The Tor Browser / file diff

     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/security/nss/tests/chains/scenarios/crldp.cfg	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,105 @@
     1.4 +# This Source Code Form is subject to the terms of the Mozilla Public
     1.5 +# License, v. 2.0. If a copy of the MPL was not distributed with this
     1.6 +# file, You can obtain one at http://mozilla.org/MPL/2.0/.
     1.7 +
     1.8 +scenario CRLDP
     1.9 +
    1.10 +entity Root
    1.11 +  type Root
    1.12 +
    1.13 +entity CA0
    1.14 +  type Intermediate
    1.15 +  issuer Root
    1.16 +
    1.17 +entity CA1
    1.18 +  type Intermediate
    1.19 +  crldp CA0
    1.20 +  issuer CA0
    1.21 +  serial 10
    1.22 +    aia CA0:Root
    1.23 +
    1.24 +entity EE11
    1.25 +  type EE
    1.26 +  crldp CA0
    1.27 +  issuer CA1
    1.28 +
    1.29 +entity CA2
    1.30 +  type Intermediate
    1.31 +  crldp CA0
    1.32 +  issuer CA0
    1.33 +  serial 20
    1.34 +    aia CA0:Root
    1.35 +
    1.36 +entity EE21
    1.37 +  type EE
    1.38 +  issuer CA2
    1.39 +
    1.40 +entity EE1
    1.41 +  type EE
    1.42 +  crldp CA0
    1.43 +  issuer CA0
    1.44 +  serial 30
    1.45 +    aia CA0:Root
    1.46 +
    1.47 +entity EE2
    1.48 +  type EE
    1.49 +  crldp CA0
    1.50 +  issuer CA0
    1.51 +  serial 40
    1.52 +    aia CA0:Root
    1.53 +
    1.54 +crl Root
    1.55 +crl CA0
    1.56 +crl CA1
    1.57 +crl CA2
    1.58 +
    1.59 +revoke CA0
    1.60 +  serial 20
    1.61 +
    1.62 +revoke CA0
    1.63 +  serial 40
    1.64 +
    1.65 +copycrl CA0
    1.66 +
    1.67 +db All
    1.68 +
    1.69 +import Root::CTu,CTu,CTu
    1.70 +
    1.71 +# intermediate CA - OK, EE - OK
    1.72 +verify EE11:CA1
    1.73 +  cert CA1:CA0
    1.74 +  trust Root:
    1.75 +  fetch
    1.76 +  rev_type chain
    1.77 +  rev_flags requireFreshInfo
    1.78 +  rev_mtype crl
    1.79 +  result pass
    1.80 +
    1.81 +# intermediate CA - revoked, EE - OK
    1.82 +verify EE21:CA2
    1.83 +  cert CA2:CA0
    1.84 +  trust Root:
    1.85 +  fetch
    1.86 +  rev_type chain
    1.87 +  rev_flags requireFreshInfo
    1.88 +  rev_mtype crl
    1.89 +  result fail
    1.90 +
    1.91 +# direct EE - OK 
    1.92 +verify EE1:CA0
    1.93 +  trust Root:
    1.94 +  fetch
    1.95 +  rev_type leaf
    1.96 +  rev_flags requireFreshInfo
    1.97 +  rev_mtype crl
    1.98 +  result pass
    1.99 +
   1.100 +# direct EE - revoked
   1.101 +verify EE2:CA0
   1.102 +  trust Root:
   1.103 +  fetch
   1.104 +  rev_type leaf
   1.105 +  rev_flags requireFreshInfo
   1.106 +  rev_mtype crl
   1.107 +  result fail
   1.108 +