Updated Branches: refs/heads/camel-2.12.x 424035b71 -> 03ef590b6 refs/heads/master 2cee030f4 -> e45aa788a
CAMEL-6711: Added unit test. Thanks to Colm for the patch. Project: http://git-wip-us.apache.org/repos/asf/camel/repo Commit: http://git-wip-us.apache.org/repos/asf/camel/commit/e45aa788 Tree: http://git-wip-us.apache.org/repos/asf/camel/tree/e45aa788 Diff: http://git-wip-us.apache.org/repos/asf/camel/diff/e45aa788 Branch: refs/heads/master Commit: e45aa788ac5d26113a971275c072d73a83817e42 Parents: 2cee030 Author: Claus Ibsen <davscl...@apache.org> Authored: Mon Sep 9 18:28:31 2013 +0200 Committer: Claus Ibsen <davscl...@apache.org> Committed: Mon Sep 9 18:28:31 2013 +0200 ---------------------------------------------------------------------- .../xmlsecurity/ECDSASignatureTest.java | 170 +++++++++++++++++++ .../camel/component/xmlsecurity/ecdsa.jks | Bin 0 -> 850 bytes 2 files changed, 170 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/camel/blob/e45aa788/components/camel-xmlsecurity/src/test/java/org/apache/camel/component/xmlsecurity/ECDSASignatureTest.java ---------------------------------------------------------------------- diff --git a/components/camel-xmlsecurity/src/test/java/org/apache/camel/component/xmlsecurity/ECDSASignatureTest.java b/components/camel-xmlsecurity/src/test/java/org/apache/camel/component/xmlsecurity/ECDSASignatureTest.java new file mode 100644 index 0000000..e904b30 --- /dev/null +++ b/components/camel-xmlsecurity/src/test/java/org/apache/camel/component/xmlsecurity/ECDSASignatureTest.java @@ -0,0 +1,170 @@ +/** + * Licensed to the Apache Software Foundation (ASF) under one or more + * contributor license agreements. See the NOTICE file distributed with + * this work for additional information regarding copyright ownership. + * The ASF licenses this file to You under the Apache License, Version 2.0 + * (the "License"); you may not use this file except in compliance with + * the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ +package org.apache.camel.component.xmlsecurity; + +import java.io.InputStream; +import java.lang.reflect.Constructor; +import java.security.KeyStore; +import java.security.PrivateKey; +import java.security.Provider; +import java.security.Security; +import java.security.cert.Certificate; + +import javax.xml.crypto.KeySelector; +import javax.xml.crypto.URIDereferencer; +import javax.xml.crypto.dsig.keyinfo.KeyInfo; +import javax.xml.crypto.dsig.keyinfo.KeyInfoFactory; + +import org.w3c.dom.Node; + +import org.apache.camel.Message; +import org.apache.camel.builder.RouteBuilder; +import org.apache.camel.component.mock.MockEndpoint; +import org.apache.camel.component.xmlsecurity.api.KeyAccessor; +import org.apache.camel.component.xmlsecurity.util.SameDocumentUriDereferencer; +import org.apache.camel.impl.JndiRegistry; +import org.apache.camel.test.junit4.CamelTestSupport; +import org.junit.Before; +import org.junit.Test; + +/** + * Test for the ECDSA algorithm. + */ +public class ECDSASignatureTest extends CamelTestSupport { + + private static String payload = "<?xml version=\"1.0\" encoding=\"UTF-8\"?>" + + "<root xmlns=\"http://test/test\";><test>Test Message</test></root>"; + + private boolean ibmJDK; + + public ECDSASignatureTest() throws Exception { + + // BouncyCastle is required for ECDSA support for JDK 1.6 + if (isJava16() + && Security.getProvider("BC") == null) { + Constructor<?> cons = null; + Class<?> c = Class.forName("org.bouncycastle.jce.provider.BouncyCastleProvider"); + cons = c.getConstructor(new Class[] {}); + + Provider provider = (java.security.Provider)cons.newInstance(); + Security.insertProviderAt(provider, 2); + } + + // This test fails with the IBM JDK + if (isJavaVendor("IBM")) { + ibmJDK = true; + } + } + + @Override + protected JndiRegistry createRegistry() throws Exception { + JndiRegistry registry = super.createRegistry(); + + registry.bind("accessor", getKeyAccessor()); + registry.bind("selector", + KeySelector.singletonKeySelector(getCertificateFromKeyStore().getPublicKey())); + registry.bind("uriDereferencer", getSameDocumentUriDereferencer()); + + return registry; + } + + @Override + protected RouteBuilder[] createRouteBuilders() throws Exception { + if (ibmJDK) { + return new RouteBuilder[] {}; + } + + return new RouteBuilder[] {new RouteBuilder() { + public void configure() throws Exception { + // START SNIPPET: ecdsa signature algorithm + from("direct:ecdsa") + .to("xmlsecurity:sign://ecdsa?keyAccessor=#accessor" + + "&signatureAlgorithm=http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1";) + // .log("Body: + ${body}") + .to("xmlsecurity:verify://ecdsa?keySelector=#selector") + .to("mock:result"); + // END SNIPPET: ecdsa signature algorithm + } + } + + }; + } + + @Test + public void testECDSASHA1() throws Exception { + if (ibmJDK) { + return; + } + setupMock(); + sendBody("direct:ecdsa", payload); + assertMockEndpointsSatisfied(); + } + + private MockEndpoint setupMock() { + return setupMock(payload); + } + + private MockEndpoint setupMock(String payload) { + MockEndpoint mock = getMockEndpoint("mock:result"); + mock.expectedBodiesReceived(payload); + return mock; + } + + @Before + public void setUp() throws Exception { + disableJMX(); + super.setUp(); + } + + private static KeyStore loadKeystore() throws Exception { + KeyStore keyStore = KeyStore.getInstance(KeyStore.getDefaultType()); + InputStream in = + ECDSASignatureTest.class.getResourceAsStream("/org/apache/camel/component/xmlsecurity/ecdsa.jks"); + keyStore.load(in, "security".toCharArray()); + return keyStore; + } + + private static Certificate getCertificateFromKeyStore() throws Exception { + return loadKeystore().getCertificate("ECDSA"); + } + + private static PrivateKey getKeyFromKeystore() throws Exception { + return (PrivateKey) loadKeystore().getKey("ECDSA", "security".toCharArray()); + } + + static KeyAccessor getKeyAccessor() { + KeyAccessor accessor = new KeyAccessor() { + + @Override + public KeySelector getKeySelector(Message message) throws Exception { + return KeySelector.singletonKeySelector(getKeyFromKeystore()); + } + + @Override + public KeyInfo getKeyInfo(Message mess, Node messageBody, + KeyInfoFactory keyInfoFactory) throws Exception { + return null; + } + }; + return accessor; + } + + public static URIDereferencer getSameDocumentUriDereferencer() { + return SameDocumentUriDereferencer.getInstance(); + } + +} \ No newline at end of file http://git-wip-us.apache.org/repos/asf/camel/blob/e45aa788/components/camel-xmlsecurity/src/test/resources/org/apache/camel/component/xmlsecurity/ecdsa.jks ---------------------------------------------------------------------- diff --git a/components/camel-xmlsecurity/src/test/resources/org/apache/camel/component/xmlsecurity/ecdsa.jks b/components/camel-xmlsecurity/src/test/resources/org/apache/camel/component/xmlsecurity/ecdsa.jks new file mode 100644 index 0000000..699e0b7 Binary files /dev/null and b/components/camel-xmlsecurity/src/test/resources/org/apache/camel/component/xmlsecurity/ecdsa.jks differ
