1 files changed, 392 insertions, 0 deletions
diff --git a/spss/server/serverlib/src/test/java/test/at/gv/egovernment/moa/spss/server/config/ConfigurationProviderTest1.java b/spss/server/serverlib/src/test/java/test/at/gv/egovernment/moa/spss/server/config/ConfigurationProviderTest1.java
new file mode 100644
index 000000000..27fd09836
--- /dev/null
+++ b/spss/server/serverlib/src/test/java/test/at/gv/egovernment/moa/spss/server/config/ConfigurationProviderTest1.java
@@ -0,0 +1,392 @@
+/*
+* Copyright 2003 Federal Chancellery Austria
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+package test.at.gv.egovernment.moa.spss.server.config;
+
+import iaik.asn1.structures.Name;
+import iaik.pki.pathvalidation.ChainingModes;
+import iaik.utils.RFC2253NameParser;
+import iaik.utils.RFC2253NameParserException;
+import iaik.x509.X509Certificate;
+
+import java.math.BigInteger;
+import java.util.Iterator;
+import java.util.List;
+import java.util.Map;
+import java.util.Set;
+
+import junit.framework.TestCase;
+
+import org.w3c.dom.Element;
+
+import at.gv.egovernment.moa.spss.MOAException;
+import at.gv.egovernment.moa.spss.server.config.CRLDistributionPoint;
+import at.gv.egovernment.moa.spss.server.config.ConfigurationException;
+import at.gv.egovernment.moa.spss.server.config.ConfigurationProvider;
+import at.gv.egovernment.moa.spss.server.config.HardwareCryptoModule;
+import at.gv.egovernment.moa.spss.server.config.HardwareKeyModule;
+import at.gv.egovernment.moa.spss.server.config.KeyGroup;
+import at.gv.egovernment.moa.spss.server.config.KeyGroupEntry;
+import at.gv.egovernment.moa.spss.server.config.OCSPDistributionPoint;
+import at.gv.egovernment.moa.spss.server.config.SoftwareKeyModule;
+import at.gv.egovernment.moa.spss.server.config.TrustProfile;
+import at.gv.egovernment.moa.util.Constants;
+
+/**
+ * @author Gregor Karlinger
+ * @version $Id$
+ */
+public class ConfigurationProviderTest1 extends TestCase
+{
+  private static final String CONFIG_BASE_ =
+    "e:/cio/projekte/basismodule/wartung/projekt/spss.server/res/test/resources/config/";
+  
+  static at.gv.egovernment.moa.spss.server.config.ConfigurationProvider provider_;
+  
+  static 
+  {
+    System.setProperty(
+      "log4j.configuration",
+      "file:/" + CONFIG_BASE_ + "log4j.properties");
+    System.setProperty(
+      at.gv.egovernment.moa.spss.server.config.ConfigurationProvider.CONFIG_PROPERTY_NAME, 
+      CONFIG_BASE_ + "moa.spss.complete-config.xml");
+    try
+    {
+      ConfigurationProvider.reload();
+      provider_ = at.gv.egovernment.moa.spss.server.config.ConfigurationProvider.getInstance();
+    }
+    catch (ConfigurationException e)
+    {
+      throw new RuntimeException("Fehler beim Setup des Tests: " + e.getMessage());
+    }
+  }
+  
+  /**
+   * Constructor for ConfigurationProvider.
+   * @param arg0
+   */
+  public ConfigurationProviderTest1() throws MOAException
+  {
+    super("ConfigurationProvider");
+  }
+  
+  public void testGetWarnings()
+  {
+    assertEquals(0, provider_.getWarnings().size());
+  }
+
+  public void testGetDigestMethodAlgorithmName()
+  {
+    assertEquals(
+      Constants.SHA1_URI,
+      provider_.getDigestMethodAlgorithmName());
+  }
+
+  public void testGetCanonicalizationAlgorithmName()
+  {
+    assertEquals(
+      Constants.C14N_WITH_COMMENTS_URI,
+      provider_.getCanonicalizationAlgorithmName());
+  }
+
+  public void testGetHardwareCryptoModules()
+  {
+    List hwcms = provider_.getHardwareCryptoModules();
+    assertEquals(2, hwcms.size());
+    
+    HardwareCryptoModule hwc1 = (HardwareCryptoModule) hwcms.get(0);
+    assertEquals("HWC1_Name", hwc1.getName());
+    assertEquals("HWC1_SlotId", hwc1.getSlotID());
+    assertEquals("HWC1_UserPIN", hwc1.getUserPIN());
+    
+    HardwareCryptoModule hwc2 = (HardwareCryptoModule) hwcms.get(1);
+    assertEquals("HWC2_Name", hwc2.getName());
+    assertNull(hwc2.getSlotID());
+    assertEquals("HWC2_UserPIN", hwc2.getUserPIN());
+  }
+
+  public void testGetHardwareKeyModules()
+  {
+    List hwkms = provider_.getHardwareKeyModules();
+    assertEquals(2, hwkms.size());
+    
+    HardwareKeyModule hwk1 = (HardwareKeyModule) hwkms.get(0);
+    assertEquals("HWK1_Id", hwk1.getId());
+    assertEquals("HWK1_Name", hwk1.getName());
+    assertEquals("HWK1_SlotId", hwk1.getSlotID());
+    assertEquals("HWK1_UserPIN", hwk1.getUserPIN());
+    
+    HardwareKeyModule hwk2 = (HardwareKeyModule) hwkms.get(1);
+    assertEquals("HWK2_Id", hwk2.getId());
+    assertEquals("HWK2_Name", hwk2.getName());
+    assertNull(hwk2.getSlotID());
+    assertEquals("HWK2_UserPIN", hwk2.getUserPIN());
+  }
+
+  public void testGetSoftwareKeyModules()
+  {
+    List swkms = provider_.getSoftwareKeyModules();
+    assertEquals(2, swkms.size());
+    
+    SoftwareKeyModule swk1 = (SoftwareKeyModule) swkms.get(0);
+    assertEquals("SWK1_Id", swk1.getId());
+    assertEquals(CONFIG_BASE_ + "swk/SWK1_FileName.txt", swk1.getFileName().replace('\\', '/'));
+    assertEquals("SWK1_Password", swk1.getPassWord());
+
+    SoftwareKeyModule swk2 = (SoftwareKeyModule) swkms.get(1);
+    assertEquals("SWK2_Id", swk2.getId());
+    assertEquals(CONFIG_BASE_ + "swk/SWK2_FileName.txt", swk2.getFileName().replace('\\', '/'));
+    assertNull(swk2.getPassWord());
+  }
+
+  public void testGetKeyGroups()
+  {
+    Map keyGroups = provider_.getKeyGroups();
+    assertEquals(2, keyGroups.size());
+    
+    KeyGroup kg1 = (KeyGroup) keyGroups.get("KG1_Id");
+    assertNotNull(kg1);
+    assertEquals("KG1_Id", kg1.getId());
+    
+    Set kg1Entries = kg1.getKeyGroupEntries();
+    assertEquals(2, kg1Entries.size());
+
+    Iterator kg1EntriesIt = kg1Entries.iterator();
+    while(kg1EntriesIt.hasNext())
+    {
+      KeyGroupEntry currentEntry = (KeyGroupEntry)kg1EntriesIt.next();
+      if ("HWK1_Id".equals(currentEntry.getModuleID()))
+      {
+		    assertEquals("CN=HWK1_Issuer", currentEntry.getIssuerDN());
+		    assertEquals(0, currentEntry.getSerialNumber().intValue());
+      }
+      else if ("HWK2_Id".equals(currentEntry.getModuleID()))
+      {
+		    assertEquals("CN=HWK2_Issuer", currentEntry.getIssuerDN());
+		    assertEquals(1, currentEntry.getSerialNumber().intValue());
+      }
+      else fail("Invalid module identifer found.");
+    }
+    
+    KeyGroup kg2 = (KeyGroup) keyGroups.get("KG2_Id");
+    assertNotNull(kg2);
+    assertEquals("KG2_Id", kg2.getId());
+    
+    Set kg2Entries = kg2.getKeyGroupEntries();
+    assertEquals(2, kg2Entries.size());
+    
+    Iterator kg2EntriesIt = kg1Entries.iterator();
+    while(kg1EntriesIt.hasNext())
+    {
+      KeyGroupEntry currentEntry = (KeyGroupEntry)kg2EntriesIt.next();
+      if ("SWK1_Id".equals(currentEntry.getModuleID()))
+      {
+		    assertEquals("CN=CN=SWK1_Issuer", currentEntry.getIssuerDN());
+		    assertEquals(2, currentEntry.getSerialNumber().intValue());
+      }
+      else if ("SWK2_Id".equals(currentEntry.getModuleID()))
+      {
+		    assertEquals("CN=SWK2_Issuer", currentEntry.getIssuerDN());
+		    assertEquals(3, currentEntry.getSerialNumber().intValue());
+      }
+      else fail("Invalid module identifer found.");
+    }
+  }
+
+  public void testGetKeyGroupEntries() throws RFC2253NameParserException
+  {
+    RFC2253NameParser parser = new RFC2253NameParser("CN=Customer1_Issuer");
+    Name name = parser.parse();
+    Set kgEntries = provider_.getKeyGroupEntries(name, BigInteger.valueOf(4), "KG1_Id");
+    assertEquals(2, kgEntries.size());
+
+    Iterator kgEntriesIt = kgEntries.iterator();
+    while (kgEntriesIt.hasNext())
+    {
+      KeyGroupEntry currentEntry = (KeyGroupEntry) kgEntriesIt.next();
+      if (!"HWK1_Id".equals(currentEntry.getModuleID()) && !"HWK2_Id".equals(currentEntry.getModuleID())) 
+      {
+        fail("Invalid module identifier found.");
+      }
+    }
+  }
+
+  public void testGetChainingMode() throws RFC2253NameParserException
+  {
+    X509Certificate cert = new X509Certificate();
+    RFC2253NameParser parser = new RFC2253NameParser("CN=Unknown");
+    Name name = parser.parse();
+    cert.setIssuerDN(name);
+    cert.setSerialNumber(BigInteger.valueOf(0));
+    assertEquals(ChainingModes.PKIX_MODE, provider_.getChainingMode(cert)); // Default chaining mode
+    
+    parser = new RFC2253NameParser("CN=TA1_Issuer");
+    name = parser.parse();
+    cert.setIssuerDN(name);
+    cert.setSerialNumber(BigInteger.valueOf(5));
+    assertEquals(ChainingModes.CHAIN_MODE, provider_.getChainingMode(cert));
+  }
+
+  public void testGetDistributionPoints() throws RFC2253NameParserException
+  {
+    X509Certificate cert = new X509Certificate();
+    RFC2253NameParser parser = new RFC2253NameParser("CN=DP1_Issuer");
+    Name name = parser.parse();
+    cert.setIssuerDN(name);
+
+    Set dps = provider_.getDistributionPoints(cert);
+    assertEquals(2, dps.size());
+    
+    Iterator dpIt = dps.iterator();
+    while (dpIt.hasNext())
+    {
+      CRLDistributionPoint currentDP = (CRLDistributionPoint)dpIt.next();
+      if ("http://crl.myca.org".equals(currentDP.getUri()))
+      {
+        int reasonCodes =       
+          iaik.asn1.structures.DistributionPoint.unused |
+          iaik.asn1.structures.DistributionPoint.keyCompromise |
+          iaik.asn1.structures.DistributionPoint.cACompromise |
+          iaik.asn1.structures.DistributionPoint.affiliationChanged |
+          iaik.asn1.structures.DistributionPoint.superseded |
+          iaik.asn1.structures.DistributionPoint.cessationOfOperation |
+          iaik.asn1.structures.DistributionPoint.certificateHold |
+          iaik.asn1.structures.DistributionPoint.privilegeWithdrawn |
+          iaik.asn1.structures.DistributionPoint.aACompromise;
+        assertEquals(reasonCodes, currentDP.getReasonCodes());
+      }
+      else if ("http://crl.myotherca.org".equals(currentDP.getUri()))
+      {
+        int reasonCodes =
+          iaik.asn1.structures.DistributionPoint.aACompromise |
+          iaik.asn1.structures.DistributionPoint.affiliationChanged;
+        assertEquals(reasonCodes, currentDP.getReasonCodes());
+      }
+      else fail("Invalid CRL DP URI found: " + currentDP.getUri());  
+    }
+    
+    parser = new RFC2253NameParser("CN=DP2_Issuer");
+    name = parser.parse();
+    cert.setIssuerDN(name);
+
+    dps = provider_.getDistributionPoints(cert);
+    assertEquals(1, dps.size());
+    
+    OCSPDistributionPoint dpo = (OCSPDistributionPoint) dps.toArray()[0];
+    assertEquals("http://crl.yetanotherca.org", dpo.getUri());
+  }
+
+  public void testGetCRLArchiveDuration()
+  {
+    assertEquals(730, provider_.getCRLArchiveDuration());
+  }
+
+  public void testGetEnableRevocationArchiving()
+  {
+    assertFalse(provider_.getEnableRevocationArchiving());
+  }
+
+  public void testGetCertStoreLocation()
+  {
+    assertEquals(
+      CONFIG_BASE_ + "certstore_test", 
+      provider_.getCertStoreLocation().replace('\\', '/'));
+  }
+
+  public void testGetCreateTransformsInfoProfile()
+  {
+    Element ctip1 = provider_.getCreateTransformsInfoProfile("CTIP_1");
+    assertEquals("CreateTransformsInfoProfile", ctip1.getLocalName());
+
+    Element ctip2 = provider_.getCreateTransformsInfoProfile("CTIP_2");
+    assertEquals("CreateTransformsInfoProfile", ctip2.getLocalName());
+  }
+
+  public void testGetCreateSignatureEnvironmentProfile()
+  {
+    Element csep = provider_.getCreateSignatureEnvironmentProfile("CSEP_1");
+    assertEquals("CreateSignatureEnvironmentProfile", csep.getLocalName());
+  }
+
+  public void testGetVerifyTransformsInfoProfile()
+  {
+    Element vtip = provider_.getVerifyTransformsInfoProfile("VTIP_1");
+    assertEquals("VerifyTransformsInfoProfile", vtip.getLocalName());
+  }
+
+  public void testGetSupplementProfile()
+  {
+    Element sp = provider_.getSupplementProfile("SP_1");
+    assertEquals("SupplementProfile", sp.getLocalName());
+  }
+
+  public void testGetTrustProfile()
+  {
+    TrustProfile tp1 = provider_.getTrustProfile("TP1_Id");
+    assertEquals(
+      "file:/" + CONFIG_BASE_ + "trustprofiles/tp1/anchors",
+      tp1.getUri());
+    assertEquals(
+      "file:/" + CONFIG_BASE_ + "trustprofiles/tp1/signercerts",
+      tp1.getSignerCertsUri());
+    
+    TrustProfile tp2 = provider_.getTrustProfile("TP2_Id");
+    assertEquals(
+      "file:" + CONFIG_BASE_ + "trustprofiles/tp2/anchors",
+      tp2.getUri());
+    assertEquals(
+      "file:" + CONFIG_BASE_ + "trustprofiles/tp2/signercerts",
+      tp2.getSignerCertsUri());
+  }
+
+  public void testGetRevocationArchiveJDBCURL()
+  {
+    assertEquals("jdbc://dummy", provider_.getRevocationArchiveJDBCURL());
+  }
+
+  public void testGetRevocationArchiveJDBCDriverClass()
+  {
+    assertEquals("fully.qualified.classname", provider_.getRevocationArchiveJDBCDriverClass());
+  }
+
+  public void testGetEnableRevocationChecking()
+  {
+    assertFalse(provider_.getEnableRevocationChecking());
+  }
+
+  public void testGetMaxRevocationAge()
+  {
+    assertEquals(10000, provider_.getMaxRevocationAge());
+  }
+
+  public void testGetServiceOrder()
+  {
+    String[] serviceOrder = provider_.getServiceOrder();
+    assertEquals(2, serviceOrder.length);
+    assertEquals("crl", serviceOrder[0]);
+    assertEquals("ocsp", serviceOrder[1]);
+  }
+
+  public void testGetAutoAddCertificates()
+  {
+    assertFalse(provider_.getAutoAddCertificates());
+  }
+
+  public void testGetUseAuthorityInfoAccess()
+  {
+    assertFalse(provider_.getUseAuthorityInfoAccess());
+  }
+}