Setup for Automated Testing

Assumptions

• Vendors are part of SEEMAIL (and are therefore a Participating Agency)

• Automated testing can only be performed by Participating Agencies (as defined in the SEEMAIL List)

• All automated tests must be able to be performed manually and interpreted manually

• There is a single Reference Test Server (see.govt.nz)

• The Reference Test Server can be triggered to generate a corresponding incoming test message to a Participating Agency (seemail-test-agent)

• A copy of each test and the results are forwarded to a mailbox owned by the S.E.E. Mail Manager (seemail-test-log)

• Each Participating Agency can be triggered to autorespond with a signed, encrypted message (seemail-ping). Exception: The autoresponder will not respond to mail originating from other seemail-ping accounts, to prevent potential ddos attacks.

• Each Participating Agency has a generic test mail account (seemail-test)

Test Setup

E-government Unit will set up the following at see.govt.nz:

• Mailbox: seemail-test-log - for recording test results forwarded from an agency

• Mailbox: seemail-test-agent - for receiving a "trigger" e-mail and performing an automated response

• Mailbox: seemail-ping - for connectivity purposes

• E-mail domains necessary to perform certificate management tests e.g. see-nocrl.gen.nz, see-expiredcert.gen.nz; see-revokedcert.gen.nz

Each Participating Agency will set up the following:

• Mailbox: seemail-test - for testing purposes

• All incoming messages to "seemail-test" will be automatically forwarded to "seemail-test-log@see.govt.nz", included as part of the body of the message (not an attachment)

• Mailbox: seemail-ping - for connectivity purposes

• Seemail-ping will be an auto-responder

• Seemail-ping will operate before any other SEEMAIL business rules and not invoke them

• Seemail-ping will only respond to an e-mail from an agency in the local SEEMAIL or XSEEMAIL lists, UNLESS it is from seemail-test (implies person is interimly site certified)

• Seemail-ping will respond with the SEEMAIL version number, and if possible, the list of SEEMAIL agencies it knows about

To simplify testing, the S.E.E. Manager can make available on request, an Exchange .PST file, which contains a copy of each of the INCOMING and OUTGOING test messages. The candidate can then simply open each message and "Send" it.

Automated Test Walkthrough

How automated testing works:

• Candidate informs S.E.E. Mail Manager they wish to be accredited / certified.

• S.E.E. Mail Manager adds them to the SEEMAIL List - at this stage, there are no secure links, so other Participating Agencies are not signing/encrypting to them.

• Candidate can now initiate Incoming Message Tests, by sending a message e.g. FROM: seemail-test@youragency.govt.nz, TO: seemail-test @see.govt.nz, SUBJECT: SEND TEST IN-1-A.

• Reference Test Server will send an appropriately configured e-mail TO: seemail-test-@youragency.govt.nz.

• The seemail-test mailbox will receive the e-mail (or an appropriate warning message). It forwards a copy of the e-mail to seemail-test-log@see.govt.nz.