test: Improve stackable-certs test speeds (#763)

* test: Improve stackable-certs test speeds

This commit increases the optimization level for the
stackable-certs crate during test runs to O2 to speed
up the RSA key generation. Additionally, it only uses
2048 bit long keys instead of 4096 used in release
builds. Further, it also disables two doc tests.

* Further reduce test times down to < 0.5s

* fixup comment

* test: Add test-case for ecdsa

---------

Co-authored-by: Sebastian Bernauer <[email protected]>

Author: Techassi

Cargo.toml

@@ -66,3 +66,9 @@ tracing-subscriber = { version = "0.3.18", features = ["env-filter"] }
 url = "2.5.0"
 x509-cert = { version = "0.2.5", features = ["builder"] }
 zeroize = "1.7.0"
+
+# Use O3 in tests to improve the RSA key generation speed in the stackable-certs crate
+[profile.test.package.stackable-certs]
+opt-level = 3
+[profile.test.package."rsa"]
+opt-level = 3

crates/stackable-certs/src/ca/mod.rs

@@ -477,14 +477,16 @@ mod test {
     use super::*;
 
     #[tokio::test]
-    async fn test() {
+    async fn test_rsa_key_generation() {
         let mut ca = CertificateAuthority::new_rsa().unwrap();
-        ca.generate_leaf_certificate(
-            rsa::SigningKey::new().unwrap(),
-            "Airflow",
-            "pod",
-            Duration::from_secs(3600),
-        )
-        .unwrap();
+        ca.generate_rsa_leaf_certificate("Airflow", "pod", Duration::from_secs(3600))
+            .unwrap();
+    }
+
+    #[tokio::test]
+    async fn test_ecdsa_key_generation() {
+        let mut ca = CertificateAuthority::new_ecdsa().unwrap();
+        ca.generate_ecdsa_leaf_certificate("Airflow", "pod", Duration::from_secs(3600))
+            .unwrap();
     }
 }

crates/stackable-certs/src/keys/mod.rs

@@ -9,7 +9,7 @@
 //! [`ecdsa`], which provides primitives and traits, and [`p256`] which
 //! implements the NIST P-256 elliptic curve and supports ECDSA.
 //!
-//! ```
+//! ```ignore
 //! use stackable_certs::keys::ecdsa::SigningKey;
 //! let key = SigningKey::new().unwrap();
 //! ```
@@ -18,7 +18,7 @@
 //!
 //! In order to work with RSA keys, this crate requires the [`rsa`] dependency.
 //!
-//! ```
+//! ```ignore
 //! use stackable_certs::keys::rsa::SigningKey;
 //! let key = SigningKey::new().unwrap();
 //! ```

crates/stackable-certs/src/keys/rsa.rs

@@ -9,8 +9,12 @@ use tracing::instrument;
 
 use crate::keys::CertificateKeypair;
 
+#[cfg(not(test))]
 const KEY_SIZE: usize = 4096;
 
+#[cfg(test)]
+const KEY_SIZE: usize = 512;
+
 pub type Result<T, E = Error> = std::result::Result<T, E>;
 
 #[derive(Debug, PartialEq, Snafu)]