Examples with X509CertificatePrivateKeyPair org.olat.core.util.crypto.X509CertificatePrivateKeyPair used on opensource projects

Example 1 with X509CertificatePrivateKeyPair

use of org.olat.core.util.crypto.X509CertificatePrivateKeyPair in project OpenOLAT by OpenOLAT.

the class XMLDigitalSignatureUtilTest method readCertificatePrivateKeyPair.

/**
 * Preliminary test which read the certificate. The method is used in
 * every other test of the class.
 *
 * @throws Exception
 */
@Test
public void readCertificatePrivateKeyPair() throws Exception {
    X509CertificatePrivateKeyPair keyPair = getCertificatePrivateKeyPair();
    Assert.assertNotNull(keyPair);
    Assert.assertNotNull(keyPair.getPrivateKey());
    Assert.assertNotNull(keyPair.getX509Cert());
}

Example 2 with X509CertificatePrivateKeyPair

use of org.olat.core.util.crypto.X509CertificatePrivateKeyPair in project OpenOLAT by OpenOLAT.

the class XMLDigitalSignatureUtilTest method signAndValidate_notValid.

/**
 * Check that the signature validate the data too by slightly changing a value in
 * the signed XML file.
 *
 * @throws Exception
 */
@Test
public void signAndValidate_notValid() throws Exception {
    X509CertificatePrivateKeyPair certificateInfo = getCertificatePrivateKeyPair();
    URL xmlUrl = XMLDigitalSignatureUtilTest.class.getResource("assessmentResult.xml");
    File xmlFile = new File(xmlUrl.toURI());
    File xmlSignedFile = File.createTempFile("assessment-result", "_signed.xml");
    XMLDigitalSignatureUtil.signEmbedded(xmlFile, xmlSignedFile, certificateInfo.getX509Cert(), certificateInfo.getPrivateKey());
    Assert.assertTrue(xmlSignedFile.length() > 0);
    // the xml is signed and valid
    boolean valid = XMLDigitalSignatureUtil.validate(xmlSignedFile, certificateInfo.getX509Cert().getPublicKey());
    Assert.assertTrue(valid);
    // change it a little bit
    String xml = FileUtils.load(xmlSignedFile, "UTF-8");
    String rogueXml = xml.replace("test7501c21c-c3db-468d-b5b8-c40339aaf323.xml", "test7501c21c-468d-b5b8-c40339aaf323.xml");
    Assert.assertNotEquals(xml, rogueXml);
    File xmlRogueFile = File.createTempFile("assessment-result", "_rogue.xml");
    FileUtils.save(xmlRogueFile, rogueXml, "UTF-8");
    // the xml is not valid
    boolean validity = XMLDigitalSignatureUtil.validate(xmlRogueFile, certificateInfo.getX509Cert().getPublicKey());
    Assert.assertFalse(validity);
    // clean up
    Files.deleteIfExists(xmlSignedFile.toPath());
    Files.deleteIfExists(xmlRogueFile.toPath());
}

Example 3 with X509CertificatePrivateKeyPair

use of org.olat.core.util.crypto.X509CertificatePrivateKeyPair in project OpenOLAT by OpenOLAT.

the class XMLDigitalSignatureUtilTest method signDetachedAndValidate.

/**
 * Check if the cycle sign -> validation works
 *
 * @throws Exception
 */
@Test
public void signDetachedAndValidate() throws Exception {
    X509CertificatePrivateKeyPair certificateInfo = getCertificatePrivateKeyPair();
    URL xmlUrl = XMLDigitalSignatureUtilTest.class.getResource("assessmentResult.xml");
    File xmlFile = new File(xmlUrl.toURI());
    String xmlUri = xmlUrl.toURI().toString();
    File xmlSignatureFile = File.createTempFile("assessment-result", "_signature.xml");
    XMLDigitalSignatureUtil.signDetached(xmlUri, xmlFile, xmlSignatureFile, null, null, certificateInfo.getX509Cert(), certificateInfo.getPrivateKey());
    Assert.assertTrue(xmlSignatureFile.length() > 0);
    boolean valid = XMLDigitalSignatureUtil.validate(xmlUri, xmlFile, xmlSignatureFile, certificateInfo.getX509Cert().getPublicKey());
    Assert.assertTrue(valid);
    // clean up
    Files.deleteIfExists(xmlSignatureFile.toPath());
}

Example 4 with X509CertificatePrivateKeyPair

use of org.olat.core.util.crypto.X509CertificatePrivateKeyPair in project OpenOLAT by OpenOLAT.

the class QTI21ServiceImpl method signAssessmentResult.

@Override
public void signAssessmentResult(AssessmentTestSession candidateSession, DigitalSignatureOptions signatureOptions, Identity assessedIdentity) {
    // nothing to do
    if (!qtiModule.isDigitalSignatureEnabled() || !signatureOptions.isDigitalSignature())
        return;
    try {
        File resultFile = getAssessmentResultFile(candidateSession);
        File signatureFile = new File(resultFile.getParentFile(), "assessmentResultSignature.xml");
        File certificateFile = qtiModule.getDigitalSignatureCertificateFile();
        X509CertificatePrivateKeyPair kp = CryptoUtil.getX509CertificatePrivateKeyPairPfx(certificateFile, qtiModule.getDigitalSignatureCertificatePassword());
        StringBuilder uri = new StringBuilder();
        uri.append(Settings.getServerContextPathURI()).append("/").append("RepositoryEntry/").append(candidateSession.getRepositoryEntry().getKey());
        if (StringHelper.containsNonWhitespace(candidateSession.getSubIdent())) {
            uri.append("/CourseNode/").append(candidateSession.getSubIdent());
        }
        uri.append("/TestSession/").append(candidateSession.getKey()).append("/assessmentResult.xml");
        Document signatureDoc = createSignatureDocumentWrapper(uri.toString(), assessedIdentity, signatureOptions);
        XMLDigitalSignatureUtil.signDetached(uri.toString(), resultFile, signatureFile, signatureDoc, certificateFile.getName(), kp.getX509Cert(), kp.getPrivateKey());
        if (signatureOptions.isDigitalSignature() && signatureOptions.getMailBundle() != null) {
            MailBundle mail = signatureOptions.getMailBundle();
            List<File> attachments = new ArrayList<>(2);
            attachments.add(signatureFile);
            mail.getContent().setAttachments(attachments);
            mailManager.sendMessageAsync(mail);
        }
    } catch (Exception e) {
        log.error("", e);
    }
}

Example 5 with X509CertificatePrivateKeyPair

use of org.olat.core.util.crypto.X509CertificatePrivateKeyPair in project openolat by klemens.

the class XMLDigitalSignatureUtilTest method signAndValidate_notValid.

/**
 * Check that the signature validate the data too by slightly changing a value in
 * the signed XML file.
 *
 * @throws Exception
 */
@Test
public void signAndValidate_notValid() throws Exception {
    X509CertificatePrivateKeyPair certificateInfo = getCertificatePrivateKeyPair();
    URL xmlUrl = XMLDigitalSignatureUtilTest.class.getResource("assessmentResult.xml");
    File xmlFile = new File(xmlUrl.toURI());
    File xmlSignedFile = File.createTempFile("assessment-result", "_signed.xml");
    XMLDigitalSignatureUtil.signEmbedded(xmlFile, xmlSignedFile, certificateInfo.getX509Cert(), certificateInfo.getPrivateKey());
    Assert.assertTrue(xmlSignedFile.length() > 0);
    // the xml is signed and valid
    boolean valid = XMLDigitalSignatureUtil.validate(xmlSignedFile, certificateInfo.getX509Cert().getPublicKey());
    Assert.assertTrue(valid);
    // change it a little bit
    String xml = FileUtils.load(xmlSignedFile, "UTF-8");
    String rogueXml = xml.replace("test7501c21c-c3db-468d-b5b8-c40339aaf323.xml", "test7501c21c-468d-b5b8-c40339aaf323.xml");
    Assert.assertNotEquals(xml, rogueXml);
    File xmlRogueFile = File.createTempFile("assessment-result", "_rogue.xml");
    FileUtils.save(xmlRogueFile, rogueXml, "UTF-8");
    // the xml is not valid
    boolean validity = XMLDigitalSignatureUtil.validate(xmlRogueFile, certificateInfo.getX509Cert().getPublicKey());
    Assert.assertFalse(validity);
    // clean up
    Files.deleteIfExists(xmlSignedFile.toPath());
    Files.deleteIfExists(xmlRogueFile.toPath());
}