Projet

Général

Profil

0001-tests-use-self-generated-certificate-to-sign-federat.patch

Benjamin Dauvergne, 11 juin 2019 10:24

Télécharger (25,8 ko)

Voir les différences: 

Subject: [PATCH] tests: use self-generated certificate to sign federation
 metadata file (#33823)

Generation procedure :

	openssl genrsa -out rootCA.key 4096
	openssl req -x509 -new -nodes -key rootCA.key -sha256 -days 99999 -out rootCA.crt
	openssl genrsa -out lasso.key 2048
	openssl req -new -sha256 -key lasso.key -subj "/C=FR/CN=Lasso" -out lasso.csr
	openssl x509 -req -in lasso.csr -CA rootCA.crt -CAkey rootCA.key -CAcreateserial -out lasso.crt -days 99999 -sha256
	openssl pkcs12 -export -inkey lasso.key -password pass: -in lasso.crt -name lasso -out lasso.pkcs12
	xmlsec1 --sign --output renater.xml --trusted-pem rootCA.crt --pwd "" --pkcs12 lasso.pkcs12 metadata/renater-metadata.xml
	xmlsec1 --verify --trusted-pem rootCA.crt metadata/renater-metadata.xml

 tests/basic_tests.c                           |  13 +---
 tests/data/lasso.crt                          |  23 ++++++
 tests/data/lasso.csr                          |  15 ++++
 tests/data/lasso.key                          |  27 +++++++
 tests/data/lasso.pkcs12                       | Bin 0 -> 2664 bytes
 .../metadata/metadata-federation-renater.crt  |  15 ----
 tests/data/metadata/renater-metadata.xml      |  69 +++++++++++-------
 tests/data/rootCA.crt                         |  32 ++++++++
 tests/data/rootCA.key                         |  51 +++++++++++++
 tests/data/rootCA.srl                         |   1 +
 10 files changed, 192 insertions(+), 54 deletions(-)
 create mode 100644 tests/data/lasso.crt
 create mode 100644 tests/data/lasso.csr
 create mode 100644 tests/data/lasso.key
 create mode 100644 tests/data/lasso.pkcs12
 delete mode 100644 tests/data/metadata/metadata-federation-renater.crt
 create mode 100644 tests/data/rootCA.crt
 create mode 100644 tests/data/rootCA.key
 create mode 100644 tests/data/rootCA.srl
tests/basic_tests.c
1983 1983 
	block_lasso_logs;
1984 1984 
	check_good_rc(lasso_server_load_metadata(server, LASSO_PROVIDER_ROLE_IDP,
1985 1985 
				TESTSDATADIR "/metadata/renater-metadata.xml",
1986 
				TESTSDATADIR "/metadata/metadata-federation-renater.crt",
1986 
				TESTSDATADIR "/rootCA.crt",
1987 1987 
				&blacklisted_1, &loaded_entity_ids,
1988 1988 
				LASSO_SERVER_LOAD_METADATA_FLAG_DEFAULT));
1989 1989 
	unblock_lasso_logs;
1990 1990 
	check_equals(g_hash_table_size(server->providers), 110);
1991 1991 
	check_equals(g_list_length(loaded_entity_ids), 110);
1992 1992 

  		




  1993
  
  
    
#if 0

  		




  1994
  
  
    
	/* UK federation file are too big to distribute (and I don't even known if it's right to do

  		




  1995
  
  
    
	 * it, disable this test for now ) */

  		




  1996
  
  
    
	check_good_rc(lasso_server_load_metadata(server, LASSO_PROVIDER_ROLE_IDP,

  		




  1997
  
  
    
				TESTSDATADIR "/ukfederation-metadata.xml",

  		




  1998
  
  
    
				TESTSDATADIR "/ukfederation.pem",

  		




  1999
  
  
    
				&blacklisted_1, &loaded_entity_ids,

  		




  2000
  
  
    
				LASSO_SERVER_LOAD_METADATA_FLAG_DEFAULT));

  		




  2001
  
  
    
	check_equals(g_list_length(loaded_entity_ids), 283);

  		




  2002
  
  
    
	check_equals(g_hash_table_size(server->providers), 393);

  		




  2003
  
  
    
#endif

  		




  2004
  1993
  
    
	lasso_release_list_of_strings(loaded_entity_ids);

  		




  2005
  1994
  
    

  		




  2006
  1995
  
    
	lasso_release_gobject(server);

  		












  

    
      tests/data/lasso.crt
    
  





  
  1
  
    
-----BEGIN CERTIFICATE-----

  		




  
  2
  
    
MIID6zCCAdMCFALT+lN2uLJWF7p2xOo65/5KwxixMA0GCSqGSIb3DQEBCwUAMEUx

  		




  
  3
  
    
CzAJBgNVBAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYDVQQKDBhJbnRl

  		




  
  4
  
    
cm5ldCBXaWRnaXRzIFB0eSBMdGQwIBcNMTkwNjExMDc0NTU2WhgPMjI5MzAzMjUw

  		




  
  5
  
    
NzQ1NTZaMB0xCzAJBgNVBAYTAkZSMQ4wDAYDVQQDDAVMYXNzbzCCASIwDQYJKoZI

  		




  
  6
  
    
hvcNAQEBBQADggEPADCCAQoCggEBAOIS/WATGMJsv7OvgrjpYmAW3RmojVp4cHi0

  		




  
  7
  
    
17HelWVZ5adX3zSljecmpb1UQcBNzEDb15tOnNO708O94fFLWiWRfjYWa1QYOLkZ

  		




  
  8
  
    
6kHAR2yJTkhBNQl326K6BnJkWoCsErkXa1608+6+rXR+9KchB/lLSY3Dqh8L6N7s

  		




  
  9
  
    
qE+xyD1Z8HM3mHs9CM4crIpCPaZ80/yNfBPqPA2Zv4uIBrwSF32rPnh1ciJuIKQg

  		




  
  10
  
    
jnCQOaKC2j+VsytgthriI0PVRzC7WPAJReQa65N/i721jG6rPecwVcCS9G6cmG+s

  		




  
  11
  
    
pq6GERUe7nFVdNZ5sRzNsGuDpEdmeCS1pCPtW2hufm8vqvtw9ZkCAwEAATANBgkq

  		




  
  12
  
    
hkiG9w0BAQsFAAOCAgEAfbHk+QNvLYDNlqwwlu5+88/3CcEx+s1voXOBTxgyIAR2

  		




  
  13
  
    
NVKkO7dAW5me51jPPZhy+xC4i+AAeLW5JGwirM5LDgU+9P02JBsZ4OoZI3pBAZ5m

  		




  
  14
  
    
GrmxrMm6q+9mJ+6bMHolfBNN6hoaWeJiknvc1Id7o0Dh4PbdV7r6ISuXisDb/1je

  		




  
  15
  
    
tmzxoFuXhmDwwHMTG7eUORVFEgS8V5NNKMv16BeWNDohJVP6icxwoi5JswUl+vfO

  		




  
  16
  
    
rvIwx2GAJ2EQAbSZv5ADFQ4/vxeopULgLnblc3BwVG4RTT7plNgT2iXP8YwmEGKb

  		




  
  17
  
    
JDHRVFUo1tX6EKkBUI9AgETrdUnLq6XxP11JmrqNL9oOHw+hGb5vT1wyn6FFxZo2

  		




  
  18
  
    
BVgfqdiGbjcs1bTKeQAZKuhaW90oV6+yYD6WtWn/LfHnftAJivALkmUk+XaSqqbO

  		




  
  19
  
    
FxuyRsz9C/yq0azr6IkCWhGwBYoLvf2CrvovSYpPXefeQ+1yXNDW7bvfAQfOO9xk

  		




  
  20
  
    
SqQi4cYJw9hNqTk2f61x6UX/o8wKVhXEHyaCr9lVLNpCK0Uy07f3zkubx1mW5PST

  		




  
  21
  
    
ITSnD8sPD7iMyGOJa5tQJ8W5u2NJT6qo52Jubgc8PapkOoYyEhUaTQEb8RN6D3oD

  		




  
  22
  
    
xc8cCKn4HUtpkJKgxYhQDtsomJp2RK7lzjVPXAlFUmld88WgqdJwp9GSvMEktA0=

  		




  
  23
  
    
-----END CERTIFICATE-----

  		












  

    
      tests/data/lasso.csr
    
  





  
  1
  
    
-----BEGIN CERTIFICATE REQUEST-----

  		




  
  2
  
    
MIICYjCCAUoCAQAwHTELMAkGA1UEBhMCRlIxDjAMBgNVBAMMBUxhc3NvMIIBIjAN

  		




  
  3
  
    
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hL9YBMYwmy/s6+CuOliYBbdGaiN

  		




  
  4
  
    
WnhweLTXsd6VZVnlp1ffNKWN5yalvVRBwE3MQNvXm06c07vTw73h8UtaJZF+NhZr

  		




  
  5
  
    
VBg4uRnqQcBHbIlOSEE1CXfboroGcmRagKwSuRdrXrTz7r6tdH70pyEH+UtJjcOq

  		




  
  6
  
    
Hwvo3uyoT7HIPVnwczeYez0IzhysikI9pnzT/I18E+o8DZm/i4gGvBIXfas+eHVy

  		




  
  7
  
    
Im4gpCCOcJA5ooLaP5WzK2C2GuIjQ9VHMLtY8AlF5Brrk3+LvbWMbqs95zBVwJL0

  		




  
  8
  
    
bpyYb6ymroYRFR7ucVV01nmxHM2wa4OkR2Z4JLWkI+1baG5+by+q+3D1mQIDAQAB

  		




  
  9
  
    
oAAwDQYJKoZIhvcNAQELBQADggEBAJcoM7bn2yEElJjpX8mYuawWwlNdLOCyIPCc

  		




  
  10
  
    
tr6b61CmVDVntWw61fExrg+n1b5uOVuUAEaYNutw6nypzrfvr4wjGKxbl/jTSJCM

  		




  
  11
  
    
WHLl0/+IGQgr41SbRaySA1Y1hdJEd1ummH07sd7FfQNN/T/zLGaM0CI2/yj89VRk

  		




  
  12
  
    
BJwiSwbFp1zqntoITQPjo/vpWAqahqNpSKR+C5l1f870wVI2wPg89McRw35EACdx

  		




  
  13
  
    
Pys8g15+3eKBRTD24eOSWDAL4iDz1jh8ejwtuPjZCQRgg7pkV7uK9Qq4XbStW8AR

  		




  
  14
  
    
JftZ9BBmUOkpdTY0ml6uNojI5u3J/A8KL0UHeiOGLzEy6l64qjE=

  		




  
  15
  
    
-----END CERTIFICATE REQUEST-----

  		












  

    
      tests/data/lasso.key
    
  





  
  1
  
    
-----BEGIN RSA PRIVATE KEY-----

  		




  
  2
  
    
MIIEpAIBAAKCAQEA4hL9YBMYwmy/s6+CuOliYBbdGaiNWnhweLTXsd6VZVnlp1ff

  		




  
  3
  
    
NKWN5yalvVRBwE3MQNvXm06c07vTw73h8UtaJZF+NhZrVBg4uRnqQcBHbIlOSEE1

  		




  
  4
  
    
CXfboroGcmRagKwSuRdrXrTz7r6tdH70pyEH+UtJjcOqHwvo3uyoT7HIPVnwczeY

  		




  
  5
  
    
ez0IzhysikI9pnzT/I18E+o8DZm/i4gGvBIXfas+eHVyIm4gpCCOcJA5ooLaP5Wz

  		




  
  6
  
    
K2C2GuIjQ9VHMLtY8AlF5Brrk3+LvbWMbqs95zBVwJL0bpyYb6ymroYRFR7ucVV0

  		




  
  7
  
    
1nmxHM2wa4OkR2Z4JLWkI+1baG5+by+q+3D1mQIDAQABAoIBAClNONcFhh93CKrG

  		




  
  8
  
    
JMatdJiDdM9MOM7PdBTJTSKkvHxwqQEij5epqzwQlnT5YK3GSMuMnl40RXh1NyHq

  		




  
  9
  
    
nc2ca5KzevBctiz949cFQgPTIflVOGUA7LSXHhwjiiv544LgbOc9vRLnUi1Kzpua

  		




  
  10
  
    
2g1yfmdv9rcciQb1AQ1BBRrSKvfyD410KojJXwunYx32hrHdnhPwC3xyg6BEMpq9

  		




  
  11
  
    
PtcnTvFY/iDeyzYLwAwJb2xdTCpg7okd1KthtohS740Y0uS+UVaEDK7xOIj+CNIq

  		




  
  12
  
    
ii+j0fv5N5fjke8TdUszLWkDYQQ9BTJWFOjJ72FZs9J8pk7RlNhnt6tEoZ6866+w

  		




  
  13
  
    
nprmJwUCgYEA9VWT0FswnSnm+lkRP7vc/SJYTg6zD2BrGOKEo58L8TObb242G+Fs

  		




  
  14
  
    
JteMvdVm14GublmqXZv6Md5x5iVh3kRlu+8dbM5WnBNpwt6mGZPK7if5K/X1qiJg

  		




  
  15
  
    
BeroAX/KuVjSHBYVDFfHqPQg146RFcj/q7aCsqc+aMwgdUZ8OlBjRf8CgYEA6+cP

  		




  
  16
  
    
GG9VOlXWZ2RzSBoKrvxJgSQRpgVXeJAr1BWZ+pJVGIft3zSbeJ30nsUuob61UDVH

  		




  
  17
  
    
g6HzjOUQWHyK4wq2gyK3kOw/Aii6z4REXDVMVq3OgqaE4Fw+MH31ci8JILU415ZY

  		




  
  18
  
    
DQGo++E87tbSgp32gqou7Aj7Y4Sfvx+V/da4NGcCgYAv+tGSsRLb2cMLePnPnh0F

  		




  
  19
  
    
AH+GnIdWXYP0dPB903ARdwdSDprUbwyouAUVZzPat8j2WeDgt82BjUB3Qx5Vysie

  		




  
  20
  
    
rY/ypJP5qC5J5yNS4z2PwA+SEmM+J8Thw2QmTujFwOIujf8Fz/EDUONPZNlpCks+

  		




  
  21
  
    
OM5sxBqHgkxiwysueGRB3wKBgQCWwXDaMrwKrbR5Gq65kzrknQH0b7J/oMZHnAsG

  		




  
  22
  
    
XE+s3DtZk/SmQh5hNMCRfn3Qi+mfOo1bR/I3RmPtyJmRgtUkdNlO2kth+9l2qJZv

  		




  
  23
  
    
PvhsJGLnB7e/EfQEVVq3/+sbZfTPgZr/pOHzJfwkvlCFfKF+23dlDFBrRuQ35d2a

  		




  
  24
  
    
/M93XQKBgQCmAatw/7+z/CS6HinOW7W4k77eQ4wHb8XwzTl8T/5mf6KzejDUuEpZ

  		




  
  25
  
    
hi4ZMAZqNywiJo7UOu6APVzRU7qF6Dbg4eIZWtIocMhp19kUArAPz7NcrghXsTIZ

  		




  
  26
  
    
UdBWeG3kgUa5Q6d/D2OpWHK9S8LRdUL4/H0WZoqDOoDpJwKpljevyg==

  		




  
  27
  
    
-----END RSA PRIVATE KEY-----

  		












  

    
      tests/data/metadata/metadata-federation-renater.crt
    
  





  1
  
  
    
-----BEGIN CERTIFICATE-----

  		




  2
  
  
    
MIICZTCCAc6gAwIBAgIEScn+qTANBgkqhkiG9w0BAQUFADB3MQswCQYDVQQGEwJG

  		




  3
  
  
    
UjEQMA4GA1UEChMHUkVOQVRFUjFWMFQGA1UEAxNNQ2VydGlmaWNhdCBkZSBzaWdu

  		




  4
  
  
    
YXR1cmUgZGVzIG1ldGEgZG9ubmVlcyBkZSBsYSBmZWRlcmF0aW9uIEVkdWNhdGlv

  		




  5
  
  
    
bi1SZWNoZXJjaGUwHhcNMDkwMzI1MDk1MTM3WhcNMTkwMzIzMDk1MTM3WjB3MQsw

  		




  6
  
  
    
CQYDVQQGEwJGUjEQMA4GA1UEChMHUkVOQVRFUjFWMFQGA1UEAxNNQ2VydGlmaWNh

  		




  7
  
  
    
dCBkZSBzaWduYXR1cmUgZGVzIG1ldGEgZG9ubmVlcyBkZSBsYSBmZWRlcmF0aW9u

  		




  8
  
  
    
IEVkdWNhdGlvbi1SZWNoZXJjaGUwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGB

  		




  9
  
  
    
AJBXcLIguokGiytYSOrgmU6fN+1DXK4eaquvFGMaswuhcRPD4tXtSs8CGxPP8/VF

  		




  10
  
  
    
Mpcry04lfPA3mpwDis47hsvmLqGJVmfSuvkDsPx+I325h4WqGzEV8kfttkJSi8D0

  		




  11
  
  
    
QLKk9wseA+BHzoBpU6e5uWmGqfWJgbZlcUuYKCIE2nL/AgMBAAEwDQYJKoZIhvcN

  		




  12
  
  
    
AQEFBQADgYEAT0rUS5GTtqW9a0pAv0PjieSS6bW3KG3Mtn0jC1dmav6X9fbhhmFL

  		




  13
  
  
    
1XSC9WnCU2UD3986EWWYKhN2INHghHE/fQGveVwdcVSSt601OpAsUF18tx0vHqkf

  		




  14
  
  
    
Shcj7mteq59Gv4hOE8U1Urd/pSRaIO3G42X6/L/AlXeDkicfGZHhq7Q=

  		




  15
  
  
    
-----END CERTIFICATE-----

  		












  

    
      tests/data/metadata/renater-metadata.xml
    
  





  1
  
  
    
<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" Name="https://federation.renater.fr/" validUntil="2011-05-23T14:24:02Z" xsi:schemaLocation="urn:oasis:names:tc:SAML:2.0:metadata saml-schema-metadata-2.0.xsd urn:mace:shibboleth:metadata:1.0 shibboleth-metadata-1.0.xsd http://www.w3.org/2000/09/xmldsig# xmldsig-core-schema.xsd"><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">

  		




  
  1
  
    
<?xml version="1.0" encoding="UTF-8"?>

  		




  
  2
  
    
<EntitiesDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" Name="https://federation.renater.fr/" validUntil="2011-05-23T14:24:02Z" xsi:schemaLocation="urn:oasis:names:tc:SAML:2.0:metadata saml-schema-metadata-2.0.xsd urn:mace:shibboleth:metadata:1.0 shibboleth-metadata-1.0.xsd http://www.w3.org/2000/09/xmldsig# xmldsig-core-schema.xsd"><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">

  		




  2
  3
  
    
<ds:SignedInfo>

  		




  3
  4
  
    
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>

  		




  4
  5
  
    
<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>

  		




  ......




  11
  12
  
    
<ds:DigestValue>AIDrFyG3G6IpXdapls2LeP2Awt8=</ds:DigestValue>

  		




  12
  13
  
    
</ds:Reference>

  		




  13
  14
  
    
</ds:SignedInfo>

  		




  14
  
  
    
<ds:SignatureValue>

  		




  15
  
  
    
Mb7C8CsvA6UNnLN+LHCoOG7+c1CYQtUMm+o3p31niDfRcDcCDtuZ521FGM6p6ki6fS8HlncK0Q+h

  		




  16
  
  
    
7rpXNeD2dY12FU94vI5wfF6m89pRs6QYE4O13HPDDZvhRZY+BX4+fqg6tsRz8NRaFS/xvxSzzPzO

  		




  17
  
  
    
dsOrE6R2/QhrcaF1PnA=

  		




  18
  
  
    
</ds:SignatureValue>

  		




  
  15
  
    
<ds:SignatureValue>a47ZynaE+fXQFr2QkjjNsPoWhG0Lbed36MZ2/1jNygD2Ck3zYNSBxFTNI0bhZSi+

  		




  
  16
  
    
sYefYhnYDqpz785/90Ym3hVL+olMZ8z7NLlkeDKCScNCi1436j/W4voR0jez3BkA

  		




  
  17
  
    
IrMW2p4eUtSwfTHRazMtRacQrwTk3JAbShXuWU7fVnRI4t8oa8t43rf2hz+rRG8F

  		




  
  18
  
    
SizMOyyHMak13jaVCmX5qoaO4OWmqs2GhXsx8hRfzJ8o6w417InTLWcuIRNw1/zm

  		




  
  19
  
    
6O6H1as6nmKv34SppCiwdGrTpT6i3/zB3j9Hw7iyuvTF5bbaF+7MMsW/pjw5VOF8

  		




  
  20
  
    
lmNqhsCFdu+JsaTFBIB2Fg==</ds:SignatureValue>

  		




  19
  21
  
    
<ds:KeyInfo>

  		




  20
  22
  
    
<ds:KeyValue>

  		




  21
  23
  
    
<ds:RSAKeyValue>

  		




  22
  24
  
    
<ds:Modulus>

  		




  23
  
  
    
kFdwsiC6iQaLK1hI6uCZTp837UNcrh5qq68UYxqzC6FxE8Pi1e1KzwIbE8/z9UUylyvLTiV88Dea

  		




  24
  
  
    
nAOKzjuGy+YuoYlWZ9K6+QOw/H4jfbmHhaobMRXyR+22QlKLwPRAsqT3Cx4D4EfOgGlTp7m5aYap

  		




  25
  
  
    
9YmBtmVxS5goIgTacv8=

  		




  
  25
  
    
4hL9YBMYwmy/s6+CuOliYBbdGaiNWnhweLTXsd6VZVnlp1ffNKWN5yalvVRBwE3M

  		




  
  26
  
    
QNvXm06c07vTw73h8UtaJZF+NhZrVBg4uRnqQcBHbIlOSEE1CXfboroGcmRagKwS

  		




  
  27
  
    
uRdrXrTz7r6tdH70pyEH+UtJjcOqHwvo3uyoT7HIPVnwczeYez0IzhysikI9pnzT

  		




  
  28
  
    
/I18E+o8DZm/i4gGvBIXfas+eHVyIm4gpCCOcJA5ooLaP5WzK2C2GuIjQ9VHMLtY

  		




  
  29
  
    
8AlF5Brrk3+LvbWMbqs95zBVwJL0bpyYb6ymroYRFR7ucVV01nmxHM2wa4OkR2Z4

  		




  
  30
  
    
JLWkI+1baG5+by+q+3D1mQ==

  		




  26
  31
  
    
</ds:Modulus>

  		




  27
  
  
    
<ds:Exponent>AQAB</ds:Exponent>

  		




  
  32
  
    
<ds:Exponent>

  		




  
  33
  
    
AQAB

  		




  
  34
  
    
</ds:Exponent>

  		




  28
  35
  
    
</ds:RSAKeyValue>

  		




  29
  36
  
    
</ds:KeyValue>

  		




  30
  37
  
    
<ds:X509Data>

  		




  31
  
  
    
<ds:X509Certificate>

  		




  32
  
  
    
MIICZTCCAc6gAwIBAgIEScn+qTANBgkqhkiG9w0BAQUFADB3MQswCQYDVQQGEwJGUjEQMA4GA1UE

  		




  33
  
  
    
ChMHUkVOQVRFUjFWMFQGA1UEAxNNQ2VydGlmaWNhdCBkZSBzaWduYXR1cmUgZGVzIG1ldGEgZG9u

  		




  34
  
  
    
bmVlcyBkZSBsYSBmZWRlcmF0aW9uIEVkdWNhdGlvbi1SZWNoZXJjaGUwHhcNMDkwMzI1MDk1MTM3

  		




  35
  
  
    
WhcNMTkwMzIzMDk1MTM3WjB3MQswCQYDVQQGEwJGUjEQMA4GA1UEChMHUkVOQVRFUjFWMFQGA1UE

  		




  36
  
  
    
AxNNQ2VydGlmaWNhdCBkZSBzaWduYXR1cmUgZGVzIG1ldGEgZG9ubmVlcyBkZSBsYSBmZWRlcmF0

  		




  37
  
  
    
aW9uIEVkdWNhdGlvbi1SZWNoZXJjaGUwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAJBXcLIg

  		




  38
  
  
    
uokGiytYSOrgmU6fN+1DXK4eaquvFGMaswuhcRPD4tXtSs8CGxPP8/VFMpcry04lfPA3mpwDis47

  		




  39
  
  
    
hsvmLqGJVmfSuvkDsPx+I325h4WqGzEV8kfttkJSi8D0QLKk9wseA+BHzoBpU6e5uWmGqfWJgbZl

  		




  40
  
  
    
cUuYKCIE2nL/AgMBAAEwDQYJKoZIhvcNAQEFBQADgYEAT0rUS5GTtqW9a0pAv0PjieSS6bW3KG3M

  		




  41
  
  
    
tn0jC1dmav6X9fbhhmFL1XSC9WnCU2UD3986EWWYKhN2INHghHE/fQGveVwdcVSSt601OpAsUF18

  		




  42
  
  
    
tx0vHqkfShcj7mteq59Gv4hOE8U1Urd/pSRaIO3G42X6/L/AlXeDkicfGZHhq7Q=

  		




  43
  
  
    
</ds:X509Certificate>

  		




  
  38
  
    
<ds:X509Certificate>MIID6zCCAdMCFALT+lN2uLJWF7p2xOo65/5KwxixMA0GCSqGSIb3DQEBCwUAMEUx

  		




  
  39
  
    
CzAJBgNVBAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYDVQQKDBhJbnRl

  		




  
  40
  
    
cm5ldCBXaWRnaXRzIFB0eSBMdGQwIBcNMTkwNjExMDc0NTU2WhgPMjI5MzAzMjUw

  		




  
  41
  
    
NzQ1NTZaMB0xCzAJBgNVBAYTAkZSMQ4wDAYDVQQDDAVMYXNzbzCCASIwDQYJKoZI

  		




  
  42
  
    
hvcNAQEBBQADggEPADCCAQoCggEBAOIS/WATGMJsv7OvgrjpYmAW3RmojVp4cHi0

  		




  
  43
  
    
17HelWVZ5adX3zSljecmpb1UQcBNzEDb15tOnNO708O94fFLWiWRfjYWa1QYOLkZ

  		




  
  44
  
    
6kHAR2yJTkhBNQl326K6BnJkWoCsErkXa1608+6+rXR+9KchB/lLSY3Dqh8L6N7s

  		




  
  45
  
    
qE+xyD1Z8HM3mHs9CM4crIpCPaZ80/yNfBPqPA2Zv4uIBrwSF32rPnh1ciJuIKQg

  		




  
  46
  
    
jnCQOaKC2j+VsytgthriI0PVRzC7WPAJReQa65N/i721jG6rPecwVcCS9G6cmG+s

  		




  
  47
  
    
pq6GERUe7nFVdNZ5sRzNsGuDpEdmeCS1pCPtW2hufm8vqvtw9ZkCAwEAATANBgkq

  		




  
  48
  
    
hkiG9w0BAQsFAAOCAgEAfbHk+QNvLYDNlqwwlu5+88/3CcEx+s1voXOBTxgyIAR2

  		




  
  49
  
    
NVKkO7dAW5me51jPPZhy+xC4i+AAeLW5JGwirM5LDgU+9P02JBsZ4OoZI3pBAZ5m

  		




  
  50
  
    
GrmxrMm6q+9mJ+6bMHolfBNN6hoaWeJiknvc1Id7o0Dh4PbdV7r6ISuXisDb/1je

  		




  
  51
  
    
tmzxoFuXhmDwwHMTG7eUORVFEgS8V5NNKMv16BeWNDohJVP6icxwoi5JswUl+vfO

  		




  
  52
  
    
rvIwx2GAJ2EQAbSZv5ADFQ4/vxeopULgLnblc3BwVG4RTT7plNgT2iXP8YwmEGKb

  		




  
  53
  
    
JDHRVFUo1tX6EKkBUI9AgETrdUnLq6XxP11JmrqNL9oOHw+hGb5vT1wyn6FFxZo2

  		




  
  54
  
    
BVgfqdiGbjcs1bTKeQAZKuhaW90oV6+yYD6WtWn/LfHnftAJivALkmUk+XaSqqbO

  		




  
  55
  
    
FxuyRsz9C/yq0azr6IkCWhGwBYoLvf2CrvovSYpPXefeQ+1yXNDW7bvfAQfOO9xk

  		




  
  56
  
    
SqQi4cYJw9hNqTk2f61x6UX/o8wKVhXEHyaCr9lVLNpCK0Uy07f3zkubx1mW5PST

  		




  
  57
  
    
ITSnD8sPD7iMyGOJa5tQJ8W5u2NJT6qo52Jubgc8PapkOoYyEhUaTQEb8RN6D3oD

  		




  
  58
  
    
xc8cCKn4HUtpkJKgxYhQDtsomJp2RK7lzjVPXAlFUmld88WgqdJwp9GSvMEktA0=</ds:X509Certificate>

  		




  44
  59
  
    
</ds:X509Data>

  		




  45
  60
  
    
</ds:KeyInfo>

  		




  46
  61
  
    
</ds:Signature>

  		




  ......




  1277
  1292
  
    
          

  		




  1278
  1293
  
    
         <!-- source : http://idpdisc.tge-adonis.fr/exportmetadata.xml -->

  		




  1279
  1294
  
    

  		




  1280
  
  
    
            <EntityDescriptor entityID="https://opensso.tge-adonis.fr:8443/opensso" xmlns="urn:oasis:names:tc:SAML:2.0:metadata">

  		




  
  1295
  
    
            <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://opensso.tge-adonis.fr:8443/opensso">

  		




  1281
  1296
  
    
  <SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

  		




  1282
  1297
  
    
    <KeyDescriptor use="signing">

  		




  1283
  1298
  
    
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">

  		




  ......




  8584
  8599
  
    
    $Id: renater.xml,v 1.4 2011/03/30 13:23:00 rdc Exp $

  		




  8585
  8600
  
    
    generated at Wed Mar 30 14:18:20 2011

  		




  8586
  8601
  
    
    by %Id: shib-config,v 1.6 2010/09/10 15:10:15 pmh Exp %

  		




  8587
  
  
    
  --><EntityDescriptor entityID="https://ticket.iop.org/shibboleth" xmlns="urn:oasis:names:tc:SAML:2.0:metadata">

  		




  
  8602
  
    
  --><EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://ticket.iop.org/shibboleth">

  		




  8588
  8603
  
    
  <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">

  		




  8589
  8604
  
    
    <KeyDescriptor use="signing">

  		




  8590
  8605
  
    
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">

  		




  ......




  15545
  15560
  
    
          

  		




  15546
  15561
  
    
         <!-- source : http://science.thomsonreuters.com/m/xml/SP-Metadata.xml -->

  		




  15547
  15562
  
    

  		




  15548
  
  
    
            <!-- Thomson Reuters 23.08.2010 --><!-- *************************************** --><!-- SP https://sp.tshhosting.com/shibboleth --><!-- *************************************** --><EntityDescriptor entityID="https://sp.tshhosting.com/shibboleth" xmlns="urn:oasis:names:tc:SAML:2.0:metadata">

  		




  
  15563
  
    
            <!-- Thomson Reuters 23.08.2010 --><!-- *************************************** --><!-- SP https://sp.tshhosting.com/shibboleth --><!-- *************************************** --><EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://sp.tshhosting.com/shibboleth">

  		




  15549
  15564
  
    
  <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">

  		




  15550
  15565
  
    
    <Extensions>

  		




  15551
  15566
  
    
      <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://www.isiknowledge.com/" index="1"/>

  		




  ......




  30065
  30080
  
    

  		




  30066
  30081
  
    

  		




  30067
  30082
  
    

  		




  30068
  
  
    
</EntitiesDescriptor>

  		




  
  30083
  
    
</EntitiesDescriptor>

  		












  

    
      tests/data/rootCA.crt
    
  





  
  1
  
    
-----BEGIN CERTIFICATE-----

  		




  
  2
  
    
MIIFbTCCA1WgAwIBAgIUJD9pAmQfrAv6NLPnweO4XUdIbzkwDQYJKoZIhvcNAQEL

  		




  
  3
  
    
BQAwRTELMAkGA1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUxITAfBgNVBAoM

  		




  
  4
  
    
GEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDAgFw0xOTA2MTEwNzQzNTVaGA8yMjkz

  		




  
  5
  
    
MDMyNTA3NDM1NVowRTELMAkGA1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUx

  		




  
  6
  
    
ITAfBgNVBAoMGEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDCCAiIwDQYJKoZIhvcN

  		




  
  7
  
    
AQEBBQADggIPADCCAgoCggIBAJuPnHwxmpRquFkFok4VkO39j5NT2a8+Wfp8zYnh

  		




  
  8
  
    
qLt3CG3oDyFftWyF97NJYoxDPbio2fVYJiBKutDOMYPsJfrd4SoqcDOGOAdfkNl9

  		




  
  9
  
    
SEhCnzrzlOj6ZcDoNTG0IvKh+NzLgfpU1wggyLW2ZXwvwf8hNGW9YR1i8XY5TSmt

  		




  
  10
  
    
0z9Dawsg2QAyYjoemUeDOVWEFWISmXySC2osXGANcOaaFMEv1Ryj5HWHzcCVZZ0g

  		




  
  11
  
    
UBG9iDZqewDvPg+SRvC2k16coeRjsSstHzVqBxOWpp5Oium39K8jXV6jG+JkFn49

  		




  
  12
  
    
C2RBldpajbPhvHKOdtJeID20njgmfCRZB/KfQGPPf8xXk4wBTxPU9L8wKy370unZ

  		




  
  13
  
    
P4WD1vq35KfPsiUdlavzqYkOkI20iWIZO6853oSPlJ4zmBVNXP8VhQm0h2VovNH+

  		




  
  14
  
    
Zde4vaPtQXPwwNbCvBItu5m1uaigPgRycBJV8M0gdliAICfCMeSwQDrhkX6ck17n

  		




  
  15
  
    
uBpxBTCn9GEFN/+7miNH/roH03NHU3vciqTAi1MrDA3jfOZkYBC/Cd5AmsMc6NTO

  		




  
  16
  
    
Xc57mFwuZ+BmQI6w1ddL5e+5Y/DA57VexfTdG+/TpS+D9oBJUmaczkAG+27YKs8f

  		




  
  17
  
    
mJKoTSPULjXK8pwwcBMk8HuS5bt6fBBmqbJb8bwXceEHCBg7WCYNmXy5lXwUUwAh

  		




  
  18
  
    
NDwDAgMBAAGjUzBRMB0GA1UdDgQWBBRWppx3mP/hCh9ZLKZfwGBeg1wiPjAfBgNV

  		




  
  19
  
    
HSMEGDAWgBRWppx3mP/hCh9ZLKZfwGBeg1wiPjAPBgNVHRMBAf8EBTADAQH/MA0G

  		




  
  20
  
    
CSqGSIb3DQEBCwUAA4ICAQAWfNrX65UUI55f0A8svSIUVy8c7YjX8P70xMWq7Cpe

  		




  
  21
  
    
tRPo8C98JCr8MtUaAx6VFx4sjHyCPmEIIf+u7aDxRhrxpqAQAQl5me8OxqwmOxKu

  		




  
  22
  
    
I7WeRrjAvOux52xfjqtm36fx9SUDu94ox5LdG+NNtG29AbLZeAs4pe4qVqH1GQb9

  		




  
  23
  
    
fw3lvxwKV+AovpVZ7eXyscfSvKWi4rgzVJl27me/rgLZsVYJ2gAjTI77vGN1G0ro

  		




  
  24
  
    
q2iaTvEALHlzhKepVg1IAJAGJLSZegcK3zwWOqZzkL77De6Z3+zbxwNopcy/CGEs

  		




  
  25
  
    
9v9gDyL1LeAJ3o/dehvPiqMWogTVO6X77sNIiiu41sdaWSTiFllmyO+hQqS69R68

  		




  
  26
  
    
NOe+uAP1+taLhD16kp7XHS0MIXEPaQbEgrXtqb163oMJSAaok3xXNyRJ7ZNMS4CT

  		




  
  27
  
    
0QJE15PpnbRYoQOf4QrrsDmpl2ybU7MR9uOj64qVSvUtBcq1w7ljPStbkN7F7OOU

  		




  
  28
  
    
pepVvNaWe820kgQ/l9tu1WY9D7PFGP6iWY4AwdxcpWwlJnIr104X3PQ0Y5/msYVs

  		




  
  29
  
    
zEnqaNiEOnbmTZUvn5jJOwh8DWUo+LffRQx/PoZlhZ/L/L3RtpGUV2E+E5Gzqs7W

  		




  
  30
  
    
gey9iG11CVcvK/wdCj0zhW/XpesQuwinIMawGS6G92igHo+AFjJoGaGiw3jYdep8

  		




  
  31
  
    
CA==

  		




  
  32
  
    
-----END CERTIFICATE-----

  		












  

    
      tests/data/rootCA.key
    
  





  
  1
  
    
-----BEGIN RSA PRIVATE KEY-----

  		




  
  2
  
    
MIIJJwIBAAKCAgEAm4+cfDGalGq4WQWiThWQ7f2Pk1PZrz5Z+nzNieGou3cIbegP

  		




  
  3
  
    
IV+1bIX3s0lijEM9uKjZ9VgmIEq60M4xg+wl+t3hKipwM4Y4B1+Q2X1ISEKfOvOU

  		




  
  4
  
    
6PplwOg1MbQi8qH43MuB+lTXCCDItbZlfC/B/yE0Zb1hHWLxdjlNKa3TP0NrCyDZ

  		




  
  5
  
    
ADJiOh6ZR4M5VYQVYhKZfJILaixcYA1w5poUwS/VHKPkdYfNwJVlnSBQEb2INmp7

  		




  
  6
  
    
AO8+D5JG8LaTXpyh5GOxKy0fNWoHE5amnk6K6bf0ryNdXqMb4mQWfj0LZEGV2lqN

  		




  
  7
  
    
s+G8co520l4gPbSeOCZ8JFkH8p9AY89/zFeTjAFPE9T0vzArLfvS6dk/hYPW+rfk

  		




  
  8
  
    
p8+yJR2Vq/OpiQ6QjbSJYhk7rznehI+UnjOYFU1c/xWFCbSHZWi80f5l17i9o+1B

  		




  
  9
  
    
c/DA1sK8Ei27mbW5qKA+BHJwElXwzSB2WIAgJ8Ix5LBAOuGRfpyTXue4GnEFMKf0

  		




  
  10
  
    
YQU3/7uaI0f+ugfTc0dTe9yKpMCLUysMDeN85mRgEL8J3kCawxzo1M5dznuYXC5n

  		




  
  11
  
    
4GZAjrDV10vl77lj8MDntV7F9N0b79OlL4P2gElSZpzOQAb7btgqzx+YkqhNI9Qu

  		




  
  12
  
    
NcrynDBwEyTwe5Llu3p8EGapslvxvBdx4QcIGDtYJg2ZfLmVfBRTACE0PAMCAwEA

  		




  
  13
  
    
AQKCAgBPPweu1O40cXFcGFyofqAIPUWo/exFM/ROgMmMViLI7UikBLXAgKtBj7Wx

  		




  
  14
  
    
5c6IObD1oz71l2REyw0EViYvWFu4wtNz0Y67EML2Lp7xzLrH5PiM5Y2UagrwDNsc

  		




  
  15
  
    
aPHsvMq0YA/k4NdyUpEs0LA+ZW3kdJvmwGT6vW7YlTRT6TNWZRfg4WjqisAzb2cS

  		




  
  16
  
    
YS0R/WmPPn5mUVfzTIn6fJ5pO1EbYSylnHBD11zfoLvVIaLohq8fWXsz7Kym7hOp

  		




  
  17
  
    
iLjmV9C5MngM0L23Tj4womxa9RQbIBVMKy3jiiAoYmh7AsoM1sRqKftKCdMgYKbz

  		




  
  18
  
    
X/P4u0xmumQ/eANue+YncoteI7cLrjps1RUeodmRgxLt0KHbTW4X35Fd6yI+Nxts

  		




  
  19
  
    
13aA6J/WusELQYigBXG3cHOfxfOMkqjdVozReF+QzsAJFXQwV4lQhsdlkVjnMWB9

  		




  
  20
  
    
iotUVj9X8SWHktBnCHmuyuQoyJIxwM6cBLv1bJCpdiGcJJrtPgTwI3ybjVDlsVpE

  		




  
  21
  
    
A2EaWiH2UDnzmI2OXy2BaOmLoYzV3kYLhd1zG2q2rLDd70kzOHJJmTOp8xFzZVOA

  		




  
  22
  
    
74IbdWb6J3C6o7F8IFK+1strw6ADDINEyg+zoIbNUGVyvGI90Xak+7k8KgGWSplw

  		




  
  23
  
    
318k0xyh6hu9HU/wWHE2WObjIWKnzDHnt917dJkyMazyC2x3wQKCAQEAy4gAWJNM

  		




  
  24
  
    
/mVa4sr2NLUNPQpVfxhSF/jhxdD3b5Z5A/PD+spUcF1WZSpBj8BmNOWilJ2pBMkv

  		




  
  25
  
    
Yp7o2s4MbLIFx1HMgVI/cTo1/kk8hvCBdX9n1Dum3dRNTaxBUaZNDdBZ61b4an/V

  		




  
  26
  
    
lrK20Tx3RY23qInoOUsBFENF+UJUAkujXH3tBv5d//yfX9z75sesQl/HKVr1UAI6

  		




  
  27
  
    
I7a76sO+0bCnDAxooIQH0sLzmWa9JliiFd8gWeY7Yd+/jCw4toptkgtXUUm1dFLL

  		




  
  28
  
    
8s7Eah+P0ORZ17+eBWub/4gOzbgfOh4EKNU/lLI9r2L6RH0F9C3Symm6mu7EBpEC

  		




  
  29
  
    
SzDyHnYqzpAh8wKCAQEAw6nSmp+HBz7AhW+tEiXt1KjvCRgslVMGQ/UTFbU8TqLd

  		




  
  30
  
    
rECn5wKO45EHV4at6jazJUhwIBVty39duiOmmEWOtpCxX3OgdM11s8/LACXv4/B4

  		




  
  31
  
    
pWHqzhJgrwISOLLoxEoM+A3odXoEw95phOy7seBkVxJ6Idq3obpZli0ilDHfFT2R

  		




  
  32
  
    
B+kANrCI5D9d43XdoEBaS6EWvd0TrIbkrfwWrQtbmGuXsmj/ZpOntPixUaZO+go1

  		




  
  33
  
    
P0eDrUZlRcfVWBGNRiEHiGr0InOWrK93OtjoGB3SjtnQkRP5JJSN/2QOCw7LvmZj

  		




  
  34
  
    
GA/KdQxef0Rh5cKLd3LBzwTzGwl+4MMME+WL0M3xsQKCAQAg8bKco7sismUzsIaJ

  		




  
  35
  
    
oYSzDKkqGVWwa6ifzGNAvKp56UsfnQBt7628UkqqagohJcpbI+nnzGjPHcmzIQcB

  		




  
  36
  
    
0Q7+ZE8l35pFSZbTwib58JQD4Mt9nuozndmlaOxpuvFd+wuS/FDZbDe2XNcapx7n

  		




  
  37
  
    
Mzk3HptoKqvSC9GXtxTCClw27GshZqrwdIOXkL11bXyEgdxK5V4vxSyD+2APb//D

  		




  
  38
  
    
EUT4vklxMe3SP5wOiIK1YkNaJvOlmY6jGQR4O/AyG9YAfbV0gunMGlrIwo8oXlN5

  		




  
  39
  
    
DH0+XtXFKtXlVrCOu+7SCWnC8kGIYBF8AhlgXJxKGeC0wshhq6QvK+mjIhkOtTHY

  		




  
  40
  
    
nZvhAoIBAHbQBKcIAAKSRG3CpqHCjmz4OE6Zc1kplUBm7TPdXcWSeHFEwbAxiXr+

  		




  
  41
  
    
cirgCXOTy6z0E8InwQg1S0DgrSUB9+s8abjAicrjiHmr0GVCpC0RtPEYSHDiD/u1

  		




  
  42
  
    
kkMDwPyQytdF+sZ7VbFquUCSUFdvHv8QpUExgxieBBCBT+IVdpV7UTowboTHJhkT

  		




  
  43
  
    
sXuR8waAjVQneZvJR00YjHxp+4sQvooLq44W3B/5wXjPGz2tc3+5+yN11au+d3is

  		




  
  44
  
    
JAzae6L+I4jfCWhyMCikVA5T8HvUgCtmcJPoQP3Jh4BxzWVBks8HdV0DGbmBzVAS

  		




  
  45
  
    
wi+2tuHNuYpwQv9EANuTFR5v4TrmE8ECggEAMXp5rfHt2hKLtkIwqYE7C8IVGQ9q

  		




  
  46
  
    
BcjKAJSuDYkyBpfSp9uxkiyvnND5tEj0uOcMCVZlntSIxWx+HXFu5rL0Ax5ZmSal

  		




  
  47
  
    
uoWpwDXbKYgHF9zlGXqYulsODqZC0cjJpUogXFC0B4pRDUVzuZXO9ACuS5azXYqh

  		




  
  48
  
    
G6Rw0O6rDTHVgkmazJtxreO8v4NpfIbBbFfQgU5xeHdS6ky9LqG+yUKJ5FWkGWcU

  		




  
  49
  
    
SqpZX3yxXM4q/cA1KBN31K3V2xvjVPcEwzkZDGDbLg33DASVF7RV/WYymhDuxE+w

  		




  
  50
  
    
vHDz9Q7dk4pTzCdNiQgomBSjOkLDKWuOvaInQwYWJgavpPGWr31hDyi5Kw==

  		




  
  51
  
    
-----END RSA PRIVATE KEY-----

  		












  

    
      tests/data/rootCA.srl
    
  





  
  1
  
    
02D3FA5376B8B25617BA76C4EA3AE7FE4AC318B1

  		




  0
  
  
    
-