use of org.apache.cxf.xkms.model.xkms.ValidateRequestType in project cxf by apache.
the class ValidatorTest method testAliceSignedByRootIsValid.
@Test
public void testAliceSignedByRootIsValid() throws JAXBException, CertificateException {
X509Certificate aliceCertificate = readCertificate("cas/alice.cer");
ValidateRequestType request = prepareValidateXKMSRequest(aliceCertificate);
StatusType result = doValidate(request);
Assert.assertEquals(KeyBindingEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_VALID, result.getStatusValue());
Assert.assertFalse(result.getValidReason().isEmpty());
Assert.assertEquals(ReasonEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_VALIDITY_INTERVAL.value(), result.getValidReason().get(0));
Assert.assertEquals(ReasonEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_ISSUER_TRUST.value(), result.getValidReason().get(1));
}
use of org.apache.cxf.xkms.model.xkms.ValidateRequestType in project cxf by apache.
the class ValidatorTest method testWss40DirectTrustNegative.
@Test
public void testWss40DirectTrustNegative() throws JAXBException, CertificateException {
X509Certificate wss40Certificate = readCertificate("wss40.cer");
ValidateRequestType request = prepareValidateXKMSRequest(wss40Certificate);
request.getQueryKeyBinding().getKeyUsage().add(KeyUsageEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_SIGNATURE);
StatusType result = doValidate(request);
Assert.assertEquals(KeyBindingEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_INVALID, result.getStatusValue());
Assert.assertFalse(result.getInvalidReason().isEmpty());
Assert.assertEquals(XKMSConstants.DIRECT_TRUST_VALIDATION, result.getInvalidReason().get(0));
}
use of org.apache.cxf.xkms.model.xkms.ValidateRequestType in project cxf by apache.
the class ValidatorTest method testRootCertIsValid.
@Test
public void testRootCertIsValid() throws CertificateException {
X509Certificate rootCertificate = readCertificate("trusted_cas/root.cer");
ValidateRequestType request = prepareValidateXKMSRequest(rootCertificate);
StatusType result = doValidate(request);
Assert.assertEquals(KeyBindingEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_VALID, result.getStatusValue());
Assert.assertFalse(result.getValidReason().isEmpty());
Assert.assertEquals(ReasonEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_VALIDITY_INTERVAL.value(), result.getValidReason().get(0));
Assert.assertEquals(ReasonEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_ISSUER_TRUST.value(), result.getValidReason().get(1));
}
use of org.apache.cxf.xkms.model.xkms.ValidateRequestType in project cxf by apache.
the class ValidatorTest method testDaveDirectTrust.
@Test
public void testDaveDirectTrust() throws JAXBException, CertificateException {
X509Certificate daveCertificate = readCertificate("dave.cer");
ValidateRequestType request = prepareValidateXKMSRequest(daveCertificate);
request.getQueryKeyBinding().getKeyUsage().add(KeyUsageEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_SIGNATURE);
StatusType result = doValidate(request);
Assert.assertEquals(KeyBindingEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_VALID, result.getStatusValue());
Assert.assertFalse(result.getValidReason().isEmpty());
Assert.assertEquals(ReasonEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_VALIDITY_INTERVAL.value(), result.getValidReason().get(0));
Assert.assertEquals(ReasonEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_ISSUER_TRUST.value(), result.getValidReason().get(1));
Assert.assertEquals(XKMSConstants.DIRECT_TRUST_VALIDATION, result.getValidReason().get(2));
}
use of org.apache.cxf.xkms.model.xkms.ValidateRequestType in project cxf by apache.
the class ValidatorTest method prepareValidateXKMSRequest.
/*
* Method is taken from {@link org.apache.cxf.xkms.client.XKMSInvokder}.
*/
private ValidateRequestType prepareValidateXKMSRequest(X509Certificate cert) {
JAXBElement<byte[]> x509Cert;
try {
x509Cert = DSIG_OF.createX509DataTypeX509Certificate(cert.getEncoded());
} catch (CertificateEncodingException e) {
throw new IllegalArgumentException(e);
}
X509DataType x509DataType = DSIG_OF.createX509DataType();
x509DataType.getX509IssuerSerialOrX509SKIOrX509SubjectName().add(x509Cert);
JAXBElement<X509DataType> x509Data = DSIG_OF.createX509Data(x509DataType);
KeyInfoType keyInfoType = DSIG_OF.createKeyInfoType();
keyInfoType.getContent().add(x509Data);
QueryKeyBindingType queryKeyBindingType = XKMS_OF.createQueryKeyBindingType();
queryKeyBindingType.setKeyInfo(keyInfoType);
ValidateRequestType validateRequestType = XKMS_OF.createValidateRequestType();
setGenericRequestParams(validateRequestType);
validateRequestType.setQueryKeyBinding(queryKeyBindingType);
// temporary
validateRequestType.setId(cert.getSubjectDN().toString());
return validateRequestType;
}
Aggregations