diff --git a/Dockerfile b/Dockerfile index 170f632..eb7624e 100644 --- a/Dockerfile +++ b/Dockerfile @@ -6,11 +6,11 @@ FROM centos:centos7 # ##tomcat \ ENV TOMCAT_MAJOR=9 \ - TOMCAT_VERSION=9.0.12 \ + TOMCAT_VERSION=9.0.16 \ ##shib-idp \ - VERSION=3.3.3 \ + VERSION=3.4.3 \ ##TIER \ - TIERVERSION=181001 \ + TIERVERSION=20190201 \ ################## \ ### OTHER VARS ### \ ################## \ diff --git a/Jenkinsfile b/Jenkinsfile index bb501f6..9ea40c4 100644 --- a/Jenkinsfile +++ b/Jenkinsfile @@ -25,6 +25,7 @@ node('docker') { dir('tmp'){ git([ url: "https://github.internet2.edu/docker/util.git", credentialsId: "jenkins-github-access-token" ]) + sh 'rm -rf ../bin/*' sh 'mv ./bin/* ../bin/.' } sh 'rm -rf tmp' @@ -98,7 +99,7 @@ def imagename() { def handleError(String message){ echo "${message}" currentBuild.setResult("FAILED") - slackSend color: 'danger', message: "${message}" + slackSend color: 'danger', message: "${message} (<${env.BUILD_URL}|Open>)" sh 'exit 1' } diff --git a/container_files/idp/idp.installer.properties b/container_files/idp/idp.installer.properties index dab46e4..321a842 100644 --- a/container_files/idp/idp.installer.properties +++ b/container_files/idp/idp.installer.properties @@ -1,4 +1,4 @@ -idp.src.dir=/tmp/shibboleth/shibboleth-identity-provider-3.3.3 +idp.src.dir=/tmp/shibboleth/shibboleth-identity-provider-3.4.3 idp.target.dir=/opt/shibboleth-idp idp.host.name=idp.example.org idp.sealer.password=changeit diff --git a/test-compose/compose.sh b/test-compose/compose.sh index 435144b..28d6353 100755 --- a/test-compose/compose.sh +++ b/test-compose/compose.sh @@ -5,10 +5,4 @@ echo "" echo "If everything above was successful, your IdP metadata can be retreived with this command (after a minute or two):" echo " curl -k https://127.0.0.1/idp/shibboleth" echo "" -echo "By default, this test IdP is pre-integrated with the samltest.id testing service." -echo "" -echo "If you are testing the default test config and have port 443 open," -echo " map your IP to idp.example.edu in your hosts file," -echo " then proceed to https://samltest.id/start-idp-test to test this IdP test instance." -echo "" diff --git a/test-compose/data/Dockerfile b/test-compose/data/Dockerfile index a175fb8..c876a2c 100644 --- a/test-compose/data/Dockerfile +++ b/test-compose/data/Dockerfile @@ -1,14 +1,20 @@ -FROM tier/shib-idp:latest +FROM centos:centos7 LABEL author="tier-packaging@internet2.edu " - -COPY container_files/seed-data/ /seed-data/ -RUN yum install -y epel-release \ - && yum update -y \ - && yum install -y 389-ds-base 389-admin 389-adminutil \ - && yum clean all \ - && rm -rf /var/cache/yum +# Set UTC Timezone & Networking +RUN ln -sf /usr/share/zoneinfo/UTC /etc/localtime \ + && echo "NETWORKING=yes" > /etc/sysconfig/network + +# Install base deps +RUN rm -fr /var/cache/yum/* && yum clean all && yum -y update && yum -y install --setopt=tsflags=nodocs epel-release && \ + yum -y install 389-ds-base 389-admin 389-adminutil net-tools wget curl tar unzip mlocate logrotate strace telnet man unzip vim wget rsyslog cronie krb5-workstation openssl-devel wget supervisor && \ + yum -y clean all && \ + mkdir -p /opt/tier && \ +# Install Trusted Certificates + update-ca-trust force-enable + +COPY container_files/seed-data/ /seed-data/ RUN useradd ldapadmin \ && rm -fr /var/lock /usr/lib/systemd/system \ diff --git a/test-compose/decompose.sh b/test-compose/decompose.sh index 3139530..2472301 100755 --- a/test-compose/decompose.sh +++ b/test-compose/decompose.sh @@ -1,6 +1,11 @@ #!/bin/bash -read -r -p "Are you sure you want to remove the test idp and data images/containers? [y/N] " response +if [ "$1" == '-y' ]; then + response="Y" +else + read -r -p "Are you sure you want to remove the test idp and data images/containers? [y/N] " response +fi + if [[ "$response" =~ ^([yY][eE][sS]|[yY])+$ ]]; then #kill, if running, and remove idp container docker ps | grep test-compose_idp &>/dev/null @@ -38,9 +43,29 @@ if [[ "$response" =~ ^([yY][eE][sS]|[yY])+$ ]]; then fi fi + #kill, if running, and remove sp container + docker ps | grep test-compose_sp &>/dev/null + if [ $? == '0' ]; then + #get container ID + export contid2=$(docker ps | grep test-compose_sp | cut -f 1 -d ' ') + docker kill ${contid2} &>/dev/null + docker rm ${contid2} &>/dev/null + else + #check if an old container is present, rm if needed + docker container ls -a | grep test-compose_sp &>/dev/null + if [ $? == '0' ]; then + #get container ID + export contid2=$(docker container ls -a | grep test-compose_sp | cut -f 1 -d ' ') + docker kill ${contid2} &>/dev/null + docker rm ${contid2} &>/dev/null + fi + fi + + #remove images docker rmi -f test-compose_idp &>/dev/null docker rmi -f test-compose_data &>/dev/null + docker rmi -f test-compose_sp &>/dev/null else echo "Terminating..." diff --git a/test-compose/docker-compose.yml b/test-compose/docker-compose.yml index ef12cd2..43bc9cf 100644 --- a/test-compose/docker-compose.yml +++ b/test-compose/docker-compose.yml @@ -6,15 +6,15 @@ services: build: context: ./idp/ args: - TOMCFG: ./container_files/shib-idp/config/tomcat - TOMCERT: ./container_files/shib-idp/credentials/tomcat - TOMWWWROOT: ./container_files/shib-idp/wwwroot - SHBCFG: ./container_files/shib-idp/config/shib-idp/conf - SHBCREDS: ./container_files/shib-idp/credentials/shib-idp - SHBVIEWS: ./container_files/shib-idp/config/shib-idp/views - SHBEDWAPP: ./container_files/shib-idp/config/shib-idp/edit-webapp - SHBMSGS: ./container_files/shib-idp/config/shib-idp/messages - SHBMD: ./container_files/shib-idp/config/shib-idp/metadata + TOMCFG: ./container_files/config/tomcat + TOMCERT: ./container_files/credentials/tomcat + TOMWWWROOT: ./container_files/wwwroot + SHBCFG: ./container_files/config/shib-idp/conf + SHBCREDS: ./container_files/credentials/shib-idp + SHBVIEWS: ./container_files/config/shib-idp/views + SHBEDWAPP: ./container_files/config/shib-idp/edit-webapp + SHBMSGS: ./container_files/config/shib-idp/messages + SHBMD: ./container_files/config/shib-idp/metadata depends_on: - data networks: @@ -36,6 +36,17 @@ services: - shibidp_ldap:/var/lib/dirsrv + sp: + build: ./sp/ + expose: + - "8443" + networks: + - front + - back + ports: + - "8443:8443" + + networks: front: driver: bridge diff --git a/test-compose/idp/Dockerfile b/test-compose/idp/Dockerfile index d851db6..fa8ed18 100644 --- a/test-compose/idp/Dockerfile +++ b/test-compose/idp/Dockerfile @@ -1,4 +1,4 @@ -FROM tier/shib-idp:latest +FROM tier/shib-idp:3.4.2_181201 # The build args below can be used at build-time to tell the build process where to find your config files. This is for a completely burned-in config. ARG TOMCFG=config/tomcat diff --git a/test-compose/idp/compose.sh b/test-compose/idp/compose.sh new file mode 100755 index 0000000..6c768d5 --- /dev/null +++ b/test-compose/idp/compose.sh @@ -0,0 +1,11 @@ +#!/bin/sh +docker-compose up --build -d + +if [ $? == '0' ]; then + echo "" + echo "If everything above was successful, your IdP metadata can be retreived with this command (after a minute or two):" + echo " curl -k -s https://127.0.0.1/idp/shibboleth" + echo "" +else + echo "An error was encountered." +fi diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/access-control.xml b/test-compose/idp/container_files/config/shib-idp/conf/access-control.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/access-control.xml rename to test-compose/idp/container_files/config/shib-idp/conf/access-control.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/admin/general-admin.xml b/test-compose/idp/container_files/config/shib-idp/conf/admin/general-admin.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/admin/general-admin.xml rename to test-compose/idp/container_files/config/shib-idp/conf/admin/general-admin.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/admin/metrics.xml b/test-compose/idp/container_files/config/shib-idp/conf/admin/metrics.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/admin/metrics.xml rename to test-compose/idp/container_files/config/shib-idp/conf/admin/metrics.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/attribute-filter.xml b/test-compose/idp/container_files/config/shib-idp/conf/attribute-filter.xml similarity index 96% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/attribute-filter.xml rename to test-compose/idp/container_files/config/shib-idp/conf/attribute-filter.xml index 678e14d..8e43db8 100644 --- a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/attribute-filter.xml +++ b/test-compose/idp/container_files/config/shib-idp/conf/attribute-filter.xml @@ -97,9 +97,9 @@ - - - + + + @@ -113,7 +113,6 @@ - + - diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/attribute-resolver-default.xml b/test-compose/idp/container_files/config/shib-idp/conf/attribute-resolver-default.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/attribute-resolver-default.xml rename to test-compose/idp/container_files/config/shib-idp/conf/attribute-resolver-default.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/attribute-resolver-full.xml b/test-compose/idp/container_files/config/shib-idp/conf/attribute-resolver-full.xml similarity index 69% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/attribute-resolver-full.xml rename to test-compose/idp/container_files/config/shib-idp/conf/attribute-resolver-full.xml index 4681b64..32647a3 100644 --- a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/attribute-resolver-full.xml +++ b/test-compose/idp/container_files/config/shib-idp/conf/attribute-resolver-full.xml @@ -15,10 +15,8 @@ --> + xsi:schemaLocation="urn:mace:shibboleth:2.0:resolver http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd"> @@ -26,116 +24,117 @@ - - + + + + + + - + + + + + diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/attribute-resolver-ldap.xml b/test-compose/idp/container_files/config/shib-idp/conf/attribute-resolver-ldap.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/attribute-resolver-ldap.xml rename to test-compose/idp/container_files/config/shib-idp/conf/attribute-resolver-ldap.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/attribute-resolver.xml b/test-compose/idp/container_files/config/shib-idp/conf/attribute-resolver.xml similarity index 78% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/attribute-resolver.xml rename to test-compose/idp/container_files/config/shib-idp/conf/attribute-resolver.xml index e1396dc..fb963b2 100644 --- a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/attribute-resolver.xml +++ b/test-compose/idp/container_files/config/shib-idp/conf/attribute-resolver.xml @@ -25,217 +25,217 @@ - - + + - - + + - - + + - - + + - - + + - - + + - - + + - - + + - - + + - - + + - - + + - - + + - - + + - - + + - - + + - - + + - - + + - - + + - - + + - - + + - - + + - - + + - - + + - - + + - - + + - - + + - - + + - - + + - - + + - - + + - + - - + + - - + + - - + + - - + + diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/audit.xml b/test-compose/idp/container_files/config/shib-idp/conf/audit.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/audit.xml rename to test-compose/idp/container_files/config/shib-idp/conf/audit.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/authn-comparison.xml b/test-compose/idp/container_files/config/shib-idp/conf/authn/authn-comparison.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/authn-comparison.xml rename to test-compose/idp/container_files/config/shib-idp/conf/authn/authn-comparison.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/authn-events-flow.xml b/test-compose/idp/container_files/config/shib-idp/conf/authn/authn-events-flow.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/authn-events-flow.xml rename to test-compose/idp/container_files/config/shib-idp/conf/authn/authn-events-flow.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/duo-authn-config.xml b/test-compose/idp/container_files/config/shib-idp/conf/authn/duo-authn-config.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/duo-authn-config.xml rename to test-compose/idp/container_files/config/shib-idp/conf/authn/duo-authn-config.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/duo.properties b/test-compose/idp/container_files/config/shib-idp/conf/authn/duo.properties similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/duo.properties rename to test-compose/idp/container_files/config/shib-idp/conf/authn/duo.properties diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/external-authn-config.xml b/test-compose/idp/container_files/config/shib-idp/conf/authn/external-authn-config.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/external-authn-config.xml rename to test-compose/idp/container_files/config/shib-idp/conf/authn/external-authn-config.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/general-authn.xml b/test-compose/idp/container_files/config/shib-idp/conf/authn/general-authn.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/general-authn.xml rename to test-compose/idp/container_files/config/shib-idp/conf/authn/general-authn.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/ipaddress-authn-config.xml b/test-compose/idp/container_files/config/shib-idp/conf/authn/ipaddress-authn-config.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/ipaddress-authn-config.xml rename to test-compose/idp/container_files/config/shib-idp/conf/authn/ipaddress-authn-config.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/jaas-authn-config.xml b/test-compose/idp/container_files/config/shib-idp/conf/authn/jaas-authn-config.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/jaas-authn-config.xml rename to test-compose/idp/container_files/config/shib-idp/conf/authn/jaas-authn-config.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/jaas.config b/test-compose/idp/container_files/config/shib-idp/conf/authn/jaas.config similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/jaas.config rename to test-compose/idp/container_files/config/shib-idp/conf/authn/jaas.config diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/krb5-authn-config.xml b/test-compose/idp/container_files/config/shib-idp/conf/authn/krb5-authn-config.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/krb5-authn-config.xml rename to test-compose/idp/container_files/config/shib-idp/conf/authn/krb5-authn-config.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/ldap-authn-config.xml b/test-compose/idp/container_files/config/shib-idp/conf/authn/ldap-authn-config.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/ldap-authn-config.xml rename to test-compose/idp/container_files/config/shib-idp/conf/authn/ldap-authn-config.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/mfa-authn-config.xml b/test-compose/idp/container_files/config/shib-idp/conf/authn/mfa-authn-config.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/mfa-authn-config.xml rename to test-compose/idp/container_files/config/shib-idp/conf/authn/mfa-authn-config.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/password-authn-config.xml b/test-compose/idp/container_files/config/shib-idp/conf/authn/password-authn-config.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/password-authn-config.xml rename to test-compose/idp/container_files/config/shib-idp/conf/authn/password-authn-config.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/remoteuser-authn-config.xml b/test-compose/idp/container_files/config/shib-idp/conf/authn/remoteuser-authn-config.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/remoteuser-authn-config.xml rename to test-compose/idp/container_files/config/shib-idp/conf/authn/remoteuser-authn-config.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/remoteuser-internal-authn-config.xml b/test-compose/idp/container_files/config/shib-idp/conf/authn/remoteuser-internal-authn-config.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/remoteuser-internal-authn-config.xml rename to test-compose/idp/container_files/config/shib-idp/conf/authn/remoteuser-internal-authn-config.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/spnego-authn-config.xml b/test-compose/idp/container_files/config/shib-idp/conf/authn/spnego-authn-config.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/spnego-authn-config.xml rename to test-compose/idp/container_files/config/shib-idp/conf/authn/spnego-authn-config.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/x509-authn-config.xml b/test-compose/idp/container_files/config/shib-idp/conf/authn/x509-authn-config.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/x509-authn-config.xml rename to test-compose/idp/container_files/config/shib-idp/conf/authn/x509-authn-config.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/x509-internal-authn-config.xml b/test-compose/idp/container_files/config/shib-idp/conf/authn/x509-internal-authn-config.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/authn/x509-internal-authn-config.xml rename to test-compose/idp/container_files/config/shib-idp/conf/authn/x509-internal-authn-config.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/c14n/attribute-sourced-subject-c14n-config.xml b/test-compose/idp/container_files/config/shib-idp/conf/c14n/attribute-sourced-subject-c14n-config.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/c14n/attribute-sourced-subject-c14n-config.xml rename to test-compose/idp/container_files/config/shib-idp/conf/c14n/attribute-sourced-subject-c14n-config.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/c14n/simple-subject-c14n-config.xml b/test-compose/idp/container_files/config/shib-idp/conf/c14n/simple-subject-c14n-config.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/c14n/simple-subject-c14n-config.xml rename to test-compose/idp/container_files/config/shib-idp/conf/c14n/simple-subject-c14n-config.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/c14n/subject-c14n-events-flow.xml b/test-compose/idp/container_files/config/shib-idp/conf/c14n/subject-c14n-events-flow.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/c14n/subject-c14n-events-flow.xml rename to test-compose/idp/container_files/config/shib-idp/conf/c14n/subject-c14n-events-flow.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/c14n/subject-c14n.xml b/test-compose/idp/container_files/config/shib-idp/conf/c14n/subject-c14n.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/c14n/subject-c14n.xml rename to test-compose/idp/container_files/config/shib-idp/conf/c14n/subject-c14n.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/c14n/x500-subject-c14n-config.xml b/test-compose/idp/container_files/config/shib-idp/conf/c14n/x500-subject-c14n-config.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/c14n/x500-subject-c14n-config.xml rename to test-compose/idp/container_files/config/shib-idp/conf/c14n/x500-subject-c14n-config.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/cas-protocol.xml b/test-compose/idp/container_files/config/shib-idp/conf/cas-protocol.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/cas-protocol.xml rename to test-compose/idp/container_files/config/shib-idp/conf/cas-protocol.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/credentials.xml b/test-compose/idp/container_files/config/shib-idp/conf/credentials.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/credentials.xml rename to test-compose/idp/container_files/config/shib-idp/conf/credentials.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/errors.xml b/test-compose/idp/container_files/config/shib-idp/conf/errors.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/errors.xml rename to test-compose/idp/container_files/config/shib-idp/conf/errors.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/global.xml b/test-compose/idp/container_files/config/shib-idp/conf/global.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/global.xml rename to test-compose/idp/container_files/config/shib-idp/conf/global.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/idp.properties b/test-compose/idp/container_files/config/shib-idp/conf/idp.properties similarity index 98% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/idp.properties rename to test-compose/idp/container_files/config/shib-idp/conf/idp.properties index 490d00f..ba38100 100644 --- a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/idp.properties +++ b/test-compose/idp/container_files/config/shib-idp/conf/idp.properties @@ -8,7 +8,7 @@ idp.entityID= https://idp.example.edu/idp/shibboleth idp.scope= example.edu # General cookie properties (maxAge only applies to persistent cookies) -#idp.cookie.secure = false +idp.cookie.secure = true #idp.cookie.httpOnly = true #idp.cookie.domain = #idp.cookie.path = @@ -26,8 +26,8 @@ idp.scope= example.edu #idp.sealer.aliasBase = secret idp.sealer.storeResource= %{idp.home}/credentials/sealer.jks idp.sealer.versionResource= %{idp.home}/credentials/sealer.kver -idp.sealer.storePassword= ce472e68-f433-4a77-aad2-b8697670158a -idp.sealer.keyPassword= ce472e68-f433-4a77-aad2-b8697670158a +idp.sealer.storePassword= 90fa668e-ce0f-45e7-82f1-fa4bd0273b51 +idp.sealer.keyPassword= 90fa668e-ce0f-45e7-82f1-fa4bd0273b51 # Settings for public/private signing and encryption key(s) # During decryption key rollover, point the ".2" properties at a second diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/idp.properties.dist b/test-compose/idp/container_files/config/shib-idp/conf/idp.properties.dist similarity index 99% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/idp.properties.dist rename to test-compose/idp/container_files/config/shib-idp/conf/idp.properties.dist index d7cfea7..2c5dcc0 100644 --- a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/idp.properties.dist +++ b/test-compose/idp/container_files/config/shib-idp/conf/idp.properties.dist @@ -8,7 +8,7 @@ idp.entityID= https://example.org/idp/shibboleth idp.scope= example.org # General cookie properties (maxAge only applies to persistent cookies) -#idp.cookie.secure = false +idp.cookie.secure = true #idp.cookie.httpOnly = true #idp.cookie.domain = #idp.cookie.path = diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/intercept/consent-intercept-config.xml b/test-compose/idp/container_files/config/shib-idp/conf/intercept/consent-intercept-config.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/intercept/consent-intercept-config.xml rename to test-compose/idp/container_files/config/shib-idp/conf/intercept/consent-intercept-config.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/intercept/context-check-intercept-config.xml b/test-compose/idp/container_files/config/shib-idp/conf/intercept/context-check-intercept-config.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/intercept/context-check-intercept-config.xml rename to test-compose/idp/container_files/config/shib-idp/conf/intercept/context-check-intercept-config.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/intercept/expiring-password-intercept-config.xml b/test-compose/idp/container_files/config/shib-idp/conf/intercept/expiring-password-intercept-config.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/intercept/expiring-password-intercept-config.xml rename to test-compose/idp/container_files/config/shib-idp/conf/intercept/expiring-password-intercept-config.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/intercept/intercept-events-flow.xml b/test-compose/idp/container_files/config/shib-idp/conf/intercept/intercept-events-flow.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/intercept/intercept-events-flow.xml rename to test-compose/idp/container_files/config/shib-idp/conf/intercept/intercept-events-flow.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/intercept/profile-intercept.xml b/test-compose/idp/container_files/config/shib-idp/conf/intercept/profile-intercept.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/intercept/profile-intercept.xml rename to test-compose/idp/container_files/config/shib-idp/conf/intercept/profile-intercept.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/ldap.properties b/test-compose/idp/container_files/config/shib-idp/conf/ldap.properties similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/ldap.properties rename to test-compose/idp/container_files/config/shib-idp/conf/ldap.properties diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/ldap.properties.dist b/test-compose/idp/container_files/config/shib-idp/conf/ldap.properties.dist similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/ldap.properties.dist rename to test-compose/idp/container_files/config/shib-idp/conf/ldap.properties.dist diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/logback.xml b/test-compose/idp/container_files/config/shib-idp/conf/logback.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/logback.xml rename to test-compose/idp/container_files/config/shib-idp/conf/logback.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/metadata-providers.xml b/test-compose/idp/container_files/config/shib-idp/conf/metadata-providers.xml similarity index 93% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/metadata-providers.xml rename to test-compose/idp/container_files/config/shib-idp/conf/metadata-providers.xml index 80178c4..6daa0ca 100644 --- a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/metadata-providers.xml +++ b/test-compose/idp/container_files/config/shib-idp/conf/metadata-providers.xml @@ -62,15 +62,6 @@ --> - - - - - - + + + diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/mvc-beans.xml b/test-compose/idp/container_files/config/shib-idp/conf/mvc-beans.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/mvc-beans.xml rename to test-compose/idp/container_files/config/shib-idp/conf/mvc-beans.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/relying-party.xml b/test-compose/idp/container_files/config/shib-idp/conf/relying-party.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/relying-party.xml rename to test-compose/idp/container_files/config/shib-idp/conf/relying-party.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/saml-nameid.properties b/test-compose/idp/container_files/config/shib-idp/conf/saml-nameid.properties similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/saml-nameid.properties rename to test-compose/idp/container_files/config/shib-idp/conf/saml-nameid.properties diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/saml-nameid.xml b/test-compose/idp/container_files/config/shib-idp/conf/saml-nameid.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/saml-nameid.xml rename to test-compose/idp/container_files/config/shib-idp/conf/saml-nameid.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/services.properties b/test-compose/idp/container_files/config/shib-idp/conf/services.properties similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/services.properties rename to test-compose/idp/container_files/config/shib-idp/conf/services.properties diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/services.xml b/test-compose/idp/container_files/config/shib-idp/conf/services.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/services.xml rename to test-compose/idp/container_files/config/shib-idp/conf/services.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/conf/session-manager.xml b/test-compose/idp/container_files/config/shib-idp/conf/session-manager.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/conf/session-manager.xml rename to test-compose/idp/container_files/config/shib-idp/conf/session-manager.xml diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/edit-webapp/css/consent.css b/test-compose/idp/container_files/config/shib-idp/edit-webapp/css/consent.css similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/edit-webapp/css/consent.css rename to test-compose/idp/container_files/config/shib-idp/edit-webapp/css/consent.css diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/edit-webapp/css/logout.css b/test-compose/idp/container_files/config/shib-idp/edit-webapp/css/logout.css similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/edit-webapp/css/logout.css rename to test-compose/idp/container_files/config/shib-idp/edit-webapp/css/logout.css diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/edit-webapp/css/main.css b/test-compose/idp/container_files/config/shib-idp/edit-webapp/css/main.css similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/edit-webapp/css/main.css rename to test-compose/idp/container_files/config/shib-idp/edit-webapp/css/main.css diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/edit-webapp/images/dummylogo-mobile.png b/test-compose/idp/container_files/config/shib-idp/edit-webapp/images/dummylogo-mobile.png similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/edit-webapp/images/dummylogo-mobile.png rename to test-compose/idp/container_files/config/shib-idp/edit-webapp/images/dummylogo-mobile.png diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/edit-webapp/images/dummylogo.png b/test-compose/idp/container_files/config/shib-idp/edit-webapp/images/dummylogo.png similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/edit-webapp/images/dummylogo.png rename to test-compose/idp/container_files/config/shib-idp/edit-webapp/images/dummylogo.png diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/edit-webapp/images/failure-32x32.png b/test-compose/idp/container_files/config/shib-idp/edit-webapp/images/failure-32x32.png similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/edit-webapp/images/failure-32x32.png rename to test-compose/idp/container_files/config/shib-idp/edit-webapp/images/failure-32x32.png diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/edit-webapp/images/success-32x32.png b/test-compose/idp/container_files/config/shib-idp/edit-webapp/images/success-32x32.png similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/edit-webapp/images/success-32x32.png rename to test-compose/idp/container_files/config/shib-idp/edit-webapp/images/success-32x32.png diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/messages/messages.properties b/test-compose/idp/container_files/config/shib-idp/messages/messages.properties similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/messages/messages.properties rename to test-compose/idp/container_files/config/shib-idp/messages/messages.properties diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/metadata/idp-metadata.xml b/test-compose/idp/container_files/config/shib-idp/metadata/idp-metadata.xml similarity index 56% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/metadata/idp-metadata.xml rename to test-compose/idp/container_files/config/shib-idp/metadata/idp-metadata.xml index 2211379..af11f89 100644 --- a/test-compose/idp/container_files/shib-idp/config/shib-idp/metadata/idp-metadata.xml +++ b/test-compose/idp/container_files/config/shib-idp/metadata/idp-metadata.xml @@ -7,23 +7,23 @@ -MIIDHDCCAgSgAwIBAgIJAIb+Cd4BoYJmMA0GCSqGSIb3DQEBCwUAMBoxGDAWBgNV -BAMMD2lkcC5leGFtcGxlLmVkdTAeFw0xODEwMDgyMTUwNTlaFw0yMzEwMDcyMTUw -NTlaMBoxGDAWBgNVBAMMD2lkcC5leGFtcGxlLmVkdTCCASIwDQYJKoZIhvcNAQEB -BQADggEPADCCAQoCggEBALPi8zCdYWjcTeWGLvCJrLHJ8kKAMx/U+ol468h+gWkW -6H9CbV02Bucmnuf7We66NPIhn3+ZjF6svBvS+wflOyBSOqo/BddH0t/CrDI3L4wv -LkTwogqVcUSubdUaHYVxitD8YyZGozg4l6NOKy2D1bFzzM8qB5Mdp2zW5k5Dbnza -7JTiSb/a6ILsugszhXA3LdA3NkzhSnWH5M8VbD22VwiWeWVuTLhhShdjWLT0FwMd -e/HeW3AGePN0/p4lH9excaMOHyxvJ2V89S3HPSZxLEjuo4TqQUqXdt0aeQcX3slj -w5jkZk/7N7LuEw+UIRIjOXIvZWv6f6QmH8j0kaFFMaUCAwEAAaNlMGMwQgYDVR0R +MIIDHDCCAgSgAwIBAgIJAPEnL5jgbeVoMA0GCSqGSIb3DQEBCwUAMBoxGDAWBgNV +BAMMD2lkcC5leGFtcGxlLmVkdTAeFw0xODEwMTAyMDM1NDBaFw0yMzEwMDkyMDM1 +NDBaMBoxGDAWBgNVBAMMD2lkcC5leGFtcGxlLmVkdTCCASIwDQYJKoZIhvcNAQEB +BQADggEPADCCAQoCggEBAKwTrvQhmFX3SUNgJAhQ/YV0UX56Rt53mwbiKuH+Ez83 +7z6XRynBVsfzHfbWe0IpNKx5mIr84dfbGhQKQBEKzQuek7ihW3J6PIVZN1A3icZZ +B9i7gow902bT0ZfRG8QW49gl7pk3ASutPcO9Dq5Xc/AqWr3OSO/Pei0yBtTdzG3b +rm0u0gbj3P2tjt7BN77wIB+yjJsND3ITtP0MFXIJxLTlty8thwqQOAOAYcF+rhC5 +znnBLsRNo0E57PtzZs8i/BpEX2uPTxpEyvlU1vtyxcKUiHtK5ZjOsDEkS2rEualr ++FILYg/Oxw1gi0+mNO1a94Ft+UoLiREztq6MQt8OK98CAwEAAaNlMGMwQgYDVR0R BDswOYIPaWRwLmV4YW1wbGUuZWR1hiZodHRwczovL2lkcC5leGFtcGxlLmVkdS9p -ZHAvc2hpYmJvbGV0aDAdBgNVHQ4EFgQUCSovOIIkWFhQuaIudr7S361IT5AwDQYJ -KoZIhvcNAQELBQADggEBAHA8ov+paom/K9z4ssKRLb10zkXgDupziGY2rD4QAZ6U -cDF7nlJX0uaClimhJgwbagb64OVNwQ49RyzzLSLMQtrER1wEl+n2qs2HtPlGVlPk -9dtYXWL3gUrdGzniaUPP2tKMwtAgB3vh2NFHwQ57Lzyc7B8jNzcF3NtlckYidth/ -c5TjjIcoJMeRJtJsjAOYOUzMpH92qc853FM18FqjRi/lQEc1Sfn7j60vtpsfdlMC -djZJO1Ru8QqkNC1d/ZBVAxO+R7mN1FzmRDCuNlwredwaAePDrSr5MKv3Cel/I0V6 -D+x6OWB7iBrgi8kIf8j/pVmLqUxy2F0rnJkL8ooJM2o= +ZHAvc2hpYmJvbGV0aDAdBgNVHQ4EFgQU3ZJ8oHkmlgPtZuZAxnzONccPsb8wDQYJ +KoZIhvcNAQELBQADggEBAIJ4oZKSMGpF8J3qdfjLZGkc3iVbu/eiE1MD77no0oCz +nelY0CNUBuFJk1Xv+Bv0fW0cVugtMPz4xi7zv0zkpS2IVxpPZWBosuVabUD9k+V4 +iN5woJdO7e2KRGvhlWmbkmoZUvhygDe0u0vblNfLzDwFQvxHXiWG//P7SanoQrjP +dE8U21tYz+EFm6s5TvHxVhr9id8c+UacAFCpAtzUB+J8K1abx05XlKsySflkOQV9 +JbM4zOy5gXSI5dY9dGUF77g0muyC+jAhIhLSt/7v3vJgvBurrxPoeBFXOU3D+siT +VZlKtYzYjJhVqXx1vKrWEE1hkpqm+iYgZe4MvgcdswY= diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/metadata/localCopyFromInCommon.xml b/test-compose/idp/container_files/config/shib-idp/metadata/localCopyFromInCommon.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/metadata/localCopyFromInCommon.xml rename to test-compose/idp/container_files/config/shib-idp/metadata/localCopyFromInCommon.xml diff --git a/test-compose/idp/container_files/config/shib-idp/metadata/testsp-metadata.xml b/test-compose/idp/container_files/config/shib-idp/metadata/testsp-metadata.xml new file mode 100644 index 0000000..a2e9026 --- /dev/null +++ b/test-compose/idp/container_files/config/shib-idp/metadata/testsp-metadata.xml @@ -0,0 +1,112 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 0242dfc3fa98 + + CN=0242dfc3fa98 + +MIID/TCCAmWgAwIBAgIJAJZqOL69C6nRMA0GCSqGSIb3DQEBCwUAMB0xGzAZBgNV +BAMTEnNwdGVzdC5leGFtcGxlLmVkdTAeFw0xODEyMjAyMjM4NDhaFw0yODEyMTcy +MjM4NDhaMB0xGzAZBgNVBAMTEnNwdGVzdC5leGFtcGxlLmVkdTCCAaIwDQYJKoZI +hvcNAQEBBQADggGPADCCAYoCggGBANJ1OC6Ql4te2/7PArBkuM/EF1NcQILv7bJa +ecJDGYBVoWgL0a2KQ0XMESusgkVmVjj/jcbtvwIiXI/6BEu815OF6eSZIwxWdQBp +eKbrWTbt07GiGgdXoXot6oMs5a9YXuWLt8pTXrFVMmwXU+ZfWJtuU8OIgm9esAEI +QBHvDVOJtdKdBMWJFa5nUzkaVvA0Fr8r+/FHUvSCnlKOMaUIfTgtoS9AQnaRQ1dV +l39Z2KAh87JYvRIxvbaPaKgar2eGQ+PQD8rqsB5K5wgnADAxYM9Vo0YXSpPH+Fvw +N3EJgURUSEY2E0Jx8JOx368ERNLXx3kfnRxCiZRDkTZF9WP6lBnDwc1WXRwpVCDT +RnF+SIh6IC1Bj/qpkpCD3nri7tycejoeAtVj1YZHWarf9iqdcLYOAWmeyGbFl3hj +v6qcXnIfy1KyHLCAdIrg1TymLovXXKW09pEbVLdsHmLz0h+DxPs4FsinK2AQBMn1 +6u8BJJ/+spCzIQ2QNPcGORh6XemBpQIDAQABo0AwPjAdBgNVHREEFjAUghJzcHRl +c3QuZXhhbXBsZS5lZHUwHQYDVR0OBBYEFPC8rkASWHQxrtCQ4wwtnsJRy6K5MA0G +CSqGSIb3DQEBCwUAA4IBgQCks2nY7YzdIKV02NHD9STWD3yPtEwPYZZ3NBno0WW2 +0rS6cU+fxFx37nY8ULve4cFQkLR8fOO44e1qIuTgLGCauSGTx/Ts/tbmZXbpGTwV +7cjZDCfC7yEFAVrfQFOMNKeQEssuLFj+d4STGLorxsM+2YygdOgohJz0e3xOcmCN +HqEuC9RbzrnLc/A4/mOHKwnwCCg71zA1/Ew9NUoRm2n8IfaONIUaMg9opNiHxX4e +u3UFaaPmn/mInuWYYMXzbIbdlU/XhKvXrujWYWj7anTDWvGQmNEecsQH92SrO0pf ++9WwcWUQTQiWUdq8/OxjXfzs1PrQnSlp0eizgcdKHDKbCUaSuK1i2wdxfEsu5sbZ +AIW0+dXJ2IyzM+0sv2g4DOsXsnSvinGqjr82A54mXGSr7edhPdlQhILFkJfhTwLq ++mjnyQSNe3s24VNeGc76jbHIrkEWuA460QGqz1Fa2CsQo5SH1IkxNIKpBZWt+w2L +dAza/NzYyDruY5IJCrZa9Qw= + + + + + + + 0242dfc3fa98 + + CN=0242dfc3fa98 + +MIID/TCCAmWgAwIBAgIJAINng1bI63LGMA0GCSqGSIb3DQEBCwUAMB0xGzAZBgNV +BAMTEnNwdGVzdC5leGFtcGxlLmVkdTAeFw0xODEyMjAyMjM4MDJaFw0yODEyMTcy +MjM4MDJaMB0xGzAZBgNVBAMTEnNwdGVzdC5leGFtcGxlLmVkdTCCAaIwDQYJKoZI +hvcNAQEBBQADggGPADCCAYoCggGBAOjmPSBzRsjbPBBA6jYVW+QtsYM5fvIuNErG +VDRvKHyCTNbmdFZ37qEl/fwsrdF4hn4V7fAZ6jW6R1aMGFl1vQyJ289B8l5HOPjf +GuB2gL9IxulOmrkYVN8nfgjlbFNNktMQJ8NprYEyl3o786xCCxx3AiA5Mgdv400L +6vlmEfNHIwsOHAUTNRyCwMS9P6jBJ5IIxD0Mef+3oUjAvVsPZu24EJnzTUasZnI0 +F8aC/YzVbxObBNcymtA2Ipec/gLe1B09eDZUduXPL/as57QWvgJrWj8bCK+Ldj0P +MPSvWzr4BnN58dxaYgCgRH7tnhZudPvCjBakQzkxo/njsRIKtm3lN9UmUYiXbl+e +bu0DSQFUaFfO2hOOUTNAr/QuC+GQL+U7VAdybTbP+KcH5LbNUSqYkxSwhbFz5aym +o5KppnYB9K5iySRWvGIhnwXHNv5yFrmUbet2BPJlMzv7NaePaZ76ypobzNjjNBbg +aNECsQ1ZD9fe2Q8UBe0m2gQP5Yux5QIDAQABo0AwPjAdBgNVHREEFjAUghJzcHRl +c3QuZXhhbXBsZS5lZHUwHQYDVR0OBBYEFGcLIl5kg+GFIh9HXeZyLzsv5e7qMA0G +CSqGSIb3DQEBCwUAA4IBgQAf8/iZXUWtWGMBw2OfonDDWbuhgLnNWddpllcVx7v/ +Yu75+wgfIdNXg6XM4WkGkpbhlkpDLRt2c6rMQpxrQtq/5G3OKEXKyjUOl5pZsYkG +asVENYPSCfuu3rlK85XaW3H1SSJqSax/UKcYXyB1TIW6mNy3OxuvHak6y4LzFnug +CO7p/W2jvffwmxfqjbO7wQfXUQz3SZS04sHMqQoStOwy2N5xxQ3uTF34EoXBto+n +XIEOptKPhV2NkEzj+UUIi1588dck8T0SstbSElbTnJ4sNZFriX6JOPFNW08fezot +izerOHuAFpFQvtugWoZT87YYaFwG+Zr5QNa4fNOcAL+FHvbOfEqIGs+H6GSf0dZV +lkcJyzWZvuK/4RGqWbLvfAYRm0PAGTQSLdO8QJSYWdJtJvZFEMgddQ2HoIzeO5wo +B42FKDSHottI9avilApQBdRCtust8XRPtEAzDB/t/1jbO7u2tkzgY3614mX5xgut +Ileaae5eVCjw4uYbkh+Mt5M= + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/views/client-storage/client-storage-read.vm b/test-compose/idp/container_files/config/shib-idp/views/client-storage/client-storage-read.vm similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/views/client-storage/client-storage-read.vm rename to test-compose/idp/container_files/config/shib-idp/views/client-storage/client-storage-read.vm diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/views/client-storage/client-storage-write.vm b/test-compose/idp/container_files/config/shib-idp/views/client-storage/client-storage-write.vm similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/views/client-storage/client-storage-write.vm rename to test-compose/idp/container_files/config/shib-idp/views/client-storage/client-storage-write.vm diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/views/duo.vm b/test-compose/idp/container_files/config/shib-idp/views/duo.vm similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/views/duo.vm rename to test-compose/idp/container_files/config/shib-idp/views/duo.vm diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/views/error.vm b/test-compose/idp/container_files/config/shib-idp/views/error.vm similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/views/error.vm rename to test-compose/idp/container_files/config/shib-idp/views/error.vm diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/views/intercept/attribute-release.vm b/test-compose/idp/container_files/config/shib-idp/views/intercept/attribute-release.vm similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/views/intercept/attribute-release.vm rename to test-compose/idp/container_files/config/shib-idp/views/intercept/attribute-release.vm diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/views/intercept/expiring-password.vm b/test-compose/idp/container_files/config/shib-idp/views/intercept/expiring-password.vm similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/views/intercept/expiring-password.vm rename to test-compose/idp/container_files/config/shib-idp/views/intercept/expiring-password.vm diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/views/intercept/terms-of-use.vm b/test-compose/idp/container_files/config/shib-idp/views/intercept/terms-of-use.vm similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/views/intercept/terms-of-use.vm rename to test-compose/idp/container_files/config/shib-idp/views/intercept/terms-of-use.vm diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/views/login-error.vm b/test-compose/idp/container_files/config/shib-idp/views/login-error.vm similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/views/login-error.vm rename to test-compose/idp/container_files/config/shib-idp/views/login-error.vm diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/views/login.vm b/test-compose/idp/container_files/config/shib-idp/views/login.vm similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/views/login.vm rename to test-compose/idp/container_files/config/shib-idp/views/login.vm diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/views/logout-complete.vm b/test-compose/idp/container_files/config/shib-idp/views/logout-complete.vm similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/views/logout-complete.vm rename to test-compose/idp/container_files/config/shib-idp/views/logout-complete.vm diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/views/logout-propagate.vm b/test-compose/idp/container_files/config/shib-idp/views/logout-propagate.vm similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/views/logout-propagate.vm rename to test-compose/idp/container_files/config/shib-idp/views/logout-propagate.vm diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/views/logout.vm b/test-compose/idp/container_files/config/shib-idp/views/logout.vm similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/views/logout.vm rename to test-compose/idp/container_files/config/shib-idp/views/logout.vm diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/views/spnego-unavailable.vm b/test-compose/idp/container_files/config/shib-idp/views/spnego-unavailable.vm similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/views/spnego-unavailable.vm rename to test-compose/idp/container_files/config/shib-idp/views/spnego-unavailable.vm diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/views/user-prefs.js b/test-compose/idp/container_files/config/shib-idp/views/user-prefs.js similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/views/user-prefs.js rename to test-compose/idp/container_files/config/shib-idp/views/user-prefs.js diff --git a/test-compose/idp/container_files/shib-idp/config/shib-idp/views/user-prefs.vm b/test-compose/idp/container_files/config/shib-idp/views/user-prefs.vm similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/shib-idp/views/user-prefs.vm rename to test-compose/idp/container_files/config/shib-idp/views/user-prefs.vm diff --git a/test-compose/idp/container_files/shib-idp/config/tomcat/catalina.policy b/test-compose/idp/container_files/config/tomcat/catalina.policy similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/tomcat/catalina.policy rename to test-compose/idp/container_files/config/tomcat/catalina.policy diff --git a/test-compose/idp/container_files/shib-idp/config/tomcat/catalina.properties b/test-compose/idp/container_files/config/tomcat/catalina.properties similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/tomcat/catalina.properties rename to test-compose/idp/container_files/config/tomcat/catalina.properties diff --git a/test-compose/idp/container_files/shib-idp/config/tomcat/context.xml b/test-compose/idp/container_files/config/tomcat/context.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/tomcat/context.xml rename to test-compose/idp/container_files/config/tomcat/context.xml diff --git a/test-compose/idp/container_files/shib-idp/config/tomcat/logging.properties b/test-compose/idp/container_files/config/tomcat/logging.properties similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/tomcat/logging.properties rename to test-compose/idp/container_files/config/tomcat/logging.properties diff --git a/test-compose/idp/container_files/shib-idp/config/tomcat/server.xml b/test-compose/idp/container_files/config/tomcat/server.xml similarity index 90% rename from test-compose/idp/container_files/shib-idp/config/tomcat/server.xml rename to test-compose/idp/container_files/config/tomcat/server.xml index 9991643..d0df37e 100644 --- a/test-compose/idp/container_files/shib-idp/config/tomcat/server.xml +++ b/test-compose/idp/container_files/config/tomcat/server.xml @@ -8,7 +8,7 @@ protocol="org.apache.coyote.http11.Http11NioProtocol" port="443" maxThreads="200" scheme="https" secure="true" SSLEnabled="true" - keystoreFile="/opt/certs/keystore.jks" keystorePass="34f9a51f-2a3a-42f8-b109-fce47dedeb24" + keystoreFile="/opt/certs/keystore.jks" keystorePass="e68cb9bc-bb21-4319-a664-1f755ad8b47c" clientAuth="false" sslProtocol="TLS"/> diff --git a/test-compose/idp/container_files/shib-idp/config/tomcat/server.xml.dist b/test-compose/idp/container_files/config/tomcat/server.xml.dist similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/tomcat/server.xml.dist rename to test-compose/idp/container_files/config/tomcat/server.xml.dist diff --git a/test-compose/idp/container_files/shib-idp/config/tomcat/tomcat-users.xml b/test-compose/idp/container_files/config/tomcat/tomcat-users.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/tomcat/tomcat-users.xml rename to test-compose/idp/container_files/config/tomcat/tomcat-users.xml diff --git a/test-compose/idp/container_files/shib-idp/config/tomcat/tomcat-users.xsd b/test-compose/idp/container_files/config/tomcat/tomcat-users.xsd similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/tomcat/tomcat-users.xsd rename to test-compose/idp/container_files/config/tomcat/tomcat-users.xsd diff --git a/test-compose/idp/container_files/shib-idp/config/tomcat/web.xml b/test-compose/idp/container_files/config/tomcat/web.xml similarity index 100% rename from test-compose/idp/container_files/shib-idp/config/tomcat/web.xml rename to test-compose/idp/container_files/config/tomcat/web.xml diff --git a/test-compose/idp/container_files/credentials/shib-idp/idp-encryption.crt b/test-compose/idp/container_files/credentials/shib-idp/idp-encryption.crt new file mode 100644 index 0000000..52a7085 --- /dev/null +++ b/test-compose/idp/container_files/credentials/shib-idp/idp-encryption.crt @@ -0,0 +1,19 @@ +-----BEGIN CERTIFICATE----- +MIIDHDCCAgSgAwIBAgIJAIg/g2B0+JTzMA0GCSqGSIb3DQEBCwUAMBoxGDAWBgNV +BAMMD2lkcC5leGFtcGxlLmVkdTAeFw0xODEwMTAyMDM1NDBaFw0yMzEwMDkyMDM1 +NDBaMBoxGDAWBgNVBAMMD2lkcC5leGFtcGxlLmVkdTCCASIwDQYJKoZIhvcNAQEB +BQADggEPADCCAQoCggEBAOXvrrP5G0yLd6OfWPO1NzKjTFqY6l9kyGid98uOOut3 +oFAwrjUgQ1gwVRNSVQNL7pfmiai1prNzzxo6oHXpctwJi+HK6l1JfKsmyOCo974d +S9HYnRL0HT59lIoT1oaIOr+5SGcSr0iFYLKkNwQz5FJrMIp0jkeFatoJ/FjZG8qy +z8NAaMTYMoR7pxWn6CuSTFPx0cKkSrxRwcUO+qsqBdrrweNSFUzo/KTmsl9wxga3 +bLdUJ4TzypQKRY5vFTO1yxk8ZM7JTUHYLEFXUyThjfUQLT2uMMGNpBO3dYWttGyY +yXOzFvuJiMp64JTcoDb698ca7e3oeLNa3SGOiPwHRnkCAwEAAaNlMGMwQgYDVR0R +BDswOYIPaWRwLmV4YW1wbGUuZWR1hiZodHRwczovL2lkcC5leGFtcGxlLmVkdS9p +ZHAvc2hpYmJvbGV0aDAdBgNVHQ4EFgQURsDhZRUa47gaSCOLN4Uq1Jsgv0UwDQYJ +KoZIhvcNAQELBQADggEBAJ8PShxPRmdUeJJC/6lAGqGXlw3H+eVyC16hkU+Pozva +bjzDvJapj5r5MyUBkPvm6zPZKk2sDKGm640KVSxEjK+PHfCIIf/d3DQ6DgsvvBUu +/QLqG4dTOPwN6PJEVceo7jBAmMZk8nCMSMTfEl/nGwn0YxFbFVE6OamkYR9UuOD7 +qBfqXxNQspQvA74kP5iCW+5VNwmcmya2Zhe5yJtD0DS5EOLfu/elrrU6DuR9e8xv +SQnmhIXnMKQKMYmUcEuksved5NRkzHiojtMHKewlXpnB7rqJi7BUYkKqY3/vgOqD +iSIkxhgaixWy//7nNHLGeNsZgG9xmnQ41qYsRtw5RdY= +-----END CERTIFICATE----- diff --git a/test-compose/idp/container_files/credentials/shib-idp/idp-encryption.key b/test-compose/idp/container_files/credentials/shib-idp/idp-encryption.key new file mode 100644 index 0000000..1f570b4 --- /dev/null +++ b/test-compose/idp/container_files/credentials/shib-idp/idp-encryption.key @@ -0,0 +1,28 @@ +-----BEGIN PRIVATE KEY----- +MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQDl766z+RtMi3ej +n1jztTcyo0xamOpfZMhonffLjjrrd6BQMK41IENYMFUTUlUDS+6X5omotaazc88a +OqB16XLcCYvhyupdSXyrJsjgqPe+HUvR2J0S9B0+fZSKE9aGiDq/uUhnEq9IhWCy +pDcEM+RSazCKdI5HhWraCfxY2RvKss/DQGjE2DKEe6cVp+grkkxT8dHCpEq8UcHF +DvqrKgXa68HjUhVM6Pyk5rJfcMYGt2y3VCeE88qUCkWObxUztcsZPGTOyU1B2CxB +V1Mk4Y31EC09rjDBjaQTt3WFrbRsmMlzsxb7iYjKeuCU3KA2+vfHGu3t6HizWt0h +joj8B0Z5AgMBAAECggEBANZTs+TOLkQLPFmoDqIcKHdq/6DzKIQCzUu282MqEIGr +4CLfPYMHr75kTujTtap8/MlaerZnnBtpt4IbY7aFBCtWOq0dF5gdB7gBTv0agtMT +O7k+0Cr6oMe/BtYt56k/EoPjkTmCkSBoMtpRd3bTZ9/rSjPEsVq5YgAbjrzCosUs +YyGoTQC+sjPCOQDglr4tujgveBvGatEonfTxurJrUqHr3QBd3Biop3UXuc3g3wx4 +yqXwHwACyPL9BY0r1e7WzfC1jSjWaxZkNg30XSJPuhvMoLaOunJUTqYMwlSlpuOJ +AdVPOBUXx5cmn7j8KZaTqdqKXM2G7JKH0BcW6KlMQAECgYEA+6vP9QY2Jw+v6xj1 +qK3QFSQIdvZq2zeJjmEgKkIFDsmdg4dxxu8awUOZFp/JQETsibmvuDlNHfSmmTMg +0PCMQE924e1fHU7GZfxK2gtM4sKWK/0PxQsLzWD/J8Q8fpMAMS5X4wvVLhyqrIPk +WrmGZb5RN7kbSvRbRJfCVwNd2rkCgYEA6eQqHxawUHD0lPNWBW4vI1C50H3qSbzB +TFfunUz1NCmVlxU55pyLlTzUuGxD9wRXVAs1YL6z6a6EjzbB2WfaTTQ7zD2pZldQ +NrRxigkqm/7RuNL+O26RH0VP8ANAryxnfbnRsU2kraATSt199cFSgb+eKjz3T7OD +rMrOvoJL6cECgYAGB22p7wYpFWUfeq+X5OIRP5W8U9bnfYMcGBOPL5mzav0NA5ek +LmIzswzdz+IgWgZYnkwpW6YPS6caEHF+z+RsPfsZGnim2RZDpzGb251x6TtzvlI8 +ZDFaMDKsnzTby2W7x+JvG/91ZVZpX5d+3ObtVQvZC+QtfYEaOZB8SSZccQKBgQDV +feQI3p/vvTsznu4dJNc4KB6ENfsedYIHmpf+01la1L5r2v8wBiLPBWiyMnjTSA4i +c9y0Qz5cBmWPiA7n0IkOQah3pK008mwQkyK0Oeu/2pg6WbWgMCudXJo73ew0OZb5 +xxyl99ZieaRCiOzJ3z3dmzfXHDEuehCuL60Jbku2wQKBgQCMN7ETD7apRliJosKb +UQDEA/hV3Nw3TqCEpCz01pR3HHLedHYwQhUsUNkMycVlV52/STqe/6c8rcZmt7hD +csAkWpoKHU9v5s6pdu3SMURzHi8q1p8hO49n3eqx2IhJOzpMFygmJgBy6jNiXkAD +/6HfDYCuMSxoqgofz0jtyZAMow== +-----END PRIVATE KEY----- diff --git a/test-compose/idp/container_files/credentials/shib-idp/idp-signing.crt b/test-compose/idp/container_files/credentials/shib-idp/idp-signing.crt new file mode 100644 index 0000000..5890db7 --- /dev/null +++ b/test-compose/idp/container_files/credentials/shib-idp/idp-signing.crt @@ -0,0 +1,19 @@ +-----BEGIN CERTIFICATE----- +MIIDHDCCAgSgAwIBAgIJAPEnL5jgbeVoMA0GCSqGSIb3DQEBCwUAMBoxGDAWBgNV +BAMMD2lkcC5leGFtcGxlLmVkdTAeFw0xODEwMTAyMDM1NDBaFw0yMzEwMDkyMDM1 +NDBaMBoxGDAWBgNVBAMMD2lkcC5leGFtcGxlLmVkdTCCASIwDQYJKoZIhvcNAQEB +BQADggEPADCCAQoCggEBAKwTrvQhmFX3SUNgJAhQ/YV0UX56Rt53mwbiKuH+Ez83 +7z6XRynBVsfzHfbWe0IpNKx5mIr84dfbGhQKQBEKzQuek7ihW3J6PIVZN1A3icZZ +B9i7gow902bT0ZfRG8QW49gl7pk3ASutPcO9Dq5Xc/AqWr3OSO/Pei0yBtTdzG3b +rm0u0gbj3P2tjt7BN77wIB+yjJsND3ITtP0MFXIJxLTlty8thwqQOAOAYcF+rhC5 +znnBLsRNo0E57PtzZs8i/BpEX2uPTxpEyvlU1vtyxcKUiHtK5ZjOsDEkS2rEualr ++FILYg/Oxw1gi0+mNO1a94Ft+UoLiREztq6MQt8OK98CAwEAAaNlMGMwQgYDVR0R +BDswOYIPaWRwLmV4YW1wbGUuZWR1hiZodHRwczovL2lkcC5leGFtcGxlLmVkdS9p +ZHAvc2hpYmJvbGV0aDAdBgNVHQ4EFgQU3ZJ8oHkmlgPtZuZAxnzONccPsb8wDQYJ +KoZIhvcNAQELBQADggEBAIJ4oZKSMGpF8J3qdfjLZGkc3iVbu/eiE1MD77no0oCz +nelY0CNUBuFJk1Xv+Bv0fW0cVugtMPz4xi7zv0zkpS2IVxpPZWBosuVabUD9k+V4 +iN5woJdO7e2KRGvhlWmbkmoZUvhygDe0u0vblNfLzDwFQvxHXiWG//P7SanoQrjP +dE8U21tYz+EFm6s5TvHxVhr9id8c+UacAFCpAtzUB+J8K1abx05XlKsySflkOQV9 +JbM4zOy5gXSI5dY9dGUF77g0muyC+jAhIhLSt/7v3vJgvBurrxPoeBFXOU3D+siT +VZlKtYzYjJhVqXx1vKrWEE1hkpqm+iYgZe4MvgcdswY= +-----END CERTIFICATE----- diff --git a/test-compose/idp/container_files/credentials/shib-idp/idp-signing.key b/test-compose/idp/container_files/credentials/shib-idp/idp-signing.key new file mode 100644 index 0000000..46de653 --- /dev/null +++ b/test-compose/idp/container_files/credentials/shib-idp/idp-signing.key @@ -0,0 +1,28 @@ +-----BEGIN PRIVATE KEY----- +MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQCsE670IZhV90lD +YCQIUP2FdFF+ekbed5sG4irh/hM/N+8+l0cpwVbH8x321ntCKTSseZiK/OHX2xoU +CkARCs0LnpO4oVtyejyFWTdQN4nGWQfYu4KMPdNm09GX0RvEFuPYJe6ZNwErrT3D +vQ6uV3PwKlq9zkjvz3otMgbU3cxt265tLtIG49z9rY7ewTe+8CAfsoybDQ9yE7T9 +DBVyCcS05bcvLYcKkDgDgGHBfq4Quc55wS7ETaNBOez7c2bPIvwaRF9rj08aRMr5 +VNb7csXClIh7SuWYzrAxJEtqxLmpa/hSC2IPzscNYItPpjTtWveBbflKC4kRM7au +jELfDivfAgMBAAECggEAXcm8qcNFzFUj0V0tRnseMwbbBByRU9/M10ueI97fjq1l +8K9zUgbWzdRsmIT+WWksFHWR9u8uCQCajiGoGaHRcGvWB+OqfBKzudqOk2Ix7bHI +3RAWb2mjN4Br1FtcztvLA5xpF4krUiryZyU8QznXLydmnd05U7u507hYkNzy90zI +ERp3p1PXL6XagW8SlraBbQW6HMCzwaILFT6v9Lxen8cw8VTSFEPfNthfGC2kmWRq +/ub/bbjx7HaV2p+U7FuXI2tk/pXbZxkHAMJ0OPcSx6lfcKU9m79peIgzA3vqALDj +QsvHioZ4O0ocOqj4ul1dojYrGYyjwXTNhGmytnXKwQKBgQDcAzg+FGMBDRuPLq7f +l9WoC4Pz/kN3nY0BGg6Ow5TW9SnDeUSZ5Mt3utuPyMtsHHwdTjR+iHMZv1uFOXCL +lI0SpkvRHCXCnsZqRPmnoGA0Tf+b1VfwjvZEiYJBnS5eKcy7nB81tBO/nty43eCo +241VeEX7USkrOqjVyYnK+YUwfQKBgQDIOTXewaEI3X/AOSXd35lZm9egGwTCTG3X +yIvZ6DghNLaAAVI52o9Y8mpLzdZP81+pATjgedR2UZbVt6blAT9BAqi+K6wZqZ3P +k8eRxm/h57zV/Ixlzxk6k5xzjzb4ZBSha+kAy8bvVqWYgIbbHEB5gMlorKF7m8Uy +A78p3N+4iwKBgHKM0pmv76Q6eODhw3bzDPEDnd5JwkLjKukp8e5u8m3BE8+MsiUW +NMHP7kU8nH1bj1uKvlYrIRKEyVfiAjEKVTEimFL1vstH87Kc2wdlvvE8sxslxzWe +maYxmjojZmLsjIYZ0T4a1jVstyshirkgJsQbbQRey3qQfhthZXbi12/ZAoGBAIg8 +rVQJ6nnuxUtVV1e2GlEnwjtVxxIyERefhNFbuj2V8Yv92iY1eg5qvDsiLu4tymxj +wYC0RQXRFFINaYkvJQwmNA1aB/taN2ATzNp67IwJM6ti8WEg3qjF4dGbpCq1ZnhD +xcJd5dna2kh/Q8N5YMGMCP+pXyONZUtX00431R5rAoGBAMIqlJSFfXtiAs+ox5Wo +RJTP1jXBMwLxIpAiA2831OG1I2MmuRFfcl7bw0Ei2XWGfanenLd6pCHo5wVWvZ/k +7f3zg2NItabMZLIpc3ES8Sr1N0IeSOuAlLwWQ4wTeaF673dwLaGJ+doQERc3psoY +PSJOpnyo7wRfuXWQaKpzcF+w +-----END PRIVATE KEY----- diff --git a/test-compose/idp/container_files/shib-idp/credentials/shib-idp/inc-md-cert.pem b/test-compose/idp/container_files/credentials/shib-idp/inc-md-cert.pem similarity index 100% rename from test-compose/idp/container_files/shib-idp/credentials/shib-idp/inc-md-cert.pem rename to test-compose/idp/container_files/credentials/shib-idp/inc-md-cert.pem diff --git a/test-compose/idp/container_files/credentials/shib-idp/sealer.jks b/test-compose/idp/container_files/credentials/shib-idp/sealer.jks new file mode 100644 index 0000000..69d21ac Binary files /dev/null and b/test-compose/idp/container_files/credentials/shib-idp/sealer.jks differ diff --git a/test-compose/idp/container_files/shib-idp/credentials/shib-idp/sealer.kver b/test-compose/idp/container_files/credentials/shib-idp/sealer.kver similarity index 100% rename from test-compose/idp/container_files/shib-idp/credentials/shib-idp/sealer.kver rename to test-compose/idp/container_files/credentials/shib-idp/sealer.kver diff --git a/test-compose/idp/container_files/credentials/tomcat/keystore.jks b/test-compose/idp/container_files/credentials/tomcat/keystore.jks new file mode 100644 index 0000000..531bd96 Binary files /dev/null and b/test-compose/idp/container_files/credentials/tomcat/keystore.jks differ diff --git a/test-compose/idp/container_files/shib-idp/credentials/shib-idp/idp-encryption.crt b/test-compose/idp/container_files/shib-idp/credentials/shib-idp/idp-encryption.crt deleted file mode 100644 index a109911..0000000 --- a/test-compose/idp/container_files/shib-idp/credentials/shib-idp/idp-encryption.crt +++ /dev/null @@ -1,19 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDHDCCAgSgAwIBAgIJAKE7Co4LUwTcMA0GCSqGSIb3DQEBCwUAMBoxGDAWBgNV -BAMMD2lkcC5leGFtcGxlLmVkdTAeFw0xODEwMDgyMTUwNTlaFw0yMzEwMDcyMTUw -NTlaMBoxGDAWBgNVBAMMD2lkcC5leGFtcGxlLmVkdTCCASIwDQYJKoZIhvcNAQEB -BQADggEPADCCAQoCggEBAKVGG3/S6hF3Rr/pwy2b1C8T8x4JfI92HApmNyXWPtDl -UWWkEtwBeakyGxh1XBqVPiwXaurqh1WYzwH8BI6mtOL/VjveCpmBjRS0/GQkhq31 -8GeiEBZ1MZiMSxHq3pAwf51DEiGkX3OALyxnC8ylshqYf9r4FMaHfYHwB7Kz5NT4 -pJt6/AyZ/3tEuV7DZlBtQamFybSGmHz9XU8CzNTMK2g9f/1as4w5JuZTs14X0mIR -wpZ/qwuR2V5z8hC58V8It+bfNfYrm30EDYDKcmAPgOGrsZaj3g3LCvI1VI+Mz7MT -R0gv6M+xlMLzGzKx2XHYlq3v0IRURS+zf6dk8MUgZ0sCAwEAAaNlMGMwQgYDVR0R -BDswOYIPaWRwLmV4YW1wbGUuZWR1hiZodHRwczovL2lkcC5leGFtcGxlLmVkdS9p -ZHAvc2hpYmJvbGV0aDAdBgNVHQ4EFgQUhEcJaXtVh6q8QI0czSN6olaNU6IwDQYJ -KoZIhvcNAQELBQADggEBABDln4h5L627SjCgrtT0sz/czMmeVYHU7rk+HUGFTU97 -A3FBV3t097XrqZZAbx2DWyyavxbUrKyp8WBjCiS6E5QbwfBkoSDJL/1H2Yx2AzOv -ECBdLE2wRUk3qoXBHK9K1fjhRaabD1jeFJVlLTLrHWSNYeKijTyd3Awqwpfe1DM3 -nVHXNxea7WIzqimhO8WbEXOlBwCTfiTcAl0RUX0w39MPUKqw11Qn5UnQqOXghzcn -7Taju+L/uUCQDGwmumBX9pvkGTQFuyN+Nnnkei+3zUJjeXmqmpA1z5mLYJDBu+k+ -i7ehl6m+iJEYM/uWnN0qV+a9bljBDxKTOJRLUXisrAA= ------END CERTIFICATE----- diff --git a/test-compose/idp/container_files/shib-idp/credentials/shib-idp/idp-encryption.key b/test-compose/idp/container_files/shib-idp/credentials/shib-idp/idp-encryption.key deleted file mode 100644 index 510f6e1..0000000 --- a/test-compose/idp/container_files/shib-idp/credentials/shib-idp/idp-encryption.key +++ /dev/null @@ -1,28 +0,0 @@ ------BEGIN PRIVATE KEY----- -MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQClRht/0uoRd0a/ -6cMtm9QvE/MeCXyPdhwKZjcl1j7Q5VFlpBLcAXmpMhsYdVwalT4sF2rq6odVmM8B -/ASOprTi/1Y73gqZgY0UtPxkJIat9fBnohAWdTGYjEsR6t6QMH+dQxIhpF9zgC8s -ZwvMpbIamH/a+BTGh32B8Aeys+TU+KSbevwMmf97RLlew2ZQbUGphcm0hph8/V1P -AszUzCtoPX/9WrOMOSbmU7NeF9JiEcKWf6sLkdlec/IQufFfCLfm3zX2K5t9BA2A -ynJgD4Dhq7GWo94NywryNVSPjM+zE0dIL+jPsZTC8xsysdlx2Jat79CEVEUvs3+n -ZPDFIGdLAgMBAAECggEAKZxBCCmd7M/O7Dp6fV0iSsgHCaTxy1y9KpEZiVkrb4SM -vb5VUTa93q9SyxGhIsA4avlqXcK2WAKk+6brrs6h9BS9LU119bf8QR5f/QaFMf8d -i7ntuvm+ht2reNNdPYg4WOuuAPJVZcr8FX3MJrYA5VlHt2WGNYWfP7ui9Ib+MfAQ -N83uR8k5FX/w8DfebUoBwbeptPFUoXKd3Pic4f9ZBmJ5qokbSOq09PKL39c8mg0J -u62fb5aPXCKSmkx/2CrXpQtbA6mh/AdmcdHMvblrM1zNWxggTFrhOa4X7eI4K7l6 -J/bALkiuqyFsR5lqKTuQA7MTYOTistuMZ4evMZUdYQKBgQDWTyfbQBET3kmKvRWm -4Ay0qYRrQFgBnR52ryuEvAOZ6FejU+valMXMfmuVvBcFhMuTjN8kEWX+GrKVS1Uq -+o+igXHLzZ7EmlMJ0iNGzfJUw8uoTp4FzVlrEdqKlz3fzZg9USABvIdtOxJ5Ps83 -CoGaHTaSFlElRxCG86vn4TntjwKBgQDFbO9tKz89rVlqFUj7fuSBpa9lVUpuHqAr -FWhJ2ydZnkDXjqRQxjSkktw/2m4VBVcBaXVorEEY+SDkq5ciisjlfLc0Lk/O6n1X -cfQ1satWvX62ze03UjS38nymKU2KNgJ88Odv1yN/yKrV0cmooXa+BQoPovIgWN6P -pdHg9zJEhQKBgF5J4T1DiL/3EuAppPcQqEZsNsiBPLcpC5goJbt2hRcX9Eb1y1UW -E5iPHoJ4iKBy9qZqWlqiFP+he2TYChaour1CunByfSH+y/4MKF0kizPkGRxpyni/ -ClJjPoWvWRe4evyvTqe07NiQHuadTcnno3HM3I+VpgoCpDDb0IxquXPdAoGAfbVp -lvfMovc4UgYPnKQl2C+pyTpP1GKH1icharWzDqtn2lmnYw9yAcDJoZbyNUxbJDkE -W4wjP0WSnkhsScBZP1b0SLOcecJx4TZcK7xfvzGV98yT2X/stZwfpqXyC6lsWCYF -F//DSOB7dv7ICyoUs9X9nAtDZTlxLcKGK1r7lQkCgYBlIqr1oWPhadzTeIe791EM -FbFnclUf7MzyUr4Ntfw+CXPw3zfuZ0JZNyjrBC7Eo0djD+DYdyzWxkPeYDnRoV0L -z+xX9gxEfIVyva8GtilDB37mo/aISu9wuZy9qp+9ok3QEqtp4i1yYu2JD2L+mej3 -ti+5YdNTMSWWpCt1oSpGTQ== ------END PRIVATE KEY----- diff --git a/test-compose/idp/container_files/shib-idp/credentials/shib-idp/idp-signing.crt b/test-compose/idp/container_files/shib-idp/credentials/shib-idp/idp-signing.crt deleted file mode 100644 index 7c8eb1b..0000000 --- a/test-compose/idp/container_files/shib-idp/credentials/shib-idp/idp-signing.crt +++ /dev/null @@ -1,19 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDHDCCAgSgAwIBAgIJAIb+Cd4BoYJmMA0GCSqGSIb3DQEBCwUAMBoxGDAWBgNV -BAMMD2lkcC5leGFtcGxlLmVkdTAeFw0xODEwMDgyMTUwNTlaFw0yMzEwMDcyMTUw -NTlaMBoxGDAWBgNVBAMMD2lkcC5leGFtcGxlLmVkdTCCASIwDQYJKoZIhvcNAQEB -BQADggEPADCCAQoCggEBALPi8zCdYWjcTeWGLvCJrLHJ8kKAMx/U+ol468h+gWkW -6H9CbV02Bucmnuf7We66NPIhn3+ZjF6svBvS+wflOyBSOqo/BddH0t/CrDI3L4wv -LkTwogqVcUSubdUaHYVxitD8YyZGozg4l6NOKy2D1bFzzM8qB5Mdp2zW5k5Dbnza -7JTiSb/a6ILsugszhXA3LdA3NkzhSnWH5M8VbD22VwiWeWVuTLhhShdjWLT0FwMd -e/HeW3AGePN0/p4lH9excaMOHyxvJ2V89S3HPSZxLEjuo4TqQUqXdt0aeQcX3slj -w5jkZk/7N7LuEw+UIRIjOXIvZWv6f6QmH8j0kaFFMaUCAwEAAaNlMGMwQgYDVR0R -BDswOYIPaWRwLmV4YW1wbGUuZWR1hiZodHRwczovL2lkcC5leGFtcGxlLmVkdS9p -ZHAvc2hpYmJvbGV0aDAdBgNVHQ4EFgQUCSovOIIkWFhQuaIudr7S361IT5AwDQYJ -KoZIhvcNAQELBQADggEBAHA8ov+paom/K9z4ssKRLb10zkXgDupziGY2rD4QAZ6U -cDF7nlJX0uaClimhJgwbagb64OVNwQ49RyzzLSLMQtrER1wEl+n2qs2HtPlGVlPk -9dtYXWL3gUrdGzniaUPP2tKMwtAgB3vh2NFHwQ57Lzyc7B8jNzcF3NtlckYidth/ -c5TjjIcoJMeRJtJsjAOYOUzMpH92qc853FM18FqjRi/lQEc1Sfn7j60vtpsfdlMC -djZJO1Ru8QqkNC1d/ZBVAxO+R7mN1FzmRDCuNlwredwaAePDrSr5MKv3Cel/I0V6 -D+x6OWB7iBrgi8kIf8j/pVmLqUxy2F0rnJkL8ooJM2o= ------END CERTIFICATE----- diff --git a/test-compose/idp/container_files/shib-idp/credentials/shib-idp/idp-signing.key b/test-compose/idp/container_files/shib-idp/credentials/shib-idp/idp-signing.key deleted file mode 100644 index f234834..0000000 --- a/test-compose/idp/container_files/shib-idp/credentials/shib-idp/idp-signing.key +++ /dev/null @@ -1,28 +0,0 @@ ------BEGIN PRIVATE KEY----- -MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQCz4vMwnWFo3E3l -hi7wiayxyfJCgDMf1PqJeOvIfoFpFuh/Qm1dNgbnJp7n+1nuujTyIZ9/mYxerLwb -0vsH5TsgUjqqPwXXR9LfwqwyNy+MLy5E8KIKlXFErm3VGh2FcYrQ/GMmRqM4OJej -Tistg9Wxc8zPKgeTHads1uZOQ2582uyU4km/2uiC7LoLM4VwNy3QNzZM4Up1h+TP -FWw9tlcIlnllbky4YUoXY1i09BcDHXvx3ltwBnjzdP6eJR/XsXGjDh8sbydlfPUt -xz0mcSxI7qOE6kFKl3bdGnkHF97JY8OY5GZP+zey7hMPlCESIzlyL2Vr+n+kJh/I -9JGhRTGlAgMBAAECggEAVx97AzemHwBcJecoQs2bO3yAfd7TY/5l3UEYiUFj8f7r -Wf9VMojhLQDSg66D7xB2ZjMMqeM3Tf9BGATGGhvW2B+bVCsz7AFYS5Fgju2VdMLB -GRimkpOwiUAl58k/NQs53V/vsXESyj72ilxooyGv1MMuFcPYaVM6bIdkgdE86PDa -rCV35uz5vqZJ9sQa2yH7HNCxT5OndnE2evMjt55aj4e0P2PA6qb5wp6mSJlnLlu0 -4X2s8fo8jd9Pb8fKB4G5h3CoSLjzeX+jNfx2cj6D7rBsIV5LLz2x6ItScfrJu1Uk -pB3ffOE+s3frtZyF2VuaOOjkuaW4RQX0nksdXqutXQKBgQDmuhRt3Y9RmnLQ3HaG -qSuwrRvg9YXbsgXVtTp0xtsLsQq+xkFp7eoxxoeXSTbpF4pJfSeklTCJsV+qXWYS -IDkYuA2UWq/m1GgmL0LQhdFbbF5lRrTuagClOB00ifPxMYdY/g+ePJcE/JFtgXQh -jO3A9yzvXhOb7y9jNNIhjN5HywKBgQDHlztq0lv5BGXfLFFwkZC5qR76VJlfqito -ANTz4I9A38pZf7qTAYDoN8GHLfICO4bpaDdT55wP22vmOcScsg9vFH0INQdcvkEG -V1fDbabrgfJ6zH4Vj4zZWlwEvQonXzQUAX1uATTTdra58q5WqJh9zrnsy4d2Nvlq -zYNYR+HeTwKBgQC4ZlvRetQCaif9WVW5RhdO+utfHZs//MXBCTiRACUs8PAfjJ/X -I3ibE4pmlPM308KH/WjjlwDV61cD9+WN8wbvBJqFyPzwxS3/5qHFuk2afb/rvVj5 -eurNIU3mIaM/T1BXBaZB1zbzm1A3btD7x4B1Spc1L8EITV9YMG0It2cnhQKBgQDE -DILqnJKG+ZDvNGMShYl5NOwezDaTR123nQmQPAW6nZfvbY1glNuAPjQ0iibrlnkg -j6O5IQmkcc18qUW8/RI39BIUm7INoTvR9L1aUzzgnBYIFRHML+MUJLO6W827esJ2 -3DfOdBTlmfhGkmA48wZGnWb3d7wpnDpGdHQNpR3x9QKBgA3r7e3FGgs+cupnMygb -jOFtJZ/CgFsytn6bVX53vuoqnNuvNHdEkvR+NHNJegKfzCJCWYvpJTVpoc/vpwsF -P8De8wOe74BjU8PX0iWCBkM/B2ppYlUuO8msciLVoAXRyn+ZRfQ593lWQ0bFg1uB -n70LhPSiEgATnkaczu3/Al0s ------END PRIVATE KEY----- diff --git a/test-compose/idp/container_files/shib-idp/credentials/shib-idp/sealer.jks b/test-compose/idp/container_files/shib-idp/credentials/shib-idp/sealer.jks deleted file mode 100644 index 2473609..0000000 Binary files a/test-compose/idp/container_files/shib-idp/credentials/shib-idp/sealer.jks and /dev/null differ diff --git a/test-compose/idp/container_files/shib-idp/credentials/tomcat/keystore.jks b/test-compose/idp/container_files/shib-idp/credentials/tomcat/keystore.jks deleted file mode 100644 index 4c2adaa..0000000 Binary files a/test-compose/idp/container_files/shib-idp/credentials/tomcat/keystore.jks and /dev/null differ diff --git a/test-compose/idp/container_files/shib-idp/wwwroot/robots.txt b/test-compose/idp/container_files/wwwroot/robots.txt similarity index 100% rename from test-compose/idp/container_files/shib-idp/wwwroot/robots.txt rename to test-compose/idp/container_files/wwwroot/robots.txt diff --git a/test-compose/idp/decompose.sh b/test-compose/idp/decompose.sh new file mode 100755 index 0000000..02d07bd --- /dev/null +++ b/test-compose/idp/decompose.sh @@ -0,0 +1,55 @@ +#!/bin/bash + +if [ "$1" == '-y' ]; then + response="Y" +else + read -r -p "Are you sure you want to remove the test idp and data images/containers? [y/N] " response +fi + +if [[ "$response" =~ ^([yY][eE][sS]|[yY])+$ ]]; then + #kill, if running, and remove idp container + docker ps | grep idp_idp &>/dev/null + if [ $? == '0' ]; then + #get container ID + export contid=$(docker ps | grep idp_idp | cut -f 1 -d ' ') + docker kill ${contid} &>/dev/null + docker rm ${contid} &>/dev/null + else + #check if an old container is present, rm if needed + docker container ls -a | grep idp_idp &>/dev/null + if [ $? == '0' ]; then + #get container ID + export contid=$(docker container ls -a | grep idp_idp | cut -f 1 -d ' ') + docker kill ${contid} &>/dev/null + docker rm ${contid} &>/dev/null + fi + fi + + #kill, if running, and remove data container + docker ps | grep idp_data &>/dev/null + if [ $? == '0' ]; then + #get container ID + export contid2=$(docker ps | grep idp_data | cut -f 1 -d ' ') + docker kill ${contid2} &>/dev/null + docker rm ${contid2} &>/dev/null + else + #check if an old container is present, rm if needed + docker container ls -a | grep idp_data &>/dev/null + if [ $? == '0' ]; then + #get container ID + export contid2=$(docker container ls -a | grep idp_data | cut -f 1 -d ' ') + docker kill ${contid2} &>/dev/null + docker rm ${contid2} &>/dev/null + fi + fi + + + #remove images + docker rmi -f idp_idp &>/dev/null + docker rmi -f idp_data &>/dev/null + +else + echo "Terminating..." + exit 0 +fi + diff --git a/test-compose/idp/docker-compose.yml b/test-compose/idp/docker-compose.yml new file mode 100644 index 0000000..27a1f1b --- /dev/null +++ b/test-compose/idp/docker-compose.yml @@ -0,0 +1,49 @@ + +version: "3.3" + +services: + idp: + build: + context: ./ + args: + TOMCFG: ./container_files/config/tomcat + TOMCERT: ./container_files/credentials/tomcat + TOMWWWROOT: ./container_files/wwwroot + SHBCFG: ./container_files/config/shib-idp/conf + SHBCREDS: ./container_files/credentials/shib-idp + SHBVIEWS: ./container_files/config/shib-idp/views + SHBEDWAPP: ./container_files/config/shib-idp/edit-webapp + SHBMSGS: ./container_files/config/shib-idp/messages + SHBMD: ./container_files/config/shib-idp/metadata + depends_on: + - data + networks: + - front + - back + ports: + - "443:443" + + + data: + build: ../data/ + expose: + - "389" + networks: + - back + ports: + - "389:389" + volumes: + - shibidp_ldap:/var/lib/dirsrv + + +networks: + front: + driver: bridge + back: + driver: bridge + + +volumes: + shibidp_ldap: + driver: local + diff --git a/test-compose/sp/Dockerfile b/test-compose/sp/Dockerfile new file mode 100644 index 0000000..0a08863 --- /dev/null +++ b/test-compose/sp/Dockerfile @@ -0,0 +1,29 @@ +FROM tier/shibboleth_sp:3.0.3_181201 + +LABEL author="tier-packaging@internet2.edu " \ + Vendor="TIER" \ + ImageType="Shibboleth SP" \ + ImageName=$imagename \ + ImageOS=centos7 + +RUN yum -y update; yum -y install php + +ADD container_files/shibboleth2.xml /etc/shibboleth/ +ADD container_files/idp-metadata.xml /etc/shibboleth/ +ADD container_files/ssl.conf /etc/httpd/conf.d/ +ADD container_files/testsp.crt /etc/pki/tls/certs/ +ADD container_files/testsp.key /etc/pki/tls/private/ +ADD container_files/index.php /var/www/html/secure/ +COPY container_files/attribute-map.xml /etc/shibboleth/ +COPY container_files/sp-signing-key.pem /etc/shibboleth/ +COPY container_files/sp-signing-cert.pem /etc/shibboleth/ +COPY container_files/sp-encrypt-key.pem /etc/shibboleth/ +COPY container_files/sp-encrypt-cert.pem /etc/shibboleth/ + +## Uncomment the two lines below to generate new signing and encryption keys/certs for the Shibboleth SP +#RUN /etc/shibboleth/keygen.sh -o /etc/shibboleth/ -f -h my.special.name -y 10 -n sp-signing && \ +# /etc/shibboleth/keygen.sh -o /etc/shibboleth/ -f -h my.special.name -y 10 -n sp-encrypt + + +EXPOSE 8443 + diff --git a/test-compose/sp/compose.sh b/test-compose/sp/compose.sh new file mode 100755 index 0000000..4e6ba91 --- /dev/null +++ b/test-compose/sp/compose.sh @@ -0,0 +1,11 @@ +#!/bin/sh +docker-compose up --build -d + +if [ $? == '0' ]; then + echo "" + echo "If everything above was successful, your SP metadata can be retreived with this command (after a minute or two):" + echo " curl -k -s https://127.0.0.1:8443/Shibboleth.sso/Metadata" + echo "" +else + echo "An error was encountered." +fi diff --git a/test-compose/sp/container_files/attribute-map.xml b/test-compose/sp/container_files/attribute-map.xml new file mode 100644 index 0000000..65475a9 --- /dev/null +++ b/test-compose/sp/container_files/attribute-map.xml @@ -0,0 +1,162 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/test-compose/sp/container_files/idp-metadata.xml b/test-compose/sp/container_files/idp-metadata.xml new file mode 100644 index 0000000..367fa2c --- /dev/null +++ b/test-compose/sp/container_files/idp-metadata.xml @@ -0,0 +1,37 @@ + + + + example.edu + + + + + +MIIDHDCCAgSgAwIBAgIJAPEnL5jgbeVoMA0GCSqGSIb3DQEBCwUAMBoxGDAWBgNV +BAMMD2lkcC5leGFtcGxlLmVkdTAeFw0xODEwMTAyMDM1NDBaFw0yMzEwMDkyMDM1 +NDBaMBoxGDAWBgNVBAMMD2lkcC5leGFtcGxlLmVkdTCCASIwDQYJKoZIhvcNAQEB +BQADggEPADCCAQoCggEBAKwTrvQhmFX3SUNgJAhQ/YV0UX56Rt53mwbiKuH+Ez83 +7z6XRynBVsfzHfbWe0IpNKx5mIr84dfbGhQKQBEKzQuek7ihW3J6PIVZN1A3icZZ +B9i7gow902bT0ZfRG8QW49gl7pk3ASutPcO9Dq5Xc/AqWr3OSO/Pei0yBtTdzG3b +rm0u0gbj3P2tjt7BN77wIB+yjJsND3ITtP0MFXIJxLTlty8thwqQOAOAYcF+rhC5 +znnBLsRNo0E57PtzZs8i/BpEX2uPTxpEyvlU1vtyxcKUiHtK5ZjOsDEkS2rEualr ++FILYg/Oxw1gi0+mNO1a94Ft+UoLiREztq6MQt8OK98CAwEAAaNlMGMwQgYDVR0R +BDswOYIPaWRwLmV4YW1wbGUuZWR1hiZodHRwczovL2lkcC5leGFtcGxlLmVkdS9p +ZHAvc2hpYmJvbGV0aDAdBgNVHQ4EFgQU3ZJ8oHkmlgPtZuZAxnzONccPsb8wDQYJ +KoZIhvcNAQELBQADggEBAIJ4oZKSMGpF8J3qdfjLZGkc3iVbu/eiE1MD77no0oCz +nelY0CNUBuFJk1Xv+Bv0fW0cVugtMPz4xi7zv0zkpS2IVxpPZWBosuVabUD9k+V4 +iN5woJdO7e2KRGvhlWmbkmoZUvhygDe0u0vblNfLzDwFQvxHXiWG//P7SanoQrjP +dE8U21tYz+EFm6s5TvHxVhr9id8c+UacAFCpAtzUB+J8K1abx05XlKsySflkOQV9 +JbM4zOy5gXSI5dY9dGUF77g0muyC+jAhIhLSt/7v3vJgvBurrxPoeBFXOU3D+siT +VZlKtYzYjJhVqXx1vKrWEE1hkpqm+iYgZe4MvgcdswY= + + + + + + + + + + + diff --git a/test-compose/sp/container_files/index.php b/test-compose/sp/container_files/index.php new file mode 100644 index 0000000..1d3efd3 --- /dev/null +++ b/test-compose/sp/container_files/index.php @@ -0,0 +1,2 @@ + + diff --git a/test-compose/sp/container_files/shibboleth2.xml b/test-compose/sp/container_files/shibboleth2.xml new file mode 100644 index 0000000..d45ceec --- /dev/null +++ b/test-compose/sp/container_files/shibboleth2.xml @@ -0,0 +1,133 @@ + + + + + + + + + + + + + + + SAML2 + + + + SAML2 Local + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/test-compose/sp/container_files/shibboleth2.xml.orig b/test-compose/sp/container_files/shibboleth2.xml.orig new file mode 100644 index 0000000..9f955fb --- /dev/null +++ b/test-compose/sp/container_files/shibboleth2.xml.orig @@ -0,0 +1,140 @@ + + + + + + + + + + + + + + + + + SAML2 + + + + SAML2 Local + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/test-compose/sp/container_files/sp-encrypt-cert.pem b/test-compose/sp/container_files/sp-encrypt-cert.pem new file mode 100644 index 0000000..7a66196 --- /dev/null +++ b/test-compose/sp/container_files/sp-encrypt-cert.pem @@ -0,0 +1,24 @@ +-----BEGIN CERTIFICATE----- +MIID/TCCAmWgAwIBAgIJAINng1bI63LGMA0GCSqGSIb3DQEBCwUAMB0xGzAZBgNV +BAMTEnNwdGVzdC5leGFtcGxlLmVkdTAeFw0xODEyMjAyMjM4MDJaFw0yODEyMTcy +MjM4MDJaMB0xGzAZBgNVBAMTEnNwdGVzdC5leGFtcGxlLmVkdTCCAaIwDQYJKoZI +hvcNAQEBBQADggGPADCCAYoCggGBAOjmPSBzRsjbPBBA6jYVW+QtsYM5fvIuNErG +VDRvKHyCTNbmdFZ37qEl/fwsrdF4hn4V7fAZ6jW6R1aMGFl1vQyJ289B8l5HOPjf +GuB2gL9IxulOmrkYVN8nfgjlbFNNktMQJ8NprYEyl3o786xCCxx3AiA5Mgdv400L +6vlmEfNHIwsOHAUTNRyCwMS9P6jBJ5IIxD0Mef+3oUjAvVsPZu24EJnzTUasZnI0 +F8aC/YzVbxObBNcymtA2Ipec/gLe1B09eDZUduXPL/as57QWvgJrWj8bCK+Ldj0P +MPSvWzr4BnN58dxaYgCgRH7tnhZudPvCjBakQzkxo/njsRIKtm3lN9UmUYiXbl+e +bu0DSQFUaFfO2hOOUTNAr/QuC+GQL+U7VAdybTbP+KcH5LbNUSqYkxSwhbFz5aym +o5KppnYB9K5iySRWvGIhnwXHNv5yFrmUbet2BPJlMzv7NaePaZ76ypobzNjjNBbg +aNECsQ1ZD9fe2Q8UBe0m2gQP5Yux5QIDAQABo0AwPjAdBgNVHREEFjAUghJzcHRl +c3QuZXhhbXBsZS5lZHUwHQYDVR0OBBYEFGcLIl5kg+GFIh9HXeZyLzsv5e7qMA0G +CSqGSIb3DQEBCwUAA4IBgQAf8/iZXUWtWGMBw2OfonDDWbuhgLnNWddpllcVx7v/ +Yu75+wgfIdNXg6XM4WkGkpbhlkpDLRt2c6rMQpxrQtq/5G3OKEXKyjUOl5pZsYkG +asVENYPSCfuu3rlK85XaW3H1SSJqSax/UKcYXyB1TIW6mNy3OxuvHak6y4LzFnug +CO7p/W2jvffwmxfqjbO7wQfXUQz3SZS04sHMqQoStOwy2N5xxQ3uTF34EoXBto+n +XIEOptKPhV2NkEzj+UUIi1588dck8T0SstbSElbTnJ4sNZFriX6JOPFNW08fezot +izerOHuAFpFQvtugWoZT87YYaFwG+Zr5QNa4fNOcAL+FHvbOfEqIGs+H6GSf0dZV +lkcJyzWZvuK/4RGqWbLvfAYRm0PAGTQSLdO8QJSYWdJtJvZFEMgddQ2HoIzeO5wo +B42FKDSHottI9avilApQBdRCtust8XRPtEAzDB/t/1jbO7u2tkzgY3614mX5xgut +Ileaae5eVCjw4uYbkh+Mt5M= +-----END CERTIFICATE----- diff --git a/test-compose/sp/container_files/sp-encrypt-key.pem b/test-compose/sp/container_files/sp-encrypt-key.pem new file mode 100644 index 0000000..1622ef3 --- /dev/null +++ b/test-compose/sp/container_files/sp-encrypt-key.pem @@ -0,0 +1,40 @@ +-----BEGIN PRIVATE KEY----- +MIIG/gIBADANBgkqhkiG9w0BAQEFAASCBugwggbkAgEAAoIBgQDo5j0gc0bI2zwQ +QOo2FVvkLbGDOX7yLjRKxlQ0byh8gkzW5nRWd+6hJf38LK3ReIZ+Fe3wGeo1ukdW +jBhZdb0MidvPQfJeRzj43xrgdoC/SMbpTpq5GFTfJ34I5WxTTZLTECfDaa2BMpd6 +O/OsQgscdwIgOTIHb+NNC+r5ZhHzRyMLDhwFEzUcgsDEvT+owSeSCMQ9DHn/t6FI +wL1bD2btuBCZ801GrGZyNBfGgv2M1W8TmwTXMprQNiKXnP4C3tQdPXg2VHblzy/2 +rOe0Fr4Ca1o/Gwivi3Y9DzD0r1s6+AZzefHcWmIAoER+7Z4WbnT7wowWpEM5MaP5 +47ESCrZt5TfVJlGIl25fnm7tA0kBVGhXztoTjlEzQK/0LgvhkC/lO1QHcm02z/in +B+S2zVEqmJMUsIWxc+WspqOSqaZ2AfSuYskkVrxiIZ8Fxzb+cha5lG3rdgTyZTM7 ++zWnj2me+sqaG8zY4zQW4GjRArENWQ/X3tkPFAXtJtoED+WLseUCAwEAAQKCAYBM +3eCC20kbdbAnNSWX4AjKEIKr6sgJKlK78yVLgPx9y4uMydbPyxmJOj7PgfeEUSEi +cB5txj/Up7xvxiErNX7FqqJPj1Zs41jcWtZGCxaHC4AK9JSATpWEaUZhrUbJX6r7 +2jMlfbV0FLyF7U+JJOsB5A1hkT7/0V/Vx/8vfQ6jmnDobym0SxiWZlk1Fbjy+30R +567M71c8nOCwYFyet0CjaMKh7PkuQCw3uRW3wPfqCW91qw438E3ENnnITFpRnDUI +iZIXJSj3Sqcx/W7Q6xei+y95U4tksT3/SQ7hVXp+BhfyjXdK/k0vNzxZfWk9nCD8 +h7HeiQuLPENzrlOwuWtI+gLDIdFplXUJ+/piK3okdstdHJcWcNUelW8yr7JSpv1I +a2KMgHI2F4UVcTYLZrevzxd5a0cpvFW7vmvdw2vFrCb5JsVsmqBu5OLeaVGDIbIA +2SLfJqq12fi2rxk28VtwXXgaCTttSM+8VY7dlT/mPCqX3Sx2eM7EPt6RVHuri4EC +gcEA+3q6Vht60YXNaw7m4BFISntVm4Z2gGFNswLlrgPRHOacaQVMKhpqt3HmNKAT +1MD/a5C60HkUjMB95m2nE4k1Iade8EzUPXD1FvFbE9/+ifNx2OrC8pKrEmRiTmCY +oel45uoXsksNGJynfuRp2TpAVSZrXaIbGKZiMJZv0QZAilVBurZnZyV0jKQYkSFM +FOt60PDJJEqZzG01dvDJxsIYQURtjNscO0R2ncloLXm7qu1/fcP7CAawWgFYyer2 +WEdVAoHBAO0WAhxCvFoev348Wf33lQi9c6w7WN/WEkhNOJ5p4PKsJphSZbt2bjCt +RdRmvahSXeiGrDPuaxoWaQqcXprcu3ndFYBcK2xZpIl/mf0wr1QTEHCkRXzfxRjC +Mmy+yTeKT4L18xKgg6pJn+wC3hwsv2BQPkp+NPJhD2bmVUWorqXq5fiBV2b7lTg0 +q1HHXYtxk22bw7xtstFENGTqa22KwD5Wd6nj9DamLzKhUhOdcJ7yGVu9se7YcGGh +pg57muigUQKBwQD5feH96Zdo5UFN9GPTavH4ivH8sWNBrMeEUNyDTuAYtyX3/zx4 +DOtRAhwsm5/xFGSTV+wvReDAX3zIroLym85ti/phlyd9qWJOl7cPOcvzGuYZGZe9 +RwuX3KW3MphbEiFTnm1SAqmEgG6gMoZc8DDBCbO9GkWdp/yETcuzaWuAkmL6lVpy +97LwkSCaY5lyq8iWIDy915FMQhCn5u2YVhnwLq4s73jLx/mSQy4q57nrM2Kn6FZV +uSUetnVbJdOu810CgcBNCzbaWjF9E7rk2dXguwD6Wx5o3MxPyPAeAMIicIPCOIE+ +RKB8n8rFFLm5gT2mokWUF5eENLknPBsccJ4pswtVWavwD4Oo7SST7hxrc9O1/Y/9 +GtTd9JXHKuxZ/FHFM7QM+cHozrKattw6ROBKxZvXP5xOdt7b2QC5TqZtQZinoELl +U5rEg4MFRdBafe//LYRcPR8Jb5iJeqGQHcGVUl6Qo2a1lbc5vx1dVaEncKU1cbUd +4/IbjMhQYchlsnMvn1ECgcEAxwT/UvLwhYeFK6UHRwJ/z1eKGAC8R2B9tlmgddZx +T93qbVq4lZXKw3osqdi+pgWvvmg9aK9r/dO1E93S11msnoTI+W9xTr+y5y9dN/hx +5deQMUK+3woLog6LsGiKE2IamCNQBFkgd4VvhXgG+2pTPYJ9nyuEA+na+tfE6bSa +foJ8KQT1rmRFQYRboBY/xxqtsl6Nh84JK7kCw27NNdhssyuiipfa8NLM4m+yeA6n +/oz8xKl5PKwOrvk2DH+FwaAg +-----END PRIVATE KEY----- diff --git a/test-compose/sp/container_files/sp-signing-cert.pem b/test-compose/sp/container_files/sp-signing-cert.pem new file mode 100644 index 0000000..73aaaab --- /dev/null +++ b/test-compose/sp/container_files/sp-signing-cert.pem @@ -0,0 +1,24 @@ +-----BEGIN CERTIFICATE----- +MIID/TCCAmWgAwIBAgIJAJZqOL69C6nRMA0GCSqGSIb3DQEBCwUAMB0xGzAZBgNV +BAMTEnNwdGVzdC5leGFtcGxlLmVkdTAeFw0xODEyMjAyMjM4NDhaFw0yODEyMTcy +MjM4NDhaMB0xGzAZBgNVBAMTEnNwdGVzdC5leGFtcGxlLmVkdTCCAaIwDQYJKoZI +hvcNAQEBBQADggGPADCCAYoCggGBANJ1OC6Ql4te2/7PArBkuM/EF1NcQILv7bJa +ecJDGYBVoWgL0a2KQ0XMESusgkVmVjj/jcbtvwIiXI/6BEu815OF6eSZIwxWdQBp +eKbrWTbt07GiGgdXoXot6oMs5a9YXuWLt8pTXrFVMmwXU+ZfWJtuU8OIgm9esAEI +QBHvDVOJtdKdBMWJFa5nUzkaVvA0Fr8r+/FHUvSCnlKOMaUIfTgtoS9AQnaRQ1dV +l39Z2KAh87JYvRIxvbaPaKgar2eGQ+PQD8rqsB5K5wgnADAxYM9Vo0YXSpPH+Fvw +N3EJgURUSEY2E0Jx8JOx368ERNLXx3kfnRxCiZRDkTZF9WP6lBnDwc1WXRwpVCDT +RnF+SIh6IC1Bj/qpkpCD3nri7tycejoeAtVj1YZHWarf9iqdcLYOAWmeyGbFl3hj +v6qcXnIfy1KyHLCAdIrg1TymLovXXKW09pEbVLdsHmLz0h+DxPs4FsinK2AQBMn1 +6u8BJJ/+spCzIQ2QNPcGORh6XemBpQIDAQABo0AwPjAdBgNVHREEFjAUghJzcHRl +c3QuZXhhbXBsZS5lZHUwHQYDVR0OBBYEFPC8rkASWHQxrtCQ4wwtnsJRy6K5MA0G +CSqGSIb3DQEBCwUAA4IBgQCks2nY7YzdIKV02NHD9STWD3yPtEwPYZZ3NBno0WW2 +0rS6cU+fxFx37nY8ULve4cFQkLR8fOO44e1qIuTgLGCauSGTx/Ts/tbmZXbpGTwV +7cjZDCfC7yEFAVrfQFOMNKeQEssuLFj+d4STGLorxsM+2YygdOgohJz0e3xOcmCN +HqEuC9RbzrnLc/A4/mOHKwnwCCg71zA1/Ew9NUoRm2n8IfaONIUaMg9opNiHxX4e +u3UFaaPmn/mInuWYYMXzbIbdlU/XhKvXrujWYWj7anTDWvGQmNEecsQH92SrO0pf ++9WwcWUQTQiWUdq8/OxjXfzs1PrQnSlp0eizgcdKHDKbCUaSuK1i2wdxfEsu5sbZ +AIW0+dXJ2IyzM+0sv2g4DOsXsnSvinGqjr82A54mXGSr7edhPdlQhILFkJfhTwLq ++mjnyQSNe3s24VNeGc76jbHIrkEWuA460QGqz1Fa2CsQo5SH1IkxNIKpBZWt+w2L +dAza/NzYyDruY5IJCrZa9Qw= +-----END CERTIFICATE----- diff --git a/test-compose/sp/container_files/sp-signing-key.pem b/test-compose/sp/container_files/sp-signing-key.pem new file mode 100644 index 0000000..9e979fe --- /dev/null +++ b/test-compose/sp/container_files/sp-signing-key.pem @@ -0,0 +1,40 @@ +-----BEGIN PRIVATE KEY----- +MIIG/gIBADANBgkqhkiG9w0BAQEFAASCBugwggbkAgEAAoIBgQDSdTgukJeLXtv+ +zwKwZLjPxBdTXECC7+2yWnnCQxmAVaFoC9GtikNFzBErrIJFZlY4/43G7b8CIlyP ++gRLvNeThenkmSMMVnUAaXim61k27dOxohoHV6F6LeqDLOWvWF7li7fKU16xVTJs +F1PmX1ibblPDiIJvXrABCEAR7w1TibXSnQTFiRWuZ1M5GlbwNBa/K/vxR1L0gp5S +jjGlCH04LaEvQEJ2kUNXVZd/WdigIfOyWL0SMb22j2ioGq9nhkPj0A/K6rAeSucI +JwAwMWDPVaNGF0qTx/hb8DdxCYFEVEhGNhNCcfCTsd+vBETS18d5H50cQomUQ5E2 +RfVj+pQZw8HNVl0cKVQg00ZxfkiIeiAtQY/6qZKQg9564u7cnHo6HgLVY9WGR1mq +3/YqnXC2DgFpnshmxZd4Y7+qnF5yH8tSshywgHSK4NU8pi6L11yltPaRG1S3bB5i +89Ifg8T7OBbIpytgEATJ9ervASSf/rKQsyENkDT3BjkYel3pgaUCAwEAAQKCAYEA +kmBxGQH8RTVO8eTtS95iJC+QwavyOp/BxUDkWtbsj7P/NSyzQ25c59jNQIEVgktx +QOeNpoSJS2S22HTeNAc+MR781MAl/ljLu+OfxQj/3hKAIJZMYDr01tPEvkOl5NUj ++6e3xwNBYzmMfl2jPyGlsUWFAQSbI/bJl44zccXAkQ/A5KHNRc7Yw5qd6aOGQD8a +axCehOxEqEeI8oZvxQcogMBL0V9yWqEiI0Ymvq6w2n+CzdKmflcWSjloYzNcODbL +Ef2+8/fBZhHTS0GLCIqQpK+tZxt4K77DK2p2L9dYuHK7vtWn1j0YIwPqD+QVVtuT +d7BOOmakPj2E7EXq/GvFw8gB/gRLoLuJSq5vvhPrSVuJqWdxDuxSutGgIoN3mQxd +2AjuBXvqwYaZ3UGHZlBYAQx5ICiAGjxv/1zmKp+9OJHge/a1e6Z8jgQcpS7OWNhU +dj6qfs+IiWKEaMM7D8dj4ncoArBpE7/BzlVuJ377cqRx35alMcKlawQWF1YqSDrB +AoHBAPSipCLz4sr3U2jluXehntYsKevWcBtFkEd49Ay5uZTu/aweKWIozjDt7T3L +mjYi+QGpt28MdNmpoofYOmpt+lrc0HWrv+UB9k/qFxfwgZKaXa1nm/VLfK77L4IB +8I9dpjvDi724Xg/JJ1jsGM13+jGEfTQTl4Hi0lZwMydUO+O4oWB4kG9qhF8C+yQc +12CCFH+Da8uwcwM+zCJwRm3qMKceifhEGAuFJ430Rp7cuqlJYfQZ4pVhRxwP6vns +cLCz+QKBwQDcPB5bCjci/HMe0V19HxPrKh0hGPLIRCPAakT8Mz8N2lVAtWDXFL5q +eHskl6cf8RQLfrcUiL+jQvD5VV8I7BkolCv0GZT/q36I/Z1QKlQC1O0IGG/hNqwt +PS85YM6yC84YIKx0rN6O03/nYcslRv19q+MNiR9sZEeN6cScUc6aUINhWjzQ4mb8 +Z9ErguJrq0sCoAVU+t/yRo/YB/d2xdN9XLe+2cgsM6s0TiHo4v2SeFHKewBw+RLp +yrShY6COzg0CgcEA0EFwt2ylgiGgeSkvhV8qJ6s7GNDZaO4EUEPwhrDJAredbhvT +IQQZ29+AWl3sbu/AySCgzsFs7CsT+M8jk50CRr26HKJUXvEXrZpbhH6y34nX+5m7 +U8uqXg/ptqROFM4liLUETkMYmBmnDHUY/DmJ3QOrzlxrWyAr7XfgpDd6MHbpsoWQ +d7jW7UdNYsXGuBqktpS7fJA+qOGZyCuKWWHHf01pKNdXHN+C976fK/g+U4TsBXDP +ylkgvwvx/kbA/DyJAoHAQxXA/WRYNT0G6B1ISAO+coTKiLlrwtsWtNbqGpSVoWef +Tm2xiPKVqiL3B8d2LgGmZHX92LBrB5UtiBWcNECOzVCNLvbX7yVTDvGKCNBL9Ozd +Ivkmo0ifG8ymZOj7LTrxVWImhgfeZ00/icC9O6arMqu4Jvhc7QyCy1SpAiDdOR5L +Vs1A9zPvwPTyvzlINRnhaHRMC32717XsvRZ4J+LMsEQc6HK4SdaXUQB3zdPO/93M +tEvRb5g/TZ3kdcC+OKHFAoHAO9R3y6ZjUM8T8/4XcyRD968V4sZIvVQfpSaH86GO +TrECZp5SqSWUTqAWTJWS0yIctAML60nWF+OPRUlrq0yk2veN9Re6eWfyoyQOFd92 +U+bxh3QEue5LGOwpqrPV/1cJSFdv88eS+F8q7i/dD765Tio6kJjKzXPN3FJqAvNB +lAnaO4Apbuzob25Qkmm0NVQHap+TJGJMvX2vVX9CjE6haVWq1lJMakkoQOeIlyi5 +iDjt9rDlIwDYeGWk4KFgsKM7 +-----END PRIVATE KEY----- diff --git a/test-compose/sp/container_files/ssl.conf b/test-compose/sp/container_files/ssl.conf new file mode 100644 index 0000000..19b1139 --- /dev/null +++ b/test-compose/sp/container_files/ssl.conf @@ -0,0 +1,218 @@ +# +# When we also provide SSL we have to listen to the +# the HTTPS port in addition. +# +Listen 8443 https + +## +## SSL Global Context +## +## All SSL configuration in this context applies both to +## the main server and all SSL-enabled virtual hosts. +## + +# Pass Phrase Dialog: +# Configure the pass phrase gathering process. +# The filtering dialog program (`builtin' is a internal +# terminal dialog) has to provide the pass phrase on stdout. +SSLPassPhraseDialog exec:/usr/libexec/httpd-ssl-pass-dialog + +# Inter-Process Session Cache: +# Configure the SSL Session Cache: First the mechanism +# to use and second the expiring timeout (in seconds). +SSLSessionCache shmcb:/run/httpd/sslcache(512000) +SSLSessionCacheTimeout 300 + +# Pseudo Random Number Generator (PRNG): +# Configure one or more sources to seed the PRNG of the +# SSL library. The seed data should be of good random quality. +# WARNING! On some platforms /dev/random blocks if not enough entropy +# is available. This means you then cannot use the /dev/random device +# because it would lead to very long connection times (as long as +# it requires to make more entropy available). But usually those +# platforms additionally provide a /dev/urandom device which doesn't +# block. So, if available, use this one instead. Read the mod_ssl User +# Manual for more details. +SSLRandomSeed startup file:/dev/urandom 256 +SSLRandomSeed connect builtin +#SSLRandomSeed startup file:/dev/random 512 +#SSLRandomSeed connect file:/dev/random 512 +#SSLRandomSeed connect file:/dev/urandom 512 + +# +# Use "SSLCryptoDevice" to enable any supported hardware +# accelerators. Use "openssl engine -v" to list supported +# engine names. NOTE: If you enable an accelerator and the +# server does not start, consult the error logs and ensure +# your accelerator is functioning properly. +# +SSLCryptoDevice builtin +#SSLCryptoDevice ubsec + +## +## SSL Virtual Host Context +## + + + +# General setup for the virtual host, inherited from global configuration +#DocumentRoot "/var/www/html" +ServerName sptest.example.edu:8443 +UseCanonicalName On + +# Use separate log files for the SSL virtual host; note that LogLevel +# is not inherited from httpd.conf. +ErrorLog logs/ssl_error_log +TransferLog logs/ssl_access_log +LogLevel warn + +# SSL Engine Switch: +# Enable/Disable SSL for this virtual host. +SSLEngine on + +# SSL Protocol support: +# List the enable protocol levels with which clients will be able to +# connect. Disable SSLv2 access by default: +SSLProtocol all -SSLv2 -SSLv3 + +# SSL Cipher Suite: +# List the ciphers that the client is permitted to negotiate. +# See the mod_ssl documentation for a complete list. +SSLCipherSuite HIGH:3DES:!aNULL:!MD5:!SEED:!IDEA + +# Speed-optimized SSL Cipher configuration: +# If speed is your main concern (on busy HTTPS servers e.g.), +# you might want to force clients to specific, performance +# optimized ciphers. In this case, prepend those ciphers +# to the SSLCipherSuite list, and enable SSLHonorCipherOrder. +# Caveat: by giving precedence to RC4-SHA and AES128-SHA +# (as in the example below), most connections will no longer +# have perfect forward secrecy - if the server's key is +# compromised, captures of past or future traffic must be +# considered compromised, too. +#SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:MEDIUM:!aNULL:!MD5 +#SSLHonorCipherOrder on + +# Server Certificate: +# Point SSLCertificateFile at a PEM encoded certificate. If +# the certificate is encrypted, then you will be prompted for a +# pass phrase. Note that a kill -HUP will prompt again. A new +# certificate can be generated using the genkey(1) command. +SSLCertificateFile /etc/pki/tls/certs/testsp.crt + +# Server Private Key: +# If the key is not combined with the certificate, use this +# directive to point at the key file. Keep in mind that if +# you've both a RSA and a DSA private key you can configure +# both in parallel (to also allow the use of DSA ciphers, etc.) +SSLCertificateKeyFile /etc/pki/tls/private/testsp.key + +# Server Certificate Chain: +# Point SSLCertificateChainFile at a file containing the +# concatenation of PEM encoded CA certificates which form the +# certificate chain for the server certificate. Alternatively +# the referenced file can be the same as SSLCertificateFile +# when the CA certificates are directly appended to the server +# certificate for convinience. +#SSLCertificateChainFile /etc/pki/tls/certs/server-chain.crt + +# Certificate Authority (CA): +# Set the CA certificate verification path where to find CA +# certificates for client authentication or alternatively one +# huge file containing all of them (file must be PEM encoded) +#SSLCACertificateFile /etc/pki/tls/certs/ca-bundle.crt + +# Client Authentication (Type): +# Client certificate verification type and depth. Types are +# none, optional, require and optional_no_ca. Depth is a +# number which specifies how deeply to verify the certificate +# issuer chain before deciding the certificate is not valid. +#SSLVerifyClient require +#SSLVerifyDepth 10 + +# Access Control: +# With SSLRequire you can do per-directory access control based +# on arbitrary complex boolean expressions containing server +# variable checks and other lookup directives. The syntax is a +# mixture between C and Perl. See the mod_ssl documentation +# for more details. +# +#SSLRequire ( %{SSL_CIPHER} !~ m/^(EXP|NULL)/ \ +# and %{SSL_CLIENT_S_DN_O} eq "Snake Oil, Ltd." \ +# and %{SSL_CLIENT_S_DN_OU} in {"Staff", "CA", "Dev"} \ +# and %{TIME_WDAY} >= 1 and %{TIME_WDAY} <= 5 \ +# and %{TIME_HOUR} >= 8 and %{TIME_HOUR} <= 20 ) \ +# or %{REMOTE_ADDR} =~ m/^192\.76\.162\.[0-9]+$/ +# + +# SSL Engine Options: +# Set various options for the SSL engine. +# o FakeBasicAuth: +# Translate the client X.509 into a Basic Authorisation. This means that +# the standard Auth/DBMAuth methods can be used for access control. The +# user name is the `one line' version of the client's X.509 certificate. +# Note that no password is obtained from the user. Every entry in the user +# file needs this password: `xxj31ZMTZzkVA'. +# o ExportCertData: +# This exports two additional environment variables: SSL_CLIENT_CERT and +# SSL_SERVER_CERT. These contain the PEM-encoded certificates of the +# server (always existing) and the client (only existing when client +# authentication is used). This can be used to import the certificates +# into CGI scripts. +# o StdEnvVars: +# This exports the standard SSL/TLS related `SSL_*' environment variables. +# Per default this exportation is switched off for performance reasons, +# because the extraction step is an expensive operation and is usually +# useless for serving static content. So one usually enables the +# exportation for CGI and SSI requests only. +# o StrictRequire: +# This denies access when "SSLRequireSSL" or "SSLRequire" applied even +# under a "Satisfy any" situation, i.e. when it applies access is denied +# and no other module can change it. +# o OptRenegotiate: +# This enables optimized SSL connection renegotiation handling when SSL +# directives are used in per-directory context. +#SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire + + SSLOptions +StdEnvVars + + + SSLOptions +StdEnvVars + + +# SSL Protocol Adjustments: +# The safe and default but still SSL/TLS standard compliant shutdown +# approach is that mod_ssl sends the close notify alert but doesn't wait for +# the close notify alert from client. When you need a different shutdown +# approach you can use one of the following variables: +# o ssl-unclean-shutdown: +# This forces an unclean shutdown when the connection is closed, i.e. no +# SSL close notify alert is send or allowed to received. This violates +# the SSL/TLS standard but is needed for some brain-dead browsers. Use +# this when you receive I/O errors because of the standard approach where +# mod_ssl sends the close notify alert. +# o ssl-accurate-shutdown: +# This forces an accurate shutdown when the connection is closed, i.e. a +# SSL close notify alert is send and mod_ssl waits for the close notify +# alert of the client. This is 100% SSL/TLS standard compliant, but in +# practice often causes hanging connections with brain-dead browsers. Use +# this only for browsers where you know that their SSL implementation +# works correctly. +# Notice: Most problems of broken clients are also related to the HTTP +# keep-alive facility, so you usually additionally want to disable +# keep-alive for those clients, too. Use variable "nokeepalive" for this. +# Similarly, one has to force some clients to use HTTP/1.0 to workaround +# their broken HTTP/1.1 implementation. Use variables "downgrade-1.0" and +# "force-response-1.0" for this. +BrowserMatch "MSIE [2-5]" \ + nokeepalive ssl-unclean-shutdown \ + downgrade-1.0 force-response-1.0 + +# Per-Server Logging: +# The home of a custom SSL log file. Use this when you want a +# compact non-error SSL logfile on a virtual host basis. +CustomLog logs/ssl_request_log \ + "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b" + + + diff --git a/test-compose/sp/container_files/testsp.crt b/test-compose/sp/container_files/testsp.crt new file mode 100644 index 0000000..34a135d --- /dev/null +++ b/test-compose/sp/container_files/testsp.crt @@ -0,0 +1,22 @@ +-----BEGIN CERTIFICATE----- +MIIDnTCCAoWgAwIBAgIJANYHemLHm+2hMA0GCSqGSIb3DQEBCwUAMGUxCzAJBgNV +BAYTAlVTMREwDwYDVQQIDAhNaWNoaWdhbjESMBAGA1UEBwwJQW5uIEFyYm9yMRIw +EAYDVQQKDAlJbnRlcm5ldDIxGzAZBgNVBAMMEnNwdGVzdC5leGFtcGxlLmVkdTAe +Fw0xODEwMTExNzE4MjBaFw0yMTEwMTAxNzE4MjBaMGUxCzAJBgNVBAYTAlVTMREw +DwYDVQQIDAhNaWNoaWdhbjESMBAGA1UEBwwJQW5uIEFyYm9yMRIwEAYDVQQKDAlJ +bnRlcm5ldDIxGzAZBgNVBAMMEnNwdGVzdC5leGFtcGxlLmVkdTCCASIwDQYJKoZI +hvcNAQEBBQADggEPADCCAQoCggEBALWP3/PVFC+IoP8yvLz/fAz6Kt5owWyCcGeU +e0ujIcB566JfOtnY5NDsw0H6dtok7ZXwmlXBB+pUMgmA3M292V1Uchc92uM/7NJD +gEmPfw1O4ZA6hoC2jyGtg3vbaGVvYLMJ4ItHPVdsH/MARZz47WtYeGP8fCc2dgTO +BG4I7w2vNZOS0sgFKUXpwpMEOzprF9PDY6+c7v48hQxuhwIDORIeYXKBzp1Nl0Jr +FidZjnPsdrY4NFmqawhuV9eviwBO0a+tS/7RynxKRbFKpNO1tRv1K5UmtwtopChl +CcjeHlvhbUXp3KKBe7HSffTZwTiKYKAuSNqf++b9OBMXol0XBtsCAwEAAaNQME4w +HQYDVR0OBBYEFOUsErZhx0Jdla4+bUSL5dvVl1dsMB8GA1UdIwQYMBaAFOUsErZh +x0Jdla4+bUSL5dvVl1dsMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB +AC4JrL7YNOk3G4GiIQCJK0zBwzIMSaMcpi6SdjANrdZu+1lu5dj2AOBKL9seM88o +eqw5Kb0+fZFrpVm4MKTrIs/WtHTZVIhXQiaDBvuCllwbP8+leP/YFmEbWQ+tSzau +6gU6Po+K0jpQwyNTJABbxKGR80Dkq3+Y1JKMGM+MgL32IUUr4/pAG/tb/Y0tH0uC +qa5f9MihfT1iEKI1t5VYvX6gazB9y8OogxSvfG88KXYkx4NmIzpEVjVz/kmtdTyQ +c6OmH8dk8HhShS8Wvq3djzKMuaAqOL/1jCVPdOATDz/GNBYyNT1RV9z2xpPvmPeX +ohK/aCmoHBcAGjxEZhfUJQk= +-----END CERTIFICATE----- diff --git a/test-compose/sp/container_files/testsp.key b/test-compose/sp/container_files/testsp.key new file mode 100644 index 0000000..f954c3e --- /dev/null +++ b/test-compose/sp/container_files/testsp.key @@ -0,0 +1,27 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIEpQIBAAKCAQEAtY/f89UUL4ig/zK8vP98DPoq3mjBbIJwZ5R7S6MhwHnrol86 +2djk0OzDQfp22iTtlfCaVcEH6lQyCYDczb3ZXVRyFz3a4z/s0kOASY9/DU7hkDqG +gLaPIa2De9toZW9gswngi0c9V2wf8wBFnPjta1h4Y/x8JzZ2BM4EbgjvDa81k5LS +yAUpRenCkwQ7OmsX08Njr5zu/jyFDG6HAgM5Eh5hcoHOnU2XQmsWJ1mOc+x2tjg0 +WaprCG5X16+LAE7Rr61L/tHKfEpFsUqk07W1G/UrlSa3C2ikKGUJyN4eW+FtRenc +ooF7sdJ99NnBOIpgoC5I2p/75v04ExeiXRcG2wIDAQABAoIBAQCZcKAZ12gZy+QU +CHMNXvUdmoaENA/TfmE0iH2yrIknu2HydXytAupNzuotZljvfunzH8Wu11WzKbin +42m3zsxWXbmV/sZv62RfRoCyqjz7qEBkvbFSMfbAxX0rPX/6yaf1Z1GHI4upyE0v +9njeclljsP79sTHTiekvolSIEbDF5HImDuwc10V9y0Ci0OO5TylASauUyhL066IW +4R4rRBx4xs86kkt2ch399d88qZ0rNLV5+GJmenEbKjlHaejYtwLL5bYnPpo4ODsX +6mGd5ZXNsnABCOGg9kitOkroMSdGQdaL8XgPhaUjnkQOmLZ88ryCWybbKvHrvsLa +YDvXc1NRAoGBAOFbceuhK6rTtWmiPWQ0Jd8jcFnOJ1q7Cm58vBi5KhUV7omAlYFa +wZRZkrHeB+WEfxZh5/xgFqUvzIJzjOp1btxuzQUOeN2RNAzt6QlgLM3mZPNGND5+ +2/VF9cAm3apcvJNZpbeqLxf/qMaPWrw+LX+/8ijzVCsEm526wpmSWBgHAoGBAM4/ +8bXfOBHnphYTqqSBAs70vI16rKqluhywF6ZsQvEZ0WLZ9tlq024dRRRlO4oOSPXO +HaHyU20AfLAxsX7HnCdq5d6fa4b84Tyw+n19UZ/IUsjHhkrDXj3sJ7fi5Veg/ujH +hTbj1Cp36vyV3hm0f6X+lc5uyh1XCkLE9LVpHx2NAoGBAMfO52vO48O7n/5/zcTZ +g7abWlMVuMj2S6J4z+Fv00MMxgl+S5B8YmRhIvK3dPLoDjJPLnwSyiE+Byqmvwtm +gZvKVdck5L82rhrEmjko37DTlTApT8sVeXq3w9PR4fnZ7Y0MECWPK+AwWnlqwz1i +N78r9c6fKEJX/I3V+BJnsdnjAoGBAJr5eUnLfHoXsbiM9n+9YLrZMoSsVOm0tW+w +8VRfrL01RRwd41ni5xOqcqmsl1xY94GbarCxQPZ6kzZhYJl+q1sC+86Xw1ge06+i +29VHQPnqsCmlosaynjGxLPcDSojZtDB9Gx/veRCgIrXAdq6h7fhwn2gJ31zEdjVN +gQJ/Bp5RAoGABD5G0sCcb+C5n2ch3emGfS8UL0NqbhwwHdDxQ7IOIjjjgms5wUQJ +ZMmUvRJr8jzCCPD8DrHf85GAACRPoVsBDLD3oXTLcY8Frum1npH57H6Eaa/Jmuk5 +UdDJprIEgUhY47jK1O+IKtxnTQPnqotqWC5Lk4Rhnr62APxhkl9jraI= +-----END RSA PRIVATE KEY----- diff --git a/test-compose/sp/decompose.sh b/test-compose/sp/decompose.sh new file mode 100755 index 0000000..7e80f54 --- /dev/null +++ b/test-compose/sp/decompose.sh @@ -0,0 +1,36 @@ +#!/bin/bash + +if [ "$1" == '-y' ]; then + response="Y" +else + read -r -p "Are you sure you want to remove the test sp image/container? [y/N] " response +fi + +if [[ "$response" =~ ^([yY][eE][sS]|[yY])+$ ]]; then + #kill, if running, and remove sp container + docker ps | grep sp_sp &>/dev/null + if [ $? == '0' ]; then + #get container ID + export contid2=$(docker ps | grep sp_sp | cut -f 1 -d ' ') + docker kill ${contid2} &>/dev/null + docker rm ${contid2} &>/dev/null + else + #check if an old container is present, rm if needed + docker container ls -a | grep sp_sp &>/dev/null + if [ $? == '0' ]; then + #get container ID + export contid2=$(docker container ls -a | grep sp_sp | cut -f 1 -d ' ') + docker kill ${contid2} &>/dev/null + docker rm ${contid2} &>/dev/null + fi + fi + + + #remove images + docker rmi -f sp_sp &>/dev/null + +else + echo "Terminating..." + exit 0 +fi + diff --git a/test-compose/sp/docker-compose.yml b/test-compose/sp/docker-compose.yml new file mode 100644 index 0000000..3c175bf --- /dev/null +++ b/test-compose/sp/docker-compose.yml @@ -0,0 +1,22 @@ + +version: "3.3" + +services: + sp: + build: ./ + expose: + - "8443" + networks: + - front + - back + ports: + - "8443:8443" + + +networks: + front: + driver: bridge + back: + driver: bridge + + diff --git a/tests/fulltest.sh b/tests/fulltest.sh new file mode 100755 index 0000000..22b4a73 --- /dev/null +++ b/tests/fulltest.sh @@ -0,0 +1,79 @@ +#!/bin/bash + +pushd test-compose &>/dev/null +echo "Launching fresh containers..." +./decompose.sh -y &>/dev/null +./compose.sh &>/dev/null +popd &>/dev/null + +echo "Waiting 4 minutes while everything comes up..." +sleep 240 + +pushd tests &>/dev/null +rm -f ./lastpage.txt + +#ensure webisoget is installed +echo "ensuring that webisoget is installed..." +rpm -q webisoget &>/dev/null +if [ $? -ne '0' ]; then + echo "downloading webisoget rpm" + curl -s -L -o webisoget-2.8.7-1.x86_64.rpm https://github.internet2.edu/docker/util/blob/master/bin/webisoget-2.8.7-1.x86_64.rpm?raw=true + if [ -s webisoget-2.8.7-1.x86_64.rpm ]; then + echo "installing rpm..." + sudo rpm -ivh webisoget-2.8.7-1.x86_64.rpm + rm -f webisoget-2.8.7-1.x86_64.rpm + else + echo "can't get webisoget rpm..." + exit 1 + fi +else + echo "webisoget already installed..." +fi + +#ensure that name resolution is in place +ping -c 1 sptest.example.edu &>/dev/null +if [ $? -ne '0' ]; then + echo "adding hosts record for sp..." + echo '127.0.0.1 sptest.example.edu' | sudo tee -a /etc/hosts +fi +ping -c 1 idp.example.edu &>/dev/null +if [ $? -ne '0' ]; then + echo "adding hosts record for idp..." + echo '127.0.0.1 idp.example.edu' | sudo tee -a /etc/hosts +fi + +echo "Attempting full-cycle test..." +webisoget -verbose -out ./lastpage.txt -formfile ./sptest.login -url https://sptest.example.edu:8443/secure/index.php + +if [ -s ./lastpage.txt ]; then + cat lastpage.txt | grep kwhite@example.edu &>/dev/null + if [ $? == "0" ]; then + echo "The full-cycle test of the IdP and SP was successfull!" + echo "" + pushd ../test-compose &>/dev/null + ./decompose.sh -y &>/dev/null + popd &>/dev/null + rm -f lastpage.txt + popd &>/dev/null + exit 0 + else + echo "The full-cycle test of the IdP and SP failed." + echo "" + pushd ../test-compose &>/dev/null + ./decompose.sh -y &>/dev/null + popd &>/dev/null + rm -f lastpage.txt + popd &>/dev/null + exit 1 + fi +else + echo "The full-cycle test of the IdP and SP failed (no output)." + echo "" + pushd ../test-compose &>/dev/null + ./decompose.sh -y &>/dev/null + popd &>/dev/null + rm -f lastpage.txt + popd &>/dev/null + exit 1 +fi + diff --git a/tests/main.bats b/tests/main.bats index 6e9ee25..4fa64f1 100644 --- a/tests/main.bats +++ b/tests/main.bats @@ -50,4 +50,7 @@ load ../common ./tests/clairscan.sh ${maintainer}/${imagename}:latest } +@test "080 The IdP successfully completed a full-cycle test with an SP" { + ./tests/fulltest.sh +} diff --git a/tests/sptest.login b/tests/sptest.login new file mode 100644 index 0000000..53a2277 --- /dev/null +++ b/tests/sptest.login @@ -0,0 +1,2 @@ +name=; domain=idp.example.edu; j_username=kwhite; j_password=password; +