<?php

/**
 * @author    Jim Wigginton <terrafrost@php.net>
 * @copyright 2017-2026 Jim Wigginton
 * @license   http://www.opensource.org/licenses/mit-license.html  MIT License
 */

declare(strict_types=1);

namespace phpseclib4\Tests\Unit\File\X509;

use phpseclib4\Crypt\RSA;
use phpseclib4\File\CRL;
use phpseclib4\File\X509;
use phpseclib4\Math\BigInteger;
use phpseclib4\Tests\PhpseclibTestCase;

class CRLTest extends PhpseclibTestCase
{
    public function testLoadCRL(): void
    {
        $test = file_get_contents(__DIR__ . '/crl.bin');

        $crl = CRL::load($test);
        $this->assertEquals(103, $crl->numRevoked());
        $reason = $crl->getRevokedExtension(new BigInteger('9048354325167497831898969642461237543'), 'id-ce-cRLReasons')['extnValue'];
        $this->assertEquals('unspecified', $reason);
    }

    public function testCreateCRL(): void
    {
        // create private key / x.509 cert for signing
        $CAPrivKey = RSA::createKey(1024);
        $CAPubKey = $CAPrivKey->getPublicKey();

        $CA = new X509($CAPubKey);
        $CA->addDNProp('id-at-organizationName', 'phpseclib CA cert');
        $CA->makeCA();
        $CAPrivKey->sign($CA);

        $crl = new CRL();
        $crl->revoke(new BigInteger('zzz', 256), date: '+1 year');
        $crl->setDN($CA->getDN());
        $crl->setAuthorityKeyIdentifier($CA->getExtension('id-ce-subjectKeyIdentifier')['extnValue']);
        $CAPrivKey->sign($crl);

        X509::addCA("$CA");
        $crl = CRL::load("$crl");

        $this->assertArrayHasKey('parameters', $crl->toArray()['signatureAlgorithm']);
        $this->assertTrue($crl->validateSignature());
        X509::clearCAStore();
    }

    public function testPSSSigWithPKCS1Cert(): void
    {
        $ca = X509::load('-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----');
        //$ca->removeExtension('id-ce-subjectKeyIdentifier');
        X509::addCA("$ca");
        $crl = CRL::load('-----BEGIN X509 CRL-----
MIIBVDCBiTBCBgkqhkiG9w0BAQowNaANMAsGCWCGSAFlAwQCAaEaMBgGCSqGSIb3
DQEBCDALBglghkgBZQMEAgGiAwIBIKMDAgEBMBwxGjAYBgNVBAoMEXBocHNlY2xp
YiBDQSBjZXJ0Fw0yMjA5MjMyMjI1MTdaMBYwFAIDenp6Fw0yMzA5MjMyMjI1MTda
MEIGCSqGSIb3DQEBCjA1oA0wCwYJYIZIAWUDBAIBoRowGAYJKoZIhvcNAQEIMAsG
CWCGSAFlAwQCAaIDAgEgowMCAQEDgYEAZcN+8iKHAZiARPlx3rj1NpRoanrljSsH
F5C4wjjz936D0o3lLgSGwfDLKOBI8wu5BVYQMnBVtpI6be+QcTjrFbsbuB9IonG9
uY1UHwoR+HohPes2wPUOV931ds6TufSxxcGgvwdaMacBfj/AD6M2ylxtqXY4EtVc
xbyT0osik+w=
-----END X509 CRL-----');
        $this->assertTrue($crl->validateSignature());
        X509::clearCAStore();
    }
}