ci: ensure all certificates are valid and parsable (#6)

* ci: ensure certificates are from Amazon RDS * ci: improve messages
mysqljs · Apr 13, 2024 · 329f96e · 329f96e
1 parent 2a98699
commit 329f96e
Show file tree

Hide file tree

Showing 3 changed files with 37 additions and 2 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -10,6 +10,7 @@
   },
   "devDependencies": {
     "@types/node": "^20.12.7",
+    "@types/x509.js": "^1.0.3",
     "@typescript-eslint/eslint-plugin": "^7.6.0",
     "@typescript-eslint/parser": "^7.6.0",
     "eslint": "^8.57.0",
@@ -20,7 +21,8 @@
     "poku": "^1.9.3",
     "prettier": "^3.2.5",
     "tsx": "^4.7.2",
-    "typescript": "^5.4.4"
+    "typescript": "^5.4.4",
+    "x509.js": "^1.0.0"
   },
   "files": [
     "lib"

diff --git a/test/unit/verify-certs.test.ts b/test/unit/verify-certs.test.ts
@@ -0,0 +1,19 @@
+import x509 from 'x509.js';
+import { describe, assert } from 'poku';
+import { defaults } from '../../src/profiles/ca/defaults.js';
+
+describe('Ensuring all certificates are valid and parsable', {
+  pad: true,
+  background: false,
+});
+
+defaults.forEach((cert, index) => {
+  const parsedCert = x509.parseCert(cert);
+  const expected = 'Amazon RDS';
+
+  assert.strictEqual(
+    parsedCert.issuer.organizationalUnitName,
+    expected,
+    `Certificate at index ${index} from defaults`
+  );
+});