public void GetRepositoryCountersignature_WithRepositoryCountersignatureWithInvalidV3ServiceIndexUrl_Throws()
{
using (var test = new Test(_fixture))
{
test.CreateValidAuthorPrimarySignature();
// Generate countersignature
test.CounterCmsSigner.SignedAttributes.Add(
AttributeUtility.CreateCommitmentTypeIndication(SignatureType.Repository));
var invalidV3ServiceIndexBytes = DerEncoder.SegmentedEncodeIA5String("notAValidUri".ToCharArray())
.SelectMany(x => x)
.ToArray();
var invalidV3ServiceIndex = new System.Security.Cryptography.CryptographicAttributeObject(
new System.Security.Cryptography.Oid(Oids.NuGetV3ServiceIndexUrl),
new System.Security.Cryptography.AsnEncodedDataCollection(new System.Security.Cryptography.AsnEncodedData(Oids.NuGetV3ServiceIndexUrl, invalidV3ServiceIndexBytes)));
test.CounterCmsSigner.SignedAttributes.Add(
invalidV3ServiceIndex);
test.CounterCmsSigner.SignedAttributes.Add(
new Pkcs9SigningTime());
test.CounterCmsSigner.SignedAttributes.Add(
AttributeUtility.CreateSigningCertificateV2(test.Certificate, HashAlgorithmName.SHA256));
// Create counter signature
test.PrimarySignedCms.SignerInfos[0].ComputeCounterSignature(test.CounterCmsSigner);
// Load primary signature
var primarySignature = PrimarySignature.Load(test.PrimarySignedCms.Encode());
// Validate countersignature
var exception = Assert.Throws <SignatureException>(
() => RepositoryCountersignature.GetRepositoryCountersignature(primarySignature));
Assert.Equal(NuGetLogCode.NU3000, exception.Code);
Assert.Equal("The nuget-v3-service-index-url attribute is invalid.", exception.Message);
}
}
public void Load_WithAuthorSignatureWithMultipleSigningCertificateV2AttributeValues_Throws()
{
using (var test = new LoadTest(_fixture))
{
test.CmsSigner.SignedAttributes.Add(
AttributeUtility.CreateCommitmentTypeIndication(SignatureType.Author));
test.CmsSigner.SignedAttributes.Add(new Pkcs9SigningTime());
var attribute = AttributeUtility.CreateSigningCertificateV2(test.Certificate, HashAlgorithmName.SHA256);
attribute.Values.Add(attribute.Values[0]);
test.CmsSigner.SignedAttributes.Add(attribute);
test.SignedCms.ComputeSignature(test.CmsSigner);
var exception = Assert.Throws <SignatureException>(
() => PrimarySignature.Load(test.SignedCms.Encode()));
Assert.Equal(NuGetLogCode.NU3011, exception.Code);
Assert.Equal("The signing-certificate-v2 attribute must have exactly one attribute value.", exception.Message);
}
}
