yuzu-emu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-11-30 09:44:14 +01:00
Code Issues Packages Projects Releases Wiki Activity
7c5819eb1e
mbedtls/tests/suites/test_suite_x509parse.data

713 lines
58 KiB
Plaintext
Raw Normal View History

- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Certificate information #1
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509_cert_info:"data_files/server1.crt":"cert. version \: 3\nserial number \: 01\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued on \: 2011-02-12 14\:44\:06\nexpires on \: 2021-02-12 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\n"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Certificate information #2
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509_cert_info:"data_files/server2.crt":"cert. version \: 3\nserial number \: 02\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2011-02-12 14\:44\:06\nexpires on \: 2021-02-12 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\n"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate information #3
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509_cert_info:"data_files/test-ca.crt":"cert. version \: 3\nserial number \: 00\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued on \: 2011-02-12 14\:44\:00\nexpires on \: 2021-02-12 14\:44\:00\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\n"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate information MD2 Digest
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509_cert_info:"data_files/cert_md2.crt":"cert. version \: 3\nserial number \: 09\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert MD2\nissued on \: 2009-07-12 10\:56\:59\nexpires on \: 2011-07-12 10\:56\:59\nsigned using \: RSA with MD2\nRSA key size \: 2048 bits\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate information MD4 Digest
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509_cert_info:"data_files/cert_md4.crt":"cert. version \: 3\nserial number \: 05\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert MD4\nissued on \: 2011-02-12 14\:44\:07\nexpires on \: 2021-02-12 14\:44\:07\nsigned using \: RSA with MD4\nRSA key size \: 2048 bits\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate information MD5 Digest
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509_cert_info:"data_files/cert_md5.crt":"cert. version \: 3\nserial number \: 06\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert MD5\nissued on \: 2011-02-12 14\:44\:07\nexpires on \: 2021-02-12 14\:44\:07\nsigned using \: RSA with MD5\nRSA key size \: 2048 bits\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate information SHA1 Digest
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509_cert_info:"data_files/cert_sha1.crt":"cert. version \: 3\nserial number \: 07\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA1\nissued on \: 2011-02-12 14\:44\:07\nexpires on \: 2021-02-12 14\:44\:07\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate information SHA224 Digest
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509_cert_info:"data_files/cert_sha224.crt":"cert. version \: 3\nserial number \: 08\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA224\nissued on \: 2011-02-12 14\:44\:07\nexpires on \: 2021-02-12 14\:44\:07\nsigned using \: RSA with SHA-224\nRSA key size \: 2048 bits\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate information SHA256 Digest
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509_cert_info:"data_files/cert_sha256.crt":"cert. version \: 3\nserial number \: 09\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA256\nissued on \: 2011-02-12 14\:44\:07\nexpires on \: 2021-02-12 14\:44\:07\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate information SHA384 Digest
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509_cert_info:"data_files/cert_sha384.crt":"cert. version \: 3\nserial number \: 0A\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA384\nissued on \: 2011-02-12 14\:44\:07\nexpires on \: 2021-02-12 14\:44\:07\nsigned using \: RSA with SHA-384\nRSA key size \: 2048 bits\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate information SHA512 Digest
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509_cert_info:"data_files/cert_sha512.crt":"cert. version \: 3\nserial number \: 0B\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA512\nissued on \: 2011-02-12 14\:44\:07\nexpires on \: 2021-02-12 14\:44\:07\nsigned using \: RSA with SHA-512\nRSA key size \: 2048 bits\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 CRL information #1
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509_crl_info:"data_files/crl_expired.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-20 10\:24\:19\nnext update \: 2011-02-20 11\:24\:19\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA1\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 CRL Information MD2 Digest
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509_crl_info:"data_files/crl_md2.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2009-07-19 19\:56\:37\nnext update \: 2009-09-17 19\:56\:37\nRevoked certificates\:\nserial number\: 01 revocation date\: 2009-02-09 21\:12\:36\nserial number\: 03 revocation date\: 2009-02-09 21\:12\:36\nsigned using \: RSA with MD2\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 CRL Information MD4 Digest
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509_crl_info:"data_files/crl_md4.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with MD4\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 CRL Information MD5 Digest
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509_crl_info:"data_files/crl_md5.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with MD5\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 CRL Information SHA1 Digest
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509_crl_info:"data_files/crl_sha1.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA1\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 CRL Information SHA224 Digest
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509_crl_info:"data_files/crl_sha224.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA-224\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 CRL Information SHA256 Digest
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509_crl_info:"data_files/crl_sha256.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA-256\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 CRL Information SHA384 Digest
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509_crl_info:"data_files/crl_sha384.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA-384\n"
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 CRL Information SHA512 Digest
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509_crl_info:"data_files/crl_sha512.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA-512\n"
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #1 (No password when required)
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_MD5_C:POLARSSL_PEM_C:POLARSSL_FS_IO
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/test-ca.key":NULL:POLARSSL_ERR_X509_PASSWORD_REQUIRED
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #2 (Correct password)
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_MD5_C:POLARSSL_PEM_C:POLARSSL_FS_IO
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/test-ca.key":"PolarSSLTest":0
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #3 (Wrong password)
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_MD5_C:POLARSSL_PEM_C:POLARSSL_FS_IO
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/test-ca.key":"PolarSSLWRONG":POLARSSL_ERR_X509_PASSWORD_MISMATCH
- Parsing of PEM files moved to separate module (Fixes ticket #13). Also possible to remove PEM support for systems only using DER encoding - Parsing PEM private keys encrypted with DES and AES are now supported (Fixes ticket #5) - Added tests for encrypted keyfiles
2011-02-12 15:30:57 +01:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #4 (DES Encrypted)
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_MD5_C:POLARSSL_DES_C:POLARSSL_PEM_C:POLARSSL_FS_IO
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/keyfile.des":"testkey":0
- Parsing of PEM files moved to separate module (Fixes ticket #13). Also possible to remove PEM support for systems only using DER encoding - Parsing PEM private keys encrypted with DES and AES are now supported (Fixes ticket #5) - Added tests for encrypted keyfiles
2011-02-12 15:30:57 +01:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #5 (3DES Encrypted)
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_MD5_C:POLARSSL_DES_C:POLARSSL_PEM_C:POLARSSL_FS_IO
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/keyfile.3des":"testkey":0
- Parsing of PEM files moved to separate module (Fixes ticket #13). Also possible to remove PEM support for systems only using DER encoding - Parsing PEM private keys encrypted with DES and AES are now supported (Fixes ticket #5) - Added tests for encrypted keyfiles
2011-02-12 15:30:57 +01:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #6 (AES-128 Encrypted)
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_MD5_C:POLARSSL_AES_C:POLARSSL_PEM_C:POLARSSL_FS_IO
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/keyfile.aes128":"testkey":0
- Parsing of PEM files moved to separate module (Fixes ticket #13). Also possible to remove PEM support for systems only using DER encoding - Parsing PEM private keys encrypted with DES and AES are now supported (Fixes ticket #5) - Added tests for encrypted keyfiles
2011-02-12 15:30:57 +01:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #7 (AES-192 Encrypted)
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_MD5_C:POLARSSL_AES_C:POLARSSL_PEM_C:POLARSSL_FS_IO
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/keyfile.aes192":"testkey":0
- Parsing of PEM files moved to separate module (Fixes ticket #13). Also possible to remove PEM support for systems only using DER encoding - Parsing PEM private keys encrypted with DES and AES are now supported (Fixes ticket #5) - Added tests for encrypted keyfiles
2011-02-12 15:30:57 +01:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #8 (AES-256 Encrypted)
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_MD5_C:POLARSSL_AES_C:POLARSSL_PEM_C:POLARSSL_FS_IO
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/keyfile.aes256":"testkey":0
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #9 (PKCS#8 wrapped)
- Added test for PKCS#8 wrapped private and public keys
2011-07-13 13:32:29 +02:00
depends_on:POLARSSL_MD5_C:POLARSSL_PEM_C:POLARSSL_FS_IO
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/format_gen.key":"":0
- Added test for PKCS#8 wrapped private and public keys
2011-07-13 13:32:29 +02:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #10 (PKCS#8 encrypted SHA1-3DES)
Made x509parse PKCS#12 and PKCS#5 tests dependent on defines (cherry picked from commit db7ea6f16262cf87fdfa0f98b58707d724531f3d)
2013-06-24 19:33:44 +02:00
depends_on:POLARSSL_DES_C:POLARSSL_SHA1_C:POLARSSL_PEM_C:POLARSSL_FS_IO:POLARSSL_PKCS12_C
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/pkcs8_pbe_sha1_3des.key":"PolarSSLTest":0
Parsing of PKCS#8 encrypted private key files added and PKCS#12 basis PKCS#8 encrypted key file support has been added to x509parse_key() with support for some PCKS#12 PBE functions (pbeWithSHAAnd128BitRC4, pbeWithSHAAnd3-KeyTripleDES-CBC and pbeWithSHAAnd2-KeyTripleDES-CBC) (cherry picked from commit cf6e95d9a81c7b22271beb58a09b5c756148e62a) Conflicts: scripts/generate_errors.pl
2013-06-24 19:17:19 +02:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #10.1 (PKCS#8 encrypted SHA1-3DES, wrong PW)
Made x509parse PKCS#12 and PKCS#5 tests dependent on defines (cherry picked from commit db7ea6f16262cf87fdfa0f98b58707d724531f3d)
2013-06-24 19:33:44 +02:00
depends_on:POLARSSL_DES_C:POLARSSL_SHA1_C:POLARSSL_PEM_C:POLARSSL_FS_IO:POLARSSL_PKCS12_C
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/pkcs8_pbe_sha1_3des.key":"PolarSSLTes":POLARSSL_ERR_X509_PASSWORD_MISMATCH
Moved PKCS#12 PBE functions to cipher / md layer where possible The 3-key and 2-key Triple DES PBE functions have been replaced with a single pkcs12_pbe() function that handles both situations (and more). In addition this allows for some PASSWORD_MISMATCH checking (cherry picked from commit 14a222cef2699bd3da884662f7e56e097a12b1a0)
2013-06-24 19:33:27 +02:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #10.2 (PKCS#8 encrypted SHA1-3DES, no PW)
Made x509parse PKCS#12 and PKCS#5 tests dependent on defines (cherry picked from commit db7ea6f16262cf87fdfa0f98b58707d724531f3d)
2013-06-24 19:33:44 +02:00
depends_on:POLARSSL_DES_C:POLARSSL_SHA1_C:POLARSSL_PEM_C:POLARSSL_FS_IO:POLARSSL_PKCS12_C
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/pkcs8_pbe_sha1_3des.key":"":POLARSSL_ERR_X509_PASSWORD_REQUIRED
Moved PKCS#12 PBE functions to cipher / md layer where possible The 3-key and 2-key Triple DES PBE functions have been replaced with a single pkcs12_pbe() function that handles both situations (and more). In addition this allows for some PASSWORD_MISMATCH checking (cherry picked from commit 14a222cef2699bd3da884662f7e56e097a12b1a0)
2013-06-24 19:33:27 +02:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #11 (PKCS#8 encrypted SHA1-3DES DER)
Made x509parse PKCS#12 and PKCS#5 tests dependent on defines (cherry picked from commit db7ea6f16262cf87fdfa0f98b58707d724531f3d)
2013-06-24 19:33:44 +02:00
depends_on:POLARSSL_DES_C:POLARSSL_SHA1_C:POLARSSL_FS_IO:POLARSSL_PKCS12_C
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/pkcs8_pbe_sha1_3des.der":"PolarSSLTest":0
Parsing of PKCS#8 encrypted private key files added and PKCS#12 basis PKCS#8 encrypted key file support has been added to x509parse_key() with support for some PCKS#12 PBE functions (pbeWithSHAAnd128BitRC4, pbeWithSHAAnd3-KeyTripleDES-CBC and pbeWithSHAAnd2-KeyTripleDES-CBC) (cherry picked from commit cf6e95d9a81c7b22271beb58a09b5c756148e62a) Conflicts: scripts/generate_errors.pl
2013-06-24 19:17:19 +02:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #12 (PKCS#8 encrypted SHA1-2DES)
Made x509parse PKCS#12 and PKCS#5 tests dependent on defines (cherry picked from commit db7ea6f16262cf87fdfa0f98b58707d724531f3d)
2013-06-24 19:33:44 +02:00
depends_on:POLARSSL_DES_C:POLARSSL_SHA1_C:POLARSSL_PEM_C:POLARSSL_FS_IO:POLARSSL_PKCS12_C
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/pkcs8_pbe_sha1_2des.key":"PolarSSLTest":0
Parsing of PKCS#8 encrypted private key files added and PKCS#12 basis PKCS#8 encrypted key file support has been added to x509parse_key() with support for some PCKS#12 PBE functions (pbeWithSHAAnd128BitRC4, pbeWithSHAAnd3-KeyTripleDES-CBC and pbeWithSHAAnd2-KeyTripleDES-CBC) (cherry picked from commit cf6e95d9a81c7b22271beb58a09b5c756148e62a) Conflicts: scripts/generate_errors.pl
2013-06-24 19:17:19 +02:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #12.1 (PKCS#8 encrypted SHA1-2DES, wrong PW)
Made x509parse PKCS#12 and PKCS#5 tests dependent on defines (cherry picked from commit db7ea6f16262cf87fdfa0f98b58707d724531f3d)
2013-06-24 19:33:44 +02:00
depends_on:POLARSSL_DES_C:POLARSSL_SHA1_C:POLARSSL_PEM_C:POLARSSL_FS_IO:POLARSSL_PKCS12_C
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/pkcs8_pbe_sha1_2des.key":"PolarSLTest":POLARSSL_ERR_X509_PASSWORD_MISMATCH
Moved PKCS#12 PBE functions to cipher / md layer where possible The 3-key and 2-key Triple DES PBE functions have been replaced with a single pkcs12_pbe() function that handles both situations (and more). In addition this allows for some PASSWORD_MISMATCH checking (cherry picked from commit 14a222cef2699bd3da884662f7e56e097a12b1a0)
2013-06-24 19:33:27 +02:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #12.2 (PKCS#8 encrypted SHA1-2DES, no PW)
Made x509parse PKCS#12 and PKCS#5 tests dependent on defines (cherry picked from commit db7ea6f16262cf87fdfa0f98b58707d724531f3d)
2013-06-24 19:33:44 +02:00
depends_on:POLARSSL_DES_C:POLARSSL_SHA1_C:POLARSSL_PEM_C:POLARSSL_FS_IO:POLARSSL_PKCS12_C
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/pkcs8_pbe_sha1_2des.key":"":POLARSSL_ERR_X509_PASSWORD_REQUIRED
Moved PKCS#12 PBE functions to cipher / md layer where possible The 3-key and 2-key Triple DES PBE functions have been replaced with a single pkcs12_pbe() function that handles both situations (and more). In addition this allows for some PASSWORD_MISMATCH checking (cherry picked from commit 14a222cef2699bd3da884662f7e56e097a12b1a0)
2013-06-24 19:33:27 +02:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #13 (PKCS#8 encrypted SHA1-RC4-128)
Made x509parse PKCS#12 and PKCS#5 tests dependent on defines (cherry picked from commit db7ea6f16262cf87fdfa0f98b58707d724531f3d)
2013-06-24 19:33:44 +02:00
depends_on:POLARSSL_ARC4_C:POLARSSL_SHA1_C:POLARSSL_PEM_C:POLARSSL_FS_IO:POLARSSL_PKCS12_C
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/pkcs8_pbe_sha1_rc4_128.key":"PolarSSLTest":0
Parsing of PKCS#8 encrypted private key files added and PKCS#12 basis PKCS#8 encrypted key file support has been added to x509parse_key() with support for some PCKS#12 PBE functions (pbeWithSHAAnd128BitRC4, pbeWithSHAAnd3-KeyTripleDES-CBC and pbeWithSHAAnd2-KeyTripleDES-CBC) (cherry picked from commit cf6e95d9a81c7b22271beb58a09b5c756148e62a) Conflicts: scripts/generate_errors.pl
2013-06-24 19:17:19 +02:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #13.1 (PKCS#8 encrypted SHA1-RC4-128, wrong PW)
Made x509parse PKCS#12 and PKCS#5 tests dependent on defines (cherry picked from commit db7ea6f16262cf87fdfa0f98b58707d724531f3d)
2013-06-24 19:33:44 +02:00
depends_on:POLARSSL_ARC4_C:POLARSSL_SHA1_C:POLARSSL_PEM_C:POLARSSL_FS_IO:POLARSSL_PKCS12_C
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/pkcs8_pbe_sha1_rc4_128.key":"PolarSSLTe":POLARSSL_ERR_X509_PASSWORD_MISMATCH
Moved PKCS#12 PBE functions to cipher / md layer where possible The 3-key and 2-key Triple DES PBE functions have been replaced with a single pkcs12_pbe() function that handles both situations (and more). In addition this allows for some PASSWORD_MISMATCH checking (cherry picked from commit 14a222cef2699bd3da884662f7e56e097a12b1a0)
2013-06-24 19:33:27 +02:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #13.2 (PKCS#8 encrypted SHA1-RC4-128, no PW)
Made x509parse PKCS#12 and PKCS#5 tests dependent on defines (cherry picked from commit db7ea6f16262cf87fdfa0f98b58707d724531f3d)
2013-06-24 19:33:44 +02:00
depends_on:POLARSSL_ARC4_C:POLARSSL_SHA1_C:POLARSSL_PEM_C:POLARSSL_FS_IO:POLARSSL_PKCS12_C
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/pkcs8_pbe_sha1_rc4_128.key":"":POLARSSL_ERR_X509_PASSWORD_REQUIRED
Moved PKCS#12 PBE functions to cipher / md layer where possible The 3-key and 2-key Triple DES PBE functions have been replaced with a single pkcs12_pbe() function that handles both situations (and more). In addition this allows for some PASSWORD_MISMATCH checking (cherry picked from commit 14a222cef2699bd3da884662f7e56e097a12b1a0)
2013-06-24 19:33:27 +02:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #14 (PKCS#8 encrypted v2 PBDFK2 3DES)
Made x509parse PKCS#12 and PKCS#5 tests dependent on defines (cherry picked from commit db7ea6f16262cf87fdfa0f98b58707d724531f3d)
2013-06-24 19:33:44 +02:00
depends_on:POLARSSL_DES_C:POLARSSL_SHA1_C:POLARSSL_PEM_C:POLARSSL_FS_IO:POLARSSL_PKCS5_C
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/pkcs8_pbes2_pbkdf2_3des.key":"PolarSSLTest":0
PKCS#5 v2 PBES2 support and use in PKCS#8 encrypted certificates The error code POLARSSL_ERR_X509_PASSWORD_MISMATCH is now properly returned in case of an encryption failure in the padding. The POLARSSL_ERR_X509_PASSWORD_REQUIRED error code is only returned for PEM formatted private keys as for DER formatted ones it is impossible to distinguish if a DER blob is PKCS#8 encrypted or not. (cherry picked from commit 1fd4321ba2016dfaff2b48c11f731fc9ccbd7ccf) Conflicts: include/polarssl/error.h scripts/generate_errors.pl
2013-06-24 19:28:55 +02:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #15 (PKCS#8 encrypted v2 PBDFK2 3DES, wrong PW)
Made x509parse PKCS#12 and PKCS#5 tests dependent on defines (cherry picked from commit db7ea6f16262cf87fdfa0f98b58707d724531f3d)
2013-06-24 19:33:44 +02:00
depends_on:POLARSSL_DES_C:POLARSSL_SHA1_C:POLARSSL_PEM_C:POLARSSL_FS_IO:POLARSSL_PKCS5_C
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/pkcs8_pbes2_pbkdf2_3des.key":"PolarSSLTes":POLARSSL_ERR_X509_PASSWORD_MISMATCH
PKCS#5 v2 PBES2 support and use in PKCS#8 encrypted certificates The error code POLARSSL_ERR_X509_PASSWORD_MISMATCH is now properly returned in case of an encryption failure in the padding. The POLARSSL_ERR_X509_PASSWORD_REQUIRED error code is only returned for PEM formatted private keys as for DER formatted ones it is impossible to distinguish if a DER blob is PKCS#8 encrypted or not. (cherry picked from commit 1fd4321ba2016dfaff2b48c11f731fc9ccbd7ccf) Conflicts: include/polarssl/error.h scripts/generate_errors.pl
2013-06-24 19:28:55 +02:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #16 (PKCS#8 encrypted v2 PBDFK2 3DES, no PW)
Made x509parse PKCS#12 and PKCS#5 tests dependent on defines (cherry picked from commit db7ea6f16262cf87fdfa0f98b58707d724531f3d)
2013-06-24 19:33:44 +02:00
depends_on:POLARSSL_DES_C:POLARSSL_SHA1_C:POLARSSL_PEM_C:POLARSSL_FS_IO:POLARSSL_PKCS5_C
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/pkcs8_pbes2_pbkdf2_3des.key":"":POLARSSL_ERR_X509_PASSWORD_REQUIRED
PKCS#5 v2 PBES2 support and use in PKCS#8 encrypted certificates The error code POLARSSL_ERR_X509_PASSWORD_MISMATCH is now properly returned in case of an encryption failure in the padding. The POLARSSL_ERR_X509_PASSWORD_REQUIRED error code is only returned for PEM formatted private keys as for DER formatted ones it is impossible to distinguish if a DER blob is PKCS#8 encrypted or not. (cherry picked from commit 1fd4321ba2016dfaff2b48c11f731fc9ccbd7ccf) Conflicts: include/polarssl/error.h scripts/generate_errors.pl
2013-06-24 19:28:55 +02:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #17 (PKCS#8 encrypted v2 PBDFK2 3DES DER)
Made x509parse PKCS#12 and PKCS#5 tests dependent on defines (cherry picked from commit db7ea6f16262cf87fdfa0f98b58707d724531f3d)
2013-06-24 19:33:44 +02:00
depends_on:POLARSSL_DES_C:POLARSSL_SHA1_C:POLARSSL_FS_IO:POLARSSL_PKCS5_C
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/pkcs8_pbes2_pbkdf2_3des.der":"PolarSSLTest":0
PKCS#5 v2 PBES2 support and use in PKCS#8 encrypted certificates The error code POLARSSL_ERR_X509_PASSWORD_MISMATCH is now properly returned in case of an encryption failure in the padding. The POLARSSL_ERR_X509_PASSWORD_REQUIRED error code is only returned for PEM formatted private keys as for DER formatted ones it is impossible to distinguish if a DER blob is PKCS#8 encrypted or not. (cherry picked from commit 1fd4321ba2016dfaff2b48c11f731fc9ccbd7ccf) Conflicts: include/polarssl/error.h scripts/generate_errors.pl
2013-06-24 19:28:55 +02:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #18 (PKCS#8 encrypted v2 PBDFK2 3DES DER, wrong PW)
Made x509parse PKCS#12 and PKCS#5 tests dependent on defines (cherry picked from commit db7ea6f16262cf87fdfa0f98b58707d724531f3d)
2013-06-24 19:33:44 +02:00
depends_on:POLARSSL_DES_C:POLARSSL_SHA1_C:POLARSSL_FS_IO:POLARSSL_PKCS5_C
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/pkcs8_pbes2_pbkdf2_3des.der":"PolarSSLTes":POLARSSL_ERR_X509_PASSWORD_MISMATCH
PKCS#5 v2 PBES2 support and use in PKCS#8 encrypted certificates The error code POLARSSL_ERR_X509_PASSWORD_MISMATCH is now properly returned in case of an encryption failure in the padding. The POLARSSL_ERR_X509_PASSWORD_REQUIRED error code is only returned for PEM formatted private keys as for DER formatted ones it is impossible to distinguish if a DER blob is PKCS#8 encrypted or not. (cherry picked from commit 1fd4321ba2016dfaff2b48c11f731fc9ccbd7ccf) Conflicts: include/polarssl/error.h scripts/generate_errors.pl
2013-06-24 19:28:55 +02:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #19 (PKCS#8 encrypted v2 PBDFK2 3DES DER, no PW)
Made x509parse PKCS#12 and PKCS#5 tests dependent on defines (cherry picked from commit db7ea6f16262cf87fdfa0f98b58707d724531f3d)
2013-06-24 19:33:44 +02:00
depends_on:POLARSSL_DES_C:POLARSSL_SHA1_C:POLARSSL_FS_IO:POLARSSL_PKCS5_C
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/pkcs8_pbes2_pbkdf2_3des.der":"":POLARSSL_ERR_X509_KEY_INVALID_FORMAT
PKCS#5 v2 PBES2 support and use in PKCS#8 encrypted certificates The error code POLARSSL_ERR_X509_PASSWORD_MISMATCH is now properly returned in case of an encryption failure in the padding. The POLARSSL_ERR_X509_PASSWORD_REQUIRED error code is only returned for PEM formatted private keys as for DER formatted ones it is impossible to distinguish if a DER blob is PKCS#8 encrypted or not. (cherry picked from commit 1fd4321ba2016dfaff2b48c11f731fc9ccbd7ccf) Conflicts: include/polarssl/error.h scripts/generate_errors.pl
2013-06-24 19:28:55 +02:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse RSA Key #20 (PKCS#8 encrypted v2 PBDFK2 DES)
Made x509parse PKCS#12 and PKCS#5 tests dependent on defines (cherry picked from commit db7ea6f16262cf87fdfa0f98b58707d724531f3d)
2013-06-24 19:33:44 +02:00
depends_on:POLARSSL_DES_C:POLARSSL_SHA1_C:POLARSSL_PEM_C:POLARSSL_FS_IO:POLARSSL_PKCS5_C
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_keyfile_rsa:"data_files/pkcs8_pbes2_pbkdf2_des.key":"PolarSSLTest":0
PKCS#5 v2 PBES2 support and use in PKCS#8 encrypted certificates The error code POLARSSL_ERR_X509_PASSWORD_MISMATCH is now properly returned in case of an encryption failure in the padding. The POLARSSL_ERR_X509_PASSWORD_REQUIRED error code is only returned for PEM formatted private keys as for DER formatted ones it is impossible to distinguish if a DER blob is PKCS#8 encrypted or not. (cherry picked from commit 1fd4321ba2016dfaff2b48c11f731fc9ccbd7ccf) Conflicts: include/polarssl/error.h scripts/generate_errors.pl
2013-06-24 19:28:55 +02:00
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
X509 Parse Public RSA Key #1 (PKCS#8 wrapped)
- Added test for PKCS#8 wrapped private and public keys
2011-07-13 13:32:29 +02:00
depends_on:POLARSSL_MD5_C:POLARSSL_PEM_C:POLARSSL_FS_IO
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_public_keyfile_rsa:"data_files/format_gen.pub":0
- Added test for PKCS#8 wrapped private and public keys
2011-07-13 13:32:29 +02:00
Add test for x509parse_public_keyfile_ec
2013-06-27 15:33:04 +02:00
X509 Parse Public EC Key #1 (RFC 5480, DER)
depends_on:POLARSSL_ECP_C:POLARSSL_FS_IO
x509parse_public_keyfile_ec:"data_files/ec_pub.der":0
X509 Parse Public EC Key #2 (RFC 5480, PEM)
depends_on:POLARSSL_PEM_C:POLARSSL_ECP_C:POLARSSL_FS_IO
x509parse_public_keyfile_ec:"data_files/ec_pub.pem":0
Add tests for x509parse_key_ec() Test files were generated as follows: openssl ecparam -name prime192v1 -genkey > key.pem openssl ec -in key.pem -pubout -outform PEM > pub.pem openssl ec -in key.pem -pubout -outform DER > pub.der openssl ec -in key.pem -outform pem > prv.sec1.pem openssl ec -in key.pem -outform der > prv.sec1.der openssl ec -in key.pem -des -passout pass:polar -outform pem > prv.sec1.pw.pem openssl pkcs8 -topk8 -in key.pem -nocrypt -outform pem > prv.pk8.pem openssl pkcs8 -topk8 -in key.pem -nocrypt -outform der > prv.pk8.der openssl pkcs8 -topk8 -in key.pem -passout pass:polar -outform der \ > prv.pk8.pw.der openssl pkcs8 -topk8 -in key.pem -passout pass:polar -outform pem \ > prv.pk8.pw.pem
2013-07-03 12:13:56 +02:00
X509 Parse EC Key #1 (SEC1 DER)
depends_on:POLARSSL_FS_IO:POLARSSL_ECP_C
x509parse_keyfile_ec:"data_files/ec_prv.sec1.der":NULL:0
X509 Parse EC Key #2 (SEC1 PEM)
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO:POLARSSL_ECP_C
x509parse_keyfile_ec:"data_files/ec_prv.sec1.pem":NULL:0
X509 Parse EC Key #3 (SEC1 PEM encrypted)
depends_on:POLARSSL_DES_C:POLARSSL_PEM_C:POLARSSL_FS_IO:POLARSSL_ECP_C
x509parse_keyfile_ec:"data_files/ec_prv.sec1.pw.pem":"polar":0
X509 Parse EC Key #4 (PKCS8 DER)
depends_on:POLARSSL_FS_IO:POLARSSL_ECP_C
x509parse_keyfile_ec:"data_files/ec_prv.pk8.der":NULL:0
X509 Parse EC Key #5 (PKCS8 PEM)
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO:POLARSSL_ECP_C
x509parse_keyfile_ec:"data_files/ec_prv.pk8.pem":NULL:0
X509 Parse EC Key #6 (PKCS8 encrypted DER)
depends_on:POLARSSL_DES_C:POLARSSL_FS_IO:POLARSSL_ECP_C
x509parse_keyfile_ec:"data_files/ec_prv.pk8.pw.der":"polar":0
X509 Parse EC Key #7 (PKCS8 encrypted PEM)
depends_on:POLARSSL_DES_C:POLARSSL_PEM_C:POLARSSL_FS_IO:POLARSSL_ECP_C
x509parse_keyfile_ec:"data_files/ec_prv.pk8.pw.pem":"polar":0
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Get Distinguished Name #1
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
x509_dn_gets:"data_files/server1.crt":subject:"C=NL, O=PolarSSL, CN=PolarSSL Server 1"
X509 Get Distinguished Name #2
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
x509_dn_gets:"data_files/server1.crt":issuer:"C=NL, O=PolarSSL, CN=PolarSSL Test CA"
X509 Get Distinguished Name #3
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
x509_dn_gets:"data_files/server2.crt":subject:"C=NL, O=PolarSSL, CN=localhost"
X509 Get Distinguished Name #4
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
x509_dn_gets:"data_files/server2.crt":issuer:"C=NL, O=PolarSSL, CN=PolarSSL Test CA"
X509 Time Expired #1
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
x509_time_expired:"data_files/server1.crt":valid_from:1
X509 Time Expired #2
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
x509_time_expired:"data_files/server1.crt":valid_to:0
X509 Time Expired #3
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
x509_time_expired:"data_files/server2.crt":valid_from:1
X509 Time Expired #4
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
x509_time_expired:"data_files/server2.crt":valid_to:0
X509 Time Expired #5
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
x509_time_expired:"data_files/test-ca.crt":valid_from:1
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
X509 Time Expired #6:POLARSSL_FS_IO
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
x509_time_expired:"data_files/test-ca.crt":valid_to:0
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #1 (Revoked Cert, Expired CRL)
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added verification callback in certificate verification chain in order to allow external blacklisting
2011-01-13 18:54:59 +01:00
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":NULL:POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_REVOKED | BADCRL_EXPIRED:NULL
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #2 (Revoked Cert, Expired CRL)
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added verification callback in certificate verification chain in order to allow external blacklisting
2011-01-13 18:54:59 +01:00
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"PolarSSL Server 1":POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_REVOKED | BADCRL_EXPIRED:NULL
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #3 (Revoked Cert, Expired CRL, CN Mismatch)
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added verification callback in certificate verification chain in order to allow external blacklisting
2011-01-13 18:54:59 +01:00
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"PolarSSL Wrong CN":POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_REVOKED | BADCRL_EXPIRED | BADCERT_CN_MISMATCH:NULL
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #4 (Valid Cert, Expired CRL)
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added verification callback in certificate verification chain in order to allow external blacklisting
2011-01-13 18:54:59 +01:00
x509_verify:"data_files/server2.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":NULL:POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCRL_EXPIRED:NULL
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #5 (Revoked Cert)
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added verification callback in certificate verification chain in order to allow external blacklisting
2011-01-13 18:54:59 +01:00
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_REVOKED:NULL
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #6 (Revoked Cert)
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added verification callback in certificate verification chain in order to allow external blacklisting
2011-01-13 18:54:59 +01:00
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"PolarSSL Server 1":POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_REVOKED:NULL
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #7 (Revoked Cert, CN Mismatch)
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added verification callback in certificate verification chain in order to allow external blacklisting
2011-01-13 18:54:59 +01:00
x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"PolarSSL Wrong CN":POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_REVOKED | BADCERT_CN_MISMATCH:NULL
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #8 (Valid Cert)
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added verification callback in certificate verification chain in order to allow external blacklisting
2011-01-13 18:54:59 +01:00
x509_verify:"data_files/server2.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0:0:NULL
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #9 (Not trusted Cert)
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added verification callback in certificate verification chain in order to allow external blacklisting
2011-01-13 18:54:59 +01:00
x509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl.pem":NULL:POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_NOT_TRUSTED:NULL
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #10 (Not trusted Cert, Expired CRL)
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added verification callback in certificate verification chain in order to allow external blacklisting
2011-01-13 18:54:59 +01:00
x509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl_expired.pem":NULL:POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_NOT_TRUSTED:NULL
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #12 (Valid Cert MD4 Digest)
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_MD4_C:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added verification callback in certificate verification chain in order to allow external blacklisting
2011-01-13 18:54:59 +01:00
x509_verify:"data_files/cert_md4.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0:0:NULL
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #13 (Valid Cert MD5 Digest)
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_MD5_C:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added verification callback in certificate verification chain in order to allow external blacklisting
2011-01-13 18:54:59 +01:00
x509_verify:"data_files/cert_md5.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0:0:NULL
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #14 (Valid Cert SHA1 Digest)
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_SHA1_C:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added verification callback in certificate verification chain in order to allow external blacklisting
2011-01-13 18:54:59 +01:00
x509_verify:"data_files/cert_sha1.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0:0:NULL
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #15 (Valid Cert SHA224 Digest)
SHA2 renamed to SHA256, SHA4 renamed to SHA512 and functions accordingly The SHA4 name was not clear with regards to the new SHA-3 standard. So SHA2 and SHA4 have been renamed to better represent what they are: SHA256 and SHA512 modules.
2013-06-30 14:34:05 +02:00
depends_on:POLARSSL_SHA256_C:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added verification callback in certificate verification chain in order to allow external blacklisting
2011-01-13 18:54:59 +01:00
x509_verify:"data_files/cert_sha224.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0:0:NULL
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #16 (Valid Cert SHA256 Digest)
SHA2 renamed to SHA256, SHA4 renamed to SHA512 and functions accordingly The SHA4 name was not clear with regards to the new SHA-3 standard. So SHA2 and SHA4 have been renamed to better represent what they are: SHA256 and SHA512 modules.
2013-06-30 14:34:05 +02:00
depends_on:POLARSSL_SHA256_C:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added verification callback in certificate verification chain in order to allow external blacklisting
2011-01-13 18:54:59 +01:00
x509_verify:"data_files/cert_sha256.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0:0:NULL
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #17 (Valid Cert SHA384 Digest)
SHA2 renamed to SHA256, SHA4 renamed to SHA512 and functions accordingly The SHA4 name was not clear with regards to the new SHA-3 standard. So SHA2 and SHA4 have been renamed to better represent what they are: SHA256 and SHA512 modules.
2013-06-30 14:34:05 +02:00
depends_on:POLARSSL_SHA512_C:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added verification callback in certificate verification chain in order to allow external blacklisting
2011-01-13 18:54:59 +01:00
x509_verify:"data_files/cert_sha384.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0:0:NULL
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
X509 Certificate verification #18 (Valid Cert SHA512 Digest)
SHA2 renamed to SHA256, SHA4 renamed to SHA512 and functions accordingly The SHA4 name was not clear with regards to the new SHA-3 standard. So SHA2 and SHA4 have been renamed to better represent what they are: SHA256 and SHA512 modules.
2013-06-30 14:34:05 +02:00
depends_on:POLARSSL_SHA512_C:POLARSSL_PEM_C:POLARSSL_FS_IO
- Added verification callback in certificate verification chain in order to allow external blacklisting
2011-01-13 18:54:59 +01:00
x509_verify:"data_files/cert_sha512.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0:0:NULL
X509 Certificate verification #19 (Valid Cert, denying callback)
SHA2 renamed to SHA256, SHA4 renamed to SHA512 and functions accordingly The SHA4 name was not clear with regards to the new SHA-3 standard. So SHA2 and SHA4 have been renamed to better represent what they are: SHA256 and SHA512 modules.
2013-06-30 14:34:05 +02:00
depends_on:POLARSSL_SHA512_C:POLARSSL_PEM_C:POLARSSL_FS_IO
- Revamped x509_verify() and the SSL f_vrfy callback implementations
2012-09-28 09:10:55 +02:00
x509_verify:"data_files/cert_sha512.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_OTHER:verify_none
- Added verification callback in certificate verification chain in order to allow external blacklisting
2011-01-13 18:54:59 +01:00
X509 Certificate verification #20 (Not trusted Cert, allowing callback)
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
- Revamped x509_verify() and the SSL f_vrfy callback implementations
2012-09-28 09:10:55 +02:00
x509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl_expired.pem":NULL:0:0:verify_all
- Added extra certificates and tests
2009-07-12 13:11:06 +02:00
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 17:09:32 +01:00
X509 Certificate verification #21 (domain matching wildcard certificate)
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
x509_verify:"data_files/cert_example_wildcard.crt":"data_files/test-ca.crt":"data_files/crl.pem":"mail.example.com":0:0:NULL
X509 Certificate verification #22 (domain not matching wildcard certificate)
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
x509_verify:"data_files/cert_example_wildcard.crt":"data_files/test-ca.crt":"data_files/crl.pem":"mail.example.net":POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_CN_MISMATCH:NULL
X509 Certificate verification #23 (domain not matching wildcard certificate)
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
x509_verify:"data_files/cert_example_wildcard.crt":"data_files/test-ca.crt":"data_files/crl.pem":"example.com":POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_CN_MISMATCH:NULL
- Changed certificate verify behaviour to comply with RFC 6125 section 6.3 to not match CN if subjectAltName extension is present.
2012-05-10 16:12:46 +02:00
X509 Certificate verification #24 (domain matching CN of multi certificate)
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 17:09:32 +01:00
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
- Changed certificate verify behaviour to comply with RFC 6125 section 6.3 to not match CN if subjectAltName extension is present.
2012-05-10 16:12:46 +02:00
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"www.example.com":POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_CN_MISMATCH:NULL
- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension
2012-02-11 17:09:32 +01:00
X509 Certificate verification #25 (domain matching multi certificate)
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"example.net":0:0:NULL
X509 Certificate verification #26 (domain not matching multi certificate)
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"www.example.net":POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_CN_MISMATCH:NULL
X509 Certificate verification #27 (domain not matching multi certificate)
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"xample.net":POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_CN_MISMATCH:NULL
X509 Certificate verification #27 (domain not matching multi certificate)
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"bexample.net":POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_CN_MISMATCH:NULL
- Multi-domain certificates support wildcards as well
2012-02-11 18:38:38 +01:00
X509 Certificate verification #28 (domain not matching wildcard in multi certificate)
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"example.org":POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_CN_MISMATCH:NULL
X509 Certificate verification #29 (domain matching wildcard in multi certificate)
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"mail.example.org":0:0:NULL
- Added test for no-subject certificates with altSubjectNames
2012-08-23 12:46:54 +02:00
X509 Certificate verification #30 (domain matching multi certificate without CN)
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
x509_verify:"data_files/cert_example_multi_nocn.crt":"data_files/test-ca.crt":"data_files/crl.pem":"www.shotokan-braunschweig.de":POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_NOT_TRUSTED:NULL
X509 Certificate verification #31 (domain not matching multi certificate without CN)
depends_on:POLARSSL_PEM_C:POLARSSL_FS_IO
x509_verify:"data_files/cert_example_multi_nocn.crt":"data_files/test-ca.crt":"data_files/crl.pem":"www.example.net":POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_CN_MISMATCH + BADCERT_NOT_TRUSTED:NULL
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
X509 Parse Selftest
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
2011-04-25 17:28:35 +02:00
depends_on:POLARSSL_MD5_C:POLARSSL_PEM_C:POLARSSL_SELF_TEST
- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test
2009-07-11 00:38:58 +02:00
x509_selftest:
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (Incorrect first tag)
x509parse_crt:"":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT
X509 Certificate ASN1 (Correct first tag, data length does not match)
- Fixed test for 'trust extension' change
2012-09-25 23:53:55 +02:00
x509parse_crt:"300000":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT + POLARSSL_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (Correct first tag, no more data)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"3000":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
- Updated tests to reflect recent changes
2011-10-12 13:53:52 +02:00
X509 Certificate ASN1 (Correct first tag, length data incorrect)
x509parse_crt:"30023085":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT + POLARSSL_ERR_ASN1_INVALID_LENGTH
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate ASN1 (Correct first tag, length data incomplete)
- Updated tests to reflect recent changes
2011-10-12 13:53:52 +02:00
x509parse_crt:"30023083":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate ASN1 (Correct first tag, length data incomplete)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30023081":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate ASN1 (Correct first tag, length data incomplete)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"3003308200":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (Correct first tag, second tag no TBSCertificate)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"300100":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT + POLARSSL_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, no version tag, serial missing)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"3003300100":"":POLARSSL_ERR_X509_CERT_INVALID_SERIAL + POLARSSL_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, invalid version tag)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30053003a00101":"":POLARSSL_ERR_X509_CERT_INVALID_VERSION + POLARSSL_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, valid version tag, no length)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30053003a00102":"":POLARSSL_ERR_X509_CERT_INVALID_VERSION + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, valid version tag, invalid length)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30163014a012021000000000000000000000000000000000":"":POLARSSL_ERR_X509_CERT_INVALID_VERSION + POLARSSL_ERR_ASN1_INVALID_LENGTH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, valid version tag, no serial)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30073005a003020104":"":POLARSSL_ERR_X509_CERT_INVALID_SERIAL + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, invalid length version tag)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30083006a00402010400":"":POLARSSL_ERR_X509_CERT_INVALID_VERSION + POLARSSL_ERR_ASN1_LENGTH_MISMATCH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, incorrect serial tag)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30083006a00302010400":"":POLARSSL_ERR_X509_CERT_INVALID_SERIAL + POLARSSL_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, incorrect serial length)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30083006a00302010482":"":POLARSSL_ERR_X509_CERT_INVALID_SERIAL + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, correct serial, no alg)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"300d300ba0030201048204deadbeef":"":POLARSSL_ERR_X509_CERT_INVALID_ALG + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, correct serial, no alg oid)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"300e300ca0030201048204deadbeef00":"":POLARSSL_ERR_X509_CERT_INVALID_ALG + POLARSSL_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
X509 Certificate ASN1 (TBSCertificate, alg oid no data in sequence)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"300f300da0030201048204deadbeef3000":"":POLARSSL_ERR_X509_CERT_INVALID_ALG + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
X509 Certificate ASN1 (TBSCertificate, alg with params)
Made asn1_get_alg() and asn1_get_alg_null() as generic functions A generic function for retrieving the AlgorithmIdentifier structure with its parameters and adapted X509, PKCS#5 and PKCS#12 to use them.
2013-06-29 12:16:17 +02:00
x509parse_crt:"30163014a0030201048204deadbeef30070604cafed00d01":"":POLARSSL_ERR_X509_CERT_INVALID_ALG + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
X509 Certificate ASN1 (TBSCertificate, correct alg data, no params unknown version)
x509parse_crt:"30153013a0030201048204deadbeef30060604cafed00d":"":POLARSSL_ERR_X509_CERT_UNKNOWN_VERSION
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, correct alg data, unknown version)
x509parse_crt:"30173015a0030201048204deadbeef30080604cafed00d0500":"":POLARSSL_ERR_X509_CERT_UNKNOWN_VERSION
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
X509 Certificate ASN1 (TBSCertificate, correct alg data, length mismatch)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30183016a0030201048204deadbeef30090604cafed00d050000":"":POLARSSL_ERR_X509_CERT_INVALID_ALG + POLARSSL_ERR_ASN1_LENGTH_MISMATCH
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, correct alg, unknown alg_id)
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509parse_crt:"30173015a0030201028204deadbeef30080604cafed00d0500":"":POLARSSL_ERR_X509_CERT_UNKNOWN_SIG_ALG + POLARSSL_ERR_OID_NOT_FOUND
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, correct alg, specific alg_id)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"301c301aa0030201028204deadbeef300d06092a864886f70d0101020500":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, correct alg, unknown specific alg_id)
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509parse_crt:"301c301aa0030201028204deadbeef300d06092a864886f70d0101010500":"":POLARSSL_ERR_X509_CERT_UNKNOWN_SIG_ALG + POLARSSL_ERR_OID_NOT_FOUND
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, issuer no set data)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"301e301ca0030201028204deadbeef300d06092a864886f70d01010205003000":"":POLARSSL_ERR_X509_CERT_INVALID_NAME + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, issuer no inner seq data)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"3020301ea0030201028204deadbeef300d06092a864886f70d010102050030023100":"":POLARSSL_ERR_X509_CERT_INVALID_NAME + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, issuer no inner set data)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30223020a0030201028204deadbeef300d06092a864886f70d0101020500300431023000":"":POLARSSL_ERR_X509_CERT_INVALID_NAME + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, issuer two inner set datas)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30243022a0030201028204deadbeef300d06092a864886f70d01010205003006310430003000":"":POLARSSL_ERR_X509_CERT_INVALID_NAME + POLARSSL_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, issuer no oid data)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30243022a0030201028204deadbeef300d06092a864886f70d01010205003006310430020600":"":POLARSSL_ERR_X509_CERT_INVALID_NAME + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, issuer invalid tag)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"302a3028a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600060454657374":"":POLARSSL_ERR_X509_CERT_INVALID_NAME + POLARSSL_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
X509 Certificate ASN1 (TBSCertificate, issuer, no string data)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30253023a0030201028204deadbeef300d06092a864886f70d0101020500300731053003060013":"":POLARSSL_ERR_X509_CERT_INVALID_NAME + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
- Corrected parsing of UTCTime dates before 1990 and after 1950 - Support more exotic OID's when parsing certificates - Support more exotic name representations when parsing certificates - Replaced the expired test certificates
2011-02-20 11:40:16 +01:00
X509 Certificate ASN1 (TBSCertificate, issuer, no full following string)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"302b3029a0030201028204deadbeef300d06092a864886f70d0101020500300d310b3009060013045465737400":"":POLARSSL_ERR_X509_CERT_INVALID_NAME + POLARSSL_ERR_ASN1_UNEXPECTED_TAG
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, valid issuer, no validity)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"302a3028a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374":"":POLARSSL_ERR_X509_CERT_INVALID_DATE + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, too much date data)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30493047a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301d170c303930313031303030303030170c30393132333132333539353900":"":POLARSSL_ERR_X509_CERT_INVALID_DATE + POLARSSL_ERR_ASN1_LENGTH_MISMATCH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
X509 Certificate ASN1 (TBSCertificate, invalid from date)
x509parse_crt:"30483046a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303000000000170c303931323331323300000000":"":POLARSSL_ERR_X509_CERT_INVALID_DATE
X509 Certificate ASN1 (TBSCertificate, invalid to date)
x509parse_crt:"30483046a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323300000000":"":POLARSSL_ERR_X509_CERT_INVALID_DATE
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, valid validity, no subject)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30493047a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, valid subject, no pubkeyinfo)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30563054a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
X509 Certificate ASN1 (TBSCertificate, pubkey, no alg)
Use generic x509_get_pubkey() for RSA functions
2013-07-10 09:46:30 +02:00
x509parse_crt:"30583056a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743000":"":POLARSSL_ERR_X509_CERT_INVALID_ALG + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, valid subject, unknown pk alg)
- Added test for PKCS#8 wrapped private and public keys
2011-07-13 13:32:29 +02:00
x509parse_crt:"30673065a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374300f300d06092A864886F70D0101000500":"":POLARSSL_ERR_X509_UNKNOWN_PK_ALG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, pubkey, no bitstring)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30673065a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374300f300d06092A864886F70D0101010500":"":POLARSSL_ERR_X509_CERT_INVALID_PUBKEY + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, pubkey, no bitstring data)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30693067a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743011300d06092A864886F70D01010105000300":"":POLARSSL_ERR_X509_CERT_INVALID_PUBKEY + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, pubkey, invalid bitstring start)
x509parse_crt:"306a3068a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743012300d06092A864886F70D0101010500030101":"":POLARSSL_ERR_X509_CERT_INVALID_PUBKEY
X509 Certificate ASN1 (TBSCertificate, pubkey, invalid internal bitstring length)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"306d306ba0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743015300d06092A864886F70D0101010500030400300000":"":POLARSSL_ERR_X509_CERT_INVALID_PUBKEY + POLARSSL_ERR_ASN1_LENGTH_MISMATCH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
X509 Certificate ASN1 (TBSCertificate, pubkey, invalid internal bitstring tag)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"306d306ba0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743015300d06092A864886F70D0101010500030400310000":"":POLARSSL_ERR_X509_CERT_INVALID_PUBKEY + POLARSSL_ERR_ASN1_UNEXPECTED_TAG
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, pubkey, invalid mpi)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30743072a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301c300d06092A864886F70D0101010500030b0030080202ffff0302ffff":"":POLARSSL_ERR_X509_CERT_INVALID_PUBKEY + POLARSSL_ERR_ASN1_UNEXPECTED_TAG
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
X509 Certificate ASN1 (TBSCertificate, pubkey, total length mismatch)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30753073a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301d300d06092A864886F70D0101010500030b0030080202ffff0202ffff00":"":POLARSSL_ERR_X509_CERT_INVALID_PUBKEY + POLARSSL_ERR_ASN1_LENGTH_MISMATCH
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate, pubkey, check failed)
x509parse_crt:"30743072a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301c300d06092A864886F70D0101010500030b0030080202ffff0202ffff":"":POLARSSL_ERR_RSA_KEY_CHECK_FAILED
X509 Certificate ASN1 (TBSCertificate, pubkey, check failed, expanded length notation)
x509parse_crt:"308183308180a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210fffffffffffffffffffffffffffffffe0202ffff":"":POLARSSL_ERR_RSA_KEY_CHECK_FAILED
X509 Certificate ASN1 (TBSCertificate v3, Optional UIDs, Extensions not present)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"308183308180a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff":"":POLARSSL_ERR_X509_CERT_INVALID_ALG + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate v3, issuerID wrong tag)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"308184308181a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff00":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT + POLARSSL_ERR_ASN1_LENGTH_MISMATCH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate v3, UIDs, no ext)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"308189308186a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bb":"":POLARSSL_ERR_X509_CERT_INVALID_ALG + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
X509 Certificate ASN1 (TBSCertificate v3, UIDs, invalid length)
- Updated tests to reflect recent changes
2011-10-12 13:53:52 +02:00
x509parse_crt:"308189308186a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa185aaa201bb":"":POLARSSL_ERR_ASN1_INVALID_LENGTH
- Added extra coverage and regression tests
2009-07-20 23:26:07 +02:00
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate v3, ext empty)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30818b308188a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba300":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate v3, ext length mismatch)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30818e30818ba0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba303300000":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS + POLARSSL_ERR_ASN1_LENGTH_MISMATCH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (TBSCertificate v3, first ext invalid)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30818f30818ca0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba30330023000":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
X509 Certificate ASN1 (TBSCertificate v3, first ext invalid tag)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30819030818da0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba3043002310000":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS + POLARSSL_ERR_ASN1_UNEXPECTED_TAG
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
- Better handling of extension parsing
2009-07-27 23:34:45 +02:00
X509 Certificate ASN1 (TBSCertificate v3, ext BasicContraint tag, bool len missing)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"308198308195a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba30c300a30060603551d1301010100":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Better handling of extension parsing
2009-07-27 23:34:45 +02:00
X509 Certificate ASN1 (TBSCertificate v3, ext BasicContraint tag, data missing)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"308198308195a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba30c300a30080603551d1301010100":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Better handling of extension parsing
2009-07-27 23:34:45 +02:00
X509 Certificate ASN1 (TBSCertificate v3, ext BasicContraint tag, no octet present)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"308198308195a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba30d300b30090603551d1301010100":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS + POLARSSL_ERR_ASN1_UNEXPECTED_TAG
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
X509 Certificate ASN1 (TBSCertificate v3, ext BasicContraint tag, octet data missing)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30819c308199a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba311300f300d0603551d130101010403300100":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS + POLARSSL_ERR_ASN1_UNEXPECTED_TAG
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
X509 Certificate ASN1 (TBSCertificate v3, ext BasicContraint tag, no pathlen)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"30819f30819ca0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba314301230100603551d130101010406300402010102":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
X509 Certificate ASN1 (TBSCertificate v3, ext BasicContraint tag, octet len mismatch)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"3081a230819fa0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba317301530130603551d130101010409300702010102010100":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS + POLARSSL_ERR_ASN1_LENGTH_MISMATCH
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (correct pubkey, no sig_alg)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"308183308180a0030201008204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff":"":POLARSSL_ERR_X509_CERT_INVALID_ALG + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (sig_alg mismatch)
x509parse_crt:"308192308180a0030201008204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0102020500":"":POLARSSL_ERR_X509_CERT_SIG_MISMATCH
X509 Certificate ASN1 (sig_alg, no sig)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"308192308180a0030201008204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500":"":POLARSSL_ERR_X509_CERT_INVALID_SIGNATURE + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (signature, invalid sig data)
x509parse_crt:"308195308180a0030201008204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030100":"":POLARSSL_ERR_X509_CERT_INVALID_SIGNATURE
X509 Certificate ASN1 (signature, data left)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crt:"308197308180a0030201008204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff00":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT + POLARSSL_ERR_ASN1_LENGTH_MISMATCH
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
X509 Certificate ASN1 (correct)
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with MD2\nRSA key size \: 128 bits\n":0
- Added a lot of ASN1 Certificate parsing tests
2009-07-19 21:36:15 +02:00
- Added support for GeneralizedTime in X509 certificates
2010-02-18 22:26:15 +01:00
X509 Certificate ASN1 (GeneralizedTime instead of UTCTime)
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509parse_crt:"308198308182a0030201008204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301e180e3230313030313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2010-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with MD2\nRSA key size \: 128 bits\n":0
- Added support for GeneralizedTime in X509 certificates
2010-02-18 22:26:15 +01:00
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate ASN1 (Name with X520 CN)
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d0101020500300f310d300b0603550403130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: CN=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with MD2\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate ASN1 (Name with X520 C)
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d0101020500300f310d300b0603550406130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: C=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with MD2\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate ASN1 (Name with X520 L)
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d0101020500300f310d300b0603550407130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: L=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with MD2\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate ASN1 (Name with X520 ST)
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d0101020500300f310d300b0603550408130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ST=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with MD2\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate ASN1 (Name with X520 O)
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d0101020500300f310d300b060355040a130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: O=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with MD2\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate ASN1 (Name with X520 OU)
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d0101020500300f310d300b060355040b130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: OU=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with MD2\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate ASN1 (Name with unknown X520 part)
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d0101020500300f310d300b06035504de130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with MD2\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate ASN1 (Name with PKCS9 email)
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509parse_crt:"30819f308189a0030201008204deadbeef300d06092a864886f70d010102050030153113301106092a864886f70d010901130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: emailAddress=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with MD2\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
X509 Certificate ASN1 (Name with unknown PKCS9 part)
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509parse_crt:"30819f308189a0030201008204deadbeef300d06092a864886f70d010102050030153113301106092a864886f70d0109ab130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with MD2\nRSA key size \: 128 bits\n":0
- Added extra X509 regression and coverage tests
2009-07-19 22:30:14 +02:00
Add test certificate signed with ECDSA
2013-07-10 12:20:54 +02:00
X509 Certificate ASN (ECDSA signature, RSA key)
x509parse_crt:"3081E630819E020103300906072A8648CE3D0401300F310D300B0603550403130454657374301E170D3133303731303039343631385A170D3233303730383039343631385A300F310D300B0603550403130454657374304C300D06092A864886F70D0101010500033B003038023100E8F546061D3B49BC2F6B7524B7EA4D73A8D5293EE8C64D9407B70B5D16BAEBC32B8205591EAB4E1EB57E9241883701250203010001300906072A8648CE3D0401033800303502186E18209AFBED14A0D9A796EFCAD68891E3CCD5F75815C833021900E92B4FD460B1994693243B9FFAD54729DE865381BDA41D25":"cert. version \: 1\nserial number \: 03\nissuer name \: CN=Test\nsubject name \: CN=Test\nissued on \: 2013-07-10 09\:46\:18\nexpires on \: 2023-07-08 09\:46\:18\nsigned using \: ECDSA with SHA1\nRSA key size \: 384 bits\n":0
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (Incorrect first tag)
x509parse_crl:"":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT
X509 CRL ASN1 (Correct first tag, data length does not match)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crl:"300000":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT + POLARSSL_ERR_ASN1_LENGTH_MISMATCH
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, tag missing)
- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.
2011-05-09 18:17:09 +02:00
x509parse_crl:"3000":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, version tag len missing)
- Updated tests to reflect recent changes
2011-10-12 13:53:52 +02:00
x509parse_crl:"3003300102":"":POLARSSL_ERR_X509_CERT_INVALID_VERSION + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, version correct, alg missing)
- Updated tests to reflect recent changes
2011-10-12 13:53:52 +02:00
x509parse_crl:"30053003020100":"":POLARSSL_ERR_X509_CERT_INVALID_ALG + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, alg correct, incorrect version)
- Updated tests to reflect recent changes
2011-10-12 13:53:52 +02:00
x509parse_crl:"300b3009020102300406000500":"":POLARSSL_ERR_X509_CERT_UNKNOWN_VERSION
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, correct version, sig_oid1 unknown)
- Updated tests to reflect recent changes
2011-10-12 13:53:52 +02:00
x509parse_crl:"300b3009020100300406000500":"":POLARSSL_ERR_X509_CERT_UNKNOWN_SIG_ALG
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, sig_oid1 id unknown)
- Updated tests to reflect recent changes
2011-10-12 13:53:52 +02:00
x509parse_crl:"30143012020100300d06092a864886f70d01010f0500":"":POLARSSL_ERR_X509_CERT_UNKNOWN_SIG_ALG
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, sig_oid1 correct, issuer missing)
- Updated tests to reflect recent changes
2011-10-12 13:53:52 +02:00
x509parse_crl:"30143012020100300d06092a864886f70d01010e0500":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, issuer set missing)
- Updated tests to reflect recent changes
2011-10-12 13:53:52 +02:00
x509parse_crl:"30163014020100300d06092a864886f70d01010e05003000":"":POLARSSL_ERR_X509_CERT_INVALID_NAME + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, correct issuer, thisUpdate missing)
- Updated tests to reflect recent changes
2011-10-12 13:53:52 +02:00
x509parse_crl:"30253023020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344":"":POLARSSL_ERR_X509_CERT_INVALID_DATE + POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, correct thisUpdate, nextUpdate missing, entries length missing)
- Updated tests to reflect recent changes
2011-10-12 13:53:52 +02:00
x509parse_crl:"30343032020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c30393031303130303030303030":"":POLARSSL_ERR_ASN1_OUT_OF_DATA
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, entries present, invalid sig_alg)
- Updated tests to reflect recent changes
2011-10-12 13:53:52 +02:00
x509parse_crl:"304a3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c30383132333132333539353900":"":POLARSSL_ERR_X509_CERT_INVALID_ALG + POLARSSL_ERR_ASN1_UNEXPECTED_TAG
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, entries present, date in entry invalid)
- Updated tests to reflect recent changes
2011-10-12 13:53:52 +02:00
x509parse_crl:"304a3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd190c30383132333132333539353900":"":POLARSSL_ERR_X509_CERT_INVALID_DATE + POLARSSL_ERR_ASN1_UNEXPECTED_TAG
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, sig_alg present, sig_alg does not match)
- Updated tests to reflect recent changes
2011-10-12 13:53:52 +02:00
x509parse_crl:"30583047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010d0500":"":POLARSSL_ERR_X509_CERT_SIG_MISMATCH
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
X509 CRL ASN1 (TBSCertList, sig present, len mismatch)
- Updated tests to reflect recent changes
2011-10-12 13:53:52 +02:00
x509parse_crl:"305d3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010e05000302000100":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT + POLARSSL_ERR_ASN1_LENGTH_MISMATCH
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 CRL ASN1 (TBSCertList, sig present)
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509parse_crl:"305c3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010e050003020001":"CRL version \: 1\nissuer name \: CN=ABCD\nthis update \: 2009-01-01 00\:00\:00\nnext update \: 0000-00-00 00\:00\:00\nRevoked certificates\:\nserial number\: AB\:CD revocation date\: 2008-12-31 23\:59\:59\nsigned using \: RSA with SHA-224\n":0
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
X509 CRL ASN1 (TBSCertList, no entries)
OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly
2013-04-07 22:00:46 +02:00
x509parse_crl:"30463031020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300d06092a864886f70d01010e050003020001":"CRL version \: 1\nissuer name \: CN=ABCD\nthis update \: 2009-01-01 00\:00\:00\nnext update \: 0000-00-00 00\:00\:00\nRevoked certificates\:\nsigned using \: RSA with SHA-224\n":0
- Added extra coverage tests
2009-07-27 22:22:10 +02:00
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 Key ASN1 (Incorrect first tag)
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_key_rsa:"":"":POLARSSL_ERR_X509_KEY_INVALID_FORMAT
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 Key ASN1 (RSAPrivateKey, incorrect version tag)
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_key_rsa:"300100":"":POLARSSL_ERR_X509_KEY_INVALID_FORMAT
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 Key ASN1 (RSAPrivateKey, version tag missing)
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_key_rsa:"3000":"":POLARSSL_ERR_X509_KEY_INVALID_FORMAT
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 Key ASN1 (RSAPrivateKey, invalid version)
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_key_rsa:"3003020101":"":POLARSSL_ERR_X509_KEY_INVALID_FORMAT
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 Key ASN1 (RSAPrivateKey, correct version, incorrect tag)
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_key_rsa:"300402010000":"":POLARSSL_ERR_X509_KEY_INVALID_FORMAT
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 Key ASN1 (RSAPrivateKey, values present, length mismatch)
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_key_rsa:"301c02010002010102010102010102010102010102010102010102010100":"":POLARSSL_ERR_X509_KEY_INVALID_FORMAT
- Added extra regression and coverage tests for ASN parsing of CRL and Key data
2009-07-20 22:35:41 +02:00
X509 Key ASN1 (RSAPrivateKey, values present, check_privkey fails)
Rename x509parse_key & co with _rsa suffix
2013-06-27 10:51:01 +02:00
x509parse_key_rsa:"301b020100020101020101020101020101020101020101020101020101":"":POLARSSL_ERR_X509_KEY_INVALID_FORMAT
Reference in New Issue Copy Permalink