Initial commit

git-svn-id: https://joinup.ec.europa.eu/svn/moa-idspss/trunk@2 d688527b-c9ab-4aba-bd8d-4036d912da1d

10 files changed, 1010 insertions, 0 deletions

diff --git a/spss.server/src/test/at/gv/egovernment/moa/spss/server/config/ConfigurationProviderTest.java b/spss.server/src/test/at/gv/egovernment/moa/spss/server/config/ConfigurationProviderTest.java
new file mode 100644
index 000000000..07b3c7010
--- /dev/null
+++ b/spss.server/src/test/at/gv/egovernment/moa/spss/server/config/ConfigurationProviderTest.java
@@ -0,0 +1,184 @@
+package test.at.gv.egovernment.moa.spss.server.config;
+
+import java.io.FileInputStream;
+import java.math.BigInteger;
+import java.security.KeyStore;
+import java.security.Principal;
+import java.security.cert.CertificateFactory;
+import java.security.cert.X509Certificate;
+import java.util.Collection;
+import java.util.Set;
+
+import org.w3c.dom.Element;
+
+import test.at.gv.egovernment.moa.spss.SPSSTestCase;
+
+import iaik.utils.RFC2253NameParser;
+
+import at.gv.egovernment.moa.spss.server.config.IssuerAndSerial;
+import at.gv.egovernment.moa.spss.server.config.ConfigurationProvider;
+import at.gv.egovernment.moa.spss.server.config.TrustProfile;
+
+/**
+ * Tests the <code>ConfigurationProvider</code>.
+ * 
+ * @author Patrick Peck
+ * @author Sven Aigner
+ * @version $Id$
+ */
+public class ConfigurationProviderTest extends SPSSTestCase {
+  private ConfigurationProvider provider;
+  private Principal issuer1;
+  private Principal issuer2;
+  private BigInteger serial1;
+  private BigInteger serial2;
+  private IssuerAndSerial is1;
+  private IssuerAndSerial is2;
+  private X509Certificate cert1;
+  private X509Certificate cert2;
+  private X509Certificate atrustCert;
+  private X509Certificate iaikCert;
+
+  /**
+   * Constructor for MOAConfigTest.
+   * @param name
+   */
+  public ConfigurationProviderTest(String name) {
+    super(name);
+  }
+
+  protected void setUp() throws Exception {
+    RFC2253NameParser nameParser;
+
+    provider =
+      new ConfigurationProvider(
+        TESTDATA_ROOT + "conf/moa-spss/MOA-SPSSConfiguration.xml");
+
+    nameParser = new RFC2253NameParser("CN=TestUser,OU=MOA,O=BRZ,C=AT");
+    issuer1 = nameParser.parse();
+    serial1 = new BigInteger("12345678");
+    is1 = new IssuerAndSerial(issuer1, serial1);
+
+    nameParser = new RFC2253NameParser("CN=TestUser,OU=IKT-Board,O=CIO,C=AT");
+    issuer2 = nameParser.parse();
+    serial2 = new BigInteger("987654321");
+    is2 = new IssuerAndSerial(issuer2, serial2);
+
+    KeyStore ks = KeyStore.getInstance("JKS", "SUN");
+    ks.load(
+      new FileInputStream(TESTDATA_ROOT + "security/server.keystore"),
+      "changeit".toCharArray());
+    cert1 = (X509Certificate) ks.getCertificate("tomcat-server");
+    cert2 = (X509Certificate) ks.getCertificate("tomcat-client");
+
+    CertificateFactory certFactory = CertificateFactory.getInstance("X.509");
+    Collection certs =
+      certFactory.generateCertificates(
+        new FileInputStream(TESTDATA_ROOT + "security/A-Trust-nQual-01.p7b"));
+    atrustCert = (X509Certificate) certs.toArray()[0];
+
+    certs =
+      certFactory.generateCertificates(
+        new FileInputStream(
+          TESTDATA_ROOT
+            + "conf/moa-spss/trustprofiles/TrustProfile1/IAIKRoot.cer"));
+    iaikCert = (X509Certificate) certs.toArray()[0];
+  }
+
+  public void testGetKeySet() {
+    Set keySet;
+
+    keySet = provider.getKeyGroupEntries(null, null, "PKCS12RSAKey1");
+    assertEquals(1, keySet.size());
+    keySet = provider.getKeyGroupEntries(null, null, "PKCS12RSAKeyExpired");
+    assertEquals(1, keySet.size());
+    keySet = provider.getKeyGroupEntries(issuer1, serial1, "allKeys");
+    assertEquals(6, keySet.size());
+    keySet = provider.getKeyGroupEntries(null, null, "allKeys");
+    assertNull(keySet);
+  }
+
+  public void testGetChainingMode() {
+    String mode;
+
+    mode = provider.getChainingMode(atrustCert);
+    assertEquals("chain", mode);
+    mode = provider.getChainingMode(cert2);
+    assertEquals("pkix", mode);
+  }
+
+  public void testGetCRLDP() {
+    Set dps;
+
+    dps = provider.getCRLDP(atrustCert);
+    assertEquals(0, dps.size());
+    dps = provider.getCRLDP(iaikCert);
+    assertEquals(3, dps.size());
+  }
+
+  public void testGetCRLArchiveDuration() {
+    assertEquals(365, provider.getCRLArchiveDuration());
+  }
+
+  public void testGetGenericConfiguration() {
+    assertEquals(
+      "tmp/aValidPathName",
+      provider.getGenericConfiguration("DirectoryCertStoreParameters.RootDir"));
+    assertNull(provider.getGenericConfiguration("notExisting"));
+    assertEquals(
+      "default",
+      provider.getGenericConfiguration("notExisting", "default"));
+  }
+
+  public void testGetCreateTransformsInfoProfile() {
+    Element profile;
+
+    profile = provider.getCreateTransformsInfoProfile("NotExisting");
+    assertNull(profile);
+    profile =
+      provider.getCreateTransformsInfoProfile("CreateTransformsInfoProfile1");
+    assertNotNull(profile);
+  }
+
+  public void testGetCreateSignatureEnvironmentProfile() {
+    Element profile =
+      provider.getCreateSignatureEnvironmentProfile(
+        "CreateSignatureEnvironmentProfile1");
+    assertNotNull(profile);
+  }
+
+  public void testGetVerifyTransformsInfoProfile() {
+    Element profile;
+
+    profile = provider.getVerifyTransformsInfoProfile("TransformsInfoProfile1");
+    assertNotNull(profile);
+    profile = provider.getVerifyTransformsInfoProfile("TransformsInfoProfile2");
+    assertNotNull(profile);
+    profile = provider.getVerifyTransformsInfoProfile("NotExisting");
+    assertNull(profile);
+  }
+
+  public void testGetSupplementProfile() {
+    Element profile = provider.getSupplementProfile("SupplementProfile1");
+    assertNotNull(profile);
+  }
+
+  public void testGetTrustProfile() {
+    TrustProfile tp = provider.getTrustProfile("TrustProfile1");
+    assertEquals("d:/patrick/tmp/TrustProfile1", tp.getUri());
+    assertNull(provider.getTrustProfile("TrustProfile2"));
+  }
+
+  public void testGetDigestMethodAlgorithmName() {
+    assertEquals(
+      "http://www.w3.org/2000/09/xmldsig#sha1",
+      provider.getDigestMethodAlgorithmName());
+  }
+
+  public void testGetCanonicalizationAlgorithmName() {
+    assertEquals(
+      "http://www.w3.org/TR/2001/REC-xml-c14n-20010315",
+      provider.getCanonicalizationAlgorithmName());
+  }
+
+}
diff --git a/spss.server/src/test/at/gv/egovernment/moa/spss/server/iaik/config/ConfigurationDataImplTest.java b/spss.server/src/test/at/gv/egovernment/moa/spss/server/iaik/config/ConfigurationDataImplTest.java
new file mode 100644
index 000000000..29e00e0e7
--- /dev/null
+++ b/spss.server/src/test/at/gv/egovernment/moa/spss/server/iaik/config/ConfigurationDataImplTest.java
@@ -0,0 +1,149 @@
+package test.at.gv.egovernment.moa.spss.server.iaik.config;
+
+import java.io.FileInputStream;
+import java.security.KeyStore;
+import java.security.cert.CertificateFactory;
+import java.security.cert.X509Certificate;
+import java.util.Collection;
+import java.util.Date;
+import java.util.Iterator;
+import java.util.List;
+import java.util.Set;
+
+import test.at.gv.egovernment.moa.spss.SPSSTestCase;
+
+import iaik.asn1.structures.DistributionPoint;
+import iaik.pki.PKIConfiguration;
+import iaik.pki.pathvalidation.ChainingModes;
+import iaik.pki.pathvalidation.ValidationConfiguration;
+import iaik.pki.revocation.CRLDistributionPoint;
+import iaik.pki.revocation.RevocationConfiguration;
+import iaik.pki.store.certstore.CertStoreConfiguration;
+import iaik.pki.store.certstore.CertStoreTypes;
+import iaik.pki.store.revocation.archive.ArchiveConfiguration;
+import iaik.pki.store.revocation.archive.db.DataBaseArchiveParameter;
+import iaik.server.ConfigurationData;
+import iaik.server.modules.keys.HardwareKeyModuleConfiguration;
+import iaik.server.modules.keys.SoftwareKeyModuleConfiguration;
+
+import at.gv.egovernment.moa.spss.server.iaik.config.ConfigurationDataImpl;
+import at.gv.egovernment.moa.spss.server.transaction.TransactionContext;
+import at.gv.egovernment.moa.spss.server.transaction.TransactionContextManager;
+
+/**
+ * Tests the <code>ConfigurationDataImpl</code>.
+ * 
+ * @author Patrick Peck
+ * @version $Id$
+ */
+public class ConfigurationDataImplTest extends SPSSTestCase {
+
+  private ConfigurationData config;
+  private X509Certificate iaikCert;
+
+  public ConfigurationDataImplTest(String name) {
+    super(name);
+  }
+
+  protected void setUp() throws Exception {
+    TransactionContext context;
+
+    setUpTransactionContext();
+    context = TransactionContextManager.getInstance().getTransactionContext();
+
+    config = new ConfigurationDataImpl(context.getConfiguration());
+
+    KeyStore ks = KeyStore.getInstance("JKS", "SUN");
+    ks.load(
+      new FileInputStream(TESTDATA_ROOT + "security/server.keystore"),
+      "changeit".toCharArray());
+
+    CertificateFactory certFactory = CertificateFactory.getInstance("X.509");
+    Collection certs =
+      certFactory.generateCertificates(
+        new FileInputStream(
+          TESTDATA_ROOT
+            + "conf/moa-spss/trustprofiles/TrustProfile1/IAIKRoot.cer"));
+    iaikCert = (X509Certificate) certs.toArray()[0];
+
+  }
+
+  public void testGetPKIConfiguration() {
+    PKIConfiguration pkiConfig = config.getPKIConfiguration();
+    ArchiveConfiguration archiveConfig = pkiConfig.getArchiveConfiguration();
+    CertStoreConfiguration certStoreConfig =
+      pkiConfig.getCertStoreConfiguration();
+    RevocationConfiguration revocationConfig =
+      pkiConfig.getRevocationConfiguration();
+    ValidationConfiguration validationConfig =
+      pkiConfig.getValidationConfiguration();
+    DataBaseArchiveParameter archiveParam;
+    Set distributionPoints;
+    Iterator iter;
+    boolean found;
+
+    // test archive parameters
+    archiveParam =
+      (DataBaseArchiveParameter) archiveConfig.getArchiveParameters();
+    assertEquals(
+      archiveParam.getJDBCUrl(),
+      "jdbc:postgresql://10.16.46.108/moa?user=moa&password=moatest");
+
+    // test cert store configuration
+    assertEquals(1, certStoreConfig.getParameters().length);
+    assertEquals(
+      CertStoreTypes.DIRECTORY,
+      certStoreConfig.getParameters()[0].getType());
+
+    // test revocation configuration
+    distributionPoints =
+      revocationConfig.getAlternativeDistributionPoints(iaikCert, new Date());
+    assertEquals(3, distributionPoints.size());
+    found = false;
+    for (iter = distributionPoints.iterator(); iter.hasNext();) {
+      CRLDistributionPoint dp = (CRLDistributionPoint) iter.next();
+      if (dp.getUri().equals("http://www.iaik.at/testCA/iaik_test_sig.crl")) {
+        found =
+          dp.getReasonCodes()
+            == (DistributionPoint.keyCompromise
+              | DistributionPoint.affiliationChanged);
+      }
+    }
+    assertTrue(found);
+
+    // test validation configuration
+    assertEquals(
+      ChainingModes.PKIX_MODE,
+      validationConfig.getChainingMode(iaikCert));
+  }
+
+  /*
+  public void testGetCryptoModuleConfigurations() {
+    List cryptoConfigs = config.getCryptoModuleConfigurations();
+    HardwareCryptoModuleConfiguration moduleConfig;
+
+    assertEquals(2, cryptoConfigs.size());
+    moduleConfig = (HardwareCryptoModuleConfiguration) cryptoConfigs.get(0);
+    assertEquals("Module1", moduleConfig.getModuleName());
+    assertEquals("Slot1", moduleConfig.getSlotID());
+    assertEquals("PIN1", new String(moduleConfig.getUserPIN()));
+  }
+  */
+
+  public void testGetKeyModuleConfigurations() {
+    List keyConfigs = config.getKeyModuleConfigurations();
+    HardwareKeyModuleConfiguration hwKey;
+    SoftwareKeyModuleConfiguration swKey;
+
+    assertEquals(7, keyConfigs.size());
+    hwKey = (HardwareKeyModuleConfiguration) keyConfigs.get(0);
+    assertEquals("cryptoki.dll", hwKey.getModuleName());
+    assertEquals("0", hwKey.getSlotID());
+    assertEquals("0000", new String(hwKey.getUserPIN()));
+    swKey = (SoftwareKeyModuleConfiguration) keyConfigs.get(1);
+    assertEquals(
+      "buergerkarte",
+      new String(swKey.getKeyStoreAuthenticationData()));
+  }
+
+}
diff --git a/spss.server/src/test/at/gv/egovernment/moa/spss/server/iaik/config/IaikConfiguratorTest.java b/spss.server/src/test/at/gv/egovernment/moa/spss/server/iaik/config/IaikConfiguratorTest.java
new file mode 100644
index 000000000..3b403dc19
--- /dev/null
+++ b/spss.server/src/test/at/gv/egovernment/moa/spss/server/iaik/config/IaikConfiguratorTest.java
@@ -0,0 +1,36 @@
+package test.at.gv.egovernment.moa.spss.server.iaik.config;
+
+import test.at.gv.egovernment.moa.spss.SPSSTestCase;
+
+import at.gv.egovernment.moa.spss.server.iaik.config.IaikConfigurator;
+import at.gv.egovernment.moa.spss.server.transaction.TransactionContext;
+import at.gv.egovernment.moa.spss.server.transaction.TransactionContextManager;
+
+/**
+ * Tests the <code>IaikConfigurator</code>.
+ * 
+ * @author Patrick Peck
+ * @version $Id$
+ */
+public class IaikConfiguratorTest extends SPSSTestCase {
+
+  public IaikConfiguratorTest(String name) {
+    super(name);
+  }
+
+  /**
+   * @see TestCase#setUp()
+   */
+  protected void setUp() throws Exception {
+    super.setUpTransactionContext();
+  }
+
+  public void testConfigure() throws Exception {
+    IaikConfigurator configurator = new IaikConfigurator();
+    TransactionContext context =
+      TransactionContextManager.getInstance().getTransactionContext();
+
+    configurator.configure(context.getConfiguration());
+  }
+
+}
diff --git a/spss.server/src/test/at/gv/egovernment/moa/spss/server/invoke/AllTests.java b/spss.server/src/test/at/gv/egovernment/moa/spss/server/invoke/AllTests.java
new file mode 100644
index 000000000..65fa2bf72
--- /dev/null
+++ b/spss.server/src/test/at/gv/egovernment/moa/spss/server/invoke/AllTests.java
@@ -0,0 +1,25 @@
+package test.at.gv.egovernment.moa.spss.server.invoke;
+
+import junit.framework.Test;
+import junit.framework.TestSuite;
+
+/**
+ * Runs all tests in this package.
+ * 
+ * @author Patrick Peck
+ * @version $Id$
+ */
+public class AllTests {
+  public static Test suite() {
+    TestSuite suite = new TestSuite();
+
+    suite.addTestSuite(DataObjectFactoryTest.class);
+    suite.addTestSuite(TransformationFactoryTest.class);
+    suite.addTestSuite(XMLSignatureCreationInvokerTest.class);
+    suite.addTestSuite(CMSSignatureVerificationInvokerTest.class);
+    suite.addTestSuite(XMLSignatureVerificationInvokerTest.class);
+
+    return suite;
+  }
+
+}
diff --git a/spss.server/src/test/at/gv/egovernment/moa/spss/server/invoke/CMSSignatureVerificationInvokerTest.java b/spss.server/src/test/at/gv/egovernment/moa/spss/server/invoke/CMSSignatureVerificationInvokerTest.java
new file mode 100644
index 000000000..3024730f4
--- /dev/null
+++ b/spss.server/src/test/at/gv/egovernment/moa/spss/server/invoke/CMSSignatureVerificationInvokerTest.java
@@ -0,0 +1,63 @@
+package test.at.gv.egovernment.moa.spss.server.invoke;
+
+import org.w3c.dom.Document;
+import org.w3c.dom.Element;
+
+import test.at.gv.egovernment.moa.spss.SPSSTestCase;
+
+import at.gv.egovernment.moa.util.DOMUtils;
+
+import at.gv.egovernment.moa.spss.api.cmsverify.VerifyCMSSignatureRequest;
+import at.gv.egovernment.moa.spss.api.cmsverify.VerifyCMSSignatureResponse;
+import at.gv.egovernment.moa.spss.api.xmlbind.VerifyCMSSignatureRequestParser;
+import at.gv.egovernment.moa.spss.api.xmlbind.VerifyCMSSignatureResponseBuilder;
+import at.gv.egovernment.moa.spss.server.invoke.CMSSignatureVerificationInvoker;
+
+/**
+ * Mainly a smoke test for debugging the CMSSignatureVerificationInvoker.
+ * 
+ * @author Patrick Peck
+ * @version $Id$
+ */
+public class CMSSignatureVerificationInvokerTest extends SPSSTestCase {
+  private static final String TESTDATA_BASE =
+    TESTDATA_ROOT + "xml/VerifyCMSSignature/";
+
+  /**
+   * Constructor for CMSSignatureVerificationInvokerTest.
+   * @param name
+   */
+  public CMSSignatureVerificationInvokerTest(String name) {
+    super(name);
+  }
+
+  protected void setUp() throws Exception {
+    setUpTransactionContext();
+    setUpLoggingContext();
+    setUpIaikConfiguration();
+  }
+
+  public void testVerifyCMSSignature() throws Exception {
+    try {
+      CMSSignatureVerificationInvoker invoker =
+        CMSSignatureVerificationInvoker.getInstance();
+      VerifyCMSSignatureRequestParser requestParser =
+        new VerifyCMSSignatureRequestParser();
+      Document doc =
+        SPSSTestCase.parseXmlValidating(
+          TESTDATA_BASE + "TestGeneratorVC0.001.Req.xml");
+      VerifyCMSSignatureRequest request =
+        requestParser.parse(doc.getDocumentElement());
+      VerifyCMSSignatureResponse response = invoker.verifyCMSSignature(request);
+      VerifyCMSSignatureResponseBuilder responseBuilder =
+        new VerifyCMSSignatureResponseBuilder();
+      Element result = responseBuilder.build(response).getDocumentElement();
+
+      System.out.println(DOMUtils.serializeNode(result));
+    } catch (Exception e) {
+      e.printStackTrace();
+      fail();
+    }
+  }
+
+}
diff --git a/spss.server/src/test/at/gv/egovernment/moa/spss/server/invoke/DataObjectFactoryTest.java b/spss.server/src/test/at/gv/egovernment/moa/spss/server/invoke/DataObjectFactoryTest.java
new file mode 100644
index 000000000..aab2a0cc7
--- /dev/null
+++ b/spss.server/src/test/at/gv/egovernment/moa/spss/server/invoke/DataObjectFactoryTest.java
@@ -0,0 +1,178 @@
+package test.at.gv.egovernment.moa.spss.server.invoke;
+
+import java.io.InputStream;
+import java.security.Security;
+
+import org.w3c.dom.Document;
+import org.w3c.dom.Element;
+
+import test.at.gv.egovernment.moa.spss.SPSSTestCase;
+
+import iaik.server.modules.xml.BinaryDataObject;
+import iaik.server.modules.xml.DataObject;
+import iaik.server.modules.xml.XMLDataObject;
+
+import at.gv.egovernment.moa.util.Base64Utils;
+
+import at.gv.egovernment.moa.spss.MOAException;
+import at.gv.egovernment.moa.spss.api.SPSSFactory;
+import at.gv.egovernment.moa.spss.api.common.Content;
+import at.gv.egovernment.moa.spss.server.iaik.xml.ByteArrayDataObjectImpl;
+import at.gv.egovernment.moa.spss.server.iaik.xml.ByteStreamDataObjectImpl;
+import at.gv.egovernment.moa.spss.server.iaik.xml.XMLDataObjectImpl;
+import at.gv.egovernment.moa.spss.server.iaik.xml.XMLNodeListDataObjectImpl;
+import at.gv.egovernment.moa.spss.server.invoke.DataObjectFactory;
+
+/**
+ * Test cases for the <code>DataObjectFactory</code> class.
+ * 
+ * @author Patrick Peck
+ * @version $Id$
+ */
+public class DataObjectFactoryTest extends SPSSTestCase {
+
+  private static final String HTTP_BINARY_CONTENT_URL = "http://www.google.com";
+  private static final String HTTP_XML_CONTENT_URL =
+    "http://www.w3.org/TR/xmldsig-core/xmldsig-core-schema.xsd";
+  private static final String HTTPS_BINARY_CONTENT_URL =
+    "https://businessnet.ba-ca.com";
+  private static final String HTTPS_UNTRUSTED_URL =
+    "https://heribert.anecon.com";
+  private static final String HTTP_UNKNOWN_HOST_URL = "http://uurjmjmruuw.com";
+  private static final String MALFORMED_URL = "//hsld///ddd";
+  private static final String FILE_BINARY_CONTENT_URL = "file:/C:/boot.ini";
+  private static final String XML_CONTENT =
+    "<XMLContent>"
+      + "  <User name=\"test1\"/>"
+      + "  <USer name=\"test2\"/>"
+      + "</XMLContent>";
+  private static final String BASE64_CONTENT = "U3Zlbg==";
+
+  private SPSSFactory spssFactory = SPSSFactory.getInstance();
+  private DataObjectFactory factory;
+
+  /**
+   * Constructor for DataObjectFactoryTest.
+   * @param name
+   */
+  public DataObjectFactoryTest(String name) {
+    super(name);
+  }
+
+  protected void setUp() throws Exception {
+    factory = DataObjectFactory.getInstance();
+
+    // set up SSL
+    Security.addProvider(new com.sun.net.ssl.internal.ssl.Provider());
+    System.setProperty(
+      "java.protocol.handler.pkgs",
+      "com.sun.net.ssl.internal.www.protocol");
+    /*
+    System.setProperty(
+      "javax.net.ssl.keyStore",
+      "data/test/security/client.keystore");
+    System.setProperty("javax.net.ssl.keyStorePassword", "changeit");
+    System.setProperty(
+      "javax.net.ssl.trustStore",
+      "data/test/security/client.keystore");
+    System.setProperty("javax.net.ssl.trustStorePassword", "changeit");
+    */
+  }
+
+  public void testCreateFromURIWithBinaryHttp() throws Exception {
+    DataObject dataObject =
+      factory.createFromURI(HTTP_BINARY_CONTENT_URL, false);
+
+    assertNotNull(dataObject);
+    assertTrue(dataObject instanceof ByteStreamDataObjectImpl);
+    assertNotNull(((BinaryDataObject) dataObject).getInputStream());
+  }
+
+  public void testCreateFromURIWithXmlHttp() throws Exception {
+    DataObject dataObject = factory.createFromURI(HTTP_XML_CONTENT_URL, false);
+    Element element;
+
+    assertNotNull(dataObject);
+    assertTrue(dataObject instanceof XMLDataObjectImpl);
+    element = ((XMLDataObject) dataObject).getElement();
+    assertNotNull(element);
+    assertEquals("schema", element.getTagName());
+  }
+
+  public void testCreateFromURIWithMalformedURI() throws Exception {
+    try {
+      factory.createFromURI(MALFORMED_URL, false);
+      fail();
+    } catch (MOAException e) {
+    }
+  }
+
+  public void testCreateFromURIWithNonExistingHttpURL() throws Exception {
+    try {
+      factory.createFromURI(HTTP_UNKNOWN_HOST_URL, false);
+      fail();
+    } catch (MOAException e) {
+    }
+  }
+
+  public void testCreateFromURIWithHttps() throws Exception {
+    DataObject dataObject =
+      factory.createFromURI(HTTPS_BINARY_CONTENT_URL, false);
+    assertNotNull(dataObject);
+    assertTrue(dataObject instanceof BinaryDataObject);
+  }
+
+  public void testCreateFromURIWithUntrustedHttps() throws Exception {
+    try {
+      factory.createFromURI(HTTPS_UNTRUSTED_URL, false);
+      fail();
+    } catch (MOAException e) {
+
+    }
+  }
+
+  public void testCreateFromURIWithFile() throws Exception {
+    try {
+      factory.createFromURI(FILE_BINARY_CONTENT_URL, false);
+      fail();
+    } catch (MOAException e) {
+    }
+  }
+
+  public void testCreateFromContentOptionalRefTypeWithXmlContent()
+    throws Exception {
+    Document doc = parseXmlString(XML_CONTENT);
+    Content content =
+      spssFactory.createContent(
+        doc.getDocumentElement().getChildNodes(),
+        "http://data");
+    DataObject dataObject =
+      factory.createFromContentOptionalRefType(
+        content,
+        null,
+        true,
+        false,
+        true,
+        false);
+
+    assertTrue(dataObject instanceof XMLNodeListDataObjectImpl);
+  }
+
+  public void testCreateFromContentOptionalRefTypeWithBase64Content()
+    throws Exception {
+    InputStream is = Base64Utils.decodeToStream(BASE64_CONTENT, true);
+    Content content = spssFactory.createContent(is, "http://data");
+    DataObject dataObject =
+      factory.createFromContentOptionalRefType(
+        content,
+        null,
+        false,
+        false,
+        true,
+        false);
+
+    assertNotNull(dataObject);
+    assertTrue(dataObject instanceof ByteArrayDataObjectImpl);
+  }
+
+}
diff --git a/spss.server/src/test/at/gv/egovernment/moa/spss/server/invoke/TransformationFactoryTest.java b/spss.server/src/test/at/gv/egovernment/moa/spss/server/invoke/TransformationFactoryTest.java
new file mode 100644
index 000000000..13a80cbf1
--- /dev/null
+++ b/spss.server/src/test/at/gv/egovernment/moa/spss/server/invoke/TransformationFactoryTest.java
@@ -0,0 +1,201 @@
+package test.at.gv.egovernment.moa.spss.server.invoke;
+
+import java.util.List;
+import java.util.Map;
+
+import org.w3c.dom.Document;
+
+import test.at.gv.egovernment.moa.spss.SPSSTestCase;
+
+import iaik.ixsil.init.IXSILInit;
+import iaik.ixsil.util.URI;
+import iaik.server.modules.xml.Base64Transformation;
+import iaik.server.modules.xml.Canonicalization;
+import iaik.server.modules.xml.EnvelopedSignatureTransformation;
+import iaik.server.modules.xml.Transformation;
+import iaik.server.modules.xml.XPath2Transformation;
+import iaik.server.modules.xml.XPathTransformation;
+import iaik.server.modules.xml.XSLTTransformation;
+
+import at.gv.egovernment.moa.util.Constants;
+
+import at.gv.egovernment.moa.spss.MOAApplicationException;
+import at.gv.egovernment.moa.spss.api.common.Transform;
+import at.gv.egovernment.moa.spss.api.xmlbind.TransformParser;
+import at.gv.egovernment.moa.spss.server.invoke.TransformationFactory;
+
+/**
+ * Test cases for the <code>TransformationFactory</code> class.
+ * 
+ * @author Patrick Peck
+ * @version $Id$
+ */
+public class TransformationFactoryTest extends SPSSTestCase {
+
+  private static final String TESTDATA_BASE =
+    TESTDATA_ROOT + "xml/dsigTransform/";
+  private TransformationFactory factory = TransformationFactory.getInstance();
+  private TransformParser transformParser = new TransformParser();
+
+  /**
+   * Constructor for TransformationFactoryTest.
+   * @param name
+   */
+  public TransformationFactoryTest(String name) {
+    super(name);
+  }
+
+  protected void setUp() throws Exception {
+    IXSILInit.init(new URI("init/properties/init.properties"));
+    //IXSILInit.init(new URI("file:data/deploy/ixsil/init/properties/init.properties"));
+
+  }
+
+  public void testCreateCanonicalization() throws Exception {
+    Document transform = parseXml(TESTDATA_BASE + "canonicalization.xml");
+    Transform tr =
+      transformParser.parseTransform(transform.getDocumentElement());
+    Transformation t = factory.createTransformation(tr);
+
+    assertTrue(t instanceof Canonicalization);
+    assertEquals(
+      "http://www.w3.org/TR/2001/REC-xml-c14n-20010315",
+      t.getAlgorithmURI());
+  }
+
+  public void testCreateCanonicalizationWithComments() throws Exception {
+    Document transform =
+      parseXml(TESTDATA_BASE + "canonicalizationWithComments.xml");
+    Transform tr =
+      transformParser.parseTransform(transform.getDocumentElement());
+    Transformation t = factory.createTransformation(tr);
+
+    assertTrue(t instanceof Canonicalization);
+    assertEquals(
+      "http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments",
+      t.getAlgorithmURI());
+  }
+
+  public void testCreateBase64Decode() throws Exception {
+    Document transform = parseXml(TESTDATA_BASE + "base64.xml");
+    Transform tr =
+      transformParser.parseTransform(transform.getDocumentElement());
+    Transformation t = factory.createTransformation(tr);
+    assertTrue(t instanceof Base64Transformation);
+  }
+
+  public void testCreateEnvelopedSignature() throws Exception {
+    Document transform = parseXml(TESTDATA_BASE + "enveloped.xml");
+    Transform tr =
+      transformParser.parseTransform(transform.getDocumentElement());
+    Transformation t = factory.createTransformation(tr);
+    assertTrue(t instanceof EnvelopedSignatureTransformation);
+  }
+
+  public void testXPathTransformation() throws Exception {
+    Document transform = parseXml(TESTDATA_BASE + "xpath.xml");
+    Transform tr =
+      transformParser.parseTransform(transform.getDocumentElement());
+    Transformation t = factory.createTransformation(tr);
+    Map nsDecls;
+
+    assertTrue(t instanceof XPathTransformation);
+    nsDecls = ((XPathTransformation) t).getNamespaceDeclarations();
+    assertEquals(1, nsDecls.size());
+    assertEquals(Constants.DSIG_NS_URI, nsDecls.get("dsig"));
+  }
+
+  public void testCreateXPath2Transformation() throws Exception {
+    Document transform = parseXml(TESTDATA_BASE + "xpath2.xml");
+    Transform tr =
+      transformParser.parseTransform(transform.getDocumentElement());
+    Transformation t = factory.createTransformation(tr);
+    assertTrue(t instanceof XPath2Transformation);
+  }
+
+  public void testCreateXSLTTransformation() throws Exception {
+    Document transform = parseXml(TESTDATA_BASE + "xslt.xml");
+    Transform tr =
+      transformParser.parseTransform(transform.getDocumentElement());
+    XSLTTransformation t =
+      (XSLTTransformation) factory.createTransformation(tr);
+    assertNotNull(t.getStylesheetElement());
+  }
+
+  public void testCreateWithIllegalAlgorithm() throws Exception {
+    try {
+      Document transform = parseXml(TESTDATA_BASE + "illegalAlgorithm.xml");
+      Transform tr =
+        transformParser.parseTransform(transform.getDocumentElement());
+      factory.createTransformation(tr);
+      fail();
+    } catch (MOAApplicationException e) {
+    }
+  }
+
+  public void testEqualsXslt() throws Exception {
+    Document xslt = parseXml(TESTDATA_BASE + "xslt.xml");
+    Transform tr = transformParser.parseTransform(xslt.getDocumentElement());
+    Transformation trXslt = factory.createTransformation(tr);
+
+    Document xsltEqu = parseXml(TESTDATA_BASE + "xsltEqual.xml");
+    tr = transformParser.parseTransform(xsltEqu.getDocumentElement());
+    Transformation trXsltEqu = factory.createTransformation(tr);
+
+    Document xsltDiff = parseXml(TESTDATA_BASE + "xsltDifferent.xml");
+    tr = transformParser.parseTransform(xsltDiff.getDocumentElement());
+    Transformation trXsltDiff = factory.createTransformation(tr);
+
+    Document canonicalization =
+      parseXml(TESTDATA_BASE + "canonicalization.xml");
+
+    assertTrue(trXslt.equals(trXsltEqu));
+    assertFalse(trXslt.equals(trXsltDiff));
+    assertFalse(trXsltEqu.equals(trXsltDiff));
+    assertEquals(trXslt.hashCode(), trXsltEqu.hashCode());
+    assertFalse(trXslt.hashCode() == trXsltDiff.hashCode());
+    assertFalse(trXsltEqu.hashCode() == trXsltDiff.hashCode());
+    assertFalse(trXslt.equals(canonicalization));
+  }
+
+  public void testEqualsXPath() throws Exception {
+    Document xpath = parseXml(TESTDATA_BASE + "xpath.xml");
+    Transform tr = transformParser.parseTransform(xpath.getDocumentElement());
+    Transformation trXpath = factory.createTransformation(tr);
+    Transformation trXpathEqu = factory.createTransformation(tr);
+
+    Document xpathDiff = parseXml(TESTDATA_BASE + "xpathDifferent.xml");
+    tr = transformParser.parseTransform(xpathDiff.getDocumentElement());
+    Transformation trXpathDiff = factory.createTransformation(tr);
+
+    assertTrue(trXpath.equals(trXpathEqu));
+    assertEquals(trXpath.hashCode(), trXpathEqu.hashCode());
+    assertFalse(trXpath.equals(trXpathDiff));
+    assertFalse(trXpath.hashCode() == trXpathDiff.hashCode());
+  }
+
+  public void testEqualsXPath2() throws Exception {
+    Document xpath2 = parseXml(TESTDATA_BASE + "xpath2.xml");
+    Transform tr = transformParser.parseTransform(xpath2.getDocumentElement());
+    Transformation trXpath2 = factory.createTransformation(tr);
+    Transformation trXpath2Equ = factory.createTransformation(tr);
+
+    Document xpath2Diff = parseXml(TESTDATA_BASE + "xpath2Different.xml");
+    tr = transformParser.parseTransform(xpath2Diff.getDocumentElement());
+    Transformation trXpath2Diff = factory.createTransformation(tr);
+
+    assertTrue(trXpath2.equals(trXpath2Equ));
+    assertEquals(trXpath2.hashCode(), trXpath2Equ.hashCode());
+    assertFalse(trXpath2.equals(trXpath2Diff));
+    assertFalse(trXpath2.hashCode() == trXpath2Diff.hashCode());
+  }
+
+  public void testCreateTransformationList() throws Exception {
+    Document transforms = parseXml(TESTDATA_BASE + "transforms.xml");
+    List trs = transformParser.parseTransforms(transforms.getDocumentElement());
+    List transformationList = factory.createTransformationList(trs);
+
+    assertEquals(3, transformationList.size());
+  }
+
+}
diff --git a/spss.server/src/test/at/gv/egovernment/moa/spss/server/invoke/XMLSignatureCreationInvokerTest.java b/spss.server/src/test/at/gv/egovernment/moa/spss/server/invoke/XMLSignatureCreationInvokerTest.java
new file mode 100644
index 000000000..28cd3805a
--- /dev/null
+++ b/spss.server/src/test/at/gv/egovernment/moa/spss/server/invoke/XMLSignatureCreationInvokerTest.java
@@ -0,0 +1,63 @@
+package test.at.gv.egovernment.moa.spss.server.invoke;
+
+import java.util.Collections;
+
+import org.w3c.dom.Document;
+import org.w3c.dom.Element;
+
+import test.at.gv.egovernment.moa.spss.SPSSTestCase;
+
+import at.gv.egovernment.moa.util.DOMUtils;
+
+import at.gv.egovernment.moa.spss.api.xmlbind.CreateXMLSignatureRequestParser;
+import at.gv.egovernment.moa.spss.api.xmlbind.CreateXMLSignatureResponseBuilder;
+import at.gv.egovernment.moa.spss.api.xmlsign.CreateXMLSignatureRequest;
+import at.gv.egovernment.moa.spss.api.xmlsign.CreateXMLSignatureResponse;
+import at.gv.egovernment.moa.spss.server.invoke.XMLSignatureCreationInvoker;
+
+/**
+ * Mainly a smoke test for debugging the XMLSignatureCreationInvoker.
+ * 
+ * @author Patrick Peck
+ * @version $Id$
+ */
+public class XMLSignatureCreationInvokerTest extends SPSSTestCase {
+  private static final String TESTDATA_BASE =
+    TESTDATA_ROOT + "xml/CreateXMLSignature/";
+
+  public XMLSignatureCreationInvokerTest(String name) {
+    super(name);
+  }
+
+  protected void setUp() throws Exception {
+    setUpTransactionContext();
+    setUpLoggingContext();
+    setUpIaikConfiguration();
+    setUpSSL();
+  }
+
+  public void testCreateXMLSignature() throws Exception {
+    try {
+      XMLSignatureCreationInvoker invoker =
+        XMLSignatureCreationInvoker.getInstance();
+      CreateXMLSignatureRequestParser requestParser =
+        new CreateXMLSignatureRequestParser();
+      Document doc =
+        SPSSTestCase.parseXmlValidating(
+          TESTDATA_BASE + "TestGeneratorCX2.004.Req.xml");
+      CreateXMLSignatureRequest request =
+        requestParser.parse(doc.getDocumentElement());
+      CreateXMLSignatureResponse response = 
+        invoker.createXMLSignature(request, Collections.EMPTY_SET);
+      CreateXMLSignatureResponseBuilder responseBuilder = 
+        new CreateXMLSignatureResponseBuilder();
+      Element result = responseBuilder.build(response).getDocumentElement();
+
+      System.out.println(DOMUtils.serializeNode(result));
+    } catch (Exception e) {
+      e.printStackTrace();
+      fail();
+    }
+  }
+
+}
diff --git a/spss.server/src/test/at/gv/egovernment/moa/spss/server/invoke/XMLSignatureVerificationInvokerTest.java b/spss.server/src/test/at/gv/egovernment/moa/spss/server/invoke/XMLSignatureVerificationInvokerTest.java
new file mode 100644
index 000000000..56e3d541b
--- /dev/null
+++ b/spss.server/src/test/at/gv/egovernment/moa/spss/server/invoke/XMLSignatureVerificationInvokerTest.java
@@ -0,0 +1,61 @@
+package test.at.gv.egovernment.moa.spss.server.invoke;
+
+import org.w3c.dom.Document;
+
+import test.at.gv.egovernment.moa.spss.SPSSTestCase;
+
+import at.gv.egovernment.moa.util.DOMUtils;
+
+import at.gv.egovernment.moa.spss.api.xmlbind.VerifyXMLSignatureRequestParser;
+import at.gv.egovernment.moa.spss.api.xmlbind.VerifyXMLSignatureResponseBuilder;
+import at.gv.egovernment.moa.spss.api.xmlverify.VerifyXMLSignatureRequest;
+import at.gv.egovernment.moa.spss.api.xmlverify.VerifyXMLSignatureResponse;
+import at.gv.egovernment.moa.spss.server.invoke.XMLSignatureVerificationInvoker;
+
+/**
+ * Mainly a smoke test for debugging the XMLSignatureVerificationInvoker.
+ * 
+ * @author Patrick Peck
+ * @version $Id$
+ */
+public class XMLSignatureVerificationInvokerTest extends SPSSTestCase {
+  private static final String TESTDATA_BASE =
+    TESTDATA_ROOT + "xml/VerifyXMLSignature/";
+
+  public XMLSignatureVerificationInvokerTest(String name) {
+    super(name);
+  }
+
+  protected void setUp() throws Exception {
+    setUpTransactionContext();
+    setUpLoggingContext();
+    setUpIaikConfiguration();
+  }
+
+  public void testVerifyXMLSignature() throws Exception {
+    try {
+      XMLSignatureVerificationInvoker invoker =
+        XMLSignatureVerificationInvoker.getInstance();
+      VerifyXMLSignatureRequestParser requestParser =
+        new VerifyXMLSignatureRequestParser();
+      VerifyXMLSignatureResponseBuilder responseBuilder =
+        new VerifyXMLSignatureResponseBuilder();
+      Document doc =
+        SPSSTestCase.parseXmlValidating(
+          TESTDATA_BASE + "TestGeneratorVX.201.Req.xml");
+
+      VerifyXMLSignatureRequest request =
+        requestParser.parse(doc.getDocumentElement());
+      VerifyXMLSignatureResponse response;
+
+      response = invoker.verifyXMLSignature(request);
+      System.out.println(
+        DOMUtils.serializeNode(responseBuilder.build(response)));
+    } catch (Exception e) {
+      e.printStackTrace();
+      fail();
+    }
+  }
+ 
+
+}
diff --git a/spss.server/src/test/at/gv/egovernment/moa/spss/server/tools/CertToolTest.java b/spss.server/src/test/at/gv/egovernment/moa/spss/server/tools/CertToolTest.java
new file mode 100644
index 000000000..b46c20086
--- /dev/null
+++ b/spss.server/src/test/at/gv/egovernment/moa/spss/server/tools/CertToolTest.java
@@ -0,0 +1,50 @@
+package test.at.gv.egovernment.moa.spss.server.tools;
+
+import java.io.ByteArrayOutputStream;
+import java.io.PrintStream;
+
+import at.gv.egovernment.moa.spss.server.tools.CertTool;
+
+import test.at.gv.egovernment.moa.MOATestCase;
+
+/**
+ * Tests for the <code>CertTool</code>.
+ * 
+ * @author Patrick Peck
+ * @version $Id$
+ */
+public class CertToolTest extends MOATestCase {
+
+  private static final String EXPECTED_RESULT =
+    "SubjectDN (RFC2253):"
+      + " CN=Patrick Peck,OU=MOA Team,O=BRZ,L=Vienna,ST=Vienna,C=AT\r\n"
+      + "IssuerDN (RFC2253) :"
+      + " CN=Patrick Peck,OU=MOA Team,O=BRZ,L=Vienna,ST=Vienna,C=AT\r\n"
+      + "Serial Number      :"
+      + " 1047548672\r\n";
+  private CertTool certTool;
+
+  /**
+   * Constructor for CertToolTest.
+   * @param name
+   */
+  public CertToolTest(String name) {
+    super(name);
+  }
+
+  protected void setUp() {
+    certTool = new CertTool();
+  }
+
+  public void testPrintCertInfo() {
+    ByteArrayOutputStream bos = new ByteArrayOutputStream();
+    PrintStream ps = new PrintStream(bos);
+    String result;
+
+    certTool.printCertInfo(TESTDATA_ROOT + "security/server.cer", ps);
+    result = new String(bos.toByteArray());
+    System.out.println(result);
+    assertEquals(EXPECTED_RESULT, result);
+  }
+
+}