Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
- Introduced `SbomService` tasks documentation. - Updated `StellaOps.sln` to include new projects: `StellaOps.AirGap.Time` and `StellaOps.AirGap.Importer`. - Added unit tests for `BundleImportPlanner`, `DsseVerifier`, `ImportValidator`, and other components in the `StellaOps.AirGap.Importer.Tests` namespace. - Implemented `InMemoryBundleRepositories` for testing bundle catalog and item repositories. - Created `MerkleRootCalculator`, `RootRotationPolicy`, and `TufMetadataValidator` tests. - Developed `StalenessCalculator` and `TimeAnchorLoader` tests in the `StellaOps.AirGap.Time.Tests` namespace. - Added `fetch-sbomservice-deps.sh` script for offline dependency fetching.
29 lines
1004 B
C#
29 lines
1004 B
C#
using StellaOps.AirGap.Time.Models;
|
|
using StellaOps.AirGap.Time.Parsing;
|
|
using StellaOps.AirGap.Time.Services;
|
|
|
|
namespace StellaOps.AirGap.Time.Tests;
|
|
|
|
public class TimeVerificationServiceTests
|
|
{
|
|
[Fact]
|
|
public void FailsWithoutTrustRoots()
|
|
{
|
|
var svc = new TimeVerificationService();
|
|
var result = svc.Verify(new byte[] { 0x01 }, TimeTokenFormat.Roughtime, Array.Empty<TimeTrustRoot>(), out _);
|
|
Assert.False(result.IsValid);
|
|
Assert.Equal("trust-roots-required", result.Reason);
|
|
}
|
|
|
|
[Fact]
|
|
public void SucceedsForRoughtimeWithTrustRoot()
|
|
{
|
|
var svc = new TimeVerificationService();
|
|
var trust = new[] { new TimeTrustRoot("k1", new byte[] { 0x01 }, "rsassa-pss-sha256") };
|
|
var result = svc.Verify(new byte[] { 0x01, 0x02 }, TimeTokenFormat.Roughtime, trust, out var anchor);
|
|
Assert.True(result.IsValid);
|
|
Assert.Equal("Roughtime", anchor.Format);
|
|
Assert.Equal("k1", anchor.SignatureFingerprint);
|
|
}
|
|
}
|