lasso/0006-python-Skip-the-DSA-key-test-unless-SHA-1-is-configu.patch

31 lines
1.1 KiB
Diff

From f70eee9ef7faa9ccfb6f815977431ae2e02260bc Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek@redhat.com>
Date: Wed, 16 Jun 2021 12:23:47 +0200
Subject: [PATCH 6/7] python: Skip the DSA key test unless SHA-1 is configured
(#54037)
lasso supports DSA-XXX only with SHA-1. The alternative is to use
DSA-SHA256.
---
bindings/python/tests/profiles_tests.py | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/bindings/python/tests/profiles_tests.py b/bindings/python/tests/profiles_tests.py
index 6ec612077..501fd9199 100755
--- a/bindings/python/tests/profiles_tests.py
+++ b/bindings/python/tests/profiles_tests.py
@@ -276,6 +276,10 @@ class LoginTestCase(unittest.TestCase):
def test07(self):
'''SAMLv2 SSO with DSA key for the IdP'''
+ default_sign_meth = lasso.getDefaultSignatureMethod()
+ if default_sign_meth != lasso.SIGNATURE_METHOD_RSA_SHA1:
+ self.skipTest("This test requires that lasso is compiled with SHA1 as the default signature method")
+
sp = lasso.Server(
os.path.join(dataDir, 'sp5-saml2/metadata.xml'),
os.path.join(dataDir, 'sp5-saml2/private-key.pem'))
--
2.26.3