Add IDN test

acme/acme/crypto_util_test.py

@@ -1,9 +1,11 @@
 """Tests for acme.crypto_util."""
+import itertools
 import socket
 import threading
 import time
 import unittest
 
+import six
 from six.moves import socketserver  # pylint: disable=import-error
 
 from acme import errors
@@ -69,6 +71,14 @@ class PyOpenSSLCertOrReqSANTest(unittest.TestCase):
         from acme.crypto_util import _pyopenssl_cert_or_req_san
         return _pyopenssl_cert_or_req_san(loader(name))
 
+    @classmethod
+    def _get_idn_names(cls):
+        chars = [six.unichr(i) for i in itertools.chain(range(0x3c3, 0x400),
+                                                        range(0x641, 0x6fc),
+                                                        range(0x1820, 0x1877))]
+        return [''.join(chars[i: i + 45]) + '.invalid'
+                for i in range(0, len(chars), 45)]
+
     def _call_cert(self, name):
         return self._call(test_util.load_cert, name)
 
@@ -86,6 +96,10 @@ class PyOpenSSLCertOrReqSANTest(unittest.TestCase):
         self.assertEqual(self._call_cert('cert-100sans.pem'),
                          ['example{0}.com'.format(i) for i in range(1, 101)])
 
+    def test_cert_idn_sans(self):
+        self.assertEqual(self._call_cert('cert-idnsans.pem'),
+                         self._get_idn_names())
+
     def test_csr_no_sans(self):
         self.assertEqual(self._call_csr('csr-nosans.pem'), [])
 
@@ -106,6 +120,10 @@ class PyOpenSSLCertOrReqSANTest(unittest.TestCase):
         self.assertEqual(self._call_csr('csr-100sans.pem'),
                          ['example{0}.com'.format(i) for i in range(1, 101)])
 
+    def test_csr(self):
+        self.assertEqual(self._call_csr('csr-idnsans.pem'),
+                         self._get_idn_names())
+
 
 if __name__ == "__main__":
     unittest.main()  # pragma: no cover