Examples with EnrollmentRequest org.hyperledger.fabric_ca.sdk.EnrollmentRequest used on opensource projects

Example 6 with EnrollmentRequest

use of org.hyperledger.fabric_ca.sdk.EnrollmentRequest in project fabric-sdk-java by hyperledger.

the class HFCAClientIT method testUserRevokeGenCRL.

// Tests revoking a user with genCRL using the revoke API
@Test
public void testUserRevokeGenCRL() throws Exception {
    if (testConfig.isRunningAgainstFabric10()) {
        // needs v1.1
        return;
    }
    thrown.expect(EnrollmentException.class);
    thrown.expectMessage("Failed to re-enroll user");
    // gets a calendar using the default time zone and locale.
    Calendar calendar = Calendar.getInstance();
    calendar.add(Calendar.SECOND, -1);
    // avoid any clock skewing.
    Date revokedTinyBitAgoTime = calendar.getTime();
    SampleUser user1 = getTestUser(TEST_USER1_ORG);
    SampleUser user2 = getTestUser(TEST_USER1_ORG);
    SampleUser[] users = new SampleUser[] { user1, user2 };
    for (SampleUser user : users) {
        if (!user.isRegistered()) {
            RegistrationRequest rr = new RegistrationRequest(user.getName(), TEST_USER1_AFFILIATION);
            String password = "testUserRevoke";
            rr.setSecret(password);
            rr.addAttribute(new Attribute("user.role", "department lead"));
            rr.addAttribute(new Attribute(HFCAClient.HFCA_ATTRIBUTE_HFREVOKER, "true"));
            // Admin can register other users.
            user.setEnrollmentSecret(client.register(rr, admin));
            if (!user.getEnrollmentSecret().equals(password)) {
                fail("Secret returned from RegistrationRequest not match : " + user.getEnrollmentSecret());
            }
        }
        sleepALittle();
        if (!user.isEnrolled()) {
            EnrollmentRequest req = new EnrollmentRequest(DEFAULT_PROFILE_NAME, "label 2", null);
            req.addHost("example3.ibm.com");
            user.setEnrollment(client.enroll(user.getName(), user.getEnrollmentSecret(), req));
            // verify
            String cert = user.getEnrollment().getCert();
            verifyOptions(cert, req);
        }
    }
    sleepALittle();
    int startedWithRevokes = -1;
    // one more after we do this revoke.
    startedWithRevokes = getRevokes(null).length;
    // revoke all enrollment of this user and request back a CRL
    String crl = client.revoke(admin, user1.getName(), null, true);
    assertNotNull("Failed to get CRL using the Revoke API", crl);
    final int newRevokes = getRevokes(null).length;
    assertEquals(format("Expected one more revocation %d, but got %d", startedWithRevokes + 1, newRevokes), startedWithRevokes + 1, newRevokes);
    final int crlLength = parseCRL(crl).length;
    assertEquals(format("The number of revokes %d does not equal the number of revoked certificates (%d) in crl", newRevokes, crlLength), newRevokes, crlLength);
    // trying to reenroll the revoked user should fail with an EnrollmentException
    client.reenroll(user1);
    String crl2 = client.revoke(admin, user2.getName(), null, false);
    assertEquals("CRL not requested, CRL should be empty", "", crl2);
}

Example 7 with EnrollmentRequest

use of org.hyperledger.fabric_ca.sdk.EnrollmentRequest in project fabric-sdk-java by hyperledger.

the class HFCAClientIT method testRegisterAttributesNONE.

/**
 * Test that we get no attributes.
 *
 * @throws Exception
 */
@Test
public void testRegisterAttributesNONE() throws Exception {
    SampleUser user = new SampleUser("mrAttributesNone", TEST_ADMIN_ORG, sampleStore);
    RegistrationRequest rr = new RegistrationRequest(user.getName(), TEST_USER1_AFFILIATION);
    String password = "mrAttributespassword";
    rr.setSecret(password);
    rr.addAttribute(new Attribute("testattr1", "mrAttributesValue1"));
    rr.addAttribute(new Attribute("testattr2", "mrAttributesValue2"));
    rr.addAttribute(new Attribute("testattrDEFAULTATTR", "mrAttributesValueDEFAULTATTR", true));
    user.setEnrollmentSecret(client.register(rr, admin));
    if (!user.getEnrollmentSecret().equals(password)) {
        fail("Secret returned from RegistrationRequest not match : " + user.getEnrollmentSecret());
    }
    EnrollmentRequest req = new EnrollmentRequest();
    // empty ensure no attributes.
    req.addAttrReq();
    user.setEnrollment(client.enroll(user.getName(), user.getEnrollmentSecret(), req));
    Enrollment enrollment = user.getEnrollment();
    String cert = enrollment.getCert();
    String certdec = getStringCert(cert);
    assertFalse(format("Contains testattrDEFAULTATTR in certificate decoded: %s", certdec), certdec.contains("\"testattrDEFAULTATTR\"") || certdec.contains("\"mrAttributesValueDEFAULTATTR\""));
    assertFalse(format("Contains testattr1 in certificate decoded: %s", certdec), certdec.contains("\"testattr1\"") || certdec.contains("\"mrAttributesValue1\""));
    assertFalse(format("Contains testattr2 in certificate decoded: %s", certdec), certdec.contains("\"testattr2\"") || certdec.contains("\"mrAttributesValue2\""));
}

Example 8 with EnrollmentRequest

use of org.hyperledger.fabric_ca.sdk.EnrollmentRequest in project fabric-sdk-java by hyperledger.

the class HFCAClientIT method testUserRevoke.

// Tests attempting to re-enroll a revoked user
@Test
public void testUserRevoke() throws Exception {
    thrown.expect(EnrollmentException.class);
    thrown.expectMessage("Failed to re-enroll user");
    // gets a calendar using the default time zone and locale.
    Calendar calendar = Calendar.getInstance();
    // avoid any clock skewing.
    Date revokedTinyBitAgoTime = calendar.getTime();
    SampleUser user = getTestUser(TEST_USER1_ORG);
    if (!user.isRegistered()) {
        RegistrationRequest rr = new RegistrationRequest(user.getName(), TEST_USER1_AFFILIATION);
        String password = "testUserRevoke";
        rr.setSecret(password);
        rr.addAttribute(new Attribute("user.role", "department lead"));
        rr.addAttribute(new Attribute(HFCAClient.HFCA_ATTRIBUTE_HFREVOKER, "true"));
        // Admin can register other users.
        user.setEnrollmentSecret(client.register(rr, admin));
        if (!user.getEnrollmentSecret().equals(password)) {
            fail("Secret returned from RegistrationRequest not match : " + user.getEnrollmentSecret());
        }
    }
    if (!user.isEnrolled()) {
        EnrollmentRequest req = new EnrollmentRequest(DEFAULT_PROFILE_NAME, "label 2", null);
        req.addHost("example3.ibm.com");
        user.setEnrollment(client.enroll(user.getName(), user.getEnrollmentSecret(), req));
        // verify
        String cert = user.getEnrollment().getCert();
        verifyOptions(cert, req);
    }
    int startedWithRevokes = -1;
    if (!testConfig.isRunningAgainstFabric10()) {
        // prevent clock skewing. make sure we request started with revokes.
        Thread.sleep(1000);
        // one more after we do this revoke.
        startedWithRevokes = getRevokes(null).length;
        // prevent clock skewing. make sure we request started with revokes.
        Thread.sleep(1000);
    }
    // revoke all enrollment of this user
    client.revoke(admin, user.getName(), "revoke user 3");
    if (!testConfig.isRunningAgainstFabric10()) {
        final int newRevokes = getRevokes(null).length;
        assertEquals(format("Expected one more revocation %d, but got %d", startedWithRevokes + 1, newRevokes), startedWithRevokes + 1, newRevokes);
    // see if we can get right number of revokes that we started with by specifying the time: revokedTinyBitAgoTime
    // TODO: Investigate clock scew
    // final int revokestinybitago = getRevokes(revokedTinyBitAgoTime).length; //Should be same number when test case was started.
    // assertEquals(format("Expected same revocations %d, but got %d", startedWithRevokes, revokestinybitago), startedWithRevokes, revokestinybitago);
    }
    // trying to reenroll the revoked user should fail with an EnrollmentException
    client.reenroll(user);
}

Example 9 with EnrollmentRequest

use of org.hyperledger.fabric_ca.sdk.EnrollmentRequest in project fabric-sdk-java by hyperledger.

the class HFCAClientIT method testEnrollNoKeyPair.

@Test
public void testEnrollNoKeyPair() throws Exception {
    thrown.expect(EnrollmentException.class);
    thrown.expectMessage("Failed to enroll user");
    SampleUser user = getEnrolledUser(TEST_ADMIN_ORG);
    EnrollmentRequest req = new EnrollmentRequest(DEFAULT_PROFILE_NAME, "label 1", null);
    req.setCsr("test");
    client.enroll(user.getName(), user.getEnrollmentSecret(), req);
}