fix: certificates updates and xmlsec-path param removed

src/spid_sp_test/__init__.py

@@ -6,7 +6,7 @@
 
 
 BASE_DIR = Path(__file__).resolve().parent
-__version__ = "1.2.7"
+__version__ = "1.2.8"
 __name__ = "spid_sp_test"
 logger = logging.getLogger(__name__)
 

src/spid_sp_test/authn_request.py

@@ -22,6 +22,7 @@
 from spid_sp_test.idp.settings import BASE as idp_eid, SAML2_IDP_CONFIG
 from spid_sp_test import constants
 from spid_sp_test import BASE_DIR, AbstractSpidCheck
+from spid_sp_test.utils import get_xmlsec1_bin
 
 from saml2.server import Server
 
@@ -382,8 +383,9 @@ def test_xmldsig(self):
                 tmp_file = NamedTemporaryFile(suffix=".xml")
                 tmp_file.write(self.authn_request_decoded)
                 tmp_file.seek(0)
+
                 cmd = (
-                    "xmlsec1 --verify --insecure --id-attr:ID "
+                    f"{get_xmlsec1_bin()} --verify --insecure --id-attr:ID "
                     '"urn:oasis:names:tc:SAML:2.0:protocol:AuthnRequest" '
                     # f'--pubkey-cert-pem {cert_file.name} '
                     # "--X509-skip-strict-checks"

src/spid_sp_test/bin/spid_sp_test

@@ -170,13 +170,6 @@ if __name__ == '__main__':
         help="Debug level, see python logging; defaults to INFO if omitted"
     )
 
-    parser.add_argument(
-        '-xp', '--xmlsec-path',
-        default=get_xmlsec1_bin(),
-        required=False,
-        help="xmlsec1 executable path, eg: /usr/bin/xmlsec1"
-    )
-
     parser.add_argument(
         '--production', '-p',
         action="store_true",
@@ -357,7 +350,6 @@ if __name__ == '__main__':
             authn_request_url=args.authn_url,
             relay_state=authn_check.relay_state,
             template_path=args.template_path,
-            xmlsec_binary=args.xmlsec_path,
             test_names=args.test_names[0] if args.test_names else [],
             test_jsons=args.test_jsons or [],
             attr_json=args.attr_json,

src/spid_sp_test/metadata.py

@@ -1,6 +1,8 @@
 from spid_sp_test.utils import del_ns
 from spid_sp_test import constants
 from spid_sp_test import BASE_DIR, AbstractSpidCheck
+from spid_sp_test.utils import get_xmlsec1_bin
+
 import logging
 import os
 import requests
@@ -279,7 +281,7 @@ def test_xmldsig(self):
         tmp_file.seek(0)
 
         xmlsec_cmd = [
-            "xmlsec1",
+            f"{get_xmlsec1_bin()}",
             "--verify",
             "--insecure",
             "--id-attr:ID",

tests/authn/spid_django_post.html

@@ -12,11 +12,12 @@
       </p>
     </noscript>
     <form action="https://localhost:8080/samlsso" method="post">
-      <input type="hidden" name="SAMLRequest" value="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"/>
+      <input type="hidden" name="SAMLRequest" 
+       value="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"/>
       <input type="hidden" name="RelayState" value="/spid/echo_attributes"/>
       <noscript>
         <input type="submit" value="Continue"/>
       </noscript>
     </form>
   </body>
-</html>
+</html>

tests/certs/README.md

@@ -1,9 +1,21 @@
-spid-compliant-certificates generator \
-    --key-size 3072 \
-    --common-name "A.C.M.E" \
-    --days 365 \
-    --entity-id https://spid.acme.it \
-    --locality-name Roma \
-    --org-id "PA:IT-c_h501" \
-    --org-name "A Company Making Everything" \
-    --sector public
+### public
+
+
+```
+spid-compliant-certificates generator --key-size 3072 --common-name "spid-sp-test" --days 7650 --entity-id https://spid.example.it --locality-name Roma --org-id "PA:IT-c_h501" --org-name "Developers Italia" --sector public
+
+cat crt.pem > ../pub_crt.pem 
+cat key.pem > ../pub_key.pem 
+
+```
+
+### private
+
+```
+spid-compliant-certificates generator --key-size 3072 --common-name "spid-sp-test" --days 7650 --entity-id https://spid.example.it --locality-name Roma --org-id "VATIT-12345678901" --org-name "Developers Italia" --sector private
+
+
+cat crt.pem > ../priv_crt.pem 
+cat key.pem > ../priv_key.pem 
+
+```

tests/certs/priv_crt.pem

@@ -1,36 +1,36 @@
 -----BEGIN CERTIFICATE-----
-MIIGNjCCBJ6gAwIBAgIUSVvDzxN0sIzjdCPHYH6K6uSkWg4wDQYJKoZIhvcNAQEL
-BQAwgY8xJDAiBgNVBAoMG0EgQ29tcGFueSBNYWtpbmcgRXZlcnl0aGluZzEQMA4G
-A1UEAwwHQS5DLk0uRTEdMBsGA1UEUwwUaHR0cHM6Ly9zcGlkLmFjbWUuaXQxGjAY
-BgNVBGEMEVZBVElULTEyMzQ1Njc4OTAxMQswCQYDVQQGEwJJVDENMAsGA1UEBwwE
-Um9tYTAeFw0yMTExMTUyMTUzNDlaFw0yMjExMTUyMTUzNDlaMIGPMSQwIgYDVQQK
-DBtBIENvbXBhbnkgTWFraW5nIEV2ZXJ5dGhpbmcxEDAOBgNVBAMMB0EuQy5NLkUx
-HTAbBgNVBFMMFGh0dHBzOi8vc3BpZC5hY21lLml0MRowGAYDVQRhDBFWQVRJVC0x
-MjM0NTY3ODkwMTELMAkGA1UEBhMCSVQxDTALBgNVBAcMBFJvbWEwggGiMA0GCSqG
-SIb3DQEBAQUAA4IBjwAwggGKAoIBgQCwBWpUNk3PQ6Jo491zYRpTGzd2Mcyq9Fv5
-bQxJwnsDtx4YbRJUCTAyzoYG4cJZNTHs1Z+MH7ZTa41d7danWvEMgFW/A6YulPE3
-vDbgLA+CbL0Hhlv4mr5uN1y9tyr5fgmfNFHRTOb+VVo4W6vj6xNpF6kk/iwUIHwj
-QclebLo6fA7kkKT7XEUDTaLddgnFwMUU9Ehh5qF35VfDAt3yMfyDXz5Zg+K7aLRD
-OfNyIdhuhHCAd0+M1tD96zTsfBIzJwJuQbNc+NcWafS6h6p9o9LKDS1uKxBzZ/z2
-RoGjnWAkEI9gq8N4FFlqJiFtYY1L5pt5DYtJVms7uE5Xi6Z1RKwNEmXmUH1e8z1f
-J6gvULW77C7vbtKwSlIjNgDR6v8vBpRlIfwlopa1McHSA3zLylcSzEjWpLNiC5tw
-dVR9uyTTDwE+xYs8EnT2mnKzuGklKVXZq0blNwDv4/wp10ylFlYi9yTguSDy0voF
-VNcz/dBdFHqDrxlxZVe0tb9r1LdSVAcCAwEAAaOCAYYwggGCMAkGA1UdEwQCMAAw
-DgYDVR0PAQH/BAQDAgbAMHQGA1UdIARtMGswHwYDK0wQMBgwFgYIKwYBBQUHAgIw
-CgwIQWdJRHJvb3QwIAYEK0wQBjAYMBYGCCsGAQUFBwICMAoMCGFnSURjZXJ0MCYG
-BitMEAQDATAcMBoGCCsGAQUFBwICMA4MDGNlcnRfU1BfUHJpdjAdBgNVHQ4EFgQU
-CxnmbMGfcmtGWzADVF4mymLCJawwgc8GA1UdIwSBxzCBxIAUCxnmbMGfcmtGWzAD
-VF4mymLCJayhgZWkgZIwgY8xJDAiBgNVBAoMG0EgQ29tcGFueSBNYWtpbmcgRXZl
-cnl0aGluZzEQMA4GA1UEAwwHQS5DLk0uRTEdMBsGA1UEUwwUaHR0cHM6Ly9zcGlk
-LmFjbWUuaXQxGjAYBgNVBGEMEVZBVElULTEyMzQ1Njc4OTAxMQswCQYDVQQGEwJJ
-VDENMAsGA1UEBwwEUm9tYYIUSVvDzxN0sIzjdCPHYH6K6uSkWg4wDQYJKoZIhvcN
-AQELBQADggGBAGfdn5Wc2/nqDS5qYubrXTgAnVH4dmz0Y5hcHmwfcyI5Z/6QgPdw
-NPBwLA53TJODYMAe2caDiPW4EzYfBGQrLqCnSdtGBtNigepVJrFjj1uMzjLo7QPR
-OAnlLkBNQPsia7yGZoEZZEmQFX1zCJCtPihRoCpVoWuGl6egy7+N6857xCQvq0A1
-QgvQYHslsQ/mT6c2OdDB1XKVtA6oDO3jfgxMDhmcQloQRq3u5zS0vaxXFX9J6Vrq
-rcaCfXBXmVZwAIQO/RhAx0zCyO0XeVg6muLr9m390hllg4OvcPAnsx4fsjyxRyYB
-nmNi1f2rkJPT4l8HN8TRwNBP3QHqyIKvWDtl7Spd4SGFgJjN/x9YwxIMlkl8bf8W
-u++5+6EwbZl0jlZq2HBAtMAp6lDSU8hgHj0MjCRiAeW9Jo/RYas137oJkBCkQ6yT
-JrRc6qmNbE5qiCtX2k454xQv9g7HUWnQDbYEEZNTi4GABfne0x+UC1U4VuqXCxlP
-3BNEaC+KCq4OEw==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 -----END CERTIFICATE-----