mbedtls/tests/data_files/test-ca.opensslconf

[req]
x509_extensions = v3_ca
distinguished_name = req_dn

[req_dn]
countryName = NL
organizationalUnitName = PolarSSL
commonName = PolarSSL Test CA

[v3_ca]
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid:always,issuer:always
basicConstraints = CA:true

[test_ca]
database = /dev/null

[crl_ext_idp]
issuingDistributionPoint=critical, @idpdata

[crl_ext_idp_nc]
issuingDistributionPoint=@idpdata

[idpdata]
fullname=URI:http://pki.example.com/
Added SHA256 test certificates With SHA-1 deprecation, we need a few certificates using algorithms in the default support list. Most tests still use SHA-1 though. The generation process for the new certificates is recorded in the makefile. 2017-05-05 18:56:12 +02:00			`[req]`
			`x509_extensions = v3_ca`
			`distinguished_name = req_dn`

			`[req_dn]`
			`countryName = NL`
			`organizationalUnitName = PolarSSL`
			`commonName = PolarSSL Test CA`

			`[v3_ca]`
			`subjectKeyIdentifier=hash`
			`authorityKeyIdentifier=keyid:always,issuer:always`
			`basicConstraints = CA:true`
x509: CRL: reject unsupported critical extensions 2018-03-13 11:53:30 +01:00
			`[test_ca]`
			`database = /dev/null`

			`[crl_ext_idp]`
			`issuingDistributionPoint=critical, @idpdata`

x509: CRL: add tests for non-critical extension The 'critical' boolean can be set to false in two ways: - by leaving it implicit (test data generated by openssl) - by explicitly setting it to false (generated by hand) 2018-03-14 12:23:56 +01:00			`[crl_ext_idp_nc]`
			`issuingDistributionPoint=@idpdata`

x509: CRL: reject unsupported critical extensions 2018-03-13 11:53:30 +01:00			`[idpdata]`
			`fullname=URI:http://pki.example.com/`