[checkmk-commits] [tribe29/checkmk] e54ac5: SAML2: sign requests and verify response signatures

Branch: refs/heads/master Home: https://github.com/tribe29/checkmk Commit: e54ac58d52deb80c234a72c49f11eaeeae5f41f9 https://github.com/tribe29/checkmk/commit/e54ac58d52deb80c234a72c49f11eaeea… Author: Lisa Pichler <lisa.pichler(a)tribe29.com> Date: 2023-01-05 (Thu, 05 Jan 2023) Changed paths: M cmk/gui/userdb/saml2/interface.py M cmk/gui/wato/pages/saml2.py M cmk/utils/paths.py A tests/unit/cmk/gui/userdb/saml2/certificate_files/signature_private.pem A tests/unit/cmk/gui/userdb/saml2/certificate_files/signature_public.pem M tests/unit/cmk/gui/userdb/saml2/conftest.py M tests/unit/cmk/gui/userdb/saml2/test_interface.py M tests/unit/cmk/gui/userdb/saml2/xml_files/checkmk_service_provider_metadata.xml A tests/unit/cmk/gui/userdb/saml2/xml_files/unsigned_authentication_request_response.xml M tests/unit/cmk/gui/wato/pages/test_saml2.py Log Message: ----------- SAML2: sign requests and verify response signatures CMK-11853 Change-Id: I1d0003b452aaa8c6841ea85fd51cab7465b7cc71 Commit: e9b7a6072a779777bfce6c41e973fe09829220ee https://github.com/tribe29/checkmk/commit/e9b7a6072a779777bfce6c41e973fe098… Author: Lisa Pichler <lisa.pichler(a)tribe29.com> Date: 2023-01-05 (Thu, 05 Jan 2023) Changed paths: M cmk/gui/userdb/saml2/interface.py M tests/unit/cmk/gui/userdb/saml2/test_interface.py Log Message: ----------- SAML2: sign with sha512 and introduce disallowed algorithms * sign requests with sha512 * reject responses that are signed with algorithms that are deemed insecure CMK-11853 Change-Id: I8dad1bc6d71e98a73b3fb03ab27e1c584002242e Commit: c97ebca60b5a0f2a711931c2ba6213b016f2320c https://github.com/tribe29/checkmk/commit/c97ebca60b5a0f2a711931c2ba6213b01… Author: Lisa Pichler <lisa.pichler(a)tribe29.com> Date: 2023-01-05 (Thu, 05 Jan 2023) Changed paths: M cmk/gui/valuespec.py M cmk/gui/wato/pages/saml2.py M cmk/utils/paths.py M tests/unit/cmk/gui/userdb/saml2/conftest.py M tests/unit/cmk/gui/wato/pages/test_saml2.py Log Message: ----------- SAML: config option to add custom certificates CMK-11853 Change-Id: If2aade651c62b5964263e968ae721c4f97f3ca28 Compare: https://github.com/tribe29/checkmk/compare/5ca30b5a7797...c97ebca60b5a