|
1 # This Source Code Form is subject to the terms of the Mozilla Public |
|
2 # License, v. 2.0. If a copy of the MPL was not distributed with this |
|
3 # file, You can obtain one at http://mozilla.org/MPL/2.0/. |
|
4 |
|
5 scenario BridgeWithPolicyExtensionAndMapping |
|
6 |
|
7 entity Army |
|
8 type Root |
|
9 |
|
10 entity Navy |
|
11 type Root |
|
12 |
|
13 entity CAArmy |
|
14 type Intermediate |
|
15 issuer Army |
|
16 policy OID.1.0 |
|
17 policy OID.1.1 |
|
18 |
|
19 entity CANavy |
|
20 type Intermediate |
|
21 issuer Navy |
|
22 policy OID.2.0 |
|
23 policy OID.2.1 |
|
24 |
|
25 entity Bridge |
|
26 type Bridge |
|
27 issuer CAArmy |
|
28 policy OID.1.0 |
|
29 policy OID.1.1 |
|
30 mapping OID.1.1:OID.2.1 |
|
31 issuer CANavy |
|
32 policy OID.2.0 |
|
33 policy OID.2.1 |
|
34 mapping OID.2.1:OID.1.1 |
|
35 |
|
36 entity CA1 |
|
37 type Intermediate |
|
38 issuer Bridge |
|
39 policy OID.1.1 |
|
40 policy OID.2.1 |
|
41 |
|
42 entity CA2 |
|
43 type Intermediate |
|
44 issuer Bridge |
|
45 policy OID.1.0 |
|
46 policy OID.2.0 |
|
47 |
|
48 entity EE1 |
|
49 type EE |
|
50 issuer CA1 |
|
51 policy OID.2.1 |
|
52 |
|
53 entity EE2 |
|
54 type EE |
|
55 issuer CA2 |
|
56 policy OID.2.0 |
|
57 |
|
58 testdb |
|
59 |
|
60 verify EE1:CA1 |
|
61 cert CA1:Bridge |
|
62 cert Bridge:CAArmy |
|
63 cert CAArmy:Army |
|
64 trust Army: |
|
65 policy OID.1.0 |
|
66 result fail |
|
67 |
|
68 verify EE1:CA1 |
|
69 cert CA1:Bridge |
|
70 cert Bridge:CAArmy |
|
71 cert CAArmy:Army |
|
72 trust Army: |
|
73 policy OID.1.1 |
|
74 result pass |
|
75 |
|
76 verify EE1:CA1 |
|
77 cert CA1:Bridge |
|
78 cert Bridge:CAArmy |
|
79 cert CAArmy:Army |
|
80 trust Army: |
|
81 policy OID.2.0 |
|
82 result fail |
|
83 |
|
84 verify EE1:CA1 |
|
85 cert CA1:Bridge |
|
86 cert Bridge:CAArmy |
|
87 cert CAArmy:Army |
|
88 trust Army: |
|
89 policy OID.2.1 |
|
90 result fail |
|
91 |
|
92 verify EE1:CA1 |
|
93 cert CA1:Bridge |
|
94 cert Bridge:CANavy |
|
95 cert CANavy:Navy |
|
96 trust Navy: |
|
97 policy OID.1.0 |
|
98 result fail |
|
99 |
|
100 verify EE1:CA1 |
|
101 cert CA1:Bridge |
|
102 cert Bridge:CANavy |
|
103 cert CANavy:Navy |
|
104 trust Navy: |
|
105 policy OID.1.1 |
|
106 result fail |
|
107 |
|
108 verify EE1:CA1 |
|
109 cert CA1:Bridge |
|
110 cert Bridge:CANavy |
|
111 cert CANavy:Navy |
|
112 trust Navy: |
|
113 policy OID.2.0 |
|
114 result fail |
|
115 |
|
116 verify EE1:CA1 |
|
117 cert CA1:Bridge |
|
118 cert Bridge:CANavy |
|
119 cert CANavy:Navy |
|
120 trust Navy: |
|
121 policy OID.2.1 |
|
122 result fail |
|
123 |
|
124 verify EE2:CA2 |
|
125 cert CA2:Bridge |
|
126 cert Bridge:CANavy |
|
127 cert CANavy:Navy |
|
128 trust Navy: |
|
129 policy OID.1.0 |
|
130 result fail |
|
131 |
|
132 verify EE2:CA2 |
|
133 cert CA2:Bridge |
|
134 cert Bridge:CANavy |
|
135 cert CANavy:Navy |
|
136 trust Navy: |
|
137 policy OID.1.1 |
|
138 result fail |
|
139 |
|
140 verify EE2:CA2 |
|
141 cert CA2:Bridge |
|
142 cert Bridge:CANavy |
|
143 cert CANavy:Navy |
|
144 trust Navy: |
|
145 policy OID.2.0 |
|
146 result pass |
|
147 |
|
148 verify EE2:CA2 |
|
149 cert CA2:Bridge |
|
150 cert Bridge:CANavy |
|
151 cert CANavy:Navy |
|
152 trust Navy: |
|
153 policy OID.2.1 |
|
154 result fail |
|
155 |
|
156 verify EE2:CA2 |
|
157 cert CA2:Bridge |
|
158 cert Bridge:CAArmy |
|
159 cert CAArmy:Army |
|
160 trust Army: |
|
161 policy OID.1.0 |
|
162 result fail |
|
163 |
|
164 verify EE2:CA2 |
|
165 cert CA2:Bridge |
|
166 cert Bridge:CAArmy |
|
167 cert CAArmy:Army |
|
168 trust Army: |
|
169 policy OID.1.1 |
|
170 result fail |
|
171 |
|
172 verify EE2:CA2 |
|
173 cert CA2:Bridge |
|
174 cert Bridge:CAArmy |
|
175 cert CAArmy:Army |
|
176 trust Army: |
|
177 policy OID.2.0 |
|
178 result fail |
|
179 |
|
180 verify EE2:CA2 |
|
181 cert CA2:Bridge |
|
182 cert Bridge:CAArmy |
|
183 cert CAArmy:Army |
|
184 trust Army: |
|
185 policy OID.2.1 |
|
186 result fail |
|
187 |