeState',
+      'C': 'DE',
+    };
+    var csr = X509Utils.generateEccCsrPem(
+        dn, pair.privateKey as ECPrivateKey, pair.publicKey as ECPublicKey,
+        san: ['san1.basic-utils.dev', 'san2.basic-utils.dev']);
+
+    var pem = X509Utils.generateSelfSignedCertificate(pair.privateKey, csr, 365,
+        cA: true, pathLenConstraint: 10);
+    var x509 = X509Utils.x509CertificateFromPem(pem);
+
+    expect(x509.tbsCertificate?.extensions?.cA, true);
+    expect(x509.tbsCertificate?.extensions?.pathLenConstraint, 10);
+  });
+
+  test('Test generateSelfSignedCertificate with cA false and valid pathLen',
+      () {
+    var pair = CryptoUtils.generateEcKeyPair();
+    var dn = {
+      'CN': 'basic-utils.dev',
+      'O': 'Magic Company',
+      'L': 'Fakecity',
+      'S': 'FakeState',
+      'C': 'DE',
+    };
+    var csr = X509Utils.generateEccCsrPem(
+        dn, pair.privateKey as ECPrivateKey, pair.publicKey as ECPublicKey,
+        san: ['san1.basic-utils.dev', 'san2.basic-utils.dev']);
+
+    var pem = X509Utils.generateSelfSignedCertificate(pair.privateKey, csr, 365,
+        cA: false, pathLenConstraint: 10);
+    var x509 = X509Utils.x509CertificateFromPem(pem);
+
+    expect(x509.tbsCertificate?.extensions?.cA, null);
+    expect(x509.tbsCertificate?.extensions?.pathLenConstraint, null);
+  });
+
+  test('Test generateSelfSignedCertificate with cA true and invalid pathLen',
+      () {
+    var pair = CryptoUtils.generateEcKeyPair();
+    var dn = {
+      'CN': 'basic-utils.dev',
+      'O': 'Magic Company',
+      'L': 'Fakecity',
+      'S': 'FakeState',
+      'C': 'DE',
+    };
+    var csr = X509Utils.generateEccCsrPem(
+        dn, pair.privateKey as ECPrivateKey, pair.publicKey as ECPublicKey,
+        san: ['san1.basic-utils.dev', 'san2.basic-utils.dev']);
+
+    var pem = X509Utils.generateSelfSignedCertificate(pair.privateKey, csr, 365,
+        cA: true, pathLenConstraint: -10);
+    var x509 = X509Utils.x509CertificateFromPem(pem);
+
+    expect(x509.tbsCertificate?.extensions?.cA, true);
+    expect(x509.tbsCertificate?.extensions?.pathLenConstraint, null);
+  });
+
+  test('Test generateSelfSignedCertificate with cA false and invalid pathLen',
+      () {
+    var pair = CryptoUtils.generateEcKeyPair();
+    var dn = {
+      'CN': 'basic-utils.dev',
+      'O': 'Magic Company',
+      'L': 'Fakecity',
+      'S': 'FakeState',
+      'C': 'DE',
+    };
+    var csr = X509Utils.generateEccCsrPem(
+        dn, pair.privateKey as ECPrivateKey, pair.publicKey as ECPublicKey,
+        san: ['san1.basic-utils.dev', 'san2.basic-utils.dev']);
+
+    var pem = X509Utils.generateSelfSignedCertificate(pair.privateKey, csr, 365,
+        cA: false, pathLenConstraint: -10);
+    var x509 = X509Utils.x509CertificateFromPem(pem);
+
+    expect(x509.tbsCertificate?.extensions?.cA, null);
+    expect(x509.tbsCertificate?.extensions?.pathLenConstraint, null);
+  });
+
   test('Test x509CertificateFromPem with vmc', () {
     var data = X509Utils.x509CertificateFromPem(vmc);