Modified: webservices/rampart/scratch/c/saml/src/response.c URL: http://svn.apache.org/viewvc/webservices/rampart/scratch/c/saml/src/response.c?rev=592251&r1=592250&r2=592251&view=diff ============================================================================== --- webservices/rampart/scratch/c/saml/src/response.c (original) +++ webservices/rampart/scratch/c/saml/src/response.c Mon Nov 5 19:44:45 2007 @@ -215,6 +215,8 @@ response->sig_ctx = NULL; response->status = saml_status_create(env); response->saml_assertions = axutil_array_list_create(env, SAML_ARRAY_LIST_DEF); + response->signature = NULL; + response->original_xml = NULL; } return response; } @@ -267,6 +269,8 @@ } axutil_array_list_free(response->saml_assertions, env); } + response->original_xml = NULL; + response->signature = NULL; AXIS2_FREE(env->allocator, response); response = NULL; } @@ -306,7 +310,7 @@ axiom_attribute_t *attr = (axiom_attribute_t*)v; attr_val = axiom_attribute_get_value(attr, env); - if(!axutil_strcmp(axiom_attribute_get_localname(attr, env), SAML_RESPONCE_ID)) + if(!axutil_strcmp(axiom_attribute_get_localname(attr, env), SAML_RESPONSE_ID)) { response->response_id= attr_val; } @@ -400,7 +404,7 @@ { if(!response->response_id) response->response_id = saml_id_generate_random_bytes(env); - attr = axiom_attribute_create(env, SAML_RESPONCE_ID, response->response_id, NULL); + attr = axiom_attribute_create(env, SAML_RESPONSE_ID, response->response_id, NULL); axiom_element_add_attribute(e, env, attr, n); attr = axiom_attribute_create(env, SAML_MAJORVERSION, SAML_MAJOR_VERSION, NULL); @@ -416,6 +420,7 @@ { return NULL; } + t = axiom_node_to_string(n, env); if(response->request_response_id && response->recepient) { attr = axiom_attribute_create(env, SAML_IN_RESPONSE_TO, response->request_response_id, NULL); @@ -424,16 +429,22 @@ axiom_element_add_attribute(e, env, attr, n); } + t = axiom_node_to_string(n, env); + if(response->saml_assertions) { size = axutil_array_list_size(response->saml_assertions, env); for(i = 0 ; i < size ; i++) { - saml_assertion_to_om((saml_assertion_t*)axutil_array_list_get(response->saml_assertions, env, i), n, env); + assertion = (saml_assertion_t*)axutil_array_list_get(response->saml_assertions, env, i); + if(assertion) + saml_assertion_to_om(assertion, n, env); } } + t = axiom_node_to_string(n, env); + if(response->status) { saml_status_to_om(response->status, n, env); @@ -441,7 +452,7 @@ t = axiom_node_to_string(n, env); if(response->sig_ctx) { - saml_response_sign(response, &n, env); + saml_response_sign(response, n, env); } t = axiom_node_to_string(n, env); } @@ -614,7 +625,7 @@ response->sig_ctx = NULL; return AXIS2_SUCCESS; } -AXIS2_EXTERN int AXIS2_CALL saml_response_sign(saml_response_t *response, axiom_node_t **node, axutil_env_t *env) +AXIS2_EXTERN int AXIS2_CALL saml_response_sign(saml_response_t *response, axiom_node_t *node, axutil_env_t *env) { axiom_node_t *n= NULL, *sig_node = NULL; axis2_char_t *id = NULL; @@ -631,30 +642,27 @@ sig_part = axutil_array_list_get(sig_parts, env, i); if(sig_part) { - oxs_sign_part_set_node(sig_part, env, *node); + oxs_sign_part_set_node(sig_part, env, node); } } } + id = axiom_node_to_string(node, env); + oxs_xml_sig_sign(env, response->sig_ctx, node, &n); + id = axiom_node_to_string(node, env); + id = axiom_node_to_string(n, env); - oxs_xml_sig_sign(env, response->sig_ctx, *node, &n); /*Finally build KeyInfo*/ oxs_xml_key_info_build(env, n, oxs_sign_ctx_get_certificate(response->sig_ctx, env), OXS_KIBP_X509DATA_X509CERTIFICATE); return AXIS2_SUCCESS; } AXIS2_EXTERN void AXIS2_CALL saml_response_set_default_signature(saml_response_t *response, axutil_env_t *env, oxs_sign_ctx_t *sig_ctx) { - oxs_sign_part_t* sig_part = NULL; - oxs_transform_t *tr = NULL; - axutil_array_list_t *sig_parts = NULL, *trans = NULL; - axiom_attribute_t* att = NULL; - axiom_element_t *test = NULL; - if(response->sig_ctx) { oxs_sign_ctx_free(response->sig_ctx, env); } response->sig_ctx = sig_ctx; - saml_util_set_sig_ctx_defaults(response->sig_ctx, env); + saml_util_set_sig_ctx_defaults(response->sig_ctx, env, SAML_RESPONSE_ID); } AXIS2_EXTERN int AXIS2_CALL saml_status_set_status_code(saml_status_t *status, axis2_char_t *code, axutil_env_t *env) { @@ -666,29 +674,29 @@ return AXIS2_SUCCESS; } -AXIS2_EXTERN int AXIS2_CALL -saml_response_signature_verify(saml_response_t *response, axutil_env_t *env) -{ - return oxs_xml_sig_verify(env, response->sig_ctx, response->signature, response->original_xml); -} - -AXIS2_EXTERN int AXIS2_CALL -saml_response_is_sign_set(saml_response_t *response, axutil_env_t *env) -{ - if (response->sig_ctx) - { - return AXIS2_TRUE; - } - return AXIS2_FALSE; -} - -AXIS2_EXTERN int AXIS2_CALL -saml_response_is_signed(saml_response_t *response, axutil_env_t *env) -{ - if (response->signature) - { - return AXIS2_TRUE; - } - return AXIS2_FALSE; -} +AXIS2_EXTERN int AXIS2_CALL +saml_response_signature_verify(saml_response_t *response, axutil_env_t *env) +{ + return oxs_xml_sig_verify(env, response->sig_ctx, response->signature, response->original_xml); +} + +AXIS2_EXTERN int AXIS2_CALL +saml_response_is_sign_set(saml_response_t *response, axutil_env_t *env) +{ + if (response->sig_ctx) + { + return AXIS2_TRUE; + } + return AXIS2_FALSE; +} + +AXIS2_EXTERN int AXIS2_CALL +saml_response_is_signed(saml_response_t *response, axutil_env_t *env) +{ + if (response->signature) + { + return AXIS2_TRUE; + } + return AXIS2_FALSE; +}
Added: webservices/rampart/scratch/c/saml/test/assertion.c URL: http://svn.apache.org/viewvc/webservices/rampart/scratch/c/saml/test/assertion.c?rev=592251&view=auto ============================================================================== --- webservices/rampart/scratch/c/saml/test/assertion.c (added) +++ webservices/rampart/scratch/c/saml/test/assertion.c Mon Nov 5 19:44:45 2007 @@ -0,0 +1,256 @@ +#include <SAML.h> +#include <axutil_env.h> +#include "saml_test.h" +#include "saml_test.h" +#include"saml_test_pr.h" + +int main() +{ + axiom_element_t *e = NULL; + axiom_node_t *n = NULL, *assertion_node = NULL; + axis2_char_t *a_text = NULL, *b_text = NULL; + saml_assertion_t *assertion = NULL; + axutil_env_t *env = NULL; + axutil_date_time_t *time = NULL; + axiom_xml_reader_t *reader = NULL; + axiom_stax_builder_t *builder = NULL; + axiom_document_t *document = NULL; + axiom_xml_writer_t *writer = NULL; + saml_request_t *req = NULL; + saml_response_t *res = NULL; + axiom_node_t *req_node1 = NULL,*req_node2 = NULL, *res_node1 = NULL, *res_node2 = NULL; + axis2_char_t *res_text = NULL, *req_text = NULL; + FILE *fp = NULL; + + env = axutil_env_create_all("SAML_TEST.log", AXIS2_LOG_LEVEL_DEBUG); + + /* assertions */ + assertion = saml_test_assertion(env); + axiom_element_create(env, NULL, "TEST_ASSERTION", NULL, &n); + saml_assertion_to_om(assertion, n, env); + a_text = axiom_node_to_string(n, env); + saml_assertion_free(assertion, env); + + /* from file */ + /*reader = axiom_xml_reader_create_for_file(env, "test.xml", NULL); + builder = axiom_stax_builder_create(env, reader); + document = axiom_stax_builder_get_document(builder, env);*/ + /*assertion_node = axiom_document_build_all(document, env); + assertion = saml_assertion_create(env); + a_text = axiom_node_to_string(assertion_node, env); + saml_assertion_build(assertion, assertion_node, env); + assertion_node = saml_assertion_to_om(assertion, NULL, env); + b_text = axiom_node_to_string(assertion_node, env);*/ + + + + // saml request response test + /*req = saml_request_test(env); + res = saml_response_test(env);*/ + + res = saml_response_test_with_sign(env); + req = saml_request_test_with_sign(env); + + req_node1 = saml_request_to_om(req, NULL, env); + res_node1 = saml_response_to_om(res, NULL, env); + + req_text = axiom_node_to_string(req_node1, env); + res_text = axiom_node_to_string(res_node1, env); + + printf("%s \n",req_text); + + fp = fopen("request.xml", "w"); + fprintf(fp,"%s", req_text); + fclose(fp); + + fp = fopen("response.xml", "w"); + fprintf(fp,"%s", res_text); + fclose(fp); + + AXIS2_FREE(env->allocator, req_text); + AXIS2_FREE(env->allocator, res_text); + + saml_request_free(req, env); + saml_response_free(res, env); + //axiom_node_free_tree(req_node1, env); + //axiom_node_free_tree(res_node, env); + + reader = axiom_xml_reader_create_for_file(env, "request.xml", NULL); + builder = axiom_stax_builder_create(env, reader); + document = axiom_stax_builder_get_document(builder, env); + req_node2 = axiom_document_build_all(document, env); + + reader = axiom_xml_reader_create_for_file(env, "response.xml", NULL); + builder = axiom_stax_builder_create(env, reader); + document = axiom_stax_builder_get_document(builder, env); + res_node2 = axiom_document_build_all(document, env); + + req = saml_request_create(env); + res = saml_response_create(env); + + + saml_request_set_default_signature(req, env, saml_load_default_sign(env, "key.pem","cert.pem","")); + saml_response_set_default_signature(res, env, saml_load_default_sign(env, "key.pem","cert.pem","")); + + if(!req_node2) + saml_request_build(req, req_node1, env); + else + saml_request_build(req, req_node2, env); + + if(!res_node2) + saml_response_build(res, res_node1, env); + else + saml_response_build(res, res_node2, env); + + if(saml_request_is_signed(req, env)) + if(saml_request_signature_verify(req, env) == AXIS2_SUCCESS) + printf("verifying success\n"); + + + + return 0; +} + +saml_assertion_t * AXIS2_CALL saml_test_assertion(axutil_env_t *env) +{ + axutil_date_time_t *time = NULL; + saml_assertion_t *assertion = NULL; + time = axutil_date_time_create(env); + assertion = saml_assertion_create(env); + if (assertion) + { + saml_assertion_set_minor_version(assertion, env, 1); + saml_assertion_set_issue_instant(assertion, env, time); + saml_assertion_set_issuer(assertion, env, "http://ws.apache.org/rampart/c";); + saml_assertion_add_condition(assertion, env, saml_test_condition(env)); + saml_assertion_set_not_before(assertion, env, axutil_date_time_create(env)); + saml_assertion_add_statement(assertion, env, saml_test_auth_statement(env)); + saml_assertion_add_statement(assertion, env, saml_test_attr_statement(env)); + saml_assertion_add_statement(assertion, env, saml_test_auth_des_statement(env)); + } + return assertion; +} + +saml_condition_t * AXIS2_CALL saml_test_condition(axutil_env_t *env) +{ + saml_audi_restriction_cond_t *arc = NULL; + axis2_char_t *audience = NULL, *c_to_om = NULL; + axis2_char_t *cond_text = NULL; + axiom_element_t *e = NULL; + axiom_node_t *n = NULL; + saml_condition_t *condition = AXIS2_MALLOC(env->allocator, sizeof(saml_condition_t)); + arc = saml_audi_restriction_cond_create(env); + saml_audi_restriction_cond_add_audience(arc, env, "www.samle.com"); + + axiom_element_create(env, NULL, "TEST_COND", NULL, &n); + /*saml_condition_to_om(condition, n, env); + cond_text = axiom_node_to_string(n, env);*/ + return condition; +} + +saml_stmt_t * AXIS2_CALL saml_test_auth_statement(axutil_env_t *env) +{ + saml_auth_stmt_t *a_stmt = NULL; + saml_stmt_t *stmt = saml_stmt_create(env); + a_stmt = saml_auth_stmt_create(env); + saml_stmt_set_stmt(stmt, env, a_stmt, SAML_STMT_AUTHENTICATIONSTATEMENT); + + saml_auth_stmt_set_auth_method(a_stmt, env, SAML_AUTH_METHOD_URI_PASSWORD); + saml_auth_stmt_set_auth_instant(a_stmt, env, axutil_date_time_create(env)); + + saml_auth_stmt_set_subject(a_stmt, env, saml_test_subject(env)); + saml_auth_stmt_set_subject_dns(a_stmt, env, "192.148.5.8"); + saml_auth_stmt_set_subject_ip(a_stmt, env, "128.5.6.4"); + saml_auth_stmt_add_auth_binding(a_stmt, env, saml_test_autherity_binding(env)); + return stmt; +} + +saml_stmt_t * AXIS2_CALL saml_test_auth_des_statement(axutil_env_t *env) +{ + saml_auth_desicion_stmt_t *d_stmt = NULL; + saml_stmt_t *stmt = NULL; + d_stmt = saml_auth_desicion_stmt_create(env); + stmt = saml_stmt_create(env); + saml_stmt_set_stmt(stmt, env, d_stmt, SAML_STMT_AUTHORIZATIONDECISIONSTATEMENT); + + saml_auth_desicion_stmt_set_subject(d_stmt, env, saml_test_subject(env)); + saml_auth_desicion_stmt_set_resource(d_stmt, env, "http://cse.mrt.ac.lk/cs420/gruop7";); + saml_auth_desicion_stmt_set_desicion(d_stmt, env, "Permit"); + saml_auth_desicion_stmt_add_action(d_stmt, env, saml_test_action(env, SAML_ACTION_READ)); + saml_auth_desicion_stmt_add_action(d_stmt, env, saml_test_action(env, SAML_ACTION_WRITE)); + return stmt; +} + +saml_action_t * AXIS2_CALL saml_test_action(axutil_env_t *env, axis2_char_t *act) +{ + saml_action_t *action = NULL; + action = saml_action_create(env); + saml_action_set_namespace(action, env, SAML_ACTION_URI_RWEDC); + saml_action_set_data(action, env, act); + return action; +} + + +saml_auth_binding_t * AXIS2_CALL saml_test_autherity_binding(axutil_env_t *env) +{ + saml_auth_binding_t *bind = NULL; + bind = saml_auth_binding_create(env); + saml_auth_binding_set_authority_kind(bind, env, "abc:aa:aa"); + saml_auth_binding_set_binding(bind, env, "SOAP"); + saml_auth_binding_set_location(bind, env, "http://myhome.com/sevices/echo";); + return bind; +} + + +saml_subject_t * AXIS2_CALL saml_test_subject(axutil_env_t *env) +{ + saml_subject_t *subject = NULL; + saml_named_id_t *id = NULL; + subject = saml_subject_create(env); + + id = saml_named_id_create(env); + saml_named_id_set_name(id, env, "Computer Science Engineering Department"); + saml_named_id_set_format(id, env, SAML_EMAIL_ADDRESS); + saml_named_id_set_name_qualifier(id, env, "University of Moratuwa"); + saml_subject_set_named_id(subject, env, id); + + saml_subject_add_confirmation(subject, env, SAML_SUB_CONFIRMATION_ARTIFACT); + saml_subject_add_confirmation(subject, env, SAML_SUB_CONFIRMATION_BEARER); + return subject; +} + +saml_stmt_t * AXIS2_CALL saml_test_attr_statement(axutil_env_t *env) +{ + axiom_node_t *n = NULL; + axiom_element_t *e = NULL; + axis2_char_t *text = NULL; + saml_attr_stmt_t *attr_stmt = NULL; + saml_stmt_t *stmt = saml_stmt_create(env); + attr_stmt = saml_attr_stmt_create(env); + + /* set the specific statement to the saml_stmt_t */ + saml_stmt_set_stmt(stmt, env, attr_stmt, SAML_STMT_ATTRIBUTESTATEMENT); + + /*Now set the properties of the attr_stmt */ + saml_attr_stmt_set_subject(attr_stmt, env, saml_test_subject(env)); + + saml_attr_stmt_add_attribute(attr_stmt, env, saml_test_attribute(env)); + return stmt; +} + +saml_attr_t *AXIS2_CALL saml_test_attribute(axutil_env_t *env) +{ + saml_attr_t *attr = NULL; + axiom_namespace_t *ns = NULL; + axiom_node_t *n = NULL; + axiom_element_t *e = NULL; + attr = saml_attr_create(env); + ns = axiom_namespace_create(env, "http://cse.mrt.ac.lk";, "mora"); + e = axiom_element_create(env, NULL, "CS420", ns, &n); + saml_attr_add_value(attr, env, n); + + saml_attr_set_name(attr, env, "Projects"); + saml_attr_set_namespace(attr, env, "mora:http://cse.mrt.ac.lk";); + return attr; +} + Added: webservices/rampart/scratch/c/saml/test/cert.pem URL: http://svn.apache.org/viewvc/webservices/rampart/scratch/c/saml/test/cert.pem?rev=592251&view=auto ============================================================================== --- webservices/rampart/scratch/c/saml/test/cert.pem (added) +++ webservices/rampart/scratch/c/saml/test/cert.pem Mon Nov 5 19:44:45 2007 @@ -0,0 +1,62 @@ +Certificate: + Data: + Version: 3 (0x2) + Serial Number: + dc:83:fa:3c:1e:93:11:ae + Signature Algorithm: sha1WithRSAEncryption + Issuer: C=SL, ST=WP, O=WS, OU=C, CN=Kaushalye/[EMAIL PROTECTED] + Validity + Not Before: Dec 6 10:27:18 2006 GMT + Not After : Dec 6 10:27:18 2007 GMT + Subject: C=SL, ST=WP, L=Katubedda, O=WS, OU=C, CN=Aaa/[EMAIL PROTECTED] + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + RSA Public Key: (1024 bit) + Modulus (1024 bit): + 00:c7:e1:d8:5c:ef:16:dd:5d:05:95:c8:16:7c:2f: + f5:13:15:b4:7a:0c:c8:fb:95:c8:03:db:3d:a8:41: + 5d:70:75:ce:27:15:e2:a3:ef:87:24:38:5a:ee:72: + ea:70:c2:45:44:b5:dd:46:ca:51:60:15:ac:51:c3: + 59:af:a8:17:85:af:cd:77:74:87:b2:4b:ab:13:e0: + 00:82:2f:2a:d0:6b:12:7d:09:dc:52:dc:16:10:58: + 46:38:74:c7:cf:98:96:e3:58:ce:8a:c8:31:fa:77: + 6c:69:65:dc:a1:4c:38:e7:b0:9e:dc:64:06:ae:aa: + 13:90:23:62:84:14:c0:9e:31 + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Basic Constraints: + CA:FALSE + Netscape Comment: + OpenSSL Generated Certificate + X509v3 Subject Key Identifier: + 67:B7:BC:8C:22:29:1E:17:58:C6:43:91:A6:FB:82:E7:11:77:62:D6 + X509v3 Authority Key Identifier: + keyid:D7:27:10:74:4B:F8:2F:44:0B:BC:C7:9E:04:EF:22:5B:15:18:21:CC + + Signature Algorithm: sha1WithRSAEncryption + 4d:36:00:f0:51:10:44:72:73:5f:09:e4:fe:ad:f4:5b:a0:48: + 5f:50:50:d7:bb:bb:2a:98:b3:b7:d7:54:9e:57:6d:d2:cd:de: + d5:d5:30:4d:c7:03:09:b4:7d:d8:72:17:f7:c6:e8:72:69:89: + b9:bc:91:5a:a8:c8:9e:ee:76:0b:c2:ae:c2:65:59:94:5b:fe: + a2:30:bf:aa:49:25:b1:42:bc:6d:c4:0a:99:aa:2d:17:14:d8: + 8d:19:cd:75:22:84:51:22:55:4e:e1:9e:50:1f:c6:c2:57:e1: + 4b:58:87:d5:73:c1:69:fd:25:dd:3d:50:ee:0e:9f:6a:9a:13: + 52:45 +-----BEGIN CERTIFICATE----- +MIICzjCCAjegAwIBAgIJANyD+jwekxGuMA0GCSqGSIb3DQEBBQUAMGUxCzAJBgNV +BAYTAlNMMQswCQYDVQQIEwJXUDELMAkGA1UEChMCV1MxCjAIBgNVBAsTAUMxEjAQ +BgNVBAMTCUthdXNoYWx5ZTEcMBoGCSqGSIb3DQEJARYNa2F1c0B3c28yLmNvbTAe +Fw0wNjEyMDYxMDI3MThaFw0wNzEyMDYxMDI3MThaMHAxCzAJBgNVBAYTAlNMMQsw +CQYDVQQIEwJXUDESMBAGA1UEBxMJS2F0dWJlZGRhMQswCQYDVQQKEwJXUzEKMAgG +A1UECxMBQzEMMAoGA1UEAxMDQWFhMRkwFwYJKoZIhvcNAQkBFgphYWFAd3MuY29t +MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDH4dhc7xbdXQWVyBZ8L/UTFbR6 +DMj7lcgD2z2oQV1wdc4nFeKj74ckOFrucupwwkVEtd1GylFgFaxRw1mvqBeFr813 +dIeyS6sT4ACCLyrQaxJ9CdxS3BYQWEY4dMfPmJbjWM6KyDH6d2xpZdyhTDjnsJ7c +ZAauqhOQI2KEFMCeMQIDAQABo3sweTAJBgNVHRMEAjAAMCwGCWCGSAGG+EIBDQQf +Fh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQUZ7e8jCIp +HhdYxkORpvuC5xF3YtYwHwYDVR0jBBgwFoAU1ycQdEv4L0QLvMeeBO8iWxUYIcww +DQYJKoZIhvcNAQEFBQADgYEATTYA8FEQRHJzXwnk/q30W6BIX1BQ17u7Kpizt9dU +nldt0s3e1dUwTccDCbR92HIX98bocmmJubyRWqjInu52C8KuwmVZlFv+ojC/qkkl +sUK8bcQKmaotFxTYjRnNdSKEUSJVTuGeUB/GwlfhS1iH1XPBaf0l3T1Q7g6fapoT +UkU= +-----END CERTIFICATE----- Added: webservices/rampart/scratch/c/saml/test/key.pem URL: http://svn.apache.org/viewvc/webservices/rampart/scratch/c/saml/test/key.pem?rev=592251&view=auto ============================================================================== --- webservices/rampart/scratch/c/saml/test/key.pem (added) +++ webservices/rampart/scratch/c/saml/test/key.pem Mon Nov 5 19:44:45 2007 @@ -0,0 +1,15 @@ +-----BEGIN RSA PRIVATE KEY----- +MIICWwIBAAKBgQDH4dhc7xbdXQWVyBZ8L/UTFbR6DMj7lcgD2z2oQV1wdc4nFeKj +74ckOFrucupwwkVEtd1GylFgFaxRw1mvqBeFr813dIeyS6sT4ACCLyrQaxJ9CdxS +3BYQWEY4dMfPmJbjWM6KyDH6d2xpZdyhTDjnsJ7cZAauqhOQI2KEFMCeMQIDAQAB +AoGAQIrSvJ+PeIdTCFyFtjAeKL13e3mpZGOnJGek7zG8JFZF7SUJ+/maX726zwhY +X3S7vUYkX3lw8V/ONtCnoyrZ/QQBqvUPUGg2XJI+NDYDrc3RR9YHTBFiYt791iXX +2/hpQJV7Fj2K40AxAgcDmOmsjhMROhc52cERXNUTvqo+sIECQQD+WbS0NQL4kcRZ +kELonmCHNAFA+vYvfB82RCspctNbfoZUAUPn/BMWTf9jZms89mDGfzaWKP5xd9aB +Hi7sTp4JAkEAyS204Q36vnbDh5Dzz5YkJNFTdgyrLTBIQ5r4ax+K1i6V/Mwq07Zw +SCvdDaTiBHOSaVJSHE38iwZZxUsWAs6I6QJADGFlcFgcOukte4aQGy6KWEppvTX6 +Abmy8ztCNpRGQW/ZLgGZwpL8gtttEPONSLxdXYwXpht8tx00LbjAY/Q3sQJAHqEg +2ur/9COs3WUKWd6oHhrotB51qWmidviPPfANeVKab2S+WIF8UuCqxTsHVloqPnLU +IY8WFiyfWlR2Q3MikQJASXg8KPM8C8Jp17iBbF5f09V18iA1fAbQSaLk3Lcbp1/h +0VsiOHjW05LvI8zIHMX2Ops7qAjxixK1T/2ec9qhuQ== +-----END RSA PRIVATE KEY----- Added: webservices/rampart/scratch/c/saml/test/protocol.c URL: http://svn.apache.org/viewvc/webservices/rampart/scratch/c/saml/test/protocol.c?rev=592251&view=auto ============================================================================== --- webservices/rampart/scratch/c/saml/test/protocol.c (added) +++ webservices/rampart/scratch/c/saml/test/protocol.c Mon Nov 5 19:44:45 2007 @@ -0,0 +1,149 @@ +#include<SAML.h> +#include"saml_test.h" +#include"saml_test_pr.h" + +saml_request_t* AXIS2_CALL saml_request_test(axutil_env_t *env) +{ + saml_request_t *request = NULL; + axutil_date_time_t *time = NULL; + axutil_array_list_t *id_ref = NULL; + saml_query_t *q1 = NULL, *q2 = NULL, *q3 = NULL; + axutil_qname_t *qname = NULL; + saml_artifact_t *artifact1 = NULL, *artifact2 = NULL; + + qname = axutil_qname_create_from_string(env,"saml:AuthorizationDecisionQuery"); + request = saml_request_create(env); + time = axutil_date_time_create(env); + artifact1 = saml_artifact_create(env); + artifact2 = saml_artifact_create(env); + + saml_artifact_set_data(artifact1, env, "ID178AE"); + saml_artifact_set_data(artifact2, env, "ID278AB"); + + q1 = saml_query_create(env); + saml_query_set_subject(q1, saml_test_subject(env), env); + saml_query_set_type(q1, SAML_AUTHORIZATION_DECISION_QUERY, env); + saml_query_set_query(q1, saml_autho_decision_query_test(env), SAML_AUTHORIZATION_DECISION_QUERY, env); + + saml_request_set_issue_instant(request, time, env); + saml_request_set_minor_version(request, 1, env); + saml_request_set_query(request, q1, env); + + saml_request_add_artifact(request, artifact1, env); + saml_request_add_id_refs(request, "bc1cbaf00742737c2299f1baa88290eb", env); + saml_request_add_artifact(request, artifact2, env); + saml_request_add_id_refs(request, "bc2cbaf00742737c2299f1baa88290ec", env); + saml_request_add_respond_with(request, qname, env); + return request; + +} +saml_response_t* AXIS2_CALL saml_response_test(axutil_env_t *env) +{ + saml_response_t *res = NULL; + axutil_date_time_t *time = NULL; + time = axutil_date_time_create(env); + res = saml_response_create(env); + saml_response_set_issue_instant(res, time, env); + saml_response_set_minor_version(res, 1, env); + saml_response_set_recepient(res, "www.webex.com", env); + saml_response_set_status(res, saml_status_test(env), env); + saml_response_set_in_reponses_to(res, "d0aac0fb9e6b4ffda4576e7a15e55b5d", env); + saml_response_add_assertion(res, saml_test_assertion(env), env); + saml_response_add_assertion(res, saml_test_assertion(env), env); + saml_response_add_assertion(res, saml_test_assertion(env), env); + + return res; +} +saml_status_t* AXIS2_CALL saml_status_test(axutil_env_t *env) +{ + saml_status_t *st = NULL; + axiom_node_t *n_det = NULL; + axutil_qname_t *qname = NULL; + + qname = axutil_qname_create_from_string(env, "samlp:Success"); + n_det = axiom_node_create(env); + st = saml_status_create(env); + saml_status_set_status_msg(st, "Success", env); + saml_status_set_status_detail(st, n_det, env); + saml_status_set_status_value(st, qname, env); + saml_status_set_status_code(st, "SAML1.567A", env); + return st; +} + +saml_subject_query_t* AXIS2_CALL saml_subject_query_test(axutil_env_t *env) +{ + saml_subject_query_t *subj_q = NULL; + subj_q = saml_subject_query_create(env); + return subj_q; +} + +saml_attr_query_t* AXIS2_CALL saml_attr_query_test(axutil_env_t *env) +{ + saml_attr_query_t *attr_q = NULL; + saml_attr_desig_t *desig = NULL; + + attr_q = saml_attr_query_create(env); + desig = saml_attr_desig_create(env); + saml_attr_desig_set_name(desig, env, ""); + saml_attr_desig_set_namespace(desig, env, ""); + + saml_attr_query_set_resource(attr_q, env, ""); + saml_attr_query_add_designators(attr_q, desig, env); + return attr_q; +} + +saml_authentication_query_t* AXIS2_CALL saml_authentication_query_test(axutil_env_t *env) +{ + saml_authentication_query_t *auth_q = NULL; + auth_q = saml_authentication_query_create(env); + saml_auth_query_set_authentication_method(auth_q, "", env); + return auth_q; +} +saml_autho_decision_query_t* AXIS2_CALL saml_autho_decision_query_test(axutil_env_t *env) +{ + saml_autho_decision_query_t *auth_dec_q = NULL; + saml_evidence_t *evidence = NULL; + saml_assertion_t *assert = NULL; + + auth_dec_q = saml_autho_decision_query_create(env); + evidence = saml_evidence_create(env); + assert = saml_test_assertion(env); + saml_evidence_add_assertion(evidence, env, assert); + saml_evidence_add_assertion_id(evidence, env, assert->assertion_id); + saml_autho_decision_query_add_action(auth_dec_q, saml_test_action(env,"opensciencegrid:authorization"), env); + saml_autho_decision_query_set_evidence(auth_dec_q,evidence, env); + saml_autho_decision_query_set_resource(auth_dec_q, "/DC=org/DC=doegrids/OU=Services/CN=fcdfosg1.fnal.gov", env); + return auth_dec_q; +} + +oxs_sign_ctx_t* AXIS2_CALL saml_load_default_sign(axutil_env_t *env, axis2_char_t *pvk_path, axis2_char_t *cert_path, axis2_char_t *pswd) +{ + oxs_sign_ctx_t *sig_ctx = NULL; + oxs_x509_cert_t *cert = NULL; + openssl_pkey_t *pkey = NULL; + + sig_ctx = oxs_sign_ctx_create(env); + pkey = oxs_key_mgr_load_private_key_from_pem_file(env, pvk_path, pswd); + cert = oxs_key_mgr_load_x509_cert_from_pem_file(env, cert_path); + + oxs_sign_ctx_set_private_key(sig_ctx, env, pkey); + oxs_sign_ctx_set_certificate(sig_ctx, env,cert); + + return sig_ctx; + +} +saml_request_t* AXIS2_CALL saml_request_test_with_sign(axutil_env_t *env) +{ + saml_request_t *req = NULL; + req = saml_request_test(env); + saml_request_set_default_signature(req, env, saml_load_default_sign(env, "key.pem","cert.pem","")); + return req; +} +saml_response_t* AXIS2_CALL saml_response_test_with_sign(axutil_env_t *env) +{ + saml_response_t *res = NULL; + res = saml_response_test(env); + saml_response_set_default_signature(res, env, saml_load_default_sign(env, "key.pem","cert.pem","")); + return res; + +} Added: webservices/rampart/scratch/c/saml/test/saml_test_assertion.h URL: http://svn.apache.org/viewvc/webservices/rampart/scratch/c/saml/test/saml_test_assertion.h?rev=592251&view=auto ============================================================================== --- webservices/rampart/scratch/c/saml/test/saml_test_assertion.h (added) +++ webservices/rampart/scratch/c/saml/test/saml_test_assertion.h Mon Nov 5 19:44:45 2007 @@ -0,0 +1,12 @@ +#include<SAML.h> +#include<saml_req.h> + +saml_assertion_t * AXIS2_CALL saml_test_assertion(axutil_env_t *env); +saml_condition_t * AXIS2_CALL saml_test_condition(axutil_env_t *env); +saml_stmt_t * AXIS2_CALL saml_test_auth_statement(axutil_env_t *env); +saml_stmt_t * AXIS2_CALL saml_test_auth_des_statement(axutil_env_t *env); +saml_action_t * AXIS2_CALL saml_test_action(axutil_env_t *env, axis2_char_t *act); +saml_auth_binding_t * AXIS2_CALL saml_test_autherity_binding(axutil_env_t *env); +saml_subject_t * AXIS2_CALL saml_test_subject(axutil_env_t *env); +saml_stmt_t * AXIS2_CALL saml_test_attr_statement(axutil_env_t *env); +saml_attr_t *AXIS2_CALL saml_test_attribute(axutil_env_t *env); Added: webservices/rampart/scratch/c/saml/test/saml_test_protocol.h URL: http://svn.apache.org/viewvc/webservices/rampart/scratch/c/saml/test/saml_test_protocol.h?rev=592251&view=auto ============================================================================== --- webservices/rampart/scratch/c/saml/test/saml_test_protocol.h (added) +++ webservices/rampart/scratch/c/saml/test/saml_test_protocol.h Mon Nov 5 19:44:45 2007 @@ -0,0 +1,23 @@ +#include"saml_test.h" +#include<saml_req.h> +#include <oxs_xml_signature.h> +#include <oxs_sign_ctx.h> +#include <oxs_xml_key_processor.h> +#include <oxs_utility.h> +#include <oxs_transforms_factory.h> +#include <oxs_xml_key_info_builder.h> +#include <oxs_key_mgr.h> +#include <oxs_transform.h> +#include <oxs_x509_cert.h> + +saml_request_t* AXIS2_CALL saml_request_test(axutil_env_t *env); +saml_response_t* AXIS2_CALL saml_response_test(axutil_env_t *env); +saml_request_t* AXIS2_CALL saml_request_test_with_sign(axutil_env_t *env); +saml_response_t* AXIS2_CALL saml_response_test_with_sign(axutil_env_t *env); + +saml_status_t* AXIS2_CALL saml_status_test(axutil_env_t *env); +saml_subject_query_t* AXIS2_CALL saml_subject_query_test(axutil_env_t *env); +saml_attr_query_t* AXIS2_CALL saml_attr_query_test(axutil_env_t *env); +saml_authentication_query_t* AXIS2_CALL saml_authentication_query_test(axutil_env_t *env); +saml_autho_decision_query_t* AXIS2_CALL saml_autho_decision_query_test(axutil_env_t *env); +oxs_sign_ctx_t* AXIS2_CALL saml_load_default_sign(axutil_env_t *env, axis2_char_t *pvk_path, axis2_char_t *cert_path, axis2_char_t *pswd); \ No newline at end of file
