Skip to content

[24046] Update security tests to use governance-based encryption configuration #6277

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
MiguelCompany merged 36 commits into from
May 14, 2026
+6,935 −2,532
Merged

[24046] Update security tests to use governance-based encryption configuration #6277

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
36 commits
Select commit Hold shift + click to select a range
9d02c7d
Add reliability as a param to security tests
emiliocuestaf Jan 23, 2026
98f093d
Prepare XMLs to generate smime files for new tests
emiliocuestaf Jan 23, 2026
cf22780
Adding tests with access_sign in topic name
emiliocuestaf Jan 23, 2026
ff7eda0
Add tests for SIGN access in liveliness_protection_kind/rtps_protecti…
emiliocuestaf Jan 23, 2026
3aa97e7
Add tests for SIGN access in discovery_protection_kind
emiliocuestaf Jan 23, 2026
84c67d0
Add tests for large data
emiliocuestaf Jan 26, 2026
d19278d
Modify performance tests to properly test access security
emiliocuestaf Jan 26, 2026
6b4a55b
Generate SMIME files from XML
emiliocuestaf Jan 26, 2026
2495bfd
Remove old tests
emiliocuestaf Jan 26, 2026
b92b359
Relaxing requirements for best effor tests
emiliocuestaf Jan 26, 2026
a66b504
Uncrustify
emiliocuestaf Jan 26, 2026
cd6fd94
Fix some mistakes on the new tests and config files
emiliocuestaf Jan 27, 2026
0eca0da
Editing performance test files, they are ok now
emiliocuestaf Feb 2, 2026
3d0196f
Fix compilation issues
emiliocuestaf Mar 6, 2026
1cbd974
Attempt to fix large_data tests
emiliocuestaf Mar 6, 2026
e5b91fa
Update sign permissions files
emiliocuestaf Mar 16, 2026
2a7a6b4
Attempt to fix transport+best_effort test cases
emiliocuestaf Mar 16, 2026
cb83cfd
Skip SIGN tests
emiliocuestaf Mar 17, 2026
7b4f7d2
Adding some comments
emiliocuestaf Mar 17, 2026
7947b56
Add topic for profiling tests in performance tests xml and smime
emiliocuestaf Mar 19, 2026
78ac044
Refs #24046: Delete reliability matrix in test suite
cferreiragonz May 8, 2026
3194aa8
Refs #24046: Avoid overload for clarification
cferreiragonz May 8, 2026
eda8c95
Refs #24046: Update name of tests
cferreiragonz May 8, 2026
00b5de2
Refs #24046: Create common methods to configure plugins
cferreiragonz May 8, 2026
0c58eed
Refs #24046: Make basic test methods independent of Test suite class
cferreiragonz May 8, 2026
77a92c6
Refs #24046: Add common communication test method
cferreiragonz May 8, 2026
dbc9211
Refs #24046: Fix only Auth security tests
cferreiragonz May 8, 2026
9d95a4a
Refs #24046: Remove DataSharing from Security tests
cferreiragonz May 8, 2026
717af7a
Refs #24046: Use common methods for configuration
cferreiragonz May 8, 2026
b369915
Refs #24046: Run with both reliability tests with RTPS or submessage …
cferreiragonz May 8, 2026
af84fd3
Refs #24046: Templatize test_basic_secure_communication method
cferreiragonz May 8, 2026
f52b495
Refs #24046: Do not run best_effort large data tests
cferreiragonz May 8, 2026
43fc081
Refs #24046: Uncrustify
cferreiragonz May 8, 2026
9df40d1
Refs #24046: Fix Windows build
cferreiragonz May 8, 2026
02ec5b5
Refs #24046: Enable othercacert in 'fill_access'
cferreiragonz May 11, 2026
7a44165
Refs #24046: Reduce large data tests
cferreiragonz May 13, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4,886 changes: 2,607 additions & 2,279 deletions test/blackbox/common/BlackboxTestsSecurity.cpp
View file
Open in desktop

Large diffs are not rendered by default.

72 changes: 54 additions & 18 deletions test/certs/governance_disable_discovery_disable_access_encrypt.smime
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,9 +1,9 @@
MIME-Version: 1.0
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg="sha-256"; boundary="----AC038611B7DF85015D509E9E834F75CC"
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg="sha-256"; boundary="----CC2712ED51E7E5454DED621720BB3CB3"

This is an S/MIME signed message

------AC038611B7DF85015D509E9E834F75CC
------CC2712ED51E7E5454DED621720BB3CB3
Content-Type: text/plain

<?xml version="1.0" encoding="utf-8"?>
Expand All @@ -24,7 +24,7 @@ Content-Type: text/plain
<rtps_protection_kind>ENCRYPT</rtps_protection_kind>
<topic_access_rules>
<topic_rule>
<topic_expression>Security/Security_BuiltinAuthenticationAndAccessAndCryptoPlugin_PermissionsDisableDiscoveryDisableAccessEncrypt_validation_ok_enable_discovery_enable_access_encrypt/*</topic_expression>
<topic_expression>Security/Security_SecurityPlugins_PermissionsDisableDiscoveryDisableAccessEncrypt_validation_ok_enable_discovery_enable_access_encrypt/*</topic_expression>
<enable_discovery_protection>true</enable_discovery_protection>
<enable_liveliness_protection>false</enable_liveliness_protection>
<enable_read_access_control>true</enable_read_access_control>
Expand All @@ -33,7 +33,7 @@ Content-Type: text/plain
<data_protection_kind>ENCRYPT</data_protection_kind>
</topic_rule>
<topic_rule>
<topic_expression>Security/Security_BuiltinAuthenticationAndAccessAndCryptoPlugin_PermissionsDisableDiscoveryDisableAccessEncrypt_validation_ok_disable_discovery_enable_access_encrypt/*</topic_expression>
<topic_expression>Security/Security_SecurityPlugins_PermissionsDisableDiscoveryDisableAccessEncrypt_validation_ok_disable_discovery_enable_access_encrypt/*</topic_expression>
<enable_discovery_protection>false</enable_discovery_protection>
<enable_liveliness_protection>false</enable_liveliness_protection>
<enable_read_access_control>true</enable_read_access_control>
Expand All @@ -42,7 +42,7 @@ Content-Type: text/plain
<data_protection_kind>ENCRYPT</data_protection_kind>
</topic_rule>
<topic_rule>
<topic_expression>Security/Security_BuiltinAuthenticationAndAccessAndCryptoPlugin_PermissionsDisableDiscoveryDisableAccessEncrypt_validation_ok_disable_discovery_disable_access_encrypt/*</topic_expression>
<topic_expression>Security/Security_SecurityPlugins_PermissionsDisableDiscoveryDisableAccessEncrypt_validation_ok_disable_discovery_disable_access_encrypt/*</topic_expression>
<enable_discovery_protection>false</enable_discovery_protection>
<enable_liveliness_protection>false</enable_liveliness_protection>
<enable_read_access_control>false</enable_read_access_control>
Expand All @@ -51,7 +51,7 @@ Content-Type: text/plain
<data_protection_kind>ENCRYPT</data_protection_kind>
</topic_rule>
<topic_rule>
<topic_expression>Security/Security_BuiltinAuthenticationAndAccessAndCryptoPlugin_PermissionsDisableDiscoveryDisableAccessEncrypt_validation_ok_enable_discovery_disable_access_encrypt/*</topic_expression>
<topic_expression>Security/Security_SecurityPlugins_PermissionsDisableDiscoveryDisableAccessEncrypt_validation_ok_enable_discovery_disable_access_encrypt/*</topic_expression>
<enable_discovery_protection>true</enable_discovery_protection>
<enable_liveliness_protection>false</enable_liveliness_protection>
<enable_read_access_control>false</enable_read_access_control>
Expand All @@ -60,7 +60,7 @@ Content-Type: text/plain
<data_protection_kind>ENCRYPT</data_protection_kind>
</topic_rule>
<topic_rule>
<topic_expression>Security/Security_BuiltinAuthenticationAndAccessAndCryptoPlugin_PermissionsDisableDiscoveryDisableAccessEncrypt_validation_ok_enable_discovery_enable_access_none/*</topic_expression>
<topic_expression>Security/Security_SecurityPlugins_PermissionsDisableDiscoveryDisableAccessEncrypt_validation_ok_enable_discovery_enable_access_none/*</topic_expression>
<enable_discovery_protection>true</enable_discovery_protection>
<enable_liveliness_protection>false</enable_liveliness_protection>
<enable_read_access_control>true</enable_read_access_control>
Expand All @@ -69,7 +69,7 @@ Content-Type: text/plain
<data_protection_kind>NONE</data_protection_kind>
</topic_rule>
<topic_rule>
<topic_expression>Security/Security_BuiltinAuthenticationAndAccessAndCryptoPlugin_PermissionsDisableDiscoveryDisableAccessEncrypt_validation_ok_disable_discovery_enable_access_none/*</topic_expression>
<topic_expression>Security/Security_SecurityPlugins_PermissionsDisableDiscoveryDisableAccessEncrypt_validation_ok_disable_discovery_enable_access_none/*</topic_expression>
<enable_discovery_protection>false</enable_discovery_protection>
<enable_liveliness_protection>false</enable_liveliness_protection>
<enable_read_access_control>true</enable_read_access_control>
Expand All @@ -78,7 +78,7 @@ Content-Type: text/plain
<data_protection_kind>NONE</data_protection_kind>
</topic_rule>
<topic_rule>
<topic_expression>Security/Security_BuiltinAuthenticationAndAccessAndCryptoPlugin_PermissionsDisableDiscoveryDisableAccessEncrypt_validation_ok_disable_discovery_disable_access_none/*</topic_expression>
<topic_expression>Security/Security_SecurityPlugins_PermissionsDisableDiscoveryDisableAccessEncrypt_validation_ok_disable_discovery_disable_access_none/*</topic_expression>
<enable_discovery_protection>false</enable_discovery_protection>
<enable_liveliness_protection>false</enable_liveliness_protection>
<enable_read_access_control>false</enable_read_access_control>
Expand All @@ -87,25 +87,61 @@ Content-Type: text/plain
<data_protection_kind>NONE</data_protection_kind>
</topic_rule>
<topic_rule>
<topic_expression>Security/Security_BuiltinAuthenticationAndAccessAndCryptoPlugin_PermissionsDisableDiscoveryDisableAccessEncrypt_validation_ok_enable_discovery_disable_access_none/*</topic_expression>
<topic_expression>Security/Security_SecurityPlugins_PermissionsDisableDiscoveryDisableAccessEncrypt_validation_ok_enable_discovery_disable_access_none/*</topic_expression>
<enable_discovery_protection>true</enable_discovery_protection>
<enable_liveliness_protection>false</enable_liveliness_protection>
<enable_read_access_control>false</enable_read_access_control>
<enable_write_access_control>false</enable_write_access_control>
<metadata_protection_kind>NONE</metadata_protection_kind>
<data_protection_kind>NONE</data_protection_kind>
</topic_rule>
<topic_rule>
<topic_expression>Security/Security_SecurityPlugins_PermissionsDisableDiscoveryDisableAccessEncrypt_validation_ok_enable_discovery_enable_access_sign/*</topic_expression>
<enable_discovery_protection>true</enable_discovery_protection>
<enable_liveliness_protection>false</enable_liveliness_protection>
<enable_read_access_control>true</enable_read_access_control>
<enable_write_access_control>true</enable_write_access_control>
<metadata_protection_kind>SIGN</metadata_protection_kind>
<data_protection_kind>SIGN</data_protection_kind>
</topic_rule>
<topic_rule>
<topic_expression>Security/Security_SecurityPlugins_PermissionsDisableDiscoveryDisableAccessEncrypt_validation_ok_disable_discovery_enable_access_sign/*</topic_expression>
<enable_discovery_protection>false</enable_discovery_protection>
<enable_liveliness_protection>false</enable_liveliness_protection>
<enable_read_access_control>true</enable_read_access_control>
<enable_write_access_control>true</enable_write_access_control>
<metadata_protection_kind>SIGN</metadata_protection_kind>
<data_protection_kind>SIGN</data_protection_kind>
</topic_rule>
<topic_rule>
<topic_expression>Security/Security_SecurityPlugins_PermissionsDisableDiscoveryDisableAccessEncrypt_validation_ok_disable_discovery_disable_access_sign/*</topic_expression>
<enable_discovery_protection>false</enable_discovery_protection>
<enable_liveliness_protection>false</enable_liveliness_protection>
<enable_read_access_control>false</enable_read_access_control>
<enable_write_access_control>false</enable_write_access_control>
<metadata_protection_kind>SIGN</metadata_protection_kind>
<data_protection_kind>SIGN</data_protection_kind>
</topic_rule>
<topic_rule>
<topic_expression>Security/Security_SecurityPlugins_PermissionsDisableDiscoveryDisableAccessEncrypt_validation_ok_enable_discovery_disable_access_sign/*</topic_expression>
<enable_discovery_protection>true</enable_discovery_protection>
<enable_liveliness_protection>false</enable_liveliness_protection>
<enable_read_access_control>false</enable_read_access_control>
<enable_write_access_control>false</enable_write_access_control>
<metadata_protection_kind>SIGN</metadata_protection_kind>
<data_protection_kind>SIGN</data_protection_kind>
</topic_rule>
</topic_access_rules>
</domain_rule>
</domain_access_rules>
</dds>

------AC038611B7DF85015D509E9E834F75CC
------CC2712ED51E7E5454DED621720BB3CB3
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"

MIIEegYJKoZIhvcNAQcCoIIEazCCBGcCAQExDzANBglghkgBZQMEAgEFADALBgkq
MIIEeAYJKoZIhvcNAQcCoIIEaTCCBGUCAQExDzANBglghkgBZQMEAgEFADALBgkq
hkiG9w0BBwGgggJAMIICPDCCAeOgAwIBAgIJALZwpgo2sxthMAoGCCqGSM49BAMC
MIGaMQswCQYDVQQGEwJFUzELMAkGA1UECAwCTUExFDASBgNVBAcMC1RyZXMgQ2Fu
dG9zMREwDwYDVQQKDAhlUHJvc2ltYTERMA8GA1UECwwIZVByb3NpbWExHjAcBgNV
Expand All @@ -118,17 +154,17 @@ cm9zaW1hLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABGLlhB3WQ8l1fpUE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==
hvcNAwICASgwCgYIKoZIzj0EAwIERjBEAiASrmoIu/S+AtTr+YOHZrrqL5hvSvLr
WxEB67BX//UJdAIgHnFoWlRY0f5RDE8myNqVPEb+X/m7jrJB7HTvOICeyJc=

------AC038611B7DF85015D509E9E834F75CC--
------CC2712ED51E7E5454DED621720BB3CB3--

Loading
Loading