Merge pull request #2088 from reaperhulk/nc-vectors

add more basic name constraints vector

1 files changed, 9 insertions, 1 deletions

diff --git a/docs/development/test-vectors.rst b/docs/development/test-vectors.rst
index ac667bb7..ca07547c 100644
--- a/docs/development/test-vectors.rst
+++ b/docs/development/test-vectors.rst
@@ -199,9 +199,17 @@ Custom X.509 Vectors
   set.
 * ``nc_permitted_excluded.pem`` - An RSA 2048 bit self-signed certificate
   containing a name constraints extension with both permitted and excluded
-  elements.
+  elements. Contains ``IPv4`` and ``IPv6`` addresses with network mask as well
+  as ``dNSName`` with a leading period.
+* ``nc_permitted_excluded_2.pem`` - An RSA 2048 bit self-signed certificate
+  containing a name constraints extension with both permitted and excluded
+  elements. Unlike ``nc_permitted_excluded.pem``, the general names do not
+  contain any name constraints specific values.
 * ``nc_permitted.pem`` - An RSA 2048 bit self-signed certificate containing a
   name constraints extension with permitted elements.
+* ``nc_permitted_2.pem`` - An RSA 2048 bit self-signed certificate containing a
+  name constraints extension with permitted elements that do not contain any
+  name constraints specific values.
 * ``nc_excluded.pem`` - An RSA 2048 bit self-signed certificate containing a
   name constraints extension with excluded elements.
 * ``nc_invalid_ip_netmask.pem`` - An RSA 2048 bit self-signed certificate