security/nss/tests/chains/scenarios/crldp.cfg

Wed, 31 Dec 2014 06:09:35 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Wed, 31 Dec 2014 06:09:35 +0100
changeset 0
6474c204b198
permissions
-rw-r--r--

Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.

     1 # This Source Code Form is subject to the terms of the Mozilla Public
     2 # License, v. 2.0. If a copy of the MPL was not distributed with this
     3 # file, You can obtain one at http://mozilla.org/MPL/2.0/.
     5 scenario CRLDP
     7 entity Root
     8   type Root
    10 entity CA0
    11   type Intermediate
    12   issuer Root
    14 entity CA1
    15   type Intermediate
    16   crldp CA0
    17   issuer CA0
    18   serial 10
    19     aia CA0:Root
    21 entity EE11
    22   type EE
    23   crldp CA0
    24   issuer CA1
    26 entity CA2
    27   type Intermediate
    28   crldp CA0
    29   issuer CA0
    30   serial 20
    31     aia CA0:Root
    33 entity EE21
    34   type EE
    35   issuer CA2
    37 entity EE1
    38   type EE
    39   crldp CA0
    40   issuer CA0
    41   serial 30
    42     aia CA0:Root
    44 entity EE2
    45   type EE
    46   crldp CA0
    47   issuer CA0
    48   serial 40
    49     aia CA0:Root
    51 crl Root
    52 crl CA0
    53 crl CA1
    54 crl CA2
    56 revoke CA0
    57   serial 20
    59 revoke CA0
    60   serial 40
    62 copycrl CA0
    64 db All
    66 import Root::CTu,CTu,CTu
    68 # intermediate CA - OK, EE - OK
    69 verify EE11:CA1
    70   cert CA1:CA0
    71   trust Root:
    72   fetch
    73   rev_type chain
    74   rev_flags requireFreshInfo
    75   rev_mtype crl
    76   result pass
    78 # intermediate CA - revoked, EE - OK
    79 verify EE21:CA2
    80   cert CA2:CA0
    81   trust Root:
    82   fetch
    83   rev_type chain
    84   rev_flags requireFreshInfo
    85   rev_mtype crl
    86   result fail
    88 # direct EE - OK 
    89 verify EE1:CA0
    90   trust Root:
    91   fetch
    92   rev_type leaf
    93   rev_flags requireFreshInfo
    94   rev_mtype crl
    95   result pass
    97 # direct EE - revoked
    98 verify EE2:CA0
    99   trust Root:
   100   fetch
   101   rev_type leaf
   102   rev_flags requireFreshInfo
   103   rev_mtype crl
   104   result fail

mercurial