Paul Bakker | 37940d9f | 2009-07-10 22:38:58 +0000 | [diff] [blame] | 1 | X509 Certificate information #1 |
| 2 | x509_cert_info:"data_files/server1.crt":"cert. version \: 3\nserial number \: 01\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued on \: 2009-02-09 21\:12\:35\nexpires on \: 2011-02-09 21\:12\:35\nsigned using \: RSA+SHA1\nRSA key size \: 2048 bits\n" |
| 3 | |
| 4 | X509 Certificate information #2 |
| 5 | x509_cert_info:"data_files/server2.crt":"cert. version \: 3\nserial number \: 09\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2009-02-10 22\:15\:12\nexpires on \: 2011-02-10 22\:15\:12\nsigned using \: RSA+SHA1\nRSA key size \: 2048 bits\n" |
| 6 | |
| 7 | X509 Certificate information #2 |
| 8 | x509_cert_info:"data_files/test-ca.crt":"cert. version \: 3\nserial number \: 00\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued on \: 2009-02-09 21\:12\:25\nexpires on \: 2019-02-10 21\:12\:25\nsigned using \: RSA+SHA1\nRSA key size \: 2048 bits\n" |
| 9 | |
| 10 | X509 CRL information #1 |
| 11 | x509_crl_info:"data_files/crl_expired.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2009-02-09 21\:12\:36\nnext update \: 2009-04-10 21\:12\:36\nRevoked certificates\:\nserial number\: 01 revocation date\: 2009-02-09 21\:12\:36\nserial number\: 03 revocation date\: 2009-02-09 21\:12\:36\nsigned using \: RSA+SHA1" |
| 12 | |
| 13 | X509 Parse Key #1 (No password when required) |
| 14 | x509parse_key:"data_files/test-ca.key":NULL:POLARSSL_ERR_X509_KEY_PASSWORD_REQUIRED |
| 15 | |
| 16 | X509 Parse Key #2 (Correct password) |
| 17 | x509parse_key:"data_files/test-ca.key":"PolarSSLTest":0 |
| 18 | |
| 19 | X509 Parse Key #3 (Wrong password) |
| 20 | x509parse_key:"data_files/test-ca.key":"PolarSSLWRONG":POLARSSL_ERR_X509_KEY_PASSWORD_MISMATCH |
| 21 | |
| 22 | X509 Get Distinguished Name #1 |
| 23 | x509_dn_gets:"data_files/server1.crt":subject:"C=NL, O=PolarSSL, CN=PolarSSL Server 1" |
| 24 | |
| 25 | X509 Get Distinguished Name #2 |
| 26 | x509_dn_gets:"data_files/server1.crt":issuer:"C=NL, O=PolarSSL, CN=PolarSSL Test CA" |
| 27 | |
| 28 | X509 Get Distinguished Name #3 |
| 29 | x509_dn_gets:"data_files/server2.crt":subject:"C=NL, O=PolarSSL, CN=localhost" |
| 30 | |
| 31 | X509 Get Distinguished Name #4 |
| 32 | x509_dn_gets:"data_files/server2.crt":issuer:"C=NL, O=PolarSSL, CN=PolarSSL Test CA" |
| 33 | |
| 34 | X509 Time Expired #1 |
| 35 | x509_time_expired:"data_files/server1.crt":valid_from:1 |
| 36 | |
| 37 | X509 Time Expired #2 |
| 38 | x509_time_expired:"data_files/server1.crt":valid_to:0 |
| 39 | |
| 40 | X509 Time Expired #3 |
| 41 | x509_time_expired:"data_files/server2.crt":valid_from:1 |
| 42 | |
| 43 | X509 Time Expired #4 |
| 44 | x509_time_expired:"data_files/server2.crt":valid_to:0 |
| 45 | |
| 46 | X509 Time Expired #5 |
| 47 | x509_time_expired:"data_files/test-ca.crt":valid_from:1 |
| 48 | |
| 49 | X509 Time Expired #6 |
| 50 | x509_time_expired:"data_files/test-ca.crt":valid_to:0 |
| 51 | |
Paul Bakker | 4d6b31a | 2009-07-12 11:11:06 +0000 | [diff] [blame] | 52 | X509 Certificate verification #1 (Revoked Cert, Expired CRL) |
Paul Bakker | 37940d9f | 2009-07-10 22:38:58 +0000 | [diff] [blame] | 53 | x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":NULL:BADCERT_REVOKED | BADCRL_EXPIRED |
| 54 | |
Paul Bakker | 4d6b31a | 2009-07-12 11:11:06 +0000 | [diff] [blame] | 55 | X509 Certificate verification #2 (Revoked Cert, Expired CRL) |
Paul Bakker | 37940d9f | 2009-07-10 22:38:58 +0000 | [diff] [blame] | 56 | x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"PolarSSL Server 1":BADCERT_REVOKED | BADCRL_EXPIRED |
| 57 | |
Paul Bakker | 4d6b31a | 2009-07-12 11:11:06 +0000 | [diff] [blame] | 58 | X509 Certificate verification #3 (Revoked Cert, Expired CRL, CN Mismatch) |
Paul Bakker | 37940d9f | 2009-07-10 22:38:58 +0000 | [diff] [blame] | 59 | x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"PolarSSL Wrong CN":BADCERT_REVOKED | BADCRL_EXPIRED | BADCERT_CN_MISMATCH |
| 60 | |
Paul Bakker | 4d6b31a | 2009-07-12 11:11:06 +0000 | [diff] [blame] | 61 | X509 Certificate verification #4 (Valid Cert, Expired CRL) |
Paul Bakker | 37940d9f | 2009-07-10 22:38:58 +0000 | [diff] [blame] | 62 | x509_verify:"data_files/server2.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":NULL:BADCRL_EXPIRED |
| 63 | |
Paul Bakker | 4d6b31a | 2009-07-12 11:11:06 +0000 | [diff] [blame] | 64 | X509 Certificate verification #5 (Revoked Cert) |
| 65 | x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:BADCERT_REVOKED |
| 66 | |
| 67 | X509 Certificate verification #6 (Revoked Cert) |
| 68 | x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"PolarSSL Server 1":BADCERT_REVOKED |
| 69 | |
| 70 | X509 Certificate verification #7 (Revoked Cert, CN Mismatch) |
| 71 | x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"PolarSSL Wrong CN":BADCERT_REVOKED | BADCERT_CN_MISMATCH |
| 72 | |
| 73 | X509 Certificate verification #8 (Valid Cert) |
| 74 | x509_verify:"data_files/server2.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0 |
| 75 | |
| 76 | X509 Certificate verification #9 (Not trusted Cert) |
| 77 | x509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl.pem":NULL:BADCERT_NOT_TRUSTED |
| 78 | |
| 79 | X509 Certificate verification #10 (Not trusted Cert, Expired CRL) |
Paul Bakker | 37940d9f | 2009-07-10 22:38:58 +0000 | [diff] [blame] | 80 | x509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl_expired.pem":NULL:BADCERT_NOT_TRUSTED |
| 81 | |
Paul Bakker | 4d6b31a | 2009-07-12 11:11:06 +0000 | [diff] [blame] | 82 | X509 Certificate verification #11 (Valid Cert MD2 Digest) |
| 83 | x509_verify:"data_files/cert_md2.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0 |
| 84 | |
| 85 | X509 Certificate verification #12 (Valid Cert MD4 Digest) |
| 86 | x509_verify:"data_files/cert_md4.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0 |
| 87 | |
| 88 | X509 Certificate verification #13 (Valid Cert MD5 Digest) |
| 89 | x509_verify:"data_files/cert_md5.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0 |
| 90 | |
| 91 | X509 Certificate verification #14 (Valid Cert SHA1 Digest) |
| 92 | x509_verify:"data_files/cert_sha1.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0 |
| 93 | |
| 94 | X509 Certificate verification #15 (Valid Cert SHA224 Digest) |
| 95 | x509_verify:"data_files/cert_sha224.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0 |
| 96 | |
| 97 | X509 Certificate verification #16 (Valid Cert SHA256 Digest) |
| 98 | x509_verify:"data_files/cert_sha256.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0 |
| 99 | |
| 100 | X509 Certificate verification #17 (Valid Cert SHA384 Digest) |
| 101 | x509_verify:"data_files/cert_sha384.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0 |
| 102 | |
| 103 | X509 Certificate verification #18 (Valid Cert SHA512 Digest) |
| 104 | x509_verify:"data_files/cert_sha512.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0 |
| 105 | |
Paul Bakker | 37940d9f | 2009-07-10 22:38:58 +0000 | [diff] [blame] | 106 | X509 Parse Selftest |
| 107 | x509_selftest: |