commit a72ebaf84b9f41dcd9535ce9481ecc1966a7a930
author Paul Kehrer <paul.l.kehrer@gmail.com> Wed Jul 01 21:07:37 2015 -0500
committer Paul Kehrer <paul.l.kehrer@gmail.com> Fri Jul 10 11:11:19 2015 -0500
tree 98a87d0ce87feea26171a09730ad340a486745c3
parent cfb8aa2f39095d33d19b17123aed065dd5e9efd3

simplify and handle /32 and /128

tests/test_x509_ext.py

diff --git a/tests/test_x509_ext.py b/tests/test_x509_ext.py
index 7a7e79e..af0ffaf 100644
--- a/tests/test_x509_ext.py
+++ b/tests/test_x509_ext.py
@@ -2206,6 +2206,25 @@
             ]
         )
 
+    def test_single_ip_netmask(self, backend):
+        cert = _load_cert(
+            os.path.join(
+                "x509", "custom", "nc_single_ip_netmask.pem"
+            ),
+            x509.load_pem_x509_certificate,
+            backend
+        )
+        nc = cert.extensions.get_extension_for_oid(
+            x509.OID_NAME_CONSTRAINTS
+        ).value
+        assert nc == x509.NameConstraints(
+            permitted_subtrees=[
+                x509.IPAddress(ipaddress.IPv6Network(u"FF:0:0:0:0:0:0:0/128")),
+                x509.IPAddress(ipaddress.IPv4Network(u"192.168.0.1/32")),
+            ],
+            excluded_subtrees=None
+        )
+
     def test_invalid_netmask(self, backend):
         cert = _load_cert(
             os.path.join(