Examples with CertificateDto uk.gov.ida.hub.samlengine.domain.CertificateDto used on opensource projects

Example 6 with CertificateDto

use of uk.gov.ida.hub.samlengine.domain.CertificateDto in project verify-hub by alphagov.

the class ConfigServiceKeyStoreTest method getEncryptionKeyForEntity_shouldValidateTheKeyReturnedByConfig.

@Test
public void getEncryptionKeyForEntity_shouldValidateTheKeyReturnedByConfig() throws Exception {
    final CertificateDto certOneDto = getX509Certificate(IDP_ENTITY_ID);
    when(certificatesConfigProxy.getEncryptionCertificate(issuerId)).thenReturn(certOneDto);
    when(x509CertificateFactory.createCertificate(certOneDto.getCertificate())).thenReturn(x509Certificate);
    when(trustStoreForCertificateProvider.getTrustStoreFor(any(FederationEntityType.class))).thenReturn(trustStore);
    when(certificateChainValidator.validate(x509Certificate, trustStore)).thenReturn(valid());
    configServiceKeyStore.getEncryptionKeyForEntity(issuerId);
    verify(certificateChainValidator).validate(x509Certificate, trustStore);
}

Example 7 with CertificateDto

use of uk.gov.ida.hub.samlengine.domain.CertificateDto in project verify-hub by alphagov.

the class ConfigStubRule method setupCertificatesForEntity.

public void setupCertificatesForEntity(String issuer) throws JsonProcessingException {
    CertificateDto signingCertificate = CertificateDtoBuilder.aCertificateDto().withIssuerId(issuer).withKeyUse(CertificateDto.KeyUse.Signing).build();
    CertificateDto encryptionCertificate = CertificateDtoBuilder.aCertificateDto().withIssuerId(issuer).withKeyUse(CertificateDto.KeyUse.Encryption).build();
    setupCertificatesForEntity(issuer, signingCertificate, encryptionCertificate);
}

Example 8 with CertificateDto

use of uk.gov.ida.hub.samlengine.domain.CertificateDto in project verify-hub by alphagov.

the class ConfigServiceKeyStore method getVerifyingKeysForEntity.

public List<PublicKey> getVerifyingKeysForEntity(String entityId) {
    Collection<CertificateDto> certificates = certificatesConfigProxy.getSignatureVerificationCertificates(entityId);
    List<PublicKey> publicKeys = new ArrayList<>();
    for (CertificateDto keyFromConfig : certificates) {
        String base64EncodedCertificateValue = keyFromConfig.getCertificate();
        final X509Certificate certificate = x509CertificateFactory.createCertificate(base64EncodedCertificateValue);
        KeyStore trustStore = trustStoreForCertificateProvider.getTrustStoreFor(keyFromConfig.getFederationEntityType());
        validate(certificate, trustStore);
        publicKeys.add(certificate.getPublicKey());
    }
    return publicKeys;
}