From 1b0000e0163edc9d831894bf4aac7503f0294062 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Fri, 18 Jun 2021 18:45:38 +0200 Subject: [PATCH 7/7] test13_test_lasso_server_load_metadata: Don't verify signature if lasso is not configured with sha-1 (#54037) --- tests/basic_tests.c | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/tests/basic_tests.c b/tests/basic_tests.c index 0652abc28..470d64fc6 100644 --- a/tests/basic_tests.c +++ b/tests/basic_tests.c @@ -1974,6 +1974,14 @@ START_TEST(test13_test_lasso_server_load_metadata) LassoServer *server = NULL; GList *loaded_entity_ids = NULL; GList blacklisted_1 = { .data = "https://identities.univ-jfc.fr/idp/prod", .next = NULL }; + const gchar *trusted_roots = TESTSDATADIR "/rootCA.crt"; + + /* The IDP metadata file is signed with rsa-sha1, so verifying it would + * fail incase sha1 is not available + */ + if (lasso_get_default_signature_method() != LASSO_SIGNATURE_METHOD_RSA_SHA1) { + trusted_roots = NULL; + } check_not_null(server = lasso_server_new( TESTSDATADIR "/idp5-saml2/metadata.xml", @@ -1983,7 +1991,7 @@ START_TEST(test13_test_lasso_server_load_metadata) block_lasso_logs; check_good_rc(lasso_server_load_metadata(server, LASSO_PROVIDER_ROLE_IDP, TESTSDATADIR "/metadata/renater-metadata.xml", - TESTSDATADIR "/rootCA.crt", + trusted_roots, &blacklisted_1, &loaded_entity_ids, LASSO_SERVER_LOAD_METADATA_FLAG_DEFAULT)); unblock_lasso_logs; -- 2.26.3