mirror of
https://github.com/luxfi/node.git
synced 2026-10-30 15:24:05 +00:00
zeekay
7cf87b230b
The module already called itself github.com/luxfi/node while containing no node in Go: cmd/luxd was twenty-one lines that printed the size of a few types, and the Go column of the matrix measured a VM plugin. A repo that fetches the thing it claims to be has not replaced it, so the Go sources move in — 1515 files, the daemon and everything under it — and the build reaches outside this module for nothing. Rust and C++ sit beside it unchanged and are still measured against it by the differential. That is the point of one repo: the reference implementation and the two ports are the same checkout, so parity is a thing you can run rather than a thing you assert. Verified: builds, and the closure carries no lux-private — checked at build time rather than believed. The daemon starts twelve chains on a local network (P X C Q Z A B G K M F, plus D through its plugin) and reports healthy.
107 lines
2.2 KiB
Go
107 lines
2.2 KiB
Go
// Copyright (C) 2019-2025, Lux Industries Inc. All rights reserved.
|
|
// See the file LICENSE for licensing terms.
|
|
|
|
package staking
|
|
|
|
import (
|
|
"crypto/rand"
|
|
"crypto/rsa"
|
|
"math/big"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/require"
|
|
|
|
_ "embed"
|
|
)
|
|
|
|
//go:embed large_rsa_key.cert
|
|
var largeRSAKeyCert []byte
|
|
|
|
func TestParseCheckLargeCert(t *testing.T) {
|
|
_, err := ParseCertificate(largeRSAKeyCert)
|
|
require.ErrorIs(t, err, ErrCertificateTooLarge)
|
|
}
|
|
|
|
func BenchmarkParse(b *testing.B) {
|
|
tlsCert, err := NewTLSCert()
|
|
require.NoError(b, err)
|
|
|
|
bytes := tlsCert.Leaf.Raw
|
|
|
|
b.ResetTimer()
|
|
for i := 0; i < b.N; i++ {
|
|
_, err = ParseCertificate(bytes)
|
|
require.NoError(b, err)
|
|
}
|
|
}
|
|
|
|
func TestValidateRSAPublicKeyIsWellFormed(t *testing.T) {
|
|
validKey, err := rsa.GenerateKey(rand.Reader, 2048)
|
|
require.NoError(t, err)
|
|
|
|
for _, testCase := range []struct {
|
|
description string
|
|
expectErr error
|
|
getPK func() rsa.PublicKey
|
|
}{
|
|
{
|
|
description: "valid public key",
|
|
getPK: func() rsa.PublicKey {
|
|
return validKey.PublicKey
|
|
},
|
|
},
|
|
{
|
|
description: "even modulus",
|
|
expectErr: ErrRSAModulusIsEven,
|
|
getPK: func() rsa.PublicKey {
|
|
evenN := new(big.Int).Set(validKey.N)
|
|
evenN.Add(evenN, big.NewInt(1))
|
|
return rsa.PublicKey{
|
|
N: evenN,
|
|
E: 65537,
|
|
}
|
|
},
|
|
},
|
|
{
|
|
description: "unsupported exponent",
|
|
expectErr: ErrUnsupportedRSAPublicExponent,
|
|
getPK: func() rsa.PublicKey {
|
|
return rsa.PublicKey{
|
|
N: validKey.N,
|
|
E: 3,
|
|
}
|
|
},
|
|
},
|
|
{
|
|
description: "unsupported modulus bit len",
|
|
expectErr: ErrUnsupportedRSAModulusBitLen,
|
|
getPK: func() rsa.PublicKey {
|
|
bigMod := new(big.Int).Set(validKey.N)
|
|
bigMod.Lsh(bigMod, 2049)
|
|
return rsa.PublicKey{
|
|
N: bigMod,
|
|
E: 65537,
|
|
}
|
|
},
|
|
},
|
|
{
|
|
description: "not positive modulus",
|
|
expectErr: ErrRSAModulusNotPositive,
|
|
getPK: func() rsa.PublicKey {
|
|
minusN := new(big.Int).Set(validKey.N)
|
|
minusN.Neg(minusN)
|
|
return rsa.PublicKey{
|
|
N: minusN,
|
|
E: 65537,
|
|
}
|
|
},
|
|
},
|
|
} {
|
|
t.Run(testCase.description, func(t *testing.T) {
|
|
pk := testCase.getPK()
|
|
err := ValidateRSAPublicKeyIsWellFormed(&pk)
|
|
require.ErrorIs(t, err, testCase.expectErr)
|
|
})
|
|
}
|
|
}
|