computer-playbook/tests/unit/test_cert_utils.py

#!/usr/bin/env python3

import os
import sys
import unittest

# Add module_utils/ to the import path
sys.path.insert(
    0,
    os.path.abspath(
        os.path.join(
            os.path.dirname(__file__),
            "../../..",
            "module_utils",
        )
    ),
)

from module_utils.cert_utils import CertUtils


class TestCertUtilsMatches(unittest.TestCase):
    def setUp(self):
        # prepare your test cases
        self.tests = [
            # Exact matches
            ("example.com", "example.com", True),
            ("www.example.com", "www.example.com", True),
            ("api.example.com", "api.example.com", True),

            # Wildcard matches
            ("sub.example.com", "*.example.com", True),
            ("www.example.com", "*.example.com", True),

            # Wildcard non-matches
            ("example.com", "*.example.com", False),      # base domain is not covered
            ("deep.sub.example.com", "*.example.com", False),  # too deep
            ("sub.deep.example.com", "*.deep.example.com", True),  # correct: one level below

            # Special cases
            ("deep.api.example.com", "*.api.example.com", True),
            ("api.example.com", "*.api.example.com", False),  # base not covered by wildcard

            # Completely different domains
            ("test.other.com", "*.example.com", False),
        ]

    def test_matches(self):
        for domain, san, expected in self.tests:
            with self.subTest(domain=domain, san=san):
                result = CertUtils.matches(domain, san)
                self.assertEqual(
                    result,
                    expected,
                    msg=f"CertUtils.matches({domain!r}, {san!r}) returned {result}, expected {expected}",
                )


if __name__ == "__main__":
    unittest.main()