mirrors/wolfssl
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
8246e02756
wolfssl/certs/include.am

107 lines
3.0 KiB
Plaintext
Raw Normal View History

Brian Aker commits plus some minor changes like AM_CFLAGS getting AC_SUBST and --enable-xxx #ifdef to new header layout
2011-08-25 02:54:58 +04:00
# vim:ft=automake
# All paths should be given relative to the root
#
don't install example certs and keys
2012-05-23 21:28:02 +04:00
EXTRA_DIST += \
Fix for ssl23.h include for openssl compat with cyassl.
2019-04-01 21:08:12 +03:00
certs/ca-cert-chain.der \
Brian Aker commits plus some minor changes like AM_CFLAGS getting AC_SUBST and --enable-xxx #ifdef to new header layout
2011-08-25 02:54:58 +04:00
certs/ca-cert.pem \
certs/ca-key.pem \
certs/client-cert.pem \
certs/client-keyEnc.pem \
certs/client-key.pem \
Fix Cert Includes 1. Added files that were missing from the certs directory include.am files. 2. Fixed the duplicate items in the certs directory's include.am files. 3. Reorganized the certs directory include.am files to be a tree.
2018-06-01 03:38:47 +03:00
certs/client-uri-cert.pem \
certs/client-relative-uri.pem \
Brian Aker commits plus some minor changes like AM_CFLAGS getting AC_SUBST and --enable-xxx #ifdef to new header layout
2011-08-25 02:54:58 +04:00
certs/ecc-key.pem \
Add test for private key only ecc key
2017-04-10 03:01:19 +03:00
certs/ecc-privkey.pem \
Fixes for PKCS8 w/wo encryption as DER/ASN.1. Fixes for building with `--disable-oldnames`. Fix to enable the PKCS8 enc test without openssl comat. Added additional PKCS8 tests.
2019-08-19 21:18:51 +03:00
certs/ecc-privkeyPkcs8.der \
Add test for ECC private key with PKCS 8 encoding (no crypt) and `-----BEGIN EC PRIVATE KEY-----` header.
2018-10-17 20:01:29 +03:00
certs/ecc-privkeyPkcs8.pem \
add missing certs and keys to certs/include.am
2016-12-14 19:46:41 +03:00
certs/ecc-keyPkcs8Enc.pem \
Add support for more OpenSSL APIs Add support for PEM_read and PEM_write Add OpenSSL PKCS#7 signed data support Add OpenSSL PKCS#8 Private key APIs Add X509_REQ OpenSSL APIs
2018-10-19 07:52:18 +03:00
certs/ecc-keyPkcs8Enc.der \
add compressed key support
2014-08-30 01:25:58 +04:00
certs/ecc-key-comp.pem \
fix ecc pkcs8 import
2011-12-02 01:10:01 +04:00
certs/ecc-keyPkcs8.pem \
Add support for more OpenSSL APIs Add support for PEM_read and PEM_write Add OpenSSL PKCS#7 signed data support Add OpenSSL PKCS#8 Private key APIs Add X509_REQ OpenSSL APIs
2018-10-19 07:52:18 +03:00
certs/ecc-keyPkcs8.der \
ecc client cert dist
2012-05-08 22:38:31 +04:00
certs/ecc-client-key.pem \
add missing certs and keys to certs/include.am
2016-12-14 19:46:41 +03:00
certs/ecc-client-keyPub.pem \
ecc client cert dist
2012-05-08 22:38:31 +04:00
certs/client-ecc-cert.pem \
Add client-ca.pem to the automake include for dist.
2016-09-16 01:38:41 +03:00
certs/client-ca.pem \
Brian Aker commits plus some minor changes like AM_CFLAGS getting AC_SUBST and --enable-xxx #ifdef to new header layout
2011-08-25 02:54:58 +04:00
certs/ntru-cert.pem \
add DH param setting by file and buffer, by ctx too
2011-11-02 01:05:14 +04:00
certs/dh2048.pem \
Brian Aker commits plus some minor changes like AM_CFLAGS getting AC_SUBST and --enable-xxx #ifdef to new header layout
2011-08-25 02:54:58 +04:00
certs/server-cert.pem \
certs/server-ecc.pem \
Testing improvements for cert gen and TLS cert validation: * Fixes to support certificate generation (`WOLFSSL_CERT_GEN`) without RSA enabled. * Added new ECC CA for 384-bit tests. * Created new server cert chain (ECC CA for 256-bit that signs server-ecc.pem) * Created new `./certs/ecc/genecc.sh` script for generating all ECC CA's, generated server cert req (CSR), signing with CA and the required CRL. * Moved the wolfCrypt ECC CA / ECC cert gen test into `ecc_test` as `ecc_test_cert_gen`. * Refactor duplicate code that saves DER to disk, converts DER to PEM and saves PEM to disk into SaveDerAndPem function. * Changed `ecc_test_make_pub` and `ecc_test_key_gen` to use XMALLOC for temp buffers (uses heap instead of stack). * Cleanup to combine all certificate subject information into global `certDefaultName`. * Updated cert request info to use wolfSSL instead of Yassl. * Cleanup to combine keyUsage into `certKeyUsage` and `certKeyUsage2`. * Re-number error codes in rsa_test. * Moved the certext_test after the ecc_test, since it uses a file generated in `ecc_test_cert_gen`.
2017-10-20 02:17:51 +03:00
certs/server-ecc-self.pem \
add compressed key support
2014-08-30 01:25:58 +04:00
certs/server-ecc-comp.pem \
add ECDH static cipher suite tests including RSA signed ECDH, clean up code with haveECDSA -> haveECDSAsig
2012-08-09 02:09:26 +04:00
certs/server-ecc-rsa.pem \
Brian Aker commits plus some minor changes like AM_CFLAGS getting AC_SUBST and --enable-xxx #ifdef to new header layout
2011-08-25 02:54:58 +04:00
certs/server-keyEnc.pem \
certs/server-key.pem \
add server-keyPkcs8.der to include.am
2017-03-21 18:53:24 +03:00
certs/server-keyPkcs8.der \
Brian Aker commits plus some minor changes like AM_CFLAGS getting AC_SUBST and --enable-xxx #ifdef to new header layout
2011-08-25 02:54:58 +04:00
certs/server-keyPkcs8Enc12.pem \
certs/server-keyPkcs8Enc2.pem \
certs/server-keyPkcs8Enc.pem \
Add support for more OpenSSL APIs Add support for PEM_read and PEM_write Add OpenSSL PKCS#7 signed data support Add OpenSSL PKCS#8 Private key APIs Add X509_REQ OpenSSL APIs
2018-10-19 07:52:18 +03:00
certs/server-keyPkcs8Enc.der \
add wolfssl website ca, go daddy class2 CA
2015-04-29 00:15:31 +03:00
certs/server-keyPkcs8.pem \
add new certs to include.am
2015-07-24 02:37:37 +03:00
certs/server-revoked-cert.pem \
certs/server-revoked-key.pem \
PKCS12 : Add PKCS12 parsing
2016-10-29 22:12:26 +03:00
certs/wolfssl-website-ca.pem \
add test for degenerate case and allow degenerate case by default
2018-10-31 02:04:33 +03:00
certs/test-degenerate.p7b \
add PKCS7 BER verify test and fix for streaming
2019-02-06 21:05:15 +03:00
certs/test-ber-exp02-05-2022.p7b \
BIO s_socket and BN mod exp
2016-12-02 00:07:50 +03:00
certs/test-servercert.p12 \
add test case for order of certificates with PKCS12 parse
2018-02-08 02:52:39 +03:00
certs/ecc-rsa-server.p12 \
Add test
2017-06-14 02:44:26 +03:00
certs/dsaparams.pem \
Testing improvements for cert gen and TLS cert validation: * Fixes to support certificate generation (`WOLFSSL_CERT_GEN`) without RSA enabled. * Added new ECC CA for 384-bit tests. * Created new server cert chain (ECC CA for 256-bit that signs server-ecc.pem) * Created new `./certs/ecc/genecc.sh` script for generating all ECC CA's, generated server cert req (CSR), signing with CA and the required CRL. * Moved the wolfCrypt ECC CA / ECC cert gen test into `ecc_test` as `ecc_test_cert_gen`. * Refactor duplicate code that saves DER to disk, converts DER to PEM and saves PEM to disk into SaveDerAndPem function. * Changed `ecc_test_make_pub` and `ecc_test_key_gen` to use XMALLOC for temp buffers (uses heap instead of stack). * Cleanup to combine all certificate subject information into global `certDefaultName`. * Updated cert request info to use wolfSSL instead of Yassl. * Cleanup to combine keyUsage into `certKeyUsage` and `certKeyUsage2`. * Re-number error codes in rsa_test. * Moved the certext_test after the ecc_test, since it uses a file generated in `ecc_test_cert_gen`.
2017-10-20 02:17:51 +03:00
certs/ecc-privOnlyKey.pem \
certs/ecc-privOnlyCert.pem \
Add test for 3072-bit RSA and DH and fix modexp
2017-10-16 04:54:50 +03:00
certs/dh3072.pem \
certs/client-cert-3072.pem \
certs/client-key-3072.pem
don't install example certs and keys
2012-05-23 21:28:02 +04:00
EXTRA_DIST += \
Brian Aker commits plus some minor changes like AM_CFLAGS getting AC_SUBST and --enable-xxx #ifdef to new header layout
2011-08-25 02:54:58 +04:00
certs/ca-key.der \
hook new DER files into include.am
2014-07-01 21:20:39 +04:00
certs/ca-cert.der \
Brian Aker commits plus some minor changes like AM_CFLAGS getting AC_SUBST and --enable-xxx #ifdef to new header layout
2011-08-25 02:54:58 +04:00
certs/client-cert.der \
certs/client-key.der \
add missing certs and keys to certs/include.am
2016-12-14 19:46:41 +03:00
certs/client-ecc-cert.der \
fix autoconf with new certext files
2015-09-12 00:10:11 +03:00
certs/client-keyPub.der \
change all test keys to 2048 bit, all sigs to SHA-1
2011-10-24 22:41:25 +04:00
certs/dh2048.der \
Benchmark support for 3072-bit RSA and DH when `USE_CERT_BUFFERS_3072` is defined.
2018-06-20 20:19:23 +03:00
certs/dh3072.der \
change all test keys to 2048 bit, all sigs to SHA-1
2011-10-24 22:41:25 +04:00
certs/rsa2048.der \
Benchmark support for 3072-bit RSA and DH when `USE_CERT_BUFFERS_3072` is defined.
2018-06-20 20:19:23 +03:00
certs/rsa3072.der \
change all test keys to 2048 bit, all sigs to SHA-1
2011-10-24 22:41:25 +04:00
certs/dsa2048.der \
Benchmark support for 3072-bit RSA and DH when `USE_CERT_BUFFERS_3072` is defined.
2018-06-20 20:19:23 +03:00
certs/dsa3072.der \
add missing certs and keys to certs/include.am
2016-12-14 19:46:41 +03:00
certs/ecc-client-key.der \
certs/ecc-client-keyPub.der \
hook new DER files into include.am
2014-07-01 21:20:39 +04:00
certs/ecc-key.der \
fix autoconf with new certext files
2015-09-12 00:10:11 +03:00
certs/ecc-keyPub.der \
hook new DER files into include.am
2014-07-01 21:20:39 +04:00
certs/server-key.der \
Added "wolfSSL_use_certificate_chain_buffer_format". Added "wolfSSL_SESSION_CIPHER_get_name" to get cipher suite name using WOLFSSL_SESSION*. Moved the "wolfSSL_get_cipher_name_from_suite" function to internal.c. Added new server-cert-chain.der, which is combination of ca-cert.der and server-cert.der. Enhanced load_buffer to detect format using file extension. Can test use of DER cert chain with NO_FILESYSTEM defined using "./examples/server/server -c ./certs/server-cert-chain.der -k ./certs/server-key.der".
2016-11-23 22:25:01 +03:00
certs/server-cert.der \
add missing certs and keys to certs/include.am
2016-12-14 19:46:41 +03:00
certs/server-ecc-comp.der \
certs/server-ecc.der \
Testing improvements for cert gen and TLS cert validation: * Fixes to support certificate generation (`WOLFSSL_CERT_GEN`) without RSA enabled. * Added new ECC CA for 384-bit tests. * Created new server cert chain (ECC CA for 256-bit that signs server-ecc.pem) * Created new `./certs/ecc/genecc.sh` script for generating all ECC CA's, generated server cert req (CSR), signing with CA and the required CRL. * Moved the wolfCrypt ECC CA / ECC cert gen test into `ecc_test` as `ecc_test_cert_gen`. * Refactor duplicate code that saves DER to disk, converts DER to PEM and saves PEM to disk into SaveDerAndPem function. * Changed `ecc_test_make_pub` and `ecc_test_key_gen` to use XMALLOC for temp buffers (uses heap instead of stack). * Cleanup to combine all certificate subject information into global `certDefaultName`. * Updated cert request info to use wolfSSL instead of Yassl. * Cleanup to combine keyUsage into `certKeyUsage` and `certKeyUsage2`. * Re-number error codes in rsa_test. * Moved the certext_test after the ecc_test, since it uses a file generated in `ecc_test_cert_gen`.
2017-10-20 02:17:51 +03:00
certs/server-ecc-self.der \
add missing certs and keys to certs/include.am
2016-12-14 19:46:41 +03:00
certs/server-ecc-rsa.der \
Fix loading of CRLs and certs. Change function wolfSSL_X509_LOOKUP_load_file to load multiple CRLs and certificates from a file. Change CRL loading to have a flag to not verify CRL signature - only do this when using wolfSSL_X509_LOOKUP_load_file() as the certificate is not always available. Add test case for loading multiple CRLs in one file without certificate.
2017-04-07 02:44:09 +03:00
certs/server-cert-chain.der
Testing improvements for cert gen and TLS cert validation: * Fixes to support certificate generation (`WOLFSSL_CERT_GEN`) without RSA enabled. * Added new ECC CA for 384-bit tests. * Created new server cert chain (ECC CA for 256-bit that signs server-ecc.pem) * Created new `./certs/ecc/genecc.sh` script for generating all ECC CA's, generated server cert req (CSR), signing with CA and the required CRL. * Moved the wolfCrypt ECC CA / ECC cert gen test into `ecc_test` as `ecc_test_cert_gen`. * Refactor duplicate code that saves DER to disk, converts DER to PEM and saves PEM to disk into SaveDerAndPem function. * Changed `ecc_test_make_pub` and `ecc_test_key_gen` to use XMALLOC for temp buffers (uses heap instead of stack). * Cleanup to combine all certificate subject information into global `certDefaultName`. * Updated cert request info to use wolfSSL instead of Yassl. * Cleanup to combine keyUsage into `certKeyUsage` and `certKeyUsage2`. * Re-number error codes in rsa_test. * Moved the certext_test after the ecc_test, since it uses a file generated in `ecc_test_cert_gen`.
2017-10-20 02:17:51 +03:00
# ECC CA prime256v1
EXTRA_DIST += \
certs/ca-ecc-cert.der \
certs/ca-ecc-cert.pem \
certs/ca-ecc-key.der \
certs/ca-ecc-key.pem
# ECC CA SECP384R1
EXTRA_DIST += \
certs/ca-ecc384-cert.der \
certs/ca-ecc384-cert.pem \
certs/ca-ecc384-key.der \
certs/ca-ecc384-key.pem
Brian Aker commits plus some minor changes like AM_CFLAGS getting AC_SUBST and --enable-xxx #ifdef to new header layout
2011-08-25 02:54:58 +04:00
This adds support for "make rpm"
2012-10-20 12:42:34 +04:00
dist_doc_DATA+= certs/taoCert.txt
Brian Aker commits plus some minor changes like AM_CFLAGS getting AC_SUBST and --enable-xxx #ifdef to new header layout
2011-08-25 02:54:58 +04:00
EXTRA_DIST+= certs/ntru-key.raw
Fix Cert Includes 1. Added files that were missing from the certs directory include.am files. 2. Fixed the duplicate items in the certs directory's include.am files. 3. Reorganized the certs directory include.am files to be a tree.
2018-06-01 03:38:47 +03:00
include certs/1024/include.am
include certs/crl/include.am
include certs/ecc/include.am
include certs/ed25519/include.am
include certs/external/include.am
include certs/ocsp/include.am
Fixes from merge of test coverage changes Include new certificates in distribution. Casting changes for clang. Extra error code - recognize in test.
2017-03-10 02:02:29 +03:00
include certs/test/include.am
Add the new path length test certs to include.am.
2016-09-21 22:34:01 +03:00
include certs/test-pathlen/include.am
New tests for cert chains, alternate cert chains, trusted peer certs and DH prime cleanup: * Added ECC and RSA intermediate CA's and server/client chain certificates for testing. * Enhanced suites test to support expected fail arg `-H exitWithRet` in any test .conf file. * Added new `test-altchains.conf` for testing with `WOLFSSL_ALT_CERT_CHAINS` defined. * Added new `test-chains` for testing chains. * Added new `test-dhprime.conf` for DH prime check tests. * Added new `test-trustedpeer.conf` for testing `WOLFSSL_TRUST_PEER_CERT`. * Refactor to add `-2` to disable DH prime check by default (except for new test-dhprime.conf). * Added ability to run a specific test.conf file using syntax like `./tests/unit.test tests/test-altchains.conf`.
2018-12-21 20:33:54 +03:00
include certs/intermediate/include.am
Reference in New Issue Copy Permalink