search

makdimka077 / xades4j

Automatically exported from code.google.com/p/xades4j
GNU Lesser General Public License v3.0
0 stars 0 forks source link

Library lacks extensive testing of timestamp and certificate configurations #54

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
Few independent problems:
1. Library for tests depends on external TSAs -- tests can't be performed 
offline.
2. Can't easily test more complex situations: revoked TSA certificates, tokens 
from multiple TSAs, etc.

What version of the product are you using? On what operating system?
1.3.0

Please provide any additional information below.
Attached patch creates first version of validator that can create fictional CA 
(using extensions typical to EJBCA/SignServer configuration) with any dates 
needed.

Patch depends on patch from issue 49, without it verification will fail as the 
fictional TSA has critical Extended Key Usage.

Original issue reported on code.google.com by hubert.k...@gmail.com on 16 Oct 2012 at 5:01

Attachments:

GoogleCodeExporter commented 9 years ago 
A bit cleaner implementation of testing suite

Original comment by hubert.k...@gmail.com on 17 Oct 2012 at 4:03

Attachments:

GoogleCodeExporter commented 9 years ago 
cleaned up the tests a bit and added simple new one (the testT_2v exposes a bug 
with X509CRLSelector)

Original comment by hubert.k...@gmail.com on 17 Oct 2012 at 4:51

Attachments:

GoogleCodeExporter commented 9 years ago 
attached patches are obsolete, more complete tests are present in patches in 
issue 55 and issue 62

Original comment by hubert.k...@gmail.com on 18 Dec 2012 at 4:35