[ELY-2496] Add integrity command test cases

wildfly-security · May 23, 2023 · 814505b · 814505b
1 parent d655c6a
commit 814505b
Show file tree

Hide file tree

Showing 44 changed files with 1,171 additions and 6 deletions.
diff --git a/tool/pom.xml b/tool/pom.xml
@@ -142,6 +142,9 @@
                             <log4j.defaultInitOverride>true</log4j.defaultInitOverride>
                             <test.level>${test.level}</test.level>
                         </systemPropertyVariables>
+                        <environmentVariables>
+                            <FS_INTEGRITY_PASSWORD_TEST_VAR>Guk]i%Aua4-wB</FS_INTEGRITY_PASSWORD_TEST_VAR> <!-- gitleaks:allow -->
+                        </environmentVariables>
                         <redirectTestOutputToFile>true</redirectTestOutputToFile>
                         <enableAssertions>true</enableAssertions>
                         <trimStackTrace>false</trimStackTrace>

diff --git a/tool/src/test/java/org/wildfly/security/tool/FileSystemEncryptRealmCommandTest.java b/tool/src/test/java/org/wildfly/security/tool/FileSystemEncryptRealmCommandTest.java
@@ -26,7 +26,9 @@
 import java.nio.file.Paths;
 import java.util.HashMap;
 import java.util.Map;
+
 import javax.crypto.SecretKey;
+
 import org.apache.commons.cli.MissingArgumentException;
 import org.junit.Test;
 import org.wildfly.security.auth.principal.NamePrincipal;
@@ -66,6 +68,16 @@ private void runCommand(String inputLocation, String outputLocation, String file
         executeCommandAndCheckStatus(requiredArgs, expectedStatus);
     }
 
+    private void runCommand(String inputLocation, String outputLocation, String fileSystemRealmName, String keyStoreLocation,
+                            String keyPairAlias, String keyStorePassword, int levels, boolean create, int expectedStatus) {
+        String[] requiredArgs;
+        requiredArgs = new String[]{"--input-location", inputLocation, "--output-location", outputLocation, "--realm-name", fileSystemRealmName,
+                "--keystore", keyStoreLocation, "--key-pair", keyPairAlias, "--password", keyStorePassword,
+                "--levels", String.valueOf(levels), "--create", String.valueOf(create),
+                "--credential-store", CREDENTIAL_STORE_PATH};
+        executeCommandAndCheckStatus(requiredArgs, expectedStatus);
+    }
+
     private void runCommand(String inputLocation, String outputLocation, String fileSystemRealmName, String credentialStore, String secretKey, String encoded, boolean create, int expectedStatus) {
         String[] requiredArgs;
         requiredArgs = new String[]{"--input-location", inputLocation, "--output-location", outputLocation, "--realm-name", fileSystemRealmName, "--credential-store", credentialStore, "--secret-key", secretKey, "--encoded", encoded, "--create", String.valueOf(create)};
@@ -165,6 +177,17 @@ public void testSingleUserWithRoles() throws Exception {
         }
     }
 
+    @Test
+    public void testSingleUserWithRolesAndIntegrity() throws Exception {
+        String inputLocation = RELATIVE_BASE_DIR + "fs-unencrypted-realms/single-user-with-roles-and-integrity";
+        String outputLocation = RELATIVE_BASE_DIR + "fs-encrypted-realms";
+        String fileSystemRealmName = "single-user-with-roles-and-integrity";
+        String keyStoreLocation = RELATIVE_BASE_DIR + "mykeystore.pfx";
+        String keyPairAlias = "integrity-key";
+        String keyStorePassword = "Guk]i%Aua4-wB";
+        runCommand(inputLocation, outputLocation, fileSystemRealmName, keyStoreLocation, keyPairAlias, keyStorePassword, 2, true, 0);
+    }
+
     @Test
     public void testSingleUserWithRolesAndKey() throws Exception {
         String inputLocation = RELATIVE_BASE_DIR + "fs-unencrypted-realms/single-user-with-key/";
@@ -210,4 +233,4 @@ private boolean fileExists(String path) {
         File tempFile = new File(path);
         return tempFile.exists();
     }
-}
+}
diff --git a/tool/src/test/java/org/wildfly/security/tool/FileSystemRealmIntegrityCommandTest.java b/tool/src/test/java/org/wildfly/security/tool/FileSystemRealmIntegrityCommandTest.java
diff --git a/tool/src/test/resources/bulk-encryption-conversion-desc-without-names b/tool/src/test/resources/bulk-encryption-conversion-desc-without-names
@@ -1,22 +1,22 @@
 input-location:target/test-classes/filesystem-encrypt/fs-unencrypted-realms/multiple-credential-types
 output-location:target/test-classes/filesystem-encrypt/fs-encrypted-realms
-credential-store:mycredstore.cs
+credential-store:target/test-classes/filesystem-encrypt/mycredstore.cs
 create:true
 levels:1
 
 input-location:target/test-classes/filesystem-encrypt/fs-unencrypted-realms/level-4
 output-location:target/test-classes/filesystem-encrypt/fs-encrypted-realms
-credential-store:mycredstore.cs
+credential-store:target/test-classes/filesystem-encrypt/mycredstore.cs
 create:true
 levels:4
 
-input-location:target/test-classes/filesystem-encrypt/fs-unencrypted-realms/hashcharset
+input-location:target/test-classes/filesystem-encrypt/fs-unencrypted-realms/fsRealmCharset
 output-location:target/test-classes/filesystem-encrypt/fs-encrypted-realms
-credential-store:mycredstore.cs
+credential-store:target/test-classes/filesystem-encrypt/mycredstore.cs
 create:true
 
 input-location:target/test-classes/filesystem-encrypt/fs-unencrypted-realms/hashencoding
 output-location:target/test-classes/filesystem-encrypt/fs-encrypted-realms
 hash-encoding:hex
-credential-store:mycredstore.cs
+credential-store:target/test-classes/filesystem-encrypt/mycredstore.cs
 create:true
diff --git a/tool/src/test/resources/bulk-integrity-conversion-desc b/tool/src/test/resources/bulk-integrity-conversion-desc
@@ -0,0 +1,28 @@
+input-location:target/test-classes/filesystem-integrity/fsRealmUpgradeInPlaceBulk
+keystore:target/test-classes/filesystem-integrity/fsKeyStore.pfx
+password:Guk]i%Aua4-wB
+
+input-location:target/test-classes/filesystem-integrity/fs-unsigned-realms/fsRealmEncrypted
+output-location:target/test-classes/filesystem-integrity/fs-signed-realms
+realm-name:fsRealmEncryptedBulk
+keystore:target/test-classes/filesystem-integrity/fsKeyStore.pfx
+type:pkcs12
+password:Guk]i%Aua4-wB
+key-pair:integrity-key
+credential-store:target/test-classes/filesystem-integrity/fsCredStore.cs
+secret-key:secKey
+levels:4
+hash-encoding:BASE64
+hash-charset:UTF-8
+encoded:true
+
+input-location:target/test-classes/filesystem-integrity/fs-unsigned-realms/fsRealmSingle
+output-location:target/test-classes/filesystem-integrity/fs-signed-realms
+keystore:target/test-classes/filesystem-integrity/fsKeyStore.pfx
+password-env:FS_INTEGRITY_PASSWORD_TEST_VAR
+
+input-location:target/test-classes/filesystem-integrity/fs-unsigned-realms/fsRealmHashEncoding
+output-location:target/test-classes/filesystem-integrity/fs-signed-realms
+keystore:target/test-classes/filesystem-integrity/fsKeyStore.pfx
+password:Guk]i%Aua4-wB
+hash-encoding:hex
diff --git a/tool/src/test/resources/bulk-integrity-conversion-desc-INVALID b/tool/src/test/resources/bulk-integrity-conversion-desc-INVALID
@@ -0,0 +1,7 @@
+output-location:target/test-classes/filesystem-integrity/fs-signed-realms
+keystore:target/test-classes/filesystem-integrity/fsKeyStore.pfx
+password:Guk]i%Aua4-wB
+
+input-location:target/test-classes/filesystem-integrity/fs-unsigned-realms/fsRealmEmpty
+output-location:target/test-classes/filesystem-integrity/fs-signed-realms
+keystore:target/test-classes/filesystem-integrity/fsKeyStore.pfx
diff --git a/...t/fs-unencrypted-realms/single-user-with-roles-and-integrity/c/a/cameron-MNQW2ZLSN5XA.xml b/...t/fs-unencrypted-realms/single-user-with-roles-and-integrity/c/a/cameron-MNQW2ZLSN5XA.xml
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?><identity xmlns="urn:elytron:identity:1.2">
+    <principal name="cameron"/>
+    <credentials>
+        <password algorithm="simple-digest-sha-256" format="base64">A3YRu0iebR9tX8reCXbzm6xiKqWEAVnrKLClSLI20Cln</password>
+    </credentials>
+    <attributes>
+        <attribute name="role" value="user"/>
+        <attribute name="position" value="engineer"/>
+    </attributes>
+
+    <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>Od9LJmJdsDXCArHRe4J/2O8/NqZ8v9r5jRlm6RPwF9Q=</DigestValue></Reference></SignedInfo><SignatureValue>OT+Ld9SyQyWWbtPXxfP8z3cj5icRLEMf4m9jUg1tVcIsAHfCEJVlpmEL9gpnKseG1RsKXJUVrsKe&#13;
+4qctW5vPbRKkiomhSjgPmWIZU3ufxO8CPJhTJGkYkG7vcoc7saHUOrvKwUFvcCQDsKEDoa+zZV7a&#13;
+VRvhP4hxnKzY+Moj0jYSSqscwW/+2yU5cmC/KY6L7IM8y/IxuPsGJvRUbMpExo9jXiPKTbNbITyu&#13;
+z66Hah1TQM2jxg7fvri0WuZ5hodkXtbLoXLRi4aGn1GU/pX4A4ZbJbB2GEmFiOpBgrjZAEAv9h8d&#13;
+9O3aP8cd5xbOvW9PZQB2pMuYQbwbBzPcEypl4Wlsllc3O8QXPucB9KHL024PHzIHlFuVVoY3eF0D&#13;
+RIptK7UHt6DrQHnDoeuQ9mFO9mzSXTnbpBm/mZfk5f029YPm9eK5Bv6Inh8YmGkF9lZ6iwGQRt6H&#13;
+jsAjIfUTB6A7nyONocwYHkCfh4zMrUc9PbunIEQQTVN7zN0Ar51tLjgzR08811o5H8Ac0YfDqY0I&#13;
+9JwPd8LDd7JAaP3GtKfuTypGa8uamP/4kdhAfYWINRbuPuvtj8IMlUPM8yR/zN6xMEowrBGLbyqZ&#13;
+khugOFlTXEuKVndn3IIWwPgJklH1Q14aend9zLEQoGUZCToLQYRWjiDgCbl/kwRDpB4BqgpvBco=</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>sQJCJE08Q3X5f3v0VAmvoBb4eIymE32jilIdaHgiWD2NJgZIEt38CVfNqneyPTng8vs0EHgBC+L5&#13;
+uMt4/ig7ZOZN0Yy8uUosg8ByKqyStbCOLgH/jH884+vS8cd5D7w0TBy6F5GiuHXQ/8KjY3rGJjhv&#13;
+1gEIrXdWSCvW1dKdvgrBP/vb8j2bxvqGTwiVjEwZC38z2IEYQi9cWL3vBSfASaeM8dTFqYKdUEcq&#13;
+eZliZSrzsTtZwG4EeBfjHl16hwB3WnOebqoUuE8dojZTfO11rPojZCf/xGk12sE+3c5IfGJ95qq9&#13;
+TDXXQyrcOJpL8jGeTWRv4kPdgL6SqUz1Kp0uloGvGtPd18Qxrp+vf16573PYdW78uYv+/fg0hdkb&#13;
+thDMA/YCI01gnaph0r2iNXseO9aA24ySU9jOiTYYcQVEvRQlDp9Ha7j7HoVHeAvyoUDbsuLigLTt&#13;
+qXeLq1HfT4LwQUhhcGeQsPibNkiQV0X/HvUffA+dq2umscZy6TKy4e7wmQo2NPrRAZ4k+aS9ymGl&#13;
+VrwLYYygJtZY4KVgipPZzF2vOiPK37zhngcA74+ehUI5lA0LcTRppW1f9mM+ygUYTJp93MBLJGFN&#13;
+obMbdgsVjiPTviurxFO6Ip+dVcKlIYxPgHZ5Wcpap47qsmDjJI9QP0VLJ95GJHufSejTfHFuGAU=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></identity>
diff --git a/tool/src/test/resources/filesystem-encrypt/mykeystore.pfx b/tool/src/test/resources/filesystem-encrypt/mykeystore.pfx
diff --git a/...src/test/resources/filesystem-integrity/fs-unsigned-realms/fsRealm/a/l/alice-MFWGSY3F.xml b/...src/test/resources/filesystem-integrity/fs-unsigned-realms/fsRealm/a/l/alice-MFWGSY3F.xml
@@ -0,0 +1,8 @@
+<?xml version="1.0" ?>
+<identity xmlns="urn:elytron:1.0">
+    <attributes>
+        <attribute name="role" value="user"></attribute>
+        <attribute name="role" value="admin"></attribute>
+    </attributes>
+
+    </identity>
diff --git a/tool/src/test/resources/filesystem-integrity/fs-unsigned-realms/fsRealm/b/o/bob-MJXWE.xml b/tool/src/test/resources/filesystem-integrity/fs-unsigned-realms/fsRealm/b/o/bob-MJXWE.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" ?>
+<identity xmlns="urn:elytron:1.0">
+    <credentials>
+        <password algorithm="clear" format="base64">AWJvYlBhc3N3b3JkMSE=</password>
+    </credentials>
+    </identity>
diff --git a/...st/resources/filesystem-integrity/fs-unsigned-realms/fsRealm/c/a/cameron-MNQW2ZLSN5XA.xml b/...st/resources/filesystem-integrity/fs-unsigned-realms/fsRealm/c/a/cameron-MNQW2ZLSN5XA.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" ?>
+<identity xmlns="urn:elytron:1.0">
+    <credentials>
+        <password algorithm="simple-digest-sha-256" format="base64">A3YRu0iebR9tX8reCXbzm6xiKqWEAVnrKLClSLI20Cln</password>
+    </credentials>
+    <attributes>
+        <attribute name="role" value="user"></attribute>
+        <attribute name="position" value="engineer"></attribute>
+    </attributes>
+
+    </identity>
diff --git a/...t/resources/filesystem-integrity/fs-unsigned-realms/fsRealmCharset/a/l/alice-MFWGSY3F.xml b/...t/resources/filesystem-integrity/fs-unsigned-realms/fsRealmCharset/a/l/alice-MFWGSY3F.xml
@@ -0,0 +1,8 @@
+<?xml version="1.0" ?>
+<identity xmlns="urn:elytron:1.0">
+    <attributes>
+        <attribute name="role" value="user"></attribute>
+        <attribute name="role" value="admin"></attribute>
+    </attributes>
+
+    </identity>
diff --git a/...c/test/resources/filesystem-integrity/fs-unsigned-realms/fsRealmCharset/b/o/bob-MJXWE.xml b/...c/test/resources/filesystem-integrity/fs-unsigned-realms/fsRealmCharset/b/o/bob-MJXWE.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" ?>
+<identity xmlns="urn:elytron:1.0">
+    <credentials>
+        <password algorithm="clear" format="base64">ASdwYXNzd29yZEh5dsOkw6TDpCc=</password>
+    </credentials>
+    </identity>
diff --git a/...urces/filesystem-integrity/fs-unsigned-realms/fsRealmCharset/c/a/cameron-MNQW2ZLSN5XA.xml b/...urces/filesystem-integrity/fs-unsigned-realms/fsRealmCharset/c/a/cameron-MNQW2ZLSN5XA.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" ?>
+<identity xmlns="urn:elytron:1.0">
+    <credentials>
+        <password algorithm="simple-digest-sha-256" format="base64">A3YRu0iebR9tX8reCXbzm6xiKqWEAVnrKLClSLI20Cln</password>
+    </credentials>
+    <attributes>
+        <attribute name="role" value="user"></attribute>
+        <attribute name="position" value="engineer"></attribute>
+    </attributes>
+
+    </identity>
diff --git a/.../test/resources/filesystem-integrity/fs-unsigned-realms/fsRealmEmpty/b/o/_git.placeholder b/.../test/resources/filesystem-integrity/fs-unsigned-realms/fsRealmEmpty/b/o/_git.placeholder
diff --git a/...t/resources/filesystem-integrity/fs-unsigned-realms/fsRealmEncrypted/M/F/W/G/MFWGSY3F.xml b/...t/resources/filesystem-integrity/fs-unsigned-realms/fsRealmEncrypted/M/F/W/G/MFWGSY3F.xml
@@ -0,0 +1,8 @@
+<?xml version="1.0" ?>
+<identity xmlns="urn:elytron:identity:1.1">
+    <attributes>
+        <attribute name="RUxZAUMQJ4c2P2q8w/Ls9gjuLr663+VluBkMTT7SYFA4QaWQmow=" value="RUxZAUMQ9hPWxpAr6BAsaM6OPdBY+D9MXWuHRIrrAFeugkPYtQQ="></attribute>
+        <attribute name="RUxZAUMQTbHVh28meryUVKm3HTHUS2NhKFHDTFE7NQSZ+8kQUI8=" value="RUxZAUMQHtiNH5M5lQUyvWmFlfB1kX10qqY4APLTGgw1PbWp1Go="></attribute>
+    </attributes>
+
+    </identity>
diff --git a/...test/resources/filesystem-integrity/fs-unsigned-realms/fsRealmEncrypted/M/J/X/W/MJXWE.xml b/...test/resources/filesystem-integrity/fs-unsigned-realms/fsRealmEncrypted/M/J/X/W/MJXWE.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" ?>
+<identity xmlns="urn:elytron:identity:1.1">
+    <credentials>
+        <password algorithm="clear" format="enc_base64">RUxZAUMQea5tSojKFao5y+4qjBO3+nRdE6370ceCwT5v42VvyIc=</password>
+    </credentials>
+    </identity>
diff --git a/...sources/filesystem-integrity/fs-unsigned-realms/fsRealmEncrypted/M/N/Q/W/MNQW2ZLSN5XA.xml b/...sources/filesystem-integrity/fs-unsigned-realms/fsRealmEncrypted/M/N/Q/W/MNQW2ZLSN5XA.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" ?>
+<identity xmlns="urn:elytron:identity:1.1">
+    <credentials>
+        <password algorithm="simple-digest-sha-256" format="enc_base64">RUxZAUMQmN2tER7sx6WCUfx5BZ+liMHRsRAWcomJsM5uQheDmOy2pIBFvxT6sFy3NCLaUPRE71sRRJyIA+jrtiabP+wMbw==</password>
+    </credentials>
+    <attributes>
+        <attribute name="RUxZAUMQSk0ms07E4n6oucCqu9XU2IDV5gWzieXdPo2gN7DY8nQ=" value="RUxZAUMQp1mS0Qv8c+709XlYf6/ukoqOnHzSK65h7rYDfChpb34="></attribute>
+        <attribute name="RUxZAUMQjX1Lca6sXWhXKl1LAfCAORrE2RELPMyJ8aTQrMu5hhk=" value="RUxZAUMQ2vhYtc96++W8EDhpr20HKi1DeQ5c5icje9zd7d92nL4="></attribute>
+    </attributes>
+
+    </identity>
diff --git a/...ources/filesystem-integrity/fs-unsigned-realms/fsRealmHashEncoding/a/l/alice-MFWGSY3F.xml b/...ources/filesystem-integrity/fs-unsigned-realms/fsRealmHashEncoding/a/l/alice-MFWGSY3F.xml
@@ -0,0 +1,8 @@
+<?xml version="1.0" ?>
+<identity xmlns="urn:elytron:1.0">
+    <attributes>
+        <attribute name="role" value="user"></attribute>
+        <attribute name="role" value="admin"></attribute>
+    </attributes>
+
+    </identity>
diff --git a/...t/resources/filesystem-integrity/fs-unsigned-realms/fsRealmHashEncoding/b/o/bob-MJXWE.xml b/...t/resources/filesystem-integrity/fs-unsigned-realms/fsRealmHashEncoding/b/o/bob-MJXWE.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" ?>
+<identity xmlns="urn:elytron:1.0">
+    <credentials>
+        <password algorithm="clear" format="hex">01626f6250617373776f72643121</password>
+    </credentials>
+    </identity>
diff --git a/.../filesystem-integrity/fs-unsigned-realms/fsRealmHashEncoding/c/a/cameron-MNQW2ZLSN5XA.xml b/.../filesystem-integrity/fs-unsigned-realms/fsRealmHashEncoding/c/a/cameron-MNQW2ZLSN5XA.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" ?>
+<identity xmlns="urn:elytron:1.0">
+    <credentials>
+        <password algorithm="simple-digest-sha-256" format="hex">037611bb489e6d1f6d5fcade0976f39bac622aa5840159eb28b0a548b236d02967</password>
+    </credentials>
+    <attributes>
+        <attribute name="role" value="user"></attribute>
+        <attribute name="position" value="engineer"></attribute>
+    </attributes>
+
+    </identity>
diff --git a/...es/filesystem-integrity/fs-unsigned-realms/fsRealmIntegrityEnabled/a/l/alice-MFWGSY3F.xml b/...es/filesystem-integrity/fs-unsigned-realms/fsRealmIntegrityEnabled/a/l/alice-MFWGSY3F.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?><identity xmlns="urn:elytron:identity:1.2">
+    <principal name="alice"/>
+    <attributes>
+        <attribute name="role" value="user"/>
+        <attribute name="role" value="admin"/>
+    </attributes>
+
+    <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>+veHZAO+xv2Z7hm1+1/oROvYQWqIq8HhZ7TJzdF6OhU=</DigestValue></Reference></SignedInfo><SignatureValue>goJthSm1THNRu0Sym5MlkPxM5L/WJLdw6HvqlNKLaRe0V7oMVBU3fqxkQf6yBHLnXL7Hh9w0du+m&#13;
+pJyQQMc0YwysLasw9JyGujGhiLjr7vyPPR+PvGJDpm0RY0GYpKHoH5C2RQL4cJ3HeyNyRfI1rben&#13;
+di54RSrcMzWYObVA0RJd9EwacCqWuvGv1GZMPYLP/vWJfjHP2cEClwvAELtrwpxB84OouomZoVdE&#13;
+zv3tyKVSld2P6lmbn39yj+Hz8eFabM/GncAr0DTW98EpP+1TRWvvRlVAQ/aLWAAdifg9ZsAia4aB&#13;
+vTp1SDS7HQyfDnlBt66T5piHSTZDzM4wPlYPRnNnfFhIPYk4d9AKOgaFjPY1ppxd+wYaRSHblE4l&#13;
+svia0HUR/kWjCF8CFucCLO0unQh3vLLkBpO4uzQC3b1Cqxd/vUy4pQc0WCRzHATqJDI61+DDCMUN&#13;
+YcSgnszplhQn3C3BQFZ0elC93xi5b8Up3O9Jr7AZChahI+1prtp0WnZqQiom4NiqEZ22+CFUzUEu&#13;
+oeVEs2cYu6C3DB6SGJlNsL4JOHEvfUVZLoVqu7CPd6KYgIpEoTdNhY3n/ApghtKmkJpo1NxZLGfp&#13;
+sKA24oy3PwZRoXg8KcnZbc4yeZ4DsFVTSCGhlH8gvxqQfCd2pM4Y7fC9Eus1rlmNMzv+Lza9ovs=</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>sQJCJE08Q3X5f3v0VAmvoBb4eIymE32jilIdaHgiWD2NJgZIEt38CVfNqneyPTng8vs0EHgBC+L5&#13;
+uMt4/ig7ZOZN0Yy8uUosg8ByKqyStbCOLgH/jH884+vS8cd5D7w0TBy6F5GiuHXQ/8KjY3rGJjhv&#13;
+1gEIrXdWSCvW1dKdvgrBP/vb8j2bxvqGTwiVjEwZC38z2IEYQi9cWL3vBSfASaeM8dTFqYKdUEcq&#13;
+eZliZSrzsTtZwG4EeBfjHl16hwB3WnOebqoUuE8dojZTfO11rPojZCf/xGk12sE+3c5IfGJ95qq9&#13;
+TDXXQyrcOJpL8jGeTWRv4kPdgL6SqUz1Kp0uloGvGtPd18Qxrp+vf16573PYdW78uYv+/fg0hdkb&#13;
+thDMA/YCI01gnaph0r2iNXseO9aA24ySU9jOiTYYcQVEvRQlDp9Ha7j7HoVHeAvyoUDbsuLigLTt&#13;
+qXeLq1HfT4LwQUhhcGeQsPibNkiQV0X/HvUffA+dq2umscZy6TKy4e7wmQo2NPrRAZ4k+aS9ymGl&#13;
+VrwLYYygJtZY4KVgipPZzF2vOiPK37zhngcA74+ehUI5lA0LcTRppW1f9mM+ygUYTJp93MBLJGFN&#13;
+obMbdgsVjiPTviurxFO6Ip+dVcKlIYxPgHZ5Wcpap47qsmDjJI9QP0VLJ95GJHufSejTfHFuGAU=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></identity>
diff --git a/...sources/filesystem-integrity/fs-unsigned-realms/fsRealmIntegrityEnabled/b/o/bob-MJXWE.xml b/...sources/filesystem-integrity/fs-unsigned-realms/fsRealmIntegrityEnabled/b/o/bob-MJXWE.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?><identity xmlns="urn:elytron:identity:1.2">
+    <principal name="bob"/>
+    <credentials>
+        <password algorithm="clear" format="base64">AWJvYlBhc3N3b3JkMSE=</password>
+    </credentials>
+    <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>CCYTLliNvlcsrIrzBaV/mVsTr/wj/2b2aQnz36IP0aI=</DigestValue></Reference></SignedInfo><SignatureValue>MlxRpJuJd8Dbd+Lg+Y5QH+rTIg4WDjVH+GFWqpq+PN4Z5QKUl8QJdjcB5GYBiV2fV2MqobDrqYqg&#13;
+mY//THUeyoRe9denp6qY/SO8Ho4TVimuu/dAH1+omJTPUmKn+V5K+Krnpb4vgPmdtrmFmgfmUHC+&#13;
+P50/VFWyJrXG74jAR49n1rRMN62GT62Yn5bvzczKmw8NLIf/SyYO0CNnNWZG7Pv0YTrQi9QDHbfu&#13;
++lg8ek5sJGPod7Vwr5vtE6eW0M7yYAdf/3Wz21OEVOfueo5/0pJ4CpUTkQYWSMPDmSg1xnzzrhFh&#13;
+UXZhsIwxtsZhJygDFtIQ477BqP2PQdnbAmxQbTa7aRZjALzZQE+5FQlOeBYQmQGNoGVfnzuMl3O9&#13;
+9isCJS4jEVvT5FhNq/r5JVJfOSAdsZgOEbuhJATGIYuzWV4nfNasBWYAw2wTZszEqj5vL0JHf2uZ&#13;
+fa8cKh3qSQQJ9DwVN6mtPLgMUG09RwYbAHXXYhi4S1StAoJ7fYH/Tw+jcAQ7V0swICOlxtNYPNX5&#13;
+3V6jnTIynGdv/pt2Pyxt+HqLSAIgpcKml2rNZHslgDkHxjdBrvVydVLli/rE0jrjy/1Sizoe5RSd&#13;
+NkrIseBJFJ+TzvcOI8C+azsp+hLyu/keXF5SWYq1dHL2TiRt5onn68imjr8Fos2jKd+TJFTINFI=</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>sQJCJE08Q3X5f3v0VAmvoBb4eIymE32jilIdaHgiWD2NJgZIEt38CVfNqneyPTng8vs0EHgBC+L5&#13;
+uMt4/ig7ZOZN0Yy8uUosg8ByKqyStbCOLgH/jH884+vS8cd5D7w0TBy6F5GiuHXQ/8KjY3rGJjhv&#13;
+1gEIrXdWSCvW1dKdvgrBP/vb8j2bxvqGTwiVjEwZC38z2IEYQi9cWL3vBSfASaeM8dTFqYKdUEcq&#13;
+eZliZSrzsTtZwG4EeBfjHl16hwB3WnOebqoUuE8dojZTfO11rPojZCf/xGk12sE+3c5IfGJ95qq9&#13;
+TDXXQyrcOJpL8jGeTWRv4kPdgL6SqUz1Kp0uloGvGtPd18Qxrp+vf16573PYdW78uYv+/fg0hdkb&#13;
+thDMA/YCI01gnaph0r2iNXseO9aA24ySU9jOiTYYcQVEvRQlDp9Ha7j7HoVHeAvyoUDbsuLigLTt&#13;
+qXeLq1HfT4LwQUhhcGeQsPibNkiQV0X/HvUffA+dq2umscZy6TKy4e7wmQo2NPrRAZ4k+aS9ymGl&#13;
+VrwLYYygJtZY4KVgipPZzF2vOiPK37zhngcA74+ehUI5lA0LcTRppW1f9mM+ygUYTJp93MBLJGFN&#13;
+obMbdgsVjiPTviurxFO6Ip+dVcKlIYxPgHZ5Wcpap47qsmDjJI9QP0VLJ95GJHufSejTfHFuGAU=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></identity>