search

cloudtrends / soi-toolkit

Automatically exported from code.google.com/p/soi-toolkit
1 stars 0 forks source link

HTTPS test certificates expires on Jun 23 2013 #344

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
The keystores/truststores used for HTTPS testing expires too early (se below).

Suggest we create new test certs that are valid for 20 years.

---
>cd 
soitk_tr/tools/soitoolkit-generator/soitoolkit-generator/src/main/resources/requ
estResponseService-NEW/src/test/certs
>keytool -v -list -keystore server.jks.gt  -storepass password

Keystore type: JKS
Keystore provider: SUN

Your keystore contains 1 entry

Alias name: 1
Creation date: Jun 28, 2012
Entry type: PrivateKeyEntry
Certificate chain length: 1
Certificate[1]:
Owner: CN=SOI Toolkit, O=Internet Widgits Pty Ltd, ST=Some-State, C=SE
Issuer: CN=SOI Toolkit, O=Internet Widgits Pty Ltd, ST=Some-State, C=SE
Serial number: 87e58407cf7070fe
Valid from: Thu Jun 28 13:12:48 CEST 2012 until: Sun Jun 23 13:12:48 CEST 2013
Certificate fingerprints:
     MD5:  FA:EE:8F:E2:84:AF:CE:F2:D3:34:9C:AE:25:B4:70:3C
     SHA1: FA:8E:E3:4E:24:1A:E4:6B:4A:80:F4:92:4D:38:C0:7E:9D:0F:13:A9
     Signature algorithm name: SHA1withRSA
     Version: 1

Original issue reported on code.google.com by hakan.d...@gmail.com on 14 Jun 2013 at 3:03

GoogleCodeExporter commented 9 years ago 
The expire date affects client.jks and server.jks. Truststore.jks is valid 
until Sat May 07 13:10:54 CEST 2022

Original comment by magnus.e...@callistaenterprise.se on 5 Jul 2013 at 12:32

GoogleCodeExporter commented 9 years ago

Original comment by hakan.d...@gmail.com on 16 Oct 2013 at 3:26

GoogleCodeExporter commented 9 years ago 
This issue was closed by revision r2081.

Original comment by hakan.d...@gmail.com on 16 Oct 2013 at 3:28

GoogleCodeExporter commented 9 years ago 
How to update an existing project with new keystores/certificates (instead of 
the expired certificates):
1. Remove files (client.jks, server.jks, truststore.jks, readme.txt) from your 
project src/test/certs directory.
2. Copy/download files (client.jks.gt, server.jks.gt, truststore.jks.gt, 
readme.txt.gt) from:
https://code.google.com/p/soi-toolkit/source/browse/#svn%2Ftrunk%2Ftools%2Fsoito
olkit-generator%2Fsoitoolkit-generator%2Fsrc%2Fmain%2Fresources%2FrequestRespons
eService-NEW%2Fsrc%2Ftest%2Fcerts%253Fstate%253Dclosed
into your project src/test/certs directory.
3. Remove the ".gt" suffix from the downloaded files.
4. Done.

Original comment by hakan.d...@gmail.com on 16 Oct 2013 at 4:51

GoogleCodeExporter commented 9 years ago 
r2082: Fixed expiry dates, were still bad for client.jks and server.jks

Original comment by hakan.d...@gmail.com on 16 Oct 2013 at 5:23

GoogleCodeExporter commented 9 years ago

Original comment by hakan.d...@gmail.com on 17 Oct 2013 at 1:41

GoogleCodeExporter commented 9 years ago 
This issue was updated by revision r2125.

Updated keystores for the old-generator also - failed generator tests showed 
that it was still in use.

Original comment by hakan.d...@gmail.com on 24 Feb 2014 at 11:52