SecurityTests/clxutils/certcrl/testSubjects/distPointName/distPointName.scr

   1 # crl1.der
   2 #        Last Update: Oct 16 00:16:34 2015 GMT
   3 #        Next Update: Oct 26 00:16:34 2015 GMT
   4 #        CRL extensions:
   5 #            X509v3 Issuing Distrubution Point: critical
   6 #                Full Name:
   7 #                  URI:http://host.example/crl1.der
   8 # crl2.der
   9 #        Last Update: Oct 16 18:28:58 2015 GMT
  10 #        Next Update: Oct 26 18:28:58 2015 GMT
  11 #        CRL extensions:
  12 #            X509v3 Issuing Distrubution Point: critical
  13 #                Full Name:
  14 #                  URI:http://host.example/crl1.der
  15 #                  URI:http://host2.example/crl1.der
  16 #
  17 # crl3.der
  18 #        Last Update: Oct 16 18:44:28 2015 GMT
  19 #        Next Update: Oct 26 18:44:28 2015 GMT
  20 #        CRL extensions:
  21 #            X509v3 Issuing Distrubution Point: critical
  22 #                Full Name:
  23 #                  URI:http://host.example/crl1.der
  24 #                  URI:http://host2.example/crl2.crl
  25 #
  26 # crl4.der
  27 #        Last Update: Oct 16 18:56:17 2015 GMT
  28 #        Next Update: Oct 26 18:56:17 2015 GMT
  29 #        CRL extensions:
  30 #            X509v3 Issuing Distrubution Point: critical
  31 #                Relative Name:
  32 #                  CN = testCA
  33 #
  34 # DEADBEF0.der
  35 #            Not Before: Jul 30 21:40:16 2015 GMT
  36 #            Not After : Jul 29 21:40:16 2016 GMT
  37 # {no crlDistributionPoint extension}
  38 #
  39 # DEADBEF4.der
  40 #            Not Before: Oct 16 00:33:43 2015 GMT
  41 #            Not After : Oct 15 00:33:43 2016 GMT
  42 #            X509v3 CRL Distribution Points:
  43 # {corrupt}
  44 #
  45 # DEADBEF5.der
  46 #            Not Before: Oct 16 18:27:29 2015 GMT
  47 #            Not After : Oct 15 18:27:29 2016 GMT
  48 #            X509v3 CRL Distribution Points:
  49 #                Full Name:
  50 #                  URI:http://host.example/crl1.der
  51 #                Full Name:
  52 #                  URI:http://host2.example/crl1.der
  53 #
  54 # DEADBEF6.der
  55 #            Not Before: Oct 16 18:33:51 2015 GMT
  56 #            Not After : Oct 15 18:33:51 2016 GMT
  57 #            X509v3 CRL Distribution Points:
  58 #                Full Name:
  59 #                  URI:http://host.example/crl1.der
  60 #
  61 # DEADBEF7.der
  62 #            Not Before: Oct 16 18:41:57 2015 GMT
  63 #            Not After : Oct 15 18:41:57 2016 GMT
  64 #            X509v3 CRL Distribution Points:
  65 #                Full Name:
  66 #                  URI:http://host.example/crl1.der
  67 #                  URI:http://host2.example/crl1.der
  68
  69 globals
  70 certNetFetchEnable = false
  71 crlNetFetchEnable = false
  72 useSystemAnchors = false
  73 allowUnverified = true
  74 end
  75
  76 test = "basic, no CRL"
  77 requireCrlForAll = false
  78 cert = DEADBEF4.der
  79 root = cacert.der
  80 verifyTime = 20151020125959Z
  81 end
  82
  83 #
  84 # Begin CRL testing.
  85 #
  86 test = "Cert: 1 cRLDistributionPoint, CRL: 1 issuingDistributionPoint, matched"
  87 requireCrlForAll = true
  88 revokePolicy = crl
  89 cert = DEADBEF6.der
  90 root = cacert.der
  91 crl = crl1.der
  92 verifyTime = 20151020125959Z
  93 end
  94
  95 test = "Cert: no cRLDistributionPoint, CRL: 1 issuingDistributionPoint"
  96 requireCrlForAll = true
  97 revokePolicy = crl
  98 cert = DEADBEF0.der
  99 root = cacert.der
 100 crl = crl1.der
 101 verifyTime = 20151020125959Z
 102 end
 103
 104 test = "Cert: 2 crlDistributionPoints, CRL: 1 issuingDistributionPoint, match"
 105 requireCrlForAll = true
 106 revokePolicy = crl
 107 cert = DEADBEF5.der
 108 root = cacert.der
 109 crl = crl1.der
 110 verifyTime = 20151020125959Z
 111 end
 112
 113 test = "Cert: 2 crlDistributionPoints, CRL: 2 issuingDistributionPoint names, no match"
 114 requireCrlForAll = true
 115 revokePolicy = crl
 116 cert = DEADBEF5.der
 117 root = cacert.der
 118 crl = crl2.der
 119 verifyTime = 20151020125959Z
 120 error = CSSMERR_APPLETP_CRL_NOT_FOUND
 121 end
 122
 123 test = "Cert: corrupt cRLDistributionPoint, CRL: 1 issuingDistributionPoint"
 124 requireCrlForAll = true
 125 revokePolicy = crl
 126 cert = DEADBEF4.der
 127 root = cacert.der
 128 crl = crl1.der
 129 verifyTime = 20151020125959Z
 130 end
 131
 132 test = "Cert: 1 cRLDistributionPoint, CRL: 1 issuingDistributionPoint, mismatch type"
 133 requireCrlForAll = true
 134 revokePolicy = crl
 135 cert = DEADBEF6.der
 136 root = cacert.der
 137 crl = crl4.der
 138 verifyTime = 20151020125959Z
 139 end
 140
 141 test = "Cert: 1 cRLDistributionPoint, CRL: 2 issuingDistributionPoint names, no match"
 142 requireCrlForAll = true
 143 revokePolicy = crl
 144 cert = DEADBEF6.der
 145 root = cacert.der
 146 crl = crl2.der
 147 verifyTime = 20151020125959Z
 148 error = CSSMERR_APPLETP_CRL_NOT_FOUND
 149 end
 150
 151 test = "Cert: 2 cRLDistributionPoint names, CRL: 1 issuingDistributionPoint, no match"
 152 requireCrlForAll = true
 153 revokePolicy = crl
 154 cert = DEADBEF7.der
 155 root = cacert.der
 156 crl = crl1.der
 157 verifyTime = 20151020125959Z
 158 error = CSSMERR_APPLETP_CRL_NOT_FOUND
 159 end
 160
 161 test = "Cert: 2 cRLDistributionPoint names, CRL: 2 issuingDistributionPoint names, match"
 162 requireCrlForAll = true
 163 revokePolicy = crl
 164 cert = DEADBEF7.der
 165 root = cacert.der
 166 crl = crl2.der
 167 verifyTime = 20151020125959Z
 168 end
 169
 170 test = "Cert: 2 cRLDistributionPoint names, CRL: 2 issuingDistributionPoint names, no match"
 171 requireCrlForAll = true
 172 revokePolicy = crl
 173 cert = DEADBEF7.der
 174 root = cacert.der
 175 crl = crl3.der
 176 verifyTime = 20151020125959Z
 177 error = CSSMERR_APPLETP_CRL_NOT_FOUND
 178 end