Prove

Test & Prove

Executable assurance tests. Every run produces timestamped evidence linked to controls and findings.

TPP Trust Journey
Tests28
Pass15
Fail7
Warning4
Not run2
Directory Connectivity
2/3 pass
WARNING
OAuth Authentication
1/2 pass
FAIL
TPP Registration
1/2 pass
FAIL
TPP Validation
1/2 pass
FAIL
SSA Validation
2/2 pass
PASS
JWKS & Key Rollover
0/2 pass
FAIL
Certificate Validation
0/1 pass
NOT RUN
Entrust Trust Chain
2/2 pass
PASS
Keyfactor Trust Chain
2/4 pass
FAIL
Dual Trust
1/1 pass
PASS
OCSP / CRL
1/2 pass
WARNING
Failure Scenarios
2/3 pass
WARNING
End-to-End TPP Journey
0/2 pass
WARNING
28 of 28
SystemEvidence
TST-001Connecting to Directory APIDirectory ConnectivityProductionOutbound Proxy11 Sept, 09:00PASS412 msEVD-2000
TST-002Directory API v2.2 organisation schemaDirectory ConnectivityProductionTPP Registration Service12 Sept, 10:07WARNING655 msEVD-2001
TST-003Obtaining OAuth tokenOAuth AuthenticationProductionJans IAM11 Sept, 11:14PASS830 msEVD-2002
TST-004Validating OAuth audienceOAuth AuthenticationProductionJans IAM12 Sept, 12:21FAIL122 msEVD-2003
TST-005Retrieving TPP organisationTPP RegistrationProductionTPP Registration Service11 Sept, 13:28PASS540 msEVD-2004
TST-006Validating SSASSA ValidationProductionTPP Registration Service12 Sept, 14:35PASS210 msEVD-2005
TST-007Validating Keyfactor certificateKeyfactor Trust ChainProductionOpen Banking API Gateway11 Sept, 15:42PASS388 msEVD-2006
TST-008Validating Entrust certificateEntrust Trust ChainProductionOpen Banking API Gateway12 Sept, 16:49PASS351 msEVD-2007
TST-009Testing dual trustDual TrustProductionOpen Banking API Gateway11 Sept, 09:56PASS702 msEVD-2008
TST-010Checking OCSPOCSP / CRLProductionCertificate Validation Service12 Sept, 10:03PASS264 msEVD-2009
TST-011Checking CRLOCSP / CRLProductionCertificate Validation Service11 Sept, 11:10WARNING4890 msEVD-2010
TST-012Testing invalid certificate rejectionFailure ScenariosProductionOpen Banking API Gateway12 Sept, 12:17PASS298 msEVD-2011
TST-013Testing unknown TPPFailure ScenariosProductionTPP Registration Service11 Sept, 13:24PASS377 msEVD-2012
TST-014End-to-end TPP journey (AISP)End-to-End TPP JourneyProductionOpen Banking API Gateway12 Sept, 14:31WARNING6120 msEVD-2013
TST-015End-to-end TPP journey (PISP)End-to-End TPP JourneyProductionPayment API—NOT RUN——
TST-016TPP role validation against DirectoryTPP ValidationProductionTPP Registration Service12 Sept, 16:45FAIL233 msEVD-2015
TST-017Revoked TPP certificate rejectedTPP ValidationProductionOpen Banking API Gateway11 Sept, 09:52PASS402 msEVD-2016
TST-018JWKS content-type negotiationJWKS & Key RolloverProductionJans IAM12 Sept, 10:59FAIL96 msEVD-2017
TST-019Key rollover with kidJWKS & Key RolloverProductionJans IAM11 Sept, 11:06FAIL141 msEVD-2018
TST-0204096-bit issuing CA handshakeKeyfactor Trust ChainProductionF5 Load Balancer12 Sept, 12:13PASS265 msEVD-2019
TST-021Certificate path building (cross-signed)Certificate ValidationProductionCertificate Validation Service—NOT RUN——
TST-022Keyfactor chain on NGINXKeyfactor Trust ChainProductionNGINX Reverse Proxy12 Sept, 14:27FAIL88 msEVD-2021
TST-023Keyfactor chain on Payment APIKeyfactor Trust ChainProductionPayment API11 Sept, 15:34FAIL91 msEVD-2022
TST-024DCR with Keyfactor transport certificateTPP RegistrationProductionTPP Registration Service12 Sept, 16:41FAIL1020 msEVD-2023
TST-025Expired SSA rejectedSSA ValidationProductionTPP Registration Service11 Sept, 09:48PASS187 msEVD-2024
TST-026Entrust chain on TPP RegistrationEntrust Trust ChainProductionTPP Registration Service12 Sept, 10:55PASS344 msEVD-2025
TST-027OCSP responder unreachable (soft-fail policy)Failure ScenariosProductionCertificate Validation Service11 Sept, 11:02WARNING5010 msEVD-2026
TST-028Directory connectivity from SandboxDirectory ConnectivitySandboxSandbox Reverse Proxy12 Sept, 12:09PASS455 msEVD-2027