From 55188797bc05d7117cef4e1ada5ab4f9ce2478f5 Mon Sep 17 00:00:00 2001 From: Joni Hahkala Date: Mon, 30 Jan 2012 12:35:59 +0000 Subject: [PATCH] default to adding the keyUsage extension to all certificates as required by rfc 5280. --- config/req_conf.cnf | 14 ++- test/bad-ca/bad.cert | 28 +++--- test/bad-ca/bad.p12 | Bin 1789 -> 1789 bytes test/bad-ca/bad.priv | 31 +++--- test/bad-ca/req_conf.cnf | 14 ++- test/big-ca/big.cert | 102 +++++++++---------- test/big-ca/big.p12 | Bin 7629 -> 7637 bytes test/big-ca/big.priv | 199 +++++++++++++++++++------------------ test/big-ca/req_conf.cnf | 14 ++- test/expired-ca/expired.cert | 26 ++--- test/expired-ca/expired.p12 | Bin 1797 -> 1797 bytes test/expired-ca/expired.priv | 31 +++--- test/expired-ca/req_conf.cnf | 14 ++- test/fake-ca/fake.cert | 28 +++--- test/fake-ca/fake.p12 | Bin 1789 -> 1789 bytes test/fake-ca/fake.priv | 31 +++--- test/fake-ca/req_conf.cnf | 14 ++- test/nokeyusage-ca/nokeyusage.cert | 26 ++--- test/nokeyusage-ca/nokeyusage.p12 | Bin 1813 -> 1813 bytes test/nokeyusage-ca/nokeyusage.priv | 31 +++--- test/nokeyusage-ca/req_conf.cnf | 14 ++- test/root-ca/req_conf.cnf | 14 ++- test/root-ca/root.cert | 28 +++--- test/root-ca/root.p12 | Bin 1789 -> 1789 bytes test/root-ca/root.priv | 31 +++--- test/slash-ca/req_conf.cnf | 14 ++- test/slash-ca/slash.cert | 22 ++-- test/slash-ca/slash.p12 | Bin 1885 -> 1885 bytes test/slash-ca/slash.priv | 31 +++--- test/subca-ca/index.txt | 2 +- test/subca-ca/req_conf.cnf | 14 ++- test/subca-ca/subca.cert | 72 +++++++------- test/subca-ca/subca.p12 | Bin 1789 -> 1789 bytes test/subca-ca/subca.priv | 31 +++--- test/subca-ca/subca.req | 14 +-- test/subsubca-ca/index.txt | 2 +- test/subsubca-ca/req_conf.cnf | 14 ++- test/subsubca-ca/subsubca.cert | 68 ++++++------- test/subsubca-ca/subsubca.p12 | Bin 1781 -> 1781 bytes test/subsubca-ca/subsubca.priv | 31 +++--- test/subsubca-ca/subsubca.req | 14 +-- test/trusted-ca/req_conf.cnf | 14 ++- test/trusted-ca/trusted.cert | 26 ++--- test/trusted-ca/trusted.p12 | Bin 1797 -> 1797 bytes test/trusted-ca/trusted.priv | 31 +++--- 45 files changed, 616 insertions(+), 474 deletions(-) diff --git a/config/req_conf.cnf b/config/req_conf.cnf index 21270d8..99cd9fe 100644 --- a/config/req_conf.cnf +++ b/config/req_conf.cnf @@ -59,6 +59,8 @@ basicConstraints = CA:TRUE [ ca_server ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" @@ -66,35 +68,45 @@ nsComment = "OpenSSL Generated Server Certificate" # nsCertType = objsign [ ca_altname ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" subjectAltName = DNS:*.hoo.org,DNS:joo.haa.org,IP:123.124.220.1,DNS:g*a.e*.com [ ca_altname2 ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" subjectAltName = $ENV::DNS_HOSTNAME [ ca_altname3 ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" subjectAltName = email:john.doe@foo.bar [ ca_client ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # For normal client use this is typical nsCertType = client, email nsComment = "OpenSSL Generated Client Certificate" [ ca_clientserver ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # For normal client use this is typical nsCertType = server, client, email nsComment = "OpenSSL Generated Client Server Certificate" [ ca_fclient ] -# This is typical in keyUsage for a client certificate. +# Test cert without flags. basicConstraints = CA:false keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment nsComment = "OpenSSL Generated Client Certificate with key usage" diff --git a/test/bad-ca/bad.cert b/test/bad-ca/bad.cert index 51504c4..a906e4f 100644 --- a/test/bad-ca/bad.cert +++ b/test/bad-ca/bad.cert @@ -1,19 +1,19 @@ -----BEGIN CERTIFICATE----- -MIIC/zCCAmigAwIBAgIJAPyX1GUEW7U4MA0GCSqGSIb3DQEBBQUAMFkxCzAJBgNV +MIIC/zCCAmigAwIBAgIJAIr7MlTxfRzEMA0GCSqGSIb3DQEBBQUAMFkxCzAJBgNV BAYTAlVHMQ8wDQYDVQQHEwZUcm9waWMxDzANBgNVBAoTBlV0b3BpYTETMBEGA1UE -CxMKUmVsYXhhdGlvbjETMBEGA1UEAxMKdGhlIGJhZCBDQTAeFw0xMDEyMTYxNzIz -MDlaFw0zODA1MDMxNzIzMDlaMFkxCzAJBgNVBAYTAlVHMQ8wDQYDVQQHEwZUcm9w +CxMKUmVsYXhhdGlvbjETMBEGA1UEAxMKdGhlIGJhZCBDQTAeFw0xMjAxMzAxMjE4 +NDlaFw0yNTEwMDgxMjE4NDlaMFkxCzAJBgNVBAYTAlVHMQ8wDQYDVQQHEwZUcm9w aWMxDzANBgNVBAoTBlV0b3BpYTETMBEGA1UECxMKUmVsYXhhdGlvbjETMBEGA1UE -AxMKdGhlIGJhZCBDQTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAyFjAIRIE -hy7WExZv2wzxQhCjS83hm7MFHhTsL5n+mkWWkpVQaLmGWXrnyn3IUbD2lu5KysL6 -Y3lYqlYBy+z47C0cGLfhLN3K5b5FLSgG+lGGwVdjWIlh3OrLIF/JPvkiqvUyj4vM -cnHKFLrhCJwH9QfkJaoQPTu2MxWQFt8XEnMCAwEAAaOBzjCByzAMBgNVHRMEBTAD -AQH/MB0GA1UdDgQWBBQuDrF3Ok8SCnxrWpbzpcVrOGfXdjCBiwYDVR0jBIGDMIGA -gBQuDrF3Ok8SCnxrWpbzpcVrOGfXdqFdpFswWTELMAkGA1UEBhMCVUcxDzANBgNV +AxMKdGhlIGJhZCBDQTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEArzvmjayO +WK0rPrBaasFsHJ6ZaXvnHgQ2vm1vfTfw1E3I6P/3iqqzmhEABeLfPrgybZya6RO7 +SCDWMOVOHGX4xdWxUAUea7ehpmLduRcGedt6hJ+jsex7UfRoQRKeobVXEZQLR6Yr +R8IANYFsvLriWtfCjP2kdD5NN6/bfDsT+ecCAwEAAaOBzjCByzAMBgNVHRMEBTAD +AQH/MB0GA1UdDgQWBBSPD7RDRGeCxsPZt5e4Dwl3j8tnRjCBiwYDVR0jBIGDMIGA +gBSPD7RDRGeCxsPZt5e4Dwl3j8tnRqFdpFswWTELMAkGA1UEBhMCVUcxDzANBgNV BAcTBlRyb3BpYzEPMA0GA1UEChMGVXRvcGlhMRMwEQYDVQQLEwpSZWxheGF0aW9u -MRMwEQYDVQQDEwp0aGUgYmFkIENBggkA/JfUZQRbtTgwDgYDVR0PAQH/BAQDAgEG -MA0GCSqGSIb3DQEBBQUAA4GBAMT1HF5n25PgC9dybe2AQzGV9iFIU7KDITtNmGwJ -iOQ6eg+p5d037jxHNSF0EJjAAfCJDGUOn4bZhEDv8zDzVUuuY63yngZ5arVDZaZT -EUF00J6JI389GNqg1ZxpYgSu5gkiSEydr0g5NL6Gu0JsCp5ZVNP1k/thUGqavxMw -feKY +MRMwEQYDVQQDEwp0aGUgYmFkIENBggkAivsyVPF9HMQwDgYDVR0PAQH/BAQDAgEG +MA0GCSqGSIb3DQEBBQUAA4GBAKHxmA8kkBrCQUl3HvyD2Q6zIv+Cg5z1luB2Wz+a +s32yar0yoYR3cOTF5ZrpO5dhJbKZgGD49pcVFFOFjke4+kbwRXIow/r9pc82yHMD +NiVZ4bLbVBJ6H1ZjLrGGnqA8PviYWSN4qYxUVMHWZJpyxS8JOYIJIC1VVoSPlyH6 +v/o7 -----END CERTIFICATE----- diff --git a/test/bad-ca/bad.p12 b/test/bad-ca/bad.p12 index 9673666d39af0949a2916febe20f4b337c866469..724d3ddc9c259e421d0cf7d8bc1b7c4a966b2382 100644 GIT binary patch delta 1658 zcmV-=28H?k4gC#}U4Lz46wg^n^BMvI2mpYB17K2v0B|1rU&fS?LKA`>z7H@{bfVj* zg>=`7?*d2Rvq7#oV?A-kM#M4DiafsPx^5))zJ*15_)E~yTo|%` z3S1p^gfe14dV&4$QElkVtg7E?^ajsh51HUz0|1|@Y1V9*P*%EX!%Y*Q`$#=yLiDU4 zef3P|Fvkkdu4=Dc*`!%K#jaZDR-kW15skOr9=QwnRPgu8%h~lD>;dRCo(sn^2O#u` z(46eD!hh_`s0`cSHn9qYb^75mkqUI>c#WE@9Z2KdV1xKetq`3EShpy>547Te$*c3H z_CIixxd$!maIWj8yxlSOI1z?q(>3y!sHBkjF2V6YYiRZ!Gq{QB0d)e{|Sy(R>;zorFk4cAx_RR()uomM9tgsIy@B?T3BA+5@yC6%OW5FpC3L2jD%|DWa8 zl^rdJo79CZY3h=i!AG;KXp|5SgbyH%%20Q%HNR-&S+;DU`9C^aJ2Yr>sxa`>O*)^N z0e_W`dVaKZNfQSA@K3<_E+8O%3(s!{V~M z>bApnv1eu-fk~n)sQs+wFoFX41_>&LNR!qBJ%8bL89;{LZ7l)<2ml0v0)V&VhN+cx z+IA%?JD0(bPq=W5^1jS8YuBx6`BB;zFT3AUpW`#ubtw`A0V`9-Q7K=Gb_015Rk;@& zr*3tpDz>yZK;X;?8N6e=u^2XYZETd}*|xWHPAp$=)2n860={`}tK^U1sOcQ~*K!FX3og>hdxOOfparcyvE}wDv*Igh5Ys+DJhwWwZ zuZzgD524cL8rn3IK444HNPlLwt?~_jGk#CAe_|C~9JjlShWg4&4j?$-;$>w~qejxN(x5QB8WMhk*AosDO?|^_7XteN9cWn_ z>TI$O=junHa-y@_Y}hKEB_ulcFc!cO#A z)jK-T?s8LAN0{GmRAS&WBiJj<*=gmz`*)%@E!IEiA>>}-Y7OUxc&yE7`_tYcpX(G< zQVh8Bf1%i*0g9cD=!D6UOu=L^=6~w>%jtrDspt}lPF#}M*;~@-i$hXx?pY6aQ@e=1 z&2IW`G+?tc5-SmuU8pB`_lf2`Yw2hW8Bt2^BFG1Qf`xrm35+PL(oADfE5}uj+YZ zpTjUQFd;Ar1_dh)0|FWa00b1ZI`zl;wfy`7y^Y4hh2|Gij^#uI2uaozc#UA&?*ak{ E0C68JjsO4v delta 1658 zcmV-=28H?k4gC#}U4H_KWvI2-agG842mpYB17J1x(BC;D)%!9i&LR0Z5z)>DTI+k* z@!R{Ri-jO>$OOsNYGjx%btKI2%QM?ube!1l?9^~n0{Q4Bi**cR4=z71!st37IsDDp z1u2e#>a(+Xe`W`LC*9KU9dc>UFYBM=!tD!N=}7Z7%7q^IHGiaP`Uy5!3S)ddJvEO4lBGEugjHyw9LJ|@C-pkW^9^ujM zC}Fk$t@^%$KlYYscpi5oDg6)|xpn_D7?C{EO1`SJyhl+y@4K1EkNJH2*-C(JKEK#Re&fW_$z%Voe2{J?>bh6%Y!hi147Ox%kGoG1WM(gBdkv2Jm zS!tV8`+tGV{@1YbJ=WwnY4BJ;?oY^ANx{7b1w&ENG)8OrT)~&Mksnkrx1C*1maW;$ z#Lzqw#0l4~nQVsoT7SeNC_}hcXq4JdB^ zYcR=&eFF8h$Tc3)S!+*YX@Nh8vPG!b$>7JWXHO+X4^Nhp+77pHajEt)h$h?nRlyDrj}@5MvD{02 z#q0W@5|~B?HTMg*-44G=ik3$~-e4zaYpqU*6hz>h5}(O>kTt4rsd@r`$lQhq-J$GG7yzCtt2MAI>SI{+)6caXy%{hX!=LlFo39 z4!3f!j+QsMS>KE@w;w2!9{!ogl@3pE7-{V@aOs1M%V2)L9%Pn-o&5Dy?Qf$~oswf* zUu#i!l-@Dg+v-%#plphLFoFX41_>&LNR!qBJ%2a9UFxYIy@>(>2ml0v0)Pwbe}-iR z?Vs0yJ%%V$nDNGo_*Gy`i--Aw3CB!Wr0WV0E|Qykr4C9n#3nj@4pV)}a+{GBWLHrUq9b0uoZ2?yJ~btW zihp=^@FJQUoc1F6ph}dsKB*7#WVir%{h9ALRZUW#U?mOY|8eb+9N~`jeW3(g1RNx> zhxsD&K1`?q{(j;~u`Xd$0Es5nBY-H|w=J^yN50hVa(6uheM3(ps13G&+~KIE7B{So zX6HYj9fzC=*4KQEKk}baZQepH5(UUA27jqNTt0-;-&^(LjRS3`<5qFD3Gn-v`B{o# z>pNAu4tn0(TPH5hnx@7SBQ)BOm3~-H;9#qoL39YANwMXgf?YQq*(X9Az#VKCw4k;M zI26zP`y0947jl8Cy>pfN6h8y*oc{}H)fW6y2eE`PWA z4;!kEKxe)6G_?`Ymf+=air3iqk61bkdcb{(nkv;wf!)f9ZzADU1V3rNX)K@66;ZRy zWkNrx8m$>lW1wUvvg*(T2-f+ub4rDoqXGg5 E0MK9<;s5{u diff --git a/test/bad-ca/bad.priv b/test/bad-ca/bad.priv index 0faee27..f6350fc 100644 --- a/test/bad-ca/bad.priv +++ b/test/bad-ca/bad.priv @@ -1,15 +1,16 @@ ------BEGIN RSA PRIVATE KEY----- -MIICXAIBAAKBgQDIWMAhEgSHLtYTFm/bDPFCEKNLzeGbswUeFOwvmf6aRZaSlVBo -uYZZeufKfchRsPaW7krKwvpjeViqVgHL7PjsLRwYt+Es3crlvkUtKAb6UYbBV2NY -iWHc6ssgX8k++SKq9TKPi8xyccoUuuEInAf1B+QlqhA9O7YzFZAW3xcScwIDAQAB -AoGAKoBhaeKXoVH3Sh9VZWPufnRnH/qyJMSqjkIkBMkncPTYR4pzf3P0I2FmcNeU -OnhPJ5+vsCoC0j146NHMGcXQ3HFyOJkH0JdQVw4+DtV361mmQ82rLI8wPnACw4oN -CLG2NyZFBhisxsk8n2H7MdblAFcEwNUDkePF2L9pdbspXWkCQQDkF87ohjcbf35r -yI3oJqcu10GkD6HGblnGOMakrloBDbXDg8CqcNHOYhCDWxZnvwZdVTvnIUM8Ky6R -2vIpu7D3AkEA4NvjhP6t9pI23bnc/31R33c4Lzr/w3htImB1ckBjeRr/+a9RJDgL -ZfjYEbESxpTYkeaxKc0ZDhzgzmzGygiHZQJBAJkvXChRq0TudQsSICvfebw9mLoE -PZO0nNpBWzdSWOQIPyBVpdlR97XxqkFttThr1GxuR9LMRglsvtP6BVT91rUCQHYW -xOwpnE7sBuh3HfsHY6IKSHV1dLDBY/8zzTpNWnBVn60PR3vP+xx4jXDtH8EulnY5 -Qz2Cuu/QdreyJMwhookCQGnQXNNfYJdaJ7poQVgw/6h4LEazL/GUgrBPSKefxJe/ -ns+w5YzdpYOWdydBhB/9J+haE3e/Z8qK0E/z+GSrSNE= ------END RSA PRIVATE KEY----- +-----BEGIN PRIVATE KEY----- +MIICdgIBADANBgkqhkiG9w0BAQEFAASCAmAwggJcAgEAAoGBAK875o2sjlitKz6w +WmrBbByemWl75x4ENr5tb3038NRNyOj/94qqs5oRAAXi3z64Mm2cmukTu0gg1jDl +Thxl+MXVsVAFHmu3oaZi3bkXBnnbeoSfo7Hse1H0aEESnqG1VxGUC0emK0fCADWB +bLy64lrXwoz9pHQ+TTev23w7E/nnAgMBAAECgYB32peZxTFjU6YlbYeaRwuEE7JI +ZLeyXx12Z/F+ivmMrFtDinesf47yTLhgTkl1Y5USRa/qxVUuQ09dCCnB4LkirKRR +oxbesNaGFRjTZDO3k+78z1Or6yGRPBwqhpEK5HY+9iYEwkhePp/7nmT0v5S9Qf2B +sJixhPi+uH3qrVyeKQJBAOUKLrOZJTP9mhrkPe995Sc6hR0iNE+1htBHdNiWoe8J +1wsPtI74gotX9c5qWmp6X4hGdCmP0upIsfedQfy4/7sCQQDD3FmsWNaxTMEYwXVH +DW2RZFVkOQtCm9ZzcQpwcAkcAGrsSB2AykQC6Fw35FHrkAGICwlD3hDRA9VDNSVZ +zR3FAkADG11A0G4Bw4nonXn9mq6WFqQhngopnqPChYWfPoPZ0z9YhhED83kJ3NqX +vzeUxC4xkgsXWT0aMnw/iKGRhQzrAkAsWmTwM3oC0ofTzFN7kJ3kU91Ggeh74ABz +SgD8L1LQxYNxGG+d76/xHJ9thMXMW2MNZLpnZQ1X189eldVsfZelAkEAkxemU1XQ +2l5sh3VV/+Nc/kZ1Ma/7lphJqVWwvGt4iXgSfvfpY8XKNdvwIkU6L5WXKhmIXn0Q +cY5AfAkr3yDXVg== +-----END PRIVATE KEY----- diff --git a/test/bad-ca/req_conf.cnf b/test/bad-ca/req_conf.cnf index 772b36e..863f5dc 100644 --- a/test/bad-ca/req_conf.cnf +++ b/test/bad-ca/req_conf.cnf @@ -59,6 +59,8 @@ basicConstraints = CA:TRUE [ ca_server ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" @@ -66,35 +68,45 @@ nsComment = "OpenSSL Generated Server Certificate" # nsCertType = objsign [ ca_altname ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" subjectAltName = DNS:*.hoo.org,DNS:joo.haa.org,IP:123.124.220.1,DNS:g*a.e*.com [ ca_altname2 ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" subjectAltName = $ENV::DNS_HOSTNAME [ ca_altname3 ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" subjectAltName = email:john.doe@foo.bar [ ca_client ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # For normal client use this is typical nsCertType = client, email nsComment = "OpenSSL Generated Client Certificate" [ ca_clientserver ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # For normal client use this is typical nsCertType = server, client, email nsComment = "OpenSSL Generated Client Server Certificate" [ ca_fclient ] -# This is typical in keyUsage for a client certificate. +# Test cert without flags. basicConstraints = CA:false keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment nsComment = "OpenSSL Generated Client Certificate with key usage" diff --git a/test/big-ca/big.cert b/test/big-ca/big.cert index f57f5a9..7cee918 100644 --- a/test/big-ca/big.cert +++ b/test/big-ca/big.cert @@ -1,56 +1,56 @@ -----BEGIN CERTIFICATE----- -MIIKBDCCBeygAwIBAgIJAO61iS86gZAOMA0GCSqGSIb3DQEBBQUAMFkxCzAJBgNV +MIIKBDCCBeygAwIBAgIJAO2oAhKC5DbrMA0GCSqGSIb3DQEBBQUAMFkxCzAJBgNV BAYTAlVHMQ8wDQYDVQQHEwZUcm9waWMxDzANBgNVBAoTBlV0b3BpYTETMBEGA1UE -CxMKUmVsYXhhdGlvbjETMBEGA1UEAxMKdGhlIGJpZyBDQTAeFw0xMDEyMTYxNzIz -MTNaFw0zODA1MDMxNzIzMTNaMFkxCzAJBgNVBAYTAlVHMQ8wDQYDVQQHEwZUcm9w +CxMKUmVsYXhhdGlvbjETMBEGA1UEAxMKdGhlIGJpZyBDQTAeFw0xMjAxMzAxMjE4 +NThaFw0yNTEwMDgxMjE4NThaMFkxCzAJBgNVBAYTAlVHMQ8wDQYDVQQHEwZUcm9w aWMxDzANBgNVBAoTBlV0b3BpYTETMBEGA1UECxMKUmVsYXhhdGlvbjETMBEGA1UE -AxMKdGhlIGJpZyBDQTCCBCIwDQYJKoZIhvcNAQEBBQADggQPADCCBAoCggQBANL4 -TJ9SW2xUysd24EPw09DwTieiFxpUmEJBZy2K651XmuqZRFnIkGw7PsYyHaWbYOvT -E4eyJE0EHZRq76DEudwmeln9q63SVvYak2XYmnlLs6unxf/F580uyLoS8PX0Krey -Jex1RDEipVCM4/eUDn/rfDXE92rQ5lS3RTr/qqc2KvXMZowe8UB231ZNxSvuzx3+ -UcMjxFBeEIC6bh+32uY6RSDKO/pKqO0dSVwKU4UwNplzYLPM1gMaKXhxf1qcdKQa -8Th0eXpXqK0JBNR0OqoAeBWxLSlhZpXvKMiUXvgg2TLiKVozmFGT15eC2QsSq7ij -WD9kbc0d364lGs57upw1aVubzFeaCqDMd5sPyW0MAw93+uZXuRmAwevngVGZzGbI -ArpZhj7+KT8VzATNRkQiZ+/f0koFhY3eAPh1DxExJy0adFSQ7Sf5XBDZNeLVVVjT -WEu3mEZrr7Jo+AvTY9IGA2ETs+JL9QVbmOjyyhVeb6CF+g4VA1gDycH6/yDGENdj -iBvr10Af57Mzxl1wtaE6NM20nvrMPALcBw3Y3EIK9LFDq+EkN63CkczSjKQDsdjf -uGDLELk1l7P6dpqAUbHJaD2JYAARX2IjfLtV/wNZJRWwnLJ9iSb6smaz98vuw5OM -DK2/iUNJxPCe56YYQUqwKSnaUVG3bLRP0+idGb2sUyiytNC95gL76VGnlWeUt4Xo -gj6DPJ/QABcdZ7AhJ/hW8s8yXmjkJyP6pNBr25BY0+LGjP5kuE6YrRQFYcFMrnRS -3FAhd4SkoK3qM0xuTwbzvCbzmcFZDLexG/u6hjm76l0vw4+K0F3bk/ttKZFxvSKm -SDZzQyPrD0a69hKuVD7jt/fD2vU5SkItGpmnnVbuZYssEfE6o450QSbMU4Rcbvw3 -okw5fQYBI7oLdpdLQgMZEtPKGz/76Wqw8eaeAT3rhHZF+wS6/w8NUZtUmem/ESLf -aKDqAmZ4/i8OeCTfn5fbtqyfrni3qR29qlCDlNNcrmM89Vz+p1mSg8hdeAS115Sf -bsbGYtpygeSG0WEAQvG095Gpq4xFmQrbdZ62wTihbQh2rOl8hd2pAO622P8GVj1T -OcK1i4ZtA+TwP789dhr6MgBPn87MlwxDsgNNpcqJyo+CNPJwJ1HgppxJORz/snVC -4dpDcYqsxyOAiKcR2b9jsld9GjxM02cYioxk8L263zbGZ/js7JZvx9Ovu96szdtt -40+bbfQmzbja/fP+rPol/DxQnOhT1/+ub75L4VUx01AWwyFhsK0ozknZ5QgtZxsk -fCuuONW93WQK3uJZdh1MH4q2JOCdl4bvNjJyYFKyma4ZRPCPoI+3VOFqhXV1z7Re -zjsvIuU23dHcepMsinkCAwEAAaOBzjCByzAMBgNVHRMEBTADAQH/MB0GA1UdDgQW -BBSxUNHUrHgUBI5ufRE3C4Uzx2611jCBiwYDVR0jBIGDMIGAgBSxUNHUrHgUBI5u -fRE3C4Uzx2611qFdpFswWTELMAkGA1UEBhMCVUcxDzANBgNVBAcTBlRyb3BpYzEP +AxMKdGhlIGJpZyBDQTCCBCIwDQYJKoZIhvcNAQEBBQADggQPADCCBAoCggQBAOdf +RlWgLzfUL9rRWiOc144dYxxnNo3eVZuBjk14eaRPbayHaOobubHxyVo9TtGo43s9 +PyDvW9dmiv2LaasV89rKs7XmDPn5ITWfkdzuILgRmhAv8eMdtWNRpI5tfDmcd4om +u2Ua1IMrZ9YZf+rLulroa8bOXnR70LxS7wiARx0PUo0hHXPOkGTpL3K/bQI1Cm+o +VnPlE6XyNkmu+EW7d9cuIM66fWI+xwqUkCuqHEr3FpEL/dkkhXjkNDyf898Ev3q/ +6mxg93GnXuy4OeFoLyJDHez+l2mdmqbmWwQHIWCD0qwy/clfPnEsIuWOjH3CosWz +xahhi/zjAhysZzTL/CGbpQn1vFtLOml18lpqsoDoUSaq+W4SEmHV4TkfCnnDu55k +XBYPV2IPeO/UTJapAVjv1jkeUQwuVrmd0EaMwB9jSzPVjYYo2j4YBV8Rm501DrV8 +tPwienD3o0FWfXLVdByr262NXOXbHpNUDbK4gWd9eqRhzXMBSw/4jRKnVpb4o32E +wsAar/LJOVoF9osK2PGaG5tvXH0PP2GUJo59uNmAQ/1Ta2TOTg151+YprakBxOkf +PJEUEqbvWxs0bSVuNcLag/z5ZqzB3tw5BnlA/72XDR/Be74zflkhnTUfAaoO6P3/ +XsscojGgygQZcU6Vc7wCF+kUtowdxD8AvgobQZbsDC1EpZn7y/6l545kAC/D7VJw +8SIWUp1QUtIyl1OEFhecGPsn1NsFWLKOY6PGWsV6gFvGkp4LuXMWKA2VB5s9udAM +CsXq8zCTcWJHbhG8BcxOGudcMtxrc8m9cMVwlSMxP1zVJbf/soDfTqCg643JMNcu +0+7EQlJO+Dsj2mn54vy3WUGugH0iwTlKft3ie+0WbLnryG35b5mvvYL0TP3LoF9X +GFURPwQpKJtQfWGRy9AaBM/pQTPVnZLv4k3cencdJvZUXzUUQv/ma7t1h0wmR/09 +P0LUc5xEhCM1kO7w81DPs03C/h+L7HqtBdUiivCqmjW4IaXCPGG+7Rsj80h2bF71 +38phIz+Lws27cr262uhZENpQ6jo4xvmjat3u0x8P8VXu6L4tkzPpLCKyAHNI1lpZ +QypMWiPaHlCR6BWt92F8dMHhJUwKpxtEGW7XI1Q6kS2q4JT7q1F9zWNg1s+MfwML +lwjZpyfjYDm7Ka+zK8+MPHNILu6UiOOMNkJ41C/H1NRP+h53TH+jrKLj+ZwAgPi2 +0259WaIqcWk+wXnlNC1bEjx8Q3w9r49wJ4/o6yrkTB79XUNWgfAxxUg/Ml8l9nvO +zixO1Osry28QXlbIv47D2kh+PboGpDF2Fty6Orj4dWPXqLVP27zwlyY5o/jyM4J2 +t1/WjIISV4Sh4Gn3+TUCAwEAAaOBzjCByzAMBgNVHRMEBTADAQH/MB0GA1UdDgQW +BBSDDMMlC6a3yAP8hXZ1QxvPlVh0UTCBiwYDVR0jBIGDMIGAgBSDDMMlC6a3yAP8 +hXZ1QxvPlVh0UaFdpFswWTELMAkGA1UEBhMCVUcxDzANBgNVBAcTBlRyb3BpYzEP MA0GA1UEChMGVXRvcGlhMRMwEQYDVQQLEwpSZWxheGF0aW9uMRMwEQYDVQQDEwp0 -aGUgYmlnIENBggkA7rWJLzqBkA4wDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEB -BQUAA4IEAQBSE5/nS0jdN4v0rc9V0msXE5rBI3D9zg6ZKvUQW8nYky4pQkY2Mm/v -h60Mu3BpeCUEPTsreJZqiYGJpAeblsjlHzIZXeGpD+VW1/nok3qwrLz/CPYMNzy7 -Qn60Mpd47mvNM5yTygZF/XNO3qT9OTnqa/jmKO6bXJozll8Krb66f/7jSnLRUaVc -kqyuPSNRpINOeOfrtzvzGmyda85S3eipyuHAwANYCbr/RLHIRM1FInJuQJ1utd9S -STzNCfZVO0xMP4jZS3Brno5aQkAPIfysCPvWGWSGAgH92KdL9LqoIHaTGZijtY6A -Fkm4P1MdtGg1X5IaMizFqeDAy/ZAXsrivnnQtucqtNcoP/+kyjrEhgXgHL7xFvQ/ -FVmQ1fZJjp0Wu51bWJFuDXye5p3+x6y9IZk/KY/25m+RQL3Ai95J88maRYz+F1uw -cY1hv1LYKcyOw3K1eCPVpLhBtA7LfZVhZNYuQzEnjrGT2o+y8Y3/9a/JiNUJ57BH -FmlQFsoaGVS08AGuzgLwAX7m1sbltqSLG12dNthso807boKdlqYSPeUctxHBPELQ -Z6KShu3SsanaQaqRMOlhzCktAhMqQ9onM6aAjIE+lXZHOE/vEkIPJ6/uW1+fe6nY -o2jx83RfNTCBMH2TKfu9qnOpCjIW3QAryK6eTacxQsoiFZudQajYKSdXYHejfp1M -WD9eG33z7WVBuf+o7EE6/lhR3vY5E4auB6wqyM3PZJQsAhVqjiaujQee0yiMGja8 -5HVsmv0Pxqi1YnByP6vf2x4KPXzjGrzYqD9VuJuEYl7R9XsRsOOCRKVO+C18iKfe -mcMOt6lYkwEaDiSw9CBfq7I10Ro1Nj/OIoowPV10kyDS1z1gUk/bddl/z4aNkC9K -YeWb9gIf/L3IT6tMklqo46K1pCJAChtreTAHR3Xa6xEC5nkotBQcmlKDHkYzKYeM -u0FW50rohUJ7kz6Djw9IgxEpz6dPJI+C0Hx2I2jbIporD6aK0RiD15/UYu2q8vVp -fJsICJQrLfIzWG++iLlvwApcszWve3CrnWvw6hxzKJ07FX8HMxx3KGPEi3lkUnaR -0lXLLncS4cQSd1k8jRw6ZS68gAMao3wudgijtQlDPSopb4/LUCVCJG38KZ8t+KTZ -fKYcm1TvJFBgK2TIxZIy2g6Y+Es+MpIt2Sb2iV2bf0S0NrJKiNY6Kbl4VktkagTU -LcfHBwp61dJsJwrfoeCFoi50JBMZO2d7Urv70A6RbvhUI43cEj4f4L2ENm/OWMPE -RHAeGUVAQZlmhxqELEAaZK9VGbnvPa9r3m8whn+OkOabWVSZQzMrCizbs5T4EaH1 -m2YchzTLlINAbvI9awVaTdxmWPtWniyb +aGUgYmlnIENBggkA7agCEoLkNuswDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEB +BQUAA4IEAQBIo4+d2oLPML0pb3reUD1I820lLty5Pq2mJ5u84N8XdLD/tCWL6gPC +2vyHycha1mtDjMN8wKKP/VXSythGkoxLRj/58AaAVa3gcFmrcYFXcTQ/YeV8YxqP +pT/KWF1Q6GOnf82DulRdHBtrTvFS05oSPdGMTnMzRvhQjHhYu8YL2fdtkJ0scIcA +s2noEd4g0M7nNodqX6A3FRw/MehX6+d7WhI8bqL1uA6cVOxuvEZvjnDeAKgq07gJ +CRlRw3asds8e0HmIbv4WZ8awDSsw2sDOB5+39s6GmgumEa/UEfpAOZtHOXgNO7RA +td4U9kuKixIKPQjAhL5o2cK1iJQuCzGgcpj4vGt+tvNO3M/stHoEL/mVN5yceXLj +E//aTcWzOhiL5D6HPlch/4xm64PePYhcQhIcnr4/fhXP1CizRXJL9WBxw9BXbJ4f +C9zhgUVYL9cMfrVtJkUIY0lk4ZyurWXVrKvR8pRqXTSc0SXiX11Z7wiUhO4CSYH4 +89ydbzulEaVVkev9DglkK3xpklHstFwI8xn9hvWU3xz/ONdEdP34+SRxs2uXSCz6 +KMCk/YgqwYZ96wwdJC3cabC/rl5srL+aCGRNk4VkYppEXsYaqQ/wK4ucZkejon2L +K7bEsAQqV8q5sbin33mb3dhhzJPjwpEUWp8Yst102f7ln/F/IbPU4emXpKN3Z5tf +1+wZfZRZtBr2mExiYEhtyzbDXCUkdyS+Wq8gCcDx7isCIbfRnupNutwtCrOA2x8Y +h+iYe4d+tTq2504RnAMCtmVOCfblf+OdMgwN0vLVlLgUMnAaleYqIMjA6TxaaPjA +xny+Uhg4UUTt3Ll2zRiukzcY1ZRoaj7SHnFZwmF+hOmVY4ft09waH0XJ6m1K3W/O +YMVXjKrZxAoG9fxTuWfXHIwZCDh3DTOI6I/90McnVF8tsnmzKQmVxhljZUueoN93 +fWoQPV2Pt9TTN8Od5XsgevlD1EnYkQCFCNlzd1mRxgsBEtmDNOLDP5dYPiaOAW+x +OL0VGWZyH2R4/6CZK73z5KF1INZA0GgTnQeFJS25yy1lJZsGQuRzvG16KZDT11V9 +QdkXCLxx36GeqqnDfOdHCZBg/Ks+FqP6nvjpFNbEWZdSLDRBlcZoAF7nTLmd3vkn +VLw6OdGIubr8T3lEfHJP49Y7GKW5OXWNsislnn7f539aCxyR9I58QvSbrFGz9igC +m7SaCRxmO4NhMkQBNjmQEtEyCPtJ4zaTOEp1yoYClrtVwgQyiK0HYwXrewA0v1Y4 +LuTiB1sNJiBLJw09ViCEd0KvUksHEolDHsGB6bwXV33S7oi5AndNb2VozkjcRoXI +FQaKRQyXpKfzrZp9nDqMixdaZOs7w26E -----END CERTIFICATE----- diff --git a/test/big-ca/big.p12 b/test/big-ca/big.p12 index e8926368e6894a09842bca29e6a830a788b1317d..1fa3bc10ff928091e629e48e20bb0ac5d59111d8 100644 GIT binary patch literal 7637 zcmY+oRZtuZux^XH5AN<7U~q@v4g&=D0fG!paCf)h?(R--cY?bH3m#m~zpKu@``(AH zu3BGpzx2zh<_sd6hk=IW3?fTMKxPh;3wuO|Mug4}B8z|vA`AHs2XF?V)ctRSkRODS z{~yYRfrk38rT%XM%}I)Y@_#p=K_hTtz#$o3m{tsU-WS5aAVCELp@127B_=B*vJ#2; zlwqli?^4ay#I%9KAFCiJppc)Pe}S$m^qU<_(@WkIx!X5z4B`Q|y?T?F*|*HOGX2ZX zsIlmbMQAQ(`JI(Fw|IiM3>kmkW2JeFnX(8O_D23aOwOg_8%8DX6tQtAyi`hA zZ*-J5PL9y6bXYa1(Y~CB!y-YErsB51pX{^GWW4!S#Q!jw_*?qY>;PlkR!BPb&BM$}(onrVFLNsN{iLtq(syYdqU6VBIZ>o!y}Ve41j_5_0FSXqUck)ElPET*svG5jbDJ+s-;bwTkyfiS}^9+-E8_d0BL|=lHeg+M=HPd`rryx4_eX z>1qH&Sw;bn1@ZVpk3K_6oS=a1^bcI=QbA&9kq=90HO*W;mnQqdYp~qKFCo4|P30lQ zS5`Z{hPG-ufQ@~R{(s9IFjXl?!{OldfUJWJ7C2U;H}{HM|yUP z4Ti9%uLk^Geh0H`G2aR2=&me?`ID^=9k>}5l? zvxd~3csU|?6L~L%M97eCVbQ_hisO}r;si~Kv&br0rY$$h*zKc(av#%2!}p=Fi(?A0 z5U2fAGJs)ofr{wqRd-cv^m5h=<6a+4dg13ob1$9jL;iGl!m!Y)CI;F+cAXcF1Bwp2 zIQGZmSuMKI=j58vt zG}C3)-zodX0yF`?6`tQ^hB`xNtVQY4m%yJ6YbK(Qtx~^DtT;;TnriCLaddo#Zjkk^ z$Vp}KH$jdI%`Ha(m+a6$vV0?WIO^)#op8%!mm75h1jUg%5+|$OVYVJNrx7~9?;8;Z zR(%1BD=k9uTbb-e0A#Z?^YR4#;Q497KhO7ilqHfd$Ec!5R)(0W2eUGl@$=qC*45OgD6s0&>V=hYCHXVJRltM7Y$+rL zw@eOtvSA??va)aWuUiX8Uv=NmwPU#xfzzbZ^2|GXw`HE!WdtK`Ifs%(ZAzYrj0a2=C2kkFNQrd)j*s@ zBpx0KNV%szEd^fOpvS6azB>CWh1!>dl^u`@h3j%x(*%#Dsy>zPmnvl=;})jga2+~B zipQP)QhuPEe;5&!2!$*M&~!5#RmjjwlYO^jHhVUSyr8&+H81VV|Br1xDmTs+>zXYJdsnqyB-CQfMS z+>lF6I8v>R>M4P_wi7n3?_QUQRH*xMufVOlz6+~#EhL^pu&sgn08Q;ZRhQIEsT4^F zSvZr{ufzV@K+b6@u*Q~KHvJzg%zGqTc>b~a_AdjCH>q;;*?|4o*DlP-A%$ZaB5|hX zVX1`L1>b%DXc*TZpGf~KBLh-e2|_`<51#qNv9 z2h5}nF*Cy_q79eRfdb$2IKJA~JHKDFurQ>(NIiLDp@{zQWunyi|2E??NTmlS+W{jK z`=LiHNP&uyl`l~6frJglRi``&Mmp=5w`iecm`c|$wy$V4nz_Jw-{YQsNtkoziE^XH zn6^8falN*fu%qOH@;G7jzi8Oj#yh=?10Oa!KdrglxyF|w_p!68O30dYMbgrEy((Mg zp!;Z`XnXuC2gh~5Ho(O_?Q?}rmeDH$Ts68%EY+euHx=?UH~kSlERX^hO15dC3M{9o zHxISA+v&+{y-dHHR`KuHU@V)Bc2!7%REzx?xvu#rV)rqN2rd7b0g`6{Zbot5sr2v5 z?cGW&)*<^=qCx!g4M2rIWcj-Pf#q!VP9k9B(>mI`yHmNV#uC?sKV^(ogs!}i43CEt zA4Q;YhASKo!?56zO7$kaw)c1veV3PF^!fQ_JJC5$ubwYhNZu%Rwvz)c+Ojkahv9}Q zy0oH#F6?T3zcCN1>>oOM0%RtG`$t7fnK7g}&_ZdJ)tiAH+9*m$F_{dplCQ#1nu>Nm z+2&6$9i9uY8Zqk+A5(pH@|^|J9mwD_F-iT)!3Ao+)k+BVdJngy%g97mVPoV<-QVK5 zu6rQ{nN~HLPW&yi4GE`-{W{avf-MheUwxS%5s%VdoA3F(+Dt{i)u4V{DFS&)Vx_&$ zJ{7r*|B~7Pw}We(0hsCtEiXANsu(2Jj`vr0B8vsjkLe;;`aexT63DTgU!PatsJ7(= z<+ONO zoIyC_{~s~U55nn$3&Lsr4>$f-wFs#HkEWtP!~7Sz{|BA_fA$LdKlb`sii(fEzi0P9 z_WIwrT5UxcdTM&sQ7}Pb=?f6Y{nx3A9-6@<7R$5?(*9PhP##C|WxaoqovET0lhlys zl>YO#C}`5Q^rK5~Z`(Cr1zkY7-L4ah8b&G{%{d2)<37Zs%HI4effaJZa7L& zXJe)m$BoA~u^OK1A0Ds-3f7#*)cZ>Mcl4^bpDNUUggswym)#_$I>^%9h}*yi#Z1Qv zhr!bP9Do(|^k@+J1MKpr^xal9Zgb4UM6tupbV!SINMP+wKb~3|iYklJ2UfJ*j+(y1 zFGL+}%1O|w*zv);P9w_tu8$pzY9|=G-5P5$2>Lm;D4uFyyy;bCp3M{Aqo-JcVvr~B zEB|30|IPCs#=Voblo{lwPC}9FPCOBVfP8|2t}kERd+wjK`+o-ex})=2G^8HF*oqQ; zFsTblB>V&yF477N2}-G%5~|38(BVqe&!3|P1FPw8+p)KjiD0-ma~1x&ldyx2?eNSSxUvpM54|F)1|){nQu5eH%> z<0~&q`Xt~ayv}=DmFt)uE3KPt=QEw&TGo(N9cMzpcD@@Hqwd{Gs<~WDB(Sn@AO_E8 z?9UPl)wB?ies4-)IbSfyOImmFbtn=aCL4wNjskw{^w0K}tfT6V?B&CDJKrn~b3(*b zM2;Qfi^RDSY#t(D(b-l-@w7)>|6QD_K3QVAo>J4ZWZyi3wMCYgdo^~+ff~Qw>T)Nr5lNZC?QjA&`Pi&ju zXk0o@P=Pcgit)2o@x=1?)d@d_6Jr(NIYv5FcGF^v#Rj9YRTQ=o?CFQgz-Vq+s<*1d zrZcC*lR5w!@P?Z&?vC>+dQ|eb09nqx|=wwhd+k&ZlfX6U9a_%0Uo0y;IlfaW!utN?AEDE&I&1h#d}IPY z^)kaMwAf@I#-eXLo)G{~m-ZqKfaK@Q;p(;`iekmihWNvCct5J%;Lll7oP`aM1}HnI z_jrX2z$k2vr{c^2UeeTB7Ja6ObHn2nuF%)Q#Nu+N+iM1^wA)sd!fTA?X5gu^O&Waltq01+F5Qx!!#J}9%e%RToBb{@hBb(Jeep; zcKMN*s})gT6*jAE__tRzPXQkaek@O)4^%`IU9^VfjvV%?6#_ZlJ?mU9>&BkUlZl(~ zUBA<}%)-y*6iAA+gF8f5PFjQ%twB8H2ni`6a#Hs2Gpr<2OMll*a}t5`FRq*n&b2CDj;#KAmIr%%N|wfEtb+4?UKTEmv$@3%W2y(^p<3e?ZDol6v*G+W2D3j%? z>jxqd=9`Jf+=>lpm%2+=`0YZe1rof&4lkKX#(z|mekxQZnpX_TcFzZ0hxKBDj)XvrHWmtTfg7vi&@ zDQO68Hg&-&t<%O5egFC^yvPQxBkE+n=zbX?f71n>s+cPku& zF~N!zX*P_{*EA%Dd?%Le2STeW;?DIt$3xIxqv*H*=#6Z&mg^Q51_+#6IXXIKahbsw zH{e@sP>!coO7C(o%V$jinDu}ud3hFI72hx?>XDO?EQi$q-yt(s)0X0%%Q;uvJR;)AYH6J>oUw`oT(Sm6Uo;V0>_kjj&a}$D z;cl7CG*H@(w0vC4zbPKAih?Q3n z#E`2QLR2+dRUgN9ANBrS{W8Ajo$@7a77!X4UCiSB>qw8jY{6yukM%d)YCW^^X@(MW z>pxtvjt(7~UtBu(E!N8%cRkB*eNqfbO_Pt7j(m}Ytt(MX96$l9dB$l*BDG;CCb6*G z4>MHa`1xvqyp1^oQt^?n?L9^LdNI-hnhY2w*$TAGorX?Vgw=Pxycnz?&O5(I)Z zysMdgO#xSXnZz2G?|1-H1{T7mVU@#x>5Opm9gSHZkQi|k-&V>{Adc>0_^e%BW6=Q+$}9uETcWs6=Z z*2-pShOyp5g?#6k14ILX(ws!Dbr+9U%d@a>+7)e@1snW>nQ^N9Kbr3>F=FESpOroN z8k4Y;lS91oNycfXaM6)yE9R<=pZAR<>Jk{qjP4~3&mIjN{P=WA_N&P=ht(M#KaYcQ zvnP^>o=jo)V^&dfw1(dW+c|ctjYU^by54j|Ds%b)j^PHUQ10ehAC6B)(65@Q<5} z4biG+qgM7bX6@xR>H_aVws zmLUsZTu-MfMB>QO&d&ld03dTzDV%c`0aCvcH*9R3t0+#AcwD{dD%DL|M^>p5A>&i@ z98m)vu8fPQ)Pd~-mF{wN1s%O*1?@o5!9av5_f+EKm zRqw|$CXD%gr$slu5!S=SG=H!4K0dw01ktFRfJac2&*$H7vK=fahYF19?co$e?D0qvA7BnX(OVsf7XiH+Gb+;Gt!tA~EQpo_=8>fNKcthAC0?uId2CNH$3ED5 zKqU%fT8wwahrKdmdLvI*()E&F4AC&lum3D`@ej3RA~x{Z_3>=(+T}JXT5+%or~crJ z+hBQ$j*MMf|U{(ihbkFtto&f!}AMSV1vNNDn~Qh?6MANG)0_9w#$Xhdq-^^!@9Y z^1voq5LJBry=aTP6OSl@i>WMKKRUvVtsD2W2OF>68UDZpTApsm5EH`BNZ)?pC2Axl!<=+`3DrC|P5nl+VP-23 zir{~0kV%t$bAL~InDEWdU*(%p74UHiMy zTjC7*UdYt&A6}m0pZGp`5_?N7@6;KQPP}v_c~%Sf)mSoSk~}#gL0*Y%oU7!+51h1M zs7tc^%wI;Jlw0Us{IjUUY8_6zw3U^4bQ6^Bh>*UQ-6IE&P9gOdwRH&LLYdB{3_JRi z)z2pax8=!;8w51a?rkic&#Y~7-|&61=HSuB2rB*v_>*V4P>TX`$7S;M}XQPx#bTeecenm7z4O;B@&#MLk+9Mfj>RJARBL+ODB~8SUap_{oZoKDq4^&)wB z6*G+OTMibnMUI}s#l@1WW^=%x1`HF8EelY>sCGd;1RSDS9B?MUt+OqLupgU?a&Bw? zYT?TWSSMv9l!#?s-tpC$z_-s+Y62MSvH;m8DQLFFUb5a9L<$1m#O}x9)VWj1ln-M` zpuUsVe!D#V4t>LKZXaw~ZP8mOKAVARZ|PS>$_Qr&aC_g?j+N`EWB@reIn^=n)brH# zU9Uuvmvk50SZ!6fueiOGL|$O<-l++CEXrkt^}0q1_9x_8=0LY+xr%C{M#zPC%BA4C zr-WZQpbH?Rl1pj5+De`t8gfkxaqL3yfhWo42H8JisA%5)R8z%a_sYcoTMQ%nv80|q zf4)cFDY>~)pl=!wLBG~c*;SqU=eBn)3n^>c2uqvRgfDG0BCZk{H_hn))D%5Qe0J{e5^Bz0E& z{Wmk4XX*P=G2T#T6{hiA&)GiLjKq5sHKDCC9yyr~s{8(J$GM5l@HjRv9d`L8JKKp$ z&Qo*A{5B7`CeoDUppc7>lji^ZQX%7U;ltqyuc!t#71n*%Tj&qGW~sJ)zfUXW~_ zL`HyT!GMJ!hKGW~wTkK-&{4vBc_TcC@VYzBgDIpBhC_P(GV>CH4-@x4->Uxux5Je4 literal 7629 zcmY+IV{jc{*RG=-+l`aPHk+nFV;hZa?$}Oa+qP|I$2*O!#(BG&nwvF{7z70g%^FA?3yVM>DjE8S0tpA17f9?66G-g+54*DlBG&#lg3Sv=%=?G3 zpdcasjpY9(kgPR=_3^Gb&q=jCNaWh@R#%z*r zqhlDeV*WzlP0^H~O&A`Kp-W(8Nw7641dbvm=Y(xaq_YuSe^uuJomQnu-XW8Ky~~xy zIS}7dsD(kD`~gepI%)`KXce@J#48$;umhlEp~QF?+LUc~S_pLCmJ+4yqNQs!_4tpA zMNJ!h7>wP9fq;@4!iibXxEYd3R$e*AeiL$}p9&a2t z1-8U3nz=W&e|EIms#>|p=(fV}I7fRsX$bYk@79sLTaXYlEmK_rZq^a~ml z#qZNZsp4AnHhpkm_{D}@Vs9I+E_<^3D4x^8UyL6m%&9yy6TUj_*%X#GXhr6+zWJM8 z=HHS<=;bm5FF6KQg}<`H`MTMWx9ARG+vd(-&n8kq_(GA6n>A$S>h`ESjS*5g`}x@G z7=7_{h}J-rP|h-HE6a8e1OJ&h+Gkknl?%yc-5Z-{z=It`UE#mg+oPq-J zZxp5?`V&G`Kji~C!AZw{E**BCGjtOwLIZ8ZLM?fH^pEiOBuF?DHzcLDqBc>J-V>5z)LI&rd#;z}5ySU3*}^z@$on+y0# zDh^g&p)gJ-dHFD45Z@|+oG470BMo zkzZs;bUbF)&-j~cMPQ!xr3JO}13mScfya9rBg)+lbOfW0v%xlYmd@f#_|x2-c4#2Cmrfw9A1 z+7Ht3Tf>lPw34VNQE~>aj)CPx6Vj z6_j%)1*gX+@3DLQ-aTG30TI7(sTao~51wu+sIR0&;XOa`R$Z7TDE+^`|Cxoh3lV0Nemr?1D1Cz2T=! z{6|Z>RtpK^DYb!HJm(0nCN2{CP*Dv^3TG0#TatjVNaZuH%9p97n(Gq32Wc%!hNMLH zh~BG%6j+BtG)A_EFwKxsEcJ37TZ|m&hEM_=zfh$D-^%+-q%_!@027cnsg3uqaa*Wd zVrIS6mXC`i4t)MYry&-?oxIjsXIQB5j|mDZF_L$!ma1xbRV8+aMnuGb6Fwj*ER@{p?ctsf5uDImA%K(2QT;T^zA) zOh)h7NToLJQ}PTp`Zsa+fPGRE(-SAdt#P|gM9SE{kj2kt2cvs&avfr!GX1!a+zpoS zt9V#z1`sin*@@JP=ZE2?DOI-|^VOWrL(KLO87VREp zMBlYK#ikWr$G^C!p3BE8Oxx!z8n2ztAM&5v|RlcGU&@4izG3_fc!!L2P zv^q!(gODy-8BXT|`Qvm`Vy&}!BMrigX)i6)svp}7EmEsEMi%I2kVJTr17c(e33}BE z+$l6`oD#k$YuYPPWVJk``0Cg7Ob}dnx+1kAqX|IUVK$68CW2Us=QOF>G9eRxc3Y13 zaEYyF=)UG~Hv3RzySmC*_aUZf^$|V^cJ<3g2a{U+c>Cm0=P?&=;V&mn030ghafDki zhsfMK^XJ5*8K#()coaQ@+bJ8kI`NG;0<{Cl&mB_gvA!UXs_b}86bo39h-OcS>CtBP zGpCGPWvNbAOMalxz;yW;c;)C*AgBDA!Mjs?mp}J4ka@dBRfIB)m3nv10ciCnVTNQD z{H}s8b>~HY$F!$6c^1BJCdVf#|MlKIDw7i;t9BPGy6FM0gubNBNh6_``uz3QCHrMA zIK_gG-v0+V0UTH_E(7t!^B{tzSx2_N)!$m2SZ8_KM|qcQBA-L?k6ND#wF+U|na}lX z%y$y!u^|%9O3d@>2-4mhRqSG;HQhL85$Q$iQum4|3uS$NT1x)exa-nZw%mp7xJ(ZN z2!9Hi2skU8VfQ=;QUm$rSzQafo{g(fg{namcO+!@%US=M=fw)dPdN&E5|oK-6n9@^ zuFjT^%A&eP0J>8sQaUH4?G_{UmE>T&v2kf-YexKY8faZMcdba2I(i3e9s6+VZ3^LL zCd-(OzkQJO{sVIM`nnZlyqeNsnC7&$@eXf^(Xl%ySejnQ5!HT?mbA+lc1zow`&fbE zs%ExEzE)1trha8v1Jkl|zPH5MRr6sla(%OGfl!^$f4Jh`D}hD&KbndN3H2|u`vuQe-GuLjm(_X{oEgbN%hZ3y z-QR7C_2}KBZ4VB2UeUeSch66pw71#GObgyJN;Y)1~HLtWc+BxL@ZQt|`nDfzPC-cdpjOCm^hR zt)p-a z#gItdGRiaxYoZOHi%ecurpsW1v?G$4xmyv+j7O;3lOqLtC4NHvbb}Ks+QA>E9jK^8 z8WH$==fvY~P>0G8_IU48fvyU4ty_6|B>na)4Uy7+{ld`)w)k#r=U_Pm+dXS1JwC2( zeY$fdJ{9K>+x0hTqm<&Xvc;Hs5F!Pwj5@dTf*!NDpg`~uiC@TGi)nf~`B#*`%6QlK znJ&ByJr}gl{&5RUgqB^Qi{)1m1<3pmrwfb@yaQUAcqxk-^K2G^b596JdRAT-Yb#NN zIuq2rP56PlN4utk|2O)prKV37Vi^4ZuJo^RZFmgiqt5f`GLt{^3mzFHb(;2#hL}) zPy;lzC7>7=r;h@{Dn{x5fnHxJ5kj7Co<}bYCx?3(Lv`i@i14z^mlk%U8QOjSo6_7t zydqTSr>3NM^BRA8;3xZ(KhFDix{~y!xxc0BFTP!j-a6^*lF|tdB|kybZAX$%)~BlT zps3%qinNL#GTXv-qS}zqW)^k zUc1RqTAna@r$dPa3-8@ml~D<}+$c2{L~@C)RG4zI0xEP z;#0z4@JeY$_zB$5y$5Ha%FpB#o_!|Vfex4W4HKB#rcJnk()VLc{;BNSC_Q2NTxkS5o|Z zVYRbPXEi^7u|x;>a$3Bj9Qidt74_VE&eY|&w`NL~M*AaLBwO;9vK#NFppwK+=36X- z+TtCH|HNQv_dyO4{5+mPc?)ZLS3&i7%lmviEKW}w53&Ir~2Zu|X zljN;3=9<^A)=e!jyh4289~bW#RGg!?cgOqMEEnEn&sNHz*7<&6JLh zTCz@4U-L+l;8WN{(qN$+!Tq4x+mJ%N&77@a(EaU`eLP10OM>LWRG{7ISscV6o)JiS zxp`eM)c}aCe3&7^-N8)<;y8%AJaNU@-5pk}NMklD4L%M{vNht2=!W zqW~w+V5rQ%!04WnM)&MlXMR9y%~h`mTT>*dCyy7yn$t?1T<)lvEoWWfSFOA%*&aOu zVQ@|%(#T(EHQf6IcnGr5!kdlm*N@O_V~>cpH29rf&7!y7I#TTw(6|$@F|VIn8ytXblR9w^6pUc)=L$1M(mt6RQ*njV ze>@kzLF3rNM}d&hqdIz`H(EOL3R1uY&$vm>hd>N@o<7bB=X(hjz*~1kL#&1;!p)=0 z>K6k1@E0%_0v%&Be*FTjzx8bXVO=7=l7*8{!>Q)|W8tY~+L#|8e)MJ4cS1>CS* zl_8Bv(~&qR0Ni+>yCl5vd|xCzEAN#`kt}P&K;V~X0xM=h=>lMPM4rV6OH~;qUP2X` zs`SO+#_u(%$cEJVS;j2)=o#UU7a@r>{-$ivIrrIUF$w7pCi;sqmhyhD zkHYpmk{EW=lqC~qaKW7__z7+e;j-44l~}p~Ku%%7{X?8u1gVdCqVe`;^{jko8fS=v zvuaOf-7jl-PV?0!xQa(gssx@aJ9w(4Iczs2?!*8MG+neeU8x~BN#eWG$T0Na_yf%z zuQ5ZDt>ml2v3dd63xhx>Sou!t7)VGGRo4NIBhWWq({j7vI{< zUYDajZ_Xqt^DHh>aNBZ_I{q`=aqDNtm}n$RMI=y{Q5ve{Lm>Ktf?#m$i`K6u^^8@= zGP58lRPSceAWqTNYu*fhEieC*mWPN3#{MN~GelW_H0_9mGA&ggUd5_|0l_yIkUNO` z+-C#Fc=HbX-Ytz62Ma;DP`V}yoc+=i<Kq~?a*1`4VJ-tDZ z4x^ytF!5fC&*qAzgG~|i5)Yhm6HId*zVBmc{;ty2gDm8`UFB@kuv$aqKb(o4)79>& zdUm_GE~qN^RhA}nB>@Z7bhP3R`-3X6-AG&8MycX2OmrWqHwrV7&(wxuyp9f@tTVzl z-u}sSz4?!m?$mf{+4?;TC9Sct+Pj6^&JbkIA~IwLzai!~m^JfMRQ~xJYI_^gEuz zN@E$OZH3jKXwq~K%wFIMN8~bfbjpr$h%TeHc%y;hK$u9X@{gj)Gy4k5e?M--Av#r{ zDc#1l^4uE8e`_Q=z8{}8iHTs}-h5WDynPfaVDmCnvpT>hlO7^M7hfg*U1B+(R_`Hj^nK@vF5*R zbQBIVG?fe7w|MqEnrbH{Q?>m)&da+CE_7-ue<%md0!fVhij05po&Vt|Un-!y^XeEi zMrjQ}r_CHg5m;M%)yJ=R(Q=6MlX~FIE^CY0BAHi0sMuRNz3ioIHRT;<0cJABZ%H6A z6nHHT2mh?PsUv3OBw~8_OBvIIP?h?fFnR?C=gC)_1LM9Ci_6PLpD1EJk9KZC(z}6a zyP!%%kBKtSwZ>PZAv~`S6EgAwF5dP#XrK5BZMmE^kGU19M*z)`8`)N6xQ0P~4de)f z_^jLfd+ObGG;wiPtyyokknmXy=a4b{kR>VJI)$j4!id@=0-J}c%P7!#e>DpR9Xsfi zCe(tN%Z9(c!u0n=Ia`H1pQBBUk-h5yUl<*pnZJLJyA+#M89nT%q0x~Ujpl;{ zN=&kT41CqiXNiSckb5|~e{et7Poy+Gtu6U&+sD%o28_+<(#kVwBxX<9?LiGOVyjo} zaMEK{RtS;?UZhjrsmT#2kGd@KG7VWTkb}xc1n#InW8*1=BPAZ69}2#x#dW5FWNRaE=3+;uUcoH&+M8r4$t^~+`02}Dg~^FWu$y?@}U_l{r$ zgC7I=+j8N$0I+Tr%tkqItje?W<=W^&)|Lp2{_T(dQd|_f^w5|Hly4B!Z6zCndXPW7 z>wan5DvrzI%X39rCr@}&aw+B@DFV(2@r&3k79aC^y-u={gJAV+2=vY45>Kd;<>;tI zXLh`qQ?lucq3QGLFguDOi;_xOM3^X#Z`y^h@_-O+l2V2>v8FwOZ^E~4z<_A0{Bd@2 z`Oy}IEG`upPr>-m;}t^nvg!6tDX6rkq9a^Kx7{z-(nvchNPx4#fXJj)Gug}osDNZ=b6Au0H1`>268B;&NBSXg*%f5L_wc<^DkJJ7 zIJ&UFjE#!*>;G-15OCOVVXzsx6WSmQ^Ej{DjMelF2<^;inO<4hSjkxtU;zxM&`<;b p2pDWM=B1I*Q=YAhPT?awK@4l&Jpl|Dc<7h%iO@{OmjAR={{#32j^_XX diff --git a/test/big-ca/big.priv b/test/big-ca/big.priv index cf331c1..188911c 100644 --- a/test/big-ca/big.priv +++ b/test/big-ca/big.priv @@ -1,99 +1,100 @@ ------BEGIN RSA PRIVATE KEY----- -MIISKQIBAAKCBAEA0vhMn1JbbFTKx3bgQ/DT0PBOJ6IXGlSYQkFnLYrrnVea6plE -WciQbDs+xjIdpZtg69MTh7IkTQQdlGrvoMS53CZ6Wf2rrdJW9hqTZdiaeUuzq6fF -/8XnzS7IuhLw9fQqt7Il7HVEMSKlUIzj95QOf+t8NcT3atDmVLdFOv+qpzYq9cxm -jB7xQHbfVk3FK+7PHf5RwyPEUF4QgLpuH7fa5jpFIMo7+kqo7R1JXApThTA2mXNg -s8zWAxopeHF/Wpx0pBrxOHR5eleorQkE1HQ6qgB4FbEtKWFmle8oyJRe+CDZMuIp -WjOYUZPXl4LZCxKruKNYP2RtzR3friUaznu6nDVpW5vMV5oKoMx3mw/JbQwDD3f6 -5le5GYDB6+eBUZnMZsgCulmGPv4pPxXMBM1GRCJn79/SSgWFjd4A+HUPETEnLRp0 -VJDtJ/lcENk14tVVWNNYS7eYRmuvsmj4C9Nj0gYDYROz4kv1BVuY6PLKFV5voIX6 -DhUDWAPJwfr/IMYQ12OIG+vXQB/nszPGXXC1oTo0zbSe+sw8AtwHDdjcQgr0sUOr -4SQ3rcKRzNKMpAOx2N+4YMsQuTWXs/p2moBRscloPYlgABFfYiN8u1X/A1klFbCc -sn2JJvqyZrP3y+7Dk4wMrb+JQ0nE8J7nphhBSrApKdpRUbdstE/T6J0ZvaxTKLK0 -0L3mAvvpUaeVZ5S3heiCPoM8n9AAFx1nsCEn+FbyzzJeaOQnI/qk0GvbkFjT4saM -/mS4TpitFAVhwUyudFLcUCF3hKSgreozTG5PBvO8JvOZwVkMt7Eb+7qGObvqXS/D -j4rQXduT+20pkXG9IqZINnNDI+sPRrr2Eq5UPuO398Pa9TlKQi0amaedVu5liywR -8TqjjnRBJsxThFxu/DeiTDl9BgEjugt2l0tCAxkS08obP/vparDx5p4BPeuEdkX7 -BLr/Dw1Rm1SZ6b8RIt9ooOoCZnj+Lw54JN+fl9u2rJ+ueLepHb2qUIOU01yuYzz1 -XP6nWZKDyF14BLXXlJ9uxsZi2nKB5IbRYQBC8bT3kamrjEWZCtt1nrbBOKFtCHas -6XyF3akA7rbY/wZWPVM5wrWLhm0D5PA/vz12GvoyAE+fzsyXDEOyA02lyonKj4I0 -8nAnUeCmnEk5HP+ydULh2kNxiqzHI4CIpxHZv2OyV30aPEzTZxiKjGTwvbrfNsZn -+Ozslm/H06+73qzN223jT5tt9CbNuNr98/6s+iX8PFCc6FPX/65vvkvhVTHTUBbD -IWGwrSjOSdnlCC1nGyR8K6441b3dZAre4ll2HUwfirYk4J2Xhu82MnJgUrKZrhlE -8I+gj7dU4WqFdXXPtF7OOy8i5Tbd0dx6kyyKeQIDAQABAoIEAEoLsAjzRPc+w3VC -ue/epNlenm+2qlkpe881WVtYuN2ek9bnOGAyzs3N9XhmupUXdesPSHmGAsutOByR -c81/fqRQNP1E1W7Kto7mQPmsDnuoIEWNOydMdNFFLFpyr3QD4MJcmoblmauNN2yQ -JqsMohIvuoa8vQIWk+ED+h59AY5yqp1ewldHvPEdR8Hoxd1nkfY6/sN42DxE55Hm -3SPwybmolf6uPGLatXOTpd3SGgJTK7asEjLJIAwysH9/hm1tIFtAwY1JBCH2hlNF -KRbQPI7SX1NtviYZ84GIUU4lFTgNf24mhtEL7tgjBbY9zKPgR7kkS6LkQs2NQKbE -iyYRsyuEa5gllJDilfxeB1S7M708TA6v07Xo8CSNVoLP3Emhq2YfqSVyqnWNiziD -E/pTeegME2LTseEdEwT5+Gk73K/yCogAEvhjbXlsQe3/7rPQoIXul7zrkVyWCzKZ -OQYdiZl7VtBJtAcnFbZtsbuBC4B4hsFWhK9QnL3Vhoi46ba9DcgrPOhf3Eq7Z/0z -nNnK51TRMxtH28y2xhFS3H71sEjVw5A76iW5KnmoIrg65fXi/hbaXsJKQ3Jd5wLa -U6pig0ndIOMIRlN/xXSSdALkaf7o2OVF+ZmEChFOSDNX0w8WnDo7G3AYG7ssNx0l -CLT5KmFmduwjngsKT/LxWbT4/sHdCCNDYh75yL3Hd+dUmV8mmJ9G0YXtpPBFtCxk -KUhiLeWX1ZrRSL8mRIy4xfjypmZqnvEPvkngJ1QGb5qynQJmf6pfl3qirr2zL8lh -yykouI5gy7flrgINzhddVK3UzlYJClKks6vu2cnSGt7Co63wIMBRxPXrV0FRz6rD -PFbLdtjkvJgWmfu0fUQqXno124ovEaffHtno8zHqF+qYSk07JE6gt8UbrkETQ28/ -c1kQcCmNmlt+5sfZ5aLEKL/N48voaQ8ZXH0IUo+YPVC3keobgpQ3Snx4S5LEWieF -d+Tbe7RLkUSSkBLFdN3yITsLTOThOouMlb/y/BXlvzt63z041apZO8xVJoq8FRHt -0vyY6oqakBBqm64UsgGwJwinGKERzNV3AP971n1OSETkElMqjnfoL2OwP+czFzDU -NJoc/no1fqX+hOVg6fH05uPgwXq9N1l/g/yUzH4s8/t3ggvIscKBmA+4dw52Ydwu -ptGYyBpAvPxy+FDT9dCD9gKySu60ToP0tGHDUwNJzn330WURea+rjYrLWnGew7PZ -AtmiSYYv6c6eo5CS5GVoSZRiDrsZEbUQIt1F7cvrP1WiwKzxvBWRSzT7Q+x6KcJc -I1GG8juNDSX6H7Z9wKPg/3TPHdBEJlKdNrziQWfvg3EXUW41GXw83wiWFFDDrOIC -vRbhFiECggIBAPu3UNt6SvrixYF+1femlNskteaNAL4JfuO2Ws1yeW7KFxPNctJy -JnPDYmgXtuceQWcknM+UqoswGGPtR/SeDB62Q3YZziZt5xe1xtq/JKFxRU1I9SS3 -9Z7sWOmF4g+d1+5c4aHcM/L4enmsADFsTGO7KDpGtHKSVPEnHe9nH9aJqwJHeqoJ -Y0eOUMgSFNKfsI/ONWrlMqfrZdSeLj+ANxocKgu6ULTwwWVf3bOaucrtdm12nNKm -jtB8uWHNTQtUtdNmHMtftAsEApP2kko6xyGy1vNY//dw78oFVvefX4ur1KlYllWv -qM0tiTbgTFg+88Op2V6aQlGyoa6cMw7JOAIyAsDMKo6/gpftTxgyte/0XqEfPALN -OWQQzGLEGUqWWoTw4Q4nnuFX8W8xv0HlLCNMC8Y1+MicGT/fdsYirUWzpF/SXRxq -rdGpVCxP3hMCcikJdIg5MBi8WhnDPAKqPuTx5jMxyDu/5A/tn+2zRKAnqBN7LfiI -uWnRpAVIi11cThjzg9MK1qBiGi3zcV8qf3vXD93K96/Z3zSzrrJhNa5kh6dnd1ER -oQEhG8BDUJ2sP8yumGUR8ViL7ZR0tjStXUc3IkgvLqCM5haxBRvPgEHA59e+vfi/ -nT1KgVd0N4VbRxHalV6dR3mKfolt+wRoTxELyiDYU0ZMPQPiOUoaUR6NAoICAQDW -j3WZeQpTrk+sSHlUWMLfuE2Zb9rraXruMIsovIl+G6Tea7xB2+hf2c1W20pRz14J -ic1qxRKvxu/lay8KB5b+AOPF/WhWDF5W26xuwXbM0vH3Mgc0u8u7jdPHOeK+vaRd -RriXtdlIdDoqCaY8lbvVj0NpAFMuAR0yN4gc1va2G6lpk33mQuhdBaTeQ8Ta4BR1 -FFI3vajhaALlTY/vDKepqXwqhutkmXM+vHEtZpy27Fj9/KA5xDj5ALvNlBbkN6Xd -rO0GWZUl3AtgTR2h9MG0dFpL4cgTP/h8+Syc4DCsiB2EJRgkTmTwPr7du+PmXm44 -jhUzZA9tQk9alDPoWiQqKAQ5/hIO6iN9dAkrdBht4jxgV2BTMpE/Y8PJMLBeho9Q -5Tbb1JOFTXXMgsz+0Ffxm3xkFMm4e2ZerWcSv97SxOl/3yNAGn1hCJPC8uZmEawv -o5TWMOIcwI7q9DaTQO3tPbLigb6wyOBDFE4hXwy19tBOvMp7bfJiWCgT2TQ33O0K -BBkQqYhpHKn8tUfI5QaU2Q9SnoRMl/CvI4a5ucUnLfFQD+WUxIe8ON6wUZsurd3q -yI9OqegyW6v0FePB/LhLywTMeq3WvvhWnqgfS85d+sWiHLA8JgP9iB0T2uSeB0TQ -07iBOWI2445dcMc+NowMcEixgpZyxOpL1qrKJuuGnQKCAgB8Py8lNscd8aOl2NKK -zGn7hbJX28+6/frpMZC+ijvQaOZdOvLrV7cNOysu0E3S5QdJfzP77pkD3Tic0nnL -D9xRqIvCFti/9U21UV+Xh/Pv0HZxwIpolnkh+e2lTxWXucTk/mnNOGFYFDh4KGNs -AdXvAGnJ4i6dwwc0hadsDU4U2p1Toa61ka60mlXbe7lVgcdoJFQPsJSBeFsqSO3x -IDuSosZKRawitBfyDxDi34PH29CyFXMxM0+ZL4dd9DWMW0Lo1yVtaY74RQF0wafS -BhNW2ezp70thexiRcnNMBRnnWmi9MmH6Z5t9s3VgZfSpNmGiegs2fBQyOWc/RhCZ -ws7nnoHnYp+7GGLA1T1OZ3GQwOGYzE8V3vDuKLCKK9uECpUhu7iLARmWh48/4KFU -SGeyAI5rRybG9u4rrgT1phY7KoH/XlnhdfLYY6mNudqXLYTmJqmjt/66pvYec1UC -x8AFyDVlnbQFciGDjzp63RsJpql6/DljzTEgP3+jr/xCmBZgkIrIODhasDHV7q1O -WS7WFQDa7J236mYXoH2hxQP3Ud33zsWBeZ8sbIhDLbb0LRrM0H2ene2wVFlwBvAN -Lmm1hkxgrxFn5ESKfNRVtuXLDwohXyBsUUCvCUCwx0fEhpqdAHTsX9vw7WCqO2RE -96vXcSdTcRQhxe30Jc07e6QA3QKCAgEAwsrtvk8YpA5OASCvHneTPJ9LvDDD9RQH -ajYiMPKydQ5N6Sywdq5a0qKffOqMF6gHPOuh1fxjUbhv1b4wr49icuqF4BuHXQ/P -mlXHv6ne3GfrCzydNDAG8Bj8GxSfmgH8Nj7dmcacJN54a+/kv35FUMbHMY389nhG -dG/cICq9Q2nrrZEdLS6zXLiiDLREBV6I1B6F4ltK9pGCh4GaWjIICc14j/d7wBJc -gal9qvVM8/mxda2kHa3a953F4wc+nSU0bgPwEOLFuOCEZ4K7k2zta5Jy5A9woKFk -TLm/2hDjv8+31GAFAfk2RLMCf7Z0WpKCyM+dydFe/BfGiXqhgaJM0QURiUD0Thwd -6mitZoj5INHTdLf/GKmBGqbNelu806SgepYO7xeYct53QxvBVtn57bz2+rmwxc8q -imwtduVBO+NQBiqkCy/BgpXR6Jyzthj3VSzTFH6+2dGsLv1WiuvY1pk8Tc3zPPay -O9Q0drGfjZgtWD6oKdUQyF42zIZWlRz7CyvbQbhYwu0mGurN6EKdbgd+lMibXhpX -hfnf98ADkOVx/vjfuueOP8D10+fS1lc9cUlyab1xtD5r56bz5ws0moMPsUDzkFJC -jgluozMkgUgJo3seOQ1edA/eLkd9ZUc+H8UH7jIVy7Vea9DW4tGM5kIOjTH8uuex -uvaCihM5ozUCggIBAODv3U1NeNbEBIGqGTl+/mRq9HQnp0rI5/k1dz79sZDtyCWM -u3SGpKU9V/a60shcgEv8QDQ9clJHoJ/dP29OM0JdcMhntGh9Or5qDEJVK8/NtkuS -eqb52cnsEMr9cBOEmdtHTLvOCYjXIailV0BsHDuuAkBlETbUZ9caxob5X38gBemc -+B5P+rE7BhsZGW5rRh7QVE7g1xzhiOhxUhdT02onphLQc1I9cr+O1QxHmYjAIPJ/ -U49KcZ71rZY2225WihkjYVXw2CmO/HWWIl2QLobs2QGP3RE6p/6qTPDbv5Fq8FIY -upqjNCcKVg6FBqp4hH/GEMBM0N3hHbQrW0eBAV9IH5AXZO1CR353cca710UEZ2Hg -E9Yu8HK5KWmNSXEmmLC/0pEjap+VM8mxUZ7bmpnGuB3uBiC2DE6ROu64Fdy/j6Km -bUFo0Y7AMxFk1nVaXpCtYJeLcpsRsq28raRGgI68049DEgpgEC7u9HTmmUlEJNRO -i6Pf5o9B5Gttc6u5+6fzo0AIJlkoJ8a5lTvcQotTpcWm1lol3YvWEawBlP3T7zvS -AUN6+Pp9DNoL6yVgT5rN+4NOd+zxV5y3xGZ3Si358uz7LnL5kN4pVnJiK9gPhwNb -KOB2UONFc1YhzARjozk7UHDJwBHOtudQsfWrmDrZPbnlyFm2fmJww4Kf/d+f ------END RSA PRIVATE KEY----- +-----BEGIN PRIVATE KEY----- +MIISRAIBADANBgkqhkiG9w0BAQEFAASCEi4wghIqAgEAAoIEAQDnX0ZVoC831C/a +0VojnNeOHWMcZzaN3lWbgY5NeHmkT22sh2jqG7mx8claPU7RqON7PT8g71vXZor9 +i2mrFfPayrO15gz5+SE1n5Hc7iC4EZoQL/HjHbVjUaSObXw5nHeKJrtlGtSDK2fW +GX/qy7pa6GvGzl50e9C8Uu8IgEcdD1KNIR1zzpBk6S9yv20CNQpvqFZz5ROl8jZJ +rvhFu3fXLiDOun1iPscKlJArqhxK9xaRC/3ZJIV45DQ8n/PfBL96v+psYPdxp17s +uDnhaC8iQx3s/pdpnZqm5lsEByFgg9KsMv3JXz5xLCLljox9wqLFs8WoYYv84wIc +rGc0y/whm6UJ9bxbSzppdfJaarKA6FEmqvluEhJh1eE5Hwp5w7ueZFwWD1diD3jv +1EyWqQFY79Y5HlEMLla5ndBGjMAfY0sz1Y2GKNo+GAVfEZudNQ61fLT8Inpw96NB +Vn1y1XQcq9utjVzl2x6TVA2yuIFnfXqkYc1zAUsP+I0Sp1aW+KN9hMLAGq/yyTla +BfaLCtjxmhubb1x9Dz9hlCaOfbjZgEP9U2tkzk4NedfmKa2pAcTpHzyRFBKm71sb +NG0lbjXC2oP8+Waswd7cOQZ5QP+9lw0fwXu+M35ZIZ01HwGqDuj9/17LHKIxoMoE +GXFOlXO8AhfpFLaMHcQ/AL4KG0GW7AwtRKWZ+8v+peeOZAAvw+1ScPEiFlKdUFLS +MpdThBYXnBj7J9TbBViyjmOjxlrFeoBbxpKeC7lzFigNlQebPbnQDArF6vMwk3Fi +R24RvAXMThrnXDLca3PJvXDFcJUjMT9c1SW3/7KA306goOuNyTDXLtPuxEJSTvg7 +I9pp+eL8t1lBroB9IsE5Sn7d4nvtFmy568ht+W+Zr72C9Ez9y6BfVxhVET8EKSib +UH1hkcvQGgTP6UEz1Z2S7+JN3Hp3HSb2VF81FEL/5mu7dYdMJkf9PT9C1HOcRIQj +NZDu8PNQz7NNwv4fi+x6rQXVIorwqpo1uCGlwjxhvu0bI/NIdmxe9d/KYSM/i8LN +u3K9utroWRDaUOo6OMb5o2rd7tMfD/FV7ui+LZMz6SwisgBzSNZaWUMqTFoj2h5Q +kegVrfdhfHTB4SVMCqcbRBlu1yNUOpEtquCU+6tRfc1jYNbPjH8DC5cI2acn42A5 +uymvsyvPjDxzSC7ulIjjjDZCeNQvx9TUT/oed0x/o6yi4/mcAID4ttNufVmiKnFp +PsF55TQtWxI8fEN8Pa+PcCeP6Osq5Ewe/V1DVoHwMcVIPzJfJfZ7zs4sTtTrK8tv +EF5WyL+Ow9pIfj26BqQxdhbcujq4+HVj16i1T9u88JcmOaP48jOCdrdf1oyCEleE +oeBp9/k1AgMBAAECggQBAN/1VDKb7DjBNlU74mGodupEPeSHb8IhXYI6BNGudSh8 +DfA73m0Fy1iYb0vfHkVJknB/V3T83EyDILTN1snZZQL6xLuk5BivctriC6HsClXC +C/vxPNWXszVhGMUY628kqn1agngaYWxafpc6dZyD+W33niOBLOLZ2rIAIQp8iNlz +NHgRft3TK+fR47DR5KWHTAPK0Ww7aCpwauYl7IIrNZRfPTh+QdHwbGAsb+UkM2DJ +Ddn23o/qjxv24S1xsvDEOsiJrlOcBMjJttOye6xZWY5zoyr9QPjlqoY1YhJjCIbQ +8wLmFMxwWhPYIitMMWemGEMAgao8SfHOlwPESd5MOVEaxMUATYOdLPxaQ+4La5/l +wG+Kfghyi8KR8gGFr3Ev6pMmGBDuZqovyeNz/3KyQvCgrx743oDI9f+T57/yjCGV +znxtESG0t5P1UnW0qImiiwtXnCSXBygEPM2I98NJJKyAGhNDS5He6Ri4+s1tVS0k +w6sMVH8m2E6sS3mr6uAV6sMb2Bt1eayr5MzkCsKKDHbIskJhqAgR00sTycKRpXU7 +eBRlRAX+wITA1SAgZc27PaxeJRVVdbyK4ghSVfguVvG27J3Zl+5PdvZ6aG7EYQhW +h0ie07XHSFzkcbSyv7yp1BPQtiQrIkChoAoZypjDh5SL/jMKbqzwPz6w7EMCIRoA +qZDdJQiOkpUpsz7rAjBtVaqogFOHIG37jL3FyoMh+9CLgmRxz8hjTFXeeovZlG0R +xTf4Zw6xTycMTipW2ZrPDF4bPZoiyEHtPu8IaA0MPsejql5QT2EtinOvIUXcZ9v8 +zNNnJDW/Uwi5SBkZN7s4UTmgMOYwxCnnFHBEYqOE6cBOUG9EVOE8gzYSaeWtZS3o +nsuzaxTsSZwV/JbF7AkHl7af1QWMugg5wCPpAlaMHxq/YZNN3GffkVYfDweKoGub +jc7+NuYlj9IC9bHqASptRgoAh9XPxVBofcOh9Prax3U4rHGVgf4EDqaxvWgdTEuw +v1Vz2ah46kPDyTt/rtDDDWWetJhvC/3sHh9fw2BIUubmYCom0XasI4wdUJ9V0b3N +aWPH7AK3wmzM3Yh8KpIJKsl6xTy9zT0HTNCKvo4wG9HvFR5gl2penyV7wJ9FHwy1 +FLABJicLOXbU+NxBfbgxJgoGzvYd3pnbDN5y/DT4CyaLyVdAnH/2EDGBct/2DWae +UxFJFg7ELUUUcP848EdjyVeUTfssnDq0JANL+2G2OSzxsMAyn73ce/cIBqKABxNb +pg1RhGxHasKrvMAQJ1q7/Lw/16q/l+SK7TyYEynol5aPFfmqUHRanYkLz5z4Xm0/ +NdNqcl0DFb8NdXgLwdLpB47ycTkwQC9y8zd9F/2fgX0CggIBAPauqNdavhkZWp5R +EBWhXKnhENvZLSkoXElmOOjnccucgww0NXIez8jhoPXnD5BIbhuwfIumzS47GtJF +IhxMs5L9tTfK8XJAFDAWlaK3m24qcr2tToM5ZXs2RVf0bnspjqsTMz1cL1YTxtsm +M7h8JYg55+CU+yaKcOnEKbgYKry7HOIMQmm8JsWLVGrRVgaCdti/llDdyF9obJUj +ogSLAfF2yegIQhjpD9dDCK+vjTM9O7fDNf+lErOdo8q7A1yV339Soc6awrEQoflV +/G07cxxmOsxmHvuNKHD8Zfphs0nF1PXTbn4ymnyKtPW/ytb9XqIVKorpD3g7+1hB +mcH8oMhk3y9n53fQ0xn0eC2LK7bMiahOvw307oy3gLi1yWt2cB/9Oan+m7oE/kyI +x5cmVwqRE1yAddxSNP3/J0J0e0tcU/ooFZK69vv4P6V9b708RgSw9MRAlNwcLa/1 +BqWw5NBzE2Urfmxyeg/gH9n+BQ43M3M5Id/ShDQmDCeXeC3rXKVk2Zr9+ztUpYc7 +dVfsLBAc1HrNiM4xY5KIaaKC63Eau0agZsSOw2CF6ulo9TOCE1Y4MmCcAdUelEPq +/i5xHBvWk2sQpM6owF9557/m8tXyREEBEkwESZIu9B72ai/OWxakOOcHinrFE2nx +p2rOaHHhTGHOunjxJD4XwT4mZvCLAoICAQDwHJJEIh1G7EQre7tTUvuJEDdIyB2x +NOLA/cehxWtg/BVOIuMEgF3RJ3tKe1F4dt1/47w4OgzvoOguhu/A6DyylR0383qp +i7qHb4IZMvUifHdYIlFlGmr+P8InDsjxm0AJgYc+HQwxNr12oOAin1qOzKwjfRj5 +QiReovoS66TsxxsDdcsdwdaXqEXP1SLTdFuX2cQ562uzcWqS4NOdDH5SQalF7Lum +qCoqG+q4O3s6nqZqg5m1YKjx0hLkbeeNRlvEHJnbHeoXhw0thuytnx1sUGwecCfP +cWlD4ThGSVD5lDZPPCrc9j6nYtqjvB1mgVFjigxiPv18CuEY255SA6bu2ldHxI89 +4YPEHlz0BvsiYnNTek5T8QGQP/HfGPmSLaE0h76YoOBrQg6CdNnPHpPi+sthX3KC +DYeYV650gX0DjtubQRFeCWlHkH8zRR0B0faJZD6q1JqXRJbvaMgq26FCrj+cbzhe +J06D5cGSwZVBpmDl2c1iPVegJTGfLXVb1Gslbc6lkjhgHQbtUvTPV9j9bQ8EVVHM +pydZNGAc6XNCXi1oA5bIB11VpS+WLB9zq/w4LkNrXUakuzdaX8Ox/EUzyN39aDRV +p0BX+MTpJnFk8ZN+4kAhWa86oeuvBgDmnmK2vXS9ZTDUN643p79aUrt2uQLZqIaY +kcC1mO2ASUI1PwKCAgBVTNQpk8FEYJYLRLCxKhkmzSLNQu3w23n+D5ECSHX7GGXg +ZHVOvwTOy+ai4YFqPQGGJaMLj2RH5jxCFZHUA1ndLEnrvwt6nFnevxCDMcZXc+o1 +WKZbjg9facbUwTsq75Xb5knDoArmUvRid3VPB+7ailt6N0oZa6nby+85L3InzPQR +3ndgpKUrjiBkx3pdyeNa0/UghXByPWO+tpGhzIehfZgX2jMw9fZ6Uz2/so669yOd +Sa10dxpebdZjlgN1koW0O1ikXrOQEtZPp8If63zEhz0xzOZNyeQAHecNi5c5nWUk +lDYTAWCWTEiC6g00Bm0g0vzhB/JHe0ZQoG6Qu9DFOsxKUj2iGt3Ejdq4tPUqwtOf +FYvPQbDzi8jBFmtN86iWBzRXailjS7K7uFh8Fc/nYX82b11SEEMuyXpD6o9v4b9Q +M2gyUuBxBMjNavCmmR8FJEOfUU2oRz4tKCdiSCb3RbOhOkb/LR60OqYI9WO+JKxv +3YOvJ9Z7SeTOE/yEtGxW7OaqR8UGISEUACV1f79E2xNGW6hA1Kc/1lfg0DCl7b5w +j6q5sTwyNlyi1Z5kb0hMeiZBbfDcRzSxv6KhYI99uNdFIH48z/GlkjvnCe9St/GO +INa43oqqN/5GbqMNYOfyjlr22I60IU2zRtLDhhhruKJ298tXYttLdV9nJFRYPQKC +AgEA2JcdRYJ0YF6Nm5/QOXh4V4oeJHQHfKsVBDuoEYAQvXqHCWWk3JGijyGLMIOO +2Rh3834NcbbDpoDCD/4+VQfogLrLkYX7FudpCfSHKY3y2/nkecbzHz02WERRMYQ/ +tNlzaV/DDD+NmPMk8tZpeDHAsWFkwdp9ZZLJVeizpc+UhNWRw4xE/YG1vjXXS4Oa +F541ZQPV4t0+2K4tEXLm0BrN9Asw01eZadr1teha0XcuUJF90kUFqTwZCZGS4yVU +ovZdnsih7KrOWAzF0VSNOIx4MRVWghpvfstxxf5qEdTey1Nrrgu7KnihycH9MYdm +CeoK7bxAMXtaksMJi6/H33lV4s1nv+BJyescPhOZi7KkZL7kAuAnucaDv4g++R0B +O2AXs1fjkLBF39rFVd5r/0443p2WSi6cDz5/Gue1AXkwuL3r0N9f+DCLHDf21du5 +L8QjHIolkVmYXW1MrYcaULavf4PI86bL9PqF86qT83rV1VNswsm2X7Cv01DZsxmB +bKVvRWMI7ge4/NISRo/3LvWyUeBHlIQV9oKtluUM8eePxcVINjROlf82rSQFifQh +Julz6YWp4TZRnBUY+Fe8IlhKYE0IGiceVkk5XGGV1i6MSR81ClayvKK20y/udoH2 +3BDxQKAjpxiZdEUJzUBu9t38Jjr7nDVNvGB1shnR20+5/mcCggIBAMAJPCyRqnFZ +wmy3Bqe/LS2eUzly9Rrp1kUHCgmD9uDDfzS7A/NButb17Akd8BPzI3rGTvf83fuJ +ueOVBWRhBV64bDL60BIUmfp4aVmk80GYeSw2TVKIrPrmy/80UVv5b05zTkY8TiKF +FOA1b+g1I2h9/U/DdaC5um1+5oVaBNwsH1BVdW6rRVPhhkw6+EwqDYJMKSQ59O/7 +iyQj2gSfz42FV7CG0X9cHIIB1Cv9hbHoHVm0JwD+bmKNylK/xfClgLTMZGjBCNkx +zmm3YNvM4BBFtmXyKuuBnBOY3u1hw78Xg9tfmFHHODVSkrufxUXfFseqXQ7o6paH +hxxCNrf/Qog+MbepJDf0L2RjfDjLI2Np5+LQUFjvULagTDYLQbbnZedpGDtNRcqj +W4u6HlaGpnABv7RbjikES3hIpkuk3z3lsQIPGG/p/wHdQj9h2dWq8jIPT6zsVm// +5cB6SpIGF6fIFc7GVQ/Qzu8P3ovxgbvaku5p98SCpamGH4xbz9D4hlqiKI45GJiY +SX+taP2q9ehd8wSOHcXQAEUVp+mWTHCSV+lWxve/O6EEjRljUlt9/jxEog6NlK6y +4WtLRNBK6mHaBTVLKzpkrDDzjrOpZqvVm8bNXE5BZ1odGAyNEfygjZu4v8eF4ZHh +ehReaLFnvTEpdNeL7KhhRXDhscR+7hwQ +-----END PRIVATE KEY----- diff --git a/test/big-ca/req_conf.cnf b/test/big-ca/req_conf.cnf index 9524ec5..a3c61f7 100644 --- a/test/big-ca/req_conf.cnf +++ b/test/big-ca/req_conf.cnf @@ -59,6 +59,8 @@ basicConstraints = CA:TRUE [ ca_server ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" @@ -66,35 +68,45 @@ nsComment = "OpenSSL Generated Server Certificate" # nsCertType = objsign [ ca_altname ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" subjectAltName = DNS:*.hoo.org,DNS:joo.haa.org,IP:123.124.220.1,DNS:g*a.e*.com [ ca_altname2 ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" subjectAltName = $ENV::DNS_HOSTNAME [ ca_altname3 ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" subjectAltName = email:john.doe@foo.bar [ ca_client ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # For normal client use this is typical nsCertType = client, email nsComment = "OpenSSL Generated Client Certificate" [ ca_clientserver ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # For normal client use this is typical nsCertType = server, client, email nsComment = "OpenSSL Generated Client Server Certificate" [ ca_fclient ] -# This is typical in keyUsage for a client certificate. +# Test cert without flags. basicConstraints = CA:false keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment nsComment = "OpenSSL Generated Client Certificate with key usage" diff --git a/test/expired-ca/expired.cert b/test/expired-ca/expired.cert index 6385c4d..8d2b6f2 100644 --- a/test/expired-ca/expired.cert +++ b/test/expired-ca/expired.cert @@ -1,19 +1,19 @@ -----BEGIN CERTIFICATE----- -MIIDCzCCAnSgAwIBAgIJANbLTjynlDJIMA0GCSqGSIb3DQEBBQUAMF0xCzAJBgNV +MIIDCzCCAnSgAwIBAgIJAOhpVce10J0KMA0GCSqGSIb3DQEBBQUAMF0xCzAJBgNV BAYTAlVHMQ8wDQYDVQQHEwZUcm9waWMxDzANBgNVBAoTBlV0b3BpYTETMBEGA1UE -CxMKUmVsYXhhdGlvbjEXMBUGA1UEAxMOdGhlIGV4cGlyZWQgQ0EwHhcNMTAxMjE2 -MTcyMzEzWhcNMTAxMjE1MTcyMzEzWjBdMQswCQYDVQQGEwJVRzEPMA0GA1UEBxMG +CxMKUmVsYXhhdGlvbjEXMBUGA1UEAxMOdGhlIGV4cGlyZWQgQ0EwHhcNMTIwMTMw +MTIxODU4WhcNMTIwMTI5MTIxODU4WjBdMQswCQYDVQQGEwJVRzEPMA0GA1UEBxMG VHJvcGljMQ8wDQYDVQQKEwZVdG9waWExEzARBgNVBAsTClJlbGF4YXRpb24xFzAV BgNVBAMTDnRoZSBleHBpcmVkIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKB -gQCyL1xmtX8CGM5PfEou8uW23mlgQecVzCkWSL5q8oa3v0AUTI6oMJzLKOgCt6ej -0HNSnGsoOwQrvG1sjR8GNPcSN7MK4to/1xPR4+wlIr+R5w1s8fCBzQsuVEdIthFp -Hp8U/xB13FDFouFRT7Iztb0Hww1qFQfnKji1f7G7m1VZLwIDAQABo4HSMIHPMAwG -A1UdEwQFMAMBAf8wHQYDVR0OBBYEFFqbGmHdV/NQQlNSwzcfKNJpdmSqMIGPBgNV -HSMEgYcwgYSAFFqbGmHdV/NQQlNSwzcfKNJpdmSqoWGkXzBdMQswCQYDVQQGEwJV +gQC1t53CFkwM8zBKnEpvtDKgvorgvn/bQuMmDvgI4xCCUW9OVPGETmneMUNPfZZM +fpz0fMnXdVPV4EvN3urJukN9r0Wkt8RCbFfNqLDy0WE4ybxD/UoeFv/b63CZoNUb +6eDNti0ysSQu2Vr6JI1HzzfHCRAKR+VLr0ck0Rg9ATZz4wIDAQABo4HSMIHPMAwG +A1UdEwQFMAMBAf8wHQYDVR0OBBYEFJeY0oWWx+v5K4MaIoLNVb2SQGS5MIGPBgNV +HSMEgYcwgYSAFJeY0oWWx+v5K4MaIoLNVb2SQGS5oWGkXzBdMQswCQYDVQQGEwJV RzEPMA0GA1UEBxMGVHJvcGljMQ8wDQYDVQQKEwZVdG9waWExEzARBgNVBAsTClJl -bGF4YXRpb24xFzAVBgNVBAMTDnRoZSBleHBpcmVkIENBggkA1stOPKeUMkgwDgYD -VR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBBQUAA4GBAJHrEyQ6gk50iaWb5CmDwXmk -mJ60QSeogrjZaOXnEE9ibTOU62DHBnRupPl5F5LunBEkj43ZAxemKN66oDjdRRpT -nO1kDuUFCVO223f6o7iYr468k/JfINqs7/6Rli6kHkOrbiWedu/EA4bCuvz8vtdT -cZAQwVROG3O8UCWr54h5 +bGF4YXRpb24xFzAVBgNVBAMTDnRoZSBleHBpcmVkIENBggkA6GlVx7XQnQowDgYD +VR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBBQUAA4GBAB/EsxQPeusXzdverpRgPqwv +bU9A3wzB3Y//mYQ6x5kVEmam7BX7dsBn1LcusxyjPrOtQGJb50fGRcADyvlSZqf+ +DbyeV0q81Qoi9vwWbXD1m7YlF4mIQrTh6vmr+sKfym0YjXrRQ97XAfe4B4/kO0Ic +gxsLwktuviOeRbJw/iyR -----END CERTIFICATE----- diff --git a/test/expired-ca/expired.p12 b/test/expired-ca/expired.p12 index a606eb6a03a6cd4a5ddb525ef4854ee58f08e650..955a999bb66ed8e420417fac004f9d5a6cedc5f6 100644 GIT binary patch delta 1658 zcmV-=28H>B4uuYoU4NBSLLX{>qR;{Y2mpYB18A&(mFq9obSk0+P%dv6quPfX4XZHR z3Zk^8fuh1iCq0Nc0=m)fn7b#zS4FS9hl`1t;bdz*CfrxBpm8N&SVKS(ajesr*jBG} z&0Xg;V7tPGFR&Dm^%s1iwNN*R=KLX1HD3ur+=o_k(bfaN^?gwO7SlP zN&@H$)Xy`ca#6&Q8jkuTUZwh+6aa7@&I>mloAED#+p}WQj$UIlYpw##m zt-U~3z z?C_V8-u4R{=M`=v*Faq$H$7HGJbA9L`l+}+D+YjlntvpjIy%qAn;a!jrB3d9#cceN z8JME1Y#Uy`4pWwnutZd{1SW$M4aAFtPcJ0nk0OaXOWb&kmA-lO|L#{imL{lH6_D*U zvI?g?Or+@JIh3@+PM?H22kj|Wqo$s1<;RDDd<%zh(_>$40HUN}m^!i_9$6ju=Bz^W z)~oBWs((7e$7!%3Pg4HZz@GK4dhj-OkB<}0M`G|r)X#6EJ ziV2!q5~cDHuMWKjU1?S!OKy-?%g>0$jE= zbPV*Y-;;zJC?J^D%Wub*$_oT%i5?066G_r&w148X$?i6Tyo1x~Yw0f{o3m!e;QR_G z?n{tzFq;UdZgz144!r^fdl(`_X~HL5iI!`2{e0W8+Nv1Pg2ys+1TQ}uy1lY+*p$ap zDBNCNSV)>Zn<@c<{>DJWsgNml191KYl#rh={lbwI%p*jIxUsFYrLAW%OShaJ$+_bWC zh$v(H_~tLcFa33zI&d*o(OXH=(x5OKFq75;MSlbg)QKZ+Db4}{2ml0v0)Tzxmv|y* zL4U z7=KIUCh1@_J6+kZV@tbF`}klgB;ej!?bAq;MPZS|1joy}y;VnzZkk$tEI z7p;T=?{eo#$TLS-(&GURuF@e^p50J$x_|vA zZ{;}|+KOe#zO7O9GjTdIp+7N)Vn?xJ&~g%jE#qP`duVl8VTz{LgCh9uypzJr{${z( z6v8ZWACT6l+!h~-5-!(+bF^*)&K|dalw`924$PlrNkxx&K9uMZW1U~?fb5G z!zyx7E~Kr|NPa`9I+ktgCX+K9d^ZRQ&rCPo5Wb%glH^n-T+jYqkS?Mxh1l$Xr$T;3 zsZZAN-+z~{4DzRmrY@1p(p_3tLsdyH0xisx-GoDe!Bt7<7k+1hj;4Biyl-Imr;7VC zULGGfw&2wGD4MsegIT39B`_lf2`Yw2hW8Bt2^BFG1Qbh!GnmVr4MHv&@6cp0ThYyX zHWV;1Fd;Ar1_dh)0|FWa00a~xvZlwi(&jg=oKIump&6mn!UL-W2r^ub^n)m<1OfsG E04^yGTL1t6 delta 1658 zcmV-=28H>B4uuYoU4K0q=T2%gsR;rC2mpYB185r4sc2r5vpzKZ$3VcA4WN}A z!!g2+5r#=cN>;+$>-D~J{XYrH1@6%LB@6gm*Z4Jy(r$cxsec>^y^d@w6w^p1@*0sH z-r}pAo&{xAtiemZVGgGICu9SBS>aOEU9Q)}Mmn&>7`kJuLTo4d1}0SfT#H70%lGF{ zTz|kUU6!RH0^?f}f(UzE8^1b*^}|No+Eu#COlW^O457hSVE&xS@l##OcQ=uvo%#4LSY-MQks_pi z$^Pe(4%tiMN?{chvCAX{GmuvApKuS$cbK6GbZcrwh_9_ z9rrl1qdl&)HVFD>YGUh>3MIpyLgoN^LA@~xxN%@UKx7A?V-XrJxS)l0qkJ^WtMN{7 zeZg{gVSiyjRjv|Uys(*|yF;q@oqtdM-o?9Sb$UK_t_gq@D!jwmDW?h_XdDgy4Ox6G zl-ByGe&PaRuyqQ8b|~6k-MnU;42z=(mZ=TK>7_&1U zjP%V2+3~{WZmZjZa@Dg$x;u|r4icycBC9_m^M90YYHdZES2hVllM&U|TzaRtzH58I zDf5!6^ks8~f|cSG4i=M_5$D(YDY^Ul#_Ft%o&IT)5@1v;`^`(9LMs=RCiGq-qYGEf zQSmh}ee4Yd>Cx#NIOt@p5uHs`*I0agdk%QyCfZp3Ssywkt7#(UM%G-#B#=MQqu?Y;)!#`G&XX@)0C%h-c~ zMWESqgU%gIW96SB_{p(O%v5)9(GhnJFq75;MStr`jwYxoAISm&2ml0v0)UUn#dH0FtK7Z(5n%vyRIPX6|vzyEN%9>~zLYIlJ@p zFBEkF8XizWG$;zQv;3qs@MbY!4zcUYM!itwsmpXf+QO5G+tww{b41nxu@yyn zH?h?DxD=@p-H-mq=6`|)dt&7_|d+O)KncA0y1vADx`9sP>Kk6Vg+d39u%66b-RdQfu+;&^8m?LLIOCZ)I zV)M447FdaXaPBI@rUr!xO`}kHCVy_vZY2lnsC6P@<8hzM#vE_Z4v+IE*Y^*s41=bf z9p?bqZlW&hFX*hA04aeIc?AB#k0~DzL&kg!ql`-A-57=|Mop$(@dUqX@0Y3&HXu|r z-69^ce&>IVcsti@&0g^hdV6xB(f;Lc#7-CQ)4dz8$jeGr+YC*~Yj42gFo#N( z7+N(skkSdP-}LvH%qE*LB`_lf2`Yw2hW8Bt2^BFG1Qd!|^s2)`LQmuL!${hh_u(<+ z<~cAiFd;Ar1_dh)0|FWa00b20?Hz@H!wttYG+mP>DnNbo&4p|P2=K3+oT~^hk^%w< E0Cx!_L;wH) diff --git a/test/expired-ca/expired.priv b/test/expired-ca/expired.priv index 834337e..7b731bb 100644 --- a/test/expired-ca/expired.priv +++ b/test/expired-ca/expired.priv @@ -1,15 +1,16 @@ ------BEGIN RSA PRIVATE KEY----- -MIICXAIBAAKBgQCyL1xmtX8CGM5PfEou8uW23mlgQecVzCkWSL5q8oa3v0AUTI6o -MJzLKOgCt6ej0HNSnGsoOwQrvG1sjR8GNPcSN7MK4to/1xPR4+wlIr+R5w1s8fCB -zQsuVEdIthFpHp8U/xB13FDFouFRT7Iztb0Hww1qFQfnKji1f7G7m1VZLwIDAQAB -AoGAMB2L5QxDlKxgIaSdX5oln8DlUaHaJc+wlJzmFnkRGdMiGZkmuJIP9OhB5mHz -ec/TJE6qvP1avfiuz64333Qz9xrrZKihCsdgDLsXWGa3Hpg/yt61Ba797XOq3zRp -WN6yTCuckQUHIMOH50j5g5GYMCPRE/MAM3R/Cy/CnGDhWbkCQQDf8dhm0W1UNrsZ -EMsHFVQ7G2gkpJxPQ8nENov/PQwetZXUKGlmYs4NY/DH5QoW25hOS/VmSYV7UH7y -Kj2eOllLAkEAy7C2XkSwp8SnpnIMf6FPofzD26mZi8mOZ0vYkjG//O4DEUMz21FV -0ZIb741ymUHH7avrcfEqBgMyPrGoYXGVLQJBAJ+u6HqwPL/+4ryFz+92EwCukz0F -r3uJv7ZMmtjeI+VF39dPFZDvRTQhHlC7Dc2sudairRJJvIdop4xv+E36Fy8CQE5/ -A0jA3/NHbfRO71IgMDgU2MXGTk34ltBoAkYUthAbCUOVyl4ysgfZbrqaoBc/qnSF -VG7MqY03nh1bCbDDvOECQBGiBBk5Bntn4BsFBrd02TaypGF7htMhzpfMtK4x0ix2 -16GXhgRvAEROLFry5mJaM/Fg8X3ipxbWCyBEzxWnC00= ------END RSA PRIVATE KEY----- +-----BEGIN PRIVATE KEY----- +MIICdwIBADANBgkqhkiG9w0BAQEFAASCAmEwggJdAgEAAoGBALW3ncIWTAzzMEqc +Sm+0MqC+iuC+f9tC4yYO+AjjEIJRb05U8YROad4xQ099lkx+nPR8ydd1U9XgS83e +6sm6Q32vRaS3xEJsV82osPLRYTjJvEP9Sh4W/9vrcJmg1Rvp4M22LTKxJC7ZWvok +jUfPN8cJEApH5UuvRyTRGD0BNnPjAgMBAAECgYEAn+EOhx5RCS/KNErwXvmfdbhP +vk89dO+TpP+UkVUeSFpX4QZxfGP1V43mWAD6BRF9DMriV5QeD9YJO/e+gYBFMcs/ +gE3r5Fc8gbN3/Cd4qKz7+LMp74o2vHAKSZazXR1eV400GUlfVQFExeyCyL6hSV21 +dWtsdvYz20vCyFNK7tkCQQDZ5aa3bCyTV1/KZuZrfKmb/coI5gXpVFW9hl6BiNg5 +BaYe7PuEHuT78YrqLej/MiAzqiU4QpZkkedYZHx05XsVAkEA1X5YIXRuk0odqPgm +caeOe7Uealolc9tPhc4qH16A8nkzcmuYFZ/584gZU50gRKG8PNO5fEtawhEa5X9p +YLwRFwJAMacJRIbb6X9hjqfAHgI8TBWa8kgoVLEpEJUL+AyM6QGGh0mNTuATYe36 +r75id7Sebed5r8ZMqwIsa5IKYkDguQJAQrS4WrOjfRfyToJCmM5uwY5k03wZKasD +nN4+4RBJH/norj6aBV+33HTQ3QRCOc+DHkpVMVXmJK7thXma9mOsvwJBAMWlj1Mh +mLnIp9qeKYgiMkgceIUwjIcFEjtgdo+JdcouRbiuGJIrX2J4ywuYiNj7ElbXkJrm +27TiftM8hnG/1nM= +-----END PRIVATE KEY----- diff --git a/test/expired-ca/req_conf.cnf b/test/expired-ca/req_conf.cnf index 23b0504..1b14bee 100644 --- a/test/expired-ca/req_conf.cnf +++ b/test/expired-ca/req_conf.cnf @@ -59,6 +59,8 @@ basicConstraints = CA:TRUE [ ca_server ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" @@ -66,35 +68,45 @@ nsComment = "OpenSSL Generated Server Certificate" # nsCertType = objsign [ ca_altname ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" subjectAltName = DNS:*.hoo.org,DNS:joo.haa.org,IP:123.124.220.1,DNS:g*a.e*.com [ ca_altname2 ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" subjectAltName = $ENV::DNS_HOSTNAME [ ca_altname3 ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" subjectAltName = email:john.doe@foo.bar [ ca_client ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # For normal client use this is typical nsCertType = client, email nsComment = "OpenSSL Generated Client Certificate" [ ca_clientserver ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # For normal client use this is typical nsCertType = server, client, email nsComment = "OpenSSL Generated Client Server Certificate" [ ca_fclient ] -# This is typical in keyUsage for a client certificate. +# Test cert without flags. basicConstraints = CA:false keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment nsComment = "OpenSSL Generated Client Certificate with key usage" diff --git a/test/fake-ca/fake.cert b/test/fake-ca/fake.cert index f779733..87b2fbf 100644 --- a/test/fake-ca/fake.cert +++ b/test/fake-ca/fake.cert @@ -1,19 +1,19 @@ -----BEGIN CERTIFICATE----- -MIIDAjCCAmugAwIBAgIJAJ47rLNvvXxtMA0GCSqGSIb3DQEBBQUAMFoxCzAJBgNV +MIIDAjCCAmugAwIBAgIJAPgDH6mOySl4MA0GCSqGSIb3DQEBBQUAMFoxCzAJBgNV BAYTAlVHMQ8wDQYDVQQHEwZUcm9waWMxDzANBgNVBAoTBlV0b3BpYTETMBEGA1UE -CxMKUmVsYXhhdGlvbjEUMBIGA1UEAxMLdGhlIGZha2UgQ0EwHhcNMTAxMjE2MTcy -MzA5WhcNMzgwNTAzMTcyMzA5WjBaMQswCQYDVQQGEwJVRzEPMA0GA1UEBxMGVHJv +CxMKUmVsYXhhdGlvbjEUMBIGA1UEAxMLdGhlIGZha2UgQ0EwHhcNMTIwMTMwMTIx +ODQ5WhcNMjUxMDA4MTIxODQ5WjBaMQswCQYDVQQGEwJVRzEPMA0GA1UEBxMGVHJv cGljMQ8wDQYDVQQKEwZVdG9waWExEzARBgNVBAsTClJlbGF4YXRpb24xFDASBgNV -BAMTC3RoZSBmYWtlIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDp5shV -W7TJt1k69urRkk1MBD5CEOhgJvCh0PNKQVkF8KjnAqkRDUywUukU0+SIQz/NNYFX -ATC8t3AFUH2sbvEogcpCPTm1D+SQznEYw5G6TO0cPGG085yOWTSdpXI1z3sGBhTs -WMVNYF14gmgNik6vgKAth/tSS3MSLAon086i7wIDAQABo4HPMIHMMAwGA1UdEwQF -MAMBAf8wHQYDVR0OBBYEFJMbyYcSo6yXJUmr8dlyMAkpkY2nMIGMBgNVHSMEgYQw -gYGAFJMbyYcSo6yXJUmr8dlyMAkpkY2noV6kXDBaMQswCQYDVQQGEwJVRzEPMA0G +BAMTC3RoZSBmYWtlIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCzlnBR +HSsApirUUdYCygHxFgDZMOBfdcj7cyzWaf/gXb+vgzmdAAezXq96xTN+CqDV7tLC +4MHz420kmymbIzl8Dr0ik8VfeSBl0w5v1Xuyk161pEG1BvBPKk4YLazM7rvVeTcL +GEwQak4F7X4uCtKHascutlH6ZwYk3/a8/bRsnwIDAQABo4HPMIHMMAwGA1UdEwQF +MAMBAf8wHQYDVR0OBBYEFB533RdbipSQkkglGN+ZZRE81WwwMIGMBgNVHSMEgYQw +gYGAFB533RdbipSQkkglGN+ZZRE81WwwoV6kXDBaMQswCQYDVQQGEwJVRzEPMA0G A1UEBxMGVHJvcGljMQ8wDQYDVQQKEwZVdG9waWExEzARBgNVBAsTClJlbGF4YXRp -b24xFDASBgNVBAMTC3RoZSBmYWtlIENBggkAnjuss2+9fG0wDgYDVR0PAQH/BAQD -AgEGMA0GCSqGSIb3DQEBBQUAA4GBAHUG2f9J6MkrzC801Zw6OpasF40i9mSQmEqi -lRU0HeV1Aq21giZ0OSdxgfl1abd2jg/FPZmtakowBWdBbs0woRkBlpGr0HRIDSwk -ajiISVBmWL9KAejQc1e/8QrNOZwTd0NqWLknjw0ecQg6w2YiwzmupcnDOQIDfD02 -A2hHpJQV +b24xFDASBgNVBAMTC3RoZSBmYWtlIENBggkA+AMfqY7JKXgwDgYDVR0PAQH/BAQD +AgEGMA0GCSqGSIb3DQEBBQUAA4GBAG+oJY5ErX0UyYdfbfqV/i1rvYLjYeZj5xih +uLYI6WcMMKBvGZRn83EgpXVdA0kCvoJXaDjsfCuLhf81j8cP+cu1c4l7q9qO4qql +W0fkeZ/AeP9YbC8vB849JRlUhmCkW1GavRd835MHAT5yTxO33Qrh1ImiFHI4Jzgx +4XJm/E8b -----END CERTIFICATE----- diff --git a/test/fake-ca/fake.p12 b/test/fake-ca/fake.p12 index d6a3c3ef9e46853eec8515aafb630f66151df91c..da7b2cd77dfe78478778c0a3846a2bd911fe6472 100644 GIT binary patch delta 1658 zcmV-=28H?k4gC#}U4KVFCeTCwF!}-l2mpYB17MFz6EZL!z!S#(5>rvTNjO8DYT?Gc zXUu36du{*tkQv~!C9xd6+$>Xa-`+vd8~E3ZHjOiCn3XLl^P+?H#XeCI(<(qzP6I&6 zXMsvlZUtN0)MU9YA5?S|a2zX3LJGQKih7 zQLe^aZH};Vn{6{n55MkhDqX{UNKx&HB1Imj(h3Oy`TyddO!#umMmSb+R-r7w@cLhp~OWilG ze0cLT?{rFb&1uLg9$oWDNSU+uM=nHo@j-UUvyT@S+kbUn{uH?^v~5FY&$@-h@vmDS zH{iZADr~3CbSHY_zz7Tf0oJ3=Q&=TbC>D3^muQB>F*m!>YPMcY>E62zXbN@enR9i7 zr865F$751cpbl-VZ~bVf)0>+83675RxEWO)KtBc((>({rPlUvx$$B5!jY0r@D3Ua|1lkq4xESnd|clCX?mHE*e2f_2{l)|0_jk|ZgFoFX41_>&LNR!qBJ%3nD{2vPFO}YXC2ml0v0)V7|@lL6H zwGL3&>cjF=po(^p(&E3#`$>27S_B8`Qb5m)%2WbrXf>@MHZu7DHV+;^A3CM$zWNo? z{KfhN$lvH5?U52W2?rm}3^9eG|H7dg+HVGF{n$^QN!?;M?bM0;t~36_{Z(qyY4txB zdVgvC6B(R6xt26k>e`A>?@`)y^X>*wP0ZdpZbY|A(y`rbP8 z8u*r|8)x;@u5+@5(1!|))pNv=kbfGDc141z9G^I&v(7q~O#}||fMELbGoUEJ=ecQG z-<5+i#c#;8-9f5Tp7|lkGNLs~S_{CL3x6;6<%2tByXfolCn9K`dhea5cBtoGL@*1M zAY614!Fs4+GZn(AbM3-eiIL&e@Ir|A{(l&$SWwq)7-}8P{-s0R9M&3)iF*u^xf@V} z_!Rcq<^KTKx~Bb9|1eG(J;6LKl&Zevn$t}Hs~UGs3_ADjru2^LeD)-=RaeQA7rq2E_`MimfId*HMFP9_0ZNV8&EjpJ9?l}Q5^ z6Z`J6?)AT{6VsniOqd6o{LTkSI;R?{kd3A)<3x?T(2fudHviAEUDhdtigTun3c^ zN*+H^>}HB-(SVijfR?k**EmOG!ha}OUW5~bU%9{gb;V9#&Q?y620{=2i1)_s$0K{S z6D-x|_bWeyFgWMYdABs=BN#N%Khn?0*w^<7NtOe#R%S55og6-Q&AR^yl=Eab5|#MT z8Q;c1#SV>$E6^fF=Wy%SO^>976A2=iiUM7Xw#m;pUia&+2*@USa_fW5j&CnMq3si` zucGkrFY0=uYze+;brat)B`_lf2`Yw2hW8Bt2^BFG1Qc#e-kW4rB2%GO+?FT8rtVqZ zhhi`>Fd;Ar1_dh)0|FWa00b0OtBf6~#l>`78=RuO6bzKBCPc#o2#l*-A3FUWw*mqP E0ArpXPyhe` delta 1658 zcmV-=28H?k4gC#}U4MaoFmh$$vpoU=2mpYB17Ju9lOo*LQz;>3Ng*s!Spw@ZDI5l!w(rI1QXVJryhZhhDtU-sI;%e9tNI zl<$I0#o{UjXsbSR`C*Fh?&BJi7!ciY%hMpadd!;XqJR0Fmvf{R4Y>e{$?$i`evhOj z_`AeO6JmCo`(${7)*?VvxKc{-_UjyiB=6QBc*%WTnJY;BGVY(4ce}ZB@o`=)Z9jq* zR+2!iugDItu{y8oa;BVYaa`I&OWsC}+{e!Gl8~25H37p171#lVCS`Pm2Y8BZ0wm@8GOg`LF*5IVV@ z5%n@yvI7YPfp_Zlc8Alqu^|7ucp4NhN-?VUuYUm%s#9pmEK!W5F+No(J6c#K71D8r z$mp)KN$*)0XYF6;6Dazzd}%IfD3D!d?N%-*dTl23aOp1GC6qG<;`XCBiL9^al|^i7 zsJ4YR3~4s91;g;R|CAzN{J3;)xIB&>r?uYFLgT;GXiD=pvt{Qs#!(S2aVFeh7RMwe zI)6hKyDR;qm&ztr_s4fSoXmi%hky3EPLdEc2Q^K;B!M1dD*JitRhe1Wk47|NbC`;% z?-|i?xm7XcaX^J`A{V~wPtKO${vQL<$!}s}*?=%gogMw_pOK%qqzkzZkJWGtyCNto zT5p2^s-#Ex8w@h(a%S3QFoFX41_>&LNR!qBJ%0)lu1AJfehLBt2ml0v0)X5`5Gp8+ zr~&|1sScn@lGe<+JuXn-Rov8@+jZ2!Dm}OE&2Xlj6yqb@pGeNuB&;LlZtUv0`OOEsolF|^%@$Ic;u2J~ zjjiAR5=G_0?{W11yT_UqXCy(le8;1bP8hv`qa>j!gf`&|`QyLZ-ui+>^?swu>OU+j zb;d-<2T(<72#_J}NNBM75wOG# z1L*aAk+FV7i6EKukC3mlSYGcv$b3)oTw%DX@sI~innoS;l_SMs$Owiex+h-qp?_V) z=m|4;$Hj=UYsSy00rIoy^kM~MI;V`qyM)um#)VwSX1mnI0kv>I_AknXx!L9X%UO(W z?=X4|^oml9?wV%Pz;mHzGWoF4R{dsmz!j5J`a;9|8CRvuEaE-~#W`8hYMb^K0IQGn-mtwOtYsq;QIb=L}K+uYd)K#Dj zBKGx2K$P4Bx5huV_@s^>J1_a?GZr2A;%z@f1!htb|DRY5^Ahvp>(^~^id*<5D(9Sr zg7mXq6-^-~6_0<0Ibpr*(cfJ3m^-cQ*}z$Kx$3?Ku1pC4+(l{`^gq13PH&7)Vvj5| z%l%8Q^0B-9fLKd<=(mC~B`_lf2`Yw2hW8Bt2^BFG1Qg}VBLZe`*&ce0%0*)0fxMWn zV6-qXFd;Ar1_dh)0|FWa00b1yM%W*0;I{l0{f`3#2vL8>oOQ5TWT E03By2)&Kwi diff --git a/test/fake-ca/fake.priv b/test/fake-ca/fake.priv index 0adf012..3a71a0a 100644 --- a/test/fake-ca/fake.priv +++ b/test/fake-ca/fake.priv @@ -1,15 +1,16 @@ ------BEGIN RSA PRIVATE KEY----- -MIICXAIBAAKBgQDp5shVW7TJt1k69urRkk1MBD5CEOhgJvCh0PNKQVkF8KjnAqkR -DUywUukU0+SIQz/NNYFXATC8t3AFUH2sbvEogcpCPTm1D+SQznEYw5G6TO0cPGG0 -85yOWTSdpXI1z3sGBhTsWMVNYF14gmgNik6vgKAth/tSS3MSLAon086i7wIDAQAB -AoGAdFXIxku6e6mpw94TpPCzaV+i55EpQsmbXaBjoUcnVAECwQNdu5F11y0lqKpL -PErWbOZz0iZRa0uBd+M03pK/dobLuKM4uPx+6XqKyGjzP3TFWj8n8S3v3Vf7YLPn -RI00IkZklPmA6Zwq86woDCouHIQq+4uq1z+eX2UNQJ8iLyECQQD2C4JcfhwN22Y0 -IqmwXCXsy/WkGjCKpaW0V5UPlKe7wz7jyWdp4xmdZd3KyNrl/6nwGwnuQAfsXdO6 -Zs0Posm1AkEA811+UsIZVAeMeuu8i9heT3EcAQfmQK6xCnQaNv4g8B6STkDf5PER -gsg7YUvB4FMdrFuMSRosCWbeGVNj98OQkwJBAIfrm7xUvlK5XSB39Z3Dif/iPHTH -MwGkuIGD0Iim6nJDTb6wSDyqhD/7QicABk0Ai3Rku3uuS7I7svdKSwXUO/ECQAbo -LGGk6Jsd67rBXgSKC4MtrqHI25wSWSv2x5ev9rdZ5sUZykDxJpITpLvKLqJzOXBe -2MhqWb2akcseNsQdZMkCQHQHid1TRCxukOIyrrM+iXrHkDolt2A2xnJMCFuzqHSI -o0MEcNJEuQ/wT41tMYQrXjlkdHeL2coXhn1sh7qwCvU= ------END RSA PRIVATE KEY----- +-----BEGIN PRIVATE KEY----- +MIICdgIBADANBgkqhkiG9w0BAQEFAASCAmAwggJcAgEAAoGBALOWcFEdKwCmKtRR +1gLKAfEWANkw4F91yPtzLNZp/+Bdv6+DOZ0AB7Ner3rFM34KoNXu0sLgwfPjbSSb +KZsjOXwOvSKTxV95IGXTDm/Ve7KTXrWkQbUG8E8qThgtrMzuu9V5NwsYTBBqTgXt +fi4K0odqxy62UfpnBiTf9rz9tGyfAgMBAAECgYAo4yJ1RUfKIQr1RiCMiAODKThO +OrOK6F026pUVyBJquc1vn1fZp+0Y6IDZWdaMZs0RiAtSNSvTZD8wK2eAm7d1Zhay +Z7DEKKFzjd+n/yOXebQ3WZFFwmSSldUdgL+jmsPUAeDKycCGEOpf0EBDrGL7+/U4 +ntV7K6Qpk1AhEDmvcQJBAO4DjgO2jkOKSKMialU0f4aftVVU7ykfG9VdfSVRzvo8 +CnI93jVXeoh+lh7jNIfWHBG/n/6cnARqaywZOjSMCKkCQQDBKJy0pqAMMXNYHgTw +PBr9labfV5HeiDcDe8KvUz+FtXbTWe32Xy9pq1NrKXKp1dxyqJm/poK4v358THng +DLAHAkEAkeFL4aq6d1sCOjqVwbNzlie9FJgCHcobXSL32S/TFDxIisywrTD4wUAU +8sl/IOJyQc6ZWYzTc0FmfpjXu+04QQJAJGV/qbaf/8wtnNQDQDVDLLdPO1Rn4xOt +shVW6Ox50rsPyeFvKnZjG7kxvcaQmZn3sQ898VPx29gRgGB0spgRbwJAfc6wCeY2 +YFHodO/zf5U5fogiPh6nRw4TUfTBBodRQ4W6QnT4R09rNxvVAT6gtvLCM8a5P514 +MP4ptCGeGD+jXA== +-----END PRIVATE KEY----- diff --git a/test/fake-ca/req_conf.cnf b/test/fake-ca/req_conf.cnf index 597cd4f..0171680 100644 --- a/test/fake-ca/req_conf.cnf +++ b/test/fake-ca/req_conf.cnf @@ -59,6 +59,8 @@ basicConstraints = CA:TRUE [ ca_server ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" @@ -66,35 +68,45 @@ nsComment = "OpenSSL Generated Server Certificate" # nsCertType = objsign [ ca_altname ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" subjectAltName = DNS:*.hoo.org,DNS:joo.haa.org,IP:123.124.220.1,DNS:g*a.e*.com [ ca_altname2 ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" subjectAltName = $ENV::DNS_HOSTNAME [ ca_altname3 ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" subjectAltName = email:john.doe@foo.bar [ ca_client ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # For normal client use this is typical nsCertType = client, email nsComment = "OpenSSL Generated Client Certificate" [ ca_clientserver ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # For normal client use this is typical nsCertType = server, client, email nsComment = "OpenSSL Generated Client Server Certificate" [ ca_fclient ] -# This is typical in keyUsage for a client certificate. +# Test cert without flags. basicConstraints = CA:false keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment nsComment = "OpenSSL Generated Client Certificate with key usage" diff --git a/test/nokeyusage-ca/nokeyusage.cert b/test/nokeyusage-ca/nokeyusage.cert index aefceff..23783ea 100644 --- a/test/nokeyusage-ca/nokeyusage.cert +++ b/test/nokeyusage-ca/nokeyusage.cert @@ -1,19 +1,19 @@ -----BEGIN CERTIFICATE----- -MIIDFDCCAn2gAwIBAgIJAPZ7YDhrX55SMA0GCSqGSIb3DQEBBQUAMGAxCzAJBgNV +MIIDFDCCAn2gAwIBAgIJALoXg5GbierPMA0GCSqGSIb3DQEBBQUAMGAxCzAJBgNV BAYTAlVHMQ8wDQYDVQQHEwZUcm9waWMxDzANBgNVBAoTBlV0b3BpYTETMBEGA1UE -CxMKUmVsYXhhdGlvbjEaMBgGA1UEAxMRdGhlIG5va2V5dXNhZ2UgQ0EwHhcNMTAx -MjE2MTcyMzEzWhcNMzgwNTAzMTcyMzEzWjBgMQswCQYDVQQGEwJVRzEPMA0GA1UE +CxMKUmVsYXhhdGlvbjEaMBgGA1UEAxMRdGhlIG5va2V5dXNhZ2UgQ0EwHhcNMTIw +MTMwMTIxODU4WhcNMjUxMDA4MTIxODU4WjBgMQswCQYDVQQGEwJVRzEPMA0GA1UE BxMGVHJvcGljMQ8wDQYDVQQKEwZVdG9waWExEzARBgNVBAsTClJlbGF4YXRpb24x GjAYBgNVBAMTEXRoZSBub2tleXVzYWdlIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GN -ADCBiQKBgQDx5Sz93RLCLWRTfRtPmqCzRFvFVp3c+c85paLf4t2Bei/qpu60ptzl -oizAlcKfExOKJ059FTIMIewVEWwcv7JShiB+v2ckFcLTmX2uB+T3ntEJP2T2sTBQ -SvGOopjfbOCn1RjskvSofCW5yu47F+pdCWA+XBeUwsE3QFmzRUejLwIDAQABo4HV -MIHSMAwGA1UdEwQFMAMBAf8wHQYDVR0OBBYEFBBaxa2WNA6NT+7Yh/JWOHWbuDO9 -MIGSBgNVHSMEgYowgYeAFBBaxa2WNA6NT+7Yh/JWOHWbuDO9oWSkYjBgMQswCQYD +ADCBiQKBgQC5ly9mLQi2a+oSMMKtjXSuBuhplOZ4I96GdoXsmfhfST1kL8nUtT6I +4yxL/gBP6sCEYA4dE9Cfkh2GyjxZ8Med5gvRwiDSCoDBV5aW6f5EHFfKPCwQLw4c +6sW5/o005dRG/rT6UmDnZ92hgwgMHBFBYH65oooS38bJMCdCpGzAtQIDAQABo4HV +MIHSMAwGA1UdEwQFMAMBAf8wHQYDVR0OBBYEFGQBn04SrTlLH+zvAyiMarUaAuNa +MIGSBgNVHSMEgYowgYeAFGQBn04SrTlLH+zvAyiMarUaAuNaoWSkYjBgMQswCQYD VQQGEwJVRzEPMA0GA1UEBxMGVHJvcGljMQ8wDQYDVQQKEwZVdG9waWExEzARBgNV -BAsTClJlbGF4YXRpb24xGjAYBgNVBAMTEXRoZSBub2tleXVzYWdlIENBggkA9ntg -OGtfnlIwDgYDVR0PAQH/BAQDAgECMA0GCSqGSIb3DQEBBQUAA4GBAMvhCDIdYcDW -WgWc/S/k7+sEzbA3eASrPR524l/tUwby+VFtDNhzo52jBAB4BXCOeyu3QdckQ5Y4 -AmiJTJ74HUBDVpFsKwVNEgClgJyC8so4FDblPqmuI2vVuH87zUKd467kR8jXU46G -yo/qd5Pjqh+Zm7qQWdTlElovq5qlAB1d +BAsTClJlbGF4YXRpb24xGjAYBgNVBAMTEXRoZSBub2tleXVzYWdlIENBggkAuheD +kZuJ6s8wDgYDVR0PAQH/BAQDAgECMA0GCSqGSIb3DQEBBQUAA4GBAJs6bi2psC4l +ejxqL3h8CdsrOQFJGF5TueGrHm1fb32ML7FzjIW6q6I2A4RrF0J56QCKOIm+yeja +8VR1JwqGy3kUrUJAUIXWC5MO74cEj9Xc+RSWHJr7LnCXmiXD1XkPjObOO6ufxRan +eyVKQiJroBnV5Sdo/1LTgfKnHKoYxijQ -----END CERTIFICATE----- diff --git a/test/nokeyusage-ca/nokeyusage.p12 b/test/nokeyusage-ca/nokeyusage.p12 index 9e0bf165ef0babfa30b6b26da07427913023d6f4..2123e7b2087e9388577a84899e9235c3e5336583 100644 GIT binary patch delta 1674 zcmV;526g$B4wVj&U4NSzA_oi+Tzmoo2mpYB19(#&-0NHhb_=xMC1%^6nuamUPL_^a z%I)4T_PD~1nYYGAZ$b0}X3qy5iVbBZ0$vot`KX?|%qUKF;X} zZne6ff3%pC(tneg>9CRBvyf|lSl5l#s=OyL^Zsb4Cnd-Qgbwto^a-|SHB&Tq)pe*P zXD4C{rI$PEHLK`%`mXFWU-X|zWobrv(^^f1BJE-c*2}cX)l+ysRSO5gvq(p+1$})i zN<6qSu5GoO?ePiXWKeqY_)h0%{;g;;#o!C_cqfch&ws#zIA{2c$S`{&2gyd{WbZP{ z|8&1G^_>DTZkm=rKxMQQ^)FX&#e1_)Q){DfPGEFoxz~4EKO&iD4?{}``XrO5N3=td zQ)wuVFDS@y%?%F(Tl%Ne+)+ndcKrV|$l?04@yGFRG1?)BxKQw@*-}UzeeqG4QjV6V zl*7wDfPdxIzA#0-(N~2uq^N zm9xk;Vp0t<*LI$hT%B?I-L~j)*!eI+7e3NVL}6c&6~|dBUO0YDvEzugobGogOfhh) zTp#T69L;)dRH@7}D5h`(@~KHxa)l7>JL)dg0Drcq!4O}q?bZw_*cm%BuQr&e03AQE z1;Mh6FdiGg!H)lp?nRqMOxs*51^bZ3!;pM4YaKbyEXz%s#efUUEtC`WcT)DgmhlyJ zePwXKl?qJ?bS0TbGo6K(FEF46B60t3FsL$NL6P|7^N-7#nhLnhopugr3Wb-IA#8Ij z(0|4~$j>VOsyVY?(QQ<%8U1=BaEbR_SYO6QXCt1wKOx&~^0q-#JsmV*qO1vRt^*;r> zZZ-JV62(tq-&HaofILt{pMP?Fhv=qrQ$xGs18KLy3Um167`vRyb6*4M(b2lqSE&{J zJ&P3lO%EPWlaWX`Ggj-lOt*2N>;)7E`C-+wl${IM?pYpbwg z0<)aiqcxpF&JzAE_M8|-UAydHmni1cnpe|d`v%X`SX1rQ8%%k(uzzdU(o z(!^zdeqH|LlB0+_dc;syp)z~yb64zTf`Dyeld%)Ifbv8V^{w7pt+# zf9^(;=k*seP_UUANV&0Sz}EE3I<-;DQ-f@#A-qk+a5i;9Q8zhm-4G*CYpiOYGq)p5 zX^|@A%M#-1@q*ePAH;XQ92M0`_d{ufk9Q47L$sez23ycV#z!j0_x{l=B39 U?qmA|2&vy@T&KhRWdZ^S03=5#t^fc4 delta 1674 zcmV;526g$B4wVj&U4QT$H?In^>H7i#2mpYB19&dK>w{Bnc9l2jx}HQnzVSY>-NR}> z?^`10%#&fe#2%w$lu@@c=4P%!l1B3|jPhsh(Bz>&hR4CMhkYk?rY+8rVt#%}Sf^)U zd04!5EQ3JW%ZatDJQbO1B^s?99V9CjN81WJM zd~;4-?A;{}%gEB5^K65Oi&K-ukjMR(x!7}aO~C|Ss&eFn!Y)re23~k@9Wh<&c^MJo ztMXO7Qt@|;w9Pf69TC~B7Jn|Wy_d>v!V-lAB{IDB2Tf)}%l=*XLoxV@-q~LFSUho& zixVh!CQ&*8-h0LKrSxtBH|YA=0_ z6b`j;T@T1`JZ=8@O#o1VZ+OpxBlq<;l^u%Ts05@M``3M!z)s8gQHDUjFV>?U0DbJ{ z`5gYEi`*jcQp?`uK#{VQ62c)Ns72PuL@Pb$^(p7Hd{4E_;}oX&*_vtNr13tV3%)o` z*bZ|tM}Oh|na1brbN{-q|0s|8Gdr%8oMRm^VaYQEqt!zukQ#jtLx3#NQ10;Jz8M+5 zZz|59`XInsb#vy08UdGN524F2S|%>;HFwB|L;#i0^7tqBhP=li-w!}>WAu_^NuA8c zEnOis&~Tm(ktE1gnh>UiVZJ5o=FwR9bm%i9Uw=B&C^UOyX^p%*MhtxI`h>dYNMq~S z&&6*_d#qkW0LjC-zgk;6RzNY?Mo6Ncs)$Jap!#BLFf#_v>4qFp(^Gi{sL)#Wm_sAbseW{XJR-o&EMf z6umP_+rW@)q@K=A^Ysx=T7OSxn^LGGMdC4lf!VYP{vsQ+tmnCB2mmF3->&Gjl`Aq2 zSDoIhtLVuQShDNk5GE|)PkM+3fN=2)m>9CsWrdj7ohR1Bbo;F(vYy?jB;sGvc%5uW z^Tgj(2!dRc-KIo;RJ?ZU<3>hXq3(?{CbM5oi%Qo1p)y!C_ZtSIO@AI!0Sf?HC^BI) z-57ngZc!`bpfgSZGk%jn3j?AA24nF>!9=SeHgS!v)xK(gtMMe=99%S>^d|TIlUQ?q zbQ=o3GiuM;KA|ifbynSyRPhAoS469*S+KgldK>Vp?WwjJyU5mWPzA(O!XBiYe}vhQ zn?9T}F2(*T4kKQGuzw5$a1F1ob@+bJ?a<#Bbv`3FZ*~F!@n6N7^DmmM8^Oh`MzMjf zGvy_n-t~7Rg34B)p_sZOPl$L}0-P8dWXY(S+zl@QQa21u%3(lJ5e(9D;ySdSiuyOq zWkl;6G92`i-K96y4>nin5AU83`K2IwY6JTlrl7EWf@ns@yIh*L(OBqGb zwdJVSbXabI*#%+n1n}|ywlU%ziOJM$oxM6s-4rf4u!FZem&a+hJ|*+vE6xC%gUR|G zqp;S(cN^!`v+N$09u8N};(6G|zM3fosQ&NX7P9Dln5w}VgRDXbqDZ}5SLoR}wOLv* zUZ*RJP1}+r?Qd$srfws(%ej{aW#E4NF~0d!_)6KHo6(y|lJx24`2YOdq>fBEYyO`rG2*0@ z7N!QSksg-bJ~z<1q3NIu6GY^;No`_m`x$AMYS(#+Z?jBtvwt&T6pam6~>xA1qn2Y+K2QlG!U>_G&SX`PWdEn@*Fn55y38>;BDB#dJNggU#Xtx)d zXrXx0iS00$rtqv2P$sDJ`Dj2Zjkpn4nYsAyrl3=&4<#9E%7O#Dca4^t1&?rkwR>_@1C5{I6ro(_6!k)Lk>yX-wO&D2$%Sb~g<; z;hV>13*+XCz8V1K1*HmL43s}Q9Omq z8OzAxI4=pWYU~)&>UPbX%E~gQ(;O1 z%YW>mu5E3OOH!v9=D258TnqJ^mI;Nf;w=unNPp$;WFzctVZ?ur^FhgwLQ?guUB$6> z%C@R-qvE;}Ci<-U8Yv>Y4Qf45xB133MkZI)>Q4>x0)%n!ZE~6QHG9(Bs9+$?=9`yk zO4n!hhWQM#KB{ayL_`RhFoFX41_>&LNR!qBJ%0nNsup;EJ81#}2ml0v0)W$t{#l)l z2M^%r?Le7Nw?e5ZC0A(wLu|YMgGDC6y7w6x1T#ztqaPcR`jqf)UW?@`1i>gP&u{iU z0MqTyZh6-!F8&np%gjXf zi+@JTf7kE8@%S@Br3oy3(lnt^Aen8@Sq5beFJ98miG-Jz3XI!Mn**>Q^9z zC&7SU)*~>UhRYujHbM=(NHorMR^LFJ35OFS)Ms{-~{A z*K}0LuOuXa#TeYtYN_s}O({e&$Oda~4u2sFEYc1yynMQ{5FJ@cfR+l*Ps*vxX5Qgj zc^fDAWsG8!2lZhC0Wzgh@AcyQ7}fb+yW^mz7rg=^2OHGuULSUbup%%_LCB<|>VQ}Q z7Cyn0qVT_9^?WT-kI}#Ht&nIUmW=yq_QMzEkd?Qk6n(WNp1_8J(yR#ycVNq#E`N`W zV#sI00j%e9S*bcl?#8?LwSHjljIMw^__9HwQp+B}+)ax#Qk-dasd%PYcS=`~f4jwz zZ`fuK5o|Nf#X?ymogoyDf4S`{*$%t%+&cPCTCxpIJ&{sGmb?GQ+C#sv9zHmt93J0J zQqI-^Gh^TkO#MLx5_J0AbRnv3iGSpitY174!j1=9hwkfBymZ-Wm!IS|R{4#>9jXHl zp`!0~ns}$quYVBn+f>6@f?%>&-(xyD3+fuC4^+NYG2#3&FVT^`3&9GVJ=&rF>!VjL zp=w?bQJlP=yY>_kud7?^aFG*@7`)H1#?74&ba*=rO3iiS>v6_|9JHQ)hHqt?=KhTe ziy+`JH}kcUvraQf(#HugB`_lf2`Yw2hW8Bt2^BFG1QfBTfdlLp_uiXvHRxjxx}XyP zwlpv?Fd;Ar1_dh)0|FWa00a~On999FNgPsk7JtM=Cbp=+ABxNb2oXoCqwlcqivj`& E0D*2K5C8xG delta 1658 zcmV-=28H?k4gC#}U4QWhzRiP!>MQ~R2mpYB17Os#(kibl7?G-G&ab~;zPx)=Vgg*E zFI1@OO5v zidBHyDy}2AeSb=<%X)jZi#r`YG;-!~)Ah;2Q9o^<9fM#SCAuvz*)2h%Rhr6d-P=WC#G}an!X#QWopK^mx49#!*S94Bp7_OQgr0$a2g`6WW5v4+h5o5 zR$o*fk6aTc`jK#M7n61Ok~=-1zbqzFpqbv)fZXTL@uLltqdgLN zX2M9&+JB*)hl!SQc~M3>C5>bs%0I6LuLIcf*VKEyPdh&gfbrP7EL## zg!}!=>)KBM&f)welZo@|SMC&tEt0f(`2b?uA6iB27(j6*sru{XJddv85xGssd^=@q z1!haw+#Ucp!KsNAXCa1K!F8eACC`>N)jD7?7_)$jq(NF-@&|-z?j9UzK#S{l2gZ7% zihs{WCbQomPUi&H;m**T{jg*d&56TV4-Dx}sZ+infBPV_q#Ddo(_+Yf+3tNG6s+si zo91GR^C1?Lw$UgeY*-3{nAC*yRDzI$i1C9}<|#C>I6MvB&wIsL8G*0OxrfgK*tZTU z!s@h+5mgRKwk4tqF)`V?FoFX41_>&LNR!qBJ%4-`%0N^(0;mE42ml0v0)R|wlJQQ6 zjs|Qq7K2)hQA}OGmOoTO`272Gg(5#aH1qOL#xn2_QjijYY}SJZCiJtp4?|X=_&Q%n zgbA??n~M$s+dLy3AVng@-wen_|B3%HSz5GRa8@-S>J|b9!zzxZDWt74aw5$sIuoG} zcz+zz0Pu?26C0&RHJgztv0&9@&_@#%K`6ZMQHE10!Vv(Kx+ea_FP^5kiD>(2Be6$9 zrZ60OP9yFSJVbFSW)FYSMvvpUnUR6P;v1%~-l$chMY&3J3QW+L!#oHkh*;pxfxhK2 z;J3s@tP@2+rP3p)-!L^+vMBlAkjMhNJb#VLRmU0gnqMMsqhRYBl4D2JOu+6S1P8z? zd)Z|7ZTQ;xhz>C>gvMn8P9^`t8#csyBC#3Zx`qO;#+e*q0CYaHuk)iPN*{%3L)shvIUq{t*X$Y{G&e4uh`0h9WLN_O#Yc~LD_&KF4f+?#8fR}yD} z^wvt?fW!7hRTn(KgJHmRO6Q}0{gEDXiRTD#A>=pKMmRL;r^|Y*cZ)DfDGJyv1n2c) zRrCpXv}JMJ_`3BI%GI4!Ob!2kgn!|A#jRkl)Wv0=teYSjzk`tIlCB{<#-kmWrewoe z%=sJLOEkGQA*k_>I0xx8!(9_qE+mnU;Jz1jj zfwc4g75nv~Z;Z(hA>Prp`00EXc-x*PYi z!e2D31i%+;mN)Zf^qwRm&YgTZRAf1hlx8aH`;gYOjy?UHbtS6AF6E2F_Z%Xw9>vKFl+a&Qmqobxgn##jdBGJ{5;SWy+U z3e8cabWPp$U1to#?$H!4p)1%*i1ZQ)KPk|pKrk_88X2gsVR+M}XBa|bMg|L-JMJQ&OES)K_0 zM5g)>LH714`F{;(JzNmRRe<{5can#N(AC|7k8pM?pvnkWh4zoXfYssk1tz@(`TimQ zQH!o{rLUT}rmtedFc{?QzS88Rk;&@q(Tr7ZLnl$4nI&_3-*0`gSvO4cHJy9$!G`5j zp|8)QH&X3Tov>~(VScjlc#4J5<0XL1>mFZ}H(qgrGgzbA|rBj7!k0+=5_r)a$h z&3M+PUKEA~?>8v}Qe*oLS>z<0*;IN~;uBiRB+TB+o2#pUvt99vaT3 zvE+^Jgvg4>KTf~d16{)cvNxQGi=N{LUJ_)5Q>ZBwP8M6p!aVSclZf@R9scNfH+RhA z@qa;g_l$a-M;@^|v8rjj3Rt29WeLHliw~Gk8ed}W{8*-{HXW5F={_BKp57z~>vMuv zrV z9h@t#CAn-Z9?er2l9s0c6Y+|T0tr^^R#y+AhSbgzg>A2Lekp400QI6)qXY;U>5TZ1 zRJmCWPl&~ayJ5M#Kt97uEX@knEX5LO{1kd4j+|BlXBAn@ofHi2zHAUkFyr#lvQ!&A z6ieexg{$i8#FH%qMt_(FU!ciY5Z?j<2ml0v0)S9u*37`hv(Jy9msh;LYEd-|c_TK{ zh>GKn9gf|xD62(8;7ba6tAD{{*8Dgp2VzOenu-mgJ0S=o?g*~ygd}Vy$+RBm2WWD86Vt@$2k$r))5uIsU8_MG zH~=-4v{vjt*fPcZrOGws>@J5xbc1C-tK;^#QI^2RpZDkaV*^;LKs}(Gz$W0uBiSd^UIPaXq=|wG$zH&0_U5uMuYS7O} z@77zIoCK=*8NZrPWfvqrQRZOZZwIc)e8)_>7^HOr1g&N=9{x*;*3&pQ^y>SA~p##MjCwS7z)ZXxzszQe0T-6Gb zl(+eba_J`>cr3F%1ThJ}dENdazfu<-a{ehEjsdw`o1jXlEOFCM{ZURxQufL>ZW4{e zg;M~4zJGn!8aeZtG_xmPH^TBG9n5uF!yLxbI1IfM8+fp$k4Av4=P&pE^$wHA^t4J( z`t)~tCK#}1v)0y9Q%a0JzQ)FLnXCt<8 delta 1746 zcmV;@1}*vB4&4rrU4H<*5_M6GuG#_u2mpYB1Hj-`0$F_VWw}K13YQoLxpwRvZ_VsO zpSG&qxko?tnbLCtes@MlfVnG;N^L}6ik2?8t!6`WxBoq2GFS0Mq0C`fbX!$%cH7Yf z=_ok>Rbts5*IIYVVC2YX6q`rrJ}+A*>;jkW23BL?EO z6Di17+ZPNR-owa6s~sPAR1Tx&et zlPDvI=Md5!bS_tEPqs9D0w>{+Hq_TV6*fi<$=rQQZ1@G3s2^h>xXD(^O28>J#;aGi zH9i33BY!$Ua-BsrjH3B8c%8R~3*@A$bUm$n>G zyr*WfWcTB(Ccj&Rj|h$27wOpopD+W&KiON6_oY1Go+P)Qx3(gxRfp;IsYIP*|M0?RO< z=!H4w5T2Pqcu$guJ+NB^QtLg?25l~$JARW)xDvpjbMf6Gn5bKsy2ARj|JS{q;KY1x zOMf8-ncEK|qs$Q-$x2^9Nt?r{*QEX{kKApbYD?A@Nsaw;dqiPl@KJje1NgAQ1*Wix zGJAkkDfB({au6h7{7O2WQVlmV3gUR%*M!g1F-M%>Uii= zZ)eujImqzwG~IX%VCJiMWZwz=ULshacUL{fP75%)S*r_PW(&4b?ITJvGQ@`G*TLX5 zM|eWoY;*l4qqb8j~#qMt@~R2z%k=UPINh4lcv5{^XkO3V*Y~!>xM`TdvK78XO0)M(Erz%gEx><6cB|Y z`J#bm;G7jzicbG`Tck+~&Q$Z#%0NX4F4uVW;A=bf4wFz3=Vx+sM@uaOA}+E$W9+Mq zudK1`%KBIkYPVqPAHl?b4P6r@;J=g%!^RmnsA0O@n}1vmA1`e0YVz?$q3YE2JGuX)rl;gd{?0J3xc?f8G)4O&I%l&-Aj6|%G+_0`y9Hc71N zOB%NJ*)F`aSkXoJ185v_vtgVXj>3eLiMLu!ml(iv;U75?0zaq~Kk!r`K6U z1|nGoJbw{j2&dqey4t*#t-Om%i&5cPfz166=){p>MRW257v2;1fn}{;^D;K#e_UH$ z_*S=MDi@*8RQ<7i4%v`5skrTY1`DM&&~)WWPWQKY{mNz<*XPkkOBe-0KF+oCIA2c diff --git a/test/slash-ca/slash.priv b/test/slash-ca/slash.priv index deb68cd..b78324b 100644 --- a/test/slash-ca/slash.priv +++ b/test/slash-ca/slash.priv @@ -1,15 +1,16 @@ ------BEGIN RSA PRIVATE KEY----- -MIICXgIBAAKBgQDluI75hMEoE1TGyj7XTjElxLx9LKCj3QmkuNco7/nSVu3jXkEW -SUSptfNLQ+nnWZ4MlPtL0x21BqFZA5YGV/P8T/Q/oX8fTyFnLc2FTWAmujrbpQHP -knUaEO9CRiJjK7DuoWwsEjRClbRuB297zrTdQH9RFzJ8UbBt4bi0ckNp1QIDAQAB -AoGBAN9xbxBhAoh6lSFvI0TFd6SnAjg3KmF45KJmcFIPac4gY++ehGyrA7CXnHh/ -LIqtbsAKQYx1YxXrxxEQHeM5tcTEGyyQl3BN1hAnNviY0IQ95B2yrk3O7nkPpIuT -+id1QCouCQFto/gG3/Z8Yw4CQAkl/CvTDwL5U59+GgvH/bsBAkEA95k+EQ+GVFvS -I7xW0kSKjvPopyFwG8G6viBhNvGHhWTrXCnGsPSEcbKOkMH6G0c6NJ+FOHR3dgqc -JciB8vIddQJBAO2EBa98tcTLzpMWHzaRP6oPErTVpfyTKiC9LhU7XbAlQNN3jZnW -Ay/zZN0WBhvyZ/72MKQfTQoDa2KRxmVqruECQQDVgYZc7dc27Uri1+jCPqqApOEt -JY9n0AG5K3DJETN8ms691aRpOSDwbjmzqCGE3kHZ2OjnCr9swa9ugV1VYuR1AkBI -aCX/kIotO2B3UJglX3REGKJARJ18eTSvlFyXFmkCSOkRTnH5gten55BJIeys2mI/ -xLehYPVwZwh2nTAZPMOhAkEA1w0VCC4WP58r8V79BXXmAPwL9HgeOFmNYn89XO4+ -tyv3MA3BTaS4nYeAL1/QcRHURvuRV3Pl4TmFDeCwdov9Gg== ------END RSA PRIVATE KEY----- +-----BEGIN PRIVATE KEY----- +MIICdgIBADANBgkqhkiG9w0BAQEFAASCAmAwggJcAgEAAoGBAMfcR85mC9nqD1Z2 +usrVoIAYYPX25kUCV4f224Hc1PyqMlQw4+KfBtL0IxkI5pJItUVUq4V/blgTLZ/Y +YQJrXuTO0mz/odgDe+A2QKri1YZPAlzhgRdPPSKJFsvRR2KmavUyywvAW1v5dXEI +55qv4fD7TAsrCV34IYfBFOBfDOXRAgMBAAECgYB6zCrGc0a21qwj2QF+HPHnopL4 +rYHgRscXQCKw0MmAkOYpenyaQlGEDgL+n8xjdw8BkTtt49UdgnMW8nDwdp4vahML +UlYzmFjzuYtL5FzHSs+IghwinWAVJF0BsuVTTT39Gz7JNUCAuSCe0Qrw7O6e+Agi +BLGznV/BsKe3KRWsAQJBAPxAWdJfGBnQD5Ca9dS9jW5d4JNBgLYuRDnagCM4mpqm +l40lde26RHaCbnLoWlp78I4PqurqtDB8s6/aDISd55ECQQDK1J30INug1d6ucI4k +f/IqogkvZ1zpl1yra1QXcmjYHcoA/jNP5Oh7CcvETP3l2f1bs3ctS/v7kE/nVlTf ++npBAkEA3uA4vLB6yevUpM7V4AcvHFHj6BgbElykuX0+dGBB8dy50ONFZCuM7Czo +S6zSkForvElJmdCQLrsvxHNjVhVykQJAAP/pQ2HCE1nafhuZ574lsGYaC3zD7XbM +gx/FS1RKBf6nlzepgxRKvQiAU5hZi/92CzSoOrXsKQI+EpLPWkc+wQJAKsamGIeS +xpcdjc9KfBTeQTFGGRnfgKjAON8bzsEFCpWEu69ItWpQJPs7LUe7rr5Raq8KCoh/ +2Ywowam7utyVag== +-----END PRIVATE KEY----- diff --git a/test/subca-ca/index.txt b/test/subca-ca/index.txt index e07f2f0..0d5e73b 100644 --- a/test/subca-ca/index.txt +++ b/test/subca-ca/index.txt @@ -1 +1 @@ -V 380503172313Z 0176 unknown /C=UG/L=Tropic/O=Utopia/OU=Relaxation/CN=the subca CA +V 251008121858Z 0176 unknown /C=UG/L=Tropic/O=Utopia/OU=Relaxation/CN=the subca CA diff --git a/test/subca-ca/req_conf.cnf b/test/subca-ca/req_conf.cnf index 2e7632f..b608123 100644 --- a/test/subca-ca/req_conf.cnf +++ b/test/subca-ca/req_conf.cnf @@ -59,6 +59,8 @@ basicConstraints = CA:TRUE [ ca_server ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" @@ -66,35 +68,45 @@ nsComment = "OpenSSL Generated Server Certificate" # nsCertType = objsign [ ca_altname ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" subjectAltName = DNS:*.hoo.org,DNS:joo.haa.org,IP:123.124.220.1,DNS:g*a.e*.com [ ca_altname2 ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" subjectAltName = $ENV::DNS_HOSTNAME [ ca_altname3 ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" subjectAltName = email:john.doe@foo.bar [ ca_client ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # For normal client use this is typical nsCertType = client, email nsComment = "OpenSSL Generated Client Certificate" [ ca_clientserver ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # For normal client use this is typical nsCertType = server, client, email nsComment = "OpenSSL Generated Client Server Certificate" [ ca_fclient ] -# This is typical in keyUsage for a client certificate. +# Test cert without flags. basicConstraints = CA:false keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment nsComment = "OpenSSL Generated Client Certificate with key usage" diff --git a/test/subca-ca/subca.cert b/test/subca-ca/subca.cert index 253a090..5306e8b 100644 --- a/test/subca-ca/subca.cert +++ b/test/subca-ca/subca.cert @@ -5,59 +5,59 @@ Certificate: Signature Algorithm: md5WithRSAEncryption Issuer: C=UG, L=Tropic, O=Utopia, OU=Relaxation, CN=the root CA Validity - Not Before: Dec 16 17:23:13 2010 GMT - Not After : May 3 17:23:13 2038 GMT + Not Before: Jan 30 12:18:58 2012 GMT + Not After : Oct 8 12:18:58 2025 GMT Subject: C=UG, L=Tropic, O=Utopia, OU=Relaxation, CN=the subca CA Subject Public Key Info: Public Key Algorithm: rsaEncryption - RSA Public Key: (1024 bit) - Modulus (1024 bit): - 00:a6:02:9e:e7:e5:25:2f:a0:b7:60:7c:a6:99:2d: - 32:34:6e:c7:bd:11:c5:ca:ac:fd:65:08:de:d8:4e: - 58:b7:19:d6:d7:53:67:9f:3c:76:ab:65:a1:db:5f: - 4f:83:cc:5e:b3:14:73:c0:58:06:4e:10:96:c2:71: - 20:f0:c3:43:d5:82:ea:f4:bc:ce:d3:a1:17:7f:b1: - 2e:a5:2a:cd:67:36:a1:00:28:39:fe:29:95:c8:b9: - d2:60:35:0f:96:ec:6b:00:d4:1d:ae:73:8f:e5:47: - 42:95:16:f1:9f:0a:f6:a0:f5:5a:cb:85:81:15:b2: - 3c:21:ab:4d:cc:b1:52:52:dd + Public-Key: (1024 bit) + Modulus: + 00:c2:68:6a:f6:e3:56:2a:36:fb:c5:f8:4f:1a:fd: + 0b:f0:f6:95:cb:05:30:5e:88:f6:84:b0:71:fe:59: + 98:6f:35:09:2b:40:4d:dd:e5:37:ea:8c:9b:e8:ad: + bf:f5:63:88:e9:ed:4a:69:6a:8c:f0:7c:b7:3b:6a: + 99:5f:1c:d7:d1:d0:ab:ba:1c:55:f6:14:c7:c7:e1: + 07:e5:8e:40:82:56:d8:42:9d:40:ad:ee:2e:7e:32: + db:cd:11:3e:75:87:b0:b9:1f:3c:20:d5:3e:ac:ee: + 86:01:0b:57:9b:3d:d6:5d:b8:cd:bb:ee:b5:ef:87: + f8:91:09:7c:6a:54:64:55:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: CA:TRUE X509v3 Subject Key Identifier: - 72:E2:1C:DF:FA:13:48:67:BA:80:EF:59:BC:ED:EC:15:77:61:AF:CC + 50:09:78:05:FC:8F:6D:EB:38:39:EE:32:06:BD:6D:73:DE:38:AE:87 X509v3 Authority Key Identifier: - keyid:D2:E1:04:7E:8D:73:54:53:49:C5:53:AD:1E:84:D9:8A:00:0B:6A:6F + keyid:57:24:7B:83:08:9A:89:2A:DB:F3:B7:93:74:48:F9:C4:D6:C3:BD:42 DirName:/C=UG/L=Tropic/O=Utopia/OU=Relaxation/CN=the root CA - serial:A3:51:C2:F8:DD:7F:B9:9A + serial:A2:6D:06:E8:1F:21:31:2F X509v3 Key Usage: critical Certificate Sign, CRL Sign Signature Algorithm: md5WithRSAEncryption - 77:fb:7d:ed:41:72:9a:44:a3:aa:c1:fd:45:09:67:2a:46:a9: - d9:72:5d:9a:d8:e3:0d:fe:2b:c7:62:4c:14:04:45:0f:34:a8: - 39:a0:e0:b9:70:74:74:e1:99:da:6a:e7:e8:cc:07:56:b9:a6: - 38:24:46:74:e1:a9:55:02:c0:5a:cf:78:9b:d7:95:76:2f:68: - 36:87:1b:8a:97:80:77:24:5b:6f:db:ec:a3:fc:88:50:3d:be: - f0:e1:ac:6d:1f:02:61:63:d4:8d:88:98:ca:de:0a:da:0e:36: - 19:ea:a6:1c:c1:fa:7c:d1:30:bc:d2:ee:6e:10:15:17:44:fb: - 53:52 + 52:ca:c6:04:5d:02:50:1f:b5:db:8c:2d:d2:0b:ad:71:e8:22: + 55:0d:f5:30:d2:76:77:4e:3f:0c:66:4d:75:40:ee:0d:d9:6d: + 66:5a:5b:2d:17:a1:b5:9f:0c:33:07:23:8d:c5:53:6b:f2:4e: + 9a:46:b1:55:c5:01:d6:a5:7e:d6:10:c7:5b:47:64:88:4e:ef: + be:7e:79:b3:53:7b:7a:75:e8:77:c4:c8:e8:67:3d:29:61:ad: + bb:3d:e4:1e:2d:f2:7a:ad:62:b3:62:4f:7a:24:64:e4:3b:78: + 1a:52:18:e1:6c:bb:0d:15:cb:17:3c:0d:1a:2f:c1:a8:23:c4: + 57:46 -----BEGIN CERTIFICATE----- MIIC/DCCAmWgAwIBAgICAXYwDQYJKoZIhvcNAQEEBQAwWjELMAkGA1UEBhMCVUcx DzANBgNVBAcTBlRyb3BpYzEPMA0GA1UEChMGVXRvcGlhMRMwEQYDVQQLEwpSZWxh -eGF0aW9uMRQwEgYDVQQDEwt0aGUgcm9vdCBDQTAeFw0xMDEyMTYxNzIzMTNaFw0z -ODA1MDMxNzIzMTNaMFsxCzAJBgNVBAYTAlVHMQ8wDQYDVQQHEwZUcm9waWMxDzAN +eGF0aW9uMRQwEgYDVQQDEwt0aGUgcm9vdCBDQTAeFw0xMjAxMzAxMjE4NThaFw0y +NTEwMDgxMjE4NThaMFsxCzAJBgNVBAYTAlVHMQ8wDQYDVQQHEwZUcm9waWMxDzAN BgNVBAoTBlV0b3BpYTETMBEGA1UECxMKUmVsYXhhdGlvbjEVMBMGA1UEAxMMdGhl -IHN1YmNhIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCmAp7n5SUvoLdg -fKaZLTI0bse9EcXKrP1lCN7YTli3GdbXU2efPHarZaHbX0+DzF6zFHPAWAZOEJbC -cSDww0PVgur0vM7ToRd/sS6lKs1nNqEAKDn+KZXIudJgNQ+W7GsA1B2uc4/lR0KV -FvGfCvag9VrLhYEVsjwhq03MsVJS3QIDAQABo4HPMIHMMAwGA1UdEwQFMAMBAf8w -HQYDVR0OBBYEFHLiHN/6E0hnuoDvWbzt7BV3Ya/MMIGMBgNVHSMEgYQwgYGAFNLh -BH6Nc1RTScVTrR6E2YoAC2pvoV6kXDBaMQswCQYDVQQGEwJVRzEPMA0GA1UEBxMG +IHN1YmNhIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCaGr241YqNvvF ++E8a/Qvw9pXLBTBeiPaEsHH+WZhvNQkrQE3d5TfqjJvorb/1Y4jp7UppaozwfLc7 +aplfHNfR0Ku6HFX2FMfH4QfljkCCVthCnUCt7i5+MtvNET51h7C5Hzwg1T6s7oYB +C1ebPdZduM277rXvh/iRCXxqVGRV9QIDAQABo4HPMIHMMAwGA1UdEwQFMAMBAf8w +HQYDVR0OBBYEFFAJeAX8j23rODnuMga9bXPeOK6HMIGMBgNVHSMEgYQwgYGAFFck +e4MImokq2/O3k3RI+cTWw71CoV6kXDBaMQswCQYDVQQGEwJVRzEPMA0GA1UEBxMG VHJvcGljMQ8wDQYDVQQKEwZVdG9waWExEzARBgNVBAsTClJlbGF4YXRpb24xFDAS -BgNVBAMTC3RoZSByb290IENBggkAo1HC+N1/uZowDgYDVR0PAQH/BAQDAgEGMA0G -CSqGSIb3DQEBBAUAA4GBAHf7fe1BcppEo6rB/UUJZypGqdlyXZrY4w3+K8diTBQE -RQ80qDmg4LlwdHThmdpq5+jMB1a5pjgkRnThqVUCwFrPeJvXlXYvaDaHG4qXgHck -W2/b7KP8iFA9vvDhrG0fAmFj1I2ImMreCtoONhnqphzB+nzRMLzS7m4QFRdE+1NS +BgNVBAMTC3RoZSByb290IENBggkAom0G6B8hMS8wDgYDVR0PAQH/BAQDAgEGMA0G +CSqGSIb3DQEBBAUAA4GBAFLKxgRdAlAftduMLdILrXHoIlUN9TDSdndOPwxmTXVA +7g3ZbWZaWy0XobWfDDMHI43FU2vyTppGsVXFAdalftYQx1tHZIhO775+ebNTe3p1 +6HfEyOhnPSlhrbs95B4t8nqtYrNiT3okZOQ7eBpSGOFsuw0Vyxc8DRovwagjxFdG -----END CERTIFICATE----- diff --git a/test/subca-ca/subca.p12 b/test/subca-ca/subca.p12 index 9b7b347b10ef6e8da1f9d702bf9008d890689d04..cce9f488b7e07ff7fb336985ba6e28f3aa186d75 100644 GIT binary patch delta 1658 zcmV-=28H?k4gC#}U4N_9`rlyO0s{g92mpYB17KE5z}jf@wSPdrGaW#)il>EFA&8*z z`37UcLw{xIi>_?V?MWjGZ>P{Psjb3F*-P`SNXcP1vSC*D-8=`>`XLMqb5C7u0Lq&B z%nXQ&ydZk(!T2IwVO1Eof`3VNxO*vucvZ=)XmrE zv65drIcN-E{_~q>`s(Gp+ZDCxo2^Y$;4u{X&{Jm{KXsaS)M#2bZYt~`6F$N4DQAq4 zpTCuv(SsCwQ`E&EOaW=peEkp_oU+8uviqKw(y%EG3;9GXyQ`qmoXx>Z-_1t#1|) z$imsO0elc*yKPX79W%mEKVCmQ8-L;%mxP ze~h^9+&)@2#(Jd-Sj!4y4?K_+h2m~3-Jbf~c_J)jt>#%hRvkY8mchCSr;*+spJ(k?31mK^IUmfs*^Qs*eSD zG4g)KQhkI$hp!(V`&Z(u%QWBZ7R#pNqT=6tqJOv=jEpdgkX!$xhen$j@gCB){u4u= z?fg{2SGh?Nle4!$`f&0m81Z~t_sIGvjoA1)wp_L=sHMvqM1iuHa@pPiz*pb#wS-$k zEq&Ghg^4tywVHc6zsKbkhS6$wXu{sM#*Er&LNR!qBJ%1fq6~{ZPVpswK2ml0v0)YMTTxfSf z5XsTSk@hx&8B4qiwe01U02fZ8LlEzMjR*rATbJGeVF&4u`s9=tQFX+!%V}8;M~t#- zt-J7yax@C2p!U>tfjNf_mKL7zS{h|*NKR@yvN$#diXM$K!H65WX#I3}CtpPS;737nx; zX!z4l_8rRZ!^u-m4(Gwj%xG*)=2#X2_kYQjHZH62olu*2_Cm5zb;r58zosC2s9G6n z-Y1J`$GfS`hB6a^Z9K})``C|!wI$g8s$HGS65FFM@%HX$=^}^Q%?AWvDS5Q?dQsxd=CTvm?dTy^YtzhDwIPafgG=Jh} z0+R)L$c%&r?uG(={|-!3r)z{}vCQ@tg}YAcR81YaW$uj9y_FOP*B`HVWK?AhT;6KF z9SQ2!j1B_x;E~2?EvbfRH#;VTO}TMxh40sGP-vHnUdSy#;aU2XrmbV|k^@C4TbN~Y zSR5m9i#vtTiHZrYeYD)Cs9uBmf!NV_ z(;AkVI|g0C8@_?>5)q5EoI&6PVYlkA0mY5zeB6Q@7+XPWLVl0=@6|6}nAg^eWUIgq z9iT#*S{+z>8Hu{O#JJKRnlv%i*WHTf)s~Hsosoct_PK2YROhibR<9?%5^rCd?5NU- zpefGpFi!$9i;Q+(QXJheB`_lf2`Yw2hW8Bt2^BFG1QZ(%-o=dop&=>=xe9yq;}1vH zlm{>|Fd;Ar1_dh)0|FWa00b08jIH#mR{!PC#H)Qv+ke=A(e!Er2x4ECfMG%ZngRj{ E070cOg#Z8m delta 1658 zcmV-=28H?k4gC#}U4KsC>xYD2zLNq12mpYB17LXR{UTH4%Qp3BO41+MZh$>E9>_so z(mlj8t&o_aE7mxh*Jc*yv>@Y(M=t_CByssr!t2v(A{+0dm$#Tf9_?iqyu-kcYOV_S z#h;EzbZESN!O@{+!X0kjDVUkR^Y^Pp4Ux*B6E~Y)HOQ9#X@3b}-5Nl(>TB94{T0iu z?_xc;1Js}a44WVN;lSLwDXx(VsZwy6S1<{N*T_ftAW&=e2UmiNitkj*GC!Be<~k0$ zJN^Af`zhg+Hj4Gezn5N51h>Gq#oyVQiC>wGG+)tbU|F|h?ltu3_oeA;Lk8#lf+`Pn zNkjiyf%Cf2@_$bh{&J6#+m3gz!%1XpK8vzK1@83JqQ{L8<4_h{0NIFXSc-&eN=*;-t~M zs#8BhAv%tV_?bQg*5q|6Zi2SJ~)?FPcNfJZGSy(kZAY)6|p^yiuZ80CpcUc zKpJ0aQbZUo4;QJJ8)5DS1K)_;Al$J5IY&DHo8qZ5RI5Mb{4&9)n!Qo8LpjDPR@JY& zgwl*&dVmTj>EFSoG-TnS29Gcj%FE6|ar%@SVs`CRVnMknwYz>%&C?h2XH0S`0)AF3 zub{190)H7v6FfCT*z#^Er9`NyIcZ|~@)080oSW=G2yCRtf}dICy-Uuc>>^-eKrv&lF`K{*t%q zeaRy!Eu+?XEwr(WFwXIQ@{?H{`y7YsCg}g#;(t-yu3J+mFy^bc0p_yF_|?$VBU(Te zqtE?}%bK)il-fM47f;`J(&D7If?qdzMSuQGmZgXxToncv;78k{N%UF%5JUdy;W$kEcdS*?gzaOHwL3*>gwW71mGA^Mgc_ysmf-i;sF%k|R!Ai@=8v*J+V zoJ6^~SSnom z%Aj#$`)bh8DHLmcLY4|YFoFX41_>&LNR!qBJ%3;Z52;m)xSRq42ml0v0)YJ>qlxhQ zP2$3Otj0R~6P7GD!n{9BSf$`1T{e|x?KUDh(jEnnIrC|IMhfS}I z(%3%{;~1FaY5|OH*MXz_{adG|9$0zIQF@K}O@8fOLqayi@4lvWXuCW2n}atrkt5VMG-))QM{#41%H0XhpN%ty&Df&|Ej#On!2x=i+x$;9(6>D zxLR~~k04hFji_F{C=X|ZR^~>;)^B=rjdgfhnAADO#NxRvM6nA8C z;?cimyf%QU(ueU@J^8-?rWG#f9H;HIgg6Zd^c%T8QqkhLt6S^HQvgLnERXQo@`Eki z3>?+~&1+6jKXmLY=kWI64m(L#nx(K~VWF zaQ3#Xp|joHro~7WXHR#+LP0BW#92({8_f4YMR(;<5^o={8KzlrW`kT_-$BQ>G|L9` zu{u*khKDQ2#_6`O={eKyzrd4;bUsQquh#~CmUI-}QcR&u6Ae6t*^VlaMQ_@>w!ln* zGzuO7Na4P&PnUr$y=50MB`_lf2`Yw2hW8Bt2^BFG1QZ8a_d9f2i*yS_2y}3{B_qI^ zh_f&;Fd;Ar1_dh)0|FWa00b2H(vf?K?GGg~Wi?FaeO1{s^0*rW2x8il;5DSklmY?> E06Jqdq5uE@ diff --git a/test/subca-ca/subca.priv b/test/subca-ca/subca.priv index 858f6e4..0b52188 100644 --- a/test/subca-ca/subca.priv +++ b/test/subca-ca/subca.priv @@ -1,15 +1,16 @@ ------BEGIN RSA PRIVATE KEY----- -MIICXAIBAAKBgQCmAp7n5SUvoLdgfKaZLTI0bse9EcXKrP1lCN7YTli3GdbXU2ef -PHarZaHbX0+DzF6zFHPAWAZOEJbCcSDww0PVgur0vM7ToRd/sS6lKs1nNqEAKDn+ -KZXIudJgNQ+W7GsA1B2uc4/lR0KVFvGfCvag9VrLhYEVsjwhq03MsVJS3QIDAQAB -AoGAGFHv96cBMJ4J30/DlFMjtLy59D/jSxLWuHN5OhUYOBLH/5mPZ6uS8v8bnCi1 -XGiXQwLvBjGfEtapT2kFW2Av0p4zsAnJ9D1emH5aFD67YXI5vW4PR0R/Lu58SI6a -p5y3aNsxCMmORAsXTfj2C3r/ntCuwUXITP2mUbL8pa2ofz0CQQDZWD9DNRdfDb4W -xQGparH30jxhlkUMxhjnddMnt0pAKxFjWXQQ80EI1mZRDk9gpb14okaEq+dRtkdR -3piJ/a2DAkEAw4kafeTETUSbbACRKmr+5skDuKYWY4nei7JNCP45HkpmIdFSEtvY -ftwkhuhJGtW7q4AuEIyU2QI7DRYg67twHwJAVy4+sgapyUcJ6Lg9YmeZ235JGhvc -trL/alioylWLQxIDd4Z6OBJbE+BsSjcjP/E7fxgYkT8jGnOzR/Ox3CgVYQJBAJoB -yI3TuxEoskl0gOGp+C6JsJakqgmoM1JQEwC8SvyimKKWHVChO3lfpp1jIwExymif -wqhiMXJioWQDQ9angP0CQB+PR9qES3nqqfRn8iCqcxNnmxALGqS2cxmDFxeQqEAL -0mGmZtNxswQr/9BipCHbf5KehNeDuVvMANk1ip00pyc= ------END RSA PRIVATE KEY----- +-----BEGIN PRIVATE KEY----- +MIICdwIBADANBgkqhkiG9w0BAQEFAASCAmEwggJdAgEAAoGBAMJoavbjVio2+8X4 +Txr9C/D2lcsFMF6I9oSwcf5ZmG81CStATd3lN+qMm+itv/VjiOntSmlqjPB8tztq +mV8c19HQq7ocVfYUx8fhB+WOQIJW2EKdQK3uLn4y280RPnWHsLkfPCDVPqzuhgEL +V5s91l24zbvute+H+JEJfGpUZFX1AgMBAAECgYAtkEuBkcagHkLkI05nBOfHkgOJ +ka3EelVMxA3zjwwrBEMh3/BgEVkJn+rqnc5ftPRh3zuReWeO9av8QP+xSxFJsnsL +gKZNpsOSclR+zdpWsiIR9JnO58qnXW+m8AnXArSg8aLG5hFSEKSkxSfNKEybm0nG +fn25zKYTzpnaua/QAQJBAPeJ5jCwWZL35OhBSFwTigm3fAA0ffOSW1tjkm6+byXD +hfMfjvpbe8TQfjKq7UA5KnU7icr+cACiPuNJXo4PTTcCQQDJDZhCSJKwdVVF/lQX +FwcG2T2zyO3RpozXFgXXBT2j3awicxgbjOxUh9ImVOhjlash4aIAcksWzlA0Xyg/ +wawzAkEAoEPw/C8BH41N8C1sKukfoyDfsMZLkap9aZLzGK5FCf8oN3uEN4WJgai3 +PBi8WKtqWNJ+aSYI3/ArpT44cONpSwJAcPruwPC/XeHRlY+h+Ye7LyINBma3HcUW +CBgcGASd6uO6w3Eh7vl2JNpeQaQdIzkL/fIpc07G2338nDGNEKbo+QJBAKdOkF8x +E49CHpIyB+PfYXfNHOSXQMucQSpM21YLj666QPiUd+zLxBnTRdiSq5DAXV83/qrL +Y/mpZlO1XCpNUJs= +-----END PRIVATE KEY----- diff --git a/test/subca-ca/subca.req b/test/subca-ca/subca.req index e6c16a7..4a15956 100644 --- a/test/subca-ca/subca.req +++ b/test/subca-ca/subca.req @@ -1,11 +1,11 @@ -----BEGIN CERTIFICATE REQUEST----- MIIBmzCCAQQCAQAwWzELMAkGA1UEBhMCVUcxDzANBgNVBAcTBlRyb3BpYzEPMA0G A1UEChMGVXRvcGlhMRMwEQYDVQQLEwpSZWxheGF0aW9uMRUwEwYDVQQDEwx0aGUg -c3ViY2EgQ0EwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAKYCnuflJS+gt2B8 -ppktMjRux70Rxcqs/WUI3thOWLcZ1tdTZ588dqtlodtfT4PMXrMUc8BYBk4QlsJx -IPDDQ9WC6vS8ztOhF3+xLqUqzWc2oQAoOf4plci50mA1D5bsawDUHa5zj+VHQpUW -8Z8K9qD1WsuFgRWyPCGrTcyxUlLdAgMBAAGgADANBgkqhkiG9w0BAQUFAAOBgQCk -MpGCwnIPP/A4U7v6GjNIeaD7SS1yTz8v7Sak7ZqQAgHQubQoOVeMrlWzrIqVbQiZ -g4JM7fjRObd0XSOwaUpMXmlB/O3+WLBsFELudfWslyEaHv0Wkgom+aZP9DRb/lVz -Kg6OaBIApp/5bwATPZxk+9Zo4W6d7LF6tHayHsgJhw== +c3ViY2EgQ0EwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAMJoavbjVio2+8X4 +Txr9C/D2lcsFMF6I9oSwcf5ZmG81CStATd3lN+qMm+itv/VjiOntSmlqjPB8tztq +mV8c19HQq7ocVfYUx8fhB+WOQIJW2EKdQK3uLn4y280RPnWHsLkfPCDVPqzuhgEL +V5s91l24zbvute+H+JEJfGpUZFX1AgMBAAGgADANBgkqhkiG9w0BAQUFAAOBgQCs +gvrRv5ck4k8xP3vRPwDU7pKwr7iAvwsg5qGF7DtZT+Fr3fxmoZsot68GGkgpCGkZ +E3qWreu8Jms+fQZ1EdDNjHfQDfSNuzI7NJswRSY5dzQUUZhJ9WFqhwOEppvmB18L +fV01wpqFdLnDrbvNK1f/YV/yGllzqlp8jseMw+MW+Q== -----END CERTIFICATE REQUEST----- diff --git a/test/subsubca-ca/index.txt b/test/subsubca-ca/index.txt index c3bfea0..eafa04b 100644 --- a/test/subsubca-ca/index.txt +++ b/test/subsubca-ca/index.txt @@ -1 +1 @@ -V 380503172313Z 0176 unknown /C=UG/L=Tropic/O=Utopia/OU=Relaxation/CN=the subsubca CA +V 251008121858Z 0176 unknown /C=UG/L=Tropic/O=Utopia/OU=Relaxation/CN=the subsubca CA diff --git a/test/subsubca-ca/req_conf.cnf b/test/subsubca-ca/req_conf.cnf index 62ee717..ebc3b00 100644 --- a/test/subsubca-ca/req_conf.cnf +++ b/test/subsubca-ca/req_conf.cnf @@ -59,6 +59,8 @@ basicConstraints = CA:TRUE [ ca_server ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" @@ -66,35 +68,45 @@ nsComment = "OpenSSL Generated Server Certificate" # nsCertType = objsign [ ca_altname ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" subjectAltName = DNS:*.hoo.org,DNS:joo.haa.org,IP:123.124.220.1,DNS:g*a.e*.com [ ca_altname2 ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" subjectAltName = $ENV::DNS_HOSTNAME [ ca_altname3 ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" subjectAltName = email:john.doe@foo.bar [ ca_client ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # For normal client use this is typical nsCertType = client, email nsComment = "OpenSSL Generated Client Certificate" [ ca_clientserver ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # For normal client use this is typical nsCertType = server, client, email nsComment = "OpenSSL Generated Client Server Certificate" [ ca_fclient ] -# This is typical in keyUsage for a client certificate. +# Test cert without flags. basicConstraints = CA:false keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment nsComment = "OpenSSL Generated Client Certificate with key usage" diff --git a/test/subsubca-ca/subsubca.cert b/test/subsubca-ca/subsubca.cert index fcd5892..3bd01cd 100644 --- a/test/subsubca-ca/subsubca.cert +++ b/test/subsubca-ca/subsubca.cert @@ -5,59 +5,59 @@ Certificate: Signature Algorithm: md5WithRSAEncryption Issuer: C=UG, L=Tropic, O=Utopia, OU=Relaxation, CN=the subca CA Validity - Not Before: Dec 16 17:23:13 2010 GMT - Not After : May 3 17:23:13 2038 GMT + Not Before: Jan 30 12:18:58 2012 GMT + Not After : Oct 8 12:18:58 2025 GMT Subject: C=UG, L=Tropic, O=Utopia, OU=Relaxation, CN=the subsubca CA Subject Public Key Info: Public Key Algorithm: rsaEncryption - RSA Public Key: (1024 bit) - Modulus (1024 bit): - 00:b9:e2:be:89:f7:d4:ea:b1:90:2a:13:c3:18:59: - fa:05:cd:52:73:09:18:7d:a8:a1:85:2c:c2:4b:58: - f8:c2:fd:2d:20:97:d0:df:39:be:15:7b:26:72:a1: - 4b:cc:62:03:0c:2b:9b:7d:d1:f0:a4:66:36:d4:48: - 8b:ca:61:73:61:b3:c3:9e:0a:5a:54:d5:43:ad:88: - 2a:0f:85:41:f0:d6:09:8d:d4:9a:f2:10:4e:41:d8: - d2:88:cd:07:78:ea:60:67:28:e1:4f:9e:3d:24:8b: - 64:31:fd:d3:d3:4c:bb:c8:42:49:15:69:f6:06:14: - 00:6d:b7:df:1d:c2:44:88:7d + Public-Key: (1024 bit) + Modulus: + 00:c1:f1:e2:20:04:0b:dc:d9:ad:c2:d7:fa:e6:70: + f3:6f:14:0d:66:4a:ed:c3:66:b9:1a:83:f6:73:67: + 46:0b:e9:f5:11:ee:26:2b:a4:e4:77:92:71:e0:a2: + 1a:76:ba:a3:93:2d:84:05:71:cf:2c:ff:32:99:49: + 5d:ae:d5:9f:b0:d3:d2:7f:50:21:ba:0b:40:d4:6b: + a8:d6:ba:a9:0a:bc:7d:d9:28:bc:45:7a:50:d3:fb: + 41:aa:ea:c0:76:a8:96:e8:c4:8b:fc:6e:c7:88:37: + c2:2f:49:ba:61:fd:97:f7:91:c6:2a:35:1c:3a:8b: + 39:c1:29:97:6e:1b:a1:5b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: CA:TRUE X509v3 Subject Key Identifier: - 43:B2:E1:9F:EB:C5:ED:9C:C6:76:EF:EC:B4:D1:D3:95:AF:67:45:AD + 13:D5:A4:0F:E9:84:B4:C3:AC:D6:53:CA:7E:C5:B7:D3:61:4C:17:3F X509v3 Authority Key Identifier: - keyid:72:E2:1C:DF:FA:13:48:67:BA:80:EF:59:BC:ED:EC:15:77:61:AF:CC + keyid:50:09:78:05:FC:8F:6D:EB:38:39:EE:32:06:BD:6D:73:DE:38:AE:87 DirName:/C=UG/L=Tropic/O=Utopia/OU=Relaxation/CN=the root CA serial:01:76 X509v3 Key Usage: critical Certificate Sign, CRL Sign Signature Algorithm: md5WithRSAEncryption - 32:3b:67:ad:10:b0:a0:6c:82:39:c9:30:fb:c3:63:20:ff:66: - 11:38:13:58:3a:36:b4:ec:f8:55:9f:c4:05:34:04:9d:f1:5e: - 6a:95:71:79:9f:4d:42:6c:a7:ba:f2:e0:fe:cc:42:7e:85:49: - 56:94:5c:2f:e5:5b:27:ff:52:16:1b:a6:f5:4f:9e:88:67:96: - 6d:b0:71:07:73:d2:08:35:a0:8b:f5:5f:a6:9d:8f:ee:20:49: - 4f:01:39:17:e6:76:4a:43:9c:cd:9c:87:33:c2:5b:ac:8b:f9: - 24:4b:6b:1f:08:ef:99:e3:1a:16:1f:0f:1a:f4:1a:96:91:5c: - 69:d0 + aa:6c:14:cd:1e:53:0b:45:7d:4e:4f:78:4d:a2:ef:20:a6:97: + e9:dd:8b:ca:09:bd:1c:7a:ac:02:e7:c8:44:af:69:a4:cd:de: + b0:34:b5:f4:ba:d7:c8:8f:ab:27:88:e9:48:80:d9:86:88:ee: + 6d:b8:c5:08:a0:d5:bd:ad:cd:71:40:78:7a:5f:aa:46:02:ac: + c2:a0:07:0f:5d:fb:d4:ef:01:13:0c:96:77:7d:ba:89:8d:11: + d4:04:e0:f2:c1:93:5c:ee:31:70:67:57:79:2b:03:bf:72:2e: + 8b:3d:c9:93:22:bd:20:2a:c0:41:30:b8:01:9a:4f:31:0d:58: + f4:88 -----BEGIN CERTIFICATE----- MIIC9zCCAmCgAwIBAgICAXYwDQYJKoZIhvcNAQEEBQAwWzELMAkGA1UEBhMCVUcx DzANBgNVBAcTBlRyb3BpYzEPMA0GA1UEChMGVXRvcGlhMRMwEQYDVQQLEwpSZWxh -eGF0aW9uMRUwEwYDVQQDEwx0aGUgc3ViY2EgQ0EwHhcNMTAxMjE2MTcyMzEzWhcN -MzgwNTAzMTcyMzEzWjBeMQswCQYDVQQGEwJVRzEPMA0GA1UEBxMGVHJvcGljMQ8w +eGF0aW9uMRUwEwYDVQQDEwx0aGUgc3ViY2EgQ0EwHhcNMTIwMTMwMTIxODU4WhcN +MjUxMDA4MTIxODU4WjBeMQswCQYDVQQGEwJVRzEPMA0GA1UEBxMGVHJvcGljMQ8w DQYDVQQKEwZVdG9waWExEzARBgNVBAsTClJlbGF4YXRpb24xGDAWBgNVBAMTD3Ro -ZSBzdWJzdWJjYSBDQTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAueK+iffU -6rGQKhPDGFn6Bc1ScwkYfaihhSzCS1j4wv0tIJfQ3zm+FXsmcqFLzGIDDCubfdHw -pGY21EiLymFzYbPDngpaVNVDrYgqD4VB8NYJjdSa8hBOQdjSiM0HeOpgZyjhT549 -JItkMf3T00y7yEJJFWn2BhQAbbffHcJEiH0CAwEAAaOBxjCBwzAMBgNVHRMEBTAD -AQH/MB0GA1UdDgQWBBRDsuGf68XtnMZ27+y00dOVr2dFrTCBgwYDVR0jBHwweoAU -cuIc3/oTSGe6gO9ZvO3sFXdhr8yhXqRcMFoxCzAJBgNVBAYTAlVHMQ8wDQYDVQQH +ZSBzdWJzdWJjYSBDQTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAwfHiIAQL +3Nmtwtf65nDzbxQNZkrtw2a5GoP2c2dGC+n1Ee4mK6Tkd5Jx4KIadrqjky2EBXHP +LP8ymUldrtWfsNPSf1AhugtA1Guo1rqpCrx92Si8RXpQ0/tBqurAdqiW6MSL/G7H +iDfCL0m6Yf2X95HGKjUcOos5wSmXbhuhW/sCAwEAAaOBxjCBwzAMBgNVHRMEBTAD +AQH/MB0GA1UdDgQWBBQT1aQP6YS0w6zWU8p+xbfTYUwXPzCBgwYDVR0jBHwweoAU +UAl4BfyPbes4Oe4yBr1tc944roehXqRcMFoxCzAJBgNVBAYTAlVHMQ8wDQYDVQQH EwZUcm9waWMxDzANBgNVBAoTBlV0b3BpYTETMBEGA1UECxMKUmVsYXhhdGlvbjEU MBIGA1UEAxMLdGhlIHJvb3QgQ0GCAgF2MA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG -9w0BAQQFAAOBgQAyO2etELCgbII5yTD7w2Mg/2YROBNYOja07PhVn8QFNASd8V5q -lXF5n01CbKe68uD+zEJ+hUlWlFwv5Vsn/1IWG6b1T56IZ5ZtsHEHc9IINaCL9V+m -nY/uIElPATkX5nZKQ5zNnIczwlusi/kkS2sfCO+Z4xoWHw8a9BqWkVxp0A== +9w0BAQQFAAOBgQCqbBTNHlMLRX1OT3hNou8gppfp3YvKCb0ceqwC58hEr2mkzd6w +NLX0utfIj6sniOlIgNmGiO5tuMUIoNW9rc1xQHh6X6pGAqzCoAcPXfvU7wETDJZ3 +fbqJjRHUBODywZNc7jFwZ1d5KwO/ci6LPcmTIr0gKsBBMLgBmk8xDVj0iA== -----END CERTIFICATE----- diff --git a/test/subsubca-ca/subsubca.p12 b/test/subsubca-ca/subsubca.p12 index becb15bda9ce4b645a80fd7a9e8ff04ec4344ec8..0bb3f200701704f1d8b5a970d1ad15602523e6ba 100644 GIT binary patch delta 1658 zcmV-=28H?c4fPF>U4JX`c&K+$20j7;2mpYB16Xz2QO$*lEXCa3-#|jg+Isz<0rhjk zS?Dls2~e(J3)A<`a=sE$qU~C1bPT@xJo}RQe^DEQeXnixVt<~F$IX}))pS73qt7wV z^~dz_RjJhyBB8y%UT8w0M)xdaiBokFpU_tE>*p#^`j!XQ{(o&w=x0X*AsFR`VZg?1n2`g*IkiNZ;6^?=d2jcSHlQk;l{L=6q=$O>N7H6#HbTU&C}Kj0gn=f`S{#)WG+sHa(`mnoa4|9v#|&5L(^9)JfD4D zt6XA2FE$b{^4Oc&(Ny_IxjzRiTx4bh=MCEyaLFs$h?%vRXlD7OvTV6b!T9c14}K*W zCpTnmJhiHjD=6ivC#t`&%s^I-RM+-6nrYS+Zb{&oJ>#sRE?@-Bb+pz#{Z39yN;$~^ z0ei`4Cw~$!x>vGpZqdH9aa2yl^|S+Ar<6SS*U0Bv^A+x;14|2GgOlh#z=!B;9Rh?U zC5Zt&k3h4A*~LvOAjl(mIx5dUF-U35tov1_YxOq*Mt{HMTE+DHS5H(GwD%B9ta|X= zShn-^&HVp=+5;gh-MfEAdMxA&4f{?zmBxPmg@1F$o7QHj%0X|k0n~W}HMJ0uPSarL zqQ*|y78|~KUP~jGZBGzU*PVpDuw!y7sL{Uh$`c~$JnQ)Px>e6XCyo5hPDiX_uBCC4GHJjTK-LMMUr<)VE%0=d z&LNQUGnhgOkOx9wL77Mzu;h=KbHc(#x1myo;tp#h#ia z*%SQbuRjxC@NIhRl1=JNr(Malatpvu!G<@maC7wpb1I)dF9j}Cf3(Dvq$A;=Fqk)| zD}USwdd$HdTH7ya8DN>0=}xu9R9MKjJAy1@X+T)zTcCOKWgUQIIpV^Y=Ku#4nF@C- zU3T(vbFOH!j`427+&WE4)VyZz2(xhD%po%X!NwjbmZIee({FB9HLS$A23Tix-jDehPbpHas$u+v40*HK><3@ckoV z|BoOfNALwh!Ik&sH($!^_m92l3*G^+fGFp8+xpcTjkj6@I%1+b_D&|1C?U1ajenRX z9irYV)!lS7NEceS2%vPAjlMnvBp@Kh^z|R5*JCygE|ys`fpR>k#SpQ7)%cVS7loui zAQTe+zAs zG0F9E3V;@yUh;$U`;&pMf@v4?%g_3eO?S>QB`_lf2`Yw2hW8Bt2^BFG1Qcs@^#H-tiT-T0?OFi>XmO-B zq{A>VFd;Ar1_dh)0|FWa00b0j3|U4MzELHMrM5G4Wv2mpYB16Wq@tK+MXyDbs>_NdMLV$`>cl-!R9 zFr~iP{apmgsi!F zGmcW{-PHG_!1FpSyP8P7ut0AFZH}5Mfz!-8g6ZrDBx*8`Ab-XV^+s7Cw?S?mg&zm6$Z_eDGtO-xg2%mvRm{54>Yc%4K*10%r0e)^6baU-AFW z8AMjx+jAH}CDD;By3J(1d*DDi0{nzQYcwYnHZ zKn5&SFu7&kuttBNJO?N;3=B04#RXmi*CG<^W#DT0Z#JoQl2WRim1UqL?BV(I)@nle zP#1>>WJ~$tWVR}847l-4{kySW@9f|>rt#AzYo}ggdY}gv^Q2Orrs}(&FwaCwZ3(0gY^LBJThyb`1oAB2k_02h%>f8aJ zv%b!iB|puWQ%6ln-L5ChchOR2@8#~pK1Cp%I;ie@$at$`*M0%x^6mwl)>oOn*D`lc zgn!y;Xyp%PVEO=K#0js86OviQ`yR7YEJUWzv8{ry>D!Fgx0LF3MY#=s!DpQy+_{Uc zG`0D+rpN1~fO@}T#Y+i>>MILd2mrO&=L)W0)u%I?_oyFOiKQ8Ik$9@kwr)j41z745 zQ{~<%(q2NiFoFX41_>&LNQU zLA14%v6k)|1BKB{v5&@Cz<8FA9Gkzf1EoW)sUc?|h>)8W?YNK*9t}Bn$8bsYc}?in zkITaTM_(w=IU!vY3@pGy+e=Vh(|140T|9@p+D0VHyQ-pO0H1S{MV6?Fh=zm&iSAIgaHobSjCA9&FIS&AE6T~gz z&!SraS1QQ%1dPP|14E?i7!iOkcPKBh73R{S-Ye+%}^0 zWQUBTJ-m`D97uyf~yPSR^>p;J{vgTwwsVO0}-?BK56%@7rW`UGO9F&$U(#F z9JkaCFMih_iuKErd^>9Gwr@FB2c~j|I=@o%jwkNg>H~??6U&4=gYC3LubnJ) zkr=u|ytNu=dq|&nP;j0_&Dy*@m@9dE=;hpo$8rAu%G!CZR@4-*FgByVVnvQ=I; z$kDKOiDqO0b+Fw?ph-C~B`_lf2`Yw2hW8Bt2^BFG1QgAOQD@hMWC0jW6s=D8;V;cXnynd0R!VlE;}t9f2%18o?5GN6G6Dh! E001&2(*OVf diff --git a/test/subsubca-ca/subsubca.priv b/test/subsubca-ca/subsubca.priv index 352bd04..9786f83 100644 --- a/test/subsubca-ca/subsubca.priv +++ b/test/subsubca-ca/subsubca.priv @@ -1,15 +1,16 @@ ------BEGIN RSA PRIVATE KEY----- -MIICXQIBAAKBgQC54r6J99TqsZAqE8MYWfoFzVJzCRh9qKGFLMJLWPjC/S0gl9Df -Ob4VeyZyoUvMYgMMK5t90fCkZjbUSIvKYXNhs8OeClpU1UOtiCoPhUHw1gmN1Jry -EE5B2NKIzQd46mBnKOFPnj0ki2Qx/dPTTLvIQkkVafYGFABtt98dwkSIfQIDAQAB -AoGACLRqkdFuQhNQmffU8gX8pFrqGoL5h6Dm93KSIq8m7xKmE1moqVtt4FmlAkc1 -YnvQgrhkDq9PIpO6y5QeH7sSiRNAWO8iMSuGlsGCv5BqWz6T7qcSSM0k7r7VVdtC -J0xvuTeJJx5zuAHPlBb5gW+B7m9BMBXhkwCZk99EbTBOhmECQQDsDznUQbljz0Ny -klbzbtWppG6JLXmUr6VssRcvMgFVJHrch1+L/zMPS1w+ZERu0orTAGaswiJ5zCgj -+7Luj8BlAkEAyZaDc6VNeVDbL74rQFXDF8bdeuVZKqVgd3fjLY6EoT50U36AlCHg -rJh3xs9eEW5KmUXmyb5Ir8KfGD4icffKOQJBAJMWma4Mlfv/NcO6M7vToAbokoef -claXa7hiUFP0EKiA5p1rLLoK9kHdb0jhKVL0ldQMN+4FuX2zHH/vYfsMT5ECQDgV -aOLutVwwE5r3xF60vX9K82lyj1kfA3SZZRnSkbGuh3yHMEyGFFTQYlpsbNZaoeR8 -nxW3m89STSLYforIjnkCQQDh36p1GeYIVQJ4j6xveOPIG/wb4bj0FqymhsDldtxi -zl6IPPGlzlKyNYp+PLFjJ87FXoPWXa/xYWNZlE8yF2nD ------END RSA PRIVATE KEY----- +-----BEGIN PRIVATE KEY----- +MIICeAIBADANBgkqhkiG9w0BAQEFAASCAmIwggJeAgEAAoGBAMHx4iAEC9zZrcLX ++uZw828UDWZK7cNmuRqD9nNnRgvp9RHuJiuk5HeSceCiGna6o5MthAVxzyz/MplJ +Xa7Vn7DT0n9QIboLQNRrqNa6qQq8fdkovEV6UNP7QarqwHaolujEi/xux4g3wi9J +umH9l/eRxio1HDqLOcEpl24boVv7AgMBAAECgYEAjvk64rE48YmDYCUKMIFJ5DQb +ILLSDn+Wq6Zms3KJn9TMNniiqP/48PEDhD7cVXSHi8M9FSpuOVS0P25nYrDW9CJA +hAmB9FqD/eier8PFOlP65aVSKAkbNqu44KuyDg5q3gcQ27XmCcDMoOmxBMpecOPl +OhFGOXKXdMpO/3nTgcECQQDszJk3sQHn/xP3orrK1iN2R5UusIBbavm0QO5qlT2Z +XM/cHY9fFFVNYJYXB5ZNI8qt+mE/+I5dFfhQE7s4nMthAkEA0au6WT6T4YdoRIW+ +fuVxfeq3rgUmYjvDUW2PhCpjEi3DwcLuojp/8zkPGXoBjfvoVRloMv2PVwaTXs0V +Lhtg2wJBAMc6oJJln6f0SXVo+WWc4vsp4M8GewfvKiXJF46e/9OfbdbRHAYv0lEm +uUCpBoDiYy0bYmTzF7wjtuaQo01PRiECQCJlOIGxaVMDApDTG+f3PcH5Qj6S67QL +t8Pg5D07MttllIpxrvIABMNipd55DE49d+SV8WkD/YK6Omy/2eyhYycCQQCTulrt +U14yo/PXUmyJ8rb1W+H3kwhvMgcMp5Zhm5UPv9bJJGU7YNna3q4elpdDDn8SAYg1 +Yhu8jPTGwwMOP/4w +-----END PRIVATE KEY----- diff --git a/test/subsubca-ca/subsubca.req b/test/subsubca-ca/subsubca.req index 6d02083..786d3ae 100644 --- a/test/subsubca-ca/subsubca.req +++ b/test/subsubca-ca/subsubca.req @@ -1,11 +1,11 @@ -----BEGIN CERTIFICATE REQUEST----- MIIBnjCCAQcCAQAwXjELMAkGA1UEBhMCVUcxDzANBgNVBAcTBlRyb3BpYzEPMA0G A1UEChMGVXRvcGlhMRMwEQYDVQQLEwpSZWxheGF0aW9uMRgwFgYDVQQDEw90aGUg -c3Vic3ViY2EgQ0EwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBALnivon31Oqx -kCoTwxhZ+gXNUnMJGH2ooYUswktY+ML9LSCX0N85vhV7JnKhS8xiAwwrm33R8KRm -NtRIi8phc2Gzw54KWlTVQ62IKg+FQfDWCY3UmvIQTkHY0ojNB3jqYGco4U+ePSSL -ZDH909NMu8hCSRVp9gYUAG233x3CRIh9AgMBAAGgADANBgkqhkiG9w0BAQUFAAOB -gQBN3GWZgt/lPxp6arW8azlqgMwrFqay++JhWLzJZHSCIbJYQweYlf3hD69ykfYP -xxqG5+K9T81dJqHSEWgvXysK8yJAIcFUigV2Fdd6ggwUKvRLzBe6rS7b0imV32mP -BF/IVWQXScyQWCpp15ktKXdUY6QkygYeeMnf4Scf2tTlgg== +c3Vic3ViY2EgQ0EwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAMHx4iAEC9zZ +rcLX+uZw828UDWZK7cNmuRqD9nNnRgvp9RHuJiuk5HeSceCiGna6o5MthAVxzyz/ +MplJXa7Vn7DT0n9QIboLQNRrqNa6qQq8fdkovEV6UNP7QarqwHaolujEi/xux4g3 +wi9JumH9l/eRxio1HDqLOcEpl24boVv7AgMBAAGgADANBgkqhkiG9w0BAQUFAAOB +gQClUJ+/IyD3EjF9mrNduam2Mo018QJIto5xw3GEFABSQDINVVZQjX2hz7bMLnGq ++GfhX8YIaLpAeLLPii0iHrg3khUwH360Kxo45oFAJUAVhGljZztAHmRc+x1RwYxN +m4sRhMKAdL26QwTQuMZzxlSDSJHS5UAc+1B0nVyVqx+GUQ== -----END CERTIFICATE REQUEST----- diff --git a/test/trusted-ca/req_conf.cnf b/test/trusted-ca/req_conf.cnf index 8e7c6f7..eca36f3 100644 --- a/test/trusted-ca/req_conf.cnf +++ b/test/trusted-ca/req_conf.cnf @@ -59,6 +59,8 @@ basicConstraints = CA:TRUE [ ca_server ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" @@ -66,35 +68,45 @@ nsComment = "OpenSSL Generated Server Certificate" # nsCertType = objsign [ ca_altname ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" subjectAltName = DNS:*.hoo.org,DNS:joo.haa.org,IP:123.124.220.1,DNS:g*a.e*.com [ ca_altname2 ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" subjectAltName = $ENV::DNS_HOSTNAME [ ca_altname3 ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # This is OK for an SSL server. nsCertType = server nsComment = "OpenSSL Generated Server Certificate" subjectAltName = email:john.doe@foo.bar [ ca_client ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # For normal client use this is typical nsCertType = client, email nsComment = "OpenSSL Generated Client Certificate" [ ca_clientserver ] +basicConstraints = CA:false +keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment # For normal client use this is typical nsCertType = server, client, email nsComment = "OpenSSL Generated Client Server Certificate" [ ca_fclient ] -# This is typical in keyUsage for a client certificate. +# Test cert without flags. basicConstraints = CA:false keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment nsComment = "OpenSSL Generated Client Certificate with key usage" diff --git a/test/trusted-ca/trusted.cert b/test/trusted-ca/trusted.cert index 91b88d0..632117b 100644 --- a/test/trusted-ca/trusted.cert +++ b/test/trusted-ca/trusted.cert @@ -1,19 +1,19 @@ -----BEGIN CERTIFICATE----- -MIIDCzCCAnSgAwIBAgIJAJuFJ8UKay74MA0GCSqGSIb3DQEBBQUAMF0xCzAJBgNV +MIIDCzCCAnSgAwIBAgIJALpkA0P4MdBQMA0GCSqGSIb3DQEBBQUAMF0xCzAJBgNV BAYTAlVHMQ8wDQYDVQQHEwZUcm9waWMxDzANBgNVBAoTBlV0b3BpYTETMBEGA1UE -CxMKUmVsYXhhdGlvbjEXMBUGA1UEAxMOdGhlIHRydXN0ZWQgQ0EwHhcNMTAxMjE2 -MTcyMzA5WhcNMzgwNTAzMTcyMzA5WjBdMQswCQYDVQQGEwJVRzEPMA0GA1UEBxMG +CxMKUmVsYXhhdGlvbjEXMBUGA1UEAxMOdGhlIHRydXN0ZWQgQ0EwHhcNMTIwMTMw +MTIxODQ5WhcNMjUxMDA4MTIxODQ5WjBdMQswCQYDVQQGEwJVRzEPMA0GA1UEBxMG VHJvcGljMQ8wDQYDVQQKEwZVdG9waWExEzARBgNVBAsTClJlbGF4YXRpb24xFzAV BgNVBAMTDnRoZSB0cnVzdGVkIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKB -gQDZdPzKqIcYF1MYCcE/VZ63Pz8xJB8NcsLDK/VkWKGVGx6PTnanJ7I9k46ruTkb -i362cmIj70qDNZzVlkaPJJ9ncwedhDvxcxofSVzqetI38RsHYBeLFm011W7wsVl3 -FeMbRRBUkcHSULSNU09lxvzSj3sbTqN8BiQWwKsfmCFH8QIDAQABo4HSMIHPMAwG -A1UdEwQFMAMBAf8wHQYDVR0OBBYEFJO6Gw2Fwc+luvR2I+eCL4VngvNpMIGPBgNV -HSMEgYcwgYSAFJO6Gw2Fwc+luvR2I+eCL4VngvNpoWGkXzBdMQswCQYDVQQGEwJV +gQCv4kT+pYDDFXUfbQOMoJ0AZ4h1Bo9z0zSKHhlhVS747qvlgU1oCV6Bnh9RMfWR +kUvvW8lvwDlPiMcQw/DYYTOnQvXXqiuSBr01tEVH7YNVC4mbEYFSIwmjgEW+ol6Z +uIk+9G5SC2MKVN9X5PZjtHIcvLDzopDHW7yEke9jOCyK4wIDAQABo4HSMIHPMAwG +A1UdEwQFMAMBAf8wHQYDVR0OBBYEFGePn60nINcTy7n5GqHFPJ1FtkpMMIGPBgNV +HSMEgYcwgYSAFGePn60nINcTy7n5GqHFPJ1FtkpMoWGkXzBdMQswCQYDVQQGEwJV RzEPMA0GA1UEBxMGVHJvcGljMQ8wDQYDVQQKEwZVdG9waWExEzARBgNVBAsTClJl -bGF4YXRpb24xFzAVBgNVBAMTDnRoZSB0cnVzdGVkIENBggkAm4UnxQprLvgwDgYD -VR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBBQUAA4GBANBi+lIoIhlKOLs1Wbxfu+Mv -0vxde/ZIWjJ6KTTfXpvhshimKPwVfv+kppJA6wdVtVe7Zx5Jwc9Wt/p6lWD6htoI -8p6k9GCk2sT5DcVlErxi1hIwps+RbkuJVPpwQZFpCdpKyOTcfJvhXlbO27ZI6Qyw -dfTq0+pVfIgUoBVG9Rw/ +bGF4YXRpb24xFzAVBgNVBAMTDnRoZSB0cnVzdGVkIENBggkAumQDQ/gx0FAwDgYD +VR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBBQUAA4GBAJpcvcizPwtuF5GERvEQPVlh +sCfrsPXn+e01qAevpIIIRFvWu1W6dC5pRzRyU7QFGPhmgr2kiT4wxZMVAJ5Vpxpz +/nnTiXSQhSMaWclQ7F+mWtrXVkOgdxziILuzNwrvUo+5beGTlxItkcEK2AuAncl1 +88GVBuPADpITbGmca9j0 -----END CERTIFICATE----- diff --git a/test/trusted-ca/trusted.p12 b/test/trusted-ca/trusted.p12 index 62a90c34bff5d029b2ef3935f605a2623cf3b915..4427ebc3e692efa96ed4f772d3014eb996a535e1 100644 GIT binary patch delta 1658 zcmV-=28H>B4uuYoU4KG526)4sIz<8k2mpYB185VV$SU&N`8j#5cDISCI<54T7qKtu z?(hGfZWC}M8I>3ED0n$=;}8p`65p1NGHm^cW4OKG0aF^R=7WJ*sI}7%f~W*JJ2`8R zrC(?|Ma_YE&qke7wS9}h?s7n8FqSD!PR`F?DGx`|8NU9otQhA`dl7W@nQ3OPU*H*R< z9}2TH&_ce+6c4|=;nc=;plUrk1n1DN6B4s&BmE%!Z1WrnNqjdMBVvvl@GYgW71QrT zL2gT{^yeQwtA9LqZJ77gzBo?&Gc02Cjg82Db59nf%x!(`DIWN}n}Y%(rH8>D1+cq! z4IPDv+ZU62M#PCYM8deYZJ>?Fc%~npM}O^WmW1B=1nG-znOOcP4UAz9PT=1EJi*g> zhAZy$x*jgC#9g}!{-4Ab2(pIap%W`FJOv8V^kOaLXbGY=~FvkDWV zTzpnR0Lga;9vD46CwNOd6K4EJRY}n4@NEW zWb=<7O(=fxiQ-9W#3bzp1lV4~K`GF^4m60)AQ6G*4S0Q~y7lzN2(U80X~D<;qki3T z=s7A3pns~Z)(+P95{c-bs_nQ0^;3UHZaOgFnD(09fCn2o#j6f08<&6u@q^p7s|H_; zRB8PXFdn2}i-*bs;al0>svrGZMuH^pR1K|r+!&SXf1i5?@HfHtphqIxrb9j}WtVAMZf9KT@JqYT&pyYRF`)(zixY-ll<(NH zpTkLgU7{2Wtn_IITb;vspwoVlIZNl3nSe=WC6d8V>`~YP#`rynPO$yXqw0^oC}&%C z`hU9ejoLi~GX@ge?w5Tl8Kt`E#KT^8abN-^t^_f9ry z_a3#Hx4MUl`~6sR0?eUp#f@*eX{=ty$$(5zAEwYU zv=fJ`Uo;>qs>9xR^UT26@OUF-Fq75;MSt-YR7oWJro{pR2ml0v0)U&Xuq%ta z?Nq2vo~hD0J_E$lGKYUMnC|^@0y5GE)@2d03j=LsM@mv%<(yl>gWN6gfSw1>A^87I+C*Pb=YJ!ULdiVjVly*%GktEE{l6+P+x2`g4nrl#gixBcPUa%HXxXf*HQaD>gVuAf!9!aZrjldw{>v z$gJrq1w~|uW8&D@*@wa;0*$ZvaumR3jDMI{C!o<7-h*})lll&ZqunrJbsRC%#wdb~^pcnqZS zEdcPP%MT5uCMLxZTh&5D=>F)f-zPKiib=;X1_7a!bLLX9X9(~Zj<a`ItE&C0{b3HNpx(axhMp54N=k?Hz`)#6S z{SW698#Y{(*Wvj_TowzCy_xUQZw*+>Y^VlzL^w@P1WD@H-!iw&3tkmR`2wnMCvB#N*=>h@> E03ysTM*si- delta 1658 zcmV-=28H>B4uuYoU4P^_Z@XOxQPctg2mpYB18CNP;`|J2vKC&WJ|J#u zm}!dF4nU$IJFtS393IK57AJlA)$yoj|Z<{Dbv5g!=f44t;w zT7+8oCEhUwNQ$YJ=CwRazbc!qfiMN@rVAQFzfp)td7s4Wlp2ut*|fxt*zdvwI>?MG zYpsz;f_^986_@k&gFBY~qJld0q;#52B7P3ha&0Nd41ZBYK2=2K;2^XJKHEx-Uf;tW zG;rl>jpp$tPm3m;!gX?>=^B)fWi?n`t-9h`hN~yGJpoR9FSNuN$seza+qLCA)1A>a%NA)yZ@o-i37xS1KZLs(@_AxDwH}s zbiDiln?+|BHM8kB#CEp0)?G$0ZG|#Y)n$9Ao|pAXG1oDX`KONC^loPe#{g{o-iwA^ z$`*Qs?5PM2{{_@8i==mu&RpnqSKQ~!zb2Xw=KA0dousz<_>PPhndhSp6l@KwXqBIJ(1boUf(bU zS=OeBTIx-iA>M_bFd|j={md3M3;HD|(|*W>J;rVgMF@NB)q_7BL`*=*vJJ(TnX4sl zTYr(#rLl;4D?nLc?KSaHVY#kM)F9X^hDJ?nzQ67^z>g4gPDLqkDPkmjp6eZr5(^6I z6ihE{W7}j?sk91Y=Ijl!+nx!JN8_u5sxuAylLC-d7-b7EYTpl{GTz@wg`7Tmq|5uF zTF&&MpeOF2YNP@^HiqT=@0!gh@N8-FFq75;MStYPK_qvIZhQg)2ml0v0)Vg35W_4O z(O51Y*hz4f=$xA|vaY^aQ$GX&2iB~8i%!l%AtMJC#JYykieAU`B%OsOMl7=oeKUHw zw)ab$wE}ReWRU#10oX$%4mB_g?bh8 zWPdw;sJKqRDC4JFKY2=u@O>{AHqZV+3~UBZ{=#e2n6M( zv_5RBO(+4a3!{SSCO1v2$&RQPghK>0el2fz_4$%pVkV@Ui*xo=BQOHXlj zfNX#%G%?{JHv;KNRX(IKB`_lf2`Yw2hW8Bt2^BFG1QdJ?)tM$OPbBg_Pj;pS$!gM5 zSk5ppFd;Ar1_dh)0|FWa00b2DNlV`)&r2h=rxhWk!E+d3OsPo(2x1?y^LCwmxB>zQ E07gm;G5`Po diff --git a/test/trusted-ca/trusted.priv b/test/trusted-ca/trusted.priv index 02ced14..32866cf 100644 --- a/test/trusted-ca/trusted.priv +++ b/test/trusted-ca/trusted.priv @@ -1,15 +1,16 @@ ------BEGIN RSA PRIVATE KEY----- -MIICXAIBAAKBgQDZdPzKqIcYF1MYCcE/VZ63Pz8xJB8NcsLDK/VkWKGVGx6PTnan -J7I9k46ruTkbi362cmIj70qDNZzVlkaPJJ9ncwedhDvxcxofSVzqetI38RsHYBeL -Fm011W7wsVl3FeMbRRBUkcHSULSNU09lxvzSj3sbTqN8BiQWwKsfmCFH8QIDAQAB -AoGBAMDwj6qwRM0XRN67KP8s1Jn6P/M1/WdNP4kz45KZISTO3xp/n79H9Vm1Jo0u -1oCeEFuIuZLwqcgpNXI813YCJHteXrTx12B5iMroBQ2hmm2plgkcok2dS3NQDnGc -3LeiWaljgLJV+MFA/5cRdP39jFo84gJvsf2XbSkbDPzeTmsRAkEA7S+VjWG8Xxol -65B1nozOaXMoKW1hVFxKHb5bF9p2cmkRLXv9ILnhQohwvPx0XQUuejuNicrB9Mzm -M6XYQk5z1wJBAOq0x0eKgsU9yLktqGBUfWTpfk9tYVr4mS43b6uSUZjRGwcs1o7d -5Ew+oyj204kpkSECxCjRabS73XJ9ihBEKXcCQB+NKunJzJMiGVVCvELBHFwus3L/ -V+ku9bULM3by2rrRezV/vuZxk6OUHtslAh21qL8d2PAxhqeX8i+Aqkn3wbUCQHAv -5SlfHc7mD3HkTx1shVuc+FFC+UwglCexO+GI2RPwr7ioSA6WJbAEKL1F7iscAVEE -H3tbTemj+t/k/f90dVUCQH+ns8UJYRLIhuEW0vF5D1LYNFEtAMly96iCRUChciAF -lV8ve1NcgfvujhQPLC5Sj8pNj/omVwUCFNZNaiQf/9o= ------END RSA PRIVATE KEY----- +-----BEGIN PRIVATE KEY----- +MIICdQIBADANBgkqhkiG9w0BAQEFAASCAl8wggJbAgEAAoGBAK/iRP6lgMMVdR9t +A4ygnQBniHUGj3PTNIoeGWFVLvjuq+WBTWgJXoGeH1Ex9ZGRS+9byW/AOU+IxxDD +8NhhM6dC9deqK5IGvTW0RUftg1ULiZsRgVIjCaOARb6iXpm4iT70blILYwpU31fk +9mO0chy8sPOikMdbvISR72M4LIrjAgMBAAECgYARBo43OD4mpEUaLatSSZnpGByV +d3UbeS500EUUrvJFFpV9Oe8MSxvi4DOX4IYs+Suol/H/51Ok51CdxtnhmEcvmKLX +nxnFU+zZIflAThg5IvUIC0GxNq7NNr4omOSciaLwVN8JVxjQD5H7mSajVjXxMeGT +TbyX7dmblQl4qfoVQQJBAN6aHif09z0YEAy2GLxQm+6eFw9k8H32iHn5cg94N9ma ++EYNdsws/qDX9Xes7I3B80n93U9uwPIUklS4xa9/Ru0CQQDKRcMdb5DfgmaW/8Ia +lD9Hm1WChmkN/fb3ooUbPp38pto4QAAfz2vjuXSzkpDIDIOF9Q6azdyrc0SdNg// +XY8PAkA8rvMNnYBRDWBCttmjbK41rK9IqRHOpQirh88KXJGNJuwL3NvH6XQ40ObA +C0opkvgJ8cUFRIIg/G6v3fc2UpI5AkBo3Cedf/Pz2w9CIo7G5qmzfpSi2PlnVoyM +rkUg7aJLk1g3pv4pf4doBAG7AjVqcApTDMqoeCZ4/4XHlnpOoXsDAkBuLWSWMpqS +wX5nmC4bXOUJqOPDgDt3o6QISK9J85tUwb4EmYoFY0VtSyRe5tyWSdxLhc7uCfUZ +eCZueq5lS7YC +-----END PRIVATE KEY----- -- 1.8.2.3