From 1e780c7705f734522399ba175bb820268a9b1e64 Mon Sep 17 00:00:00 2001 From: Dmitry Baryshkov Date: Mon, 11 May 2020 23:50:40 +0300 Subject: output: add Russian security class policies Add Russian Security Class certificate policies (per draft-deremin-rfc4491-bis). Signed-off-by: Dmitry Baryshkov --- lib/x509/output.c | 8 ++++++++ tests/cert-tests/data/grfc.crt | 4 ++-- 2 files changed, 10 insertions(+), 2 deletions(-) diff --git a/lib/x509/output.c b/lib/x509/output.c index d2da3916db..c8b0c66ddb 100644 --- a/lib/x509/output.c +++ b/lib/x509/output.c @@ -969,6 +969,14 @@ static const struct oid_to_string cp_oid2str[] = { ENTRY("2.23.140.1.2.3", "CA/B Individual Validated"), ENTRY("2.23.140.1.1", "CA/B Extended Validation"), + /* draft-deremin-rfc4491-bis */ + ENTRY("1.2.643.100.113.1", "Russian security class KC1"), + ENTRY("1.2.643.100.113.2", "Russian security class KC2"), + ENTRY("1.2.643.100.113.3", "Russian security class KC3"), + ENTRY("1.2.643.100.113.4", "Russian security class KB1"), + ENTRY("1.2.643.100.113.5", "Russian security class KB2"), + ENTRY("1.2.643.100.113.6", "Russian security class KA1"), + {NULL, 0, NULL, 0}, }; diff --git a/tests/cert-tests/data/grfc.crt b/tests/cert-tests/data/grfc.crt index 5161c9cb79..0b06f778b8 100644 --- a/tests/cert-tests/data/grfc.crt +++ b/tests/cert-tests/data/grfc.crt @@ -37,8 +37,8 @@ X.509 Certificate Information: ASCII: ... Hexdump: 020100 Certificate Policies (not critical): - 1.2.643.100.113.1 - 1.2.643.100.113.2 + 1.2.643.100.113.1 (Russian security class KC1) + 1.2.643.100.113.2 (Russian security class KC2) 2.5.29.32.0 (anyPolicy) Signature Algorithm: GOSTR341001 Signature: -- cgit v1.2.1