et_fake_acas_server 0.3.0 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 14545033d09562e369ff246c56c6670d8fc50634e9b02676f1943fb2c4546046
-  data.tar.gz: 2f4d82dad49d3df5fe339c000cc9661e27176f98ee6c10f0ec6f6009c298507d
+  metadata.gz: df1e3d0a4eb74db657cd414d241db42bda898b486d58f90d4d3fb36dcb8e7021
+  data.tar.gz: 8dc55a2fbf8a876c264c2b62df697f2a225d00643d3100ccec954e890c0ef312
 SHA512:
-  metadata.gz: 78ccba5058af660966e09a45d2b3ad3b045a2b5f74f5c79b01239598605e6d7fdacad648827c8c9fbf8cdec4f359e5a1a779434fdfd419a32be25a4d0feea5c5
-  data.tar.gz: 21e56c75425ceaf79aece4ad09baf37af826e0d7e7270defa69d22b8dced01d8201d87118b28cab2de67dce72c615d350cd8ab689258826e81bb4f0f1cde87e2
+  metadata.gz: 750f165ebf45b7b8cdae1eb8e6ff61cce2a641f728c3b1fdd16be88498721808a2e2750dd85b2cd2f763a892c29cd12b00267e666055083866ccaf9a29087a89
+  data.tar.gz: 48c1d190c4391b001b66db4d2d4725bdf4846a973f057994dc7793fa8bbafa88a83f977123ffe1addd2c8b138dd1793c9b6b6cc3f718932b33f0f58278e42614

data/Gemfile.lock

@@ -1,11 +1,10 @@
 PATH
   remote: .
   specs:
-    et_fake_acas_server (0.3.0)
+    et_fake_acas_server (1.0.0)
       activesupport (>= 6.1)
       iodine (~> 0.7)
       nokogiri (~> 1.8, >= 1.8.2)
-      ruby-mcrypt (~> 0.2)
       sinatra (~> 2.0, >= 2.0.3)
       sinatra-contrib (~> 2.0)
 
@@ -22,7 +21,7 @@ GEM
       concurrent-ruby (~> 1.0)
     iodine (0.7.48)
     mini_portile2 (2.8.0)
-    minitest (5.16.2)
+    minitest (5.16.3)
     multi_json (1.15.0)
     mustermann (2.0.2)
       ruby2_keywords (~> 0.0.1)
@@ -34,7 +33,6 @@ GEM
     rack-protection (2.2.2)
       rack
     rake (13.0.1)
-    ruby-mcrypt (0.2.0)
     ruby2_keywords (0.0.5)
     sinatra (2.2.2)
       mustermann (~> 2.0)

data/et_fake_acas_server.gemspec

@@ -28,5 +28,4 @@ Gem::Specification.new do |spec|
   spec.add_dependency 'sinatra', '~> 2.0', '>= 2.0.3'
   spec.add_dependency 'nokogiri', '~> 1.8', '>= 1.8.2'
   spec.add_dependency 'activesupport', '>= 6.1'
-  spec.add_dependency 'ruby-mcrypt', '~> 0.2'
 end

data/lib/et_fake_acas_server/server.rb

@@ -1,12 +1,10 @@
 require 'sinatra/base'
 require 'sinatra/custom_logger'
 require 'logger'
-require 'et_fake_acas_server/soap_server'
 require 'et_fake_acas_server/json_server'
 
 module EtFakeAcasServer
   class Server < Sinatra::Base
-    post(/\/Lookup\/.*/) { SoapServer.call(env) }
     post(/\/ECCLJson/) { JsonServer.call(env) }
   end
 end

data/lib/et_fake_acas_server/version.rb

@@ -1,3 +1,3 @@
 module EtFakeAcasServer
-  VERSION = "0.3.0"
+  VERSION = "1.0.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: et_fake_acas_server
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 1.0.0
 platform: ruby
 authors:
 - Gary Taylor
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2022-07-27 00:00:00.000000000 Z
+date: 2022-09-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -120,20 +120,6 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '6.1'
-- !ruby/object:Gem::Dependency
-  name: ruby-mcrypt
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0.2'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0.2'
 description: Standalone fake acas server for use during dev and test of the employment
   tribunal system
 email:
@@ -158,16 +144,10 @@ files:
 - exe/et_fake_acas_server
 - lib/config.ru
 - lib/et_fake_acas_server.rb
-- lib/et_fake_acas_server/forms/certificate_lookup_form.rb
 - lib/et_fake_acas_server/forms/certificates_lookup_form.rb
 - lib/et_fake_acas_server/json_server.rb
 - lib/et_fake_acas_server/server.rb
-- lib/et_fake_acas_server/soap_server.rb
 - lib/et_fake_acas_server/version.rb
-- lib/et_fake_acas_server/xml_builders/found_xml_builder.rb
-- lib/et_fake_acas_server/xml_builders/internal_error_xml_builder.rb
-- lib/et_fake_acas_server/xml_builders/invalid_certificate_format_xml_builder.rb
-- lib/et_fake_acas_server/xml_builders/no_match_xml_builder.rb
 - lib/pdfs/76 EC (C) Certificate R000080.pdf
 - public/.keep
 - temp_x509/acas/privatekey.pem

data/lib/et_fake_acas_server/forms/certificate_lookup_form.rb

@@ -1,68 +0,0 @@
-require 'nokogiri'
-require 'base64'
-require 'active_support'
-require 'active_support/core_ext/string'
-module EtFakeAcasServer
-  class CertificateLookupForm
-    def initialize(xml, private_key_file: )
-      self.xml = xml
-      self.private_key = OpenSSL::PKey::RSA.new(File.read(private_key_file))
-    end
-
-    def validate
-      validate_digest
-      validate_signature
-    end
-
-    def certificate_number
-      parsed_values[:ec_certificate_number]
-    end
-
-    private
-
-    def parsed_values
-      @parsed_values ||= begin
-        doc = Nokogiri::XML(xml)
-        doc.xpath('//env:Envelope/env:Body/tns:GetECCertificate/tns:request').children.inject({}) do |acc, child|
-          decoded = Base64.decode64(child.text)
-          decrypted = private_key.private_decrypt(decoded, OpenSSL::PKey::RSA::PKCS1_OAEP_PADDING)
-          acc[child.name.underscore.to_sym] = decrypted
-          acc
-        end
-      end
-    end
-
-    def validate_digest
-      doc = Nokogiri::XML(xml)
-      node = doc.xpath('//env:Envelope/env:Header/wsse:Security/wsu:Timestamp', doc.collect_namespaces).first
-      digest_value = Base64.encode64(OpenSSL::Digest::SHA1.digest(node.canonicalize(Nokogiri::XML::XML_C14N_EXCLUSIVE_1_0))).strip
-
-      ns = doc.collect_namespaces
-      ns['xmlns:ds'] = ns.delete('xmlns')
-      provided_digest_value = doc.at_xpath('//env:Envelope/env:Header/wsse:Security/ds:Signature/ds:SignedInfo/ds:Reference/ds:DigestValue', ns).text
-      if digest_value != provided_digest_value
-        raise 'Wrong digest value'
-      end
-
-    end
-
-    def validate_signature
-      doc = Nokogiri::XML(xml)
-      ns = doc.collect_namespaces
-      ns['xmlns:ds'] = ns.delete('xmlns')
-      signed_info_node = doc.at_xpath('//env:Envelope/env:Header/wsse:Security/ds:Signature/ds:SignedInfo', ns)
-      signature_value_node = doc.at_xpath('//env:Envelope/env:Header/wsse:Security/ds:Signature/ds:SignatureValue', ns)
-      signature_value = Base64.decode64(signature_value_node.text)
-      security_token_url = doc.at_xpath('//env:Envelope/env:Header/wsse:Security/ds:Signature/ds:KeyInfo/wsse:SecurityTokenReference/wsse:Reference', ns)['URI'][1..-1]
-      certificate_value = doc.at_xpath("//env:Envelope/env:Header/wsse:Security/wsse:BinarySecurityToken[@wsu:Id='#{security_token_url}']", ns).text.strip
-      our_certificate = OpenSSL::X509::Certificate.new Base64.decode64(certificate_value)
-      document = signed_info_node.canonicalize(Nokogiri::XML::XML_C14N_EXCLUSIVE_1_0)
-      unless our_certificate.public_key.verify(OpenSSL::Digest::SHA1.new, signature_value, document)
-        raise 'Invalid signature'
-      end
-
-    end
-
-    attr_accessor :xml, :private_key
-  end
-end

data/lib/et_fake_acas_server/soap_server.rb

@@ -1,72 +0,0 @@
-require 'sinatra/base'
-require 'sinatra/custom_logger'
-require 'logger'
-require 'et_fake_acas_server/forms/certificate_lookup_form'
-require 'et_fake_acas_server/xml_builders/found_xml_builder'
-require 'et_fake_acas_server/xml_builders/no_match_xml_builder'
-require 'et_fake_acas_server/xml_builders/internal_error_xml_builder'
-require 'et_fake_acas_server/xml_builders/invalid_certificate_format_xml_builder'
-require 'active_support'
-require 'active_support/core_ext/numeric/time'
-
-
-module EtFakeAcasServer
-  class SoapServer < Sinatra::Base
-    def initialize(*)
-      super
-      self.private_key_file = ENV.fetch('ACAS_PRIVATE_KEY_FILE', File.absolute_path(File.join('..', '..', 'temp_x509', 'acas', 'privatekey.pem'), __dir__))
-      self.et_public_key_file = ENV.fetch('ET_PUBLIC_KEY_FILE', File.absolute_path(File.join('..', '..', 'temp_x509', 'et', 'publickey.cer'), __dir__))
-    end
-
-    configure :development, :production do
-      logger = Logger.new(STDOUT)
-      logger.level = Logger::DEBUG
-      set :logger, logger
-    end
-
-    post '/Lookup/ECService.svc' do
-      form = CertificateLookupForm.new(request.body.read, private_key_file: private_key_file)
-      request.body.rewind
-      form.validate
-      case form.certificate_number
-      when /\A(R|NE|MU)000200/ then
-        xml_builder_for_no_match(form).to_xml
-      when /\A(R|NE|MU)000201/ then
-        xml_builder_for_invalid_certificate_format(form).to_xml
-      when /\A(R|NE|MU)000500/ then
-        xml_builder_for_internal_error(form).to_xml
-      else
-        xml_builder_for_found(form).to_xml
-      end
-    end
-
-    private
-
-    attr_accessor :private_key_file, :et_public_key_file
-
-    def xml_builder_for_found(form)
-      data = OpenStruct.new claimant_name: 'Claimant’s Name',
-                            respondent_name: 'Respondent’s Name',
-                            date_of_issue: Time.parse('1 December 2017 12:00:00'),
-                            date_of_receipt: Time.parse('1 January 2017 12:00:00'),
-                            certificate_number: form.certificate_number,
-                            message: 'CertificateFound',
-                            method_of_issue: 'Email',
-                            certificate_file: File.absolute_path(File.join('..', 'pdfs', '76 EC (C) Certificate R000080.pdf'), __dir__)
-      FoundXmlBuilder.new(form, rsa_et_certificate_path: et_public_key_file).builder(data)
-    end
-
-    def xml_builder_for_no_match(form)
-      NoMatchXmlBuilder.new(form, rsa_et_certificate_path: et_public_key_file).builder
-    end
-
-    def xml_builder_for_internal_error(form)
-      InternalErrorXmlBuilder.new(form, rsa_et_certificate_path: et_public_key_file).builder
-    end
-
-    def xml_builder_for_invalid_certificate_format(form)
-      InvalidCertificateFormatXmlBuilder.new(form, rsa_et_certificate_path: et_public_key_file).builder
-    end
-  end
-end
-

data/lib/et_fake_acas_server/xml_builders/found_xml_builder.rb

@@ -1,77 +0,0 @@
-require 'base64'
-require 'openssl'
-require 'mcrypt'
-
-module EtFakeAcasServer
-  class FoundXmlBuilder
-    def initialize(form, rsa_et_certificate_path:)
-      self.form = form
-      self.rsa_et_certificate = OpenSSL::X509::Certificate.new File.read(rsa_et_certificate_path)
-    end
-
-    def key
-      @key ||= '12345678901234567890123456789012'
-    end
-
-    def iv
-      @iv ||= '12345678901234567890123456789012'
-    end
-
-    def builder(data)
-      Nokogiri::XML::Builder.new do |xml|
-        namespaces = {
-            'xmlns:s' => 'http://schemas.xmlsoap.org/soap/envelope',
-            'xmlns:u' => 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd'
-        }
-        xml['s'].Envelope(namespaces) do
-          xml['s'].Header do
-            xml.ActivityId("e67a4d86-e096-4a35-aa3a-2b3a8ffaaa54", 'CorrelationId': '03973d23-3c39-4359-aa69-4d37b922fb60', xmlns: 'http://schemas.microsoft.com/2004/09/ServiceModel/Diagnostics')
-            xml['o'].Security('s:mustUnderstand': '1', 'xmlns:o': 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd') do
-              xml['u'].Timestamp('u:Id': '_0') do
-                xml['u'].Created '2014-03-03T10:15.01.251Z'
-                xml['u'].Expires '2014-03-03T10:20:01.251Z'
-              end
-            end
-          end
-          xml['s'].Body do
-            xml.GetECCertificateResponse(xmlns: 'https://ec.acas.org.uk/lookup/') do
-              xml.GetECCertificateResult('xmlns:a': 'http://schemas.datacontract.org/2004/07/Acas.CertificateLookup.EcLookupService', 'xmlns:i': 'http://www.w3.org/2001/XMLSchema-instance') do
-                xml['a'].Certificate Base64.encode64(aes_encrypt(Base64.encode64(File.read(data.certificate_file))))
-                xml['a'].ClaimantName Base64.encode64(aes_encrypt(data.claimant_name))
-                xml['a'].CurrentDateTime Base64.encode64(aes_encrypt(Time.now.strftime('%d/%m/%Y %H:%M:%S')))
-                xml['a'].DateOfIssue Base64.encode64(aes_encrypt(data.date_of_issue.strftime('%d/%m/%Y %H:%M:%S')))
-                xml['a'].DateOfReceipt Base64.encode64(aes_encrypt(data.date_of_receipt.strftime('%d/%m/%Y %H:%M:%S')))
-                xml['a'].ECCertificateNumber Base64.encode64(aes_encrypt(data.certificate_number))
-                xml['a'].IV Base64.encode64(rsa_encrypt(Base64.encode64(iv)))
-                xml['a'].Key Base64.encode64(rsa_encrypt(Base64.encode64(key)))
-                xml['a'].Message Base64.encode64(aes_encrypt(data.message))
-                xml['a'].MethodOfIssue Base64.encode64(aes_encrypt(data.method_of_issue))
-                xml['a'].RespondentName Base64.encode64(aes_encrypt(data.respondent_name))
-                xml['a'].ResponseCode Base64.encode64(aes_encrypt('100'))
-                xml['a'].ServiceVersion Base64.encode64(aes_encrypt('1.0'))
-              end
-            end
-          end
-        end
-      end
-
-    end
-
-    private
-
-    attr_accessor :rsa_et_certificate, :form
-
-    def aes_encrypt(value)
-      encrypt_cipher = build_encrypt_cipher
-      encrypt_cipher.encrypt(String.new(value, encoding: 'ascii-8bit'))
-    end
-
-    def build_encrypt_cipher
-      Mcrypt.new(:rijndael_256, :cbc, key, iv, :pkcs7)
-    end
-
-    def rsa_encrypt(value)
-      rsa_et_certificate.public_key.public_encrypt(value, OpenSSL::PKey::RSA::PKCS1_OAEP_PADDING)
-    end
-  end
-end

data/lib/et_fake_acas_server/xml_builders/internal_error_xml_builder.rb

@@ -1,70 +0,0 @@
-require 'base64'
-require 'openssl'
-require 'mcrypt'
-
-module EtFakeAcasServer
-  class InternalErrorXmlBuilder
-    def initialize(form, rsa_et_certificate_path:)
-      self.form = form
-      self.rsa_et_certificate = OpenSSL::X509::Certificate.new File.read(rsa_et_certificate_path)
-    end
-
-    def key
-      @key ||= '12345678901234567890123456789012'
-    end
-
-    def iv
-      @iv ||= '12345678901234567890123456789012'
-    end
-
-    def builder
-      Nokogiri::XML::Builder.new do |xml|
-        namespaces = {
-            'xmlns:s' => 'http://schemas.xmlsoap.org/soap/envelope',
-            'xmlns:u' => 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd'
-        }
-        xml['s'].Envelope(namespaces) do
-          xml['s'].Header do
-            xml.ActivityId("e67a4d86-e096-4a35-aa3a-2b3a8ffaaa54", 'CorrelationId': '03973d23-3c39-4359-aa69-4d37b922fb60', xmlns: 'http://schemas.microsoft.com/2004/09/ServiceModel/Diagnostics')
-            xml['o'].Security('s:mustUnderstand': '1', 'xmlns:o': 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd') do
-              xml['u'].Timestamp('u:Id': '_0') do
-                xml['u'].Created '2014-03-03T10:15.01.251Z'
-                xml['u'].Expires '2014-03-03T10:20:01.251Z'
-              end
-            end
-          end
-          xml['s'].Body do
-            xml.GetECCertificateResponse(xmlns: 'https://ec.acas.org.uk/lookup/') do
-              xml.GetECCertificateResult('xmlns:a': 'http://schemas.datacontract.org/2004/07/Acas.CertificateLookup.EcLookupService', 'xmlns:i': 'http://www.w3.org/2001/XMLSchema-instance') do
-                xml['a'].CurrentDateTime Base64.encode64(aes_encrypt(Time.now.strftime('%d/%m/%Y %H:%M:%S')))
-                xml['a'].IV Base64.encode64(rsa_encrypt(Base64.encode64(iv)))
-                xml['a'].Key Base64.encode64(rsa_encrypt(Base64.encode64(key)))
-                xml['a'].Message Base64.encode64(aes_encrypt('An internal error has occured in ACAS'))
-                xml['a'].ResponseCode Base64.encode64(aes_encrypt('500'))
-                xml['a'].ServiceVersion Base64.encode64(aes_encrypt('1.0'))
-              end
-            end
-          end
-        end
-      end
-
-    end
-
-    private
-
-    attr_accessor :rsa_et_certificate, :form
-
-    def aes_encrypt(value)
-      encrypt_cipher = build_encrypt_cipher
-      encrypt_cipher.encrypt(value)
-    end
-
-    def build_encrypt_cipher
-      Mcrypt.new(:rijndael_256, :cbc, key, iv, :pkcs7)
-    end
-
-    def rsa_encrypt(value)
-      rsa_et_certificate.public_key.public_encrypt(value, OpenSSL::PKey::RSA::PKCS1_OAEP_PADDING)
-    end
-  end
-end

data/lib/et_fake_acas_server/xml_builders/invalid_certificate_format_xml_builder.rb

@@ -1,68 +0,0 @@
-require 'base64'
-require 'openssl'
-module EtFakeAcasServer
-  class InvalidCertificateFormatXmlBuilder
-    def initialize(form, rsa_et_certificate_path:)
-      self.form = form
-      self.rsa_et_certificate = OpenSSL::X509::Certificate.new File.read(rsa_et_certificate_path)
-    end
-
-    def key
-      @key ||= '12345678901234567890123456789012'
-    end
-
-    def iv
-      @iv ||= '12345678901234567890123456789012'
-    end
-
-    def builder
-      Nokogiri::XML::Builder.new do |xml|
-        namespaces = {
-            'xmlns:s' => 'http://schemas.xmlsoap.org/soap/envelope',
-            'xmlns:u' => 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd'
-        }
-        xml['s'].Envelope(namespaces) do
-          xml['s'].Header do
-            xml.ActivityId("e67a4d86-e096-4a35-aa3a-2b3a8ffaaa54", 'CorrelationId': '03973d23-3c39-4359-aa69-4d37b922fb60', xmlns: 'http://schemas.microsoft.com/2004/09/ServiceModel/Diagnostics')
-            xml['o'].Security('s:mustUnderstand': '1', 'xmlns:o': 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd') do
-              xml['u'].Timestamp('u:Id': '_0') do
-                xml['u'].Created '2014-03-03T10:15.01.251Z'
-                xml['u'].Expires '2014-03-03T10:20:01.251Z'
-              end
-            end
-          end
-          xml['s'].Body do
-            xml.GetECCertificateResponse(xmlns: 'https://ec.acas.org.uk/lookup/') do
-              xml.GetECCertificateResult('xmlns:a': 'http://schemas.datacontract.org/2004/07/Acas.CertificateLookup.EcLookupService', 'xmlns:i': 'http://www.w3.org/2001/XMLSchema-instance') do
-                xml['a'].CurrentDateTime Base64.encode64(aes_encrypt(Time.now.strftime('%d/%m/%Y %H:%M:%S')))
-                xml['a'].IV Base64.encode64(rsa_encrypt(Base64.encode64(iv)))
-                xml['a'].Key Base64.encode64(rsa_encrypt(Base64.encode64(key)))
-                xml['a'].Message Base64.encode64(aes_encrypt('Invalid certificate format'))
-                xml['a'].ResponseCode Base64.encode64(aes_encrypt('201'))
-                xml['a'].ServiceVersion Base64.encode64(aes_encrypt('1.0'))
-              end
-            end
-          end
-        end
-      end
-
-    end
-
-    private
-
-    attr_accessor :rsa_et_certificate, :form
-
-    def aes_encrypt(value)
-      encrypt_cipher = build_encrypt_cipher
-      encrypt_cipher.encrypt(value)
-    end
-
-    def build_encrypt_cipher
-      Mcrypt.new(:rijndael_256, :cbc, key, iv, :pkcs7)
-    end
-
-    def rsa_encrypt(value)
-      rsa_et_certificate.public_key.public_encrypt(value, OpenSSL::PKey::RSA::PKCS1_OAEP_PADDING)
-    end
-  end
-end

data/lib/et_fake_acas_server/xml_builders/no_match_xml_builder.rb

@@ -1,68 +0,0 @@
-require 'base64'
-require 'openssl'
-module EtFakeAcasServer
-  class NoMatchXmlBuilder
-    def initialize(form, rsa_et_certificate_path:)
-      self.form = form
-      self.rsa_et_certificate = OpenSSL::X509::Certificate.new File.read(rsa_et_certificate_path)
-    end
-
-    def key
-      @key ||= '12345678901234567890123456789012'
-    end
-
-    def iv
-      @iv ||= '12345678901234567890123456789012'
-    end
-
-    def builder
-      Nokogiri::XML::Builder.new do |xml|
-        namespaces = {
-            'xmlns:s' => 'http://schemas.xmlsoap.org/soap/envelope',
-            'xmlns:u' => 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd'
-        }
-        xml['s'].Envelope(namespaces) do
-          xml['s'].Header do
-            xml.ActivityId("e67a4d86-e096-4a35-aa3a-2b3a8ffaaa54", 'CorrelationId': '03973d23-3c39-4359-aa69-4d37b922fb60', xmlns: 'http://schemas.microsoft.com/2004/09/ServiceModel/Diagnostics')
-            xml['o'].Security('s:mustUnderstand': '1', 'xmlns:o': 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd') do
-              xml['u'].Timestamp('u:Id': '_0') do
-                xml['u'].Created '2014-03-03T10:15.01.251Z'
-                xml['u'].Expires '2014-03-03T10:20:01.251Z'
-              end
-            end
-          end
-          xml['s'].Body do
-            xml.GetECCertificateResponse(xmlns: 'https://ec.acas.org.uk/lookup/') do
-              xml.GetECCertificateResult('xmlns:a': 'http://schemas.datacontract.org/2004/07/Acas.CertificateLookup.EcLookupService', 'xmlns:i': 'http://www.w3.org/2001/XMLSchema-instance') do
-                xml['a'].CurrentDateTime Base64.encode64(aes_encrypt(Time.now.strftime('%d/%m/%Y %H:%M:%S')))
-                xml['a'].IV Base64.encode64(rsa_encrypt(Base64.encode64(iv)))
-                xml['a'].Key Base64.encode64(rsa_encrypt(Base64.encode64(key)))
-                xml['a'].Message Base64.encode64(aes_encrypt('Certificate not found'))
-                xml['a'].ResponseCode Base64.encode64(aes_encrypt('200'))
-                xml['a'].ServiceVersion Base64.encode64(aes_encrypt('1.0'))
-              end
-            end
-          end
-        end
-      end
-
-    end
-
-    private
-
-    attr_accessor :rsa_et_certificate, :form
-
-    def aes_encrypt(value)
-      encrypt_cipher = build_encrypt_cipher
-      encrypt_cipher.encrypt(value)
-    end
-
-    def build_encrypt_cipher
-      Mcrypt.new(:rijndael_256, :cbc, key, iv, :pkcs7)
-    end
-
-    def rsa_encrypt(value)
-      rsa_et_certificate.public_key.public_encrypt(value, OpenSSL::PKey::RSA::PKCS1_OAEP_PADDING)
-    end
-  end
-end