TrustedFirmware Git Browser
Code Review Sign In
review.trustedfirmware.org / mirror / mbed-tls / 0f5ca2dc8709b979813694e395639d63d417a5c3 / . / tests / data_files / test-ca.opensslconf
blob: ff22cdbb49c1f45c4895a2966ccf11bcebb34f67 [file] [log] [blame]
Gilles Peskinef040a172017-05-05 18:56:12 +0200[diff] [blame]1[req]
2x509_extensions = v3_ca
3distinguished_name = req_dn
4
5[req_dn]
6countryName = NL
7organizationalUnitName = PolarSSL
8commonName = PolarSSL Test CA
9
10[v3_ca]
11subjectKeyIdentifier=hash
12authorityKeyIdentifier=keyid:always,issuer:always
13basicConstraints = CA:true
Manuel Pégourié-Gonnardc10afdb2017-06-29 09:48:08 +0200[diff] [blame]14
Pengyu Lv0f5ca2d2023-05-25 09:24:17 +0800[diff] [blame^]15[no_subj_auth_id]
16subjectKeyIdentifier=none
17authorityKeyIdentifier=none
18basicConstraints = CA:true
19
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200[diff] [blame]20[othername_san]
21subjectAltName=otherName:1.3.6.1.5.5.7.8.4;SEQ:hw_module_name
22
Victor Barpp Gomesd0225af2022-09-29 11:40:20 -0300[diff] [blame]23[nonprintable_othername_san]
24subjectAltName=otherName:1.3.6.1.5.5.7.8.4;SEQ:nonprintable_hw_module_name
25
David Horstmann119d7e22022-11-25 15:50:30 +0000[diff] [blame]26[unsupported_othername_san]
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200[diff] [blame]27subjectAltName=otherName:1.2.3.4;UTF8:some other identifier
28
Ron Eldor9eeb8612019-02-12 15:03:42 +0200[diff] [blame]29[dns_alt_names]
30subjectAltName=DNS:example.com, DNS:example.net, DNS:*.example.org
31
Przemek Stekiel608e3ef2023-02-09 14:47:50 +0100[diff] [blame]32[rfc822name_names]
33subjectAltName=email:my@other.address,email:second@other.address
34
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200[diff] [blame]35[alt_names]
36DNS.1=example.com
37otherName.1=1.3.6.1.5.5.7.8.4;SEQ:hw_module_name
38DNS.2=example.net
39DNS.3=*.example.org
40
41[multiple_san]
42subjectAltName=@alt_names
43
44[hw_module_name]
45hwtype = OID:1.3.6.1.4.1.17.3
46hwserial = OCT:123456
47
Victor Barpp Gomesd0225af2022-09-29 11:40:20 -0300[diff] [blame]48[nonprintable_hw_module_name]
49hwtype = OID:1.3.6.1.4.1.17.3
50hwserial = FORMAT:HEX, OCT:3132338081008180333231
51
Ron Eldor74d9acc2019-03-21 14:00:03 +0200[diff] [blame]52[v3_any_policy_ca]
53basicConstraints = CA:true
54certificatePolicies = 2.5.29.32.0
55
56[v3_any_policy_qualifier_ca]
57basicConstraints = CA:true
58certificatePolicies = @policy_info
59
60[v3_multi_policy_ca]
61basicConstraints = CA:true
62certificatePolicies = 1.2.3.4,2.5.29.32.0
63
64[v3_unsupported_policy_ca]
65basicConstraints = CA:true
66certificatePolicies = 1.2.3.4
67
68[policy_info]
69policyIdentifier = 2.5.29.32.0
70CPS.1 ="CPS uri string"
71
Ron Eldor3c4734a2019-03-25 14:05:23 +0200[diff] [blame]72[fan_cert]
73extendedKeyUsage = 1.3.6.1.4.1.45605.1
74
Manuel Pégourié-Gonnardc10afdb2017-06-29 09:48:08 +0200[diff] [blame]75[noext_ca]
76basicConstraints = CA:true
Gilles Peskine15ad5792018-03-22 22:21:55 +0100[diff] [blame]77
Manuel Pégourié-Gonnardfd3e4fb2018-03-13 11:53:30 +0100[diff] [blame]78[test_ca]
79database = /dev/null
80
81[crl_ext_idp]
82issuingDistributionPoint=critical, @idpdata
83
Manuel Pégourié-Gonnarda63305d2018-03-14 12:23:56 +0100[diff] [blame]84[crl_ext_idp_nc]
85issuingDistributionPoint=@idpdata
86
Manuel Pégourié-Gonnardfd3e4fb2018-03-13 11:53:30 +0100[diff] [blame]87[idpdata]
88fullname=URI:http://pki.example.com/
Manuel Pégourié-Gonnard7d2a4d82020-07-23 12:39:53 +0200[diff] [blame]89
90# these IPs are the ascii values for 'abcd' and 'abcd.example.com'
91[tricky_ip_san]
92subjectAltName=IP:97.98.99.100,IP:6162:6364:2e65:7861:6d70:6c65:2e63:6f6d
Przemek Stekiele7fbbb32023-01-12 15:30:45 +0100[diff] [blame]93
94[csr_ext_v3_keyUsage]
95keyUsage = digitalSignature, keyEncipherment
96
97[csr_ext_v3_subjectAltName]
98subjectAltName=DNS:example.com, DNS:example.net, DNS:*.example.org
99
100[csr_ext_v3_nsCertType]
101nsCertType=server
102
103[csr_ext_v3_all]
104keyUsage = cRLSign
105subjectAltName=otherName:1.3.6.1.5.5.7.8.4;SEQ:nonprintable_hw_module_name
106nsCertType=client
Andrzej Kureke12b01d2023-01-10 06:47:38 -0500[diff] [blame]107
108[directory_name_san]
109subjectAltName=dirName:dirname_sect
110
Andrzej Kurek4a4f1ec2023-01-12 06:51:20 -0500[diff] [blame]111[bad_second_directory_name_san]
112subjectAltName=dirName:dirname_sect, dirName:dirname_sect_bad
113
Andrzej Kureke12b01d2023-01-10 06:47:38 -0500[diff] [blame]114[dirname_sect]
115C=UK
116O=Mbed TLS
117CN=Mbed TLS directoryName SAN
Andrzej Kurek4a4f1ec2023-01-12 06:51:20 -0500[diff] [blame]118
119[two_directorynames]
120O=MALFORM_ME