18 Commits

Author SHA1 Message Date
Matthias Kuhn
71c3205a2b Extended validity period 2019-06-06 17:41:40 +02:00
Matthias Kuhn
608f050d01 Redo the whole cert signing process 2019-06-05 22:47:51 +02:00
Matthias Kuhn
c76336683a Sign postgres.crt with ca 2019-06-05 17:10:07 +02:00
Matthias Kuhn
dc36d4a234 Add ssl key with postres as CN 2019-06-05 15:00:59 +02:00
Alessandro Pasotti
d56fc885f6 [oauth] Client registration with JWT
Ported from https://github.com/securedimensions/QGIS-OAuth2-Plugin

The Testbed 13 version provides an additional configuration tab "software statement" which allows a user to automatically register the plugin with a required configuration with the Authorization Server. Of course this can only be leveraged, if the Authorization Server involved supports the registration via digitally signed software statements (JWTs) as described in this ER.
2018-07-19 17:51:07 +02:00
Nyall Dawson
0b452cabbb Spelling 2017-12-03 08:03:30 +10:00
Alessandro Pasotti
9e192ad5e8 Added various line endings PEM tests 2017-11-13 09:00:11 +01:00
Alessandro Pasotti
10292762f5 [auth] New test cases for EC SSL Keys and encodings 2017-11-10 15:44:31 +01:00
Alessandro Pasotti
87117a8b04 [auth][bugfix] Tests for the new SSL key loading logic 2017-11-08 12:20:38 +01:00
Larry Shaffer
99b1c74c4e [auth] Update test certs/keys and add README
* Add expired root/issuer CAs and client cert chains
* Add wildcard server *.qgis.test SSL cert

[ci skip]
2017-10-26 17:36:33 -06:00
Larry Shaffer
8501053a0d Merge pull request #5463 from boundlessgeo/BD-2507-pki-bundle-validation
[auth] PKI bundle validation utility function
2017-10-26 13:52:57 -06:00
Alessandro Pasotti
e20e0764c9 [auth] Add PEM test certificate chain 2017-10-26 18:24:35 +02:00
Larry Shaffer
c66de14055 [auth] Add PKCS8 to PKCS1 key conversion for macOS (deps on libtasn1)
See description of QgsAuthCertUtils::pkcs8PrivateKey.

This fix may be needed on other platforms (untested at this point),
because Qt5 QSslkey class *still* does not directly support creation
using non-PKCS1 PEM- or DER-encoded data, though QCA, whose qca-ossl
plugin is linked to OpenSSL, does support PKCS1 and PKCS8.
2017-10-18 16:07:04 -06:00
Alessandro Pasotti
b1c45d57a6 [auth] Use QGIS test certificates 2017-10-17 18:11:58 +02:00
Alessandro Pasotti
25cd27a513 [auth] Add tests for CA utility methods 2017-10-13 12:59:30 +02:00
Alessandro Pasotti
3ec5f92f0f Replaced the expired SSL certificate and re-enabled OWS PKI test 2016-12-05 10:31:10 +01:00
Alessandro Pasotti
a0e0fcf9a9 [tests] WMS/WFS PKI authentication test 2016-11-04 12:09:57 +01:00
Larry Shaffer
c519e06e29 [auth system] Add PKI test data 2015-09-21 08:51:19 -06:00