Search in sources :

Example 11 with TokenInfoAndKeyId

use of ee.ria.xroad.signer.protocol.dto.TokenInfoAndKeyId in project X-Road by nordic-institute.

the class SignerProxy method getTokenAndKeyIdForCertHash.

/**
 * Get TokenInfoAndKeyId for a given cert hash
 * @param hash cert hash. Will be converted to lowercase, which is what signer uses internally
 *
 * @return TokenInfoAndKeyId
 * @throws Exception
 */
public static TokenInfoAndKeyId getTokenAndKeyIdForCertHash(String hash) throws Exception {
    hash = hash.toLowerCase();
    log.trace("Getting token and key id by cert hash '{}'", hash);
    TokenInfoAndKeyId response = execute(new GetTokenInfoAndKeyIdForCertHash(hash));
    log.trace("Token and key id with hash '{}' found", hash);
    return response;
}
Also used : TokenInfoAndKeyId(ee.ria.xroad.signer.protocol.dto.TokenInfoAndKeyId) GetTokenInfoAndKeyIdForCertHash(ee.ria.xroad.signer.protocol.message.GetTokenInfoAndKeyIdForCertHash)

Example 12 with TokenInfoAndKeyId

use of ee.ria.xroad.signer.protocol.dto.TokenInfoAndKeyId in project X-Road by nordic-institute.

the class OrphanRemovalServiceTest method setup.

@Before
public void setup() throws Exception {
    KeyInfo key01 = new TokenTestUtils.KeyInfoBuilder().id(KEY_01_ID).keyUsageInfo(KeyUsageInfo.SIGNING).csr(new CertificateTestUtils.CertRequestInfoBuilder().clientId(NON_DELETED_CLIENT_ID_O1).id(ORPHAN_CSR_01_ID).build()).build();
    KeyInfo key05 = new TokenTestUtils.KeyInfoBuilder().id(KEY_05_ID).keyUsageInfo(KeyUsageInfo.SIGNING).csr(new CertificateTestUtils.CertRequestInfoBuilder().clientId(DELETED_CLIENT_ID_WITH_ORPHAN_CSR_O5).id(ORPHAN_CSR_05_ID).build()).build();
    KeyInfo key06 = new TokenTestUtils.KeyInfoBuilder().id(KEY_06_ID).keyUsageInfo(KeyUsageInfo.SIGNING).cert(new CertificateTestUtils.CertificateInfoBuilder().clientId(DELETED_CLIENT_ID_WITH_ORPHAN_CERT_O6).id(ORPHAN_CERT_06_HASH).build()).build();
    KeyInfo key071 = new TokenTestUtils.KeyInfoBuilder().id(KEY_07_SIGN_ORPHAN_1_ID).keyUsageInfo(KeyUsageInfo.SIGNING).cert(new CertificateTestUtils.CertificateInfoBuilder().clientId(DELETED_CLIENT_ID_WITH_MULTIPLE_KEYS_07).id(ORPHAN_CERT_07_1_HASH).build()).build();
    KeyInfo key072 = new TokenTestUtils.KeyInfoBuilder().id(KEY_07_SIGN_ORPHAN_2_ID).keyUsageInfo(KeyUsageInfo.SIGNING).cert(new CertificateTestUtils.CertificateInfoBuilder().clientId(DELETED_CLIENT_ID_WITH_MULTIPLE_KEYS_07).id(ORPHAN_CERT_07_2_HASH).build()).csr(new CertificateTestUtils.CertRequestInfoBuilder().clientId(DELETED_CLIENT_ID_WITH_MULTIPLE_KEYS_07).id(ORPHAN_CSR_07_2_ID).build()).build();
    KeyInfo key073 = new TokenTestUtils.KeyInfoBuilder().id(KEY_07_SIGN_SHARED_ID).keyUsageInfo(KeyUsageInfo.SIGNING).cert(new CertificateTestUtils.CertificateInfoBuilder().clientId(DELETED_CLIENT_ID_WITH_MULTIPLE_KEYS_07).id(SHARED_KEY_CERT_07_1_HASH).build()).cert(new CertificateTestUtils.CertificateInfoBuilder().clientId(DELETED_CLIENT_ID_WITH_MULTIPLE_KEYS_07).id(SHARED_KEY_CERT_07_2_HASH).build()).csr(new CertificateTestUtils.CertRequestInfoBuilder().clientId(DELETED_CLIENT_ID_WITH_MULTIPLE_KEYS_07).id(SHARED_KEY_CSR_07_ID).build()).csr(new CertificateTestUtils.CertRequestInfoBuilder().clientId(KEY_SHARING_CLIENT_07_08).id(SHARED_KEY_CSR_08_ID).build()).build();
    KeyInfo key074 = new TokenTestUtils.KeyInfoBuilder().id(KEY_07_AUTH_ID).keyUsageInfo(KeyUsageInfo.AUTHENTICATION).cert(new CertificateTestUtils.CertificateInfoBuilder().id(AUTH_CERT_07_HASH).build()).build();
    TokenInfo tokenInfo = new TokenTestUtils.TokenInfoBuilder().friendlyName("fubar").key(key01).key(key05).key(key06).key(key071).key(key072).key(key073).key(key074).build();
    Map<String, KeyInfo> certCsrIdentifierToKey = new HashMap<>();
    // certs and csrs should not have duplicate ids/hashes
    tokenInfo.getKeyInfo().forEach(key -> key.getCerts().forEach(cert -> {
        if (certCsrIdentifierToKey.containsKey(cert.getId()))
            throw new RuntimeException("duplicate");
        certCsrIdentifierToKey.put(cert.getId(), key);
    }));
    tokenInfo.getKeyInfo().forEach(key -> key.getCertRequests().forEach(csr -> {
        if (certCsrIdentifierToKey.containsKey(csr.getId()))
            throw new RuntimeException("duplicate");
        certCsrIdentifierToKey.put(csr.getId(), key);
    }));
    doReturn(Collections.singletonList(tokenInfo)).when(signerProxyFacade).getTokens();
    Map<ClientId, ClientType> localClients = new HashMap<>();
    ALL_LOCAL_CLIENTS.forEach(id -> {
        ClientType clientType = new ClientType();
        clientType.setIdentifier(id);
        localClients.put(id, clientType);
    });
    doReturn(new ArrayList(localClients.values())).when(clientRepository).getAllLocalClients();
    doAnswer(invocation -> {
        ClientId clientId = (ClientId) invocation.getArguments()[0];
        return localClients.get(clientId);
    }).when(clientRepository).getClient(any());
    doReturn(tokenInfo).when(signerProxyFacade).getTokenForKeyId(any());
    doAnswer(invocation -> {
        String certHash = (String) invocation.getArguments()[0];
        return new TokenInfoAndKeyId(tokenInfo, certCsrIdentifierToKey.get(certHash).getId());
    }).when(signerProxyFacade).getTokenAndKeyIdForCertHash(any());
    doAnswer(invocation -> {
        String csrId = (String) invocation.getArguments()[0];
        return new TokenInfoAndKeyId(tokenInfo, certCsrIdentifierToKey.get(csrId).getId());
    }).when(signerProxyFacade).getTokenAndKeyIdForCertRequestId(any());
}
Also used : ArgumentMatchers.any(org.mockito.ArgumentMatchers.any) CertRequestInfo(ee.ria.xroad.signer.protocol.dto.CertRequestInfo) Arrays(java.util.Arrays) Autowired(org.springframework.beans.factory.annotation.Autowired) HashMap(java.util.HashMap) TokenInfoAndKeyId(ee.ria.xroad.signer.protocol.dto.TokenInfoAndKeyId) ArrayList(java.util.ArrayList) KeyUsageInfo(ee.ria.xroad.signer.protocol.dto.KeyUsageInfo) Mockito.verifyNoMoreInteractions(org.mockito.Mockito.verifyNoMoreInteractions) Map(java.util.Map) Mockito.doAnswer(org.mockito.Mockito.doAnswer) Mockito.atLeast(org.mockito.Mockito.atLeast) KeyInfo(ee.ria.xroad.signer.protocol.dto.KeyInfo) Assert.fail(org.junit.Assert.fail) ClientType(ee.ria.xroad.common.conf.serverconf.model.ClientType) Mockito.doReturn(org.mockito.Mockito.doReturn) Before(org.junit.Before) Assert.assertNotNull(org.junit.Assert.assertNotNull) Assert.assertTrue(org.junit.Assert.assertTrue) TokenInfo(ee.ria.xroad.signer.protocol.dto.TokenInfo) Test(org.junit.Test) Mockito.times(org.mockito.Mockito.times) CertificateInfo(ee.ria.xroad.signer.protocol.dto.CertificateInfo) Mockito.verify(org.mockito.Mockito.verify) List(java.util.List) Assert.assertNull(org.junit.Assert.assertNull) WithMockUser(org.springframework.security.test.context.support.WithMockUser) TestUtils(org.niis.xroad.securityserver.restapi.util.TestUtils) TokenTestUtils(org.niis.xroad.securityserver.restapi.util.TokenTestUtils) Assert.assertFalse(org.junit.Assert.assertFalse) ClientId(ee.ria.xroad.common.identifier.ClientId) Collections(java.util.Collections) CertificateTestUtils(org.niis.xroad.securityserver.restapi.util.CertificateTestUtils) Assert.assertEquals(org.junit.Assert.assertEquals) TokenInfoAndKeyId(ee.ria.xroad.signer.protocol.dto.TokenInfoAndKeyId) ClientType(ee.ria.xroad.common.conf.serverconf.model.ClientType) HashMap(java.util.HashMap) ArrayList(java.util.ArrayList) TokenTestUtils(org.niis.xroad.securityserver.restapi.util.TokenTestUtils) KeyInfo(ee.ria.xroad.signer.protocol.dto.KeyInfo) CertificateTestUtils(org.niis.xroad.securityserver.restapi.util.CertificateTestUtils) ClientId(ee.ria.xroad.common.identifier.ClientId) TokenInfo(ee.ria.xroad.signer.protocol.dto.TokenInfo) Before(org.junit.Before)

Aggregations

TokenInfoAndKeyId (ee.ria.xroad.signer.protocol.dto.TokenInfoAndKeyId)12 KeyInfo (ee.ria.xroad.signer.protocol.dto.KeyInfo)9 TokenInfo (ee.ria.xroad.signer.protocol.dto.TokenInfo)8 CertificateInfo (ee.ria.xroad.signer.protocol.dto.CertificateInfo)4 DeviationAwareRuntimeException (org.niis.xroad.restapi.exceptions.DeviationAwareRuntimeException)4 CertRequestInfo (ee.ria.xroad.signer.protocol.dto.CertRequestInfo)3 GeneratedCertRequestInfo (ee.ria.xroad.commonui.SignerProxy.GeneratedCertRequestInfo)2 Before (org.junit.Before)2 TokenTestUtils (org.niis.xroad.securityserver.restapi.util.TokenTestUtils)2 CodedException (ee.ria.xroad.common.CodedException)1 ClientType (ee.ria.xroad.common.conf.serverconf.model.ClientType)1 ClientId (ee.ria.xroad.common.identifier.ClientId)1 KeyUsageInfo (ee.ria.xroad.signer.protocol.dto.KeyUsageInfo)1 GetTokenInfoAndKeyIdForCertHash (ee.ria.xroad.signer.protocol.message.GetTokenInfoAndKeyIdForCertHash)1 GetTokenInfoAndKeyIdForCertRequestId (ee.ria.xroad.signer.protocol.message.GetTokenInfoAndKeyIdForCertRequestId)1 TokenAndKey (ee.ria.xroad.signer.util.TokenAndKey)1 ArrayList (java.util.ArrayList)1 Arrays (java.util.Arrays)1 Collections (java.util.Collections)1 HashMap (java.util.HashMap)1