| CIQ | CH-CPI-001 | deprecated | Testable |
1
|
0
| | The only DSML element supported is the searchRequeston the CPI root or one itsdirect or indirect child elements (see Section 5.2 Community information query (CH:CPI)) | 31 | Section 5.2 | 11/8/23 3:48:15 PM by vhofman |
|
| CIQ | CH-CPI-002 | deprecated | Testable |
1
|
0
| | The searchRequest is supported on the CPI root or one of its child elements: ou=CHCommunity or ou=CHEndpoint | 31 | Section 5.2 | 11/8/23 3:48:33 PM by vhofman |
|
| CIQ | CH-CPI-003 | deprecated | Not testable |
1
|
0
| | The defined attributes for the CHCommunity object classes are listed in Appendix B. LDAP Schema Overview | 40 | Section B | 11/8/23 3:49:26 PM by vhofman |
|
| CIQ | CH-CPI-004 | deprecated | Testable |
1
|
0
| | The CPI base distinguished name / directory root is dc=CPI,o=BAG,c=CH. | 30 | Section 5.1 | 11/8/23 3:49:41 PM by vhofman |
|
| CIQ | CH-CPI-005 | deprecated | Not testable |
1
|
0
| | The defined attributes for the CHGateway object classes are listed in Appendix B. LDAP Schema Overview | 40 | Section B | 11/8/23 3:49:48 PM by vhofman |
|
| CIQ | CH-CPI-006 | deprecated | Not testable |
0
|
0
| | Each community of object class CHCommunity has attributes that reference the corresponding gateway, assertion provider or authorization decision elements in the organisational unit CHEndpoint.Furthermore, each gateway element is prefixed with the shcIssuerName of its community. | 0 | Section 0 | 11/8/23 3:49:56 PM by vhofman |
|
| CIQ | CIQ-001 | reviewed | Testable |
1
|
0
| | The SOAP operation namespace MUST read: ch:admin:bag:epr:CPI:2017 | 6 | Section 3.1.4.2 | 11/8/23 3:50:12 PM by vhofman |
|
| CIQ | CIQ-002 | reviewed | Testable |
1
|
0
| | The request SHALL be valid according to the DSML v2 schema. | 7 | Section 3.1.4.2 | 11/8/23 3:50:44 PM by vhofman |
|
| CIQ | CIQ-003 | reviewed | Testable |
0
|
0
| We don't test the CPI Provider as a SUT | The CH:CPI Provider MUST support all LDAP standard search filters. | 7 | Section 3.1.4.2 | 11/9/23 8:13:28 AM by vhofman |
|
| CIQ | CIQ-004 | reviewed | Testable |
1
|
0
| | This transaction MUST not limit any restriction on the search scope, time limit or list of attributes. | 7 | Section 3.1.4.2 | 11/8/23 3:51:06 PM by vhofman |
|
| CIQ | CIQ-005 | reviewed | Testable |
1
|
0
| | The size limit MUST be set to max. 1000 result entries. | 7 | Section 3.1.4.2 | 11/8/23 3:51:15 PM by vhofman |
|
| CIQ | CIQ-006 | reviewed | Testable |
0
|
0
| We don't test the CPI Provider as a SUT | The CH:CPI Provider MUST validate the authenticity of the CH:CPI Consumer by check-ing the TLS certificate. | 7 | Section 3.1.4.7 | 11/8/23 3:52:06 PM by vhofman |
|
| CIQ | CIQ-007 | reviewed | Testable |
0
|
0
| We don't test the CPI Provider as a SUT | Validation of the authenticity of the CH:CPI Consumer MUST be done using the IHE ATNA Authenticate Node [ITI-19] transaction. | 7 | Section 3.1.4.3 | 11/9/23 8:11:19 AM by vhofman |
|
| CIQ | CIQ-008 | reviewed | Testable |
0
|
0
| We don't test the CPI Provider as a SUT | Each node authentication failure (e.g. invalid certificate) MUST trigger an IHE ATNA Security Alert Audit Event. | 7 | Section 3.1.4.3 | 11/9/23 8:11:21 AM by vhofman |
|
| CIQ | CIQ-009 | reviewed | Testable |
0
|
0
| We don't test the CPI Provider as a SUT | For legitimate requests, the CH:CPI Provider responds using the Community Information Query (CH:CIQ) Response message | 8 | Section 3.1.4.3 | 11/9/23 8:11:27 AM by vhofman |
|
| CIQ | CIQ-010 | reviewed | Testable |
0
|
0
| We don't test the CPI Provider as a SUT | For non legitimate requests, the transaction MUST fail. | 8 | Section 3.1.4.3 | 11/9/23 8:11:29 AM by vhofman |
|
| CIQ | CIQ-011 | reviewed | Testable |
0
|
0
| We don't test the CPI Provider as a SUT | The CH:CIQ Response contains a SOAP fault in case of an invalid SOAP request. | 8 | Section 3.1.5.2.1 | 11/9/23 8:11:31 AM by vhofman |
|
| CIQ | CIQ-012 | reviewed | Testable |
0
|
0
| We don't test the CPI Provider as a SUT | The CH:CIQ Response contains a SOAP fault in any case of an invalid SOAP body. | 8 | Section 3.1.5.2.1 | 11/9/23 8:11:34 AM by vhofman |
|
| CIQ | CIQ-013 | reviewed | Testable |
0
|
0
| We don't test the CPI Provider as a SUT | The CH:CIQ Response contains a SOAP based DSMLv2 batchResponse message of errorRe-sponse element type to send a response for an invalid searchRequest. | 9 | Section 3.1.5.2.2 | 11/8/23 3:54:16 PM by vhofman |
|
| CIQ | CIQ-014 | reviewed | Testable |
0
|
0
| We don't test the CPI Provider as a SUT | The CH:CIQ Response contains a SOAP based DSMLv2 batchResponse message of searchResponse element type to send a response for a valid searchRequest. | 9 | Section 3.1.5.2.3 | 11/8/23 3:54:21 PM by vhofman |
|