diff options
Diffstat (limited to 'tests/chains/scenarios/nameconstraints.cfg')
| -rw-r--r-- | tests/chains/scenarios/nameconstraints.cfg | 12 |
1 files changed, 10 insertions, 2 deletions
diff --git a/tests/chains/scenarios/nameconstraints.cfg b/tests/chains/scenarios/nameconstraints.cfg index 4a149032b..a2de4be44 100644 --- a/tests/chains/scenarios/nameconstraints.cfg +++ b/tests/chains/scenarios/nameconstraints.cfg @@ -159,12 +159,20 @@ verify NameConstraints.dcissblocked:x verify NameConstraints.dcissallowed:x result pass -# Subject: "O = IPA.LOCAL 201901211552, CN = OCSP Subsystem" +# Subject: "O = IPA.LOCAL 20200120, CN = OCSP and IPSEC" +# EKUs: OCSPSigning,ipsecUser # # This tests that a non server certificate (i.e. id-kp-serverAuth # not present in EKU) does *NOT* have CN treated as dnsName for -# purposes of Name Constraints validation +# purposes of Name Constraints validation (certificateUsageStatusResponder) +# https://hg.mozilla.org/projects/nss/rev/0b30eb1c3650 verify NameConstraints.ocsp1:x usage 10 result pass +# This tests that a non server certificate (i.e. id-kp-serverAuth +# not present in EKU) does *NOT* have CN treated as dnsName for +# purposes of Name Constraints validation (certificateUsageIPsec) +verify NameConstraints.ocsp1:x + usage 12 + result pass |