Merge pull request #2040 from reaperhulk/policy-constraints-vectors

add x509 policy constraints test vectors

4 files changed, 61 insertions, 0 deletions

diff --git a/docs/development/test-vectors.rst b/docs/development/test-vectors.rst
index 91699bc9..3776cb1d 100644
--- a/docs/development/test-vectors.rst
+++ b/docs/development/test-vectors.rst
@@ -214,6 +214,13 @@ Custom X.509 Vectors
   alternative name extension with a ``URI`` general name.
 * ``ocsp_nocheck.pem`` - An RSA 2048 bit self-signed certificate containing
   an ``OCSPNoCheck`` extension.
+* ``pc_inhibit_require.pem`` - An RSA 2048 bit self-signed certificate
+  containing a policy constraints extension with both inhibit policy mapping
+  and require explicit policy elements.
+* ``pc_inhibit.pem`` - An RSA 2048 bit self-signed certificate containing a
+  policy constraints extension with an inhibit policy mapping element.
+* ``pc_require.pem`` - An RSA 2048 bit self-signed certificate containing a
+  policy constraints extension with a require explicit policy element.
 
 Custom X.509 Request Vectors
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
diff --git a/vectors/cryptography_vectors/x509/custom/pc_inhibit.pem b/vectors/cryptography_vectors/x509/custom/pc_inhibit.pem
new file mode 100644
index 00000000..95245a91
--- /dev/null
+++ b/vectors/cryptography_vectors/x509/custom/pc_inhibit.pem
@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vectors/cryptography_vectors/x509/custom/pc_inhibit_require.pem b/vectors/cryptography_vectors/x509/custom/pc_inhibit_require.pem
new file mode 100644
index 00000000..6475afc3
--- /dev/null
+++ b/vectors/cryptography_vectors/x509/custom/pc_inhibit_require.pem
@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE-----
+MIIC0TCCAbmgAwIBAgITBm7W5plm/+MNl9v4WkUqdcxmjjANBgkqhkiG9w0BAQsF
+ADAXMRUwEwYDVQQDDAxjcnlwdG9ncmFwaHkwHhcNMTUwNjE3MjE1MTM1WhcNMTYw
+NjE2MjE1MTM1WjAXMRUwEwYDVQQDDAxjcnlwdG9ncmFwaHkwggEiMA0GCSqGSIb3
+DQEBAQUAA4IBDwAwggEKAoIBAQCylTa0WkLvIXB4sWoPdv5iL3idlVHKR+ncODKL
+nwQ2Jtd990MfakOFRLrJFF1tfPL4qyRbbyMyrgCOoKBCAuIdBZfBDH3JWFjxGy8J
+Yls8yVeAVKreV18HmLvAsBL3bnr7Gk3vpznrfoG5rn5T/fL0cqqTXFV8zQhjHiEo
+zftSaoq0LOxsSgFdxXS8e8K6RMvLCZPcMpI4fo1Kq2QBT2J1x1/Hq/VnK132cs0g
+TOyiTyyJfvRmlqdXowh7Jf8LQB4mM6gc023fEdQ+HH6JYX1vDQVxaiTM6KMYJNv/
+l4gchP3jknOfZffwGGdXQrtUMhQmltnSqV5nY/G2OGm/Z0pdAgMBAAGjFjAUMBIG
+A1UdJAEB/wQIMAaAAQGBAQEwDQYJKoZIhvcNAQELBQADggEBAF2vihRcIlDO+aAZ
+yjpwSTZH0J0mw5yJKxo8oJ/Ij26d2vjhu/xKhPV1L8dTgVQsSU8RVJK5+MRSog+C
+jP81YaTTgktHxu1JIXEdTJJ9HZlTvsXvMHq1y3XYxzu8i8Lsj9mf+NFAb+ecLfhF
+mVDwFY+TrPT2jcCPD7PcV8fgSio6MXRP2jrqFKBTRAJTsZMpWJg4Jn1vDRgLWqwZ
+VOd4G4IfmuN2n92kd0UT6flvbpJEDQJr5elqeU9Mp1PjN3UwSnox1D+fAd2Rqknn
+6FPfjjJO+j6RFtqlzPH8A3/Pps1C61U947oawS/tk9P4WVrDVto3tHH5jxOPp/wA
+EqtmA1c=
+-----END CERTIFICATE-----
diff --git a/vectors/cryptography_vectors/x509/custom/pc_require.pem b/vectors/cryptography_vectors/x509/custom/pc_require.pem
new file mode 100644
index 00000000..d41e1dc9
--- /dev/null
+++ b/vectors/cryptography_vectors/x509/custom/pc_require.pem
@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE-----
+MIICzjCCAbagAwIBAgITBm7W5SWig9xJ0Sqde+PhIPV4QzANBgkqhkiG9w0BAQsF
+ADAXMRUwEwYDVQQDDAxjcnlwdG9ncmFwaHkwHhcNMTUwNjE3MjE1MTE2WhcNMTYw
+NjE2MjE1MTE2WjAXMRUwEwYDVQQDDAxjcnlwdG9ncmFwaHkwggEiMA0GCSqGSIb3
+DQEBAQUAA4IBDwAwggEKAoIBAQCylTa0WkLvIXB4sWoPdv5iL3idlVHKR+ncODKL
+nwQ2Jtd990MfakOFRLrJFF1tfPL4qyRbbyMyrgCOoKBCAuIdBZfBDH3JWFjxGy8J
+Yls8yVeAVKreV18HmLvAsBL3bnr7Gk3vpznrfoG5rn5T/fL0cqqTXFV8zQhjHiEo
+zftSaoq0LOxsSgFdxXS8e8K6RMvLCZPcMpI4fo1Kq2QBT2J1x1/Hq/VnK132cs0g
+TOyiTyyJfvRmlqdXowh7Jf8LQB4mM6gc023fEdQ+HH6JYX1vDQVxaiTM6KMYJNv/
+l4gchP3jknOfZffwGGdXQrtUMhQmltnSqV5nY/G2OGm/Z0pdAgMBAAGjEzARMA8G
+A1UdJAEB/wQFMAOAAQEwDQYJKoZIhvcNAQELBQADggEBAB1WST/bEzDX6ws3xRLt
+kfe12ZzMXkxGjAWM3Ai2VigqUqVOZRsB70Zekv/NXAmz+et6hdlzg1b3S+2Kffe/
+1aDGvIHqoFtbokctJyrX7eCjhENdKb/yR8CYWOWCWTdWe6ij4TjxkkEbBxajeR1V
+hzSOHG8l3r5OTqFdBknsbLBIiE0NlxyHoYzklunmjS468B/JpAgJ9seKkrVGHN2H
+J6wDMMe1i+3qKtqv0+xeTII2W4fPX/Uvhyh0jXa6QbggdjqO4q1pAyC0ruYDmuo1
+D7k5lbVU9j4BRUnK6s8wno/p1sRG61eQDdHj6Ri/svcstk03ZFmTSORE/RaI1pYB
+8QU=
+-----END CERTIFICATE-----