diff options
Diffstat (limited to 'build/certs')
-rw-r--r-- | build/certs/Makefile | 51 | ||||
-rw-r--r-- | build/certs/cacert-ca.der | bin | 1857 -> 0 bytes | |||
-rw-r--r-- | build/certs/cacert3.der | bin | 1885 -> 0 bytes | |||
-rw-r--r-- | build/certs/distant-end-date.der | bin | 366 -> 0 bytes | |||
-rw-r--r-- | build/certs/entrust-invalid.der | bin | 1120 -> 0 bytes | |||
-rw-r--r-- | build/certs/redhat-newca.der | bin | 948 -> 0 bytes | |||
-rw-r--r-- | build/certs/self-server.der | bin | 396 -> 0 bytes | |||
-rw-r--r-- | build/certs/self-signed-with-eku.der | bin | 480 -> 0 bytes | |||
-rw-r--r-- | build/certs/self-signed-with-ku.der | bin | 478 -> 0 bytes | |||
-rw-r--r-- | build/certs/testing-ca.der | bin | 970 -> 0 bytes | |||
-rw-r--r-- | build/certs/testing-server.der | bin | 554 -> 0 bytes | |||
-rw-r--r-- | build/certs/verisign-v1.der | bin | 576 -> 0 bytes | |||
-rw-r--r-- | build/certs/with-eku.conf | 19 | ||||
-rw-r--r-- | build/certs/with-ku.conf | 19 |
14 files changed, 0 insertions, 89 deletions
diff --git a/build/certs/Makefile b/build/certs/Makefile deleted file mode 100644 index 033ecde..0000000 --- a/build/certs/Makefile +++ /dev/null @@ -1,51 +0,0 @@ - -# Note that nothing here is distributed. It just lives in the git repository -# We copy everything into its final location, and those test files are -# distributed in the tarballs - -TRUST = ../../trust - -prepare-certs: - cp -v cacert3.der $(TRUST)/input/anchors - cp -v cacert3.der $(TRUST)/fixtures - cp -v cacert3.der $(TRUST)/fixtures - openssl x509 -in cacert3.der -inform DER -out $(TRUST)/fixtures/cacert3.pem - openssl x509 -in cacert3.der -inform DER -out $(TRUST)/fixtures/cacert3.pem - cat $(TRUST)/fixtures/cacert3.pem $(TRUST)/fixtures/cacert3.pem > $(TRUST)/fixtures/cacert3-twice.pem - openssl x509 -in cacert3.der -inform DER -out $(TRUST)/fixtures/cacert3-trusted.pem \ - -addtrust serverAuth -addreject emailProtection \ - -setalias "Custom Label" - cp $(TRUST)/fixtures/cacert3-trusted.pem $(TRUST)/fixtures/cacert3-trusted-server-alias.pem - openssl x509 -in cacert3.der -inform DER -out $(TRUST)/fixtures/cacert3-trusted-alias.pem \ - -setalias "Custom Label" - openssl x509 -in cacert3.der -inform DER -out $(TRUST)/fixtures/cacert3-distrust-all.pem \ - -addreject serverAuth -addreject clientAuth -addreject codeSigning \ - -addreject emailProtection -addreject ipsecEndSystem -addreject ipsecTunnel \ - -addreject ipsecUser -addreject timeStamping - openssl x509 -in verisign-v1.der -inform DER -out $(TRUST)/fixtures/verisign-v1.pem \ - -setalias "Custom Label" - cat $(TRUST)/fixtures/cacert3-trusted-server-alias.pem \ - $(TRUST)/fixtures/verisign-v1.pem > $(TRUST)/fixtures/multiple.pem - cp -v cacert-ca.der $(TRUST)/input - cp -v cacert-ca.der $(TRUST)/fixtures - openssl x509 -in redhat-newca.der -inform DER -out $(TRUST)/fixtures/distrusted.pem \ - -addreject clientAuth -setalias "Red Hat Is the CA" - cp -v $(TRUST)/fixtures/distrusted.pem $(TRUST)/input - cp -v self-server.der $(TRUST)/input/blacklist - cp -v self-signed-with-eku.der $(TRUST)/fixtures - cp -v self-signed-with-ku.der $(TRUST)/fixtures - cp -v testing-ca.der $(TRUST)/input/anchors - cp -v testing-server.der $(TRUST)/fixtures - -# Rebuild the self-signed certificates. This is almost never necessary and -# will require other changes in the code, mostly here as documentation -build-self-signed: - openssl req -new -x509 -outform DER -out self-signed-with-eku.der \ - -newkey rsa -keyout /dev/null -nodes -subj /CN=self-signed-with-eku.example.com \ - -config with-eku.conf -set_serial 888 -extensions v3_ca - openssl req -new -x509 -outform DER -out self-signed-with-ku.der \ - -newkey rsa -keyout /dev/null -nodes -subj /CN=self-signed-with-ku.example.com \ - -config with-ku.conf -set_serial 888 -extensions v3_ca - openssl req -new -x509 -outform DER -out distant-end-date.der \ - -newkey rsa:512 -keyout /dev/null -nodes -subj /CN=far-in-the-future.example.com \ - -config with-ku.conf -set_serial 999 -extensions v3_ca -days 20000 diff --git a/build/certs/cacert-ca.der b/build/certs/cacert-ca.der Binary files differdeleted file mode 100644 index 719b0ff..0000000 --- a/build/certs/cacert-ca.der +++ /dev/null diff --git a/build/certs/cacert3.der b/build/certs/cacert3.der Binary files differdeleted file mode 100644 index 56f8c88..0000000 --- a/build/certs/cacert3.der +++ /dev/null diff --git a/build/certs/distant-end-date.der b/build/certs/distant-end-date.der Binary files differdeleted file mode 100644 index 1b3fd47..0000000 --- a/build/certs/distant-end-date.der +++ /dev/null diff --git a/build/certs/entrust-invalid.der b/build/certs/entrust-invalid.der Binary files differdeleted file mode 100644 index 7be5c18..0000000 --- a/build/certs/entrust-invalid.der +++ /dev/null diff --git a/build/certs/redhat-newca.der b/build/certs/redhat-newca.der Binary files differdeleted file mode 100644 index affae24..0000000 --- a/build/certs/redhat-newca.der +++ /dev/null diff --git a/build/certs/self-server.der b/build/certs/self-server.der Binary files differdeleted file mode 100644 index 68fe9af..0000000 --- a/build/certs/self-server.der +++ /dev/null diff --git a/build/certs/self-signed-with-eku.der b/build/certs/self-signed-with-eku.der Binary files differdeleted file mode 100644 index 33e0760..0000000 --- a/build/certs/self-signed-with-eku.der +++ /dev/null diff --git a/build/certs/self-signed-with-ku.der b/build/certs/self-signed-with-ku.der Binary files differdeleted file mode 100644 index 51bb227..0000000 --- a/build/certs/self-signed-with-ku.der +++ /dev/null diff --git a/build/certs/testing-ca.der b/build/certs/testing-ca.der Binary files differdeleted file mode 100644 index d3f70ea..0000000 --- a/build/certs/testing-ca.der +++ /dev/null diff --git a/build/certs/testing-server.der b/build/certs/testing-server.der Binary files differdeleted file mode 100644 index cf2de65..0000000 --- a/build/certs/testing-server.der +++ /dev/null diff --git a/build/certs/verisign-v1.der b/build/certs/verisign-v1.der Binary files differdeleted file mode 100644 index bcd5ebb..0000000 --- a/build/certs/verisign-v1.der +++ /dev/null diff --git a/build/certs/with-eku.conf b/build/certs/with-eku.conf deleted file mode 100644 index 8eab21d..0000000 --- a/build/certs/with-eku.conf +++ /dev/null @@ -1,19 +0,0 @@ -# -# Use with the following command -# $ openssl req -new -x509 -outform DER -out self-signed-with-ku.pem \ -# -newkey rsa -keyout self-signed-with-ku.key -nodes \ -# -config with-ku.conf -set_serial 888 -extensions v3_ca -# - -[ req ] -default_bits = 1024 -distinguished_name = req_distinguished_name -x509_extensions = v3_ca -dirstring_type = nobmp - -[ req_distinguished_name ] -commonName = Common Name -commonName_max = 64 - -[ v3_ca ] -keyUsage=keyCertSign,digitalSignature
\ No newline at end of file diff --git a/build/certs/with-ku.conf b/build/certs/with-ku.conf deleted file mode 100644 index aa0acc1..0000000 --- a/build/certs/with-ku.conf +++ /dev/null @@ -1,19 +0,0 @@ -# -# Use with the following command -# $ openssl req -new -x509 -outform DER -out self-signed-with-eku.pem \ -# -newkey rsa -keyout self-signed-with-eku.key -nodes \ -# -config with-eku.conf -set_serial 888 -extensions v3_ca -# - -[ req ] -default_bits = 1024 -distinguished_name = req_distinguished_name -x509_extensions = v3_ca -dirstring_type = nobmp - -[ req_distinguished_name ] -commonName = Common Name -commonName_max = 64 - -[ v3_ca ] -extendedKeyUsage=clientAuth,emailProtection,1.2.3.4
\ No newline at end of file |