You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cxf.apache.org by cs...@apache.org on 2013/08/10 09:52:39 UTC

svn commit: r1512574 [6/6] - in /cxf/branches/2.7.x-fixes: parent/ services/ services/xkms/ services/xkms/xkms-client/ services/xkms/xkms-client/src/ services/xkms/xkms-client/src/main/ services/xkms/xkms-client/src/main/java/ services/xkms/xkms-client...

Added: cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/java/org/apache/cxf/xkms/x509/utils/X509UtilsTest.java
URL: http://svn.apache.org/viewvc/cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/java/org/apache/cxf/xkms/x509/utils/X509UtilsTest.java?rev=1512574&view=auto
==============================================================================
--- cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/java/org/apache/cxf/xkms/x509/utils/X509UtilsTest.java (added)
+++ cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/java/org/apache/cxf/xkms/x509/utils/X509UtilsTest.java Sat Aug 10 07:52:35 2013
@@ -0,0 +1,55 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+
+package org.apache.cxf.xkms.x509.utils;
+
+import java.io.InputStream;
+import java.security.cert.X509Certificate;
+import java.util.List;
+
+import javax.xml.bind.JAXBElement;
+import javax.xml.bind.JAXBException;
+
+import org.apache.cxf.xkms.exception.XKMSRequestException;
+import org.apache.cxf.xkms.model.xkms.ValidateRequestType;
+import org.apache.cxf.xkms.x509.validator.BasicValidationTest;
+import org.apache.cxf.xkms.x509.validator.ValidateRequestParser;
+import org.junit.Assert;
+import org.junit.Test;
+
+public class X509UtilsTest extends BasicValidationTest {
+    private static final String CERT_DN = "CN=www.anothersts.com, L=CGN, ST=NRW, C=DE, O=AnotherSTS";
+
+    public void extractValidatingCertsOK() throws JAXBException {
+        InputStream is = this.getClass().getResourceAsStream("/validateRequestOK.xml");
+        @SuppressWarnings("unchecked")
+        JAXBElement<ValidateRequestType> request = (JAXBElement<ValidateRequestType>)unmarshaller.unmarshal(is);
+        List<X509Certificate> certs = ValidateRequestParser.parse(request.getValue());
+        Assert.assertEquals("Exactly one certificate should be found", 1, certs.size());
+        Assert.assertEquals("Unexcpected certificate DN", CERT_DN, certs.get(0).getSubjectDN().getName());
+    }
+
+    @Test(expected = XKMSRequestException.class)
+    public void extractValidatingCertsCorrupted() throws JAXBException {
+        InputStream is = this.getClass().getResourceAsStream("/validateRequestCorrupted.xml");
+        @SuppressWarnings("unchecked")
+        JAXBElement<ValidateRequestType> request = (JAXBElement<ValidateRequestType>)unmarshaller.unmarshal(is);
+        ValidateRequestParser.parse(request.getValue());
+    }
+}

Added: cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/java/org/apache/cxf/xkms/x509/validator/BasicValidationTest.java
URL: http://svn.apache.org/viewvc/cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/java/org/apache/cxf/xkms/x509/validator/BasicValidationTest.java?rev=1512574&view=auto
==============================================================================
--- cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/java/org/apache/cxf/xkms/x509/validator/BasicValidationTest.java (added)
+++ cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/java/org/apache/cxf/xkms/x509/validator/BasicValidationTest.java Sat Aug 10 07:52:35 2013
@@ -0,0 +1,39 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+
+package org.apache.cxf.xkms.x509.validator;
+
+import javax.xml.bind.JAXBContext;
+import javax.xml.bind.JAXBException;
+import javax.xml.bind.Unmarshaller;
+
+import org.apache.cxf.xkms.model.xkms.MessageAbstractType;
+import org.junit.Before;
+
+public class BasicValidationTest {
+    protected JAXBContext jaxbContext;
+    protected Unmarshaller unmarshaller;
+
+
+    @Before
+    public void setUp() throws JAXBException {
+        jaxbContext = JAXBContext.newInstance(MessageAbstractType.class.getPackage().getName());
+        unmarshaller = jaxbContext.createUnmarshaller();
+    }
+}

Added: cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/java/org/apache/cxf/xkms/x509/validator/DateValidatorTest.java
URL: http://svn.apache.org/viewvc/cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/java/org/apache/cxf/xkms/x509/validator/DateValidatorTest.java?rev=1512574&view=auto
==============================================================================
--- cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/java/org/apache/cxf/xkms/x509/validator/DateValidatorTest.java (added)
+++ cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/java/org/apache/cxf/xkms/x509/validator/DateValidatorTest.java Sat Aug 10 07:52:35 2013
@@ -0,0 +1,62 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+package org.apache.cxf.xkms.x509.validator;
+
+import java.io.InputStream;
+
+import javax.xml.bind.JAXBElement;
+import javax.xml.bind.JAXBException;
+
+import org.apache.cxf.xkms.model.xkms.KeyBindingEnum;
+import org.apache.cxf.xkms.model.xkms.ReasonEnum;
+import org.apache.cxf.xkms.model.xkms.StatusType;
+import org.apache.cxf.xkms.model.xkms.ValidateRequestType;
+import org.junit.Assert;
+import org.junit.Test;
+
+public class DateValidatorTest extends BasicValidationTest {
+
+    @Test
+    public void validateDateOK() throws JAXBException {
+        StatusType result = processRequest("/validateRequestOK.xml");
+        Assert.assertEquals(KeyBindingEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_VALID, result.getStatusValue());
+        Assert.assertFalse(result.getValidReason().isEmpty());
+        Assert.assertEquals(ReasonEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_VALIDITY_INTERVAL.value(), result.getValidReason()
+                .get(0));
+    }
+
+    @Test
+    public void validateDateExpired() throws JAXBException {
+        StatusType result = processRequest("/validateRequestExpired.xml");
+        Assert.assertEquals(result.getStatusValue(), KeyBindingEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_INVALID);
+        Assert.assertFalse(result.getInvalidReason().isEmpty());
+        Assert.assertEquals(ReasonEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_VALIDITY_INTERVAL.value(), result
+                .getInvalidReason().get(0));
+    }
+
+    private StatusType processRequest(String path) throws JAXBException {
+        InputStream is = this.getClass().getResourceAsStream(path);
+        @SuppressWarnings("unchecked")
+        JAXBElement<ValidateRequestType> request = (JAXBElement<ValidateRequestType>) unmarshaller.unmarshal(is);
+        DateValidator validator = new DateValidator();
+        return validator.validate(request.getValue());
+
+    }
+
+}

Added: cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/java/org/apache/cxf/xkms/x509/validator/TrustedAuthorityValidatorTest.java
URL: http://svn.apache.org/viewvc/cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/java/org/apache/cxf/xkms/x509/validator/TrustedAuthorityValidatorTest.java?rev=1512574&view=auto
==============================================================================
--- cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/java/org/apache/cxf/xkms/x509/validator/TrustedAuthorityValidatorTest.java (added)
+++ cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/java/org/apache/cxf/xkms/x509/validator/TrustedAuthorityValidatorTest.java Sat Aug 10 07:52:35 2013
@@ -0,0 +1,136 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+
+package org.apache.cxf.xkms.x509.validator;
+
+import java.io.File;
+import java.io.InputStream;
+import java.security.cert.CertificateException;
+import java.security.cert.CertificateFactory;
+import java.security.cert.X509Certificate;
+import java.util.Arrays;
+
+import javax.xml.bind.JAXBElement;
+import javax.xml.bind.JAXBException;
+
+import org.apache.cxf.helpers.FileUtils;
+import org.apache.cxf.xkms.handlers.Applications;
+import org.apache.cxf.xkms.model.xkms.KeyBindingEnum;
+import org.apache.cxf.xkms.model.xkms.ReasonEnum;
+import org.apache.cxf.xkms.model.xkms.StatusType;
+import org.apache.cxf.xkms.model.xkms.UseKeyWithType;
+import org.apache.cxf.xkms.model.xkms.ValidateRequestType;
+import org.apache.cxf.xkms.x509.repo.file.FileCertificateRepo;
+
+import org.junit.Assert;
+import org.junit.Before;
+import org.junit.Test;
+
+public class TrustedAuthorityValidatorTest extends BasicValidationTest {
+    private static final String PATH_TO_RESOURCES = "/trustedAuthorityValidator/";
+    private final X509Certificate certificateRoot;
+    private final X509Certificate certificateAlice;
+    private FileCertificateRepo certificateRepo;
+
+    public TrustedAuthorityValidatorTest() throws CertificateException {
+        certificateRoot = readCertificate("root.cer");
+        certificateAlice = readCertificate("alice.cer");
+    }
+
+    @Before
+    public void setUpCertificateRepo() throws CertificateException {
+        File storageDir = new File("target/teststore_trusted_authority_validator");
+        FileUtils.removeDir(storageDir);
+        storageDir.mkdirs();
+        certificateRepo = new FileCertificateRepo("target/teststore_trusted_authority_validator");
+
+        UseKeyWithType rootKey = new UseKeyWithType();
+        rootKey.setApplication(Applications.PKIX.getUri());
+        String subjectDN = certificateRoot.getSubjectX500Principal().getName();
+        rootKey.setIdentifier(subjectDN);
+        certificateRepo.saveTrustedCACertificate(certificateRoot, rootKey);
+
+        UseKeyWithType aliceKey = new UseKeyWithType();
+        aliceKey.setApplication(Applications.PKIX.getUri());
+        subjectDN = certificateAlice.getSubjectX500Principal().getName();
+        aliceKey.setIdentifier(subjectDN);
+        certificateRepo.saveCACertificate(certificateAlice, aliceKey);
+    }
+
+    @Test
+    public void testIsCertChainValid() throws CertificateException {
+        TrustedAuthorityValidator validator = new TrustedAuthorityValidator(certificateRepo);
+        Assert.assertTrue("Root should be valid",
+                          validator.isCertificateChainValid(Arrays.asList(certificateRoot)));
+        Assert.assertTrue("Alice should be valid",
+                          validator.isCertificateChainValid(Arrays.asList(certificateAlice)));
+    }
+
+    @Test
+    public void testRootCertIsValid() throws JAXBException, CertificateException {
+        StatusType result = processRequest("validateRequestOKRoot.xml");
+        Assert.assertEquals(KeyBindingEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_VALID, result.getStatusValue());
+        Assert.assertFalse(result.getValidReason().isEmpty());
+        Assert.assertEquals(ReasonEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_ISSUER_TRUST.value(), result
+            .getValidReason().get(0));
+    }
+
+    @Test
+    public void testAliceSignedByRootIsValid() throws JAXBException, CertificateException {
+        StatusType result = processRequest("validateRequestOKAlice.xml");
+        Assert.assertEquals(KeyBindingEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_VALID, result.getStatusValue());
+        Assert.assertFalse(result.getValidReason().isEmpty());
+        Assert.assertEquals(ReasonEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_ISSUER_TRUST.value(), result
+            .getValidReason().get(0));
+    }
+
+    @Test
+    public void testDaveSignedByAliceSginedByRootIsValid() throws JAXBException, CertificateException {
+        StatusType result = processRequest("validateRequestOKDave.xml");
+        Assert.assertEquals(KeyBindingEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_VALID, result.getStatusValue());
+        Assert.assertFalse(result.getValidReason().isEmpty());
+        Assert.assertEquals(ReasonEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_ISSUER_TRUST.value(), result
+            .getValidReason().get(0));
+    }
+
+    @Test
+    public void testSelfSignedCertOscarIsNotValid() throws JAXBException, CertificateException {
+        StatusType result = processRequest("validateRequestInvalidOscar.xml");
+        Assert.assertEquals(result.getStatusValue(), KeyBindingEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_INVALID);
+        Assert.assertFalse(result.getInvalidReason().isEmpty());
+        Assert.assertEquals(ReasonEnum.HTTP_WWW_W_3_ORG_2002_03_XKMS_ISSUER_TRUST.value(), result
+            .getInvalidReason().get(0));
+    }
+
+    private StatusType processRequest(String path) throws JAXBException, CertificateException {
+        @SuppressWarnings("unchecked")
+        JAXBElement<ValidateRequestType> request = (JAXBElement<ValidateRequestType>)unmarshaller.unmarshal(this
+            .getClass().getResourceAsStream(PATH_TO_RESOURCES + path));
+        TrustedAuthorityValidator validator = new TrustedAuthorityValidator(certificateRepo);
+        return validator.validate(request.getValue());
+    }
+
+    private static X509Certificate readCertificate(String path) throws CertificateException {
+        InputStream inputStream = TrustedAuthorityValidatorTest.class.getResourceAsStream(PATH_TO_RESOURCES
+                                                                                          + path);
+        CertificateFactory cf = CertificateFactory.getInstance("X.509");
+        return (X509Certificate)cf.generateCertificate(inputStream);
+    }
+
+}

Added: cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/cert1.bas64
URL: http://svn.apache.org/viewvc/cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/cert1.bas64?rev=1512574&view=auto
==============================================================================
--- cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/cert1.bas64 (added)
+++ cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/cert1.bas64 Sat Aug 10 07:52:35 2013
@@ -0,0 +1,2 @@
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
 qhA/DcyL6UlJarZSk7U3XEGvs60p0YThEgbpHCkgyruxocyQ4z3AgMBAAGjgbYwgbMwHQYDVR0OBBYEFCN8oLmMeAxU7v5mcE6U2bDmP63cMIGDBgNVHSMEfDB6gBQjfKC5jHgMVO7+ZnBOlNmw5j+t3KFXpFUwUzEPMA0GA1UEChMGSXNzdWVyMQswCQYDVQQGEwJERTEMMAoGA1UECBMDTlJXMQwwCgYDVQQHEwNDR04xFzAVBgNVBAMTDnd3dy5pc3N1ZXIuY29tggkAojYNnDcwupEwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQUFAAOCAgEAPDAcr3TdfLlczzkBR6iiN63ERK/FnIcB8vIJdxJeYsq/w49CgxMjOugGsZ7rKTmT89zPQzVe/GJITRHNS1q81cf8hd4SWZ/i3z7k8tqhMRq0b31aQqkLzjPWD6PAwzDWUAY8HMMq9Gbxx52u4yXxx1PabTxq/0EDtX7+JfZ462BGtWCcUrrXq6Wck4acvAw2NmMfUR+RYLVKLINen82KD1YAl+mOKFfc3r9i1mLi/ylE2LuKN6Z3LnYAcaUgq22mRKR6hGXyw4zU2HzFNlgBnoJottYdZWxa5Chcr6wMgZS/rg3gQ8z6ALOFG/UTBxcXRmI0CCBhTPjn4Dq8gd+BWixBzFVF8DoYEyVEX7fGNOAwb3OZCQMVsaM6PuqIfiz0s5oiqdohYSzwXc6ajmQB7JJkfHE8B43dnL+G1+d2mqvhXhTeJNlwC0Hcqtc7MY2rRDY0Kj0LrGqjhN6kKiXHXA0YqVpn1W7qsu+GS51jxpxZ2DUELNuIhXU/xbP3IS/BKMgiwNM2kZBtP0qkfKlsO9IemiQTNGZzxm+DJvE5U4wC0cVxsvqRTqdfKumaIMoUHsIrC5OWibTZ658KFuZZGHtxolH1sZnSPjs9D9RC9xDv5OyIHcHcMhN6c7wk2Tf3GpY91r6Sp6TxIkB2cZQDT8eTSS
 /PTHC+muh5/365lRE=
+						

Added: cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/cert1.cer
URL: http://svn.apache.org/viewvc/cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/cert1.cer?rev=1512574&view=auto
==============================================================================
--- cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/cert1.cer (added)
+++ cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/cert1.cer Sat Aug 10 07:52:35 2013
@@ -0,0 +1,29 @@
+-----BEGIN CERTIFICATE-----
+MIIF4DCCA8igAwIBAgIJAKI2DZw3MLqRMA0GCSqGSIb3DQEBBQUAMFMxDzANBgNVBAoTBklzc3Vl
+cjELMAkGA1UEBhMCREUxDDAKBgNVBAgTA05SVzEMMAoGA1UEBxMDQ0dOMRcwFQYDVQQDEw53d3cu
+aXNzdWVyLmNvbTAeFw0xMjAyMjkxMDIzMDFaFw0xMzAyMjgxMDIzMDFaMFMxDzANBgNVBAoTBklz
+c3VlcjELMAkGA1UEBhMCREUxDDAKBgNVBAgTA05SVzEMMAoGA1UEBxMDQ0dOMRcwFQYDVQQDEw53
+d3cuaXNzdWVyLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMSCbQd/92wAJnfa
+FZTRmEP0afGGS0lGJghLg3uoMpewcQj4A2RZVJl2sfFbk/OppUqtJYxLKv0LRkx9MsZ2rQOq1Yfm
+HShxpb6PeyRx8dEgSCtgWivVzKk/w+UudilQVC3cTNWtCayjajHcc0UAG4Kaaypl5CNEWH0M4Jap
+cjFCwU3t7INI/DcAZK2J0aZI0pevw977nEzHyHOeea3O0RFrTTQomt/fv4gtP08F4x13cK0ssD93
+YZwhzFQ/63E/P0UM6daKJG8Ysg9owjwuSGR6bDR/FNuDeH4hqq0QGuvFHANpVTakvE5d+WWw1BDI
+Z8RK2vf3yFs+/jazTUhUJvoiniqtTf6VnMUmI7n5mDFQbutiIOeFzK4bQ+KKYch/aO2Pc6dXoEYm
+CfgA/SdcoOhEfGJKqU8mvPU/bXJEDVj1VgFzRssnaZcmReXfrcFuxW9fkVMEQ4jXlUF6v63uwqpd
+MWqgBGlti5hHjOuE/MOYpmBv6mUNX0MxqtgRU7/8fUoR6HwgAlRBOoWGCHIzv/0V6fSm804OiUf+
+DY65dbpZRhZmd7yANYYoewSwrNokDXGlz6e5cPaXMUnakIgcj2crr+dqQpxkrpTgP5ihq8Jrw8GH
+YZwm0SE4dqhA/DcyL6UlJarZSk7U3XEGvs60p0YThEgbpHCkgyruxocyQ4z3AgMBAAGjgbYwgbMw
+HQYDVR0OBBYEFCN8oLmMeAxU7v5mcE6U2bDmP63cMIGDBgNVHSMEfDB6gBQjfKC5jHgMVO7+ZnBO
+lNmw5j+t3KFXpFUwUzEPMA0GA1UEChMGSXNzdWVyMQswCQYDVQQGEwJERTEMMAoGA1UECBMDTlJX
+MQwwCgYDVQQHEwNDR04xFzAVBgNVBAMTDnd3dy5pc3N1ZXIuY29tggkAojYNnDcwupEwDAYDVR0T
+BAUwAwEB/zANBgkqhkiG9w0BAQUFAAOCAgEAPDAcr3TdfLlczzkBR6iiN63ERK/FnIcB8vIJdxJe
+Ysq/w49CgxMjOugGsZ7rKTmT89zPQzVe/GJITRHNS1q81cf8hd4SWZ/i3z7k8tqhMRq0b31aQqkL
+zjPWD6PAwzDWUAY8HMMq9Gbxx52u4yXxx1PabTxq/0EDtX7+JfZ462BGtWCcUrrXq6Wck4acvAw2
+NmMfUR+RYLVKLINen82KD1YAl+mOKFfc3r9i1mLi/ylE2LuKN6Z3LnYAcaUgq22mRKR6hGXyw4zU
+2HzFNlgBnoJottYdZWxa5Chcr6wMgZS/rg3gQ8z6ALOFG/UTBxcXRmI0CCBhTPjn4Dq8gd+BWixB
+zFVF8DoYEyVEX7fGNOAwb3OZCQMVsaM6PuqIfiz0s5oiqdohYSzwXc6ajmQB7JJkfHE8B43dnL+G
+1+d2mqvhXhTeJNlwC0Hcqtc7MY2rRDY0Kj0LrGqjhN6kKiXHXA0YqVpn1W7qsu+GS51jxpxZ2DUE
+LNuIhXU/xbP3IS/BKMgiwNM2kZBtP0qkfKlsO9IemiQTNGZzxm+DJvE5U4wC0cVxsvqRTqdfKuma
+IMoUHsIrC5OWibTZ658KFuZZGHtxolH1sZnSPjs9D9RC9xDv5OyIHcHcMhN6c7wk2Tf3GpY91r6S
+p6TxIkB2cZQDT8eTSS/PTHC+muh5/365lRE=
+-----END CERTIFICATE-----

Added: cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/registerRequest.xml
URL: http://svn.apache.org/viewvc/cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/registerRequest.xml?rev=1512574&view=auto
==============================================================================
--- cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/registerRequest.xml (added)
+++ cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/registerRequest.xml Sat Aug 10 07:52:35 2013
@@ -0,0 +1,82 @@
+<?xml version="1.0" encoding="utf-8"?>
+<RegisterRequest xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
+    xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="I1494ac4351b7de5c174d455b7000e18f"
+    Service="http://www.example.org/XKMS" xmlns="http://www.w3.org/2002/03/xkms#">
+    <RespondWith>http://www.w3.org/2002/03/xkms#X509Cert</RespondWith>
+    <RespondWith>http://www.w3.org/2002/03/xkms#X509Chain</RespondWith>
+    <PrototypeKeyBinding Id="I269e655567dbae568591c0a06957529e">
+        <ds:KeyInfo>
+            <ds:KeyValue>
+                <ds:RSAKeyValue>
+                    <ds:Modulus>
+                        0nIsmR+aVW2egl5MIfOKy4HuMKkk9AZ/IQuDLVPlhzOfgngjVQCjr8uvmnqtNu8
+                        HBupui8LgGthO6U9D0CNT5mbmhIAErRADUMIAFsi7LzBarUvNWTqYNEJmcHsAUZ
+                        drdcDrkNnG7SzbuJx+GDNiHKVDQggPBLc1XagW20RMvok=
+                    </ds:Modulus>
+                    <ds:Exponent>AQAB</ds:Exponent>
+                </ds:RSAKeyValue>
+            </ds:KeyValue>
+        </ds:KeyInfo>
+        <KeyUsage>http://www.w3.org/2002/03/xkms#Signature</KeyUsage>
+        <KeyUsage>http://www.w3.org/2002/03/xkms#Encryption</KeyUsage>
+        <KeyUsage>http://www.w3.org/2002/03/xkms#Exchange</KeyUsage>
+        <UseKeyWith Application="urn:ietf:rfc:2459"
+            Identifier='C="US" O="Alice Corp" CN="Alice Aardvark"' />
+        <UseKeyWith Application="urn:ietf:rfc:2633"
+            Identifier="alice@example.com" />
+        <UseKeyWith Application="http://ca.example.com/cps/20030401/class3"
+            Identifier="alice@example.com" />
+        <RevocationCodeIdentifier>
+            5AEAai06hFJEkuqyDyqNh8k/u3M=
+        </RevocationCodeIdentifier>
+    </PrototypeKeyBinding>
+    <Authentication>
+        <KeyBindingAuthentication>
+            <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+                <SignedInfo>
+                    <CanonicalizationMethod
+                        Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
+                    <SignatureMethod
+                        Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1" />
+                    <Reference URI="#I269e655567dbae568591c0a06957529e">
+                        <Transforms>
+                            <Transform
+                                Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
+                        </Transforms>
+                        <DigestMethod
+                            Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
+                        <DigestValue>WCbpkifxJ1zIJ+V6/knZgxRhR34=
+                        </DigestValue>
+                    </Reference>
+                </SignedInfo>
+                <SignatureValue>iJSKM+98hj5ae+btC2WjwBYP+/k=
+                </SignatureValue>
+            </Signature>
+        </KeyBindingAuthentication>
+    </Authentication>
+    <ProofOfPossession>
+        <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+            <SignedInfo>
+                <CanonicalizationMethod
+                    Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
+                <SignatureMethod
+                    Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
+                <Reference URI="#I269e655567dbae568591c0a06957529e">
+                    <Transforms>
+                        <Transform
+                            Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
+                    </Transforms>
+                    <DigestMethod
+                        Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
+                    <DigestValue>WCbpkifxJ1zIJ+V6/knZgxRhR34=
+                    </DigestValue>
+                </Reference>
+            </SignedInfo>
+            <SignatureValue>
+                DcPw742vN120QNrCjCKw0jiCX3pUvbMeRkYjktZkn4nbgo1b7leXU0sJgXM2CY/
+                oQugaRsgz18+qUzM0UX+jr1t1wtCMci5fjzVKZB63oZyKZ9+CJLcBCbirsgJAId
+                +Pq9w4WiwKDf2AytsdXHlN5V1byQIkpfR1CypvBzQa1b4=
+            </SignatureValue>
+        </Signature>
+    </ProofOfPossession>
+</RegisterRequest> 

Added: cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/registerRequestWithCertificate.xml
URL: http://svn.apache.org/viewvc/cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/registerRequestWithCertificate.xml?rev=1512574&view=auto
==============================================================================
--- cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/registerRequestWithCertificate.xml (added)
+++ cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/registerRequestWithCertificate.xml Sat Aug 10 07:52:35 2013
@@ -0,0 +1,74 @@
+<?xml version="1.0" encoding="utf-8"?>
+<RegisterRequest xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
+    xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="I1494ac4351b7de5c174d455b7000e18f"
+    Service="http://www.example.org/XKMS" xmlns="http://www.w3.org/2002/03/xkms#">
+    <RespondWith>http://www.w3.org/2002/03/xkms#X509Cert</RespondWith>
+    <RespondWith>http://www.w3.org/2002/03/xkms#X509Chain</RespondWith>
+    <PrototypeKeyBinding Id="I269e655567dbae568591c0a06957529e">
+        <ds:KeyInfo>
+            <ds:X509Data>
+                <ds:X509Certificate>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
+                </ds:X509Certificate>
+            </ds:X509Data>
+        </ds:KeyInfo>
+        <KeyUsage>http://www.w3.org/2002/03/xkms#Signature</KeyUsage>
+        <KeyUsage>http://www.w3.org/2002/03/xkms#Encryption</KeyUsage>
+        <KeyUsage>http://www.w3.org/2002/03/xkms#Exchange</KeyUsage>
+        <UseKeyWith Application="urn:ietf:rfc:2459"
+            Identifier='C="US" O="Alice Corp" CN="Alice Aardvark"' />
+        <!-- <UseKeyWith Application="urn:ietf:rfc:2633" Identifier="alice@example.com" 
+            /> <UseKeyWith Application="http://ca.example.com/cps/20030401/class3" Identifier="alice@example.com" 
+            /> -->
+        <RevocationCodeIdentifier>
+            5AEAai06hFJEkuqyDyqNh8k/u3M=
+        </RevocationCodeIdentifier>
+    </PrototypeKeyBinding>
+    <Authentication>
+        <KeyBindingAuthentication>
+            <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+                <SignedInfo>
+                    <CanonicalizationMethod
+                        Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
+                    <SignatureMethod
+                        Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1" />
+                    <Reference URI="#I269e655567dbae568591c0a06957529e">
+                        <Transforms>
+                            <Transform
+                                Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
+                        </Transforms>
+                        <DigestMethod
+                            Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
+                        <DigestValue>WCbpkifxJ1zIJ+V6/knZgxRhR34=</DigestValue>
+                    </Reference>
+                </SignedInfo>
+                <SignatureValue>iJSKM+98hj5ae+btC2WjwBYP+/k=
+                </SignatureValue>
+            </Signature>
+        </KeyBindingAuthentication>
+    </Authentication>
+    <ProofOfPossession>
+        <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+            <SignedInfo>
+                <CanonicalizationMethod
+                    Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
+                <SignatureMethod
+                    Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
+                <Reference URI="#I269e655567dbae568591c0a06957529e">
+                    <Transforms>
+                        <Transform
+                            Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
+                    </Transforms>
+                    <DigestMethod
+                        Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
+                    <DigestValue>WCbpkifxJ1zIJ+V6/knZgxRhR34=
+                    </DigestValue>
+                </Reference>
+            </SignedInfo>
+            <SignatureValue>
+                DcPw742vN120QNrCjCKw0jiCX3pUvbMeRkYjktZkn4nbgo1b7leXU0sJgXM2CY/
+                oQugaRsgz18+qUzM0UX+jr1t1wtCMci5fjzVKZB63oZyKZ9+CJLcBCbirsgJAId
+                +Pq9w4WiwKDf2AytsdXHlN5V1byQIkpfR1CypvBzQa1b4=
+            </SignatureValue>
+        </Signature>
+    </ProofOfPossession>
+</RegisterRequest> 

Added: cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/registerResult.xml
URL: http://svn.apache.org/viewvc/cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/registerResult.xml?rev=1512574&view=auto
==============================================================================
--- cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/registerResult.xml (added)
+++ cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/registerResult.xml Sat Aug 10 07:52:35 2013
@@ -0,0 +1,59 @@
+<?xml version="1.0" encoding="utf-8"?>
+<RegisterResult xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
+    xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="I92ed24772e43843b3d23020ad9ec9754"
+    Service="http://www.example.org/XKMS" ResultMajor="http://www.w3.org/2002/03/xkms#Success"
+    RequestId="I1494ac4351b7de5c174d455b7000e18f" xmlns="http://www.w3.org/2002/03/xkms#">
+    <KeyBinding Id="Ia26450ebe93f62b3b3ab137fc6a61c36">
+        <ds:KeyInfo>
+            <ds:X509Data>
+                <ds:X509Certificate>
+                    MIICEDCCAX2gAwIBAgIQimXeUAxYJbJMady9vV1bLjAJBgUrDgMCHQUAMBIxEDA
+                    OBgNVBAMTB1Rlc3QgQ0EwHhcNMDMwODE1MDcwMDAwWhcNMDUwODE1MDY1OTU5Wj
+                    ArMSkwJwYDVQQDEyBBbGljZSBBYXJkdmFyayBPPUFsaWNlIENvcnAgQz1VUzCBn
+                    zANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA0nIsmR+aVW2egl5MIfOKy4HuMKkk
+                    9AZ/IQuDLVPlhzOfgngjVQCjr8uvmnqtNu8HBupui8LgGthO6U9D0CNT5mbmhIA
+                    ErRADUMIAFsi7LzBarUvNWTqYNEJmcHsAUZdrdcDrkNnG7SzbuJx+GDNiHKVDQg
+                    gPBLc1XagW20RMvokCAwEAAaNWMFQwDQYDVR0KBAYwBAMCBkAwQwYDVR0BBDwwO
+                    oAQAaVOkaVLLKoFmLN37pC8uqEUMBIxEDAOBgNVBAMTB1Rlc3QgQ0GCEC4MndUX
+                    jPG1TZxVKg+HutAwCQYFKw4DAh0FAAOBgQABU91ka7IlkXCfv4Zh2Ohwgg2yObt
+                    Y3+6C/BTFGrOEBJDy+DoxJ/NuBF18w3rrrR18xE6jNKYLCQb8zUGk4QOG5Y+HT/
+                    QTTFvWkiOLXcpTuhnOhXatr42FoYpDkjx2QWK+J5Q2l/Rgjgc/0ZV8U/kD8UuRk
+                    Xp4AZh7QsiX8AcO0w==
+                </ds:X509Certificate>
+                <ds:X509Certificate>
+                    MIIB9zCCAWSgAwIBAgIQLgyd1ReM8bVNnFUqD4e60DAJBgUrDgMCHQUAMBIxEDA
+                    OBgNVBAMTB1Rlc3QgQ0EwHhcNMDMwODE1MDcwMDAwWhcNMTAwODE1MDcwMDAwWj
+                    ASMRAwDgYDVQQDEwdUZXN0IENBMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBg
+                    QCn23HHp+HtXpiyKVSDtdE3dO0r0oLB/H9sxUEkeXB8oMxwbhdcizWH92zrtm1V
+                    fVtxkfmwF14ZXoyDZHeZXuCOtAfz/mW6s2gmfD45TfFFVGksDGVRNK5XmKXA5sE
+                    C51RCvaxzGBdGDlCuVPqX7Cq3IcZpRU1IXbi5YzGwV7j6LwIDAQABo1YwVDANBg
+                    NVHQoEBjAEAwIHgDBDBgNVHQEEPDA6gBABpU6RpUssqgWYs3fukLy6oRQwEjEQM
+                    A4GA1UEAxMHVGVzdCBDQYIQLgyd1ReM8bVNnFUqD4e60DAJBgUrDgMCHQUAA4GB
+                    ABDYD4Fwx2dscu+BgYcZ+GoQQtCJkwJEXytb4zlNl7HLFKbXSw4m0blQquIsfsi
+                    QgFYAQBXSbu7aeUqqmSGHvILu3BGwVOKjxbHfcM4/MefuTtpOpCN40wy3YwwngD
+                    tHTaIqm8NwS966PE+W9f8kD70q5FNwf+GF/lX9qGc/x435
+                </ds:X509Certificate>
+            </ds:X509Data>
+        </ds:KeyInfo>
+        <KeyUsage>http://www.w3.org/2002/03/xkms#Signature</KeyUsage>
+        <KeyUsage>http://www.w3.org/2002/03/xkms#Encryption</KeyUsage>
+        <KeyUsage>http://www.w3.org/2002/03/xkms#Exchange</KeyUsage>
+        <UseKeyWith Application="urn:ietf:rfc:2459"
+            Identifier='C="US"
+          O="Alice Corp" CN="Alice Aardvark"' />
+        <UseKeyWith Application="urn:ietf:rfc:2633"
+            Identifier="alice@example.com" />
+        <UseKeyWith Application="http://ca.example.com/cps/20030401/class3"
+            Identifier="alice@example.com" />
+        <Status StatusValue="http://www.w3.org/2002/03/xkms#Valid">
+            <ValidReason>http://www.w3.org/2002/03/xkms#Signature
+            </ValidReason>
+            <ValidReason>http://www.w3.org/2002/03/xkms#IssuerTrust
+            </ValidReason>
+            <ValidReason>http://www.w3.org/2002/03/xkms#RevocationStatus
+            </ValidReason>
+            <ValidReason>http://www.w3.org/2002/03/xkms#ValidityInterval
+            </ValidReason>
+        </Status>
+    </KeyBinding>
+</RegisterResult>
\ No newline at end of file

Added: cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/reissueRequest.xml
URL: http://svn.apache.org/viewvc/cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/reissueRequest.xml?rev=1512574&view=auto
==============================================================================
--- cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/reissueRequest.xml (added)
+++ cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/reissueRequest.xml Sat Aug 10 07:52:35 2013
@@ -0,0 +1,85 @@
+<?xml version="1.0" encoding="utf-8"?>
+<ReissueRequest xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
+    xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="I3a682dfb94cc8e9b3b648026783a8094"
+    Service="http://www.example.org/XKMS" xmlns="http://www.w3.org/2002/03/xkms#">
+    <RespondWith>http://www.w3.org/2002/03/xkms#X509Cert</RespondWith>
+    <RespondWith>http://www.w3.org/2002/03/xkms#X509Chain</RespondWith>
+    <ReissueKeyBinding Id="I518fc89b03369bccec3d1ee9d985c436">
+        <ds:KeyInfo>
+            <ds:X509Data>
+                <ds:X509Certificate>
+                    MIICEDCCAX2gAwIBAgIQimXeUAxYJbJMady9vV1bLjAJBgUrDgMCHQUAMBIxEDA
+                    OBgNVBAMTB1Rlc3QgQ0EwHhcNMDMwODE1MDcwMDAwWhcNMDUwODE1MDY1OTU5Wj
+                    ArMSkwJwYDVQQDEyBBbGljZSBBYXJkdmFyayBPPUFsaWNlIENvcnAgQz1VUzCBn
+                    zANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA0nIsmR+aVW2egl5MIfOKy4HuMKkk
+                    9AZ/IQuDLVPlhzOfgngjVQCjr8uvmnqtNu8HBupui8LgGthO6U9D0CNT5mbmhIA
+                    ErRADUMIAFsi7LzBarUvNWTqYNEJmcHsAUZdrdcDrkNnG7SzbuJx+GDNiHKVDQg
+                    gPBLc1XagW20RMvokCAwEAAaNWMFQwDQYDVR0KBAYwBAMCBkAwQwYDVR0BBDwwO
+                    oAQAaVOkaVLLKoFmLN37pC8uqEUMBIxEDAOBgNVBAMTB1Rlc3QgQ0GCEC4MndUX
+                    jPG1TZxVKg+HutAwCQYFKw4DAh0FAAOBgQABU91ka7IlkXCfv4Zh2Ohwgg2yObt
+                    Y3+6C/BTFGrOEBJDy+DoxJ/NuBF18w3rrrR18xE6jNKYLCQb8zUGk4QOG5Y+HT/
+                    QTTFvWkiOLXcpTuhnOhXatr42FoYpDkjx2QWK+J5Q2l/Rgjgc/0ZV8U/kD8UuRk
+                    Xp4AZh7QsiX8AcO0w==
+                </ds:X509Certificate>
+            </ds:X509Data>
+        </ds:KeyInfo>
+        <Status StatusValue="http://www.w3.org/2002/03/xkms#Valid" />
+    </ReissueKeyBinding>
+    <Authentication>
+        <KeyBindingAuthentication>
+            <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+                <SignedInfo>
+                    <CanonicalizationMethod
+                        Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
+                    <SignatureMethod
+                        Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1" />
+                    <Reference URI="#I518fc89b03369bccec3d1ee9d985c436">
+                        <Transforms>
+                            <Transform
+                                Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
+                                <ec:InclusiveNamespaces
+                                    PrefixList="ds xenc #default"
+                                    xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" />
+                            </Transform>
+                        </Transforms>
+                        <DigestMethod
+                            Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
+                        <DigestValue>qnhsUF9RMxxGydG/5KdJjWhtBFE=
+                        </DigestValue>
+                    </Reference>
+                </SignedInfo>
+                <SignatureValue>+gKw3b0qi9BaIqmN1gIyvj1UxRs=
+                </SignatureValue>
+            </Signature>
+        </KeyBindingAuthentication>
+    </Authentication>
+    <ProofOfPossession>
+        <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+            <SignedInfo>
+                <CanonicalizationMethod
+                    Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
+                <SignatureMethod
+                    Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
+                <Reference URI="#I518fc89b03369bccec3d1ee9d985c436">
+                    <Transforms>
+                        <Transform
+                            Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
+                            <ec:InclusiveNamespaces
+                                PrefixList="ds xenc #default"
+                                xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" />
+                        </Transform>
+                    </Transforms>
+                    <DigestMethod
+                        Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
+                    <DigestValue>qnhsUF9RMxxGydG/5KdJjWhtBFE=
+                    </DigestValue>
+                </Reference>
+            </SignedInfo>
+            <SignatureValue>
+                sP/RWAA7fnv86ZgwOlfxTwN05akxyf65rCw7rwXNkJmx0fxUNFJ+qKDqmIh2KyvFyBut6FredSXj
+                t3iDIXUKMmjA2/VPGEX8yyd71DbRqf9dXb2FzkvkKrCbYumlavbrChpEwiMUqk2rd5tjkFAZjYRA
+                tuURoFfmoOYY/M+mNUU=
+            </SignatureValue>
+        </Signature>
+    </ProofOfPossession>
+</ReissueRequest>
\ No newline at end of file

Added: cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/revokeRequest.xml
URL: http://svn.apache.org/viewvc/cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/revokeRequest.xml?rev=1512574&view=auto
==============================================================================
--- cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/revokeRequest.xml (added)
+++ cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/revokeRequest.xml Sat Aug 10 07:52:35 2013
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="utf-8"?>
+<RevokeRequest xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
+    xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="I2aa2c2f37195c9c4364c55f15df68091"
+    Service="http://www.example.org/XKMS" xmlns="http://www.w3.org/2002/03/xkms#">
+    <RevokeKeyBinding Id="Ie91dfbf1c948d5cf142099676968caf1">
+        <ds:KeyInfo>
+            <ds:X509Data>
+                <ds:X509Certificate>
+                    MIICEDCCAX2gAwIBAgIQimXeUAxYJbJMady9vV1bLjAJBgUrDgMCHQUAMBIxEDA
+                    OBgNVBAMTB1Rlc3QgQ0EwHhcNMDMwODE1MDcwMDAwWhcNMDUwODE1MDY1OTU5Wj
+                    ArMSkwJwYDVQQDEyBBbGljZSBBYXJkdmFyayBPPUFsaWNlIENvcnAgQz1VUzCBn
+                    zANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA0nIsmR+aVW2egl5MIfOKy4HuMKkk
+                    9AZ/IQuDLVPlhzOfgngjVQCjr8uvmnqtNu8HBupui8LgGthO6U9D0CNT5mbmhIA
+                    ErRADUMIAFsi7LzBarUvNWTqYNEJmcHsAUZdrdcDrkNnG7SzbuJx+GDNiHKVDQg
+                    gPBLc1XagW20RMvokCAwEAAaNWMFQwDQYDVR0KBAYwBAMCBkAwQwYDVR0BBDwwO
+                    oAQAaVOkaVLLKoFmLN37pC8uqEUMBIxEDAOBgNVBAMTB1Rlc3QgQ0GCEC4MndUX
+                    jPG1TZxVKg+HutAwCQYFKw4DAh0FAAOBgQABU91ka7IlkXCfv4Zh2Ohwgg2yObt
+                    Y3+6C/BTFGrOEBJDy+DoxJ/NuBF18w3rrrR18xE6jNKYLCQb8zUGk4QOG5Y+HT/
+                    QTTFvWkiOLXcpTuhnOhXatr42FoYpDkjx2QWK+J5Q2l/Rgjgc/0ZV8U/kD8UuRk
+                    Xp4AZh7QsiX8AcO0w==
+                </ds:X509Certificate>
+            </ds:X509Data>
+        </ds:KeyInfo>
+        <Status StatusValue="http://www.w3.org/2002/03/xkms#Indeterminate" />
+    </RevokeKeyBinding>
+    <RevocationCode>PHx8li2SUhrJv2e1DyeWbGbD6rs=</RevocationCode>
+</RevokeRequest>

Added: cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/store1/CN-www.issuer.com_L-CGN_ST-NRW_C-DE_O-Issuer-11688544847478700689-CN-www.issuer.com_L-CGN_ST-NRW_C-DE_O-Issuer.cer
URL: http://svn.apache.org/viewvc/cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/store1/CN-www.issuer.com_L-CGN_ST-NRW_C-DE_O-Issuer-11688544847478700689-CN-www.issuer.com_L-CGN_ST-NRW_C-DE_O-Issuer.cer?rev=1512574&view=auto
==============================================================================
--- cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/store1/CN-www.issuer.com_L-CGN_ST-NRW_C-DE_O-Issuer-11688544847478700689-CN-www.issuer.com_L-CGN_ST-NRW_C-DE_O-Issuer.cer (added)
+++ cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/store1/CN-www.issuer.com_L-CGN_ST-NRW_C-DE_O-Issuer-11688544847478700689-CN-www.issuer.com_L-CGN_ST-NRW_C-DE_O-Issuer.cer Sat Aug 10 07:52:35 2013
@@ -0,0 +1,29 @@
+-----BEGIN CERTIFICATE-----
+MIIF4DCCA8igAwIBAgIJAKI2DZw3MLqRMA0GCSqGSIb3DQEBBQUAMFMxDzANBgNVBAoTBklzc3Vl
+cjELMAkGA1UEBhMCREUxDDAKBgNVBAgTA05SVzEMMAoGA1UEBxMDQ0dOMRcwFQYDVQQDEw53d3cu
+aXNzdWVyLmNvbTAeFw0xMjAyMjkxMDIzMDFaFw0xMzAyMjgxMDIzMDFaMFMxDzANBgNVBAoTBklz
+c3VlcjELMAkGA1UEBhMCREUxDDAKBgNVBAgTA05SVzEMMAoGA1UEBxMDQ0dOMRcwFQYDVQQDEw53
+d3cuaXNzdWVyLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMSCbQd/92wAJnfa
+FZTRmEP0afGGS0lGJghLg3uoMpewcQj4A2RZVJl2sfFbk/OppUqtJYxLKv0LRkx9MsZ2rQOq1Yfm
+HShxpb6PeyRx8dEgSCtgWivVzKk/w+UudilQVC3cTNWtCayjajHcc0UAG4Kaaypl5CNEWH0M4Jap
+cjFCwU3t7INI/DcAZK2J0aZI0pevw977nEzHyHOeea3O0RFrTTQomt/fv4gtP08F4x13cK0ssD93
+YZwhzFQ/63E/P0UM6daKJG8Ysg9owjwuSGR6bDR/FNuDeH4hqq0QGuvFHANpVTakvE5d+WWw1BDI
+Z8RK2vf3yFs+/jazTUhUJvoiniqtTf6VnMUmI7n5mDFQbutiIOeFzK4bQ+KKYch/aO2Pc6dXoEYm
+CfgA/SdcoOhEfGJKqU8mvPU/bXJEDVj1VgFzRssnaZcmReXfrcFuxW9fkVMEQ4jXlUF6v63uwqpd
+MWqgBGlti5hHjOuE/MOYpmBv6mUNX0MxqtgRU7/8fUoR6HwgAlRBOoWGCHIzv/0V6fSm804OiUf+
+DY65dbpZRhZmd7yANYYoewSwrNokDXGlz6e5cPaXMUnakIgcj2crr+dqQpxkrpTgP5ihq8Jrw8GH
+YZwm0SE4dqhA/DcyL6UlJarZSk7U3XEGvs60p0YThEgbpHCkgyruxocyQ4z3AgMBAAGjgbYwgbMw
+HQYDVR0OBBYEFCN8oLmMeAxU7v5mcE6U2bDmP63cMIGDBgNVHSMEfDB6gBQjfKC5jHgMVO7+ZnBO
+lNmw5j+t3KFXpFUwUzEPMA0GA1UEChMGSXNzdWVyMQswCQYDVQQGEwJERTEMMAoGA1UECBMDTlJX
+MQwwCgYDVQQHEwNDR04xFzAVBgNVBAMTDnd3dy5pc3N1ZXIuY29tggkAojYNnDcwupEwDAYDVR0T
+BAUwAwEB/zANBgkqhkiG9w0BAQUFAAOCAgEAPDAcr3TdfLlczzkBR6iiN63ERK/FnIcB8vIJdxJe
+Ysq/w49CgxMjOugGsZ7rKTmT89zPQzVe/GJITRHNS1q81cf8hd4SWZ/i3z7k8tqhMRq0b31aQqkL
+zjPWD6PAwzDWUAY8HMMq9Gbxx52u4yXxx1PabTxq/0EDtX7+JfZ462BGtWCcUrrXq6Wck4acvAw2
+NmMfUR+RYLVKLINen82KD1YAl+mOKFfc3r9i1mLi/ylE2LuKN6Z3LnYAcaUgq22mRKR6hGXyw4zU
+2HzFNlgBnoJottYdZWxa5Chcr6wMgZS/rg3gQ8z6ALOFG/UTBxcXRmI0CCBhTPjn4Dq8gd+BWixB
+zFVF8DoYEyVEX7fGNOAwb3OZCQMVsaM6PuqIfiz0s5oiqdohYSzwXc6ajmQB7JJkfHE8B43dnL+G
+1+d2mqvhXhTeJNlwC0Hcqtc7MY2rRDY0Kj0LrGqjhN6kKiXHXA0YqVpn1W7qsu+GS51jxpxZ2DUE
+LNuIhXU/xbP3IS/BKMgiwNM2kZBtP0qkfKlsO9IemiQTNGZzxm+DJvE5U4wC0cVxsvqRTqdfKuma
+IMoUHsIrC5OWibTZ658KFuZZGHtxolH1sZnSPjs9D9RC9xDv5OyIHcHcMhN6c7wk2Tf3GpY91r6S
+p6TxIkB2cZQDT8eTSS/PTHC+muh5/365lRE=
+-----END CERTIFICATE-----

Added: cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/alice.cer
URL: http://svn.apache.org/viewvc/cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/alice.cer?rev=1512574&view=auto
==============================================================================
--- cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/alice.cer (added)
+++ cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/alice.cer Sat Aug 10 07:52:35 2013
@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

Added: cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/dave.cer
URL: http://svn.apache.org/viewvc/cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/dave.cer?rev=1512574&view=auto
==============================================================================
--- cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/dave.cer (added)
+++ cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/dave.cer Sat Aug 10 07:52:35 2013
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

Added: cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/oscar.cer
URL: http://svn.apache.org/viewvc/cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/oscar.cer?rev=1512574&view=auto
==============================================================================
--- cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/oscar.cer (added)
+++ cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/oscar.cer Sat Aug 10 07:52:35 2013
@@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE-----
+MIIDTzCCAjegAwIBAgIESPKeLjANBgkqhkiG9w0BAQUFADBYMQswCQYDVQQGEwJERTEMMAoGA1UE
+CBMDTlJXMQwwCgYDVQQHEwNDR04xDDAKBgNVBAoTA0NYRjEPMA0GA1UECxMGQXBhY2hlMQ4wDAYD
+VQQDEwVPc2NhcjAeFw0xMzA1MjkwODQ5MjVaFw0yMzA1MjcwODQ5MjVaMFgxCzAJBgNVBAYTAkRF
+MQwwCgYDVQQIEwNOUlcxDDAKBgNVBAcTA0NHTjEMMAoGA1UEChMDQ1hGMQ8wDQYDVQQLEwZBcGFj
+aGUxDjAMBgNVBAMTBU9zY2FyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6WAbH39
+xSI4wRSm/ON3mPuWY4uCkkKbYDEw6u9nKa2SPVurOFCO8ihYsXwCELI00UQ5ZDZCDCgRPxaiRhvY
+jc+436ixmOzPCqPmhSXOsH40TvP4HHbssWJo5Rxnc8Tkb3K/EEK37gOyhs8KfZn4h6ycfbkvIFtj
+4e6JESVvPV+I+JtXBc2wfOTi5YgCmYFtfqAkbzfUWfcOeY3oKpnscY3AU5V4Wv7z77qqXpegPoCa
+2YfG3Dpq33npU4z1s9KW0K06QRvHF6JKUAsAzIce2S05XtuojRbJIC/ZV9d31PU3mpiQEb/VD6pW
+tYCW+OsaUdC8cL1TPcFIe0P9nRn97wIDAQABoyEwHzAdBgNVHQ4EFgQUDrYI3mDc10/Mprg47oyh
+LFcahp0wDQYJKoZIhvcNAQEFBQADggEBAASs0uILtTQTVXteyR8nOHDR9B2whPpk1DvrkAEk3fZ5
+6zMZnGnGg2iUDxEGw7WSvZMG8mYcnIMRrMePUnz6jmKG/Fy/5ZUOaBuCMkIfA/dA29Os5ltBThXG
+0YtrwAjvFekPKvFqQXLIThqSMKww2OqjeXiL1TG52c323xo/UbTuMn8r8rsnpFIVQDNgY7rNbTvu
+pbNMB1Cb85YpqIpeV5ewVvVDG1r5ID/My4iXLQug8Bk8/UpUdh2KG74oqqf1Xl3k6TEXooCw74ks
+qqQKyT3/wRYpxEaKo5jzssFmTDJyTuD3H0ASxUouIuyIwYvp5jhMcm7jQ3cdbMydk7NqX1g=
+-----END CERTIFICATE-----

Added: cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/root.cer
URL: http://svn.apache.org/viewvc/cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/root.cer?rev=1512574&view=auto
==============================================================================
--- cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/root.cer (added)
+++ cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/root.cer Sat Aug 10 07:52:35 2013
@@ -0,0 +1,13 @@
+-----BEGIN CERTIFICATE-----
+MIICYjCCAcugAwIBAgIJAIBUDD+Ghp2oMA0GCSqGSIb3DQEBBQUAMEoxCzAJBgNVBAYTAkRFMQww
+CgYDVQQIDANOUlcxFDASBgNVBAoMC0RlbW8gQ2xpZW50MRcwFQYDVQQDDA53d3cuaXNzdWVyLmNv
+bTAeFw0xMzA1MjQxMjUxNDZaFw0yMzA1MjIxMjUxNDZaMEoxCzAJBgNVBAYTAkRFMQwwCgYDVQQI
+DANOUlcxFDASBgNVBAoMC0RlbW8gQ2xpZW50MRcwFQYDVQQDDA53d3cuaXNzdWVyLmNvbTCBnzAN
+BgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAxeCtfXDqPmsAcYZGVeEUl2xe9vQl9veaSG6l8O/6QXXH
+3q78yUvQPHltO4PAooK6VamINpgBw2sHMl3sxFIrwJNh1tclXgtowgf/qwbC2TrGumK/bQTg6E0V
+Y1KXdC/tn11gxaEfic1e68gvGfPK18JnLeCw7/mOKafMKQHW8ZMCAwEAAaNQME4wHQYDVR0OBBYE
+FOB7SGdn5upcqrOlUkSW/QzLkgKDMB8GA1UdIwQYMBaAFOB7SGdn5upcqrOlUkSW/QzLkgKDMAwG
+A1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADgYEAEbuWyVkHKeryUsajA4IjCthswSSoi7NggULj
+LvuHkdgvPJhADSrcsEKQWr8/HMorrKnGh20EAWzjIXwRJYOCrDiYyfWezAE2h36MjZK7jXyAswAT
+YSPINdRP8VdrXBlj1oh0krhLyJrpaONkmpVwxVvxKL0Fc/iEnn5nVtaUyGg=
+-----END CERTIFICATE-----

Added: cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/validateRequestInvalidOscar.xml
URL: http://svn.apache.org/viewvc/cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/validateRequestInvalidOscar.xml?rev=1512574&view=auto
==============================================================================
--- cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/validateRequestInvalidOscar.xml (added)
+++ cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/validateRequestInvalidOscar.xml Sat Aug 10 07:52:35 2013
@@ -0,0 +1,11 @@
+<ns2:ValidateRequest xmlns="http://www.w3.org/2000/09/xmldsig#"
+    xmlns:ns2="http://www.w3.org/2002/03/xkms#" xmlns:ns3="http://www.w3.org/2001/04/xmlenc#"
+    Id="CN=www.anothersts.com, L=CGN, ST=NRW, C=DE, O=AnotherSTS">
+    <ns2:QueryKeyBinding>
+        <KeyInfo>
+            <X509Data>
+                <X509Certificate>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
 Mn8r8rsnpFIVQDNgY7rNbTvupbNMB1Cb85YpqIpeV5ewVvVDG1r5ID/My4iXLQug8Bk8/UpUdh2KG74oqqf1Xl3k6TEXooCw74ksqqQKyT3/wRYpxEaKo5jzssFmTDJyTuD3H0ASxUouIuyIwYvp5jhMcm7jQ3cdbMydk7NqX1g=</X509Certificate>
+            </X509Data>
+        </KeyInfo>
+    </ns2:QueryKeyBinding>
+</ns2:ValidateRequest>
\ No newline at end of file

Added: cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/validateRequestOKAlice.xml
URL: http://svn.apache.org/viewvc/cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/validateRequestOKAlice.xml?rev=1512574&view=auto
==============================================================================
--- cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/validateRequestOKAlice.xml (added)
+++ cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/validateRequestOKAlice.xml Sat Aug 10 07:52:35 2013
@@ -0,0 +1,11 @@
+<ns2:ValidateRequest xmlns="http://www.w3.org/2000/09/xmldsig#"
+    xmlns:ns2="http://www.w3.org/2002/03/xkms#" xmlns:ns3="http://www.w3.org/2001/04/xmlenc#"
+    Id="CN=www.anothersts.com, L=CGN, ST=NRW, C=DE, O=AnotherSTS">
+    <ns2:QueryKeyBinding>
+        <KeyInfo>
+            <X509Data>
+                <X509Certificate>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
 72qKnBOTHn/All29UJwKvdMGXsg88Ou2fh6DS7fsfcA=</X509Certificate>
+            </X509Data>
+        </KeyInfo>
+    </ns2:QueryKeyBinding>
+</ns2:ValidateRequest>
\ No newline at end of file

Added: cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/validateRequestOKDave.xml
URL: http://svn.apache.org/viewvc/cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/validateRequestOKDave.xml?rev=1512574&view=auto
==============================================================================
--- cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/validateRequestOKDave.xml (added)
+++ cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/validateRequestOKDave.xml Sat Aug 10 07:52:35 2013
@@ -0,0 +1,11 @@
+<ns2:ValidateRequest xmlns="http://www.w3.org/2000/09/xmldsig#"
+    xmlns:ns2="http://www.w3.org/2002/03/xkms#" xmlns:ns3="http://www.w3.org/2001/04/xmlenc#"
+    Id="CN=www.anothersts.com, L=CGN, ST=NRW, C=DE, O=AnotherSTS">
+    <ns2:QueryKeyBinding>
+        <KeyInfo>
+            <X509Data>
+                <X509Certificate>MIIDIzCCAgsCAQEwDQYJKoZIhvcNAQEFBQAwWDELMAkGA1UEBhMCREUxDDAKBgNVBAgTA05SVzEMMAoGA1UEBxMDQ0dOMQwwCgYDVQQKEwNDWEYxDzANBgNVBAsTBkFwYWNoZTEOMAwGA1UEAxMFQWxpY2UwHhcNMTMwNTI5MDg0ODU1WhcNMjMwNTI3MDg0ODU1WjBXMQswCQYDVQQGEwJERTEMMAoGA1UECBMDTlJXMQwwCgYDVQQHEwNDR04xDDAKBgNVBAoTA0NYRjEPMA0GA1UECxMGQXBhY2hlMQ0wCwYDVQQDEwREYXZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaNr3jK7TrxAseTLE7VifTACzwQf/yLiBZ6mp3DxJZZ1f+9sJNDR8WWei31KC947HhFC0y3s1x8V2t/GIGFWv8BlIF6wjFqZZfiQE0xEZy8yUfnDV2aWdXkni92zPNbttmWpeqD7gmv2VxCc+NdT1WZpEyU7aTw/2nRloxtKkwQxqRO2IJUAzRyCcu3i/rfjH2gPaf6tlMEE6IJspLzIqCxe0fS5G695o/aCkSB0iRaGe4neuHcCQl59GMgCQekjL4ZropwjrNyPeuTPrYI/2DdrZrK/mWbWPAJUttzWnTWOdh6VTkzXz839cT6xB0YCxJQh+IloVqSPE4sZs2+TiwIDAQABMA0GCSqGSIb3DQEBBQUAA4IBAQApJMjAHReII+4RrTkHqANOn4Dhb0TFOa69M2SNfdzGd2CB8CHg7UVOxGFOYFXeSKrQipqH4/zJbj6cyXOgTUc7+7uDK3DjxxF5EY5Nts/jqrBGgrLa/vW5HmkkinKFvbzH+JcARzLKgoZp9k0j+qrisEATbY9HN/yMkEum1ChyYuEVNAq+AY1G/z9QPL1Ts7bd65LX9egYNFOQmMp4f6efbeT/9DfFTSrRiECJ
 tjGrmrlyqqNunQKF0iYT7dttDAgshdcTYNCGc3YokuLFaoxoUCMryts72rQqOtY9Tp723QBJO82iYqv4wg2qxRLcjZZv7dqTeh2S+j4dEZaI82N/</X509Certificate>
+            </X509Data>
+        </KeyInfo>
+    </ns2:QueryKeyBinding>
+</ns2:ValidateRequest>
\ No newline at end of file

Added: cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/validateRequestOKRoot.xml
URL: http://svn.apache.org/viewvc/cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/validateRequestOKRoot.xml?rev=1512574&view=auto
==============================================================================
--- cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/validateRequestOKRoot.xml (added)
+++ cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/validateRequestOKRoot.xml Sat Aug 10 07:52:35 2013
@@ -0,0 +1,11 @@
+<ns2:ValidateRequest xmlns="http://www.w3.org/2000/09/xmldsig#"
+    xmlns:ns2="http://www.w3.org/2002/03/xkms#" xmlns:ns3="http://www.w3.org/2001/04/xmlenc#"
+    Id="CN=www.anothersts.com, L=CGN, ST=NRW, C=DE, O=AnotherSTS">
+    <ns2:QueryKeyBinding>
+        <KeyInfo>
+            <X509Data>
+                <X509Certificate>MIICYjCCAcugAwIBAgIJAIBUDD+Ghp2oMA0GCSqGSIb3DQEBBQUAMEoxCzAJBgNVBAYTAkRFMQwwCgYDVQQIDANOUlcxFDASBgNVBAoMC0RlbW8gQ2xpZW50MRcwFQYDVQQDDA53d3cuaXNzdWVyLmNvbTAeFw0xMzA1MjQxMjUxNDZaFw0yMzA1MjIxMjUxNDZaMEoxCzAJBgNVBAYTAkRFMQwwCgYDVQQIDANOUlcxFDASBgNVBAoMC0RlbW8gQ2xpZW50MRcwFQYDVQQDDA53d3cuaXNzdWVyLmNvbTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAxeCtfXDqPmsAcYZGVeEUl2xe9vQl9veaSG6l8O/6QXXH3q78yUvQPHltO4PAooK6VamINpgBw2sHMl3sxFIrwJNh1tclXgtowgf/qwbC2TrGumK/bQTg6E0VY1KXdC/tn11gxaEfic1e68gvGfPK18JnLeCw7/mOKafMKQHW8ZMCAwEAAaNQME4wHQYDVR0OBBYEFOB7SGdn5upcqrOlUkSW/QzLkgKDMB8GA1UdIwQYMBaAFOB7SGdn5upcqrOlUkSW/QzLkgKDMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADgYEAEbuWyVkHKeryUsajA4IjCthswSSoi7NggULjLvuHkdgvPJhADSrcsEKQWr8/HMorrKnGh20EAWzjIXwRJYOCrDiYyfWezAE2h36MjZK7jXyAswATYSPINdRP8VdrXBlj1oh0krhLyJrpaONkmpVwxVvxKL0Fc/iEnn5nVtaUyGg=</X509Certificate>
+            </X509Data>
+        </KeyInfo>
+    </ns2:QueryKeyBinding>
+</ns2:ValidateRequest>
\ No newline at end of file

Added: cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/validateRequestCorrupted.xml
URL: http://svn.apache.org/viewvc/cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/validateRequestCorrupted.xml?rev=1512574&view=auto
==============================================================================
--- cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/validateRequestCorrupted.xml (added)
+++ cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/validateRequestCorrupted.xml Sat Aug 10 07:52:35 2013
@@ -0,0 +1,11 @@
+<ns2:ValidateRequest xmlns="http://www.w3.org/2000/09/xmldsig#"
+    xmlns:ns2="http://www.w3.org/2002/03/xkms#" xmlns:ns3="http://www.w3.org/2001/04/xmlenc#"
+    Id="CN=www.anothersts.com, L=CGN, ST=NRW, C=DE, O=AnotherSTS">
+    <ns2:QueryKeyBinding>
+        <KeyInfo>
+            <X509Data>
+                <X509Certificate>XXX</X509Certificate>
+            </X509Data>
+        </KeyInfo>
+    </ns2:QueryKeyBinding>
+</ns2:ValidateRequest>
\ No newline at end of file

Added: cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/validateRequestExpired.xml
URL: http://svn.apache.org/viewvc/cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/validateRequestExpired.xml?rev=1512574&view=auto
==============================================================================
--- cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/validateRequestExpired.xml (added)
+++ cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/validateRequestExpired.xml Sat Aug 10 07:52:35 2013
@@ -0,0 +1,12 @@
+<ns2:ValidateRequest xmlns="http://www.w3.org/2000/09/xmldsig#"
+    xmlns:ns2="http://www.w3.org/2002/03/xkms#" xmlns:ns3="http://www.w3.org/2001/04/xmlenc#"
+    Id="CN=www.anothersts.com, L=CGN, ST=NRW, C=DE, O=AnotherSTS">
+    <ns2:QueryKeyBinding>
+        <KeyInfo>
+            <X509Data>
+                <X509Certificate>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
 QRil0DALBgcqhkjOOAQDBQADLwAwLAIUJiMH3APdS6pwQg8WBKvPOP/yZ+8CFEVErmoasRYXeJfZf+nl9gPEzIdt
+                </X509Certificate>
+            </X509Data>
+        </KeyInfo>
+    </ns2:QueryKeyBinding>
+</ns2:ValidateRequest>
\ No newline at end of file

Added: cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/validateRequestOK.xml
URL: http://svn.apache.org/viewvc/cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/validateRequestOK.xml?rev=1512574&view=auto
==============================================================================
--- cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/validateRequestOK.xml (added)
+++ cxf/branches/2.7.x-fixes/services/xkms/xkms-x509-handlers/src/test/resources/validateRequestOK.xml Sat Aug 10 07:52:35 2013
@@ -0,0 +1,12 @@
+<ns2:ValidateRequest xmlns="http://www.w3.org/2000/09/xmldsig#"
+    xmlns:ns2="http://www.w3.org/2002/03/xkms#" xmlns:ns3="http://www.w3.org/2001/04/xmlenc#"
+    Id="CN=www.anothersts.com, L=CGN, ST=NRW, C=DE, O=AnotherSTS">
+    <ns2:QueryKeyBinding>
+        <KeyInfo>
+            <X509Data>
+                <X509Certificate>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
 cmsxFjAUBgNVBAcTDU5pYWdhcmEgRmFsbHMxLDAqBgNVBAoTI1NhbXBsZSBDbGllbnQgLS0gTk9UIEZPUiBQUk9EVUNUSU9OMRYwFAYDVQQLEw1JVCBEZXBhcnRtZW50MRcwFQYDVQQDEw53d3cuY2xpZW50LmNvbTEgMB4GCSqGSIb3DQEJARYRY2xpZW50QGNsaWVudC5jb22CCQCTkVl9l7GvAzAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBQUAA4GBAEjEr9QfaYsZf7ELnqB++OkWcKxpMt1Yj/VOyL99AekkVTM+rRHCU9Bu+tncMNsfy8mIXUC1JqKQ+Cq5RlaDh/ujzt6i17G7uSGd6U1U/DPZBqTm3Dxwl1cMAGU/CoAKTWE+o+fS4Q2xHv7L1KiXQQc9EWJ4C34Ik45fB6g3DiTj
+                </X509Certificate>
+            </X509Data>
+        </KeyInfo>
+    </ns2:QueryKeyBinding>
+</ns2:ValidateRequest>
\ No newline at end of file