yuzu-emu/mbedtls
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
mbedtls/tests/suites/test_suite_x509write.data

111 lines
9 KiB
Text
Raw Normal View History

- First tests for x509_write_cert_req() compat with OpenSSL output
2012-02-16 15:09:13 +01:00
Certificate Request check Server1 SHA1
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add tests for (named) bitstring to suite_asn1write
2018-09-26 11:51:16 +02:00
x509_csr_check:"data_files/server1.key":"data_files/server1.req.sha1":MBEDTLS_MD_SHA1:0:0:0:0
- First tests for x509_write_cert_req() compat with OpenSSL output
2012-02-16 15:09:13 +01:00
Certificate Request check Server1 SHA224
Separate SHA224 from SHA256 config options. These options are still dependant on each other. This is an intermediate step. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-19 16:46:28 +02:00
depends_on:MBEDTLS_SHA224_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add tests for (named) bitstring to suite_asn1write
2018-09-26 11:51:16 +02:00
x509_csr_check:"data_files/server1.key":"data_files/server1.req.sha224":MBEDTLS_MD_SHA224:0:0:0:0
- First tests for x509_write_cert_req() compat with OpenSSL output
2012-02-16 15:09:13 +01:00
Certificate Request check Server1 SHA256
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add tests for (named) bitstring to suite_asn1write
2018-09-26 11:51:16 +02:00
x509_csr_check:"data_files/server1.key":"data_files/server1.req.sha256":MBEDTLS_MD_SHA256:0:0:0:0
- First tests for x509_write_cert_req() compat with OpenSSL output
2012-02-16 15:09:13 +01:00
Certificate Request check Server1 SHA384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add tests for (named) bitstring to suite_asn1write
2018-09-26 11:51:16 +02:00
x509_csr_check:"data_files/server1.key":"data_files/server1.req.sha384":MBEDTLS_MD_SHA384:0:0:0:0
- First tests for x509_write_cert_req() compat with OpenSSL output
2012-02-16 15:09:13 +01:00
Certificate Request check Server1 SHA512
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA512_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add tests for (named) bitstring to suite_asn1write
2018-09-26 11:51:16 +02:00
x509_csr_check:"data_files/server1.key":"data_files/server1.req.sha512":MBEDTLS_MD_SHA512:0:0:0:0
- First tests for x509_write_cert_req() compat with OpenSSL output
2012-02-16 15:09:13 +01:00
Certificate Request check Server1 MD5
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_MD5_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add tests for (named) bitstring to suite_asn1write
2018-09-26 11:51:16 +02:00
x509_csr_check:"data_files/server1.key":"data_files/server1.req.md5":MBEDTLS_MD_MD5:0:0:0:0
Improve x509xrite_csr testing: extensions, ECDSA
2014-03-28 12:46:44 +01:00
Certificate Request check Server1 key_usage
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add tests for (named) bitstring to suite_asn1write
2018-09-26 11:51:16 +02:00
x509_csr_check:"data_files/server1.key":"data_files/server1.req.key_usage":MBEDTLS_MD_SHA1:MBEDTLS_X509_KU_DIGITAL_SIGNATURE | MBEDTLS_X509_KU_NON_REPUDIATION | MBEDTLS_X509_KU_KEY_ENCIPHERMENT:1:0:0
Certificate Request check Server1 key_usage empty
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
x509_csr_check:"data_files/server1.key":"data_files/server1.req.key_usage_empty":MBEDTLS_MD_SHA1:0:1:0:0
Improve x509xrite_csr testing: extensions, ECDSA
2014-03-28 12:46:44 +01:00
Certificate Request check Server1 ns_cert_type
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add tests for (named) bitstring to suite_asn1write
2018-09-26 11:51:16 +02:00
x509_csr_check:"data_files/server1.key":"data_files/server1.req.cert_type":MBEDTLS_MD_SHA1:0:0:MBEDTLS_X509_NS_CERT_TYPE_SSL_SERVER:1
Certificate Request check Server1 ns_cert_type empty
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
x509_csr_check:"data_files/server1.key":"data_files/server1.req.cert_type_empty":MBEDTLS_MD_SHA1:0:0:0:1
Improve x509xrite_csr testing: extensions, ECDSA
2014-03-28 12:46:44 +01:00
Certificate Request check Server1 key_usage + ns_cert_type
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Add tests for (named) bitstring to suite_asn1write
2018-09-26 11:51:16 +02:00
x509_csr_check:"data_files/server1.key":"data_files/server1.req.ku-ct":MBEDTLS_MD_SHA1:MBEDTLS_X509_KU_DIGITAL_SIGNATURE | MBEDTLS_X509_KU_NON_REPUDIATION | MBEDTLS_X509_KU_KEY_ENCIPHERMENT:1:MBEDTLS_X509_NS_CERT_TYPE_SSL_SERVER:1
Improve x509xrite_csr testing: extensions, ECDSA
2014-03-28 12:46:44 +01:00
Certificate Request check Server5 ECDSA, key_usage
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_ECDSA_C:MBEDTLS_ECDSA_DETERMINISTIC:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Add tests for (named) bitstring to suite_asn1write
2018-09-26 11:51:16 +02:00
x509_csr_check:"data_files/server5.key":"data_files/server5.req.ku.sha1":MBEDTLS_MD_SHA1:MBEDTLS_X509_KU_DIGITAL_SIGNATURE | MBEDTLS_X509_KU_NON_REPUDIATION:1:0:0
First certificate writing test. Full server1.crt reconstruction
2013-09-08 15:58:15 +02:00
Add CSR write testing using opaque keys Parse and verify CSR programatically instead of using predetermined data, to not tamper with randomness in tests.
2018-11-19 16:12:37 +01:00
Certificate Request check opaque Server5 ECDSA, key_usage
Cosmetic changes Adjust whitespaces, reduce test dependencies and reduce buffer size passed by 1.
2018-11-20 00:04:01 +01:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Add CSR write testing using opaque keys Parse and verify CSR programatically instead of using predetermined data, to not tamper with randomness in tests.
2018-11-19 16:12:37 +01:00
x509_csr_check_opaque:"data_files/server5.key":MBEDTLS_MD_SHA256:MBEDTLS_X509_KU_DIGITAL_SIGNATURE | MBEDTLS_X509_KU_NON_REPUDIATION:0
First certificate writing test. Full server1.crt reconstruction
2013-09-08 15:58:15 +02:00
Certificate write check Server1 SHA1
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_DES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD5_C
Mark basic constraints critical as appropriate. Per RFC 5280 4.2.1.9 if the 'cA' field is set to true, the extension must be marked critical. Signed-off-by: Darren Krahn <dkrahn@google.com>
2020-09-22 02:40:50 +02:00
x509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"1":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:0:0:1:-1:"data_files/server1.crt":0:0
Improve x509xrite_csr testing: extensions, version
2014-03-28 14:03:22 +01:00
Certificate write check Server1 SHA1, key_usage
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_DES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD5_C
Mark basic constraints critical as appropriate. Per RFC 5280 4.2.1.9 if the 'cA' field is set to true, the extension must be marked critical. Signed-off-by: Darren Krahn <dkrahn@google.com>
2020-09-22 02:40:50 +02:00
x509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"1":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:MBEDTLS_X509_KU_DIGITAL_SIGNATURE | MBEDTLS_X509_KU_NON_REPUDIATION | MBEDTLS_X509_KU_KEY_ENCIPHERMENT:1:0:0:1:-1:"data_files/server1.key_usage.crt":0:0
Improve x509xrite_csr testing: extensions, version
2014-03-28 14:03:22 +01:00
Certificate write check Server1 SHA1, ns_cert_type
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_DES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD5_C
Mark basic constraints critical as appropriate. Per RFC 5280 4.2.1.9 if the 'cA' field is set to true, the extension must be marked critical. Signed-off-by: Darren Krahn <dkrahn@google.com>
2020-09-22 02:40:50 +02:00
x509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"1":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:MBEDTLS_X509_NS_CERT_TYPE_SSL_SERVER:1:1:-1:"data_files/server1.cert_type.crt":0:0
Improve x509xrite_csr testing: extensions, version
2014-03-28 14:03:22 +01:00
Certificate write check Server1 SHA1, version 1
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_DES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD5_C
Mark basic constraints critical as appropriate. Per RFC 5280 4.2.1.9 if the 'cA' field is set to true, the extension must be marked critical. Signed-off-by: Darren Krahn <dkrahn@google.com>
2020-09-22 02:40:50 +02:00
x509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"1":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:0:0:1:MBEDTLS_X509_CRT_VERSION_1:"data_files/server1.v1.crt":0:0
Certificate write check Server1 SHA1, CA
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_DES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD5_C
x509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"1":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:0:0:1:-1:"data_files/server1.ca.crt":0:1
Extend tests/data_files/Makefile to include CRT's for CRT write test
2017-09-14 08:51:28 +02:00
Certificate write check Server1 SHA1, RSA_ALT
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_DES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD5_C
Mark basic constraints critical as appropriate. Per RFC 5280 4.2.1.9 if the 'cA' field is set to true, the extension must be marked critical. Signed-off-by: Darren Krahn <dkrahn@google.com>
2020-09-22 02:40:50 +02:00
x509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"1":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:0:0:0:-1:"data_files/server1.noauthid.crt":1:0
Extend tests/data_files/Makefile to include CRT's for CRT write test
2017-09-14 08:51:28 +02:00
Certificate write check Server1 SHA1, RSA_ALT, key_usage
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_DES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD5_C
Mark basic constraints critical as appropriate. Per RFC 5280 4.2.1.9 if the 'cA' field is set to true, the extension must be marked critical. Signed-off-by: Darren Krahn <dkrahn@google.com>
2020-09-22 02:40:50 +02:00
x509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"1":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:MBEDTLS_X509_KU_DIGITAL_SIGNATURE | MBEDTLS_X509_KU_NON_REPUDIATION | MBEDTLS_X509_KU_KEY_ENCIPHERMENT:1:0:0:0:-1:"data_files/server1.key_usage_noauthid.crt":1:0
Extend tests/data_files/Makefile to include CRT's for CRT write test
2017-09-14 08:51:28 +02:00
Certificate write check Server1 SHA1, RSA_ALT, ns_cert_type
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_DES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD5_C
Mark basic constraints critical as appropriate. Per RFC 5280 4.2.1.9 if the 'cA' field is set to true, the extension must be marked critical. Signed-off-by: Darren Krahn <dkrahn@google.com>
2020-09-22 02:40:50 +02:00
x509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"1":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:MBEDTLS_X509_NS_CERT_TYPE_SSL_SERVER:1:0:-1:"data_files/server1.cert_type_noauthid.crt":1:0
Extend tests/data_files/Makefile to include CRT's for CRT write test
2017-09-14 08:51:28 +02:00
Certificate write check Server1 SHA1, RSA_ALT, version 1
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_DES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD5_C
Mark basic constraints critical as appropriate. Per RFC 5280 4.2.1.9 if the 'cA' field is set to true, the extension must be marked critical. Signed-off-by: Darren Krahn <dkrahn@google.com>
2020-09-22 02:40:50 +02:00
x509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"1":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:0:0:0:MBEDTLS_X509_CRT_VERSION_1:"data_files/server1.v1.crt":1:0
Certificate write check Server1 SHA1, RSA_ALT, CA
depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_DES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD5_C
x509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"1":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:0:0:0:-1:"data_files/server1.ca_noauthid.crt":1:1
Update certificates to expire in 2029 Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
2019-02-12 14:03:42 +01:00
Support escaping of commas in x509_string_to_names()
2014-08-08 12:22:30 +02:00
X509 String to Names #1
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_string_to_names:"C=NL,O=Offspark\, Inc., OU=PolarSSL":"C=NL, O=Offspark, Inc., OU=PolarSSL":0
Support escaping of commas in x509_string_to_names()
2014-08-08 12:22:30 +02:00
X509 String to Names #2
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_string_to_names:"C=NL, O=Offspark, Inc., OU=PolarSSL":"":MBEDTLS_ERR_X509_UNKNOWN_OID
Support escaping of commas in x509_string_to_names()
2014-08-08 12:22:30 +02:00
X509 String to Names #3 (Name precisely 255 bytes)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_string_to_names:"C=NL, O=123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345,OU=PolarSSL":"C=NL, O=123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345, OU=PolarSSL":0
Support escaping of commas in x509_string_to_names()
2014-08-08 12:22:30 +02:00
X509 String to Names #4 (Name larger than 255 bytes)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_string_to_names:"C=NL, O=1234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456, OU=PolarSSL":"":MBEDTLS_ERR_X509_INVALID_NAME
Support escaping of commas in x509_string_to_names()
2014-08-08 12:22:30 +02:00
X509 String to Names #5 (Escape non-allowed characters)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_string_to_names:"C=NL, O=Offspark\a Inc., OU=PolarSSL":"":MBEDTLS_ERR_X509_INVALID_NAME
Support escaping of commas in x509_string_to_names()
2014-08-08 12:22:30 +02:00
X509 String to Names #6 (Escape at end)
The Great Renaming A simple execution of tmp/invoke-rename.pl
2015-04-08 12:49:31 +02:00
mbedtls_x509_string_to_names:"C=NL, O=Offspark\":"":MBEDTLS_ERR_X509_INVALID_NAME
Reference in a new issue Copy permalink