lp://staging/~roadmr/django-saml2-idp/fix-digest-signature-xml-identifiers-algorithm

Branch merges

Propose for merging

No branches dependent on this one.

Merged into lp://staging/~ubuntuone-pqm-team/django-saml2-idp/stable at revision 77

Guillermo Gonzalez: Approve on 2020-07-31

Diff: 309 lines (+168/-21)

6 files modified

idptest/keys/sample/sample-public-key.pub (+4/-0)
idptest/saml2idp/tests/signing.py (+116/-4)
idptest/saml2idp/xml_signing.py (+41/-13)
idptest/saml2idp/xml_templates.py (+2/-2)
requirements.txt (+4/-1)
setup.py (+1/-1)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

89. By Daniel Manrique on 2020-07-31

Bump version

88. By Daniel Manrique on 2020-07-31

Use django setting for the cert file

87. By Daniel Manrique on 2020-07-31

Add a fixme yaya

86. By Daniel Manrique on 2020-07-31

Fix silly custom cert repetitious strings

85. By Daniel Manrique on 2020-07-31

Full sha1/sha2(256) tests, test data and behavior

84. By Daniel Manrique on 2020-07-31

Refactor / fix substitution of xml algorithm identifiers.

XMl signing and digest algorithm identifiers are fully namespaced with URLs, not just
tacking on the algorithm name at the end of a fixed URL. This fixes that and
updates templating a bit.

83. By Daniel Manrique on 2020-07-31

better variable substitution in expected xml for signing tests

82. By Daniel Manrique on 2020-07-30

Add sample public key for tests.

Extracted from the existing certificate, should mimic what peers do to
verify our signatures.

openssl x509 -in sample-certificate.pem -pubkey -noout > sample-public-key.pub

81. By Daniel Manrique on 2020-07-30

Test refactoring to verify signatures.

- Superclass method to verify signature by extracting signedinfo and
  signaturevalue from the final signature xml and verifying with m2crypto.
- bolted this on to existing TestSigning class.
- Added failing test to TestSha256Signing class, with steps to make the
  actual code work \o/

80. By Daniel Manrique on 2020-07-30

Only BS4 can use the 'xml' parser which is case sensitive and doesn't screw SignedInfo tags