Package org.opensaml.xmlsec.signature.support.impl

Class PKIXSignatureTrustEngineTest

java.lang.Object

org.opensaml.core.testing.OpenSAMLInitBaseTestCase

org.opensaml.core.testing.XMLObjectBaseTestCase

org.opensaml.xmlsec.signature.support.impl.PKIXSignatureTrustEngineTest

public class PKIXSignatureTrustEngineTest
extends org.opensaml.core.testing.XMLObjectBaseTestCase

Tests the PKIXSignatureTrustEngine implementation.

Field Summary

Fields

Modifier and Type	Field	Description
private CriteriaSet	criteriaSet
private static final String	DATA_PATH
private boolean	emitKeyInfo
private boolean	emitKeyValueOnly
private static final Set<X509Certificate>	EMPTY_ANCHORS
private static final Set<X509CRL>	EMPTY_CRLS
private PKIXSignatureTrustEngine	engine
private static final Integer	MAX_DEPTH
private String	rawAlgorithmURI
private Credential	rawCandidateCred
private String	rawData
private byte[]	rawSignature
private byte[]	rawSignedContent
private Signature	signature
private String	subjectCN
private boolean	tamperDocumentPostSigning

Fields inherited from class org.opensaml.core.testing.XMLObjectBaseTestCase

builderFactory, marshallerFactory, parserPool, simpleXMLObjectQName, unmarshallerFactory

Constructor Summary

Constructors

Constructor	Description
PKIXSignatureTrustEngineTest()

Method Summary

Modifier and Type	Method	Description
private SignableXMLObject	buildSignedObject(X509Credential signingX509Cred)
private X509Certificate	getCertificate(String fileName)
private Collection<X509Certificate>	getCertificates(String... certNames)
private BasicX509Credential	getCredential(String entityCertFileName, String entityKeyFileName, String... chainMembers)
private X509CRL	getCRL(String fileName)
private Collection<X509CRL>	getCRLS(String... crlNames)
private PKIXSignatureTrustEngine	getEngine(Collection<X509Certificate> certs, Collection<X509CRL> crls, Integer depth, String... trustedNames)
private InputStream	getInputStream(String fileName)
private PKIXValidationInformation	getPKIXInfoSet(Collection<X509Certificate> certs, Collection<X509CRL> crls, Integer depth)
private PrivateKey	getPrivateKey(String fileName)
private Signature	getSignature(String entityCertFileName, String entityKeyFileName, String... chainMembers)
protected void	setUp()
void	testBlacklistedDigestAlgorithm()
void	testBlacklistedSignatureAlgorithm()
void	testCertExpired()
void	testCertRevoked()
void	testGoodPathBadTrustedName()
void	testGoodPathInAnchors()
void	testGoodPathInCred()
void	testGoodPathNoTrustedNames()
void	testMissingAnchor()
void	testNoAnchors()
void	testNoCandidateCred()
void	testRawBlacklistedAlgorithm()
void	testRawCertExpired()
void	testRawCertMissingAnchor()
void	testRawCertNoAnchors()
void	testRawCertRevoked()
void	testRawGoodPathBadTrustedName()
void	testRawGoodPathInAnchors()
void	testRawGoodPathInCred()
void	testRawGoodPathNoTrustedNames()
void	testRawNoCandidateCred()
void	testRawTamperedData()
private void	testRawValidateFailure(String message)
private void	testRawValidateSuccess(String message)
void	testRawWhitelistedAlgorithm()
void	testRawWrongCredType()
void	testTamperedData()
private void	testValidateFailure(String message)
private void	testValidateSuccess(String message)
void	testWhitelistedAlgorithms()
void	testWrongCredType()

Methods inherited from class org.opensaml.core.testing.XMLObjectBaseTestCase

assertXMLEquals, assertXMLEquals, buildXMLObject, getBuilder, getMarshaller, getMarshaller, getUnmarshaller, getUnmarshaller, getUnmarshaller, initXMLObjectSupport, parseXMLDocument, printXML, printXML, unmarshallElement, unmarshallElement

Methods inherited from class org.opensaml.core.testing.OpenSAMLInitBaseTestCase

initOpenSAML

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

DATA_PATH

private static final String DATA_PATH

See Also:

• Constant Field Values

EMPTY_CRLS

private static final Set<X509CRL> EMPTY_CRLS

EMPTY_ANCHORS

private static final Set<X509Certificate> EMPTY_ANCHORS

MAX_DEPTH

private static final Integer MAX_DEPTH

engine

private PKIXSignatureTrustEngine engine

signature

private Signature signature

criteriaSet

private CriteriaSet criteriaSet

subjectCN

private String subjectCN

tamperDocumentPostSigning

private boolean tamperDocumentPostSigning

emitKeyInfo

private boolean emitKeyInfo

emitKeyValueOnly

private boolean emitKeyValueOnly

rawData

private String rawData

rawSignedContent

private byte[] rawSignedContent

rawAlgorithmURI

private String rawAlgorithmURI

rawSignature

private byte[] rawSignature

rawCandidateCred

private Credential rawCandidateCred

Constructor Details

PKIXSignatureTrustEngineTest

public PKIXSignatureTrustEngineTest()

Method Details

setUp

@BeforeMethod
protected void setUp()
              throws Exception

Throws:

Exception

testGoodPathInAnchors

public void testGoodPathInAnchors()

testGoodPathInCred

public void testGoodPathInCred()

testGoodPathNoTrustedNames

public void testGoodPathNoTrustedNames()

testGoodPathBadTrustedName

public void testGoodPathBadTrustedName()

testCertRevoked

public void testCertRevoked()

testCertExpired

public void testCertExpired()

testMissingAnchor

public void testMissingAnchor()

testNoAnchors

public void testNoAnchors()

testTamperedData

public void testTamperedData()
                      throws SecurityException

Throws:

SecurityException

testNoCandidateCred

public void testNoCandidateCred()
                         throws SecurityException

Throws:

SecurityException

testWrongCredType

public void testWrongCredType()
                       throws SecurityException

Throws:

SecurityException

testWhitelistedAlgorithms

public void testWhitelistedAlgorithms()

testBlacklistedSignatureAlgorithm

public void testBlacklistedSignatureAlgorithm()

testBlacklistedDigestAlgorithm

public void testBlacklistedDigestAlgorithm()

testRawGoodPathInAnchors

public void testRawGoodPathInAnchors()
                              throws SecurityException

Throws:

SecurityException

testRawGoodPathInCred

public void testRawGoodPathInCred()
                           throws SecurityException

Throws:

SecurityException

testRawGoodPathNoTrustedNames

public void testRawGoodPathNoTrustedNames()
                                   throws SecurityException

Throws:

SecurityException

testRawGoodPathBadTrustedName

public void testRawGoodPathBadTrustedName()
                                   throws SecurityException

Throws:

SecurityException

testRawCertRevoked

public void testRawCertRevoked()
                        throws SecurityException

Throws:

SecurityException

testRawCertExpired

public void testRawCertExpired()
                        throws SecurityException

Throws:

SecurityException

testRawCertMissingAnchor

public void testRawCertMissingAnchor()
                              throws SecurityException

Throws:

SecurityException

testRawCertNoAnchors

public void testRawCertNoAnchors()
                          throws SecurityException

Throws:

SecurityException

testRawTamperedData

public void testRawTamperedData()
                         throws SecurityException

Throws:

SecurityException

testRawNoCandidateCred

public void testRawNoCandidateCred()
                            throws SecurityException

Throws:

SecurityException

testRawWrongCredType

public void testRawWrongCredType()
                          throws SecurityException

Throws:

SecurityException

testRawWhitelistedAlgorithm

public void testRawWhitelistedAlgorithm()
                                 throws SecurityException

Throws:

SecurityException

testRawBlacklistedAlgorithm

public void testRawBlacklistedAlgorithm()
                                 throws SecurityException

Throws:

SecurityException

testValidateSuccess

private void testValidateSuccess(String message)

testValidateFailure

private void testValidateFailure(String message)

getSignature

@Nonnull
private Signature getSignature(String entityCertFileName,
 String entityKeyFileName,
 String... chainMembers)

getCredential

private BasicX509Credential getCredential(String entityCertFileName,
 String entityKeyFileName,
 String... chainMembers)

getEngine

@Nonnull
private PKIXSignatureTrustEngine getEngine(Collection<X509Certificate> certs,
 Collection<X509CRL> crls,
 Integer depth,
 String... trustedNames)

getPKIXInfoSet

@Nonnull
private PKIXValidationInformation getPKIXInfoSet(Collection<X509Certificate> certs,
 Collection<X509CRL> crls,
 Integer depth)

getCertificates

@Nonnull
private Collection<X509Certificate> getCertificates(String... certNames)

getPrivateKey

private PrivateKey getPrivateKey(String fileName)

getCertificate

@Nullable
private X509Certificate getCertificate(String fileName)

getCRLS

@Nonnull
private Collection<X509CRL> getCRLS(String... crlNames)

getCRL

@Nullable
private X509CRL getCRL(String fileName)

getInputStream

@Nonnull
private InputStream getInputStream(String fileName)

buildSignedObject

@Nonnull
private SignableXMLObject buildSignedObject(X509Credential signingX509Cred)
                                     throws SignatureException

Throws:

SignatureException

testRawValidateSuccess

private void testRawValidateSuccess(String message)

testRawValidateFailure

private void testRawValidateFailure(String message)