Skip to content

test(connector/saml): backport upstream fix for expired OAM test cert #8

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Optic00 wants to merge 1 commit into
base: master
Choose a base branch
from
Open

test(connector/saml): backport upstream fix for expired OAM test cert #8

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
28 changes: 17 additions & 11 deletions connector/saml/testdata/oam-ca.pem
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,13 +1,19 @@
-----BEGIN CERTIFICATE-----
MIIB/jCCAWegAwIBAgIBCjANBgkqhkiG9w0BAQQFADAkMSIwIAYDVQQDExlkZWFv
YW0tZGV2MDIuanBsLm5hc2EuZ292MB4XDTE2MDYzMDA0NTQxNloXDTI2MDYyODA0
NTQxNlowJDEiMCAGA1UEAxMZZGVhb2FtLWRldjAyLmpwbC5uYXNhLmdvdjCBnzAN
BgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAht1N4lGdwUbl7YRyHwSCrnep6/e2I3+V
eue0pSA/DGn8OuR/udM8UCja5utqlqJdq200ox4b4Mpz0Jg9kMckALtKe+1DgeES
EIx9FpeuBdHlitYQNSbEr30HIG2nmeTOy4Vi5unBO54um3tNazcUTMA0/LJ6KQL8
LeZSlB/IxwUCAwEAAaNAMD4wDAYDVR0TAQH/BAIwADAPBgNVHQ8BAf8EBQMDB9gA
MB0GA1UdDgQWBBRYo1YjfrNonauLzj6/AsueWFGSszANBgkqhkiG9w0BAQQFAAOB
gQACq7GHK/Zsg0+qC0WWa2ZjmOXE6Dqk/xuooG49QT7ihABs7k9U27Fw3xKF6MkC
7pca1FwT82eZK1N3XKKpZe7Flu1fMKt2o/XSiBkDjWwUcChVnwGsUBe8hJFwFqg7
olNJn1kaVBJUqZIiXF9kS0d+1H55rStOd0CNXAzp9utr2A==
MIIDATCCAemgAwIBAgIBATANBgkqhkiG9w0BAQsFADAyMQwwCgYDVQQKEwNERVgx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-----END CERTIFICATE-----
2 changes: 1 addition & 1 deletion connector/saml/testdata/oam-resp.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1 +1 @@
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xmlns:enc="http://www.w3.org/2001/04/xmlenc#" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:x500="urn:oasis:names:tc:SAML:2.0:profiles:attribute:X500" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" Destination="http://127.0.0.1:5556/callback" ID="id-IWlPTptSB-PlR80dwt8ZhVeG70mrz7nPvTVrhduK" InResponseTo="_e66b3a98-831c-4c96-5706-b63fe0549624" IssueInstant="2016-12-12T16:54:35Z" Version="2.0"><saml:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">https://deaoam-dev02.jpl.nasa.gov:14101/oam/fed</saml:Issuer><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml:Assertion ID="id-rT9rTqxdQC9j34YhVeNayUWC9EbIBgym6gp-MZt-" IssueInstant="2016-12-12T16:54:35Z" Version="2.0"><saml:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">https://deaoam-dev02.jpl.nasa.gov:14101/oam/fed</saml:Issuer><dsig:Signature><dsig:SignedInfo><dsig:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><dsig:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><dsig:Reference URI="#id-rT9rTqxdQC9j34YhVeNayUWC9EbIBgym6gp-MZt-"><dsig:Transforms><dsig:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><dsig:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></dsig:Transforms><dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><dsig:DigestValue>z1HD/59hv6UOd5+jeG+ihaFWLgI=</dsig:DigestValue></dsig:Reference></dsig:SignedInfo><dsig:SignatureValue>I99oG5kiOfIgbXYa21z/TOmzftTkFnXe9ObhBNSKit9kAhT93apYROqqXv4Ax96P144Ld7ERX1hgJsytK8LC2874Pk7QrSNm4zvW3x0D4GR4lM06CvJK/EhIur3TrCUJDPigvyP7TJitheCyBejwt0x0lqNP/OzR3tMbAIMRoho=</dsig:SignatureValue></dsig:Signature><saml:Subject><saml:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" NameQualifier="https://deaoam-dev02.jpl.nasa.gov:14101/oam/fed" SPNameQualifier="JSAuth">pkieu</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml:SubjectConfirmationData InResponseTo="_e66b3a98-831c-4c96-5706-b63fe0549624" NotOnOrAfter="2016-12-12T16:59:35Z" Recipient="http://127.0.0.1:5556/callback"/></saml:SubjectConfirmation></saml:Subject><saml:Conditions NotBefore="2016-12-12T16:54:35Z" NotOnOrAfter="2016-12-12T16:59:35Z"><saml:AudienceRestriction><saml:Audience>JSAuth</saml:Audience></saml:AudienceRestriction></saml:Conditions><saml:AuthnStatement AuthnInstant="2016-12-12T16:54:10Z" SessionIndex="id-l3NCbxKoBfUZcuKhlotMuIF3ydgYJgGGG6BGTTU6" SessionNotOnOrAfter="2016-12-12T17:54:35Z"><saml:AuthnContext><saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef></saml:AuthnContext></saml:AuthnStatement></saml:Assertion></samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xmlns:enc="http://www.w3.org/2001/04/xmlenc#" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:x500="urn:oasis:names:tc:SAML:2.0:profiles:attribute:X500" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" Destination="http://127.0.0.1:5556/callback" ID="id-root-unsigned-oam-fixture" InResponseTo="_e66b3a98-831c-4c96-5706-b63fe0549624" IssueInstant="2026-07-02T00:00:00Z" Version="2.0"><saml:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">https://dex.example.com/oam/fed</saml:Issuer><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml:Assertion ID="id-signed-assertion-oam-fixture" IssueInstant="2026-07-02T00:00:00Z" Version="2.0"><saml:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">https://dex.example.com/oam/fed</saml:Issuer><saml:Subject><saml:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent">dex-oam-fixture-user</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml:SubjectConfirmationData InResponseTo="_e66b3a98-831c-4c96-5706-b63fe0549624" NotOnOrAfter="2125-07-02T00:00:00Z" Recipient="http://127.0.0.1:5556/callback"/></saml:SubjectConfirmation></saml:Subject><saml:Conditions NotBefore="2026-07-02T00:00:00Z" NotOnOrAfter="2125-07-02T00:00:00Z"><saml:AudienceRestriction><saml:Audience>http://127.0.0.1:5556/callback</saml:Audience></saml:AudienceRestriction></saml:Conditions><saml:AttributeStatement><saml:Attribute Name="email"><saml:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">dex-oam-fixture@example.com</saml:AttributeValue></saml:Attribute></saml:AttributeStatement><dsig:Signature xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><dsig:SignedInfo><dsig:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><dsig:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><dsig:Reference URI="#id-signed-assertion-oam-fixture"><dsig:Transforms><dsig:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><dsig:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></dsig:Transforms><dsig:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><dsig:DigestValue>Ni0lhZEaolfxURixgYJCa6+h4RwEvIrpA2/WvVtNMOM=</dsig:DigestValue></dsig:Reference></dsig:SignedInfo><dsig:SignatureValue>QTWGSorT5sQlOxK1Ez1ex3Us22IPC4azEXiI0EuxG0lbMzy+einBPHEFpTsjTguIEuhx5odwInNURSBty8j6BxY4V02qzFOr/yrFu1ULavX8drojYaU0cNQpJgUnYgrTb+5iI4WzVBxn+yM24RE79gLqEG6spQ7S6+kvDSVBgSUnSnVTKChiqGJ0Jm2FJQSwiyf9MMgFFbFvSK9Mqw6D3gpa45uAv8K6GJhE9l12UhrtP+craDCOBiLVcGDFcR0f+TY9MFh9gGm2o3CmiNl39MHGH9EY4RWjLAmieDUR5bdYi97L87xGx0jhrO4shYEb2BwFbOQFsQbzuJPlU6KKTA==</dsig:SignatureValue><dsig:KeyInfo><dsig:X509Data><dsig:X509Certificate>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</dsig:X509Certificate></dsig:X509Data></dsig:KeyInfo></dsig:Signature></saml:Assertion></samlp:Response>