summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDmitry Baryshkov <dbaryshkov@gmail.com>2020-05-11 23:50:40 +0300
committerDmitry Baryshkov <dbaryshkov@gmail.com>2020-05-14 11:46:02 +0300
commit1e780c7705f734522399ba175bb820268a9b1e64 (patch)
tree202a7f81cc198bd5ae9ea31aebbc1b44baa45917
parenta94afcfac2402dbf5200a6d16b320c166994a49e (diff)
downloadgnutls-1e780c7705f734522399ba175bb820268a9b1e64.tar.gz
output: add Russian security class policies
Add Russian Security Class certificate policies (per draft-deremin-rfc4491-bis). Signed-off-by: Dmitry Baryshkov <dbaryshkov@gmail.com>
-rw-r--r--lib/x509/output.c8
-rw-r--r--tests/cert-tests/data/grfc.crt4
2 files changed, 10 insertions, 2 deletions
diff --git a/lib/x509/output.c b/lib/x509/output.c
index d2da3916db..c8b0c66ddb 100644
--- a/lib/x509/output.c
+++ b/lib/x509/output.c
@@ -969,6 +969,14 @@ static const struct oid_to_string cp_oid2str[] = {
ENTRY("2.23.140.1.2.3", "CA/B Individual Validated"),
ENTRY("2.23.140.1.1", "CA/B Extended Validation"),
+ /* draft-deremin-rfc4491-bis */
+ ENTRY("1.2.643.100.113.1", "Russian security class KC1"),
+ ENTRY("1.2.643.100.113.2", "Russian security class KC2"),
+ ENTRY("1.2.643.100.113.3", "Russian security class KC3"),
+ ENTRY("1.2.643.100.113.4", "Russian security class KB1"),
+ ENTRY("1.2.643.100.113.5", "Russian security class KB2"),
+ ENTRY("1.2.643.100.113.6", "Russian security class KA1"),
+
{NULL, 0, NULL, 0},
};
diff --git a/tests/cert-tests/data/grfc.crt b/tests/cert-tests/data/grfc.crt
index 5161c9cb79..0b06f778b8 100644
--- a/tests/cert-tests/data/grfc.crt
+++ b/tests/cert-tests/data/grfc.crt
@@ -37,8 +37,8 @@ X.509 Certificate Information:
ASCII: ...
Hexdump: 020100
Certificate Policies (not critical):
- 1.2.643.100.113.1
- 1.2.643.100.113.2
+ 1.2.643.100.113.1 (Russian security class KC1)
+ 1.2.643.100.113.2 (Russian security class KC2)
2.5.29.32.0 (anyPolicy)
Signature Algorithm: GOSTR341001
Signature: