Integration development¶
Get started¶
Consumer registration and network access¶
MSign authenticates the clients by client certificate serial number. MSign service consumers must be registered in MSign before being able to call the API.
MSign API is accessible only to a registered set of IP addresses and, for security sensitive information systems, this means configuring routes and/or a VPN between the consumer and MSign.
To register your consumer and get network access, please write a request by e-mail to the Service owner, providing your public IP address or the VPN assigned private IP address and the certificate serial number in your request.
Obtaining credentials
MSign accepts client certificates generated by Certification Authority of the Center of Special Telecommunications (https://pki.cts.md), by requesting a certificate for authentication.
Obtaining technical contract¶
The WSDL contract can be obtained from the following URL (base addresses are listed in System environments): /MSign.svc?singleWsdl
(ToDo: load a WSDL/sample from current site)Note that accessing the contract requires valid credentials. An offline copy of the WSDL can be found in .NET Sample.
Important
It is mandatory to develop the integrations and perform tests with the testing environment
Integration testing¶
Test cases
Here are some basic test cases that could be added to the test suite that integrates with MSign.
Case #1¶
| Test Case ID | TC_FUNCT_01 | ||
| Description | Verify the successful integration of the e-Service and MSign | ||
| Applicable for | List of browsers as specified in requirements | ||
| Requirements | REQ_FUNCT_XX | ||
| Initial Conditions | Open the e-Service under test in a browser window. Go through the e-Service web pages, enter the data or upload the document to be signed and navigate to the page with Sign button, in order to perform the signing. | ||
| Step | Task | Expected Result | Actual Result |
| 1 | Click the Sign button. | The MSign sign page is displayed to the user. | Pass / Fail |
| 2 | Select the first signing instrument and enter the data related to the selected instrument. Submit data. | The browser re-displays the e-Services page, requested signatures being successfully provided. | Pass / Fail |
| 3 | Repeat previous step (Step2) for each available signing instrument. | The browser re-displays the e-Services page, requested signatures being successfully provided. | Pass / Fail |
Case #2¶
| Test Case ID | TC_FUNCT_02 | ||
| Description | Verify failed signing by cancelling the signature process | ||
| Applicable for | List of browsers as specified in requirements | ||
| Requirements | REQ_FUNCT_XX | ||
| Initial Conditions | Open the e-Service under test in a browser window. Go through the e-Service web pages, enter the data or upload the document to be signed and navigate to the page with Sign button, in order to perform the signing. | ||
| Step | Task | Expected Result | Actual Result |
| 1 | Click the Sign button. | The MSign sign page is displayed to the user. | Pass / Fail |
| 2 | Select a signing instrument that asks for a PIN or confirmation while signing (such as Mobile Signature) and cancel the signing | MSign displays that signature failed with a meaningful reason. | Pass / Fail |
| 3 | Review the MSign message and click OK to continue | The browser re-displays the e-Services page that clearly shows that the signature failed.
Note that calling GetSignResponse for this request will return a response with SignStatus = Failure |
Pass / Fail |
Case #3¶
| Test Case ID | TC_FUNCT_03 | ||
| Description | Check sign request re-sending | ||
| Applicable for | List of browsers as specified in requirements | ||
| Requirements | REQ_FUNCT_XX | ||
| Initial Conditions | Open the e-Service under test in a browser window. Go through the e-Service web pages, enter the data or upload the document to be signed and navigate to the page with Sign button, in order to perform the signing. | ||
| Step | Task | Expected Result | Actual Result |
| 1 | Click the Sign button. | The MSign sign page is displayed to the user. | Pass / Fail |
| 2 | Go back to the e-Service page and click Sign button again. | The MSign sign page is displayed to the user. | Pass / Fail |
Case #4¶
| Test Case ID | TC_FUNCT_04 | ||
| Description | Check correct error handling | ||
| Applicable for | List of browsers as specified in requirements | ||
| Requirements | REQ_FUNCT_XX | ||
| Initial Conditions | Open the e-Service under test in a browser window. Go through the e-Service web pages, enter the data or upload the document to be signed and navigate to the page with Sign button, in order to perform the signing. | ||
| Step | Task | Expected Result | Actual Result |
| 1 | Use some invalid data (such as invalid ExpectedSigner.ID, invalid MSISDN) and click the Sign button. | The e-Service displays some error message and does not redirect to MSign. | Pass / Fail |
Case #5¶
| Test Case ID | TC_FUNCT_05 | ||
| Description | Check valid signature verification functionality | ||
| Applicable for | List of browsers as specified in requirements | ||
| Requirements | REQ_FUNCT_XX | ||
| Initial Conditions | Sign some data or document in the integrated e-Service (i.e. follow TC_FUNCT_01) and navigate to the page with Verify button, in order to perform the verification. | ||
| Step | Task | Expected Result | Actual Result |
| 1 | Click on Verify button. | The e-Service displays a clearly visible successful signature verification result. | Pass / Fail |
Case #6¶
| Test Case ID | TC_FUNCT_06 | ||
| Description | Check valid signature verification functionality | ||
| Applicable for | List of browsers as specified in requirements | ||
| Requirements | REQ_FUNCT_XX | ||
| Initial Conditions | Sign some data or document in the integrated e-Service (i.e. follow TC_FUNCT_01) and navigate to the page with Verify button, in order to perform the verification. Modify the signed data, document or the actual signature (if possible) directly in the database or in the resulting binary files. | ||
| Step | Task | Expected Result | Actual Result |
| 1 | Click on Verify button. | The e-Service displays a clearly visible failed signature verification result. | Pass / Fail |
Integrations review and audit¶
There are no special requirements related to integration review.