commit 74d9acc144a398c6df238abd5ba154a9ae798a05
author Ron Eldor <Ron.Eldor@arm.com> Thu Mar 21 14:00:03 2019 +0200
committer Ron Eldor <Ron.Eldor@arm.com> Tue May 07 17:05:45 2019 +0300
tree 59325bd2e156b61f8fad082f837d7ee6b5770682
parent b2dc3fa72ed519eb739e41ac25d49eb943bca7a1

Add support for certificate policies extension

Add support for certificate policies, as defined in rfc 5280.
Currently support only `anyPolicy` policy.

tests/data_files/test-ca.opensslconf

diff --git a/tests/data_files/test-ca.opensslconf b/tests/data_files/test-ca.opensslconf
index d345fe9..5f71532 100644
--- a/tests/data_files/test-ca.opensslconf
+++ b/tests/data_files/test-ca.opensslconf
@@ -31,6 +31,26 @@
 hwtype = OID:1.3.6.1.4.1.17.3
 hwserial = OCT:123456
 
+[v3_any_policy_ca]
+basicConstraints = CA:true
+certificatePolicies = 2.5.29.32.0
+
+[v3_any_policy_qualifier_ca]
+basicConstraints = CA:true
+certificatePolicies = @policy_info
+
+[v3_multi_policy_ca]
+basicConstraints = CA:true
+certificatePolicies = 1.2.3.4,2.5.29.32.0
+
+[v3_unsupported_policy_ca]
+basicConstraints = CA:true
+certificatePolicies = 1.2.3.4
+
+[policy_info]
+policyIdentifier = 2.5.29.32.0
+CPS.1 ="CPS uri string"
+
 [noext_ca]
 basicConstraints = CA:true