projects / apple / security.git / blame
| Commit | Line | Data |
|---|---|---|
| d8f41ccd A |
1 | leaf cert |
| 2 | not before 20060417191040Z 19:10:40 Apr 17, 2006 | |
| 3 | not after 20160414191040Z 19:10:40 Apr 14, 2016 | |
| 4 | ||
| 5 | root cert | |
| 6 | not before 20060417190954Z 19:10:40 Apr 17, 2006 | |
| 7 | not after 20160414190954Z 19:10:40 Apr 14, 2016 | |
| 8 | ||
| 9 | CRL: not valid until well after leaf cert was created, valid for 10 years, revocation | |
| 10 | 12 hours after CRL is created | |
| 11 | ||
| 12 | $ makeCrl -s crlTestLeaf.cer -i crlTestRoot.cer -o crl.crl -n 315360000 -r 43200 | |
| 13 | ...wrote 282 bytes to crl.crl. | |
| 14 | ||
| 15 | this update 20060417210558Z 21:05:58 Apr 17, 2006 | |
| 16 | next update 20160414210558Z 21:05:58 Apr 14, 2016 | |
| 17 | cert revoked 20060418090558Z 09:05:58 Apr 18, 2006 | |
| 18 | ||
| 19 | Test cert at revoke + 1 ==> fail 20060418090559Z | |
| 20 | Test cert at revoke - 1 ==> OK 20060418090557Z | |
| 21 | Test cert at create with CRL ==> OK 20060417191040Z (before revocation, before CRL) | |
| 22 | Test cert at create w/o CRL ==> OK 20060417191040Z | |
| 23 | Test cert at create-1 w/o CRL - not yet valid 20060417191039Z | |
| 24 | Test cert at not after w/o CRL - OK 20160414191040Z | |
| 25 | Test cert at not after + 1 - fail 20160414191041Z | |
| 26 | ||
| 27 | Cert generated from CA in enclosed keychain, crlKeychain.keychaain, pwd = crlKeychain |