org.opensaml.security.x509.impl

Class CertPathPKIXTrustEvaluatorTest

java.lang.Object

org.opensaml.core.OpenSAMLInitBaseTestCase

org.opensaml.core.xml.XMLObjectBaseTestCase

org.opensaml.security.x509.impl.CertPathPKIXTrustEvaluatorTest

public class CertPathPKIXTrustEvaluatorTest
extends org.opensaml.core.xml.XMLObjectBaseTestCase

Tests the CertPathPKIXTrustEvaluator implementation.

Field Summary

Fields

Modifier and Type	Field and Description
private X509Credential	cred
private static String	DATA_PATH
private static Set<X509Certificate>	EMPTY_ANCHORS
private static Set<X509CRL>	EMPTY_CRLS
private PKIXValidationInformation	info
private static Integer	MAX_DEPTH
private org.opensaml.security.x509.impl.CertPathPKIXValidationOptions	opts
private PKIXTrustEvaluator	pkixEvaluator
private static Set	testPolicy1
private static Set	testPolicy2

Fields inherited from class org.opensaml.core.xml.XMLObjectBaseTestCase

builderFactory, marshallerFactory, parserPool, simpleXMLObjectQName, unmarshallerFactory

Constructor Summary

Constructors

Constructor and Description
CertPathPKIXTrustEvaluatorTest()

Method Summary

Methods

Modifier and Type	Method and Description
private X509Certificate	getCertificate(String fileName)
private Collection<X509Certificate>	getCertificates(String... certNames)
private BasicX509Credential	getCredential(String entityCertFileName, String... chainMembers)
private X509CRL	getCRL(String fileName)
private Collection<X509CRL>	getCRLS(String... crlNames)
private InputStream	getInputStream(String fileName)
private PKIXValidationInformation	getPKIXInfoSet(Collection<X509Certificate> certs, Collection<X509CRL> crls, Integer depth)
private org.opensaml.security.x509.impl.CertPathPKIXValidationOptions	getPKIXOptions(Set<String> initialPolicies, boolean policyMappingInhibit, boolean anyPolicyInhibit)
protected void	setUp()
void	testAnyPolicy()
void	testEmptyCRL()
void	testEntityCertExpired()
void	testExpiredCRL()
void	testExplicitPolicy()
void	testExplicitPolicyMap()
void	testExplicitPolicyNoMap()
void	testGood()
void	testGoodPathInCred()
void	testGoodPathInCredNoAnchors()
void	testIncompleteCRLsForChain()
void	testIncompletePath()
void	testIncompletePathInCred()
void	testNoAnchors()
void	testNonRevokedCertWithNonEmptyCRL()
void	testNonRootIssuerAsTrustAnchor()
void	testPathTooDeep()
void	testRevokedV1()
void	testRevokedV1CRLinCred()
void	testRevokedV2()
void	testRevokedV2CRLinCred()
private void	testValidateFailure(String message, PKIXValidationInformation info, X509Credential cred)
private void	testValidateFailure(String message, PKIXValidationInformation info, X509Credential cred, org.opensaml.security.x509.impl.CertPathPKIXValidationOptions opts)
private void	testValidateProcessingError(String message, PKIXValidationInformation info, X509Credential cred)
private void	testValidateSuccess(String message, PKIXValidationInformation info, X509Credential cred) Helper methods.
private void	testValidateSuccess(String message, PKIXValidationInformation info, X509Credential cred, org.opensaml.security.x509.impl.CertPathPKIXValidationOptions opts)

Methods inherited from class org.opensaml.core.xml.XMLObjectBaseTestCase

assertXMLEquals, assertXMLEquals, buildXMLObject, fetchDuration, getBuilder, getMarshaller, getMarshaller, getUnmarshaller, getUnmarshaller, getUnmarshaller, initXMLObjectSupport, parseXMLDocument, printXML, printXML, unmarshallElement

Methods inherited from class org.opensaml.core.OpenSAMLInitBaseTestCase

initOpenSAML

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DATA_PATH

private static final String DATA_PATH

See Also:

Constant Field Values

EMPTY_CRLS

private static final Set<X509CRL> EMPTY_CRLS

EMPTY_ANCHORS

private static final Set<X509Certificate> EMPTY_ANCHORS

MAX_DEPTH

private static final Integer MAX_DEPTH

pkixEvaluator

private PKIXTrustEvaluator pkixEvaluator

info

private PKIXValidationInformation info

cred

private X509Credential cred

opts

private org.opensaml.security.x509.impl.CertPathPKIXValidationOptions opts

testPolicy1

private static Set testPolicy1

testPolicy2

private static Set testPolicy2

Constructor Detail

CertPathPKIXTrustEvaluatorTest

public CertPathPKIXTrustEvaluatorTest()

Method Detail

setUp

protected void setUp()
              throws Exception

Throws:

Exception

testGood

public void testGood()

testIncompletePath

public void testIncompletePath()

testNoAnchors

public void testNoAnchors()

testNonRootIssuerAsTrustAnchor

public void testNonRootIssuerAsTrustAnchor()

testRevokedV1

public void testRevokedV1()

testRevokedV1CRLinCred

public void testRevokedV1CRLinCred()

testRevokedV2

public void testRevokedV2()

testRevokedV2CRLinCred

public void testRevokedV2CRLinCred()

testEmptyCRL

public void testEmptyCRL()

testIncompleteCRLsForChain

public void testIncompleteCRLsForChain()

testExpiredCRL

public void testExpiredCRL()

testNonRevokedCertWithNonEmptyCRL

public void testNonRevokedCertWithNonEmptyCRL()

testEntityCertExpired

public void testEntityCertExpired()

testGoodPathInCred

public void testGoodPathInCred()

testGoodPathInCredNoAnchors

public void testGoodPathInCredNoAnchors()

testIncompletePathInCred

public void testIncompletePathInCred()

testPathTooDeep

public void testPathTooDeep()

testAnyPolicy

public void testAnyPolicy()

testExplicitPolicy

public void testExplicitPolicy()

testExplicitPolicyMap

public void testExplicitPolicyMap()

testExplicitPolicyNoMap

public void testExplicitPolicyNoMap()

testValidateSuccess

private void testValidateSuccess(String message,
                       PKIXValidationInformation info,
                       X509Credential cred)

Helper methods. *

testValidateFailure

private void testValidateFailure(String message,
                       PKIXValidationInformation info,
                       X509Credential cred)

testValidateProcessingError

private void testValidateProcessingError(String message,
                               PKIXValidationInformation info,
                               X509Credential cred)

testValidateSuccess

private void testValidateSuccess(String message,
                       PKIXValidationInformation info,
                       X509Credential cred,
                       org.opensaml.security.x509.impl.CertPathPKIXValidationOptions opts)

testValidateFailure

private void testValidateFailure(String message,
                       PKIXValidationInformation info,
                       X509Credential cred,
                       org.opensaml.security.x509.impl.CertPathPKIXValidationOptions opts)

getCredential

private BasicX509Credential getCredential(String entityCertFileName,
                                String... chainMembers)

getPKIXInfoSet

private PKIXValidationInformation getPKIXInfoSet(Collection<X509Certificate> certs,
                                       Collection<X509CRL> crls,
                                       Integer depth)

getPKIXOptions

private org.opensaml.security.x509.impl.CertPathPKIXValidationOptions getPKIXOptions(Set<String> initialPolicies,
                                                                           boolean policyMappingInhibit,
                                                                           boolean anyPolicyInhibit)

getCertificates

private Collection<X509Certificate> getCertificates(String... certNames)

getCertificate

private X509Certificate getCertificate(String fileName)

getCRLS

private Collection<X509CRL> getCRLS(String... crlNames)

getCRL

private X509CRL getCRL(String fileName)

getInputStream

private InputStream getInputStream(String fileName)