commit 40f8338e986610f57ef905e510e0bf8f796e43e8
author Paul Kehrer <paul.l.kehrer@gmail.com> Mon Apr 20 15:00:16 2015 -0500
committer Paul Kehrer <paul.l.kehrer@gmail.com> Mon Apr 20 22:12:32 2015 -0500
tree 1b0444a8d78b9a85831c587ffaa0730a5524240a
parent bd11e028dcf763171097f5366f87f95ad0371a03

Support Subject Alternative Name in the OpenSSL backend

Adds only DNS support first

tests/test_x509_ext.py

diff --git a/tests/test_x509_ext.py b/tests/test_x509_ext.py
index 8516a33..2fa659e 100644
--- a/tests/test_x509_ext.py
+++ b/tests/test_x509_ext.py
@@ -730,3 +730,24 @@
         assert repr(san) == (
             "<SubjectAlternativeName([<DNSName(value=cryptography.io)>])>"
         )
+
+
+@pytest.mark.requires_backend_interface(interface=RSABackend)
+@pytest.mark.requires_backend_interface(interface=X509Backend)
+class TestRSASubjectAlternativeNameExtension(object):
+    def test_dns_name(self, backend):
+        cert = _load_cert(
+            os.path.join("x509", "cryptography.io.pem"),
+            x509.load_pem_x509_certificate,
+            backend
+        )
+        ext = cert.extensions.get_extension_for_oid(
+            x509.OID_SUBJECT_ALTERNATIVE_NAME
+        )
+        assert ext is not None
+        assert ext.critical is False
+
+        san = ext.value
+
+        dns = san.get_values_for_type(x509.DNSName)
+        assert dns == [u"www.cryptography.io", u"cryptography.io"]