org.opensaml.xmlsec.signature.support.impl

Class ExplicitKeySignatureTrustEngineTest

java.lang.Object

org.opensaml.core.OpenSAMLInitBaseTestCase

org.opensaml.core.xml.XMLObjectBaseTestCase

org.opensaml.xmlsec.signature.support.impl.ExplicitKeySignatureTrustEngineTest

public class ExplicitKeySignatureTrustEngineTest
extends org.opensaml.core.xml.XMLObjectBaseTestCase

Test explicit key signature trust engine.

Field Summary

Fields

Modifier and Type	Field and Description
private CollectionCredentialResolver	credResolver
private net.shibboleth.utilities.java.support.resolver.CriteriaSet	criteriaSet
private org.opensaml.xmlsec.signature.support.impl.ExplicitKeySignatureTrustEngine	engine
private X509Certificate	otherCert1
private String	otherCert1Base64
private String	rawAlgorithmURI
private byte[]	rawControlSignature
private String	rawData
private X509Certificate	signingCert
private String	signingCertBase64
private String	signingEntityID
private PrivateKey	signingPrivateKey
private String	signingPrivateKeyBase64
private org.opensaml.security.x509.BasicX509Credential	signingX509Cred
private List<org.opensaml.security.credential.Credential>	trustedCredentials

Fields inherited from class org.opensaml.core.xml.XMLObjectBaseTestCase

builderFactory, marshallerFactory, parserPool, simpleXMLObjectQName, unmarshallerFactory

Constructor Summary

Constructors

Constructor and Description
ExplicitKeySignatureTrustEngineTest() Constructor.

Method Summary

Methods

Modifier and Type	Method and Description
protected org.opensaml.xmlsec.signature.SignableXMLObject	buildSignedObject() Build a signed object.
protected org.opensaml.xmlsec.signature.SignableXMLObject	getInvalidSignedObject() Get a signed object containing the signature to be validated.
protected org.opensaml.xmlsec.signature.SignableXMLObject	getValidSignedObject() Get a signed object containing the signature to be validated.
protected void	setUp()
void	testBlacklistedDigestAlgorithm() Test blacklisted digest method algorithm URI.
void	testBlacklistedSignatureAlgorithm() Test blacklisted signature method algorithm URI.
void	testInvalidSignature() Test invalid signature, trusted signing credential.
void	testRawBlacklistedAlgorithm() Test valid raw signature with whitelisted signature algorithm.
void	testRawInvalidSignature() Test invalid raw signature, trusted signing credential.
void	testRawSuccess() Test valid raw signature, trusted signing credential.
void	testRawUntrustedCredential() Test valid raw signature, untrusted signing credential.
void	testRawWhitelistedAlgorithm() Test valid raw signature with whitelisted signature algorithm.
void	testSuccess() Test valid signature.
void	testUntrustedCredential() Test valid signature, untrusted signing credential.
void	testWhitelistedAlgorithms() Test whitelisted signature and digest method algorithm URIs.

Methods inherited from class org.opensaml.core.xml.XMLObjectBaseTestCase

assertXMLEquals, assertXMLEquals, buildXMLObject, fetchDuration, getBuilder, getMarshaller, getMarshaller, getUnmarshaller, getUnmarshaller, getUnmarshaller, initXMLObjectSupport, parseXMLDocument, printXML, printXML, unmarshallElement

Methods inherited from class org.opensaml.core.OpenSAMLInitBaseTestCase

initOpenSAML

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

signingCert

private X509Certificate signingCert

signingCertBase64

private String signingCertBase64

signingPrivateKey

private PrivateKey signingPrivateKey

signingPrivateKeyBase64

private String signingPrivateKeyBase64

otherCert1

private X509Certificate otherCert1

otherCert1Base64

private String otherCert1Base64

credResolver

private CollectionCredentialResolver credResolver

trustedCredentials

private List<org.opensaml.security.credential.Credential> trustedCredentials

signingX509Cred

private org.opensaml.security.x509.BasicX509Credential signingX509Cred

engine

private org.opensaml.xmlsec.signature.support.impl.ExplicitKeySignatureTrustEngine engine

criteriaSet

private net.shibboleth.utilities.java.support.resolver.CriteriaSet criteriaSet

signingEntityID

private String signingEntityID

rawAlgorithmURI

private String rawAlgorithmURI

rawData

private String rawData

rawControlSignature

private byte[] rawControlSignature

Constructor Detail

ExplicitKeySignatureTrustEngineTest

public ExplicitKeySignatureTrustEngineTest()

Constructor.

Method Detail

setUp

protected void setUp()
              throws Exception

Throws:

Exception

testSuccess

public void testSuccess()
                 throws org.opensaml.security.SecurityException

Test valid signature.

Throws:

org.opensaml.security.SecurityException

testUntrustedCredential

public void testUntrustedCredential()
                             throws org.opensaml.security.SecurityException

Test valid signature, untrusted signing credential.

Throws:

org.opensaml.security.SecurityException

testInvalidSignature

public void testInvalidSignature()
                          throws org.opensaml.security.SecurityException

Test invalid signature, trusted signing credential.

Throws:

org.opensaml.security.SecurityException

testWhitelistedAlgorithms

public void testWhitelistedAlgorithms()
                               throws org.opensaml.security.SecurityException

Test whitelisted signature and digest method algorithm URIs.

Throws:

org.opensaml.security.SecurityException

testBlacklistedSignatureAlgorithm

public void testBlacklistedSignatureAlgorithm()
                                       throws org.opensaml.security.SecurityException

Test blacklisted signature method algorithm URI.

Throws:

org.opensaml.security.SecurityException

testBlacklistedDigestAlgorithm

public void testBlacklistedDigestAlgorithm()
                                    throws org.opensaml.security.SecurityException

Test blacklisted digest method algorithm URI.

Throws:

org.opensaml.security.SecurityException

testRawSuccess

public void testRawSuccess()
                    throws org.opensaml.security.SecurityException

Test valid raw signature, trusted signing credential.

Throws:

org.opensaml.security.SecurityException

testRawUntrustedCredential

public void testRawUntrustedCredential()
                                throws org.opensaml.security.SecurityException

Test valid raw signature, untrusted signing credential.

Throws:

org.opensaml.security.SecurityException

testRawInvalidSignature

public void testRawInvalidSignature()
                             throws org.opensaml.security.SecurityException

Test invalid raw signature, trusted signing credential.

Throws:

org.opensaml.security.SecurityException

testRawWhitelistedAlgorithm

public void testRawWhitelistedAlgorithm()
                                 throws org.opensaml.security.SecurityException

Test valid raw signature with whitelisted signature algorithm.

Throws:

org.opensaml.security.SecurityException

testRawBlacklistedAlgorithm

public void testRawBlacklistedAlgorithm()
                                 throws org.opensaml.security.SecurityException

Test valid raw signature with whitelisted signature algorithm.

Throws:

org.opensaml.security.SecurityException

getValidSignedObject

protected org.opensaml.xmlsec.signature.SignableXMLObject getValidSignedObject()

Get a signed object containing the signature to be validated.

Returns:

a signed object

getInvalidSignedObject

protected org.opensaml.xmlsec.signature.SignableXMLObject getInvalidSignedObject()

Get a signed object containing the signature to be validated. Signature should be invalid when valid (i.e. signed content modified, etc ).

Returns:

a signed object, with invalid signature

buildSignedObject

protected org.opensaml.xmlsec.signature.SignableXMLObject buildSignedObject()
                                                                     throws org.opensaml.xmlsec.signature.support.SignatureException

Build a signed object.

Returns:

a signed object

Throws:

org.opensaml.xmlsec.signature.support.SignatureException