To Software Software - To Software-Assessment - Software/Assessment - To Current Test - Software/CurrentTest
Software Current Tests - Bug 827 (Thawte Patch)
2011-02-16 00:00 - Bug 827 last updated
Background Informations, Instructions, Testmatrix
Testserver Links
Testserver 1: http://cacert1.it-sls.de
2.1
Patch
Bugs # 827 (Update 2011-01-16)
2.2
Developer
2.3
Purpose of patch
0000827: Tverify points to be deprecated ("Thawte" Patch)
2.4
Patch Area
(Logged in) My Details - My Points
2.5
Patch Testing Requirements
a) has user account with Thawte points created on cacert1.it-sls.de x1)
b) has user account, manual exec https://cacert1.it-sls.de/wot.php?id=152.6
Remarks
x1) to create user with Thawte points, you need admin user with board flag and TTPadmin flag enabled, add Assurance method "Thawte Points Transfer" method with 150 points onto testuser (Assure someone) Bug 827 - Instructions/Infos/Testmatrix
Instructions and Sample Test Matrix for Software Testers
Introduction
In the old CAcert days, the "Tverify" program was active, to automaticly transfer Assurance points from the Online Server THAWTE to CAcert. Tverify verfied an user account against the runnning THAWTE server. This program has been deprecated, 'cause the THAWTE server is no longer online, and the existance of users can no longer be verified.
The "points removal" process doesn't physicaly remove the points from user accounts, it only doesn't count the THAWTE points anymore. The menue option you'll find the list of assurances received and assurances given is:
Login to your Account (and go to) + My Details + My Points
Page 1 (10.php) is the current active list how points are counted (identical to the production system under www.cacert.org, except the addtl. notification line, see below)
On the testserver: Ex-Thawte users and potential Tverify program users gets a notification on this page:
"The calculation of points will be changed in the near future. Please check the new calculation here" ^^^^
Under "here" you'll find the link to the 2nd new script, "The Patch" (15.php) This script reads the database like 10.php does. But displays the Assurance points, the Experience points and other points in a different way.
CAcert's points system for Assuree's and Assurers is as follows:
0-49 pts
Assurance points, Certs that expires after 1/2 year
50-99 pts
Assurance points, Certs expires after 2 years addtl. GPG/PGP keys can be added
100 pts
Fully Assured (same as 50-99)
100 pts
CATS will be added and activated if CATS passed
Possibility to request Codesigning (adding Codesigning flag onto the account possible)
Possibility to assure others(100+) 0-50 pts
Experience points for each assurance you'll receive 2 experience points
Different Point methods / Types
Assurance points
regular Face-2-Face meetings (F2F)
Experience points
points you'll receive by assuring others
Thawte points
transfered points by Tverify program
C't magazine
transfered points by Tverify program
Administrative increase
Display name for
eg Experience points also increasing users
Account level to get permissions adding
special points, Assurance methods and so onTemporary increase
Assurers receive if they going onto an event and doesn't have enough points -> temp. increase so they can issue upto 35 pts
Testers task is to test and verify points and methods variations that can potentialy become a problem.
Preliminaries
For this test I'll propose you create several test accounts with different points settings and assurance method settings. To apply these different settings onto a testuser account, you need
- an Admin user
- eg to apply the Assurance method
- "Thawte points"
- to add several flags onto
- testuser accounts
- the Testserver-Mgmt-System
- to add standard assurance points configurations
- onto user accounts, to set standard flags
- onto user accounts
User Purpose ------------- ---------------------------------- Admin Account ------------- Admin-user To apply points, flags, special assurance methods onto other testuser accounts requirement: 200 pts Board-Flag set TTP-admin flag set Admin flag set optional: other flags set Test-Accounts ------------- user 1 standard user, 0 Assurance points increase assurance points level in steps eg 0, 49, 50, 51, 90, 99, 100 user 2 standard "Thawte user 50" x1) with "50" from Thawte points transfer user 3 standard "Thawte user 90" x1) with "90" from Thawte points transfer user 4 standard "Thawte user 150" x1) with "150" from Thawte points transfer user 5 standard "C't magazine user 150" x1) with "150" from C't magazine points transfer x1) initial add "Thawte points" and "C't magazine" points onto the account with the Admin user addtl. variations with more added users: add regular points onto an account and add the Special Assurance points later eg first apply 35 Assurance points onto user 6 then add the "50 pts Thawte Transfer"
Definitions
is CACERT1
is MGMT-SYSTEM
Instructions to add the users
Admin User 1. connect to CACERT1 (see above definitions ;-) ...) - Join create your Admin user fill in a Name, Secret questions and answers, email address, passwords and so on and finishing the join process. 2. connect to MGMT-SYSTEM login with your email address you've set onto your admin user account, enter the set password The system will you login. Go under MAIL open the received email use the link in the confirmation email. 3. Confirm the link on CACERT1 switch to MGMT-SYSTEM 4. (0-100 pts Assurance points) Go to Manage Account (Top menu) On left side the sidebar menu opens Select "Automated Assurance" Enter "100" points and press "Assure me" 5. (100-150 pts Experience points) Select "Administrative Increase" enter "50" Number of Points Split into 2 Point Fragments -> selected Press "Give Me Points" 6. (For Admin-user only) (150 to 200 pts increase) Select "Administrative Increase" enter "50" Number of Points de-select "Split into 2-Point Fragments" Select "Assign Points even if the Limit 150 reached" Press "Give me Points" 7. (For Admin-user, and defered for later apply onto regular users) Select "Assurer Challenge" Leave Default setting Press "Challenge Me" 8. (For Admin-user only) Select "Set Flags" select: Support Engineer (-> Admin) Code-Signing (optional) Organisation Admin (optional) TTP-Admin Board Member Location Admin (optional) Unselected !!! Lock Account Block Assurer Press "Save Flags" 9. Logout (top right menue) 10. Switch to CACERT1 re-login check your flag and points settings Walk thru steps 1.-10. for Admin user Continue with steps 1.-3.,9.-10. for all other users Step 4 is needed, to issue regular assurance pts onto the account.
Test Matrix for Testers
Tests with Testuser 1 (Regular 0-150)
Round 1.1
skip step 4 above login to the user check My Points pages (10.php + 15.php) (0 pts test)
- {+} checked
Round 1.2
switch to MGMT-SYSTEM login to user 1 add 49 Assurance points switch to CACERT1 check My Points (0 -> 49)
- {+} checked
Round 1.3
switch to MGMT-SYSTEM login to user 1 add 1 Assurance points switch to CACERT1 check My Points (49 -> 50)
- {+} checked
Round 1.4
switch to MGMT-SYSTEM login to user 1 add 1 Assurance points switch to CACERT1 check My Points (50 -> 51)
- {+} checked
Round 1.5
switch to MGMT-SYSTEM login to user 1 add 39 Assurance points switch to CACERT1 check My Points (51 -> 90)
- {+} checked
Round 1.6
switch to MGMT-SYSTEM login to user 1 add 9 Assurance points switch to CACERT1 check My Points (90 -> 99)
- {+} checked
Round 1.7
switch to MGMT-SYSTEM login to user 1 add 1 Assurance points switch to CACERT1 check My Points (99 -> 100)
- {+} checked
Round 1.8
switch to MGMT-SYSTEM login to user 1 add CATS passed switch to CACERT1 check My Points (100 + CATS passed)
- {+} checked
Round 1.9
switch to CACERT1 login to user 1 add Assure Someone check My Points (102 + CATS passed)
- {+} checked
Round 1.10
switch to MGMT-SYSTEM login to user 1 add Administrative Increase, split to 2 pts (EP) switch to CACERT1 check My Points (148 + CATS passed / 102)
{-} checked, caused by TMS bug
Round 1.11
switch to CACERT1 login to user 1 add Assure Someone check My Points (150 + CATS passed / 104)
{-} checked, caused by TMS bug
Round 1.12
switch to CACERT1 login to Admin user, revoke Got Experience points thru Testserver-Management-System login to user 1 check My Points (104 + CATS passed / 104)
- {+} checked
Round 1.13
switch to CACERT1 login to user 1 add Assure Someone check My Points (106 + CATS passed / 106)
- {+} checked
Round 1.14
switch to CACERT1 login to user 1 add Assure Someone (upto 150 pts) check My Points (150 + CATS passed / 150)
- {+} checked
Round 1.15
switch to CACERT1 login to user 1 add Assure Someone, Assurance #26 check My Points (150 + CATS passed / 150)
- {+} checked
Tests with Testuser 2 (Thawte 50)
Round 2.1
switch to CACERT1 login to Admin user Assure User2 select Assurance method "Thawte transfer" add 50 Assurance points switch to CACERT1 login to User 2 check My Points (a) 50, b) revoked)
- {+} checked
Round 2.2
switch to MGMT-SYSTEM login to user 2 add 35 Assurance points switch to CACERT1 login to User 2 check My Points (a) 50 + 35, b) revoked + 35)
- {-} fail
continue with adding assurance points in several steps and check the result on page 2 of the My Points
continue with user 3 (3.1)
start adding 90 Thawte points thru Admin user and continue adding regular assurance points thru MGMT-SYSTEM in steps
Round 3.1
switch to CACERT1 login to Admin user Assure User3 select Assurance method "Thawte transfer" add 90 Assurance points switch to CACERT1 login to User 3 check My Points (a) 90, b) revoked)
- {+} checked
Round 3.2
switch to MGMT-SYSTEM login to user 3 add 9 Assurance points switch to CACERT1 login to User 3 check My Points (a) 90 + 9, b) revoked + 9)
- {-} fail (see test rounds 2.x)
continue with user 4 (4.1)
start adding 150 Thawte points thru Admin user and continue adding regular assurance points thru MGMT-SYSTEM in steps
Round 4.1
switch to CACERT1 login to Admin user Assure User4 select Assurance method "Thawte transfer" add 150 Assurance points switch to CACERT1 login to User 4 check My Points (a) 150, b) revoked)
- {+} checked
Round 4.2
switch to MGMT-SYSTEM login to user 4 add +10, +15, +10 Assurance points switch to CACERT1 login to User 4 check My Points (a) 150 (+10 +15 +10) + 0,0,0, b) revoked + 10+15+10)
- {-} fail (see test rounds 2.x)
continue with user 5, 6, 7 and so on ...
On each step go onto My Details - My Points, check for existance of the Notification line.
If this line and the link doesn't exist enter:
into your browser line
Reporting
Report the results under:
of each step you walk thru
eg: a) settings on account: Assurances: .... b) 10.php: (1st page of My Points) all displayed correctly ? c) is notification line displayed here ? d) switch to 15.php (page 2) of My Points if notification isn't available with link then use following link: https://cacert1.it-sls.de/wot.php?id=15 all displayed correctly ?
Additional Tests
On addtl. users start vary entering Assurance points onto the account by mixing order when you applying the "special points" (Thawte/C't Magazine)
eg: add first 35 regular assurance pts then add Thawte transfer points then continue with regular assurance points 0-35
Happy testing