1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/security/nss/tests/chains/scenarios/bridgewithpolicyextensionandmapping.cfg Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,187 @@ 1.4 +# This Source Code Form is subject to the terms of the Mozilla Public 1.5 +# License, v. 2.0. If a copy of the MPL was not distributed with this 1.6 +# file, You can obtain one at http://mozilla.org/MPL/2.0/. 1.7 + 1.8 +scenario BridgeWithPolicyExtensionAndMapping 1.9 + 1.10 +entity Army 1.11 + type Root 1.12 + 1.13 +entity Navy 1.14 + type Root 1.15 + 1.16 +entity CAArmy 1.17 + type Intermediate 1.18 + issuer Army 1.19 + policy OID.1.0 1.20 + policy OID.1.1 1.21 + 1.22 +entity CANavy 1.23 + type Intermediate 1.24 + issuer Navy 1.25 + policy OID.2.0 1.26 + policy OID.2.1 1.27 + 1.28 +entity Bridge 1.29 + type Bridge 1.30 + issuer CAArmy 1.31 + policy OID.1.0 1.32 + policy OID.1.1 1.33 + mapping OID.1.1:OID.2.1 1.34 + issuer CANavy 1.35 + policy OID.2.0 1.36 + policy OID.2.1 1.37 + mapping OID.2.1:OID.1.1 1.38 + 1.39 +entity CA1 1.40 + type Intermediate 1.41 + issuer Bridge 1.42 + policy OID.1.1 1.43 + policy OID.2.1 1.44 + 1.45 +entity CA2 1.46 + type Intermediate 1.47 + issuer Bridge 1.48 + policy OID.1.0 1.49 + policy OID.2.0 1.50 + 1.51 +entity EE1 1.52 + type EE 1.53 + issuer CA1 1.54 + policy OID.2.1 1.55 + 1.56 +entity EE2 1.57 + type EE 1.58 + issuer CA2 1.59 + policy OID.2.0 1.60 + 1.61 +testdb 1.62 + 1.63 +verify EE1:CA1 1.64 + cert CA1:Bridge 1.65 + cert Bridge:CAArmy 1.66 + cert CAArmy:Army 1.67 + trust Army: 1.68 + policy OID.1.0 1.69 + result fail 1.70 + 1.71 +verify EE1:CA1 1.72 + cert CA1:Bridge 1.73 + cert Bridge:CAArmy 1.74 + cert CAArmy:Army 1.75 + trust Army: 1.76 + policy OID.1.1 1.77 + result pass 1.78 + 1.79 +verify EE1:CA1 1.80 + cert CA1:Bridge 1.81 + cert Bridge:CAArmy 1.82 + cert CAArmy:Army 1.83 + trust Army: 1.84 + policy OID.2.0 1.85 + result fail 1.86 + 1.87 +verify EE1:CA1 1.88 + cert CA1:Bridge 1.89 + cert Bridge:CAArmy 1.90 + cert CAArmy:Army 1.91 + trust Army: 1.92 + policy OID.2.1 1.93 + result fail 1.94 + 1.95 +verify EE1:CA1 1.96 + cert CA1:Bridge 1.97 + cert Bridge:CANavy 1.98 + cert CANavy:Navy 1.99 + trust Navy: 1.100 + policy OID.1.0 1.101 + result fail 1.102 + 1.103 +verify EE1:CA1 1.104 + cert CA1:Bridge 1.105 + cert Bridge:CANavy 1.106 + cert CANavy:Navy 1.107 + trust Navy: 1.108 + policy OID.1.1 1.109 + result fail 1.110 + 1.111 +verify EE1:CA1 1.112 + cert CA1:Bridge 1.113 + cert Bridge:CANavy 1.114 + cert CANavy:Navy 1.115 + trust Navy: 1.116 + policy OID.2.0 1.117 + result fail 1.118 + 1.119 +verify EE1:CA1 1.120 + cert CA1:Bridge 1.121 + cert Bridge:CANavy 1.122 + cert CANavy:Navy 1.123 + trust Navy: 1.124 + policy OID.2.1 1.125 + result fail 1.126 + 1.127 +verify EE2:CA2 1.128 + cert CA2:Bridge 1.129 + cert Bridge:CANavy 1.130 + cert CANavy:Navy 1.131 + trust Navy: 1.132 + policy OID.1.0 1.133 + result fail 1.134 + 1.135 +verify EE2:CA2 1.136 + cert CA2:Bridge 1.137 + cert Bridge:CANavy 1.138 + cert CANavy:Navy 1.139 + trust Navy: 1.140 + policy OID.1.1 1.141 + result fail 1.142 + 1.143 +verify EE2:CA2 1.144 + cert CA2:Bridge 1.145 + cert Bridge:CANavy 1.146 + cert CANavy:Navy 1.147 + trust Navy: 1.148 + policy OID.2.0 1.149 + result pass 1.150 + 1.151 +verify EE2:CA2 1.152 + cert CA2:Bridge 1.153 + cert Bridge:CANavy 1.154 + cert CANavy:Navy 1.155 + trust Navy: 1.156 + policy OID.2.1 1.157 + result fail 1.158 + 1.159 +verify EE2:CA2 1.160 + cert CA2:Bridge 1.161 + cert Bridge:CAArmy 1.162 + cert CAArmy:Army 1.163 + trust Army: 1.164 + policy OID.1.0 1.165 + result fail 1.166 + 1.167 +verify EE2:CA2 1.168 + cert CA2:Bridge 1.169 + cert Bridge:CAArmy 1.170 + cert CAArmy:Army 1.171 + trust Army: 1.172 + policy OID.1.1 1.173 + result fail 1.174 + 1.175 +verify EE2:CA2 1.176 + cert CA2:Bridge 1.177 + cert Bridge:CAArmy 1.178 + cert CAArmy:Army 1.179 + trust Army: 1.180 + policy OID.2.0 1.181 + result fail 1.182 + 1.183 +verify EE2:CA2 1.184 + cert CA2:Bridge 1.185 + cert Bridge:CAArmy 1.186 + cert CAArmy:Army 1.187 + trust Army: 1.188 + policy OID.2.1 1.189 + result fail 1.190 +