From 9ce7c4927ab368995b9d15bffd2b0db6ab39a036 Mon Sep 17 00:00:00 2001
From: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
Date: Thu, 2 Jul 2026 14:10:15 +0200
Subject: [PATCH] test(connector/saml): update expired OAM test cert

Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
(cherry picked from commit bd5e9b6c8b76e6c2d8e0ae17f7426e3e72c01ca2)
---
 connector/saml/testdata/oam-ca.pem   | 28 +++++++++++++++++-----------
 connector/saml/testdata/oam-resp.xml |  2 +-
 2 files changed, 18 insertions(+), 12 deletions(-)

diff --git a/connector/saml/testdata/oam-ca.pem b/connector/saml/testdata/oam-ca.pem
index 41645dda75..160ac52b59 100644
--- a/connector/saml/testdata/oam-ca.pem
+++ b/connector/saml/testdata/oam-ca.pem
@@ -1,13 +1,19 @@
 -----BEGIN CERTIFICATE-----
-MIIB/jCCAWegAwIBAgIBCjANBgkqhkiG9w0BAQQFADAkMSIwIAYDVQQDExlkZWFv
-YW0tZGV2MDIuanBsLm5hc2EuZ292MB4XDTE2MDYzMDA0NTQxNloXDTI2MDYyODA0
-NTQxNlowJDEiMCAGA1UEAxMZZGVhb2FtLWRldjAyLmpwbC5uYXNhLmdvdjCBnzAN
-BgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAht1N4lGdwUbl7YRyHwSCrnep6/e2I3+V
-eue0pSA/DGn8OuR/udM8UCja5utqlqJdq200ox4b4Mpz0Jg9kMckALtKe+1DgeES
-EIx9FpeuBdHlitYQNSbEr30HIG2nmeTOy4Vi5unBO54um3tNazcUTMA0/LJ6KQL8
-LeZSlB/IxwUCAwEAAaNAMD4wDAYDVR0TAQH/BAIwADAPBgNVHQ8BAf8EBQMDB9gA
-MB0GA1UdDgQWBBRYo1YjfrNonauLzj6/AsueWFGSszANBgkqhkiG9w0BAQQFAAOB
-gQACq7GHK/Zsg0+qC0WWa2ZjmOXE6Dqk/xuooG49QT7ihABs7k9U27Fw3xKF6MkC
-7pca1FwT82eZK1N3XKKpZe7Flu1fMKt2o/XSiBkDjWwUcChVnwGsUBe8hJFwFqg7
-olNJn1kaVBJUqZIiXF9kS0d+1H55rStOd0CNXAzp9utr2A==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 -----END CERTIFICATE-----
diff --git a/connector/saml/testdata/oam-resp.xml b/connector/saml/testdata/oam-resp.xml
index 99d148770c..870b3c9f25 100644
--- a/connector/saml/testdata/oam-resp.xml
+++ b/connector/saml/testdata/oam-resp.xml
@@ -1 +1 @@
-<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xmlns:enc="http://www.w3.org/2001/04/xmlenc#" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:x500="urn:oasis:names:tc:SAML:2.0:profiles:attribute:X500" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" Destination="http://127.0.0.1:5556/callback" ID="id-IWlPTptSB-PlR80dwt8ZhVeG70mrz7nPvTVrhduK" InResponseTo="_e66b3a98-831c-4c96-5706-b63fe0549624" IssueInstant="2016-12-12T16:54:35Z" Version="2.0"><saml:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">https://deaoam-dev02.jpl.nasa.gov:14101/oam/fed</saml:Issuer><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml:Assertion ID="id-rT9rTqxdQC9j34YhVeNayUWC9EbIBgym6gp-MZt-" IssueInstant="2016-12-12T16:54:35Z" Version="2.0"><saml:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">https://deaoam-dev02.jpl.nasa.gov:14101/oam/fed</saml:Issuer><dsig:Signature><dsig:SignedInfo><dsig:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><dsig:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><dsig:Reference URI="#id-rT9rTqxdQC9j34YhVeNayUWC9EbIBgym6gp-MZt-"><dsig:Transforms><dsig:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><dsig:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></dsig:Transforms><dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><dsig:DigestValue>z1HD/59hv6UOd5+jeG+ihaFWLgI=</dsig:DigestValue></dsig:Reference></dsig:SignedInfo><dsig:SignatureValue>I99oG5kiOfIgbXYa21z/TOmzftTkFnXe9ObhBNSKit9kAhT93apYROqqXv4Ax96P144Ld7ERX1hgJsytK8LC2874Pk7QrSNm4zvW3x0D4GR4lM06CvJK/EhIur3TrCUJDPigvyP7TJitheCyBejwt0x0lqNP/OzR3tMbAIMRoho=</dsig:SignatureValue></dsig:Signature><saml:Subject><saml:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" NameQualifier="https://deaoam-dev02.jpl.nasa.gov:14101/oam/fed" SPNameQualifier="JSAuth">pkieu</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml:SubjectConfirmationData InResponseTo="_e66b3a98-831c-4c96-5706-b63fe0549624" NotOnOrAfter="2016-12-12T16:59:35Z" Recipient="http://127.0.0.1:5556/callback"/></saml:SubjectConfirmation></saml:Subject><saml:Conditions NotBefore="2016-12-12T16:54:35Z" NotOnOrAfter="2016-12-12T16:59:35Z"><saml:AudienceRestriction><saml:Audience>JSAuth</saml:Audience></saml:AudienceRestriction></saml:Conditions><saml:AuthnStatement AuthnInstant="2016-12-12T16:54:10Z" SessionIndex="id-l3NCbxKoBfUZcuKhlotMuIF3ydgYJgGGG6BGTTU6" SessionNotOnOrAfter="2016-12-12T17:54:35Z"><saml:AuthnContext><saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef></saml:AuthnContext></saml:AuthnStatement></saml:Assertion></samlp:Response>
+<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xmlns:enc="http://www.w3.org/2001/04/xmlenc#" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:x500="urn:oasis:names:tc:SAML:2.0:profiles:attribute:X500" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" Destination="http://127.0.0.1:5556/callback" ID="id-root-unsigned-oam-fixture" InResponseTo="_e66b3a98-831c-4c96-5706-b63fe0549624" IssueInstant="2026-07-02T00:00:00Z" Version="2.0"><saml:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">https://dex.example.com/oam/fed</saml:Issuer><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml:Assertion ID="id-signed-assertion-oam-fixture" IssueInstant="2026-07-02T00:00:00Z" Version="2.0"><saml:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">https://dex.example.com/oam/fed</saml:Issuer><saml:Subject><saml:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent">dex-oam-fixture-user</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml:SubjectConfirmationData InResponseTo="_e66b3a98-831c-4c96-5706-b63fe0549624" NotOnOrAfter="2125-07-02T00:00:00Z" Recipient="http://127.0.0.1:5556/callback"/></saml:SubjectConfirmation></saml:Subject><saml:Conditions NotBefore="2026-07-02T00:00:00Z" NotOnOrAfter="2125-07-02T00:00:00Z"><saml:AudienceRestriction><saml:Audience>http://127.0.0.1:5556/callback</saml:Audience></saml:AudienceRestriction></saml:Conditions><saml:AttributeStatement><saml:Attribute Name="email"><saml:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">dex-oam-fixture@example.com</saml:AttributeValue></saml:Attribute></saml:AttributeStatement><dsig:Signature xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><dsig:SignedInfo><dsig:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><dsig:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><dsig:Reference URI="#id-signed-assertion-oam-fixture"><dsig:Transforms><dsig:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><dsig:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></dsig:Transforms><dsig:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><dsig:DigestValue>Ni0lhZEaolfxURixgYJCa6+h4RwEvIrpA2/WvVtNMOM=</dsig:DigestValue></dsig:Reference></dsig:SignedInfo><dsig:SignatureValue>QTWGSorT5sQlOxK1Ez1ex3Us22IPC4azEXiI0EuxG0lbMzy+einBPHEFpTsjTguIEuhx5odwInNURSBty8j6BxY4V02qzFOr/yrFu1ULavX8drojYaU0cNQpJgUnYgrTb+5iI4WzVBxn+yM24RE79gLqEG6spQ7S6+kvDSVBgSUnSnVTKChiqGJ0Jm2FJQSwiyf9MMgFFbFvSK9Mqw6D3gpa45uAv8K6GJhE9l12UhrtP+craDCOBiLVcGDFcR0f+TY9MFh9gGm2o3CmiNl39MHGH9EY4RWjLAmieDUR5bdYi97L87xGx0jhrO4shYEb2BwFbOQFsQbzuJPlU6KKTA==</dsig:SignatureValue><dsig:KeyInfo><dsig:X509Data><dsig:X509Certificate>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</dsig:X509Certificate></dsig:X509Data></dsig:KeyInfo></dsig:Signature></saml:Assertion></samlp:Response>