source: TI12-security/trunk/python/ndg.security.test/ndg/security/test/AttAuthority/attAuthorityClientTest.cfg @ 2884

# NERC Data Grid Project
#
# P J Kershaw 16/01/07
#
# Copyright (C) 2007 CCLRC & NERC
# 
# This software may be distributed under the terms of the Q Public License,
# version 1.0 or later.
[setUp]
# ! SiteBMapConfig.xml trusted site A aaURI setting must agree with this 
# setting for test6GetMappedAttCert
uri = https://localhost:5000/AttributeAuthority
#uri = https://localhost:5000/AttributeAuthority
#uri = http://glue.badc.rl.ac.uk/DEWS/MarineDataServer/AttributeAuthority
#uri = http://glue.badc.rl.ac.uk/DEWS/HealthDataServer/AttributeAuthority
#uri = http://glue.badc.rl.ac.uk/DEWS/Portal/AttributeAuthority
#uri = http://glue.badc.rl.ac.uk:41000/AttributeAuthority

# For https connections only.  !Omit ssl* settings if using http!
# sslpeercertcn is the expected CommonName of peer cert.  Omit if it's the 
# same as peer hostname. 
sslpeercertcn = Junk
sslcacertfilepathlist = cacert.pem

# X.509 certificate for Attribute Authority - to verify the signature of
# returned responses
#aacertfilepath = 

# Password protecting client private key - if omitted it will be prompted for
# from tty
clntprikeypwd = 

# Set to False to test service without WS-Security signature
setsignaturehandler = True

# ValueType for BinarySecurityToken element of WSSE header.  Specify
# 'X509PKIPathv1' for use with proxy certificates
reqbinsectokvaltype = X509v3
#reqbinsectokvaltype = X509
#reqbinsectokvaltype = X509PKIPathv1

# Test with proxy certificates or with standard certs.  Comment out as 
# appropriate
#proxycertfilepath = ./proxy-cert.pem

# Test without proxy certificates - uses AA server side cert/private key for
# client side too (!)
clntcertfilepath = ./aa-cert.pem

clntprikeyfilepath = ./aa-key.pem
#clntprikeyfilepath = ./proxy-key.pem

# Space separated list of CA certificate files used to verify certificate used
# in message signature / peer cert in SSL connection
cacertfilepathlist = ./cacert.pem

[test3GetTrustedHostInfo]
role = postgrad
# Test no matching role exception
#role = blah
 
[test5GetAttCert]
# If clntcertfilepath is a proxy set this cert as the one that issued the 
# proxy.  Comment out if clntcertfilepath is a standard X.509 cert.
#issuingclntcertfilepath = ./user-cert.pem

# Test with no digital signature applied
#issuingclntcertfilepath = ./proxy-cert.pem
# Setup for use by testGetMappedAttCert test
attCertFilePath = ./ac.xml

[test6GetAttCertWithUserIdSet]
userId = system
# Comment out if SignatureHandler is being used
#issuingclntcertfilepath = ./aa-cert.pem

[test7GetMappedAttCert]
# Set to False to test service without WS-Security signature
setsignaturehandler = True

# ValueType for BinarySecurityToken element of WSSE header.  Specify
# 'X509PKIPathv1' for use with proxy certificates
reqbinsectokvaltype = X509v3
#reqbinsectokvaltype = X509
#reqbinsectokvaltype = X509PKIPathv1

# Test with proxy certificates or with standard certs.  Comment out as 
# appropriate
#proxycertfilepath = ./proxy-cert.pem
clntcertfilepath = ./aa-cert.pem

clntprikeypwd = 
clntprikeyfilepath = ./proxy-key.pem
clntprikeyfilepath = ./aa-key.pem

# Space separated list of CA certificate files used to verify certificate used
# in message signature
cacertfilepathlist = ./cacert.pem

uri = http://localhost:5100/AttributeAuthority
# Heath Data Server
#uri = http://glue.badc.rl.ac.uk/DEWS/HealthDataServer/AttributeAuthority
# Marine Data Server
#uri = http://glue.badc.rl.ac.uk/DEWS/MarineDataServer/AttributeAuthority
userAttCertFilePath = ./ac.xml
mappedAttCertFilePath = ./mapped-ac.xml

[test8GetMappedAttCertStressTest]
# Set to False for no signature handling
setSignatureHandler = True

# ValueType for BinarySecurityToken element of WSSE header.  Specify
# 'X509PKIPathv1' for use with proxy certificates
#reqbinsectokvaltype = X509v3
#reqbinsectokvaltype = X509
reqbinsectokvaltype = X509PKIPathv1

# Test with proxy certificates or with standard certs.  Comment out as 
# appropriate
proxycertfilepath = ./proxy-cert.pem
#clntcertfilepath = ./aa-cert.pem

clntprikeypwd = 
clntprikeyfilepath = ./aa-key.pem

# Space separated list of CA certificate files used to verify certificate used
# in message signature
cacertfilepathlist = ./cacert.pem

uri = http://localhost:5000/AttributeAuthority
userAttCertFilePathList = ./ac.xml