mirrors/wolfssl
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
wolfssl/certs/crl/server-goodcnwildCrl.pem

39 lines
2.0 KiB
Plaintext
Raw Normal View History

Fixes for `MatchDomainName` to properly detect failures: * Fix `MatchDomainName` to also check for remaining len on success check. * Enhanced `DNS_entry` to include actual ASN.1 length and use it thoughout (was using XSTRLEN). Added additional tests for matching on domain name: * Check for bad common name with embedded null (CN=localhost\0h, Alt=None) - Note: Trouble creating cert with this criteria * Check for bad alternate name with embedded null (CN=www.nomatch.com, Alt=localhost\0h) * Check for bad common name (CN=www.nomatch.com, Alt=None) * Check for bad alternate name (CN=www.nomatch.com, Alt=www.nomatch.com) * Check for good wildcard common name (CN=*localhost, Alt=None) * Check for good wildcard alternate name (CN=www.nomatch.com, Alt=*localhost)
2018-06-12 14:15:34 -07:00
Certificate Revocation List (CRL):
Version 2 (0x1)
Fixes for expired test certs. Generated using `cd certs/test && ./gen-testcerts.sh`.
2021-06-15 15:06:21 -07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: C = US, ST = Montana, L = Bozeman, OU = Engineering, CN = *localhost, emailAddress = info@wolfssl.com
Last Update: Jun 15 22:02:33 2021 GMT
Next Update: Mar 11 22:02:33 2024 GMT
Fixes for `MatchDomainName` to properly detect failures: * Fix `MatchDomainName` to also check for remaining len on success check. * Enhanced `DNS_entry` to include actual ASN.1 length and use it thoughout (was using XSTRLEN). Added additional tests for matching on domain name: * Check for bad common name with embedded null (CN=localhost\0h, Alt=None) - Note: Trouble creating cert with this criteria * Check for bad alternate name with embedded null (CN=www.nomatch.com, Alt=localhost\0h) * Check for bad common name (CN=www.nomatch.com, Alt=None) * Check for bad alternate name (CN=www.nomatch.com, Alt=www.nomatch.com) * Check for good wildcard common name (CN=*localhost, Alt=None) * Check for good wildcard alternate name (CN=www.nomatch.com, Alt=*localhost)
2018-06-12 14:15:34 -07:00
CRL extensions:
X509v3 CRL Number:
1
No Revoked Certificates.
Update certs to address nightly failure with disable sha enable crl
2018-09-19 15:22:08 -06:00
Signature Algorithm: sha256WithRSAEncryption
Fixes for expired test certs. Generated using `cd certs/test && ./gen-testcerts.sh`.
2021-06-15 15:06:21 -07:00
70:25:b0:87:e0:58:78:55:a7:8f:4a:53:b8:46:39:2f:5f:fe:
7a:29:a9:e6:78:f4:3f:e4:ce:95:3f:fe:08:d2:7e:30:2e:7c:
2f:a2:9d:1d:30:36:35:6e:e6:20:89:58:d4:d8:23:42:dd:ae:
8a:63:3f:4c:20:14:40:24:0f:cd:a4:5e:da:1e:32:c1:08:fe:
b9:48:87:d4:07:dc:1e:0f:a5:5c:a7:5c:fe:20:96:54:60:69:
6c:dd:e2:55:77:e5:d1:b0:6e:b1:fb:a1:2b:89:59:55:ba:f1:
fd:23:bc:05:33:29:7c:5f:63:f3:ed:47:8a:db:46:f2:df:cd:
b4:57:55:28:25:0f:be:41:97:c7:69:cf:b7:36:e2:d4:13:8d:
53:dc:a6:3e:fb:e0:0a:98:bc:6d:3a:86:4b:13:3f:a2:a0:06:
97:d0:c9:2b:48:9f:a2:66:39:cb:64:07:cc:32:64:51:11:fb:
76:1d:28:af:89:8f:ba:f3:7f:1a:6b:b6:b7:1e:0d:6e:70:55:
ae:12:0b:af:8d:1c:46:f7:33:b3:36:8b:28:cb:9d:da:95:9e:
93:c6:8d:d3:c6:81:bf:93:01:99:dd:90:8e:20:89:6d:1f:cd:
e8:f2:0e:e3:26:a6:e8:ec:04:4c:4d:43:3f:d2:28:bd:e2:03:
c5:dc:e6:96
Fixes for `MatchDomainName` to properly detect failures: * Fix `MatchDomainName` to also check for remaining len on success check. * Enhanced `DNS_entry` to include actual ASN.1 length and use it thoughout (was using XSTRLEN). Added additional tests for matching on domain name: * Check for bad common name with embedded null (CN=localhost\0h, Alt=None) - Note: Trouble creating cert with this criteria * Check for bad alternate name with embedded null (CN=www.nomatch.com, Alt=localhost\0h) * Check for bad common name (CN=www.nomatch.com, Alt=None) * Check for bad alternate name (CN=www.nomatch.com, Alt=www.nomatch.com) * Check for good wildcard common name (CN=*localhost, Alt=None) * Check for good wildcard alternate name (CN=www.nomatch.com, Alt=*localhost)
2018-06-12 14:15:34 -07:00
-----BEGIN X509 CRL-----
Update certs to address nightly failure with disable sha enable crl
2018-09-19 15:22:08 -06:00
MIIB1jCBvwIBATANBgkqhkiG9w0BAQsFADB9MQswCQYDVQQGEwJVUzEQMA4GA1UE
Fixes for `MatchDomainName` to properly detect failures: * Fix `MatchDomainName` to also check for remaining len on success check. * Enhanced `DNS_entry` to include actual ASN.1 length and use it thoughout (was using XSTRLEN). Added additional tests for matching on domain name: * Check for bad common name with embedded null (CN=localhost\0h, Alt=None) - Note: Trouble creating cert with this criteria * Check for bad alternate name with embedded null (CN=www.nomatch.com, Alt=localhost\0h) * Check for bad common name (CN=www.nomatch.com, Alt=None) * Check for bad alternate name (CN=www.nomatch.com, Alt=www.nomatch.com) * Check for good wildcard common name (CN=*localhost, Alt=None) * Check for good wildcard alternate name (CN=www.nomatch.com, Alt=*localhost)
2018-06-12 14:15:34 -07:00
CAwHTW9udGFuYTEQMA4GA1UEBwwHQm96ZW1hbjEUMBIGA1UECwwLRW5naW5lZXJp
bmcxEzARBgNVBAMMCipsb2NhbGhvc3QxHzAdBgkqhkiG9w0BCQEWEGluZm9Ad29s
Fixes for expired test certs. Generated using `cd certs/test && ./gen-testcerts.sh`.
2021-06-15 15:06:21 -07:00
ZnNzbC5jb20XDTIxMDYxNTIyMDIzM1oXDTI0MDMxMTIyMDIzM1qgDjAMMAoGA1Ud
FAQDAgEBMA0GCSqGSIb3DQEBCwUAA4IBAQBwJbCH4Fh4VaePSlO4RjkvX/56Kanm
ePQ/5M6VP/4I0n4wLnwvop0dMDY1buYgiVjU2CNC3a6KYz9MIBRAJA/NpF7aHjLB
CP65SIfUB9weD6Vcp1z+IJZUYGls3eJVd+XRsG6x+6EriVlVuvH9I7wFMyl8X2Pz
7UeK20by3820V1UoJQ++QZfHac+3NuLUE41T3KY+++AKmLxtOoZLEz+ioAaX0Mkr
SJ+iZjnLZAfMMmRREft2HSiviY+6838aa7a3Hg1ucFWuEguvjRxG9zOzNosoy53a
lZ6Txo3TxoG/kwGZ3ZCOIIltH83o8g7jJqbo7ARMTUM/0ii94gPF3OaW
Fixes for `MatchDomainName` to properly detect failures: * Fix `MatchDomainName` to also check for remaining len on success check. * Enhanced `DNS_entry` to include actual ASN.1 length and use it thoughout (was using XSTRLEN). Added additional tests for matching on domain name: * Check for bad common name with embedded null (CN=localhost\0h, Alt=None) - Note: Trouble creating cert with this criteria * Check for bad alternate name with embedded null (CN=www.nomatch.com, Alt=localhost\0h) * Check for bad common name (CN=www.nomatch.com, Alt=None) * Check for bad alternate name (CN=www.nomatch.com, Alt=www.nomatch.com) * Check for good wildcard common name (CN=*localhost, Alt=None) * Check for good wildcard alternate name (CN=www.nomatch.com, Alt=*localhost)
2018-06-12 14:15:34 -07:00
-----END X509 CRL-----
Reference in New Issue Copy Permalink