Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update exipred certs used for FAPI OIDC conformance test suite #20592

Merged
merged 2 commits into from
Jun 26, 2024

Conversation

mpmadhavig
Copy link
Contributor

$subject

Steps followed:

  1. Get the 2 cert sets.
  2. Extract the <cert-set-id> assigned for the key set from the folder name.
    ex: oQ4KoaavpOuoE7rvQsZEOV_Expire-29_06_2025 -> key = oQ4KoaavpOuoE7rvQsZEOV
  3. Generate the jwks endpoint URL.
    ex: https://keystore.openbankingtest.org.uk/0015800001HQQrZAAX/<cert-set-id>.jwks
  4. Update serverjwks.py and serverjwks2.py using the cert values obtained from the above URL.
  5. Update all enc, sig, tls certs.
  6. Update client_configs.py jwks keys using the private keys in cert sets folders.
    i. For sig keys, use the signing.key file and get the jwks using a pem to jwks tool. ex: https://tribestream.io/tools/pem2jwk/
    ii. For enc keys get the .key file under the encryption related folder or file (this can vary from key set to key set) and covert to jwks.
  7. Update client_configs.py mtls cert-key values using the transport.key and transport.pem files.

Successful build:

@mpmadhavig
Copy link
Contributor Author

@mpmadhavig mpmadhavig merged commit 7188e0e into wso2:master Jun 26, 2024
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants