openssl/test/certs
Lutz Jaenicke 386ab7f1fe Add test cases for verification of time stamping certificates
Test makes sure, that both time stamping certificate according to rfc3161 (no
requirements for keyUsage extension) and according to CAB forum (keyUsage
extension must be digitalSignature and be set critical) are accepted. Misuse
cases as stated in CAB forum are rejected, only exeption is a missing
"critial" flag on keyUsage.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/18597)
2022-06-22 16:58:08 +10:00
..
alt1-cert.pem
alt1-key.pem
alt2-cert.pem
alt2-key.pem
alt3-cert.pem
alt3-key.pem
bad-othername-namec-inter.pem
bad-othername-namec-key.pem
bad-othername-namec.pem
bad-pc3-cert.pem
bad-pc3-key.pem
bad-pc4-cert.pem
bad-pc4-key.pem
bad-pc6-cert.pem
bad-pc6-key.pem
bad.key
bad.pem
badalt1-cert.pem
badalt1-key.pem
badalt2-cert.pem
badalt2-key.pem
badalt3-cert.pem
badalt3-key.pem
badalt4-cert.pem
badalt4-key.pem
badalt5-cert.pem
badalt5-key.pem
badalt6-cert.pem
badalt6-key.pem
badalt7-cert.pem
badalt7-key.pem
badalt8-cert.pem
badalt8-key.pem
badalt9-cert.pem
badalt9-key.pem
badalt10-cert.pem
badalt10-key.pem
badcn1-cert.pem
badcn1-key.pem
ca-anyEKU.pem
ca-cert2.pem
ca-cert-768.pem
ca-cert-768i.pem
ca-cert-ec-explicit.pem
ca-cert-ec-named.pem
ca-cert-md5-any.pem
ca-cert-md5.pem
ca-cert.pem
ca-clientAuth.pem
ca-expired.pem
ca-key2.pem
ca-key-768.pem
ca-key-ec-explicit.pem
ca-key-ec-named.pem
ca-key.pem
ca-name2.pem
ca-nonbc.pem
ca-nonca.pem
ca-pss-cert.pem
ca-pss-key.pem
ca-root2.pem
ca-serverAuth.pem
ca+anyEKU.pem
ca+clientAuth.pem
ca+serverAuth.pem
cca-anyEKU.pem
cca-cert.pem
cca-clientAuth.pem
cca-serverAuth.pem
cca+anyEKU.pem
cca+clientAuth.pem
cca+serverAuth.pem
cert-key-cert.pem
client-ed448-cert.pem
client-ed448-key.pem
client-ed25519-cert.pem
client-ed25519-key.pem
client-pss-restrict-cert.pem Enable setting SSL_CERT_FLAG_TLS_STRICT with ssl config 2022-06-03 13:22:42 +10:00
client-pss-restrict-key.pem Enable setting SSL_CERT_FLAG_TLS_STRICT with ssl config 2022-06-03 13:22:42 +10:00
croot-anyEKU.pem
croot-cert.pem
croot-clientAuth.pem
croot-serverAuth.pem
croot+anyEKU.pem
croot+clientAuth.pem
croot+serverAuth.pem
cross-key.pem
cross-root.pem
ct-server-key-public.pem
ct-server-key.pem
cyrillic_crl.pem
cyrillic_crl.utf8
cyrillic.msb
cyrillic.pem
cyrillic.utf8
dhk2048.pem
dhp2048.pem
ec_privkey_with_chain.pem
ee-cert2.pem
ee-cert-768.pem
ee-cert-768i.pem
ee-cert-1024.pem
ee-cert-3072.pem
ee-cert-4096.pem
ee-cert-8192.pem
ee-cert-crit-unknown-ext.pem
ee-cert-ec-explicit.pem
ee-cert-ec-named-explicit.pem
ee-cert-ec-named-named.pem
ee-cert-md5.pem
ee-cert-noncrit-unknown-ext.pem
ee-cert-ocsp-nocheck.pem
ee-cert.pem
ee-client-chain.pem
ee-client.pem
ee-clientAuth.pem
ee-ecdsa-client-chain.pem
ee-ecdsa-key.pem
ee-ed25519.pem
ee-expired.pem
ee-key-768.pem
ee-key-1024.pem
ee-key-3072.pem
ee-key-4096.pem
ee-key-8192.pem
ee-key-ec-explicit.pem
ee-key-ec-named-explicit.pem
ee-key-ec-named-named.pem
ee-key.pem
ee-name2.pem
ee-pathlen.pem
ee-pss-cert.pem
ee-pss-sha1-cert.pem
ee-pss-sha256-cert.pem
ee-pss-wrong1.5-cert.pem
ee-self-signed.pem
ee-serverAuth.pem
ee-ss-with-keyCertSign.pem
ee-timestampsign-CABforum-anyextkeyusage.pem Add test cases for verification of time stamping certificates 2022-06-22 16:58:08 +10:00
ee-timestampsign-CABforum-crlsign.pem Add test cases for verification of time stamping certificates 2022-06-22 16:58:08 +10:00
ee-timestampsign-CABforum-keycertsign.pem Add test cases for verification of time stamping certificates 2022-06-22 16:58:08 +10:00
ee-timestampsign-CABforum-noncritxku.pem Add test cases for verification of time stamping certificates 2022-06-22 16:58:08 +10:00
ee-timestampsign-CABforum-serverauth.pem Add test cases for verification of time stamping certificates 2022-06-22 16:58:08 +10:00
ee-timestampsign-CABforum.pem Add test cases for verification of time stamping certificates 2022-06-22 16:58:08 +10:00
ee-timestampsign-rfc3161-digsig.pem Add test cases for verification of time stamping certificates 2022-06-22 16:58:08 +10:00
ee-timestampsign-rfc3161-noncritxku.pem Add test cases for verification of time stamping certificates 2022-06-22 16:58:08 +10:00
ee-timestampsign-rfc3161.pem Add test cases for verification of time stamping certificates 2022-06-22 16:58:08 +10:00
ee+clientAuth.pem
ee+serverAuth.pem
embeddedSCTs1_issuer-key.pem Change the SCT issuer key to RSA 2048 2022-06-03 17:17:08 +02:00
embeddedSCTs1_issuer.pem Change the SCT issuer key to RSA 2048 2022-06-03 17:17:08 +02:00
embeddedSCTs1-key.pem
embeddedSCTs1.pem Change the SCT issuer key to RSA 2048 2022-06-03 17:17:08 +02:00
embeddedSCTs1.sct Change the SCT issuer key to RSA 2048 2022-06-03 17:17:08 +02:00
embeddedSCTs1.tlssct
embeddedSCTs3_issuer.pem
embeddedSCTs3.pem
embeddedSCTs3.sct
ext-check.csr 25-test_req.t: Add systematic SKID+AKID tests for self-issued (incl. self-signed) certs 2021-11-11 20:18:56 +01:00
fake-gp.pem
goodcn1-cert.pem
goodcn1-key.pem
goodcn2-cert.pem Add a new Name Constraints test cert 2021-12-14 13:48:34 +00:00
goodcn2-chain.pem Add a TLS test for name constraints with an EE cert without a SAN 2021-12-14 13:48:34 +00:00
goodcn2-key.pem Add a new Name Constraints test cert 2021-12-14 13:48:34 +00:00
grfc.pem
interCA.key
interCA.pem
invalid-cert.pem
key-pass-12345.pem
leaf-chain.pem
leaf-encrypted.key Test that PEM_BUFSIZE is passed into pem_password_cb 2022-01-03 10:35:36 +01:00
leaf.key
leaf.pem
many-constraints.pem
many-names1.pem
many-names2.pem
many-names3.pem
mkcert.sh Add a new Name Constraints test cert 2021-12-14 13:48:34 +00:00
nca+anyEKU.pem
nca+serverAuth.pem
ncca1-cert.pem
ncca1-key.pem
ncca2-cert.pem
ncca2-key.pem
ncca3-cert.pem
ncca3-key.pem
ncca-cert.pem
ncca-key.pem
nroot+anyEKU.pem
nroot+serverAuth.pem
p256-server-cert.pem
p256-server-key.pem
p384-root-key.pem
p384-root.pem
p384-server-cert.pem
p384-server-key.pem
pathlen.pem
pc1-cert.pem
pc1-key.pem
pc2-cert.pem
pc2-key.pem
pc5-cert.pem
pc5-key.pem
root2-serverAuth.pem
root2+clientAuth.pem
root2+serverAuth.pem
root-anyEKU.pem
root-cert2.pem
root-cert-768.pem
root-cert-md5.pem
root-cert-rsa2.pem
root-cert.pem
root-clientAuth.pem
root-cross-cert.pem
root-ed448-cert.pem
root-ed448-key.pem
root-ed25519.pem
root-ed25519.privkey.pem
root-ed25519.pubkey.pem
root-expired.pem
root-key2.pem
root-key-768.pem
root-key.pem
root-name2.pem
root-nonca.pem
root-noserver.pem
root-serverAuth.pem
root+anyEKU.pem
root+clientAuth.pem
root+serverAuth.pem
rootCA.key
rootCA.pem
rootcert.pem
rootkey.pem
roots.pem
sca-anyEKU.pem
sca-cert.pem
sca-clientAuth.pem
sca-serverAuth.pem
sca+anyEKU.pem
sca+clientAuth.pem
sca+serverAuth.pem
server-cecdsa-cert.pem
server-cecdsa-key.pem
server-dsa-cert.pem
server-dsa-key.pem
server-dsa-pubkey.pem
server-ecdsa-brainpoolP256r1-cert.pem
server-ecdsa-brainpoolP256r1-key.pem
server-ecdsa-cert.pem
server-ecdsa-key.pem
server-ed448-cert.pem
server-ed448-key.pem
server-ed25519-cert.pem
server-ed25519-key.pem
server-pss-cert.pem
server-pss-key.pem
server-pss-restrict-cert.pem
server-pss-restrict-key.pem
server-trusted.pem
servercert.pem
serverkey.pem
setup.sh Add test cases for verification of time stamping certificates 2022-06-22 16:58:08 +10:00
sm2-ca-cert.pem Update further expiring certificates that affect tests 2022-06-05 10:59:40 +02:00
sm2-csr.pem
sm2-root.crt Update further expiring certificates that affect tests 2022-06-05 10:59:40 +02:00
sm2-root.key
sm2.key
sm2.pem Update further expiring certificates that affect tests 2022-06-05 10:59:40 +02:00
some-names1.pem
some-names2.pem
some-names3.pem
sroot-anyEKU.pem
sroot-cert.pem
sroot-clientAuth.pem
sroot-serverAuth.pem
sroot+anyEKU.pem
sroot+clientAuth.pem
sroot+serverAuth.pem
subinterCA-ss.pem
subinterCA.key
subinterCA.pem
untrusted.pem
v3-certs-RC2.p12
v3-certs-TDES.p12
wrongcert.pem
wrongkey.pem
x509-check-key.pem
x509-check.csr