1 files changed, 31 insertions, 0 deletions
diff --git a/controller-api/src/test/java/com/yahoo/vespa/hosted/controller/api/integration/certificates/EndpointCertificateTest.java b/controller-api/src/test/java/com/yahoo/vespa/hosted/controller/api/integration/certificates/EndpointCertificateTest.java
new file mode 100644
index 00000000000..e165157dac2
--- /dev/null
+++ b/controller-api/src/test/java/com/yahoo/vespa/hosted/controller/api/integration/certificates/EndpointCertificateTest.java
@@ -0,0 +1,31 @@
+package com.yahoo.vespa.hosted.controller.api.integration.certificates;
+
+import org.junit.jupiter.api.Test;
+
+import java.util.List;
+
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+/**
+ * @author mpolden
+ */
+class EndpointCertificateTest {
+
+    @Test
+    public void san_matches() {
+        List<String> sans = List.of("*.a.example.com", "b.example.com", "c.example.com");
+        assertTrue(EndpointCertificate.sanMatches("b.example.com", sans));
+        assertTrue(EndpointCertificate.sanMatches("c.example.com", sans));
+        assertTrue(EndpointCertificate.sanMatches("foo.a.example.com", sans));
+        assertFalse(EndpointCertificate.sanMatches("", List.of()));
+        assertFalse(EndpointCertificate.sanMatches("example.com", List.of()));
+        assertFalse(EndpointCertificate.sanMatches("example.com", sans));
+        assertFalse(EndpointCertificate.sanMatches("d.example.com", sans));
+        assertFalse(EndpointCertificate.sanMatches("a.example.com", sans));
+        assertFalse(EndpointCertificate.sanMatches("aa.example.com", sans));
+        assertFalse(EndpointCertificate.sanMatches("c.c.example.com", sans));
+        assertFalse(EndpointCertificate.sanMatches("a.a.a.example.com", sans));
+    }
+
+}