aboutsummaryrefslogtreecommitdiffstats
path: root/vectors/cryptography_vectors/x509
Commit message (Collapse)AuthorAgeFilesLines
* Added a test vector of an OCSP response with SCT extension (#5066)Alex Gaynor2019-11-161-0/+0
|
* Parse single_extensions in OCSP responses (#5059)Paul Kehrer2019-11-111-0/+0
| | | | | | | | | | | | * add single_extensions to OCSPResponse (#4753) * new vector, updateed docs, more stringent parser, changelog, etc * simplify PR (no SCT for now) * add a comment * finish pulling out the sct stuff so tests might actually run
* Finish ed25519 and ed448 support in x509 module (#4972)Marko Kreen2019-09-092-0/+25
| | | | | | | | | | | | | | | | | | * Support ed25519 in csr/crl creation * Tests for ed25519/x509 * Support ed448 in crt/csr/crl creation * Tests for ed448/x509 * Support ed25519/ed448 in OCSPResponseBuilder * Tests for eddsa in OCSPResponseBuilder * Builder check missing in create_x509_csr * Documentation update for ed25519+ed448 in x509
* add x509 CSR with challenge password (#4942)Paul Kehrer2019-07-091-0/+16
|
* more ed25519 vectors, better description of RFC 8410 vector (#4936)Paul Kehrer2019-07-063-0/+23
| | | | | | | | * more ed25519 vectors, better description of RFC 8410 vector * typo * oops, doc'd wrong
* add ed25519ph x509 test vector (#4933)Paul Kehrer2019-07-031-0/+9
|
* add RSA PSS certificate (#4865)Paul Kehrer2019-05-041-0/+20
| | | | | | * add RSA PSS certificate * i still maintain that 257 is slightly better than 256
* Refs #4830 -- added a vector of an x.509 certificate with a negative … (#4842)Alex Gaynor2019-04-131-0/+25
| | | | | | * Refs #4830 -- added a vector of an x.509 certificate with a negative serial number * Line wrap
* add signature_hash_algorithm to OCSPResponse (#4681)Paul Kehrer2019-01-101-0/+0
| | | | | | * add signature_hash_algorithm to OCSPResponse * fix pointless asserts
* add pkcs12 test vectors (#4535)Paul Kehrer2018-10-302-0/+15
| | | | | | * add pkcs12 test vectors * add more explanatino
* add issuingDistributionPoint vectors (#4537)Paul Kehrer2018-10-298-0/+87
|
* add a new SCT vector (#4528)Paul Kehrer2018-10-271-0/+35
| | | | | | * add a new SCT vector * ridiculous
* next_update is not a required field on OCSP responses (#4513)Paul Kehrer2018-10-231-0/+0
|
* add OCSP request with a request extension (nonce) (#4462)Paul Kehrer2018-09-071-0/+0
|
* More OCSP vectors (#4451)Paul Kehrer2018-09-012-0/+0
| | | | | | | | * yet another ocsp response vector. and yet there will be at least one more after this * add one more
* add LE subordinate certificate to test vectors (#4450)Paul Kehrer2018-09-011-0/+27
|
* add more OCSP response vectors (#4445)Paul Kehrer2018-09-013-0/+2
| | | | | | * add more OCSP response vectors * another vector and better docs
* OCSP response vector (#4443)Paul Kehrer2018-08-311-0/+0
| | | | | | | | | | * OCSP response vector * oops, wrong name * move ocsp response vector docs * make alex happy
* Added vector for pre-certificate poison extension (#4432)Alex Gaynor2018-08-301-0/+30
|
* add new OCSP request vectors (#4399)Paul Kehrer2018-08-152-0/+0
|
* Added badtime.pem vector (#4179)Joshua Crowgey2018-03-301-0/+18
| | | | | | | | * Added badtime.pem vector In connection with forthcoming PR to fix #4158 * shortened line, corrected and->and
* add utf8 DNSName x509 vector (#3952)Paul Kehrer2017-10-091-0/+41
|
* add Freshest CRL and Delta CRL Indicator test vectors (#3932)Paul Kehrer2017-09-202-0/+30
|
* add unique identifier test vector (#3925)Paul Kehrer2017-09-191-0/+11
| | | | | | * add unique identifier test vector * wrap a line I didn't even touch...
* add X509 test vector with a TLS Feature (RFC 7633) extension (#3898)Paul Kehrer2017-09-081-0/+33
|
* add initial OCSP request test vector (#3890)Paul Kehrer2017-09-071-0/+0
|
* add test vector with invalid basicconstraints (#3866)Paul Kehrer2017-08-151-0/+34
| | | | | | * add test vector with invalid basicconstraints * sigh
* Add is_signature_valid method on CertificateRevocationList (#3849)Vincent Pelletier2017-08-122-0/+56
|
* Enlarge _oid2txt buffer to handle larger OIDs (#3612)Fraser Tweedale2017-05-291-0/+32
| | | | | | | | | The OpenSSL manual recommends a buffer size of 80 for OBJ_oid2txt: https://www.openssl.org/docs/crypto/OBJ_nid2ln.html#return_values. But OIDs longer than this occur in real life (e.g. Active Directory makes some very long OIDs). If the length of the stringified OID exceeds the buffer size, allocate a new buffer that is big enough to hold the stringified OID, and re-do the conversion into the new buffer.
* Refs #3461 -- added a test vector with SCTs (#3462)Alex Gaynor2017-03-191-0/+30
| | | | | | * Refs #3461 -- added a test vector with SCTs * timestamp is a word
* add alternate signature OID for RSA with SHA1 + test and vector (#3227)Paul Kehrer2016-11-111-0/+12
| | | | | | * add alternate signature OID for RSA with SHA1 + test and vector * mozilla is a proper noun leave me alone spellchecker
* add e-trust russian x509 test vectorPaul Kehrer2016-03-111-0/+0
|
* Merge pull request #2670 from joernheissler/x509_req_verifyPaul Kehrer2016-03-061-0/+10
|\ | | | | Add verify method on CertificateSigningRequest
| * Add verify method on CertificateSigningRequestJoern Heissler2016-01-131-0/+10
| |
* | add another policy constraints test vectorPaul Kehrer2016-02-271-0/+17
| |
* | Added the department of state root, which has a policyConstraints extensionAlex Gaynor2016-02-261-0/+40
|/
* new unsupported extension x509 test vectorPaul Kehrer2015-12-301-0/+14
| | | | see #2288
* add new CRL test vectorPaul Kehrer2015-12-221-0/+14
|
* support CRLs with no revoked certificatesPaul Kehrer2015-12-201-0/+12
|
* add new CRL to test invalid certIssuer entry extensionErik Trauschke2015-10-151-0/+11
|
* Merge pull request #2402 from ddcc/patch-1Paul Kehrer2015-10-112-0/+65
|\ | | | | minor fix to handle malformed certificates without hostname
| * fix to handle malformed certificates without hostnameDominic Chen2015-10-102-0/+65
| |
* | Fixed #2404 -- handle a certificate with an unknown public keyAlex Gaynor2015-10-101-0/+28
|/
* remove critical flag from cert issuer entry ext to work with OpenSSL < 1.0.0Erik Trauschke2015-09-031-34/+33
|
* add intermediate CA vector for future AuthorityKeyIdentifier testingPaul Kehrer2015-08-051-0/+25
|
* add test vector from #2183Paul Kehrer2015-08-011-0/+16
|
* add SAN ediPartyName and x400Address test vectorsPaul Kehrer2015-07-042-0/+0
|
* add name constraints vector with /32 and /128 IP networksPaul Kehrer2015-07-011-0/+19
|
* add more basic name constraints vectorPaul Kehrer2015-06-292-0/+36
|
* add new name constraints vector with invalid IP netmaskPaul Kehrer2015-06-281-0/+18
|