michael@0: # This Source Code Form is subject to the terms of the Mozilla Public
michael@0: # License, v. 2.0. If a copy of the MPL was not distributed with this
michael@0: # file, You can obtain one at http://mozilla.org/MPL/2.0/.
michael@0: 
michael@0: scenario AnyPolicyWithLevel
michael@0: 
michael@0: entity RootCA
michael@0:   type Root
michael@0: 
michael@0: entity CA1
michael@0:   type Intermediate
michael@0:   issuer RootCA
michael@0:   policy any
michael@0:   inhibit 1
michael@0: 
michael@0: entity CA12
michael@0:   type Intermediate
michael@0:   issuer CA1
michael@0:   policy any
michael@0: 
michael@0: entity CA13
michael@0:   type Intermediate
michael@0:   issuer CA12
michael@0:   policy OID.1.0
michael@0: 
michael@0: entity EE1 
michael@0:   type EE
michael@0:   issuer CA13
michael@0:   policy OID.1.0
michael@0: 
michael@0: entity CA22
michael@0:   type Intermediate
michael@0:   issuer CA1
michael@0:   policy any
michael@0: 
michael@0: entity CA23
michael@0:   type Intermediate
michael@0:   issuer CA22
michael@0:   policy any
michael@0: 
michael@0: entity EE2
michael@0:   type EE
michael@0:   issuer CA23
michael@0:   policy OID.1.0
michael@0: 
michael@0: entity CA32
michael@0:   type Intermediate
michael@0:   issuer CA1
michael@0:   policy any
michael@0:   inhibit 1
michael@0: 
michael@0: entity CA33
michael@0:   type Intermediate
michael@0:   issuer CA32
michael@0:   policy any
michael@0: 
michael@0: entity EE3
michael@0:   type EE
michael@0:   issuer CA33
michael@0:   policy OID.1.0
michael@0: 
michael@0: entity CA42
michael@0:   type Intermediate
michael@0:   issuer CA1
michael@0:   policy any
michael@0:   policy OID.1.0
michael@0: 
michael@0: entity CA43
michael@0:   type Intermediate
michael@0:   issuer CA42
michael@0:   policy any
michael@0:   policy OID.1.0
michael@0: 
michael@0: entity EE4
michael@0:   type EE
michael@0:   issuer CA43
michael@0:   policy OID.1.0
michael@0: 
michael@0: entity CA52
michael@0:   type Intermediate
michael@0:   issuer CA1
michael@0:   policy any
michael@0:   policy OID.1.0
michael@0: 
michael@0: entity CA53
michael@0:   type Intermediate
michael@0:   issuer CA52
michael@0:   policy any
michael@0: 
michael@0: entity EE5
michael@0:   type EE
michael@0:   issuer CA53
michael@0:   policy OID.1.0
michael@0: 
michael@0: entity CA61
michael@0:   type Intermediate
michael@0:   issuer RootCA
michael@0:   policy any
michael@0:   inhibit 5
michael@0: 
michael@0: entity CA62
michael@0:   type Intermediate
michael@0:   issuer CA61
michael@0:   policy any
michael@0: 
michael@0: entity EE62
michael@0:   type EE
michael@0:   issuer CA62
michael@0:   policy OID.1.0
michael@0: 
michael@0: entity CA63
michael@0:   type Intermediate
michael@0:   issuer CA62
michael@0:   policy any
michael@0: 
michael@0: entity EE63
michael@0:   type EE
michael@0:   issuer CA63
michael@0:   policy OID.1.0
michael@0: 
michael@0: entity CA64
michael@0:   type Intermediate
michael@0:   issuer CA63
michael@0:   policy any
michael@0: 
michael@0: entity EE64
michael@0:   type EE
michael@0:   issuer CA64
michael@0:   policy OID.1.0
michael@0: 
michael@0: entity CA65
michael@0:   type Intermediate
michael@0:   issuer CA64
michael@0:   policy any
michael@0: 
michael@0: entity EE65
michael@0:   type EE
michael@0:   issuer CA65
michael@0:   policy OID.1.0
michael@0: 
michael@0: entity CA66
michael@0:   type Intermediate
michael@0:   issuer CA65
michael@0:   policy any
michael@0: 
michael@0: entity EE66
michael@0:   type EE
michael@0:   issuer CA66
michael@0:   policy OID.1.0
michael@0: 
michael@0: entity CA67
michael@0:   type Intermediate
michael@0:   issuer CA66
michael@0:   policy any
michael@0: 
michael@0: entity EE67
michael@0:   type EE
michael@0:   issuer CA67
michael@0:   policy OID.1.0
michael@0: 
michael@0: db All
michael@0: 
michael@0: verify EE1:CA13
michael@0:   cert RootCA:
michael@0:   cert CA1:RootCA
michael@0:   cert CA12:CA1
michael@0:   cert CA13:CA12
michael@0:   trust RootCA:
michael@0:   policy OID.1.0
michael@0:   result pass 
michael@0: 
michael@0: verify EE1:CA13
michael@0:   cert RootCA:
michael@0:   cert CA1:RootCA
michael@0:   cert CA12:CA1
michael@0:   cert CA13:CA12
michael@0:   trust RootCA:
michael@0:   policy OID.2.0
michael@0:   result fail
michael@0: 
michael@0: verify EE1:CA13
michael@0:   cert RootCA:
michael@0:   cert CA1:RootCA
michael@0:   cert CA12:CA1
michael@0:   cert CA13:CA12
michael@0:   trust RootCA:
michael@0:   policy OID.2.5.29.32.0
michael@0:   result pass
michael@0: 
michael@0: verify EE2:CA23
michael@0:   cert RootCA:
michael@0:   cert CA1:RootCA
michael@0:   cert CA22:CA1
michael@0:   cert CA23:CA22
michael@0:   trust RootCA:
michael@0:   policy OID.1.0
michael@0:   result fail
michael@0: 
michael@0: verify EE2:CA23
michael@0:   cert RootCA:
michael@0:   cert CA1:RootCA
michael@0:   cert CA22:CA1
michael@0:   cert CA23:CA22
michael@0:   trust RootCA:
michael@0:   policy OID.2.0
michael@0:   result fail
michael@0: 
michael@0: verify EE2:CA23
michael@0:   cert RootCA:
michael@0:   cert CA1:RootCA
michael@0:   cert CA22:CA1
michael@0:   cert CA23:CA22
michael@0:   trust RootCA:
michael@0:   policy OID.2.5.29.32.0
michael@0:   result fail
michael@0: 
michael@0: verify EE2:CA23
michael@0:   cert RootCA:
michael@0:   cert CA1:RootCA
michael@0:   cert CA22:CA1
michael@0:   cert CA23:CA22
michael@0:   trust RootCA:
michael@0:   result pass
michael@0: 
michael@0: verify EE3:CA33
michael@0:   cert RootCA:
michael@0:   cert CA1:RootCA
michael@0:   cert CA32:CA1
michael@0:   cert CA33:CA32
michael@0:   trust RootCA:
michael@0:   policy OID.1.0
michael@0:   result fail
michael@0: 
michael@0: verify EE3:CA33
michael@0:   cert RootCA:
michael@0:   cert CA1:RootCA
michael@0:   cert CA32:CA1
michael@0:   cert CA33:CA32
michael@0:   trust RootCA:
michael@0:   policy OID.2.0
michael@0:   result fail
michael@0: 
michael@0: verify EE3:CA33
michael@0:   cert RootCA:
michael@0:   cert CA1:RootCA
michael@0:   cert CA32:CA1
michael@0:   cert CA33:CA32
michael@0:   trust RootCA:
michael@0:   policy OID.2.5.29.32.0
michael@0:   result fail
michael@0: 
michael@0: verify EE3:CA33
michael@0:   cert RootCA:
michael@0:   cert CA1:RootCA
michael@0:   cert CA32:CA1
michael@0:   cert CA33:CA32
michael@0:   trust RootCA:
michael@0:   result pass
michael@0: 
michael@0: verify EE4:CA43
michael@0:   cert RootCA:
michael@0:   cert CA1:RootCA
michael@0:   cert CA42:CA1
michael@0:   cert CA43:CA42
michael@0:   trust RootCA:
michael@0:   policy OID.1.0
michael@0:   result pass
michael@0: 
michael@0: verify EE4:CA43
michael@0:   cert RootCA:
michael@0:   cert CA1:RootCA
michael@0:   cert CA42:CA1
michael@0:   cert CA43:CA42
michael@0:   trust RootCA:
michael@0:   policy OID.2.0
michael@0:   result fail
michael@0: 
michael@0: verify EE4:CA43
michael@0:   cert RootCA:
michael@0:   cert CA1:RootCA
michael@0:   cert CA42:CA1
michael@0:   cert CA43:CA42
michael@0:   trust RootCA:
michael@0:   policy OID.2.5.29.32.0
michael@0:   result pass
michael@0: 
michael@0: verify EE5:CA53
michael@0:   cert RootCA:
michael@0:   cert CA1:RootCA
michael@0:   cert CA52:CA1
michael@0:   cert CA53:CA52
michael@0:   trust RootCA:
michael@0:   policy OID.1.0
michael@0:   result fail
michael@0: 
michael@0: verify EE5:CA53
michael@0:   cert RootCA:
michael@0:   cert CA1:RootCA
michael@0:   cert CA52:CA1
michael@0:   cert CA53:CA52
michael@0:   trust RootCA:
michael@0:   policy OID.2.0
michael@0:   result fail
michael@0: 
michael@0: verify EE5:CA53
michael@0:   cert RootCA:
michael@0:   cert CA1:RootCA
michael@0:   cert CA52:CA1
michael@0:   cert CA53:CA52
michael@0:   trust RootCA:
michael@0:   policy OID.2.5.29.32.0
michael@0:   result fail
michael@0: 
michael@0: verify EE5:CA53
michael@0:   cert RootCA:
michael@0:   cert CA1:RootCA
michael@0:   cert CA52:CA1
michael@0:   cert CA53:CA52
michael@0:   trust RootCA:
michael@0:   result pass
michael@0: 
michael@0: verify EE62:CA62
michael@0:   cert RootCA:
michael@0:   cert CA61:RootCA
michael@0:   cert CA62:CA61
michael@0:   cert CA63:CA62
michael@0:   cert CA64:CA63
michael@0:   cert CA65:CA64
michael@0:   cert CA66:CA65
michael@0:   cert CA67:CA66
michael@0:   trust RootCA:
michael@0:   policy OID.1.0
michael@0:   result pass
michael@0: 
michael@0: verify EE63:CA63
michael@0:   cert RootCA:
michael@0:   cert CA61:RootCA
michael@0:   cert CA62:CA61
michael@0:   cert CA63:CA62
michael@0:   cert CA64:CA63
michael@0:   cert CA65:CA64
michael@0:   cert CA66:CA65
michael@0:   cert CA67:CA66
michael@0:   trust RootCA:
michael@0:   policy OID.1.0
michael@0:   result pass
michael@0: 
michael@0: verify EE64:CA64
michael@0:   cert RootCA:
michael@0:   cert CA61:RootCA
michael@0:   cert CA62:CA61
michael@0:   cert CA63:CA62
michael@0:   cert CA64:CA63
michael@0:   cert CA65:CA64
michael@0:   cert CA66:CA65
michael@0:   cert CA67:CA66
michael@0:   trust RootCA:
michael@0:   policy OID.1.0
michael@0:   result pass
michael@0: 
michael@0: verify EE65:CA65
michael@0:   cert RootCA:
michael@0:   cert CA61:RootCA
michael@0:   cert CA62:CA61
michael@0:   cert CA63:CA62
michael@0:   cert CA64:CA63
michael@0:   cert CA65:CA64
michael@0:   cert CA66:CA65
michael@0:   cert CA67:CA66
michael@0:   trust RootCA:
michael@0:   policy OID.1.0
michael@0:   result pass
michael@0: 
michael@0: verify EE66:CA66
michael@0:   cert RootCA:
michael@0:   cert CA61:RootCA
michael@0:   cert CA62:CA61
michael@0:   cert CA63:CA62
michael@0:   cert CA64:CA63
michael@0:   cert CA65:CA64
michael@0:   cert CA66:CA65
michael@0:   cert CA67:CA66
michael@0:   trust RootCA:
michael@0:   policy OID.1.0
michael@0:   result pass
michael@0: 
michael@0: verify EE67:CA67
michael@0:   cert RootCA:
michael@0:   cert CA61:RootCA
michael@0:   cert CA62:CA61
michael@0:   cert CA63:CA62
michael@0:   cert CA64:CA63
michael@0:   cert CA65:CA64
michael@0:   cert CA66:CA65
michael@0:   cert CA67:CA66
michael@0:   trust RootCA:
michael@0:   policy OID.1.0
michael@0:   result fail
michael@0: