Commit ec193fc
committed
Add a set for responses with a formatted certificate
We recently learned that there are some IdPs that will send back a
certificate that has new line characters (due to the certificate being
folded and formatted to a specific column width). This is a test to
check that and confirm the current version will handle that as expected.
The SAML protocol does not disallow formatted certificates in the
response XML.
The response payload added here with this test looks like below,
```
<?xml version="1.0"?>
<samlp:Response xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
ID="pfxbc826afd-e9fe-d3fb-d874-c4700c3ef0c8" Version="2.0"
IssueInstant="2014-06-04T02:22:02Z"
Destination="http://app.muda.no/sso/consume"
InResponseTo="_fc4a34b0-7efb-012e-caae-782bcb13bb38"><saml:Issuer>https:
//app.onelogin.com/saml2</saml:Issuer><ds:Signature
xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo><ds:CanonicalizationMethod
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<ds:Reference
URI="#pfxbc826afd-e9fe-d3fb-d874-c4700c3ef0c8"><ds:Transforms><ds:Transf
orm
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:T
ransform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds
:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>Iz4Z
Qls3AJZDb3s8vcUX/3Rc+FQ=</ds:DigestValue></ds:Reference></ds:SignedInfo>
<ds:SignatureValue>QhKJmonysP1qmna7S+eE1Lc2rKAjjC2OGrQOgSjPpTocumQ6hYHkz
TSZr7t/I/KTOSvHCQqD1rh4lS0jDP/EuHNACtk9Y7ll2Uygu72L+bFtqZ29Dn9rLkSdGri+I
7HhxL367dfASSh6+sy7WevEdkMfweDQ2AX/sa6BBGgz7TE=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICGzCCAYQCCQCNNcQXom32VDA
NBgkqhkiG9w0BAQUFADBSMQswCQYDVQQGEwJV
UzELMAkGA1UECBMCSU4xFTATBgNVBAcTDEluZGlhbmFwb2xpczERMA8GA1UEChMI
T25lTG9naW4xDDAKBgNVBAsTA0VuZzAeFw0xNDA0MjMxODQxMDFaFw0xNTA0MjMx
ODQxMDFaMFIxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJJTjEVMBMGA1UEBxMMSW5k
aWFuYXBvbGlzMREwDwYDVQQKEwhPbmVMb2dpbjEMMAoGA1UECxMDRW5nMIGfMA0G
CSqGSIb3DQEBAQUAA4GNADCBiQKBgQDo6m+QZvYQ/xL0ElLgupK1QDcYL4f5Pckw
sNgS9pUvV7fzTqCHk8ThLxTk42MQ2McJsOeUJVP728KhymjFCqxgP4VuwRk9rpAl
0+mhy6MPdyjyA6G14jrDWS65ysLchK4t/vwpEDz0SQlEoG1kMzllSm7zZS3XregA
7DjNaUYQqwIDAQABMA0GCSqGSIb3DQEBBQUAA4GBALM2vGCiQ/vm+a6v40+VX2zd
qHA2Q/1vF1ibQzJ54MJCOVWvs+vQXfZFhdm0OPM2IrDU7oqvKPqP6xOAeJK6H0yP
7M4YL3fatSvIYmmfyXC9kt3Svz/NyrHzPhUnJ0ye/sUSXxnzQxwcm/9PwAqrQaA3
QpQkH57ybF/OoryPe+2h</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds
:Signature><samlp:Status><samlp:StatusCode
Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml
:Assertion xmlns:xs="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" Version="2.0"
ID="pfx9516b0f3-4536-10f6-c6fa-9dd523e1498c"
IssueInstant="2014-06-04T02:22:02Z"><saml:Issuer>https://app.onelogin.co
m/saml2</saml:Issuer><saml:Subject><saml:NameID
Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">test@one
login.com</saml:NameID><saml:SubjectConfirmation
Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml:SubjectConfirmation
Data NotOnOrAfter="2030-06-04T02:27:02Z"
Recipient="recipient"/></saml:SubjectConfirmation></saml:Subject><saml:C
onditions NotBefore="2011-06-04T02:17:02Z"
NotOnOrAfter="2030-06-04T02:27:02Z"><saml:AudienceRestriction><saml:Audi
ence>https://someone.example.com/audience</saml:Audience></saml:Audience
Restriction></saml:Conditions><saml:AuthnStatement
AuthnInstant="2014-06-04T02:22:02Z"
SessionNotOnOrAfter="2030-06-05T02:22:02Z"
SessionIndex="_16f570fbc0315007a0355dfea6b3c46c"><saml:AuthnContext><sam
l:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordPr
otectedTransport</saml:AuthnContextClassRef></saml:AuthnContext></saml:A
uthnStatement></saml:Assertion></samlp:Response>
```1 parent 51ebcee commit ec193fc
2 files changed
Lines changed: 16 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
627 | 627 | | |
628 | 628 | | |
629 | 629 | | |
| 630 | + | |
| 631 | + | |
| 632 | + | |
| 633 | + | |
| 634 | + | |
| 635 | + | |
| 636 | + | |
| 637 | + | |
| 638 | + | |
| 639 | + | |
| 640 | + | |
| 641 | + | |
| 642 | + | |
| 643 | + | |
| 644 | + | |
630 | 645 | | |
631 | 646 | | |
632 | 647 | | |
| |||
Lines changed: 1 addition & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
0 commit comments