// Copyright 2021 The Gitea Authors. All rights reserved.// SPDX-License-Identifier: MIT package util import (	"crypto"	"crypto/rand"	"crypto/rsa"	"crypto/sha256"	"crypto/x509"	"encoding/pem"	"testing" 	"github.com/stretchr/testify/assert"	"github.com/stretchr/testify/require") func TestKeygen(t *testing.T) {	priv, pub, err := GenerateKeyPair(2048)	require.NoError(t, err) 	assert.NotEmpty(t, priv)	assert.NotEmpty(t, pub) 	assert.Regexp(t, "^-----BEGIN RSA PRIVATE KEY-----.*", priv)	assert.Regexp(t, "^-----BEGIN PUBLIC KEY-----.*", pub)} func TestSignUsingKeys(t *testing.T) {	priv, pub, err := GenerateKeyPair(2048)	require.NoError(t, err) 	privPem, _ := pem.Decode([]byte(priv))	if privPem == nil || privPem.Type != "RSA PRIVATE KEY" {		t.Fatal("key is wrong type")	} 	privParsed, err := x509.ParsePKCS1PrivateKey(privPem.Bytes)	require.NoError(t, err) 	pubPem, _ := pem.Decode([]byte(pub))	if pubPem == nil || pubPem.Type != "PUBLIC KEY" {		t.Fatal("key failed to decode")	} 	pubParsed, err := x509.ParsePKIXPublicKey(pubPem.Bytes)	require.NoError(t, err) 	// Sign	msg := "activity pub is great!"	h := sha256.New()	h.Write([]byte(msg))	d := h.Sum(nil)	sig, err := rsa.SignPKCS1v15(rand.Reader, privParsed, crypto.SHA256, d)	require.NoError(t, err) 	// Verify	err = rsa.VerifyPKCS1v15(pubParsed.(*rsa.PublicKey), crypto.SHA256, d, sig)	require.NoError(t, err)}