CustomPKI

0.0.4

test/CustomPKI.Tests.ps1

$ModuleManifestName = 'CustomPKI.psd1'
$ModuleManifestPath = "$PSScriptRoot\..\$ModuleManifestName"
Import-Module -Name $PSScriptRoot\..
function Compare-String {
    param (
        $ExpectedValue,
        $ActualValue
    )
    Should @args -ExpectedValue ($ExpectedValue | Out-String) -ActualValue ($ActualValue | Out-String)
}
Describe 'Module Manifest Tests' {
    It 'Passes Test-ModuleManifest' {
        Test-ModuleManifest -Path $ModuleManifestPath | Should Not BeNullOrEmpty
        $? | Should Be $true
    }
}
Describe 'New-EKU' {
    Context 'Accepts Parameter' {
        BeforeAll {
            $pm = (Get-Command -Name New-EKU).Parameters
        }
        (-split @'
    FriendlyName
    Critical
'@) | % {
            $token = $_
            It $_ {
                $pm.ContainsKey($token) | Should -Be $true
            }
        }
        AfterAll {
            Remove-Variable -Name pm
        }
    }
    Context 'Recognizes EKU' {
        (@'
Any Purpose
Client Authentication
Server Authentication
Secure Email
Code Signing
Time Stamping
Document Encryption
IP Security End System
IP security tunnel termination
IP Security User
IP Security IKE Intermediate
All application policies
Microsoft Trust List Signing
Qualified Subordination
Key Recovery
'@ -split "`n") | % {
            $FriendlyName = $_
            It $_ {
                { New-EKU -FriendlyName $FriendlyName } | Should -Not -Throw
            }
        }
    }
}
Describe 'New-SelfSignedCertificate' {
    Context 'Accepts parameter' {
        BeforeAll {
            $pm = (Get-Command -Name New-SelfSignedCertificate).Parameters
        }
        (-split @'
UPN
Email
DNS
DirectoryName
URL
IPAddress
RegisteredID
GUID
'@) | % {
            $token = 'SAN{0}' -f $_
            It $token {
                $pm.ContainsKey($token) | Should -Be $true
            }
        }
        It 'EKU' {
            $pm.ContainsKey('EKU') | Should -Be $true
        }
        AfterAll {
            Remove-Variable -Name pm
        }
    }
    It 'Merges DnsName into SANDNS' {
        Write-Information -MessageData 'Using TextExtension 2.5.29.17={critical}{text}DNS=san&DNS=dnsname' -InformationVariable expected
        New-SelfSignedCertificate -WhatIf -DnsName dnsname -SANDNS san -InformationVariable actual
        Compare-String -Be -ExpectedValue $expected -ActualValue $actual
    }
    It 'Marks SAN* Critical when Subject absent' {
        Write-Information -MessageData 'Using TextExtension 2.5.29.17={critical}{text}DNS=domain' -InformationVariable expected
        New-SelfSignedCertificate -WhatIf -SANDNS domain -InformationVariable actual
        Compare-String -Be -ExpectedValue $expected -ActualValue $actual
    }
    It 'Merges SAN* & TextExtension' {
        Write-Information -MessageData 'Using TextExtension 2.5.29.37={text}1.3.6.1.5.5.7.3.8,2.5.29.17={text}DNS=domain' -InformationVariable expected
        New-SelfSignedCertificate -WhatIf -Subject Subject -SANDNS domain -TextExtension '2.5.29.37={text}1.3.6.1.5.5.7.3.8' -InformationVariable actual
        Compare-String -Be -ExpectedValue $expected -ActualValue $actual
    }
    It 'Merges EKU & Extension' {
        $ku = [System.Security.Cryptography.X509Certificates.X509KeyUsageExtension]::new([System.Security.Cryptography.X509Certificates.X509KeyUsageFlags]::DataEncipherment, $false)
        Write-Information -MessageData ('Using Extension{0}' -f ($ku,(New-EKU -FriendlyName 'Any Purpose') | Out-String) -join ',') -InformationVariable expected
        New-SelfSignedCertificate -WhatIf -Subject Subject -EKU 'Any Purpose' -Extension $ku -InformationVariable actual
        Compare-String -Be -ExpectedValue $expected -ActualValue $actual
    }
}