fb531dacc2
Add support for parsing and verifying certificates with RSA-PSS signatures. Including check PSS parameters in key with those in signature algorithm. Add support for parsing private RSA PSS key. Add support for parsing public RSA PSS key.
118 lines
6.5 KiB
Plaintext
118 lines
6.5 KiB
Plaintext
Certificate:
|
|
Data:
|
|
Version: 3 (0x2)
|
|
Serial Number:
|
|
34:c6:f6:76:c9:a4:72:95:4c:7e:9a:0c:80:5c:6d:8f:64:f2:19:a5
|
|
Signature Algorithm: rsassaPss
|
|
Hash Algorithm: sha384
|
|
Mask Algorithm: mgf1 with sha384
|
|
Salt Length: 0x014E
|
|
Trailer Field: 0xBC (default)
|
|
Issuer: C = US, ST = Montana, L = Bozeman, O = wolfSSL_RSA-PSS, OU = Root-RSA-PSS, CN = www.wolfssl.com, emailAddress = info@wolfssl.com
|
|
Validity
|
|
Not Before: Jul 25 02:27:55 2022 GMT
|
|
Not After : Apr 20 02:27:55 2025 GMT
|
|
Subject: C = US, ST = Montana, L = Bozeman, O = wolfSSL_RSA-PSS, OU = Root-RSA-PSS, CN = www.wolfssl.com, emailAddress = info@wolfssl.com
|
|
Subject Public Key Info:
|
|
Public Key Algorithm: rsassaPss
|
|
RSA-PSS Public-Key: (3072 bit)
|
|
Modulus:
|
|
00:ad:cd:ed:4f:94:27:fa:57:28:90:bc:e5:35:b6:
|
|
96:36:18:25:45:e1:de:aa:87:98:88:61:2b:97:2a:
|
|
e4:4e:f6:06:36:1c:38:b5:5d:ae:99:59:99:70:01:
|
|
12:f9:02:49:7b:ae:c1:aa:78:41:26:9b:f6:31:09:
|
|
af:0a:6b:eb:f2:8c:39:2f:f9:fe:e0:38:a6:2f:00:
|
|
ee:40:6e:94:8c:be:3f:c1:3e:6b:3a:ae:91:e6:d6:
|
|
6c:34:1a:54:88:b6:38:b8:f8:c9:58:b4:8e:99:0c:
|
|
ab:37:6e:a1:50:25:f1:e4:e2:76:78:9c:95:12:7e:
|
|
35:7f:74:65:1d:79:b7:81:44:78:a3:53:f3:f4:1c:
|
|
17:80:15:b7:c1:f7:a1:b3:0b:69:5a:e7:12:6b:49:
|
|
1f:0a:84:88:70:19:73:16:be:1c:cd:b4:e0:e7:bf:
|
|
04:61:ba:da:44:eb:52:41:7a:46:b8:8e:02:83:c1:
|
|
75:05:60:d0:6c:0e:75:7d:52:9e:f9:38:17:de:a8:
|
|
cc:5c:dd:e6:02:8b:f5:30:43:1c:5a:98:8f:c3:c1:
|
|
d9:5f:e6:6f:6e:f1:74:d6:de:8b:5f:8b:ce:35:8a:
|
|
f4:58:8a:0e:6b:da:97:cd:8a:6a:b1:7f:83:4e:7c:
|
|
ae:b6:78:8e:51:e8:49:34:d1:68:e3:d0:bf:5b:b3:
|
|
17:5a:e0:d7:94:20:12:26:7b:9d:19:fa:1e:16:65:
|
|
65:e1:54:bb:f9:4f:9e:63:da:dc:10:dc:b0:9b:09:
|
|
24:d5:0b:97:83:eb:2c:b3:1e:15:50:38:93:06:5a:
|
|
8c:11:12:63:21:31:91:c3:7c:bf:54:ed:2c:2f:bc:
|
|
f7:63:a4:38:36:5c:f3:bb:71:3d:0d:15:f6:5a:bc:
|
|
4c:ee:78:50:31:61:40:bf:45:28:d2:b5:2f:c1:08:
|
|
af:be:d6:03:00:cf:19:69:e3:a0:b0:92:ec:26:42:
|
|
5e:02:a5:d1:2d:cf:b8:63:df:ce:b3:22:6c:1a:d3:
|
|
5d:89:15:9a:c4:77:98:cd:95:7f
|
|
Exponent: 65537 (0x10001)
|
|
No PSS parameter restrictions
|
|
X509v3 extensions:
|
|
X509v3 Subject Key Identifier:
|
|
AA:71:D3:B1:8A:4B:BB:47:15:47:5F:9B:D0:2B:69:D1:6F:85:5E:F6
|
|
X509v3 Authority Key Identifier:
|
|
keyid:AA:71:D3:B1:8A:4B:BB:47:15:47:5F:9B:D0:2B:69:D1:6F:85:5E:F6
|
|
|
|
X509v3 Basic Constraints: critical
|
|
CA:TRUE
|
|
X509v3 Key Usage: critical
|
|
Digital Signature, Certificate Sign, CRL Sign
|
|
Signature Algorithm: rsassaPss
|
|
Hash Algorithm: sha384
|
|
Mask Algorithm: mgf1 with sha384
|
|
Salt Length: 0x014E
|
|
Trailer Field: 0xBC (default)
|
|
|
|
66:1c:f4:d8:ae:83:99:36:d5:9b:57:84:24:3f:ff:bc:de:1a:
|
|
4c:ba:f2:8b:51:45:37:6f:42:81:18:1c:da:4c:c1:7f:a5:6c:
|
|
6e:45:02:2a:2e:e0:39:5b:47:9b:d9:e8:75:32:44:02:4b:ac:
|
|
65:74:25:e8:b5:9c:f2:33:90:73:e9:59:4f:20:82:dd:20:1e:
|
|
0f:30:bb:77:b2:4c:c1:67:d1:2d:3e:4f:96:e9:31:3d:f3:0c:
|
|
3a:9b:ee:b1:40:34:e3:a1:af:01:ea:91:d8:ba:58:71:32:23:
|
|
6f:a4:38:6a:f9:00:9a:a9:5a:06:b4:f8:6e:25:55:9d:e2:c0:
|
|
54:e8:88:32:68:1b:64:f6:d1:23:f1:46:01:2d:5e:68:bc:5f:
|
|
86:fb:84:d5:35:67:0a:65:4e:4f:e5:fb:d3:1b:ad:46:6a:6a:
|
|
43:d2:e8:3d:13:74:64:f7:54:37:41:14:2d:a3:f0:c6:57:ac:
|
|
25:f4:cd:00:ee:54:77:13:ce:59:13:55:1e:82:f2:68:ac:b7:
|
|
c4:90:ab:82:85:86:32:0c:03:9c:ed:ab:cd:81:ae:3e:d2:f9:
|
|
6c:41:cd:03:56:68:bd:48:e2:d0:c8:8b:b3:e5:f0:aa:28:f8:
|
|
36:2e:14:fb:5e:57:6a:26:60:a8:20:ca:f4:05:8e:41:cf:92:
|
|
43:5f:57:2f:c8:ea:de:cb:b0:00:dc:41:53:e1:10:27:b2:7f:
|
|
f8:f4:a5:7b:3f:df:f4:cf:53:e6:11:b4:ea:36:53:68:b6:0b:
|
|
96:5c:7d:d0:a1:77:1c:99:fa:68:c2:19:aa:89:40:cc:42:24:
|
|
33:e3:02:28:d0:04:b9:2f:6f:01:6b:55:95:6d:eb:93:3a:e4:
|
|
ed:e5:c8:36:68:df:61:07:d0:0d:77:19:8e:3d:9c:5f:6e:8a:
|
|
05:64:2e:27:78:7a:12:30:14:29:17:96:ae:6d:53:8c:98:35:
|
|
e9:a1:06:b5:e0:c8:2e:89:6e:7c:bf:b5:c8:3a:8f:07:d1:7e:
|
|
58:b8:c8:23:db:71
|
|
-----BEGIN CERTIFICATE-----
|
|
MIIFjTCCA8SgAwIBAgIUNMb2dsmkcpVMfpoMgFxtj2TyGaUwPgYJKoZIhvcNAQEK
|
|
MDGgDTALBglghkgBZQMEAgKhGjAYBgkqhkiG9w0BAQgwCwYJYIZIAWUDBAICogQC
|
|
AgFOMIGdMQswCQYDVQQGEwJVUzEQMA4GA1UECAwHTW9udGFuYTEQMA4GA1UEBwwH
|
|
Qm96ZW1hbjEYMBYGA1UECgwPd29sZlNTTF9SU0EtUFNTMRUwEwYDVQQLDAxSb290
|
|
LVJTQS1QU1MxGDAWBgNVBAMMD3d3dy53b2xmc3NsLmNvbTEfMB0GCSqGSIb3DQEJ
|
|
ARYQaW5mb0B3b2xmc3NsLmNvbTAeFw0yMjA3MjUwMjI3NTVaFw0yNTA0MjAwMjI3
|
|
NTVaMIGdMQswCQYDVQQGEwJVUzEQMA4GA1UECAwHTW9udGFuYTEQMA4GA1UEBwwH
|
|
Qm96ZW1hbjEYMBYGA1UECgwPd29sZlNTTF9SU0EtUFNTMRUwEwYDVQQLDAxSb290
|
|
LVJTQS1QU1MxGDAWBgNVBAMMD3d3dy53b2xmc3NsLmNvbTEfMB0GCSqGSIb3DQEJ
|
|
ARYQaW5mb0B3b2xmc3NsLmNvbTCCAaAwCwYJKoZIhvcNAQEKA4IBjwAwggGKAoIB
|
|
gQCtze1PlCf6VyiQvOU1tpY2GCVF4d6qh5iIYSuXKuRO9gY2HDi1Xa6ZWZlwARL5
|
|
Akl7rsGqeEEmm/YxCa8Ka+vyjDkv+f7gOKYvAO5AbpSMvj/BPms6rpHm1mw0GlSI
|
|
tji4+MlYtI6ZDKs3bqFQJfHk4nZ4nJUSfjV/dGUdebeBRHijU/P0HBeAFbfB96Gz
|
|
C2la5xJrSR8KhIhwGXMWvhzNtODnvwRhutpE61JBeka4jgKDwXUFYNBsDnV9Up75
|
|
OBfeqMxc3eYCi/UwQxxamI/Dwdlf5m9u8XTW3otfi841ivRYig5r2pfNimqxf4NO
|
|
fK62eI5R6Ek00Wjj0L9bsxda4NeUIBIme50Z+h4WZWXhVLv5T55j2twQ3LCbCSTV
|
|
C5eD6yyzHhVQOJMGWowREmMhMZHDfL9U7SwvvPdjpDg2XPO7cT0NFfZavEzueFAx
|
|
YUC/RSjStS/BCK++1gMAzxlp46CwkuwmQl4CpdEtz7hj386zImwa012JFZrEd5jN
|
|
lX8CAwEAAaNjMGEwHQYDVR0OBBYEFKpx07GKS7tHFUdfm9AradFvhV72MB8GA1Ud
|
|
IwQYMBaAFKpx07GKS7tHFUdfm9AradFvhV72MA8GA1UdEwEB/wQFMAMBAf8wDgYD
|
|
VR0PAQH/BAQDAgGGMD4GCSqGSIb3DQEBCjAxoA0wCwYJYIZIAWUDBAICoRowGAYJ
|
|
KoZIhvcNAQEIMAsGCWCGSAFlAwQCAqIEAgIBTgOCAYEAZhz02K6DmTbVm1eEJD//
|
|
vN4aTLryi1FFN29CgRgc2kzBf6VsbkUCKi7gOVtHm9nodTJEAkusZXQl6LWc8jOQ
|
|
c+lZTyCC3SAeDzC7d7JMwWfRLT5PlukxPfMMOpvusUA046GvAeqR2LpYcTIjb6Q4
|
|
avkAmqlaBrT4biVVneLAVOiIMmgbZPbRI/FGAS1eaLxfhvuE1TVnCmVOT+X70xut
|
|
RmpqQ9LoPRN0ZPdUN0EULaPwxlesJfTNAO5UdxPOWRNVHoLyaKy3xJCrgoWGMgwD
|
|
nO2rzYGuPtL5bEHNA1ZovUji0MiLs+Xwqij4Ni4U+15XaiZgqCDK9AWOQc+SQ19X
|
|
L8jq3suwANxBU+EQJ7J/+PSlez/f9M9T5hG06jZTaLYLllx90KF3HJn6aMIZqolA
|
|
zEIkM+MCKNAEuS9vAWtVlW3rkzrk7eXINmjfYQfQDXcZjj2cX26KBWQuJ3h6EjAU
|
|
KReWrm1TjJg16aEGteDILolufL+1yDqPB9F+WLjII9tx
|
|
-----END CERTIFICATE-----
|