Ignore:
Timestamp:
04/03/10 10:55:47 (10 years ago)
Author:
pjkersha
Message:

Patched ndg.security.common.AttCert? so that it uses a proxy to ndg.security.common.XMLSec.XMLSecDoc for Python versions >= 2.5.5. This is to allow for PyXML incompatibility with later versions of Python. Disabling XMLSecDoc means that Attribute Certificates are not signed but the NDG Attribute Certificates are no longer used. SAML assertions take their place. NDG AC functionality will be deleted from the trunk.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • TI12-security/branches/ndg-security-1.5.x/ndg_security_test/ndg/security/test/config/attributeauthority/sitea/attributeCertificateLog/ac.xml

    r6637 r6672  
    1 <?xml version="1.0" encoding="utf-8"?> 
    2 <attributeCertificate xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" targetNamespace="urn:ndg:security:attributeCertificate"> 
     1<attributeCertificate targetNamespace="urn:ndg:security:attributeCertificate"> 
    32    <acInfo> 
    43        <version>1.0</version> 
    5         <holder>/CN=server/O=NDG Security Test/OU=WS-Security Unittest</holder> 
    6         <issuer>/CN=AttributeAuthority/O=NDG Security Test/OU=Site A</issuer> 
     4        <holder>/O=NDG Security Test/OU=WS-Security Unittest/CN=server</holder> 
     5        <issuer>/O=NDG Security Test/OU=Site A/CN=AttributeAuthority</issuer> 
    76        <issuerName>Site A</issuerName> 
    87        <issuerSerialNumber>253</issuerSerialNumber>  
    98        <userId>testuser</userId> 
    109        <validity> 
    11             <notBefore>2010 02 24 16 27 53</notBefore>  
    12             <notAfter>2010 02 25 00 27 53</notAfter>  
     10            <notBefore>2010 03 04 10 13 26</notBefore>  
     11            <notAfter>2010 03 04 18 13 26</notAfter>  
    1312        </validity> 
    1413        <attributes> 
     
    3332        <provenance>original</provenance>  
    3433    </acInfo> 
    35 <ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces PrefixList="ds"></ec:InclusiveNamespaces></ds:CanonicalizationMethod><ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"></ds:SignatureMethod><ds:Reference URI=""><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></ds:Transform><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces PrefixList="xmlns"></ec:InclusiveNamespaces></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></ds:DigestMethod><ds:DigestValue>o7ULDHEgL9VF+pxrpxvq6wUZix4=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>oFmYBQ2wTNHU6dGoNEZOMtOV6C9IPRkSoLKCJ9Ktg5vscegd5U3KDuQe2YyEZPlKyN+mlgMsaXOu 
    36 45Ngq1pKsKY2yg7rPRAC4J1gbNapJFmnJ4ro/HIYeiRUXSbWhcdyZOa6v1uDmjZmcUkhCjWjyLkZ 
    37 qq/+s/Yx3cV2Wgl2qNM=</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICBTCCAW6gAwIBAgICAP0wDQYJKoZIhvcNAQEEBQAwLzEMMAoGA1UEChMDTkRH 
    38 MQ0wCwYDVQQLEwRCQURDMRAwDgYDVQQDEwdUZXN0IENBMB4XDTA4MTIxNTE2MzUy 
    39 NFoXDTEzMTIxNDE2MzUyNFowSjEaMBgGA1UEChMRTkRHIFNlY3VyaXR5IFRlc3Qx 
    40 DzANBgNVBAsTBlNpdGUgQTEbMBkGA1UEAxMSQXR0cmlidXRlQXV0aG9yaXR5MIGf 
    41 MA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCntf+hUxFKXx/KY3LXy/RYc/yqhfIL 
    42 M8h95c14n/WdSqh8rK3VxkUu5gujlEgCHafI2AjNZJZqJfKG7ZucYmRcnXbCX1qP 
    43 IGKa+TllbIWdsa5y/IF/Do2AoPMJnTNJ2U1IBfPQXbO5Sd49OvfTi4Cldk89872R 
    44 IuzPmLIDcFydgQIDAQABoxUwEzARBglghkgBhvhCAQEEBAMCBPAwDQYJKoZIhvcN 
    45 AQEEBQADgYEAWD04scBB91kWT8qXKZyN2EZ5nBFqs6REXtI+ddOaZt7VtiaHYMXA 
    46 mcRW/kCw8YgS+Ull+mZpAwpWUU9kR/A5dbiIDDRbxlz4BJCeMgkO/OxU31zmvqqa 
    47 23UyGXPhtaTuo8DG2uSr5XDk6GnJ5sb0WB3UgsRh7V4ryWkStImCSGY=</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature></attributeCertificate> 
     34</attributeCertificate> 
Note: See TracChangeset for help on using the changeset viewer.