- Merged back bugfixes from trunk (pre 0.99-pre2):
* Corrected parsing of UTCTime dates before 1990 and after 1950
* Support more exotic OID's when parsing certificates
* Support more exotic name representations when parsing certificates
* Replaced the expired test certificates
* Do not bail out if no client certificate specified. Try to negotiate anonymous connection (Fixes ticket #12)
diff --git a/programs/ssl/test-ca/server2.crt b/programs/ssl/test-ca/server2.crt
index 7f0c7ad..dca4c24 100644
--- a/programs/ssl/test-ca/server2.crt
+++ b/programs/ssl/test-ca/server2.crt
@@ -1,77 +1,77 @@
Certificate:
Data:
Version: 3 (0x2)
- Serial Number: 9 (0x9)
+ Serial Number: 2 (0x2)
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=NL, O=PolarSSL, CN=PolarSSL Test CA
Validity
- Not Before: Feb 10 22:15:12 2009 GMT
- Not After : Feb 10 22:15:12 2011 GMT
+ Not Before: Feb 12 14:44:06 2011 GMT
+ Not After : Feb 12 14:44:06 2021 GMT
Subject: C=NL, O=PolarSSL, CN=localhost
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (2048 bit)
Modulus (2048 bit):
- 00:b0:19:1d:43:4a:e1:f1:67:80:7b:44:3f:25:b9:
- 10:f0:f1:ac:af:59:fb:5c:e3:e7:32:49:f3:b7:a0:
- c1:90:27:83:04:2c:0b:1b:f8:3d:1e:d8:c2:40:67:
- 7a:4a:c0:cd:ab:51:77:34:ee:ae:ac:09:6b:7a:cb:
- 20:23:b3:44:b1:7e:78:a0:95:50:59:36:97:04:57:
- 9a:76:65:e0:08:7a:09:5e:61:16:59:c2:35:eb:e0:
- a1:fd:92:f5:d5:76:c3:57:f3:64:19:25:ff:a9:e3:
- 48:5a:c9:b7:ad:77:c5:81:24:2d:c7:99:d5:a5:15:
- 12:67:69:00:2a:cd:4e:4f:46:40:51:78:36:b5:26:
- 15:9c:73:9c:dc:bd:f9:fe:ac:62:dc:0a:c8:a0:9e:
- aa:06:e9:e5:94:c2:bd:2f:46:d4:54:08:d7:d6:98:
- 69:1f:de:63:fc:09:70:f2:99:c8:63:27:f7:00:96:
- 1e:ad:c3:ee:ce:80:e8:75:ce:50:6b:6c:49:c8:c4:
- 92:04:a0:25:7c:19:6e:d6:e0:43:45:2a:d7:2a:44:
- 4a:03:b9:72:17:a4:c7:01:b9:4e:88:8c:82:63:0f:
- bb:c2:89:98:86:8e:6d:d5:5e:bb:0b:bf:8c:d0:6f:
- 97:15:39:fe:11:c9:cb:de:c5:5b:2c:47:65:07:20:
- b6:cf
+ 00:c1:4d:a3:dd:e7:cd:1d:d1:04:d7:49:72:b8:99:
+ ac:0e:78:e4:3a:3c:4a:cf:3a:13:16:d0:5a:e4:cd:
+ a3:00:88:a7:ee:1e:6b:96:a7:52:b4:90:ef:2d:72:
+ 7a:3e:24:9a:fc:b6:34:ac:24:f5:77:e0:26:64:8c:
+ 9c:b0:28:7d:a1:da:ea:8c:e6:c9:1c:96:bc:fe:c1:
+ 04:52:b3:36:d4:a3:fa:e1:b1:76:d8:90:c1:61:b4:
+ 66:52:36:a2:26:53:aa:ab:74:5e:07:7d:19:82:db:
+ 2a:d8:1f:a0:d9:0d:1c:2d:49:66:f7:5b:25:73:46:
+ e8:0b:8a:4f:69:0c:b5:00:90:e1:da:82:10:66:7d:
+ ae:54:2b:8b:65:79:91:a1:e2:61:c3:cd:40:49:08:
+ ee:68:0c:f1:8b:86:d2:46:bf:d0:b8:aa:11:03:1e:
+ 7f:56:a8:1a:1e:44:18:0f:0f:85:8b:da:8b:44:5e:
+ e2:18:c6:62:2f:c7:66:8d:fa:5d:d8:7d:f3:27:89:
+ 29:01:c5:90:0e:3f:27:f1:30:c8:4a:0e:ef:d6:de:
+ c7:c7:27:6b:c7:05:3d:7a:c4:02:3c:9a:1d:3e:0f:
+ e8:34:98:5b:cb:73:4b:52:96:d8:11:a2:2c:80:88:
+ 69:39:5a:d3:0f:b0:de:59:2f:11:c7:f7:ea:12:01:
+ 30:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
X509v3 Subject Key Identifier:
- 92:0C:8B:3F:E9:D3:EE:6F:08:23:62:0B:D1:68:FD:AC:A6:11:8F:5F
+ A5:05:E8:64:B8:DC:DF:60:0F:50:12:4D:60:A8:64:AF:4D:8B:43:93
X509v3 Authority Key Identifier:
- keyid:CF:22:31:27:91:D8:C2:54:FF:1E:DA:D9:EE:8A:C5:89:32:AD:0C:21
+ keyid:B4:5A:E4:A5:B3:DE:D2:52:F6:B9:D5:A6:95:0F:EB:3E:BC:C7:FD:FF
Signature Algorithm: sha1WithRSAEncryption
- 69:51:68:d7:42:cc:0c:ba:7d:28:6b:0a:36:75:81:ce:56:a7:
- 9a:84:80:f7:69:14:33:56:1c:f0:b4:7d:a1:37:53:f1:7b:ec:
- 4c:41:81:be:d4:3c:ed:01:63:61:a4:78:2c:f9:c3:03:d2:ab:
- 07:5b:22:b6:7b:63:6a:f9:24:f9:4f:d8:97:71:4d:82:f4:1a:
- 59:20:2b:9a:b1:cb:88:65:fa:93:bb:aa:f4:e7:50:31:d0:c8:
- b1:e0:b8:cc:a6:5f:7e:ff:54:25:de:89:df:12:c5:fe:0f:0e:
- c0:14:bb:3f:97:b7:b5:68:af:ab:05:73:6d:62:d0:c4:2b:ab:
- 2d:c2:bc:2f:d3:be:0b:e7:55:8a:25:c2:ac:1c:f6:40:88:8f:
- 21:8c:bd:21:db:b9:9f:b7:b3:44:5b:cb:8c:cc:a5:08:f7:ee:
- f9:1f:92:bd:0f:f5:2e:c1:73:6c:98:7a:9d:4b:93:4e:b1:ec:
- 7e:b7:4b:7f:d3:c4:2c:0d:01:fe:ba:67:63:6a:a5:ec:29:bd:
- 00:3a:46:b5:43:5b:f8:27:94:e5:7b:a2:80:9a:96:1b:7b:4b:
- 73:fb:3b:c6:22:dc:11:7e:27:a6:95:be:3b:10:de:ea:81:6d:
- 3b:71:df:07:13:9c:2c:23:a6:27:d6:06:b9:f8:c7:42:93:5a:
- 92:0f:32:97
+ 9c:67:5c:29:58:a0:79:1b:a7:bd:1c:a8:1a:ec:19:72:f2:6c:
+ 0e:f8:73:36:ce:e5:17:4b:12:01:6c:ee:b1:d5:4b:da:fe:73:
+ 6f:77:96:e4:bf:29:d9:62:2d:27:19:a8:0c:d8:57:29:70:51:
+ f4:56:bc:a3:28:5a:11:d8:2a:9d:dd:10:84:b8:c5:35:e4:eb:
+ fe:73:5f:18:6f:f5:1c:3c:48:67:3c:aa:7e:af:21:31:e4:d5:
+ 2d:66:3d:eb:ed:7a:48:1a:b1:8e:58:89:64:2e:33:78:78:61:
+ 59:51:1f:71:c7:10:c0:03:d5:39:c0:7b:17:d7:1c:70:c5:40:
+ 67:be:05:dd:62:01:bc:f5:fe:c1:fd:1f:c9:78:4a:dc:17:e9:
+ e8:2f:4c:ad:cc:c1:74:70:90:a9:2f:8c:a6:84:0c:0f:40:4d:
+ b6:71:d2:62:3c:2c:6b:31:4a:e0:aa:7b:da:fd:77:28:e6:b6:
+ d7:78:ec:9d:69:d5:1b:a5:cf:70:8b:cd:a4:5c:54:8b:92:45:
+ 14:1f:68:3f:27:78:cf:5c:d5:2f:e2:27:f6:a6:4d:5a:89:c4:
+ 0d:4a:39:d3:92:e7:bf:34:5a:13:df:48:0a:c0:fa:0e:2a:02:
+ 64:a3:7a:57:37:a7:8c:16:a6:16:bc:ce:1b:98:c2:35:6e:5f:
+ a2:47:1b:47
-----BEGIN CERTIFICATE-----
-MIIDNzCCAh+gAwIBAgIBCTANBgkqhkiG9w0BAQUFADA7MQswCQYDVQQGEwJOTDER
+MIIDNzCCAh+gAwIBAgIBAjANBgkqhkiG9w0BAQUFADA7MQswCQYDVQQGEwJOTDER
MA8GA1UEChMIUG9sYXJTU0wxGTAXBgNVBAMTEFBvbGFyU1NMIFRlc3QgQ0EwHhcN
-MDkwMjEwMjIxNTEyWhcNMTEwMjEwMjIxNTEyWjA0MQswCQYDVQQGEwJOTDERMA8G
+MTEwMjEyMTQ0NDA2WhcNMjEwMjEyMTQ0NDA2WjA0MQswCQYDVQQGEwJOTDERMA8G
A1UEChMIUG9sYXJTU0wxEjAQBgNVBAMTCWxvY2FsaG9zdDCCASIwDQYJKoZIhvcN
-AQEBBQADggEPADCCAQoCggEBALAZHUNK4fFngHtEPyW5EPDxrK9Z+1zj5zJJ87eg
-wZAngwQsCxv4PR7YwkBnekrAzatRdzTurqwJa3rLICOzRLF+eKCVUFk2lwRXmnZl
-4Ah6CV5hFlnCNevgof2S9dV2w1fzZBkl/6njSFrJt613xYEkLceZ1aUVEmdpACrN
-Tk9GQFF4NrUmFZxznNy9+f6sYtwKyKCeqgbp5ZTCvS9G1FQI19aYaR/eY/wJcPKZ
-yGMn9wCWHq3D7s6A6HXOUGtsScjEkgSgJXwZbtbgQ0Uq1ypESgO5chekxwG5ToiM
-gmMPu8KJmIaObdVeuwu/jNBvlxU5/hHJy97FWyxHZQcgts8CAwEAAaNNMEswCQYD
-VR0TBAIwADAdBgNVHQ4EFgQUkgyLP+nT7m8II2IL0Wj9rKYRj18wHwYDVR0jBBgw
-FoAUzyIxJ5HYwlT/HtrZ7orFiTKtDCEwDQYJKoZIhvcNAQEFBQADggEBAGlRaNdC
-zAy6fShrCjZ1gc5Wp5qEgPdpFDNWHPC0faE3U/F77ExBgb7UPO0BY2GkeCz5wwPS
-qwdbIrZ7Y2r5JPlP2JdxTYL0GlkgK5qxy4hl+pO7qvTnUDHQyLHguMymX37/VCXe
-id8Sxf4PDsAUuz+Xt7Vor6sFc21i0MQrqy3CvC/TvgvnVYolwqwc9kCIjyGMvSHb
-uZ+3s0Rby4zMpQj37vkfkr0P9S7Bc2yYep1Lk06x7H63S3/TxCwNAf66Z2Nqpewp
-vQA6RrVDW/gnlOV7ooCalht7S3P7O8Yi3BF+J6aVvjsQ3uqBbTtx3wcTnCwjpifW
-Brn4x0KTWpIPMpc=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-----END CERTIFICATE-----