SecurityTests/clxutils/certcrl/testSubjects/netFetch/net.scr

   1 # test variations of {cert,net}fetchEnable
   2 globals
   3 allowUnverified = false
   4 crlNetFetchEnable = false
   5 certNetFetchEnable = false
   6 useSystemAnchors = false
   7 end
   8 #
   9 # everthing supplied locally, but the CRLs might be out of date
  10 # Enable net-based refresh
  11 #
  12 test = test1
  13 echo Everything supplied explicitly, enabling CRL refresh
  14 crlNetFetchEnable = true
  15 cert = ghoo.cer
  16 cert = JITC_Class3Mail_CA.crt
  17 root = JITC_Class3_root_CA.cer
  18 verifyTime = 20030601000000
  19 crlDb = c3MailCaCrl.db
  20 end
  21 #
  22 # We have local CRLs; ensure we can get everything locally
  23 #
  24 test = test2
  25 echo Everything supplied explicitly, disable net access
  26 crlNetFetchEnable = false
  27 cert = ghoo.cer
  28 cert = JITC_Class3Mail_CA.crt
  29 root = JITC_Class3_root_CA.cer
  30 crlDb = c3MailCaCrl.db
  31 end
  32 #
  33 # get intermediate cert from net
  34 #
  35 test = test3
  36 echo force intermediate cert fetch from net
  37 certNetFetchEnable = true
  38 cert = ghoo.cer
  39 # cert = JITC_Class3Mail_CA.crt
  40 root = JITC_Class3_root_CA.cer
  41 crlDb = c3MailCaCrl.db
  42 end
  43 #
  44 # get CRLs from net
  45 #
  46 test = test4
  47 echo force CRL fetch from net
  48 certNetFetchEnable = true
  49 crlNetFetchEnable = true
  50 cert = ghoo.cer
  51 cert = JITC_Class3Mail_CA.crt
  52 root = JITC_Class3_root_CA.cer
  53 #crlDb = c3MailCaCrl.db
  54 end
  55 #
  56 # get everything except anchor from net
  57 #
  58 test = test5
  59 echo Everything except leaf and anchor from net
  60 certNetFetchEnable = true
  61 crlNetFetchEnable = true
  62 cert = ghoo.cer
  63 #cert = JITC_Class3Mail_CA.crt
  64 root = JITC_Class3_root_CA.cer
  65 #crlDb = c3MailCaCrl.db
  66 end
  67 #
  68 # get everything from net
  69 #
  70 test = test6
  71 echo Everything from net
  72 certNetFetchEnable = true
  73 crlNetFetchEnable = true
  74 cert = ghoo.cer
  75 #cert = JITC_Class3Mail_CA.crt
  76 #root = JITC_Class3_root_CA.cer
  77 #crlDb = c3MailCaCrl.db
  78 error = CSSMERR_TP_INVALID_ANCHOR_CERT
  79 end
  80