| Paul Bakker | 37940d9f | 2009-07-10 22:38:58 +0000 | [diff] [blame] | 1 | X509 Certificate information #1 |
| 2 | x509_cert_info:"data_files/server1.crt":"cert. version \: 3\nserial number \: 01\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued on \: 2009-02-09 21\:12\:35\nexpires on \: 2011-02-09 21\:12\:35\nsigned using \: RSA+SHA1\nRSA key size \: 2048 bits\n" |
| 3 | |
| 4 | X509 Certificate information #2 |
| 5 | x509_cert_info:"data_files/server2.crt":"cert. version \: 3\nserial number \: 09\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2009-02-10 22\:15\:12\nexpires on \: 2011-02-10 22\:15\:12\nsigned using \: RSA+SHA1\nRSA key size \: 2048 bits\n" |
| 6 | |
| 7 | X509 Certificate information #2 |
| 8 | x509_cert_info:"data_files/test-ca.crt":"cert. version \: 3\nserial number \: 00\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued on \: 2009-02-09 21\:12\:25\nexpires on \: 2019-02-10 21\:12\:25\nsigned using \: RSA+SHA1\nRSA key size \: 2048 bits\n" |
| 9 | |
| 10 | X509 CRL information #1 |
| 11 | x509_crl_info:"data_files/crl_expired.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2009-02-09 21\:12\:36\nnext update \: 2009-04-10 21\:12\:36\nRevoked certificates\:\nserial number\: 01 revocation date\: 2009-02-09 21\:12\:36\nserial number\: 03 revocation date\: 2009-02-09 21\:12\:36\nsigned using \: RSA+SHA1" |
| 12 | |
| 13 | X509 Parse Key #1 (No password when required) |
| 14 | x509parse_key:"data_files/test-ca.key":NULL:POLARSSL_ERR_X509_KEY_PASSWORD_REQUIRED |
| 15 | |
| 16 | X509 Parse Key #2 (Correct password) |
| 17 | x509parse_key:"data_files/test-ca.key":"PolarSSLTest":0 |
| 18 | |
| 19 | X509 Parse Key #3 (Wrong password) |
| 20 | x509parse_key:"data_files/test-ca.key":"PolarSSLWRONG":POLARSSL_ERR_X509_KEY_PASSWORD_MISMATCH |
| 21 | |
| 22 | X509 Get Distinguished Name #1 |
| 23 | x509_dn_gets:"data_files/server1.crt":subject:"C=NL, O=PolarSSL, CN=PolarSSL Server 1" |
| 24 | |
| 25 | X509 Get Distinguished Name #2 |
| 26 | x509_dn_gets:"data_files/server1.crt":issuer:"C=NL, O=PolarSSL, CN=PolarSSL Test CA" |
| 27 | |
| 28 | X509 Get Distinguished Name #3 |
| 29 | x509_dn_gets:"data_files/server2.crt":subject:"C=NL, O=PolarSSL, CN=localhost" |
| 30 | |
| 31 | X509 Get Distinguished Name #4 |
| 32 | x509_dn_gets:"data_files/server2.crt":issuer:"C=NL, O=PolarSSL, CN=PolarSSL Test CA" |
| 33 | |
| 34 | X509 Time Expired #1 |
| 35 | x509_time_expired:"data_files/server1.crt":valid_from:1 |
| 36 | |
| 37 | X509 Time Expired #2 |
| 38 | x509_time_expired:"data_files/server1.crt":valid_to:0 |
| 39 | |
| 40 | X509 Time Expired #3 |
| 41 | x509_time_expired:"data_files/server2.crt":valid_from:1 |
| 42 | |
| 43 | X509 Time Expired #4 |
| 44 | x509_time_expired:"data_files/server2.crt":valid_to:0 |
| 45 | |
| 46 | X509 Time Expired #5 |
| 47 | x509_time_expired:"data_files/test-ca.crt":valid_from:1 |
| 48 | |
| 49 | X509 Time Expired #6 |
| 50 | x509_time_expired:"data_files/test-ca.crt":valid_to:0 |
| 51 | |
| Paul Bakker | 4d6b31a | 2009-07-12 11:11:06 +0000 | [diff] [blame] | 52 | X509 Certificate verification #1 (Revoked Cert, Expired CRL) |
| Paul Bakker | 37940d9f | 2009-07-10 22:38:58 +0000 | [diff] [blame] | 53 | x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":NULL:BADCERT_REVOKED | BADCRL_EXPIRED |
| 54 | |
| Paul Bakker | 4d6b31a | 2009-07-12 11:11:06 +0000 | [diff] [blame] | 55 | X509 Certificate verification #2 (Revoked Cert, Expired CRL) |
| Paul Bakker | 37940d9f | 2009-07-10 22:38:58 +0000 | [diff] [blame] | 56 | x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"PolarSSL Server 1":BADCERT_REVOKED | BADCRL_EXPIRED |
| 57 | |
| Paul Bakker | 4d6b31a | 2009-07-12 11:11:06 +0000 | [diff] [blame] | 58 | X509 Certificate verification #3 (Revoked Cert, Expired CRL, CN Mismatch) |
| Paul Bakker | 37940d9f | 2009-07-10 22:38:58 +0000 | [diff] [blame] | 59 | x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"PolarSSL Wrong CN":BADCERT_REVOKED | BADCRL_EXPIRED | BADCERT_CN_MISMATCH |
| 60 | |
| Paul Bakker | 4d6b31a | 2009-07-12 11:11:06 +0000 | [diff] [blame] | 61 | X509 Certificate verification #4 (Valid Cert, Expired CRL) |
| Paul Bakker | 37940d9f | 2009-07-10 22:38:58 +0000 | [diff] [blame] | 62 | x509_verify:"data_files/server2.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":NULL:BADCRL_EXPIRED |
| 63 | |
| Paul Bakker | 4d6b31a | 2009-07-12 11:11:06 +0000 | [diff] [blame] | 64 | X509 Certificate verification #5 (Revoked Cert) |
| 65 | x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:BADCERT_REVOKED |
| 66 | |
| 67 | X509 Certificate verification #6 (Revoked Cert) |
| 68 | x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"PolarSSL Server 1":BADCERT_REVOKED |
| 69 | |
| 70 | X509 Certificate verification #7 (Revoked Cert, CN Mismatch) |
| 71 | x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"PolarSSL Wrong CN":BADCERT_REVOKED | BADCERT_CN_MISMATCH |
| 72 | |
| 73 | X509 Certificate verification #8 (Valid Cert) |
| 74 | x509_verify:"data_files/server2.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0 |
| 75 | |
| 76 | X509 Certificate verification #9 (Not trusted Cert) |
| 77 | x509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl.pem":NULL:BADCERT_NOT_TRUSTED |
| 78 | |
| 79 | X509 Certificate verification #10 (Not trusted Cert, Expired CRL) |
| Paul Bakker | 37940d9f | 2009-07-10 22:38:58 +0000 | [diff] [blame] | 80 | x509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl_expired.pem":NULL:BADCERT_NOT_TRUSTED |
| 81 | |
| Paul Bakker | 4d6b31a | 2009-07-12 11:11:06 +0000 | [diff] [blame] | 82 | X509 Certificate verification #11 (Valid Cert MD2 Digest) |
| 83 | x509_verify:"data_files/cert_md2.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0 |
| 84 | |
| 85 | X509 Certificate verification #12 (Valid Cert MD4 Digest) |
| 86 | x509_verify:"data_files/cert_md4.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0 |
| 87 | |
| 88 | X509 Certificate verification #13 (Valid Cert MD5 Digest) |
| 89 | x509_verify:"data_files/cert_md5.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0 |
| 90 | |
| 91 | X509 Certificate verification #14 (Valid Cert SHA1 Digest) |
| 92 | x509_verify:"data_files/cert_sha1.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0 |
| 93 | |
| 94 | X509 Certificate verification #15 (Valid Cert SHA224 Digest) |
| 95 | x509_verify:"data_files/cert_sha224.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0 |
| 96 | |
| 97 | X509 Certificate verification #16 (Valid Cert SHA256 Digest) |
| 98 | x509_verify:"data_files/cert_sha256.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0 |
| 99 | |
| 100 | X509 Certificate verification #17 (Valid Cert SHA384 Digest) |
| 101 | x509_verify:"data_files/cert_sha384.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0 |
| 102 | |
| 103 | X509 Certificate verification #18 (Valid Cert SHA512 Digest) |
| 104 | x509_verify:"data_files/cert_sha512.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0 |
| 105 | |
| Paul Bakker | 37940d9f | 2009-07-10 22:38:58 +0000 | [diff] [blame] | 106 | X509 Parse Selftest |
| 107 | x509_selftest: |
| Paul Bakker | b2c38f5 | 2009-07-19 19:36:15 +0000 | [diff] [blame] | 108 | |
| 109 | X509 Certificate ASN1 (Incorrect first tag) |
| 110 | x509parse_crt:"":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT |
| 111 | |
| 112 | X509 Certificate ASN1 (Correct first tag, data length does not match) |
| 113 | x509parse_crt:"300000":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT | POLARSSL_ERR_ASN1_LENGTH_MISMATCH |
| 114 | |
| 115 | X509 Certificate ASN1 (Correct first tag, no more data) |
| 116 | x509parse_crt:"3000":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT | POLARSSL_ERR_ASN1_OUT_OF_DATA |
| 117 | |
| 118 | X509 Certificate ASN1 (Correct first tag, second tag no TBSCertificate) |
| 119 | x509parse_crt:"300100":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT | POLARSSL_ERR_ASN1_UNEXPECTED_TAG |
| 120 | |
| 121 | X509 Certificate ASN1 (TBSCertificate, no version tag, serial missing) |
| 122 | x509parse_crt:"3003300100":"":POLARSSL_ERR_X509_CERT_INVALID_SERIAL | POLARSSL_ERR_ASN1_UNEXPECTED_TAG |
| 123 | |
| 124 | X509 Certificate ASN1 (TBSCertificate, invalid version tag) |
| 125 | x509parse_crt:"30053003a00101":"":POLARSSL_ERR_X509_CERT_INVALID_VERSION | POLARSSL_ERR_ASN1_UNEXPECTED_TAG |
| 126 | |
| 127 | X509 Certificate ASN1 (TBSCertificate, valid version tag, no length) |
| 128 | x509parse_crt:"30053003a00102":"":POLARSSL_ERR_X509_CERT_INVALID_VERSION | POLARSSL_ERR_ASN1_OUT_OF_DATA |
| 129 | |
| 130 | X509 Certificate ASN1 (TBSCertificate, valid version tag, invalid length) |
| 131 | x509parse_crt:"30163014a012021000000000000000000000000000000000":"":POLARSSL_ERR_X509_CERT_INVALID_VERSION | POLARSSL_ERR_ASN1_INVALID_LENGTH |
| 132 | |
| 133 | X509 Certificate ASN1 (TBSCertificate, valid version tag, no serial) |
| 134 | x509parse_crt:"30073005a003020104":"":POLARSSL_ERR_X509_CERT_INVALID_SERIAL | POLARSSL_ERR_ASN1_OUT_OF_DATA |
| 135 | |
| 136 | X509 Certificate ASN1 (TBSCertificate, invalid length version tag) |
| 137 | x509parse_crt:"30083006a00402010400":"":POLARSSL_ERR_X509_CERT_INVALID_VERSION | POLARSSL_ERR_ASN1_LENGTH_MISMATCH |
| 138 | |
| 139 | X509 Certificate ASN1 (TBSCertificate, incorrect serial tag) |
| 140 | x509parse_crt:"30083006a00302010400":"":POLARSSL_ERR_X509_CERT_INVALID_SERIAL | POLARSSL_ERR_ASN1_UNEXPECTED_TAG |
| 141 | |
| 142 | X509 Certificate ASN1 (TBSCertificate, incorrect serial length) |
| 143 | x509parse_crt:"30083006a00302010482":"":POLARSSL_ERR_X509_CERT_INVALID_SERIAL | POLARSSL_ERR_ASN1_OUT_OF_DATA |
| 144 | |
| 145 | X509 Certificate ASN1 (TBSCertificate, correct serial, no alg) |
| 146 | x509parse_crt:"300d300ba0030201048204deadbeef":"":POLARSSL_ERR_X509_CERT_INVALID_ALG | POLARSSL_ERR_ASN1_OUT_OF_DATA |
| 147 | |
| 148 | X509 Certificate ASN1 (TBSCertificate, correct serial, no alg oid) |
| 149 | x509parse_crt:"300e300ca0030201048204deadbeef00":"":POLARSSL_ERR_X509_CERT_INVALID_ALG | POLARSSL_ERR_ASN1_UNEXPECTED_TAG |
| 150 | |
| 151 | X509 Certificate ASN1 (TBSCertificate, correct serial, alg with params) |
| 152 | x509parse_crt:"30163014a0030201048204deadbeef30070604cafed00d01":"":POLARSSL_ERR_X509_CERT_INVALID_ALG | POLARSSL_ERR_ASN1_UNEXPECTED_TAG |
| 153 | |
| 154 | X509 Certificate ASN1 (TBSCertificate, correct alg data, unknown version) |
| 155 | x509parse_crt:"30173015a0030201048204deadbeef30080604cafed00d0500":"":POLARSSL_ERR_X509_CERT_UNKNOWN_VERSION |
| 156 | |
| 157 | X509 Certificate ASN1 (TBSCertificate, correct alg, unknown alg_id) |
| 158 | x509parse_crt:"30173015a0030201028204deadbeef30080604cafed00d0500":"":POLARSSL_ERR_X509_CERT_UNKNOWN_SIG_ALG |
| 159 | |
| 160 | X509 Certificate ASN1 (TBSCertificate, correct alg, specific alg_id) |
| 161 | x509parse_crt:"301c301aa0030201028204deadbeef300d06092a864886f70d0101020500":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT | POLARSSL_ERR_ASN1_OUT_OF_DATA |
| 162 | |
| 163 | X509 Certificate ASN1 (TBSCertificate, correct alg, unknown specific alg_id) |
| 164 | x509parse_crt:"301c301aa0030201028204deadbeef300d06092a864886f70d0101010500":"":POLARSSL_ERR_X509_CERT_UNKNOWN_SIG_ALG |
| 165 | |
| 166 | X509 Certificate ASN1 (TBSCertificate, issuer no set data) |
| 167 | x509parse_crt:"301e301ca0030201028204deadbeef300d06092a864886f70d01010205003000":"":POLARSSL_ERR_X509_CERT_INVALID_NAME | POLARSSL_ERR_ASN1_OUT_OF_DATA |
| 168 | |
| 169 | X509 Certificate ASN1 (TBSCertificate, issuer no inner seq data) |
| 170 | x509parse_crt:"3020301ea0030201028204deadbeef300d06092a864886f70d010102050030023100":"":POLARSSL_ERR_X509_CERT_INVALID_NAME | POLARSSL_ERR_ASN1_OUT_OF_DATA |
| 171 | |
| 172 | X509 Certificate ASN1 (TBSCertificate, issuer no inner set data) |
| 173 | x509parse_crt:"30223020a0030201028204deadbeef300d06092a864886f70d0101020500300431023000":"":POLARSSL_ERR_X509_CERT_INVALID_NAME | POLARSSL_ERR_ASN1_OUT_OF_DATA |
| 174 | |
| 175 | X509 Certificate ASN1 (TBSCertificate, issuer two inner set datas) |
| 176 | x509parse_crt:"30243022a0030201028204deadbeef300d06092a864886f70d01010205003006310430003000":"":POLARSSL_ERR_X509_CERT_INVALID_NAME | POLARSSL_ERR_ASN1_LENGTH_MISMATCH |
| 177 | |
| 178 | X509 Certificate ASN1 (TBSCertificate, issuer no oid data) |
| 179 | x509parse_crt:"30243022a0030201028204deadbeef300d06092a864886f70d01010205003006310430020600":"":POLARSSL_ERR_X509_CERT_INVALID_NAME | POLARSSL_ERR_ASN1_OUT_OF_DATA |
| 180 | |
| 181 | X509 Certificate ASN1 (TBSCertificate, issuer invalid tag) |
| 182 | x509parse_crt:"302a3028a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600060454657374":"":POLARSSL_ERR_X509_CERT_INVALID_NAME | POLARSSL_ERR_ASN1_UNEXPECTED_TAG |
| 183 | |
| 184 | X509 Certificate ASN1 (TBSCertificate, valid issuer, no validity) |
| 185 | x509parse_crt:"302a3028a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374":"":POLARSSL_ERR_X509_CERT_INVALID_DATE | POLARSSL_ERR_ASN1_OUT_OF_DATA |
| 186 | |
| 187 | X509 Certificate ASN1 (TBSCertificate, too much date data) |
| 188 | x509parse_crt:"30493047a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301d170c303930313031303030303030170c30393132333132333539353900":"":POLARSSL_ERR_X509_CERT_INVALID_DATE | POLARSSL_ERR_ASN1_LENGTH_MISMATCH |
| 189 | |
| 190 | X509 Certificate ASN1 (TBSCertificate, valid validity, no subject) |
| 191 | x509parse_crt:"30493047a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT | POLARSSL_ERR_ASN1_OUT_OF_DATA |
| 192 | |
| 193 | X509 Certificate ASN1 (TBSCertificate, valid subject, no pubkeyinfo) |
| 194 | x509parse_crt:"30563054a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT | POLARSSL_ERR_ASN1_OUT_OF_DATA |
| 195 | |
| 196 | X509 Certificate ASN1 (TBSCertificate, valid subject, unknown pk alg) |
| 197 | x509parse_crt:"30673065a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374300f300d06092A864886F70D0101000500":"":POLARSSL_ERR_X509_CERT_UNKNOWN_PK_ALG |
| 198 | |
| 199 | X509 Certificate ASN1 (TBSCertificate, pubkey, no bitstring) |
| 200 | x509parse_crt:"30673065a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374300f300d06092A864886F70D0101010500":"":POLARSSL_ERR_X509_CERT_INVALID_PUBKEY | POLARSSL_ERR_ASN1_OUT_OF_DATA |
| 201 | |
| 202 | X509 Certificate ASN1 (TBSCertificate, pubkey, no bitstring data) |
| 203 | x509parse_crt:"30693067a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743011300d06092A864886F70D01010105000300":"":POLARSSL_ERR_X509_CERT_INVALID_PUBKEY | POLARSSL_ERR_ASN1_OUT_OF_DATA |
| 204 | |
| 205 | X509 Certificate ASN1 (TBSCertificate, pubkey, invalid bitstring start) |
| 206 | x509parse_crt:"306a3068a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743012300d06092A864886F70D0101010500030101":"":POLARSSL_ERR_X509_CERT_INVALID_PUBKEY |
| 207 | |
| 208 | X509 Certificate ASN1 (TBSCertificate, pubkey, invalid internal bitstring length) |
| 209 | x509parse_crt:"306d306ba0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743015300d06092A864886F70D0101010500030400300000":"":POLARSSL_ERR_X509_CERT_INVALID_PUBKEY | POLARSSL_ERR_ASN1_LENGTH_MISMATCH |
| 210 | |
| 211 | X509 Certificate ASN1 (TBSCertificate, pubkey, invalid mpi) |
| 212 | x509parse_crt:"30743072a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301c300d06092A864886F70D0101010500030b0030080202ffff0302ffff":"":POLARSSL_ERR_X509_CERT_INVALID_PUBKEY | POLARSSL_ERR_ASN1_UNEXPECTED_TAG |
| 213 | |
| 214 | X509 Certificate ASN1 (TBSCertificate, pubkey, check failed) |
| 215 | x509parse_crt:"30743072a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301c300d06092A864886F70D0101010500030b0030080202ffff0202ffff":"":POLARSSL_ERR_RSA_KEY_CHECK_FAILED |
| 216 | |
| 217 | X509 Certificate ASN1 (TBSCertificate, pubkey, check failed, expanded length notation) |
| 218 | x509parse_crt:"308183308180a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210fffffffffffffffffffffffffffffffe0202ffff":"":POLARSSL_ERR_RSA_KEY_CHECK_FAILED |
| 219 | |
| 220 | X509 Certificate ASN1 (TBSCertificate v3, Optional UIDs, Extensions not present) |
| 221 | x509parse_crt:"308183308180a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff":"":POLARSSL_ERR_X509_CERT_INVALID_ALG | POLARSSL_ERR_ASN1_OUT_OF_DATA |
| 222 | |
| 223 | X509 Certificate ASN1 (TBSCertificate v3, issuerID wrong tag) |
| 224 | x509parse_crt:"308184308181a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff00":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT | POLARSSL_ERR_ASN1_LENGTH_MISMATCH |
| 225 | |
| 226 | X509 Certificate ASN1 (TBSCertificate v3, UIDs, no ext) |
| 227 | x509parse_crt:"308189308186a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bb":"":POLARSSL_ERR_X509_CERT_INVALID_ALG | POLARSSL_ERR_ASN1_OUT_OF_DATA |
| 228 | |
| 229 | X509 Certificate ASN1 (TBSCertificate v3, ext empty) |
| 230 | x509parse_crt:"30818b308188a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba300":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS | POLARSSL_ERR_ASN1_OUT_OF_DATA |
| 231 | |
| 232 | X509 Certificate ASN1 (TBSCertificate v3, ext length mismatch) |
| 233 | x509parse_crt:"30818e30818ba0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba303300000":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS | POLARSSL_ERR_ASN1_LENGTH_MISMATCH |
| 234 | |
| 235 | X509 Certificate ASN1 (TBSCertificate v3, first ext invalid) |
| 236 | x509parse_crt:"30818f30818ca0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba30330023000":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS | POLARSSL_ERR_ASN1_OUT_OF_DATA |
| 237 | |
| 238 | X509 Certificate ASN1 (correct pubkey, no sig_alg) |
| 239 | x509parse_crt:"308183308180a0030201008204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff":"":POLARSSL_ERR_X509_CERT_INVALID_ALG | POLARSSL_ERR_ASN1_OUT_OF_DATA |
| 240 | |
| 241 | X509 Certificate ASN1 (sig_alg mismatch) |
| 242 | x509parse_crt:"308192308180a0030201008204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0102020500":"":POLARSSL_ERR_X509_CERT_SIG_MISMATCH |
| 243 | |
| 244 | X509 Certificate ASN1 (sig_alg, no sig) |
| 245 | x509parse_crt:"308192308180a0030201008204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500":"":POLARSSL_ERR_X509_CERT_INVALID_SIGNATURE | POLARSSL_ERR_ASN1_OUT_OF_DATA |
| 246 | |
| 247 | X509 Certificate ASN1 (signature, invalid sig data) |
| 248 | x509parse_crt:"308195308180a0030201008204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030100":"":POLARSSL_ERR_X509_CERT_INVALID_SIGNATURE |
| 249 | |
| 250 | X509 Certificate ASN1 (signature, data left) |
| 251 | x509parse_crt:"308197308180a0030201008204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff00":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT | POLARSSL_ERR_ASN1_LENGTH_MISMATCH |
| 252 | |
| 253 | X509 Certificate ASN1 (correct) |
| 254 | x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA+MD2\nRSA key size \: 128 bits\n":0 |
| 255 | |