+test_MD5CA_Attempt() {
+
+ # TODO: Verify attempts to create MD5 certs fail
+ actual=$(certmaster-request --hostname badmd5req.pwan.co --ca md5 2>&1)
+ expected=$(cat <<EOF
+error: md5 hash function is unsupported: md5
+EOF
+)
+ assertEquals "MD5CA Attempt" "$actual" "$expected"
+}
+
+test_Sha1CA_Autosigning() {
+
+ actual=$(certmaster-request --hostname testcert.pwan.co --ca sha1 2>&1)
+ expected=$(cat <<EOF
+Deprecated hash function of sha1: sha1
+EOF
+)
+ assertEquals "deprecated sha1 warning" "$actual" "$expected"
+ openssl x509 -in /etc/pki/certmaster-sha1/testcert.pwan.co.cert -text | grep Signature | grep sha1 > /dev/null 2>&1
+ assertTrue "testcert.pwan.co.cert has a sha1 hash" $?
+
+}
+
+test_Sha224CA_Autosigning() {
+
+ # TODO: Verify /etc/pki/certmaster-test/testcert.pwan.co.cert is using sha224
+ certmaster-request --hostname testcert.pwan.co --ca sha224
+ openssl x509 -in /etc/pki/certmaster-sha224/testcert.pwan.co.cert -text | grep Signature | grep sha224 > /dev/null 2>&1
+ assertTrue "testcert.pwan.co.cert has a sha224 hash" $?
+
+}
+