1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/security/nss/cmd/certcgi/ca_form.html Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,357 @@ 1.4 +<html> 1.5 +<!-- This Source Code Form is subject to the terms of the Mozilla Public 1.6 + - License, v. 2.0. If a copy of the MPL was not distributed with this 1.7 + - file, You can obtain one at http://mozilla.org/MPL/2.0/. --> 1.8 + <form method="post" name="primary_form" action="http://interzone.mcom.com/burp.cgi"> 1.9 + <table border=0 cellspacing=10 cellpadding=0> 1.10 + <tr> 1.11 + <td> 1.12 + Common Name:</td><td> <input type="text" name="name" onChange="{window.top.reset_subject('CN=', value, form)}"></p> 1.13 + </td> 1.14 + <td></td><td></td><td> 1.15 + Mail: </td><td><input type="text" name="email" onChange="var temp;{if (email_type[0].checked) {temp = 'MAIL='} else {temp = 'E='}} ;{window.top.reset_subject(temp, value, form)}"></p> 1.16 + RFC 1274<input type="radio" name="email_type" value="1" onClick="window.top.switch_mail(form)"> 1.17 + e-mail<input type="radio" name="email_type" value="2" checked onClick="window.top.switch_mail(form)"></td> 1.18 + <tr> 1.19 + <td> 1.20 + Organization: </td><td> <input type="text" name="org" onChange="{window.top.reset_subject('O=', value, form)}"></p></td> 1.21 + <td></td><td></td><td> 1.22 + Organizational Unit: </td><td><input type="text" name="org_unit" onChange="{window.top.reset_subject('OU=', value, form)}"></p></td> 1.23 + <tr> 1.24 + <td> 1.25 + RFC 1274 UID: </td><td><input type="text" name="uid" onChange="{window.top.reset_subject('UID=', value, form)}"></p></td> 1.26 + <td></td><td></td><td> 1.27 + Locality: </td><td><input type="text" name="loc" onChange="{window.top.reset_subject('L=', value, form)}"></p></td> 1.28 + <tr> 1.29 + <td> 1.30 + State or Province: </td><td><input type="text" name="state" onChange="{window.top.reset_subject('ST=', value, form)}"></p></td> 1.31 + <td></td><td></td><td> 1.32 + Country: </td><td><input type="text" size="2" maxsize="2" name="country" onChange="{window.top.reset_subject('C=', value, form)}"></p></td> 1.33 + </table> 1.34 + <table border=0 cellspacing=10 cellpadding=0> 1.35 + <tr> 1.36 + <td> 1.37 + Serial Number:</p> 1.38 + <DD> 1.39 + <input type="radio" name="serial" value="auto" checked> Auto Generate</P> 1.40 + <DD> 1.41 + <input type="radio" name="serial" value="input"> 1.42 + Use this value: <input type="text" name="serial_value" size="8" maxlength="8"></p> 1.43 + </td> 1.44 + <td></td><td></td><td></td><td></td> 1.45 + <td> 1.46 + X.509 version:</p> 1.47 + <DD> 1.48 + <input type="radio" name="ver" value="1" checked> Version 1</p> 1.49 + <DD> 1.50 + <input type="radio" name="ver" value="3"> Version 3</P></td> 1.51 + <td></td><td></td><td></td><td></td><td></td><td></td><td></td><td></td><td></td> 1.52 + <td> 1.53 + Key Type:</p> 1.54 + <DD> 1.55 + <input type="radio" name="keyType" value="rsa" checked> RSA</p> 1.56 + <DD> 1.57 + <input type="radio" name="keyType" value="dsa"> DSA</P></td> 1.58 + </table> 1.59 + DN: <input type="text" name="subject" size="70" onChange="{window.top.reset_subjectFields(form)}"></P> 1.60 + <Select name="keysize"> 1.61 + <option>1024 (High Grade) 1.62 + <option>768 (Medium Grade) 1.63 + <option>512 (Low Grade) 1.64 + </select> 1.65 + </p> 1.66 + <hr> 1.67 + </p> 1.68 + <table border=1 cellspacing=5 cellpadding=5> 1.69 + <tr> 1.70 + <td> 1.71 + <b>Netscape Certificate Type: </b></p> 1.72 + Activate extension: <input type="checkbox" name="netscape-cert-type"></P> 1.73 + Critical: <input type="checkbox" name="netscape-cert-type-crit"> 1.74 + <td> 1.75 + <input type="checkbox" name="netscape-cert-type-ssl-client"> SSL Client</P> 1.76 + <input type="checkbox" name="netscape-cert-type-ssl-server"> SSL Server</P> 1.77 + <input type="checkbox" name="netscape-cert-type-smime"> S/MIME</P> 1.78 + <input type="checkbox" name="netscape-cert-type-object-signing"> Object Signing</P> 1.79 + <input type="checkbox" name="netscape-cert-type-reserved"> Reserved for future use (bit 4)</P> 1.80 + <input type="checkbox" name="netscape-cert-type-ssl-ca"> SSL CA</P> 1.81 + <input type="checkbox" name="netscape-cert-type-smime-ca"> S/MIME CA</P> 1.82 + <input type="checkbox" name="netscape-cert-type-object-signing-ca"> Object Signing CA</P> 1.83 + </tr> 1.84 + <tr> 1.85 + <td> 1.86 + <b>Netscape Base URL:</b></p> 1.87 + Activate extension: <input type="checkbox" name="netscape-base-url"></P> 1.88 + Critical: <input type="checkbox" name="netscape-base-url-crit"> 1.89 + <td> 1.90 + <input type="text" name="netscape-base-url-text" size="50"> 1.91 + </tr> 1.92 + <tr> 1.93 + <td> 1.94 + <b>Netscape Revocation URL:</b></p> 1.95 + Activate extension: <input type="checkbox" name="netscape-revocation-url"></P> 1.96 + Critical: <input type="checkbox" name="netscape-revocation-url-crit"> 1.97 + <td> 1.98 + <input type="text" name="netscape-revocation-url-text" size="50"> 1.99 + </tr> 1.100 + <tr> 1.101 + <td> 1.102 + <b>Netscape CA Revocation URL:</b></p> 1.103 + Activate extension: <input type="checkbox" name="netscape-ca-revocation-url"></P> 1.104 + Critical: <input type="checkbox" name="netscape-ca-revocation-url-crit"> 1.105 + <td> 1.106 + <input type="text" name="netscape-ca-revocation-url-text" size="50"> 1.107 + </tr> 1.108 + <tr> 1.109 + <td> 1.110 + <b>Netscape Certificate Renewal URL:</b></p> 1.111 + Activate extension: <input type="checkbox" name="netscape-cert-renewal-url"></P> 1.112 + Critical: <input type="checkbox" name="netscape-cert-renewal-url-crit"> 1.113 + <td> 1.114 + <input type="text" name="netscape-cert-renewal-url-text" size="50"> 1.115 + </tr> 1.116 + <tr> 1.117 + <td> 1.118 + <b>Netscape CA Policy URL:</b></p> 1.119 + Activate extension: <input type="checkbox" name="netscape-ca-policy-url"></P> 1.120 + Critical: <input type="checkbox" name="netscape-ca-policy-url-crit"> 1.121 + <td> 1.122 + <input type="text" name="netscape-ca-policy-url-text" size="50"> 1.123 + </tr> 1.124 + <tr> 1.125 + <td> 1.126 + <b>Netscape SSL Server Name:</b></p> 1.127 + Activate extension: <input type="checkbox" name="netscape-ssl-server-name"></P> 1.128 + Critical: <input type="checkbox" name="netscape-ssl-server-name-crit"> 1.129 + <td> 1.130 + <input type="text" name="netscape-ssl-server-name-text" size="50"> 1.131 + </tr> 1.132 + <tr> 1.133 + <td> 1.134 + <b>Netscape Comment:</b></p> 1.135 + Activate extension: <input type="checkbox" name="netscape-comment"></P> 1.136 + Critical: <input type="checkbox" name="netscape-comment-crit"> 1.137 + <td> 1.138 + <textarea name="netscape-comment-text" rows="5" cols="50"></textarea> 1.139 + </tr> 1.140 + </table> 1.141 + </p> 1.142 + <hr> 1.143 + </p> 1.144 + <table border=1 cellspacing=5 cellpadding=5> 1.145 + <form method="post" name="primary_form" action="http://interzone.mcom.com/burp.cgi"> 1.146 + <tr> 1.147 + <td> 1.148 + <b>Key Usage: </b></p> 1.149 + Activate extension: <input type="checkbox" name="keyUsage"></P> 1.150 + Critical: <input type="checkbox" name="keyUsage-crit"> 1.151 + <td> 1.152 + <input type="checkbox" name="keyUsage-digitalSignature"> Digital Signature</P> 1.153 + <input type="checkbox" name="keyUsage-nonRepudiation"> Non Repudiation</P> 1.154 + <input type="checkbox" name="keyUsage-keyEncipherment"> Key Encipherment</P> 1.155 + <input type="checkbox" name="keyUsage-dataEncipherment"> Data Encipherment</P> 1.156 + <input type="checkbox" name="keyUsage-keyAgreement"> Key Agreement</P> 1.157 + <input type="checkbox" name="keyUsage-keyCertSign"> Key Certificate Signing</P> 1.158 + <input type="checkbox" name="keyUsage-cRLSign"> CRL Signing</P> 1.159 + </tr> 1.160 + <tr> 1.161 + <td> 1.162 + <b>Extended Key Usage: </b></p> 1.163 + Activate extension: <input type="checkbox" name="extKeyUsage"></P> 1.164 + Critical: <input type="checkbox" name="extKeyUsage-crit"> 1.165 + <td> 1.166 + <input type="checkbox" name="extKeyUsage-serverAuth"> Server Auth</P> 1.167 + <input type="checkbox" name="extKeyUsage-clientAuth"> Client Auth</P> 1.168 + <input type="checkbox" name="extKeyUsage-codeSign"> Code Signing</P> 1.169 + <input type="checkbox" name="extKeyUsage-emailProtect"> Email Protection</P> 1.170 + <input type="checkbox" name="extKeyUsage-timeStamp"> Timestamp</P> 1.171 + <input type="checkbox" name="extKeyUsage-ocspResponder"> OCSP Responder</P> 1.172 + <input type="checkbox" name="extKeyUsage-NS-govtApproved"> Step-up</P> 1.173 + <input type="checkbox" name="extKeyUsage-msTrustListSign"> Microsoft Trust List Signing</P> 1.174 + </tr> 1.175 + <tr> 1.176 + <td> 1.177 + <b>Basic Constraints:</b></p> 1.178 + Activate extension: <input type="checkbox" name="basicConstraints"></P> 1.179 + Critical: <input type="checkbox" name="basicConstraints-crit"> 1.180 + <td> 1.181 + CA:</p> 1.182 + <dd><input type=radio name="basicConstraints-cA-radio" value="CA"> True</p> 1.183 + <dd><input type=radio name="basicConstraints-cA-radio" value="NotCA"> False</p> 1.184 + <input type="checkbox" name="basicConstraints-pathLengthConstraint"> 1.185 + Include Path length: <input type="text" name="basicConstraints-pathLengthConstraint-text" size="2"></p> 1.186 + </tr> 1.187 + <tr> 1.188 + <td> 1.189 + <b>Authority Key Identifier:</b></p> 1.190 + Activate extension: <input type="checkbox" name="authorityKeyIdentifier"> 1.191 + <td> 1.192 + <input type="radio" name="authorityKeyIdentifier-radio" value="keyIdentifier"> Key Identider</p> 1.193 + <input type="radio" name="authorityKeyIdentifier-radio" value="authorityCertIssuer"> Issuer Name and Serial number</p> 1.194 + </tr> 1.195 + <tr> 1.196 + <td> 1.197 + <b>Subject Key Identifier:</b></p> 1.198 + Activate extension: <input type="checkbox" name="subjectKeyIdentifier"> 1.199 + <td> 1.200 + Key Identifier: 1.201 + <input type="text" name="subjectKeyIdentifier-text"></p> 1.202 + This is an:<p> 1.203 + <dd><dd><input type="radio" name="subjectKeyIdentifier-radio" value="ascii"> ascii text value<p> 1.204 + <dd><dd><input type="radio" name="subjectKeyIdentifier-radio" value="hex"> hex value<p> 1.205 + </tr> 1.206 + <tr> 1.207 + <td> 1.208 + <b>Private Key Usage Period:</b></p> 1.209 + Activate extension: <input type="checkbox" name="privKeyUsagePeriod"></p> 1.210 + Critical: <input type="checkbox" name="privKeyUsagePeriod-crit"> 1.211 + <td> 1.212 + Use:</p> 1.213 + <dd><input type="radio" name="privKeyUsagePeriod-radio" value="notBefore"> Not Before</p> 1.214 + <dd><input type="radio" name="privKeyUsagePeriod-radio" value="notAfter"> Not After</p> 1.215 + <dd><input type="radio" name="privKeyUsagePeriod-radio" value="both" > Both</p> 1.216 + <b>Not to be used to sign before:</b></p> 1.217 + <dd><input type="radio" name="privKeyUsagePeriod-notBefore-radio" value="auto"> Set to time of certificate issue</p> 1.218 + <dd><input type="radio" name="privKeyUsagePeriod-notBefore-radio" value="manual"> Use This value</p> 1.219 + <dd><dd>(YYYY/MM/DD HH:MM:SS): 1.220 + <input type="text" name="privKeyUsagePeriod-notBefore-year" size="4" maxlength="4">/ 1.221 + <input type="text" name="privKeyUsagePeriod-notBefore-month" size="2" maxlength="2">/ 1.222 + <input type="text" name="privKeyUsagePeriod-notBefore-day" size="2" maxlength="2"> 1.223 + <input type="text" name="privKeyUsagePeriod-notBefore-hour" size="2" maxlength="2">: 1.224 + <input type="text" name="privKeyUsagePeriod-notBefore-minute" size="2" maxlength="2">: 1.225 + <input type="text" name="privKeyUsagePeriod-notBefore-second" size="2" maxlength="2"></p> 1.226 + <b>Not to be used to sign after:</b></p> 1.227 + <dd>(YYYY/MM/DD HH:MM:SS): 1.228 + <input type="text" name="privKeyUsagePeriod-notAfter-year" size="4" maxlength="4">/ 1.229 + <input type="text" name="privKeyUsagePeriod-notAfter-month" size="2" maxlength="2">/ 1.230 + <input type="text" name="privKeyUsagePeriod-notAfter-day" size="2" maxlength="2"> 1.231 + <input type="text" name="privKeyUsagePeriod-notAfter-hour" size="2" maxlength="2">: 1.232 + <input type="text" name="privKeyUsagePeriod-notAfter-minute" size="2" maxlength="2">: 1.233 + <input type="text" name="privKeyUsagePeriod-notAfter-second" size="2" maxlength="2"></p> 1.234 + </tr> 1.235 + <tr> 1.236 + <td> 1.237 + <b>Subject Alternative Name:</b></p> 1.238 + Activate extension: <input type="checkbox" name="SubAltName"></P> 1.239 + Critical: <input type="checkbox" name="SubAltName-crit"> 1.240 + <td> 1.241 + <table> 1.242 + <tr> 1.243 + <td> 1.244 + General Names:</p> 1.245 + <select name="SubAltNameSelect" multiple size="10"> 1.246 + </select></p></p> 1.247 + <input type="button" name="SubAltName-add" value="Add" onClick="{parent.addSubAltName(this.form)}"> 1.248 + <input type="button" name="SubAltName-delete" value="Delete" onClick="parent.deleteSubAltName(this.form)"> 1.249 + </td><td> 1.250 + <table><tr><td> 1.251 + Name Type: </td></tr><tr><td> 1.252 + <input type="radio" name="SubAltNameRadio" value="otherName" onClick="parent.setSubAltNameType(form)"> Other Name, 1.253 + OID: <input type="text" name="SubAltNameOtherNameOID" size="6"> </td><td> 1.254 + <input type="radio" name="SubAltNameRadio" value="rfc822Name" onClick="parent.setSubAltNameType(form)"> RFC 822 Name</td></tr><td> 1.255 + <input type="radio" name="SubAltNameRadio" value="dnsName" onClick="parent.setSubAltNameType(form)"> DNS Name </td><td> 1.256 + <input type="radio" name="SubAltNameRadio" value="x400" onClick="parent.setSubAltNameType(form)"> X400 Address</td></tr><td> 1.257 + <input type="radio" name="SubAltNameRadio" value="directoryName" onClick="parent.setSubAltNameType(form)"> Directory Name</td><td> 1.258 + <input type="radio" name="SubAltNameRadio" value="ediPartyName" onClick="parent.setSubAltNameType(form)"> EDI Party Name</td></tr><td> 1.259 + <input type="radio" name="SubAltNameRadio" value="URL" onClick="parent.setSubAltNameType(form)"> Uniform Resource Locator</td><td> 1.260 + <input type="radio" name="SubAltNameRadio" value="ipAddress" onClick="parent.setSubAltNameType(form)"> IP Address</td></tr><td> 1.261 + <input type="radio" name="SubAltNameRadio" value="regID"onClick="parent.setSubAltNameType(form)"> Registered ID</td><td> 1.262 + <input type="radio" name="SubAltNameRadio" value="nscpNickname" onClick="parent.setSubAltNameType(form)"> Netscape Certificate Nickname</td><td></tr> 1.263 + </table> 1.264 + Name: <input type="text" name="SubAltNameText"> 1.265 + Binary Encoded: <input type="checkbox" name="SubAltNameDataType" value="binary" onClick="parent.setSubAltNameType(form)"></p> 1.266 + </tr> 1.267 + </table> 1.268 + </tr> 1.269 + 1.270 + 1.271 + <tr> 1.272 + <td> 1.273 + <b>Issuer Alternative Name:</b></p> 1.274 + Activate extension: <input type="checkbox" name="IssuerAltName"></P> 1.275 + Critical: <input type="checkbox" name="IssuerAltName-crit"> 1.276 + <td> 1.277 + <input type="radio" name="IssuerAltNameSourceRadio" value="auto"> Use the Subject Alternative Name from the Issuers Certificate</p> 1.278 + <input type="radio" name="IssuerAltNameSourceRadio" value="man"> Use this Name: 1.279 + <table> 1.280 + <tr> 1.281 + <td> 1.282 + General Names:</p> 1.283 + <select name="IssuerAltNameSelect" multiple size="10"> 1.284 + </select></p></p> 1.285 + <input type="button" name="IssuerAltName-add" value="Add" onClick="{parent.addIssuerAltName(this.form)}"> 1.286 + <input type="button" name="IssuerAltName-delete" value="Delete" onClick="parent.deleteIssuerAltName(this.form)"> 1.287 + </td><td> 1.288 + <table><tr><td> 1.289 + Name Type: </td></tr><tr><td> 1.290 + <input type="radio" name="IssuerAltNameRadio" value="otherName" onClick="parent.setIssuerAltNameType(form)"> Other Name, 1.291 + OID: <input type="text" name="IssuerAltNameOtherNameOID" size="6"> </td><td> 1.292 + <input type="radio" name="IssuerAltNameRadio" value="rfc822Name" onClick="parent.setIssuerAltNameType(form)"> RFC 822 Name</td></tr><td> 1.293 + <input type="radio" name="IssuerAltNameRadio" value="dnsName" onClick="parent.setIssuerAltNameType(form)"> DNS Name </td><td> 1.294 + <input type="radio" name="IssuerAltNameRadio" value="x400" onClick="parent.setIssuerAltNameType(form)"> X400 Address</td></tr><td> 1.295 + <input type="radio" name="IssuerAltNameRadio" value="directoryName" onClick="parent.setIssuerAltNameType(form)"> Directory Name</td><td> 1.296 + <input type="radio" name="IssuerAltNameRadio" value="ediPartyName" onClick="parent.setIssuerAltNameType(form)"> EDI Party Name</td></tr><td> 1.297 + <input type="radio" name="IssuerAltNameRadio" value="URL" onClick="parent.setIssuerAltNameType(form)"> Uniform Resource Locator</td><td> 1.298 + <input type="radio" name="IssuerAltNameRadio" value="ipAddress" onClick="parent.setIssuerAltNameType(form)"> IP Address</td></tr><td> 1.299 + <input type="radio" name="IssuerAltNameRadio" value="regID" onClick="parent.setIssuerAltNameType(form)"> Registered ID</td><td></tr> 1.300 + </table> 1.301 + Name: <input type="text" name="IssuerAltNameText"> 1.302 + Binary Encoded: <input type="checkbox" name="IssuerAltNameDataType" value="binary" onClick="parent.setIssuerAltNameType(form)"></p> 1.303 + </tr> 1.304 + </table> 1.305 + </tr> 1.306 + 1.307 + <tr> 1.308 + <td> 1.309 + <b>Name Constraints:</b></p> 1.310 + Activate extension: <input type="checkbox" name="NameConstraints"></P> 1.311 + <td> 1.312 + <table> 1.313 + <tr> 1.314 + <td> 1.315 + Name Constraints:</p> 1.316 + 1.317 + 1.318 + <select name="NameConstraintSelect" multiple size="10"> 1.319 + </select></p></p> 1.320 + <input type="button" name="NameConstraint-add" value="Add" onClick="{parent.addNameConstraint(this.form)}"> 1.321 + <input type="button" name="NameConstraint-delete" value="Delete" onClick="parent.deleteNameConstraint(this.form)"> 1.322 + </td><td> 1.323 + <table><tr><td> 1.324 + Name Type: </td></tr><tr><td> 1.325 + <input type="radio" name="NameConstraintRadio" value="otherName" onClick="parent.setNameConstraintNameType(form)"> Other Name, 1.326 + OID: <input type="text" name="NameConstraintOtherNameOID" size="6"> </td><td> 1.327 + <input type="radio" name="NameConstraintRadio" value="rfc822Name" onClick="parent.setNameConstraintNameType(form)"> RFC 822 Name</td></tr><td> 1.328 + <input type="radio" name="NameConstraintRadio" value="dnsName" onClick="parent.setNameConstraintNameType(form)"> DNS Name </td><td> 1.329 + <input type="radio" name="NameConstraintRadio" value="x400" onClick="parent.setNameConstraintNameType(form)"> X400 Address</td></tr><td> 1.330 + <input type="radio" name="NameConstraintRadio" value="directoryName" onClick="parent.setNameConstraintNameType(form)"> Directory Name</td><td> 1.331 + <input type="radio" name="NameConstraintRadio" value="ediPartyName" onClick="parent.setNameConstraintNameType(form)"> EDI Party Name</td></tr><td> 1.332 + <input type="radio" name="NameConstraintRadio" value="URL" onClick="parent.setNameConstraintNameType(form)"> Uniform Resource Locator</td><td> 1.333 + <input type="radio" name="NameConstraintRadio" value="ipAddress" onClick="parent.setNameConstraintNameType(form)"> IP Address</td></tr><td> 1.334 + <input type="radio" name="NameConstraintRadio" value="regID" onClick="parent.setNameConstraintNameType(form)"> Registered ID</td><td></tr> 1.335 + </table> 1.336 + Name: <input type="text" name="NameConstraintText"> 1.337 + Binary Encoded: <input type="checkbox" name="NameConstraintNameDataType" value="binary" onClick="parent.setNameConstraintNameType(form)"></p> 1.338 + Constraint type:<p> 1.339 + <dd><input type="radio" name="NameConstraintTypeRadio" value="permited"> permited<p> 1.340 + <dd><input type="radio" name="NameConstraintTypeRadio" value="excluded"> excluded<p> 1.341 + Minimum: <input type="text" name="NameConstraintMin" size="8" maxlength="8"></p> 1.342 + Maximum: <input type="text" name="NameConstraintMax" size="8" maxlength="8"></p> 1.343 + 1.344 + 1.345 + 1.346 + </tr> 1.347 + </table> 1.348 + </tr> 1.349 + </table> 1.350 + </form> 1.351 + 1.352 + 1.353 + 1.354 + 1.355 + 1.356 + 1.357 + 1.358 + 1.359 + 1.360 +