Setup test proxy certificates and basic VOMS module testing

Define 3 proxy certificates:

  • 0.pem, long lived proxy, no AC
  • 1.pem, long lived proxy, expired AC
  • 2.pem, expired proxy certificate

starting from test0 IGI test-ca certificate.

ACs can be generated using the latest voms-clients using the voms.example cert and key attached to this issue.

The test name is 'test', a single fqan is produced in generated ACs: /test.

The certificate for NGINX is also attached.

Trust anchors and certificate directory structure

  • /t/certs: contains proxy certificates
  • /t/trust-anchors: contains CA trustanchors (igi test ca files)
  • /t/vomsdir: contains VOMS trustanchors (i.e. LSC files)

Tests

T0

Cert used: 0.pem Result: 200 OK, test checks that voms variables are empty.

T1

Cert used: 1.pem Result: 200 OK, test checks that voms variables are empty and that the error log contains an error message that states that AC validation failed

T2

Cert used: 2.pem Result: an error, test checks that access is not granted to expired certificate

voms_example.cert.pem voms_example.key.pem nginx_voms_example.cert.pem nginx_voms_example.key.pem