org.opensaml.xml.signature

Class PKIXSignatureTrustEngineTest

java.lang.Object

junit.framework.Assert

junit.framework.TestCase

org.custommonkey.xmlunit.XMLTestCase

org.opensaml.xml.XMLObjectBaseTestCase

org.opensaml.xml.signature.PKIXSignatureTrustEngineTest

All Implemented Interfaces:

junit.framework.Test, XMLConstants, XSLTConstants

public class PKIXSignatureTrustEngineTest
extends XMLObjectBaseTestCase

Tests the PKIXSignatureTrustEngine implementation.

Field Summary

Fields

Modifier and Type	Field and Description
private org.opensaml.xml.security.CriteriaSet	criteriaSet
private static String	DATA_PATH
private boolean	emitKeyInfo
private boolean	emitKeyValueOnly
private static Set<X509Certificate>	EMPTY_ANCHORS
private static Set<X509CRL>	EMPTY_CRLS
private org.opensaml.xml.signature.impl.PKIXSignatureTrustEngine	engine
private static Integer	MAX_DEPTH
private String	rawAlgorithmURI
private org.opensaml.xml.security.credential.Credential	rawCandidateCred
private String	rawData
private byte[]	rawSignature
private byte[]	rawSignedContent
private org.opensaml.xml.signature.Signature	signature
private String	subjectCN
private boolean	tamperDocumentPostSigning

Fields inherited from class org.opensaml.xml.XMLObjectBaseTestCase

builderFactory, marshallerFactory, parserPool, simpleXMLObjectQName, unmarshallerFactory

Fields inherited from interface org.custommonkey.xmlunit.XSLTConstants

JAVA5_XSLTC_FACTORY_NAME, XSLT_END, XSLT_IDENTITY_TEMPLATE, XSLT_START, XSLT_START_NO_VERSION, XSLT_STRIP_COMMENTS_TEMPLATE, XSLT_STRIP_WHITESPACE, XSLT_XML_OUTPUT_NOINDENT

Fields inherited from interface org.custommonkey.xmlunit.XMLConstants

CLOSE_NODE, END_CDATA, END_COMMENT, END_PROCESSING_INSTRUCTION, OPEN_END_NODE, OPEN_START_NODE, START_CDATA, START_COMMENT, START_DOCTYPE, START_PROCESSING_INSTRUCTION, W3C_XML_SCHEMA_INSTANCE_NO_NAMESPACE_SCHEMA_LOCATION_ATTR, W3C_XML_SCHEMA_INSTANCE_NS_URI, W3C_XML_SCHEMA_INSTANCE_SCHEMA_LOCATION_ATTR, W3C_XML_SCHEMA_INSTANCE_TYPE_ATTR, W3C_XML_SCHEMA_NS_URI, XML_DECLARATION, XMLNS_ATTRIBUTE_URI, XMLNS_PREFIX, XPATH_ATTRIBUTE_IDENTIFIER, XPATH_CHARACTER_NODE_IDENTIFIER, XPATH_COMMENT_IDENTIFIER, XPATH_NODE_INDEX_END, XPATH_NODE_INDEX_START, XPATH_PROCESSING_INSTRUCTION_IDENTIFIER, XPATH_SEPARATOR

Constructor Summary

Constructors

Constructor and Description
PKIXSignatureTrustEngineTest()

Method Summary

Methods

Modifier and Type	Method and Description
private org.opensaml.xml.signature.SignableXMLObject	buildSignedObject(org.opensaml.xml.security.x509.X509Credential signingX509Cred)
private X509Certificate	getCertificate(String fileName)
private Collection<X509Certificate>	getCertificates(String... certNames)
private org.opensaml.xml.security.x509.BasicX509Credential	getCredential(String entityCertFileName, String entityKeyFileName, String... chainMembers)
private X509CRL	getCRL(String fileName)
private Collection<X509CRL>	getCRLS(String... crlNames)
private org.opensaml.xml.signature.impl.PKIXSignatureTrustEngine	getEngine(Collection<X509Certificate> certs, Collection<X509CRL> crls, Integer depth, String... trustedNames)
private InputStream	getInputStream(String fileName)
private org.opensaml.xml.security.x509.PKIXValidationInformation	getPKIXInfoSet(Collection<X509Certificate> certs, Collection<X509CRL> crls, Integer depth)
private PrivateKey	getPrivateKey(String fileName)
private org.opensaml.xml.signature.Signature	getSignature(String entityCertFileName, String entityKeyFileName, String... chainMembers)
protected void	setUp()
void	testCertExpired()
void	testCertRevoked()
void	testGoodPathBadTrustedName()
void	testGoodPathInAnchors()
void	testGoodPathInCred()
void	testGoodPathNoTrustedNames()
void	testMissingAnchor()
void	testNoAnchors()
void	testNoCandidateCred()
void	testRawCertExpired()
void	testRawCertMissingAnchor()
void	testRawCertNoAnchors()
void	testRawCertRevoked()
void	testRawGoodPathBadTrustedName()
void	testRawGoodPathInAnchors()
void	testRawGoodPathInCred()
void	testRawGoodPathNoTrustedNames()
void	testRawNoCandidateCred()
void	testRawTamperedData()
private void	testRawValidateFailure(String message)
private void	testRawValidateSuccess(String message)
void	testRawWrongCredType()
void	testTamperedData()
private void	testValidateFailure(String message)
private void	testValidateSuccess(String message) Helper methods.
void	testWrongCredType()

Methods inherited from class org.opensaml.xml.XMLObjectBaseTestCase

assertEquals, assertEquals, buildXMLObject, printXML, printXML, unmarshallElement

Methods inherited from class org.custommonkey.xmlunit.XMLTestCase

assertNodeTestPasses, assertNodeTestPasses, assertNodeTestPasses, assertXMLEqual, assertXMLEqual, assertXMLEqual, assertXMLEqual, assertXMLEqual, assertXMLEqual, assertXMLEqual, assertXMLEqual, assertXMLEqual, assertXMLEqual, assertXMLIdentical, assertXMLIdentical, assertXMLNotEqual, assertXMLNotEqual, assertXMLNotEqual, assertXMLNotEqual, assertXMLNotEqual, assertXMLNotEqual, assertXMLNotEqual, assertXMLNotEqual, assertXMLValid, assertXMLValid, assertXMLValid, assertXMLValid, assertXMLValid, assertXMLValid, assertXMLValid, assertXpathEvaluatesTo, assertXpathEvaluatesTo, assertXpathEvaluatesTo, assertXpathExists, assertXpathExists, assertXpathExists, assertXpathNotExists, assertXpathNotExists, assertXpathNotExists, assertXpathsEqual, assertXpathsEqual, assertXpathsEqual, assertXpathsEqual, assertXpathsEqual, assertXpathsEqual, assertXpathsNotEqual, assertXpathsNotEqual, assertXpathsNotEqual, assertXpathsNotEqual, assertXpathsNotEqual, assertXpathsNotEqual, assertXpathValuesEqual, assertXpathValuesEqual, assertXpathValuesEqual, assertXpathValuesEqual, assertXpathValuesEqual, assertXpathValuesEqual, assertXpathValuesNotEqual, assertXpathValuesNotEqual, assertXpathValuesNotEqual, assertXpathValuesNotEqual, assertXpathValuesNotEqual, assertXpathValuesNotEqual, compareXML, compareXML, compareXML, compareXML, compareXML, compareXML

Methods inherited from class junit.framework.TestCase

countTestCases, createResult, getName, run, run, runBare, runTest, setName, tearDown, toString

Methods inherited from class junit.framework.Assert

assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertFalse, assertFalse, assertNotNull, assertNotNull, assertNotSame, assertNotSame, assertNull, assertNull, assertSame, assertSame, assertTrue, assertTrue, fail, fail, failNotEquals, failNotSame, failSame

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Detail

DATA_PATH

private static final String DATA_PATH

See Also:

Constant Field Values

EMPTY_CRLS

private static final Set<X509CRL> EMPTY_CRLS

EMPTY_ANCHORS

private static final Set<X509Certificate> EMPTY_ANCHORS

MAX_DEPTH

private static final Integer MAX_DEPTH

engine

private org.opensaml.xml.signature.impl.PKIXSignatureTrustEngine engine

signature

private org.opensaml.xml.signature.Signature signature

criteriaSet

private org.opensaml.xml.security.CriteriaSet criteriaSet

subjectCN

private String subjectCN

tamperDocumentPostSigning

private boolean tamperDocumentPostSigning

emitKeyInfo

private boolean emitKeyInfo

emitKeyValueOnly

private boolean emitKeyValueOnly

rawData

private String rawData

rawSignedContent

private byte[] rawSignedContent

rawAlgorithmURI

private String rawAlgorithmURI

rawSignature

private byte[] rawSignature

rawCandidateCred

private org.opensaml.xml.security.credential.Credential rawCandidateCred

Constructor Detail

PKIXSignatureTrustEngineTest

public PKIXSignatureTrustEngineTest()

Method Detail

setUp

protected void setUp()
              throws Exception

Overrides:

setUp in class XMLObjectBaseTestCase

Throws:

Exception

testGoodPathInAnchors

public void testGoodPathInAnchors()

testGoodPathInCred

public void testGoodPathInCred()

testGoodPathNoTrustedNames

public void testGoodPathNoTrustedNames()

testGoodPathBadTrustedName

public void testGoodPathBadTrustedName()

testCertRevoked

public void testCertRevoked()

testCertExpired

public void testCertExpired()

testMissingAnchor

public void testMissingAnchor()

testNoAnchors

public void testNoAnchors()

testTamperedData

public void testTamperedData()
                      throws org.opensaml.xml.security.SecurityException

Throws:

org.opensaml.xml.security.SecurityException

testNoCandidateCred

public void testNoCandidateCred()
                         throws org.opensaml.xml.security.SecurityException

Throws:

org.opensaml.xml.security.SecurityException

testWrongCredType

public void testWrongCredType()
                       throws org.opensaml.xml.security.SecurityException

Throws:

org.opensaml.xml.security.SecurityException

testRawGoodPathInAnchors

public void testRawGoodPathInAnchors()
                              throws org.opensaml.xml.security.SecurityException

Throws:

org.opensaml.xml.security.SecurityException

testRawGoodPathInCred

public void testRawGoodPathInCred()
                           throws org.opensaml.xml.security.SecurityException

Throws:

org.opensaml.xml.security.SecurityException

testRawGoodPathNoTrustedNames

public void testRawGoodPathNoTrustedNames()
                                   throws org.opensaml.xml.security.SecurityException

Throws:

org.opensaml.xml.security.SecurityException

testRawGoodPathBadTrustedName

public void testRawGoodPathBadTrustedName()
                                   throws org.opensaml.xml.security.SecurityException

Throws:

org.opensaml.xml.security.SecurityException

testRawCertRevoked

public void testRawCertRevoked()
                        throws org.opensaml.xml.security.SecurityException

Throws:

org.opensaml.xml.security.SecurityException

testRawCertExpired

public void testRawCertExpired()
                        throws org.opensaml.xml.security.SecurityException

Throws:

org.opensaml.xml.security.SecurityException

testRawCertMissingAnchor

public void testRawCertMissingAnchor()
                              throws org.opensaml.xml.security.SecurityException

Throws:

org.opensaml.xml.security.SecurityException

testRawCertNoAnchors

public void testRawCertNoAnchors()
                          throws org.opensaml.xml.security.SecurityException

Throws:

org.opensaml.xml.security.SecurityException

testRawTamperedData

public void testRawTamperedData()
                         throws org.opensaml.xml.security.SecurityException

Throws:

org.opensaml.xml.security.SecurityException

testRawNoCandidateCred

public void testRawNoCandidateCred()
                            throws org.opensaml.xml.security.SecurityException

Throws:

org.opensaml.xml.security.SecurityException

testRawWrongCredType

public void testRawWrongCredType()
                          throws org.opensaml.xml.security.SecurityException

Throws:

org.opensaml.xml.security.SecurityException

testValidateSuccess

private void testValidateSuccess(String message)

Helper methods. *

testValidateFailure

private void testValidateFailure(String message)

getSignature

private org.opensaml.xml.signature.Signature getSignature(String entityCertFileName,
                                                String entityKeyFileName,
                                                String... chainMembers)

getCredential

private org.opensaml.xml.security.x509.BasicX509Credential getCredential(String entityCertFileName,
                                                               String entityKeyFileName,
                                                               String... chainMembers)

getEngine

private org.opensaml.xml.signature.impl.PKIXSignatureTrustEngine getEngine(Collection<X509Certificate> certs,
                                                                 Collection<X509CRL> crls,
                                                                 Integer depth,
                                                                 String... trustedNames)

getPKIXInfoSet

private org.opensaml.xml.security.x509.PKIXValidationInformation getPKIXInfoSet(Collection<X509Certificate> certs,
                                                                      Collection<X509CRL> crls,
                                                                      Integer depth)

getCertificates

private Collection<X509Certificate> getCertificates(String... certNames)

getPrivateKey

private PrivateKey getPrivateKey(String fileName)

getCertificate

private X509Certificate getCertificate(String fileName)

getCRLS

private Collection<X509CRL> getCRLS(String... crlNames)

getCRL

private X509CRL getCRL(String fileName)

getInputStream

private InputStream getInputStream(String fileName)

buildSignedObject

private org.opensaml.xml.signature.SignableXMLObject buildSignedObject(org.opensaml.xml.security.x509.X509Credential signingX509Cred)
                                                                throws org.opensaml.xml.signature.SignatureException

Throws:

org.opensaml.xml.signature.SignatureException

testRawValidateSuccess

private void testRawValidateSuccess(String message)

testRawValidateFailure

private void testRawValidateFailure(String message)