mirrors/wolfssl
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
wolfssl/certs
History
Iyán Méndez Veiga 7c14ea67ae
Rename sphincs algs to follow upstream 
This also adds new keys for SPHINCS+. The reason is that SPHINCS+
was updated to 3.1 in liboqs (open-quantum-safe/liboqs/pull/1420),
and old keys are incompatible with the new implementation.

Keys were generated using the oqs-provider for OpenSSL 3

openssl genpkey \
    -provider default -provider oqsprovider \
    -algorithm sphincsshake128fsimple \
    -outform der \
    -out bench_sphincs_fast_level1_key.der

And certs_test.h was updated using xxd

xxd -i -c 10 -u bench_sphincs_fast_level1_key.der

This was repeated for the 6 variants of SPHINCS+ that wolfSSL supports.
2023-07-10 18:31:07 +02:00
..
1024
end of year certificate update
2022-12-16 13:32:37 -08:00
3072
end of year certificate update
2022-12-16 13:32:37 -08:00
4096
end of year certificate update
2022-12-16 13:32:37 -08:00
crl
PEM example: new example for convert between PEM and DER
2023-07-03 17:20:35 +10:00
dilithium
Purge the AES variant of Dilithium
2022-12-27 14:37:47 -05:00
ecc
end of year certificate update
2022-12-16 13:32:37 -08:00
ed448
end of year certificate update
2022-12-16 13:32:37 -08:00
ed25519
PEM example: new example for convert between PEM and DER
2023-07-03 17:20:35 +10:00
external
Put both DigiCert Global Root CA and GlobalSign Root CA into the Google CA list. Fixes --enable-dtls --enable-ocsp ./scripts/ocsp.test`.
2021-12-20 11:47:34 -08:00
falcon
include.am
2021-11-10 18:01:40 -05:00
intermediate
global fixes for shellcheck warnings SC2027, SC2069, SC2154, SC2141, SC3014, SC3037 (all true positives). note, does not fix SC2057 in ocsp-stapling.test, which is addressed by PR #5174 .
2022-05-24 12:13:14 -05:00
ocsp
Calling 'nc' makes the server unresponsive
2023-06-14 09:54:23 -04:00
p521
end of year certificate update
2022-12-16 13:32:37 -08:00
renewcerts
Put the .rnd file in a local folder
2023-03-28 10:43:17 -04:00
rsapss
end of year certificate update
2022-12-16 13:32:37 -08:00
sm2
SM2/SM3/SM4: Chinese cipher support
2023-07-04 13:36:28 +10:00
sphincs
Rename sphincs algs to follow upstream
2023-07-10 18:31:07 +02:00
statickeys
Expanded support for Curve25519/Curve448 and TLS v1.3 sniffer (#4335)
2021-09-01 09:28:24 +10:00
test
end of year certificate update
2022-12-16 13:32:37 -08:00
test-pathlen
end of year certificate update
2022-12-16 13:32:37 -08:00
ca-cert-chain.der
end of year certificate update
2022-12-16 13:32:37 -08:00
ca-cert.der
end of year certificate update
2022-12-16 13:32:37 -08:00
ca-cert.pem
end of year certificate update
2022-12-16 13:32:37 -08:00
ca-ecc384-cert.der
end of year certificate update
2022-12-16 13:32:37 -08:00
ca-ecc384-cert.pem
end of year certificate update
2022-12-16 13:32:37 -08:00
ca-ecc384-key.der
Remove execute bit from a few files.
2018-05-31 10:14:47 -07:00
ca-ecc384-key.pem
Remove execute bit from a few files.
2018-05-31 10:14:47 -07:00
ca-ecc-cert.der
end of year certificate update
2022-12-16 13:32:37 -08:00
ca-ecc-cert.pem
end of year certificate update
2022-12-16 13:32:37 -08:00
ca-ecc-key.der
Remove execute bit from a few files.
2018-05-31 10:14:47 -07:00
ca-ecc-key.pem
Remove execute bit from a few files.
2018-05-31 10:14:47 -07:00
ca-key.der
…
ca-key.pem
…
check_dates.sh
Script to find exipred CRLs and certificates
2020-09-18 11:26:27 +10:00
client-absolute-urn.pem
Add additional fix for absolute URN issue from PR #5964 and add test.
2023-03-16 14:56:44 -07:00
client-ca.pem
end of year certificate update
2022-12-16 13:32:37 -08:00
client-cert-ext.der
end of year certificate update
2022-12-16 13:32:37 -08:00
client-cert-ext.pem
end of year certificate update
2022-12-16 13:32:37 -08:00
client-cert.der
end of year certificate update
2022-12-16 13:32:37 -08:00
client-cert.pem
end of year certificate update
2022-12-16 13:32:37 -08:00
client-crl-dist.der
end of year certificate update
2022-12-16 13:32:37 -08:00
client-crl-dist.pem
end of year certificate update
2022-12-16 13:32:37 -08:00
client-ecc384-cert.der
end of year certificate update
2022-12-16 13:32:37 -08:00
client-ecc384-cert.pem
end of year certificate update
2022-12-16 13:32:37 -08:00
client-ecc384-key.der
Added client/server certs and keys for P-384-bit signed by P-384 CA. Fix for broken certs/ecc/genecc.sh script. Added simple P-384 cipher suite test.
2018-10-25 09:21:27 -07:00
client-ecc384-key.pem
Added client/server certs and keys for P-384-bit signed by P-384 CA. Fix for broken certs/ecc/genecc.sh script. Added simple P-384 cipher suite test.
2018-10-25 09:21:27 -07:00
client-ecc-cert.der
end of year certificate update
2022-12-16 13:32:37 -08:00
client-ecc-cert.pem
end of year certificate update
2022-12-16 13:32:37 -08:00
client-key.der
…
client-key.pem
…
client-keyEnc.pem
…
client-keyPub.der
…
client-keyPub.pem
Fixes and improvements for crypto callbacks with TLS (mutual auth) (#4437)
2021-10-07 11:12:06 +10:00
client-relative-uri.pem
end of year certificate update
2022-12-16 13:32:37 -08:00
client-uri-cert.pem
end of year certificate update
2022-12-16 13:32:37 -08:00
csr.attr.der
Use CSR with smaller key size 4096 -> 2048
2020-12-18 12:48:25 +01:00
csr.dsa.der
PEM example: new example for convert between PEM and DER
2023-07-03 17:20:35 +10:00
csr.dsa.pem
Implement wolfSSL_BIO_*_connect and wolfSSL_BIO_set_conn_port
2020-12-17 14:26:49 +01:00
csr.ext.der
Add CSR test with Extension Request attribute
2020-12-17 14:27:46 +01:00
csr.signed.der
Tests starting to pass
2020-12-17 14:26:49 +01:00
dh2048.der
…
dh2048.pem
…
dh3072.der
Benchmark support for 3072-bit RSA and DH when USE_CERT_BUFFERS_3072 is defined.
2018-06-22 09:30:33 -07:00
dh3072.pem
Add test for 3072-bit RSA and DH and fix modexp
2017-10-17 08:36:39 +10:00
dh4096.der
Fix testing using 4096 bits keys and parameters
2020-04-14 12:03:51 +10:00
dh4096.pem
Fix testing using 4096 bits keys and parameters
2020-04-14 12:03:51 +10:00
dh-pubkey-2048.der
Add two public key files in certs folder and register them to gencertbuf.pl
2021-03-19 14:52:58 +09:00
dsa2048.der
…
dsa3072.der
Benchmark support for 3072-bit RSA and DH when USE_CERT_BUFFERS_3072 is defined.
2018-06-22 09:30:33 -07:00
dsa-pubkey-2048.der
Add two public key files in certs folder and register them to gencertbuf.pl
2021-03-19 14:52:58 +09:00
dsaparams.der
Make changes to support port of NTP from OpenSSL to wolfSSL.
2021-08-02 13:33:18 -07:00
dsaparams.pem
expanding compatibility layer
2016-12-28 14:45:29 -07:00
ecc-client-key.der
update certs, extend ntru to 1000 days, add der formatted ecc, new ecc buffer test
2016-08-12 13:00:52 -06:00
ecc-client-key.pem
…
ecc-client-keyPub.der
update certs, extend ntru to 1000 days, add der formatted ecc, new ecc buffer test
2016-08-12 13:00:52 -06:00
ecc-client-keyPub.pem
update certs, extend ntru to 1000 days, add der formatted ecc, new ecc buffer test
2016-08-12 13:00:52 -06:00
ecc-key-comp.pem
…
ecc-key.der
…
ecc-key.pem
…
ecc-keyPkcs8.der
Add support for more OpenSSL APIs
2018-11-20 07:54:24 +10:00
ecc-keyPkcs8.pem
…
ecc-keyPkcs8Enc.der
Add support for more OpenSSL APIs
2018-11-20 07:54:24 +10:00
ecc-keyPkcs8Enc.pem
…
ecc-keyPub.der
…
ecc-keyPub.pem
Fixes and improvements for crypto callbacks with TLS (mutual auth) (#4437)
2021-10-07 11:12:06 +10:00
ecc-params.der
PEM example: new example for convert between PEM and DER
2023-07-03 17:20:35 +10:00
ecc-params.pem
PEM example: new example for convert between PEM and DER
2023-07-03 17:20:35 +10:00
ecc-privkey.der
PEM example: new example for convert between PEM and DER
2023-07-03 17:20:35 +10:00
ecc-privkey.pem
Add test for private key only ecc key
2017-05-15 10:04:42 +10:00
ecc-privkeyPkcs8.der
Fixes for PKCS8 w/wo encryption as DER/ASN.1. Fixes for building with --disable-oldnames. Fix to enable the PKCS8 enc test without openssl comat. Added additional PKCS8 tests.
2019-08-19 16:27:46 -07:00
ecc-privkeyPkcs8.pem
Add test for ECC private key with PKCS 8 encoding (no crypt) and -----BEGIN EC PRIVATE KEY----- header.
2018-10-17 10:01:29 -07:00
ecc-privOnlyCert.pem
end of year certificate update
2022-12-16 13:32:37 -08:00
ecc-privOnlyKey.pem
Add test
2017-06-14 09:44:26 +10:00
ecc-rsa-server.p12
end of year certificate update
2022-12-16 13:32:37 -08:00
entity-no-ca-bool-cert.pem
end of year certificate update
2022-12-16 13:32:37 -08:00
entity-no-ca-bool-key.pem
Fix basic constraints extension present and CA Boolean not asserted
2021-07-02 12:16:16 -06:00
fpki-cert.der
end of year certificate update
2022-12-16 13:32:37 -08:00
gen_revoked.sh
script cleanup: use #!/bin/bash on all scripts that use "echo -e" (/bin/sh is sometimes a non-Bourne/non-POSIX shell, e.g. dash/ash, with no support for "echo -e"); fix whitespace.
2022-03-09 12:28:22 -06:00
include.am
SM2/SM3/SM4: Chinese cipher support
2023-07-04 13:36:28 +10:00
renewcerts.sh
Put the .rnd file in a local folder
2023-03-28 10:43:17 -04:00
rid-cert.der
end of year certificate update
2022-12-16 13:32:37 -08:00
rsa2048.der
…
rsa3072.der
Benchmark support for 3072-bit RSA and DH when USE_CERT_BUFFERS_3072 is defined.
2018-06-22 09:30:33 -07:00
rsa-pub-2048.pem
Add Qt 5.12 and 5.13 support
2019-12-06 14:27:01 -07:00
server-cert-chain.der
end of year certificate update
2022-12-16 13:32:37 -08:00
server-cert.der
end of year certificate update
2022-12-16 13:32:37 -08:00
server-cert.pem
end of year certificate update
2022-12-16 13:32:37 -08:00
server-ecc384-cert.der
end of year certificate update
2022-12-16 13:32:37 -08:00
server-ecc384-cert.pem
end of year certificate update
2022-12-16 13:32:37 -08:00
server-ecc384-key.der
Added client/server certs and keys for P-384-bit signed by P-384 CA. Fix for broken certs/ecc/genecc.sh script. Added simple P-384 cipher suite test.
2018-10-25 09:21:27 -07:00
server-ecc384-key.pem
Added client/server certs and keys for P-384-bit signed by P-384 CA. Fix for broken certs/ecc/genecc.sh script. Added simple P-384 cipher suite test.
2018-10-25 09:21:27 -07:00
server-ecc-comp.der
end of year certificate update
2022-12-16 13:32:37 -08:00
server-ecc-comp.pem
end of year certificate update
2022-12-16 13:32:37 -08:00
server-ecc-rsa.der
end of year certificate update
2022-12-16 13:32:37 -08:00
server-ecc-rsa.pem
end of year certificate update
2022-12-16 13:32:37 -08:00
server-ecc-self.der
end of year certificate update
2022-12-16 13:32:37 -08:00
server-ecc-self.pem
end of year certificate update
2022-12-16 13:32:37 -08:00
server-ecc.der
end of year certificate update
2022-12-16 13:32:37 -08:00
server-ecc.pem
end of year certificate update
2022-12-16 13:32:37 -08:00
server-key.der
…
server-key.pem
…
server-keyEnc.pem
…
server-keyPkcs8.der
add wc_GetPkcs8TraditionalOffset()
2017-03-16 15:14:20 -06:00
server-keyPkcs8.pem
…
server-keyPkcs8Enc2.pem
…
server-keyPkcs8Enc12.pem
…
server-keyPkcs8Enc.der
Add support for more OpenSSL APIs
2018-11-20 07:54:24 +10:00
server-keyPkcs8Enc.pem
…
server-keyPub.der
PEM example: new example for convert between PEM and DER
2023-07-03 17:20:35 +10:00
server-keyPub.pem
Fixes and improvements for crypto callbacks with TLS (mutual auth) (#4437)
2021-10-07 11:12:06 +10:00
server-revoked-cert.pem
end of year certificate update
2022-12-16 13:32:37 -08:00
server-revoked-key.pem
…
taoCert.txt
Correct misspellings and typos from codespell tool
2019-12-24 12:29:33 -06:00
test-ber-exp02-05-2022.p7b
add test-ber-exp02-05-2022.p7b file for test
2019-02-06 11:11:27 -07:00
test-degenerate.p7b
end of year certificate update
2022-12-16 13:32:37 -08:00
test-servercert-rc2.p12
end of year certificate update
2022-12-16 13:32:37 -08:00
test-servercert.p12
end of year certificate update
2022-12-16 13:32:37 -08:00
wolfssl-website-ca.pem
update external test certificate
2019-10-15 10:11:38 -06:00
x942dh2048.der
PEM example: new example for convert between PEM and DER
2023-07-03 17:20:35 +10:00
x942dh2048.pem
Add test for X9.42 parsing
2021-10-04 11:05:58 -05:00