|
| 1 | +import os |
| 2 | +import unittest |
| 3 | +import xmlsec |
| 4 | +from xmlsec.Signer import Signer |
| 5 | +import pkg_resources |
| 6 | +from xmlsec.test.case import load_test_data |
| 7 | +from xmlsec import constants, utils |
| 8 | +from . import find_alts, run_cmd |
| 9 | +import tempfile |
| 10 | + |
| 11 | +XMLSEC1 = find_alts(['/usr/local/bin/xmlsec1', '/usr/bin/xmlsec1']) |
| 12 | + |
| 13 | +class TestSignVerifyXmlSec1(unittest.TestCase): |
| 14 | + def setUp(self): |
| 15 | + self.datadir = pkg_resources.resource_filename(__name__, 'data') |
| 16 | + self.private_keyspec = os.path.join(self.datadir, 'test.key') |
| 17 | + self.public_keyspec = os.path.join(self.datadir, 'test.pem') |
| 18 | + self.cases = load_test_data('data/verifyxmlsec1') |
| 19 | + self.tmpf = tempfile.NamedTemporaryFile(delete=False) |
| 20 | + |
| 21 | + @unittest.skipIf(XMLSEC1 is None, "xmlsec1 binary not installed") |
| 22 | + def test_sign_verify_all(self): |
| 23 | + """ |
| 24 | + Run through all testcases, sign and verify using xmlsec1 |
| 25 | + """ |
| 26 | + signer = Signer(key_spec=self.private_keyspec, cert_spec=self.public_keyspec) |
| 27 | + for case in self.cases.values(): |
| 28 | + if case.has_data('in.xml'): |
| 29 | + signed = signer.sign(case.as_etree('in.xml')) |
| 30 | + res = xmlsec.verify(signed, self.public_keyspec) |
| 31 | + self.assertTrue(res) |
| 32 | + with open(self.tmpf.name, "w") as fd: |
| 33 | + xml_str = utils.etree_to_string(signed) |
| 34 | + fd.write(xml_str) |
| 35 | + |
| 36 | + run_cmd([XMLSEC1, |
| 37 | + '--verify', |
| 38 | + '--store-references', |
| 39 | + '--id-attr:ID', 'urn:oasis:names:tc:SAML:2.0:metadata:EntityDescriptor', |
| 40 | + '--id-attr:ID', 'urn:oasis:names:tc:SAML:2.0:metadata:EntitiesDescriptor', |
| 41 | + '--id-attr:ID', 'urn:oasis:names:tc:SAML:2.0:assertion:Assertion', |
| 42 | + '--verification-time', '2009-11-01 12:00:00', |
| 43 | + '--trusted-pem', self.public_keyspec, |
| 44 | + self.tmpf.name]) |
| 45 | + |
| 46 | + def tearDown(self): |
| 47 | + if os.path.exists(self.tmpf.name): |
| 48 | + pass |
| 49 | + # os.unlink(self.tmpf.name) |
| 50 | + |
| 51 | +def main(): |
| 52 | + unittest.main() |
| 53 | + |
| 54 | + |
| 55 | +if __name__ == '__main__': |
| 56 | + main() |
0 commit comments