I5:FeatureTest-OpenID RP rejects certs that are not valid for the domain

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|FeatureTest-OpenID RP rejects certs that are not valid for the domain}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:OpenID RP rejects certs that are not valid for the domain|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||

{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}}

{{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=FeatureTest,from={{#var:page}},namespace=I5|copy]]  [[Special:Call/DT Articles list XML,type=FeatureTest,title={{#var:page}},namespace=I5|as XML]]  edit

}}

{{#if:|Feature Test |Feature Test }}	OpenID RP rejects certs that are not valid for the domain
Test Type	bgcolor={{{color}}}}}|OpenID Authentication
Identifier	bgcolor={{{color}}}}}|FTR-orp-ssl-6
Description	bgcolor={{{color}}}}}|Tests that the OpenID RP rejects certs that are not valid for the domain
Role tested	bgcolor={{{color}}}}}|OpenID Identity Relying Party
Known Successful Reference Solution(s)	bgcolor={{{color}}}}}|{{ #if: smart.fm | I5:smart.fm}}{{ #if: Plaxo Signin | I5:Plaxo Signin}} {{ #if: | }} {{ #if: | }}
Success Criteria	bgcolor={{{color}}}}}|OpenID authentication succeeds
Failure Criteria	bgcolor={{{color}}}}}|OpenID not accepted or other failures

Features Proven

{{#dpl:debug=1

 |resultsheader=\n
 |noresultsheader= {|\n|bgcolor=#eeeeee|No matching Feature found.\n|}\n
 |category=Feature
 |namespace=I5
 |linksto=I5:FeatureTest-OpenID RP rejects certs that are not valid for the domain
 |nottitlematch = Feature.edit
 |include={Feature}.viewfromtest
 |includematch=/FeatureTest-OpenID RP rejects certs that are not valid for the domain/s
 |table=class=sortable,-,Feature,feature_type,solution_role

}}

Instructions

1. Open the result page for your solution and this test.
2. Open the OpenID login page for your relying party.
3. Enter the OpenID https://www.test-id.com/RP/AffirmativeIdentity.aspx into the OpenID login field of the page.
   1. This ID will not ask for a password.
   2. You should need to temorarily accept the cert for your browser. This is a test of the RP.
4. The RP should detect the invalid cert during discovery and present an error message. You must not be allowd to loggin.
5. If you receive a login this is a failure.
6. Set outcome in the results page:
   1. If the success criteria was met, set the outcome to "Works".
   2. If the test failed, set the outcome to "Failed" and enter information about the failure in the Notes section.
   3. If other issues occurred set the result to "Issues" and describe them in the Notes section.
7. Add either four tilde ~~~~ signs or a text name into the "Tested by" parameter.
8. Update the Date Tested, Browser, and Operating System lines of the results page.