public/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
openssl/test/certs
History
Exact
Ivan Stanković e599893a9f x509: allow SAN URIs to contain userinfo 
The way we're currently handling SAN URIs does not allow for userinfo,
meaning the name constraint check on such URIs will fail. Fix this by
skipping over the userinfo component:

      authority   = [ userinfo "@" ] host [ ":" port ]

(per RFC 3986).

Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com>
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25861)
2025-03-04 17:30:34 +01:00
..
acert.pem x509_acert: Add simple API tests 2024-04-24 14:05:35 +01:00
acert_bc1.pem x509_acert: Add more parsing and printing tests 2024-04-24 14:08:05 +01:00
acert_bc2.pem x509_acert: Add more parsing and printing tests 2024-04-24 14:08:05 +01:00
acert_ietf.pem x509_acert: Add simple API tests 2024-04-24 14:05:35 +01:00
alt1-cert.pem Limit scope of CN name constraints 2018-05-23 11:12:13 -04:00
alt1-key.pem Limit scope of CN name constraints 2018-05-23 11:12:13 -04:00
alt2-cert.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
alt2-key.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
alt3-cert.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
alt3-key.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
bad-othername-cert.pem Add testcase for nc_match_single type confusion 2023-02-07 17:05:10 +01:00
bad-othername-namec-inter.pem Test a bad SmtpUTF8Mailbox name constraint 2021-06-04 17:18:31 +01:00
bad-othername-namec-key.pem Test a bad SmtpUTF8Mailbox name constraint 2021-06-04 17:18:31 +01:00
bad-othername-namec.pem Test a bad SmtpUTF8Mailbox name constraint 2021-06-04 17:18:31 +01:00
bad-pc3-cert.pem Create some proxy certificates 2016-06-20 21:34:37 +02:00
bad-pc3-key.pem Create some proxy certificates 2016-06-20 21:34:37 +02:00
bad-pc4-cert.pem Create some proxy certificates 2016-06-20 21:34:37 +02:00
bad-pc4-key.pem Create some proxy certificates 2016-06-20 21:34:37 +02:00
bad-pc6-cert.pem Create some proxy certificates 2016-06-20 21:34:37 +02:00
bad-pc6-key.pem Create some proxy certificates 2016-06-20 21:34:37 +02:00
bad.key
bad.pem
badalt1-cert.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
badalt1-key.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
badalt2-cert.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
badalt2-key.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
badalt3-cert.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
badalt3-key.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
badalt4-cert.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
badalt4-key.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
badalt5-cert.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
badalt5-key.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
badalt6-cert.pem Limit scope of CN name constraints 2018-05-23 11:12:13 -04:00
badalt6-key.pem Limit scope of CN name constraints 2018-05-23 11:12:13 -04:00
badalt7-cert.pem Limit scope of CN name constraints 2018-05-23 11:12:13 -04:00
badalt7-key.pem Limit scope of CN name constraints 2018-05-23 11:12:13 -04:00
badalt8-cert.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
badalt8-key.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
badalt9-cert.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
badalt9-key.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
badalt10-cert.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
badalt10-key.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
badcn1-cert.pem Limit scope of CN name constraints 2018-05-23 11:12:13 -04:00
badcn1-key.pem Limit scope of CN name constraints 2018-05-23 11:12:13 -04:00
ca+anyEKU.pem Compat self-signed trust with reject-only aux data 2016-01-31 21:24:12 -05:00
ca+clientAuth.pem
ca+serverAuth.pem
ca-anyEKU.pem Compat self-signed trust with reject-only aux data 2016-01-31 21:24:12 -05:00
ca-cert-768.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
ca-cert-768i.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
ca-cert-ec-explicit.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
ca-cert-ec-named.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
ca-cert-md5-any.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
ca-cert-md5.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
ca-cert.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
ca-cert2.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
ca-clientAuth.pem Compat self-signed trust with reject-only aux data 2016-01-31 21:24:12 -05:00
ca-expired.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
ca-key-768.pem Move peer chain security checks into x509_vfy.c 2016-04-03 11:35:35 -04:00
ca-key-ec-explicit.pem Disallow certs with explicit curve in verification chain 2020-09-17 17:15:15 +02:00
ca-key-ec-named.pem Disallow certs with explicit curve in verification chain 2020-09-17 17:15:15 +02:00
ca-key.pem
ca-key2.pem
ca-name2.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
ca-nonbc.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
ca-nonca.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
ca-pol-cert.pem Generate some certificates with the certificatePolicies extension 2023-03-28 13:31:17 +02:00
ca-pss-cert.pem check_sig_alg_match(): weaken sig nid comparison to allow RSA{,PSS} key verify RSA-PSS 2021-01-28 15:05:04 +01:00
ca-pss-key.pem check_sig_alg_match(): weaken sig nid comparison to allow RSA{,PSS} key verify RSA-PSS 2021-01-28 15:05:04 +01:00
ca-root2.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
ca-serverAuth.pem
cca+anyEKU.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
cca+clientAuth.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
cca+serverAuth.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
cca-anyEKU.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
cca-cert.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
cca-clientAuth.pem test/certs/setup.sh: Fix two glitches 2021-05-05 09:51:39 +02:00
cca-serverAuth.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
cert-key-cert.pem test_pem_reading: Test loading a key from a file with multiple PEM data 2021-07-02 15:33:34 +02:00
client-ed448-cert.pem Update tests for TLS Ed448 2018-03-05 11:39:44 +00:00
client-ed448-key.pem Update tests for TLS Ed448 2018-03-05 11:39:44 +00:00
client-ed25519-cert.pem Add Ed25519 EE certificates 2017-06-21 14:11:01 +01:00
client-ed25519-key.pem Add Ed25519 EE certificates 2017-06-21 14:11:01 +01:00
client-pss-restrict-cert.pem Enable setting SSL_CERT_FLAG_TLS_STRICT with ssl config 2022-06-03 13:22:42 +10:00
client-pss-restrict-key.pem Enable setting SSL_CERT_FLAG_TLS_STRICT with ssl config 2022-06-03 13:22:42 +10:00
croot+anyEKU.pem Compat self-signed trust with reject-only aux data 2016-01-31 21:24:12 -05:00
croot+clientAuth.pem Compat self-signed trust with reject-only aux data 2016-01-31 21:24:12 -05:00
croot+serverAuth.pem Compat self-signed trust with reject-only aux data 2016-01-31 21:24:12 -05:00
croot-anyEKU.pem Compat self-signed trust with reject-only aux data 2016-01-31 21:24:12 -05:00
croot-cert.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
croot-clientAuth.pem Compat self-signed trust with reject-only aux data 2016-01-31 21:24:12 -05:00
croot-serverAuth.pem Compat self-signed trust with reject-only aux data 2016-01-31 21:24:12 -05:00
cross-key.pem Test for DANE cross cert fix 2021-09-03 00:11:53 -04:00
cross-root.pem Test for DANE cross cert fix 2021-09-03 00:11:53 -04:00
ct-server-key-public.pem Create a new embeddedSCTs1 that's signed using SHA256 2020-02-05 22:04:37 +01:00
ct-server-key.pem Create a new embeddedSCTs1 that's signed using SHA256 2020-02-05 22:04:37 +01:00
cyrillic.msb Fix the expected output of printing certificates 2021-06-08 18:53:28 +01:00
cyrillic.pem test/x509: Test for issuer being overwritten when printing. 2021-03-04 12:15:37 +01:00
cyrillic.utf8 Fix the expected output of printing certificates 2021-06-08 18:53:28 +01:00
cyrillic_crl.pem Switch command-line utils to new nameopt API. 2017-04-25 12:37:17 -04:00
cyrillic_crl.utf8 add 'Signature Value:' line and correct indentation when printing X.509 signature value 2019-03-18 17:20:23 +00:00
dhk2048.pem TEST: Prefer using precomputed RSA and DH keys for more efficient tests 2021-05-27 11:06:01 +02:00
dhp2048.pem test_ssl_new: X448, X25519, and EdDSA are supported with fips 2021-03-03 10:00:21 +10:00
ec_privkey_with_chain.pem d2i_PrivateKey{,_ex}() and PEM_X509_INFO_read_bio_ex(): Fix handling of RSA/DSA/EC private key 2021-04-08 15:18:58 +02:00
ee+clientAuth.pem
ee+serverAuth.pem
ee-cert-768.pem Move peer chain security checks into x509_vfy.c 2016-04-03 11:35:35 -04:00
ee-cert-768i.pem Move peer chain security checks into x509_vfy.c 2016-04-03 11:35:35 -04:00
ee-cert-1024.pem Add some additional test certificates/keys 2020-11-18 14:14:53 +00:00
ee-cert-3072.pem Add some additional test certificates/keys 2020-11-18 14:14:53 +00:00
ee-cert-4096.pem Add some additional test certificates/keys 2020-11-18 14:14:53 +00:00
ee-cert-8192.pem Add some additional test certificates/keys 2020-11-18 14:14:53 +00:00
ee-cert-crit-unknown-ext.pem Implement treatment of id-pkix-ocsp-no-check extension for OCSP_basic_verify() 2020-09-26 14:03:44 +02:00
ee-cert-ec-explicit.pem Disallow certs with explicit curve in verification chain 2020-09-17 17:15:15 +02:00
ee-cert-ec-named-explicit.pem Disallow certs with explicit curve in verification chain 2020-09-17 17:15:15 +02:00
ee-cert-ec-named-named.pem Disallow certs with explicit curve in verification chain 2020-09-17 17:15:15 +02:00
ee-cert-ec-sha3-224.pem test: add verify test for EC cert signed with SHA3 2023-10-02 12:46:24 +02:00
ee-cert-ec-sha3-256.pem test: add verify test for EC cert signed with SHA3 2023-10-02 12:46:24 +02:00
ee-cert-ec-sha3-384.pem test: add verify test for EC cert signed with SHA3 2023-10-02 12:46:24 +02:00
ee-cert-ec-sha3-512.pem test: add verify test for EC cert signed with SHA3 2023-10-02 12:46:24 +02:00
ee-cert-md5.pem Move peer chain security checks into x509_vfy.c 2016-04-03 11:35:35 -04:00
ee-cert-noncrit-unknown-ext.pem Implement treatment of id-pkix-ocsp-no-check extension for OCSP_basic_verify() 2020-09-26 14:03:44 +02:00
ee-cert-ocsp-nocheck.pem Implement treatment of id-pkix-ocsp-no-check extension for OCSP_basic_verify() 2020-09-26 14:03:44 +02:00
ee-cert-policies-bad.pem Generate some certificates with the certificatePolicies extension 2023-03-28 13:31:17 +02:00
ee-cert-policies.pem Generate some certificates with the certificatePolicies extension 2023-03-28 13:31:17 +02:00
ee-cert.pem
ee-cert2.pem
ee-client-chain.pem Update client authentication tests 2016-06-03 11:59:46 +02:00
ee-client.pem
ee-clientAuth.pem
ee-codesign-anyextkeyusage.pem X509: add tests for purpose code signing in verify application 2022-08-18 10:24:53 +02:00
ee-codesign-crlsign.pem X509: add tests for purpose code signing in verify application 2022-08-18 10:24:53 +02:00
ee-codesign-keycertsign.pem X509: add tests for purpose code signing in verify application 2022-08-18 10:24:53 +02:00
ee-codesign-noncritical.pem X509: add tests for purpose code signing in verify application 2022-08-18 10:24:53 +02:00
ee-codesign-serverauth.pem X509: add tests for purpose code signing in verify application 2022-08-18 10:24:53 +02:00
ee-codesign.pem X509: add tests for purpose code signing in verify application 2022-08-18 10:24:53 +02:00
ee-ecdsa-client-chain.pem Add ECDSA client certificates 2017-02-16 16:43:44 +00:00
ee-ecdsa-key.pem Add ECDSA client certificates 2017-02-16 16:43:44 +00:00
ee-ed25519.pem Update the validity period of ed25519 cerificates 2022-11-12 13:17:57 +01:00
ee-expired.pem
ee-key-768.pem Move peer chain security checks into x509_vfy.c 2016-04-03 11:35:35 -04:00
ee-key-1024.pem Add some additional test certificates/keys 2020-11-18 14:14:53 +00:00
ee-key-3072.pem Add some additional test certificates/keys 2020-11-18 14:14:53 +00:00
ee-key-4096.pem Add some additional test certificates/keys 2020-11-18 14:14:53 +00:00
ee-key-8192.pem Add some additional test certificates/keys 2020-11-18 14:14:53 +00:00
ee-key-ec-explicit.pem Disallow certs with explicit curve in verification chain 2020-09-17 17:15:15 +02:00
ee-key-ec-named-explicit.pem Disallow certs with explicit curve in verification chain 2020-09-17 17:15:15 +02:00
ee-key-ec-named-named.pem Disallow certs with explicit curve in verification chain 2020-09-17 17:15:15 +02:00
ee-key.pem
ee-name2.pem
ee-pathlen.pem update test/certs/ee-pathlen.pem to contain SKID and AKID 2021-05-05 09:51:39 +02:00
ee-pss-cert.pem check_sig_alg_match(): weaken sig nid comparison to allow RSA{,PSS} key verify RSA-PSS 2021-01-28 15:05:04 +01:00
ee-pss-sha1-cert.pem Add certificates with PSS signatures 2017-04-25 22:12:34 +01:00
ee-pss-sha256-cert.pem Add certificates with PSS signatures 2017-04-25 22:12:34 +01:00
ee-pss-wrong1.5-cert.pem check_sig_alg_match(): weaken sig nid comparison to allow RSA{,PSS} key verify RSA-PSS 2021-01-28 15:05:04 +01:00
ee-self-signed-pss.pem Add test for ASN1_item_verify() 2024-06-21 10:03:42 +02:00
ee-self-signed.pem ee-self-signed.pem: Restore original version, adding -attime to 25-test_verify.t 2021-06-02 14:49:13 +02:00
ee-serverAuth.pem
ee-ss-with-keyCertSign.pem 25-test_verify.t: Add test case: accept trusted self-signed EE cert with key usage keyCertSign also when strict 2021-06-09 16:06:10 +02:00
ee-timestampsign-CABforum-anyextkeyusage.pem Add test cases for verification of time stamping certificates 2022-06-22 16:58:08 +10:00
ee-timestampsign-CABforum-crlsign.pem Add test cases for verification of time stamping certificates 2022-06-22 16:58:08 +10:00
ee-timestampsign-CABforum-keycertsign.pem Add test cases for verification of time stamping certificates 2022-06-22 16:58:08 +10:00
ee-timestampsign-CABforum-noncritxku.pem Add test cases for verification of time stamping certificates 2022-06-22 16:58:08 +10:00
ee-timestampsign-CABforum-serverauth.pem Add test cases for verification of time stamping certificates 2022-06-22 16:58:08 +10:00
ee-timestampsign-CABforum.pem Add test cases for verification of time stamping certificates 2022-06-22 16:58:08 +10:00
ee-timestampsign-rfc3161-digsig.pem Add test cases for verification of time stamping certificates 2022-06-22 16:58:08 +10:00
ee-timestampsign-rfc3161-noncritxku.pem Add test cases for verification of time stamping certificates 2022-06-22 16:58:08 +10:00
ee-timestampsign-rfc3161.pem Add test cases for verification of time stamping certificates 2022-06-22 16:58:08 +10:00
embeddedSCTs1-key.pem Create a new embeddedSCTs1 that's signed using SHA256 2020-02-05 22:04:37 +01:00
embeddedSCTs1.pem Change the SCT issuer key to RSA 2048 2022-06-03 17:17:08 +02:00
embeddedSCTs1.sct Change the SCT issuer key to RSA 2048 2022-06-03 17:17:08 +02:00
embeddedSCTs1.tlssct Create a new embeddedSCTs1 that's signed using SHA256 2020-02-05 22:04:37 +01:00
embeddedSCTs1_issuer-key.pem Change the SCT issuer key to RSA 2048 2022-06-03 17:17:08 +02:00
embeddedSCTs1_issuer.pem Change the SCT issuer key to RSA 2048 2022-06-03 17:17:08 +02:00
embeddedSCTs3.pem Tests for parsing and printing certificates containing SCTs 2016-02-25 13:59:11 -05:00
embeddedSCTs3.sct Create a new embeddedSCTs1 that's signed using SHA256 2020-02-05 22:04:37 +01:00
embeddedSCTs3_issuer.pem CT policy validation 2016-03-01 20:03:25 +00:00
ext-aAissuingDistributionPoint.pem test: aAissuingDistributionPoint X.509v3 extension 2025-01-17 18:39:24 +01:00
ext-acceptableCertPolicies.pem test: add tests for acceptable policies exts 2024-06-26 15:00:27 +02:00
ext-acceptablePrivilegePolicies.pem test: add tests for acceptable policies exts 2024-06-26 15:00:27 +02:00
ext-allowedAttributeAssignments.pem test: allowedAttributeAssignments X.509v3 extension 2025-01-02 20:06:59 +01:00
ext-associatedInformation.pem Support subjectDirectoryAttributes and associatedInformation exts 2024-06-24 15:33:21 +02:00
ext-attributeDescriptor.pem test: the attributeDescriptor X.509v3 extension 2024-11-13 11:53:34 +01:00
ext-attributeMappings.pem test: the attributeMappings X.509v3 extension 2024-12-23 09:58:15 +00:00
ext-auditIdentity.pem test: auditIdentity X.509v3 extension decoding and display 2024-08-26 10:38:44 +01:00
ext-authorityAttributeIdentifier.pem test: authorityAttributeIdentifier X.509v3 extension 2024-09-10 19:17:34 +02:00
ext-basicAttConstraints.pem test: the basicAttConstraints X.509v3 extension 2024-07-24 16:14:17 -04:00
ext-check.csr 25-test_req.t: Add systematic SKID+AKID tests for self-issued (incl. self-signed) certs 2021-11-11 20:18:56 +01:00
ext-delegatedNameConstraints.pem feat: add delegatedNameConstraints and holderNameConstraints exts 2024-06-20 19:59:22 +02:00
ext-groupAC.pem Support all NULL-syntax X.509v3 extensions 2023-09-25 15:12:04 -04:00
ext-holderNameConstraints.pem feat: add delegatedNameConstraints and holderNameConstraints exts 2024-06-20 19:59:22 +02:00
ext-indirectIssuer.pem Support all NULL-syntax X.509v3 extensions 2023-09-25 15:12:04 -04:00
ext-issuedOnBehalfOf.pem test: issuedOnBehalfOf X.509v3 extension 2024-08-27 16:48:57 +02:00
ext-noAssertion.pem Support all NULL-syntax X.509v3 extensions 2023-09-25 15:12:04 -04:00
ext-noRevAvail.pem Support all NULL-syntax X.509v3 extensions 2023-09-25 15:12:04 -04:00
ext-roleSpecCertIdentifier.pem test: the roleSpecCertIdentifier X.509v3 extension 2024-09-16 22:56:02 +02:00
ext-singleUse.pem Support all NULL-syntax X.509v3 extensions 2023-09-25 15:12:04 -04:00
ext-sOAIdentifier.pem Support all NULL-syntax X.509v3 extensions 2023-09-25 15:12:04 -04:00
ext-subjectDirectoryAttributes.pem Support subjectDirectoryAttributes and associatedInformation exts 2024-06-24 15:33:21 +02:00
ext-targetingInformation.pem Add support for targetingInformation X.509v3 extension 2024-06-17 14:03:25 +02:00
ext-timeSpecification-absolute.pem test: the timeSpecification X.509v3 extension 2024-12-11 18:26:37 +01:00
ext-timeSpecification-periodic.pem test: the timeSpecification X.509v3 extension 2024-12-11 18:26:37 +01:00
ext-userNotice.pem test: userNotice X.509v3 extension 2024-07-04 09:36:11 +02:00
fake-gp.pem Add support for unusal 'othername' subjectAltNames 2020-04-25 18:52:30 +03:00
goodcn1-cert.pem Limit scope of CN name constraints 2018-05-23 11:12:13 -04:00
goodcn1-key.pem Limit scope of CN name constraints 2018-05-23 11:12:13 -04:00
goodcn2-cert.pem Add a new Name Constraints test cert 2021-12-14 13:48:34 +00:00
goodcn2-chain.pem Add a TLS test for name constraints with an EE cert without a SAN 2021-12-14 13:48:34 +00:00
goodcn2-key.pem Add a new Name Constraints test cert 2021-12-14 13:48:34 +00:00
grfc.pem Issuer Sign Tool extention support 2020-03-25 15:33:53 +03:00
interCA.key
interCA.pem
invalid-cert.pem X509_cmp(): Fix comparison in case x509v3_cache_extensions() failed to due to invalid cert 2021-01-13 11:19:17 +01:00
key-pass-12345.pem PEM_X509_INFO_read_bio_ex(): Generalize to allow parsing any type of private key 2021-04-08 15:18:58 +02:00
leaf-chain.pem Fix NULL access in ssl_build_cert_chain() when ctx is NULL. 2021-03-03 16:16:19 +10:00
leaf-encrypted.key Test that PEM_BUFSIZE is passed into pem_password_cb 2022-01-03 10:35:36 +01:00
leaf.key
leaf.pem
many-constraints.pem Guard against DoS in name constraints handling. 2017-09-22 22:00:55 +02:00
many-names1.pem Guard against DoS in name constraints handling. 2017-09-22 22:00:55 +02:00
many-names2.pem Guard against DoS in name constraints handling. 2017-09-22 22:00:55 +02:00
many-names3.pem Guard against DoS in name constraints handling. 2017-09-22 22:00:55 +02:00
mkcert.sh Copyright year updates 2023-09-07 09:59:15 +01:00
nc-uri-cert.pem x509: allow SAN URIs to contain userinfo 2025-03-04 17:30:34 +01:00
nca+anyEKU.pem test/certs/setup.sh: Fix two glitches 2021-05-05 09:51:39 +02:00
nca+serverAuth.pem Add tests for non-ca trusted roots and intermediates 2016-01-31 21:24:16 -05:00
ncca-cert.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
ncca-key.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
ncca1-cert.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
ncca1-key.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
ncca2-cert.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
ncca2-key.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
ncca3-cert.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
ncca3-key.pem Extend mkcert.sh to support nameConstraints generation and more complex 2016-07-11 23:30:04 +01:00
ncca4-cert.pem x509: allow SAN URIs to contain userinfo 2025-03-04 17:30:34 +01:00
ncca4-key.pem x509: allow SAN URIs to contain userinfo 2025-03-04 17:30:34 +01:00
nccaothername-cert.pem Add testcase for nc_match_single type confusion 2023-02-07 17:05:10 +01:00
nccaothername-key.pem Add testcase for nc_match_single type confusion 2023-02-07 17:05:10 +01:00
nroot+anyEKU.pem Add tests for non-ca trusted roots and intermediates 2016-01-31 21:24:16 -05:00
nroot+serverAuth.pem Add tests for non-ca trusted roots and intermediates 2016-01-31 21:24:16 -05:00
p256-server-cert.pem Add P-384 root and P-384, P-256 EE certificates. 2017-02-24 23:30:49 +00:00
p256-server-key.pem Add P-384 root and P-384, P-256 EE certificates. 2017-02-24 23:30:49 +00:00
p384-root-key.pem Add P-384 root and P-384, P-256 EE certificates. 2017-02-24 23:30:49 +00:00
p384-root.pem Add P-384 root and P-384, P-256 EE certificates. 2017-02-24 23:30:49 +00:00
p384-server-cert.pem Add P-384 root and P-384, P-256 EE certificates. 2017-02-24 23:30:49 +00:00
p384-server-key.pem Add P-384 root and P-384, P-256 EE certificates. 2017-02-24 23:30:49 +00:00
pathlen.pem Add some accessor API's 2016-06-08 11:37:06 -04:00
pc1-cert.pem Create some proxy certificates 2016-06-20 21:34:37 +02:00
pc1-key.pem Create some proxy certificates 2016-06-20 21:34:37 +02:00
pc2-cert.pem Create some proxy certificates 2016-06-20 21:34:37 +02:00
pc2-key.pem Create some proxy certificates 2016-06-20 21:34:37 +02:00
pc5-cert.pem Create some proxy certificates 2016-06-20 21:34:37 +02:00
pc5-key.pem Create some proxy certificates 2016-06-20 21:34:37 +02:00
pkitsta.pem test: add test case for deadlock reported in #19643 2022-12-08 11:11:11 +01:00
root+anyEKU.pem Check chain extensions also for trusted certificates 2016-01-31 21:23:23 -05:00
root+clientAuth.pem
root+serverAuth.pem
root-anyEKU.pem Check chain extensions also for trusted certificates 2016-01-31 21:23:23 -05:00
root-cert-768.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
root-cert-md5.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
root-cert-rsa2.pem Fix cert with rsa instead of rsaEncryption as public key algorithm 2018-12-31 09:47:12 +01:00
root-cert.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
root-cert2.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
root-clientAuth.pem Compat self-signed trust with reject-only aux data 2016-01-31 21:24:12 -05:00
root-cross-cert.pem Test for DANE cross cert fix 2021-09-03 00:11:53 -04:00
root-ed448-cert.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
root-ed448-key.pem Generate new Ed488 certificates 2020-02-11 23:23:42 +01:00
root-ed25519.pem Update the validity period of ed25519 cerificates 2022-11-12 13:17:57 +01:00
root-ed25519.privkey.pem Configure: make C++ build tests optional and configurable 2019-03-05 09:26:13 +01:00
root-ed25519.pubkey.pem Configure: make C++ build tests optional and configurable 2019-03-05 09:26:13 +01:00
root-expired.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
root-key-768.pem Move peer chain security checks into x509_vfy.c 2016-04-03 11:35:35 -04:00
root-key.pem
root-key2.pem
root-ml-dsa-44-cert.pem ML-DSA: Add TLS certificate test 2025-02-14 10:46:04 +01:00
root-ml-dsa-44-key.pem ML-DSA: Add TLS certificate test 2025-02-14 10:46:04 +01:00
root-name2.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
root-nonca.pem
root-noserver.pem More X509_verify_cert() tests via verify(1). 2016-01-20 19:04:11 -05:00
root-serverAuth.pem
root2+clientAuth.pem Check chain extensions also for trusted certificates 2016-01-31 21:23:23 -05:00
root2+serverAuth.pem Check chain extensions also for trusted certificates 2016-01-31 21:23:23 -05:00
root2-serverAuth.pem Check chain extensions also for trusted certificates 2016-01-31 21:23:23 -05:00
rootCA.key
rootCA.pem Resign test/certs/rootCA.pem to expire in 100 years 2022-11-12 13:17:57 +01:00
rootcert.pem More X509_verify_cert() tests via verify(1). 2016-01-20 19:04:11 -05:00
rootkey.pem More X509_verify_cert() tests via verify(1). 2016-01-20 19:04:11 -05:00
roots.pem
sca+anyEKU.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
sca+clientAuth.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
sca+serverAuth.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
sca-anyEKU.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
sca-cert.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
sca-clientAuth.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
sca-serverAuth.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
server-cecdsa-cert.pem EC certificate with compression point 2017-02-24 23:52:22 +00:00
server-cecdsa-key.pem EC certificate with compression point 2017-02-24 23:52:22 +00:00
server-dsa-cert.pem Add DH parameters, DSA cert and key 2017-02-17 16:33:12 +00:00
server-dsa-key.pem Add DH parameters, DSA cert and key 2017-02-17 16:33:12 +00:00
server-dsa-pubkey.pem Prune low-level ASN.1 parse errors from error queue in der2key_decode() etc. 2020-09-30 20:49:44 +02:00
server-ecdsa-brainpoolP256r1-cert.pem Add some test brainpool certificates 2018-11-12 11:10:21 +00:00
server-ecdsa-brainpoolP256r1-key.pem Add some test brainpool certificates 2018-11-12 11:10:21 +00:00
server-ecdsa-cert.pem add ECDSA test server certificate 2017-01-15 00:23:33 +00:00
server-ecdsa-key.pem add ECDSA test server certificate 2017-01-15 00:23:33 +00:00
server-ed448-cert.pem Generate new Ed488 certificates 2020-02-11 23:23:42 +01:00
server-ed448-key.pem Update tests for TLS Ed448 2018-03-05 11:39:44 +00:00
server-ed25519-cert.pem Add Ed25519 EE certificates 2017-06-21 14:11:01 +01:00
server-ed25519-key.pem Add Ed25519 EE certificates 2017-06-21 14:11:01 +01:00
server-ml-dsa-44-cert.pem ML-DSA: Add TLS certificate test 2025-02-14 10:46:04 +01:00
server-ml-dsa-44-key.pem ML-DSA: Add TLS certificate test 2025-02-14 10:46:04 +01:00
server-pss-cert.pem Add RSA-PSS test certificates 2017-09-20 12:50:23 +01:00
server-pss-key.pem Add RSA-PSS test certificates 2017-09-20 12:50:23 +01:00
server-pss-restrict-cert.pem Add Restricted PSS certificate and key 2019-08-09 13:19:16 +01:00
server-pss-restrict-key.pem Add Restricted PSS certificate and key 2019-08-09 13:19:16 +01:00
server-trusted.pem More X509_verify_cert() tests via verify(1). 2016-01-20 19:04:11 -05:00
servercert.pem More X509_verify_cert() tests via verify(1). 2016-01-20 19:04:11 -05:00
serverkey.pem More X509_verify_cert() tests via verify(1). 2016-01-20 19:04:11 -05:00
setup.sh x509: allow SAN URIs to contain userinfo 2025-03-04 17:30:34 +01:00
sm2-ca-cert.pem Update further expiring certificates that affect tests 2022-06-05 10:59:40 +02:00
sm2-csr.pem Support SM2 certificate signing 2019-06-28 18:58:19 +08:00
sm2-pub.key Add a test for pkeyutl encrypt/decrypt using SM2 2023-06-26 09:28:23 +01:00
sm2-root.crt Update further expiring certificates that affect tests 2022-06-05 10:59:40 +02:00
sm2-root.key Support SM2 certificate signing 2019-06-28 18:58:19 +08:00
sm2.key Support raw input data in apps/pkeyutl 2019-02-27 10:05:17 +08:00
sm2.pem Update further expiring certificates that affect tests 2022-06-05 10:59:40 +02:00
some-names1.pem Guard against DoS in name constraints handling. 2017-09-22 22:00:55 +02:00
some-names2.pem Guard against DoS in name constraints handling. 2017-09-22 22:00:55 +02:00
some-names3.pem Guard against DoS in name constraints handling. 2017-09-22 22:00:55 +02:00
sroot+anyEKU.pem Compat self-signed trust with reject-only aux data 2016-01-31 21:24:12 -05:00
sroot+clientAuth.pem Compat self-signed trust with reject-only aux data 2016-01-31 21:24:12 -05:00
sroot+serverAuth.pem Compat self-signed trust with reject-only aux data 2016-01-31 21:24:12 -05:00
sroot-anyEKU.pem Compat self-signed trust with reject-only aux data 2016-01-31 21:24:12 -05:00
sroot-cert.pem make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
sroot-clientAuth.pem Compat self-signed trust with reject-only aux data 2016-01-31 21:24:12 -05:00
sroot-serverAuth.pem Compat self-signed trust with reject-only aux data 2016-01-31 21:24:12 -05:00
subinterCA-ss.pem
subinterCA.key
subinterCA.pem
tab-in-dn.pem apps: Escape control characters in DNs by default 2025-03-03 09:08:34 +01:00
tab-in-dn.text apps: Escape control characters in DNs by default 2025-03-03 09:08:34 +01:00
timing-cert.pem Rename the "timing" program to "timing_load_creds" and integrate it with test/build.info 2022-08-16 12:50:41 +02:00
timing-key.pem Rename the "timing" program to "timing_load_creds" and integrate it with test/build.info 2022-08-16 12:50:41 +02:00
untrusted.pem
v3-certs-RC2.p12 apps: make use of OSSL_STORE for generalized certs and CRLs loading 2020-08-20 14:55:34 +02:00
v3-certs-TDES.p12 apps: make use of OSSL_STORE for generalized certs and CRLs loading 2020-08-20 14:55:34 +02:00
wrongcert.pem More X509_verify_cert() tests via verify(1). 2016-01-20 19:04:11 -05:00
wrongkey.pem More X509_verify_cert() tests via verify(1). 2016-01-20 19:04:11 -05:00
x509-check-key.pem Add test cases for X509_check_private_key 2017-06-06 17:50:06 +01:00
x509-check.csr Add test cases for X509_check_private_key 2017-06-06 17:50:06 +01:00
x509-req-detect-invalid-version.pem Make x509_req_test ANSI Compatible 2024-06-21 15:40:45 -04:00