Is there a best practice for storing certificates (e.g. x509), which include private keys, used in unit tests?

Question

In a software library, I wrote, large parts of the code use x509 certificates for various purposes like signing documents digitally.

Is there a best practice for storing test certificates used for the unit tests? Should they be stored in git/the same versioning system where the code is?

score 4 · Accepted Answer · answered Feb 28 '19 at 08:34

4

Certificates are small. And there is no problem with security if they are only used for testing.

So I see no problem storing them in source control.

answered Feb 28 '19 at 08:34

Euphoric

38,149

Is there a best practice for storing certificates (e.g. x509), which include private keys, used in unit tests?

1 Answers1