summaryrefslogtreecommitdiff
path: root/security/nss/tests/chains/scenarios/explicitPolicy.cfg
blob: 20f79c45b643abe016a163a2b6b519925ffb7ef1 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
# file, You can obtain one at http://mozilla.org/MPL/2.0/.

scenario explicitPolicy

entity Root
  type Root

entity nonEVCA
  type Intermediate
  issuer Root 

entity EVCA
  type Intermediate
  issuer Root 
    policy OID.1.0

entity otherEVCA
  type Intermediate
  issuer Root 
    policy OID.2.0

entity validEV
  type EE
  issuer EVCA
    policy OID.1.0

entity invalidEV
  type EE
  issuer nonEVCA
    policy OID.1.0

entity wrongEVOID
  type EE
  issuer otherEVCA
    policy OID.1.0

db All

verify validEV:EVCA
  cert EVCA:Root
  cert Root:
  trust Root:
  policy OID.1.0
  result pass

verify invalidEV:nonEVCA
  cert nonEVCA:Root
  cert Root:
  trust Root:
  policy OID.1.0
  result fail

verify wrongEVOID:otherEVCA
  cert otherEVCA:Root
  cert Root:
  trust Root:
  policy OID.1.0
  result fail

import Root::C,C,C

verify validEV:EVCA
  cert EVCA:Root
  policy OID.1.0
  result pass

verify invalidEV:nonEVCA
  cert nonEVCA:Root
  policy OID.1.0
  result fail

verify wrongEVOID:otherEVCA
  cert otherEVCA:Root
  policy OID.1.0
  result fail