|
1 # This Source Code Form is subject to the terms of the Mozilla Public |
|
2 # License, v. 2.0. If a copy of the MPL was not distributed with this |
|
3 # file, You can obtain one at http://mozilla.org/MPL/2.0/. |
|
4 |
|
5 scenario CRLDP |
|
6 |
|
7 entity Root |
|
8 type Root |
|
9 |
|
10 entity CA0 |
|
11 type Intermediate |
|
12 issuer Root |
|
13 |
|
14 entity CA1 |
|
15 type Intermediate |
|
16 crldp CA0 |
|
17 issuer CA0 |
|
18 serial 10 |
|
19 aia CA0:Root |
|
20 |
|
21 entity EE11 |
|
22 type EE |
|
23 crldp CA0 |
|
24 issuer CA1 |
|
25 |
|
26 entity CA2 |
|
27 type Intermediate |
|
28 crldp CA0 |
|
29 issuer CA0 |
|
30 serial 20 |
|
31 aia CA0:Root |
|
32 |
|
33 entity EE21 |
|
34 type EE |
|
35 issuer CA2 |
|
36 |
|
37 entity EE1 |
|
38 type EE |
|
39 crldp CA0 |
|
40 issuer CA0 |
|
41 serial 30 |
|
42 aia CA0:Root |
|
43 |
|
44 entity EE2 |
|
45 type EE |
|
46 crldp CA0 |
|
47 issuer CA0 |
|
48 serial 40 |
|
49 aia CA0:Root |
|
50 |
|
51 crl Root |
|
52 crl CA0 |
|
53 crl CA1 |
|
54 crl CA2 |
|
55 |
|
56 revoke CA0 |
|
57 serial 20 |
|
58 |
|
59 revoke CA0 |
|
60 serial 40 |
|
61 |
|
62 copycrl CA0 |
|
63 |
|
64 db All |
|
65 |
|
66 import Root::CTu,CTu,CTu |
|
67 |
|
68 # intermediate CA - OK, EE - OK |
|
69 verify EE11:CA1 |
|
70 cert CA1:CA0 |
|
71 trust Root: |
|
72 fetch |
|
73 rev_type chain |
|
74 rev_flags requireFreshInfo |
|
75 rev_mtype crl |
|
76 result pass |
|
77 |
|
78 # intermediate CA - revoked, EE - OK |
|
79 verify EE21:CA2 |
|
80 cert CA2:CA0 |
|
81 trust Root: |
|
82 fetch |
|
83 rev_type chain |
|
84 rev_flags requireFreshInfo |
|
85 rev_mtype crl |
|
86 result fail |
|
87 |
|
88 # direct EE - OK |
|
89 verify EE1:CA0 |
|
90 trust Root: |
|
91 fetch |
|
92 rev_type leaf |
|
93 rev_flags requireFreshInfo |
|
94 rev_mtype crl |
|
95 result pass |
|
96 |
|
97 # direct EE - revoked |
|
98 verify EE2:CA0 |
|
99 trust Root: |
|
100 fetch |
|
101 rev_type leaf |
|
102 rev_flags requireFreshInfo |
|
103 rev_mtype crl |
|
104 result fail |
|
105 |