Projet

Général

Profil

0001-saml-use-RSA-SHA256-signature-method-32010.patch

Benjamin Dauvergne, 04 avril 2019 18:44

Télécharger (1,72 ko)

Voir les différences: 

Subject: [PATCH] saml: use RSA-SHA256 signature method (#32010)


 tests/test_saml_auth.py | 2 ++
 wcs/qommon/misc.py      | 1 +
 2 files changed, 3 insertions(+)
tests/test_saml_auth.py
109 109 
    saml2.perform_login()
110 110 
    assert req.response.status_code == 302
111 111 
    assert req.response.headers['location'].startswith('http://sso.example.net/saml2/sso?SAMLRequest')
112 
    assert 'rsa-sha256' in req.response.headers['location']
112 113 

  		




  113
  114
  
    
def get_authn_response_msg(pub, ni_format=lasso.SAML2_NAME_IDENTIFIER_FORMAT_PERSISTENT):

  		




  114
  115
  
    
    idp_metadata_filepath = os.path.join(pub.app_dir,

  		




  ......




  370
  371
  
    
    assert req.session.user is not None

  		




  371
  372
  
    
    body = saml2.slo_sp()

  		




  372
  373
  
    
    assert req.response.headers['location'].startswith('http://sso.example.net/saml2/slo?SAMLRequest=')

  		




  
  374
  
    
    assert 'rsa-sha256' in req.response.headers['location']

  		




  373
  375
  
    
    assert req.session.user is None

  		




  374
  376
  
    

  		




  375
  377
  
    
def test_saml_idp_logout(pub):

  		












  

    
      wcs/qommon/misc.py
    
  





  81
  81
  
    
        get_abs_path(get_cfg('sp')['saml2_metadata']),

  		




  82
  82
  
    
        get_abs_path(get_cfg('sp')['privatekey']),

  		




  83
  83
  
    
        None, None)

  		




  
  84
  
    
    server.signatureMethod = lasso.SIGNATURE_METHOD_RSA_SHA256

  		




  84
  85
  
    

  		




  85
  86
  
    
    # Set encryption private key

  		




  86
  87
  
    
    encryption_privatekey = get_abs_path(get_cfg('sp').get('encryption_privatekey'))

  		




  87
  
  
    
-