Search in sources :

Example 11 with ValidateRequestType

use of org.apache.cxf.xkms.model.xkms.ValidateRequestType in project cxf by apache.

the class ValidatorTest method testAliceSignedByRootIsValid.

@Test
public void testAliceSignedByRootIsValid() throws JAXBException, CertificateException {
    X509Certificate aliceCertificate = readCertificate("cas/alice.cer");
    ValidateRequestType request = prepareValidateXKMSRequest(aliceCertificate);
    StatusType result = doValidate(request);
    Assert.assertEquals(KeyBindingEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_VALID, result.getStatusValue());
    Assert.assertFalse(result.getValidReason().isEmpty());
    Assert.assertEquals(ReasonEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_VALIDITY_INTERVAL.value(), result.getValidReason().get(0));
    Assert.assertEquals(ReasonEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_ISSUER_TRUST.value(), result.getValidReason().get(1));
}
Also used : StatusType(org.apache.cxf.xkms.model.xkms.StatusType) X509Certificate(java.security.cert.X509Certificate) ValidateRequestType(org.apache.cxf.xkms.model.xkms.ValidateRequestType) BasicIntegrationTest(org.apache.cxf.xkms.itests.BasicIntegrationTest) Test(org.junit.Test)

Example 12 with ValidateRequestType

use of org.apache.cxf.xkms.model.xkms.ValidateRequestType in project cxf by apache.

the class ValidatorTest method testWss40DirectTrustNegative.

@Test
public void testWss40DirectTrustNegative() throws JAXBException, CertificateException {
    X509Certificate wss40Certificate = readCertificate("wss40.cer");
    ValidateRequestType request = prepareValidateXKMSRequest(wss40Certificate);
    request.getQueryKeyBinding().getKeyUsage().add(KeyUsageEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_SIGNATURE);
    StatusType result = doValidate(request);
    Assert.assertEquals(KeyBindingEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_INVALID, result.getStatusValue());
    Assert.assertFalse(result.getInvalidReason().isEmpty());
    Assert.assertEquals(XKMSConstants.DIRECT_TRUST_VALIDATION, result.getInvalidReason().get(0));
}
Also used : StatusType(org.apache.cxf.xkms.model.xkms.StatusType) X509Certificate(java.security.cert.X509Certificate) ValidateRequestType(org.apache.cxf.xkms.model.xkms.ValidateRequestType) BasicIntegrationTest(org.apache.cxf.xkms.itests.BasicIntegrationTest) Test(org.junit.Test)

Example 13 with ValidateRequestType

use of org.apache.cxf.xkms.model.xkms.ValidateRequestType in project cxf by apache.

the class ValidatorTest method testRootCertIsValid.

@Test
public void testRootCertIsValid() throws CertificateException {
    X509Certificate rootCertificate = readCertificate("trusted_cas/root.cer");
    ValidateRequestType request = prepareValidateXKMSRequest(rootCertificate);
    StatusType result = doValidate(request);
    Assert.assertEquals(KeyBindingEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_VALID, result.getStatusValue());
    Assert.assertFalse(result.getValidReason().isEmpty());
    Assert.assertEquals(ReasonEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_VALIDITY_INTERVAL.value(), result.getValidReason().get(0));
    Assert.assertEquals(ReasonEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_ISSUER_TRUST.value(), result.getValidReason().get(1));
}
Also used : StatusType(org.apache.cxf.xkms.model.xkms.StatusType) X509Certificate(java.security.cert.X509Certificate) ValidateRequestType(org.apache.cxf.xkms.model.xkms.ValidateRequestType) BasicIntegrationTest(org.apache.cxf.xkms.itests.BasicIntegrationTest) Test(org.junit.Test)

Example 14 with ValidateRequestType

use of org.apache.cxf.xkms.model.xkms.ValidateRequestType in project cxf by apache.

the class ValidatorTest method testDaveDirectTrust.

@Test
public void testDaveDirectTrust() throws JAXBException, CertificateException {
    X509Certificate daveCertificate = readCertificate("dave.cer");
    ValidateRequestType request = prepareValidateXKMSRequest(daveCertificate);
    request.getQueryKeyBinding().getKeyUsage().add(KeyUsageEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_SIGNATURE);
    StatusType result = doValidate(request);
    Assert.assertEquals(KeyBindingEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_VALID, result.getStatusValue());
    Assert.assertFalse(result.getValidReason().isEmpty());
    Assert.assertEquals(ReasonEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_VALIDITY_INTERVAL.value(), result.getValidReason().get(0));
    Assert.assertEquals(ReasonEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_ISSUER_TRUST.value(), result.getValidReason().get(1));
    Assert.assertEquals(XKMSConstants.DIRECT_TRUST_VALIDATION, result.getValidReason().get(2));
}
Also used : StatusType(org.apache.cxf.xkms.model.xkms.StatusType) X509Certificate(java.security.cert.X509Certificate) ValidateRequestType(org.apache.cxf.xkms.model.xkms.ValidateRequestType) BasicIntegrationTest(org.apache.cxf.xkms.itests.BasicIntegrationTest) Test(org.junit.Test)

Example 15 with ValidateRequestType

use of org.apache.cxf.xkms.model.xkms.ValidateRequestType in project cxf by apache.

the class ValidatorTest method prepareValidateXKMSRequest.

/*
     * Method is taken from {@link org.apache.cxf.xkms.client.XKMSInvokder}.
     */
private ValidateRequestType prepareValidateXKMSRequest(X509Certificate cert) {
    JAXBElement<byte[]> x509Cert;
    try {
        x509Cert = DSIG_OF.createX509DataTypeX509Certificate(cert.getEncoded());
    } catch (CertificateEncodingException e) {
        throw new IllegalArgumentException(e);
    }
    X509DataType x509DataType = DSIG_OF.createX509DataType();
    x509DataType.getX509IssuerSerialOrX509SKIOrX509SubjectName().add(x509Cert);
    JAXBElement<X509DataType> x509Data = DSIG_OF.createX509Data(x509DataType);
    KeyInfoType keyInfoType = DSIG_OF.createKeyInfoType();
    keyInfoType.getContent().add(x509Data);
    QueryKeyBindingType queryKeyBindingType = XKMS_OF.createQueryKeyBindingType();
    queryKeyBindingType.setKeyInfo(keyInfoType);
    ValidateRequestType validateRequestType = XKMS_OF.createValidateRequestType();
    setGenericRequestParams(validateRequestType);
    validateRequestType.setQueryKeyBinding(queryKeyBindingType);
    // temporary
    validateRequestType.setId(cert.getSubjectDN().toString());
    return validateRequestType;
}
Also used : X509DataType(org.apache.cxf.xkms.model.xmldsig.X509DataType) QueryKeyBindingType(org.apache.cxf.xkms.model.xkms.QueryKeyBindingType) CertificateEncodingException(java.security.cert.CertificateEncodingException) KeyInfoType(org.apache.cxf.xkms.model.xmldsig.KeyInfoType) ValidateRequestType(org.apache.cxf.xkms.model.xkms.ValidateRequestType)

Aggregations

ValidateRequestType (org.apache.cxf.xkms.model.xkms.ValidateRequestType)16 Test (org.junit.Test)11 X509Certificate (java.security.cert.X509Certificate)10 BasicIntegrationTest (org.apache.cxf.xkms.itests.BasicIntegrationTest)9 StatusType (org.apache.cxf.xkms.model.xkms.StatusType)9 InputStream (java.io.InputStream)3 CertificateEncodingException (java.security.cert.CertificateEncodingException)3 JAXBElement (javax.xml.bind.JAXBElement)3 QueryKeyBindingType (org.apache.cxf.xkms.model.xkms.QueryKeyBindingType)3 KeyInfoType (org.apache.cxf.xkms.model.xmldsig.KeyInfoType)3 X509DataType (org.apache.cxf.xkms.model.xmldsig.X509DataType)3 BasicValidationTest (org.apache.cxf.xkms.x509.validator.BasicValidationTest)2 XKMSValidateException (org.apache.cxf.xkms.exception.XKMSValidateException)1 ValidateResultType (org.apache.cxf.xkms.model.xkms.ValidateResultType)1