Changeset 1215


Ignore:
Timestamp:
16/06/06 16:47:13 (13 years ago)
Author:
pjkersha
Message:

Tests/SecurityClientTest?.py: made role in getTrustedHostInfo test an object attribute to allow easy
configuration.

NDG/AttAuthority.py: Ensure the notBeforeOffset is applied to AC's created even when the not after time
is adjusted to allow for the user's proxy certificate expiry. This should fix ticket #330 ;)

Location:
TI12-security/trunk/python
Files:
3 edited

Legend:

Unmodified
Added
Removed
  • TI12-security/trunk/python/NDG/AttAuthority.py

    r1176 r1215  
    370370                # Adjust the attribute certificate's expiry date time 
    371371                # so that it agrees with that of the proxy certificate 
    372                 attCert.setValidityTime(dtNotAfter=dtUsrProxyNotAfter) 
     372                # ... but also make ensure that the not before skew is still 
     373                # applied 
     374                attCert.setValidityTime(dtNotAfter=dtUsrProxyNotAfter, 
     375                        notBeforeOffset=self.__prop['attCertNotBeforeOff']) 
    373376             
    374377        except Exception, e: 
  • TI12-security/trunk/python/Tests/SecurityClientTest.py

    r1181 r1215  
    6666#            self.userName = 'gabriel' 
    6767            self.userName = 'lawrence' 
     68#            self.trustedHostRequiredRole = 'acsoe' 
     69            self.trustedHostRequiredRole = 'coapec' 
     70         
    6871        except Exception, e: 
    6972            self.fail(str(e)) 
     
    202205#        import pdb 
    203206#        pdb.set_trace() 
    204         role = 'acsoe' 
    205207        try: 
    206208            trustedHosts = self.aaClnt.getTrustedHostInfo( 
    207                                        role=role, 
     209                                       role=self.trustedHostRequiredRole, 
    208210                                       clntPriKeyPwd=self.__clntPriKeyPwd) 
    209211            print trustedHosts 
Note: See TracChangeset for help on using the changeset viewer.