From d02842b03bf94e9f62e788a2120f02d96a2b0cfd Mon Sep 17 00:00:00 2001 From: Paul Kehrer Date: Wed, 20 Sep 2017 23:40:05 +0800 Subject: add Freshest CRL and Delta CRL Indicator test vectors (#3932) --- docs/development/test-vectors.rst | 4 ++++ .../x509/custom/crl_delta_crl_indicator.pem | 11 +++++++++++ .../cryptography_vectors/x509/custom/freshestcrl.pem | 19 +++++++++++++++++++ 3 files changed, 34 insertions(+) create mode 100644 vectors/cryptography_vectors/x509/custom/crl_delta_crl_indicator.pem create mode 100644 vectors/cryptography_vectors/x509/custom/freshestcrl.pem diff --git a/docs/development/test-vectors.rst b/docs/development/test-vectors.rst index aa632787..66f71985 100644 --- a/docs/development/test-vectors.rst +++ b/docs/development/test-vectors.rst @@ -324,6 +324,8 @@ Custom X.509 Vectors is an unknown OID (``1.3.6.1.4.1.8432.1.1.2``). * ``policy_constraints_explicit.pem`` - A self-signed certificate containing a ``policyConstraints`` extension with a ``requireExplicitPolicy`` value. +* ``freshestcrl.pem`` - A self-signed certificate containing a ``freshestCRL`` + extension. Custom X.509 Request Vectors ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ @@ -383,6 +385,8 @@ Custom X.509 Certificate Revocation List Vectors * ``invalid_signature.pem`` - Contains a CRL with the last signature byte incremented by 1 to produce an invalid signature, and the public key which was used to generate it. +* ``crl_delta_crl_indicator.pem`` - Contains a CRL with the + ``DeltaCRLIndicator`` extension. Custom X.509 OCSP Test Vectors ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ diff --git a/vectors/cryptography_vectors/x509/custom/crl_delta_crl_indicator.pem b/vectors/cryptography_vectors/x509/custom/crl_delta_crl_indicator.pem new file mode 100644 index 00000000..f49da4c8 --- /dev/null +++ b/vectors/cryptography_vectors/x509/custom/crl_delta_crl_indicator.pem @@ -0,0 +1,11 @@ +-----BEGIN X509 CRL----- +MIIBfTBnAgEBMA0GCSqGSIb3DQEBCwUAMB0xGzAZBgNVBAMMEmNyeXB0b2dyYXBo +eS5pbyBDQRcNMDIwMTAxMTIwMTAwWhcNMzAwMTAxMTIwMTAwWqAWMBQwEgYDVR0b +BAsCCQCrVKmM6x8K0jANBgkqhkiG9w0BAQsFAAOCAQEAUEE3Z8rgIZYo1YK0wZ2X +bz9NnnE/X1YZQZ/IO/mSsz/k2d5XhLwa53zMlvX7J3UFEjEp+82b+gCMvgpJzTBq +a/XnifnA8lnFJmPiLB1JgRm2/GsXxkws3ziH5D/6yRdV3MDRQzRg610GayF+LfrF +74kMns0a1TaOfRhw1APiDvJLngElvcutBS3/mgr+SPPdDgFJ++PSrWOdAw4vo4HH +TTxduelWWDag2Bg0L90Td8Cdv57jgbCjSwWPSLqfwq674cDxotYABqtLg1Q5jeg2 +GIzEZqYXWvxMc87pQLRwrxG2+U4p+hDpx3TTIn2uyxDTihXvWKmiqzpOiXJKixe5 +Jw== +-----END X509 CRL----- diff --git a/vectors/cryptography_vectors/x509/custom/freshestcrl.pem b/vectors/cryptography_vectors/x509/custom/freshestcrl.pem new file mode 100644 index 00000000..139c2a84 --- /dev/null +++ b/vectors/cryptography_vectors/x509/custom/freshestcrl.pem @@ -0,0 +1,19 @@ +-----BEGIN CERTIFICATE----- +MIIDGjCCAgKgAwIBAgIBezANBgkqhkiG9w0BAQsFADANMQswCQYDVQQGEwJVUzAe +Fw0wMjAxMDExMjAxMDBaFw0zMDEyMzEwODMwMDBaMA0xCzAJBgNVBAYTAlVTMIIB +IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXr8fndHTKpaqDA2FYo/+/e1 +IWhRuiIw5dar/MHGz+9Z6SPqEzC8WTtzgCq2CKbkozBlI6MRa6WqOWYUUXThO2xJ +6beAYuRJ1y77EP1J6R+gi5bQUeeC6fWrxbWm95hIJ6245z2gDyKy79zbduq0btrZ +jtZWYnQ/3GwOM2pdDNuqfcKeU2NeJMh6WyxCFZaAY83raKlyurvB48/wD7moDjcq +TQwskg0ejO4zPORw3C6BRa2wW/Ka7h0k8UHozHhJicWH/G+6zZefPyFjwdcpmzZb +xy/+KEjpZ67R5I3MUVs6UO1N4E/QU4RsoQoiOxDMhBzID96+5E8xFME+iGr1gwID +AQABo4GEMIGBMH8GA1UdLgR4MHYwdKBBoD+GGmh0dHA6Ly9teWhvc3QuY29tL215 +Y2EuY3JshiFodHRwOi8vYmFja3VwLm15aG9zdC5jb20vbXljYS5jcmyBAgVgoiuk +KTAnMQswCQYDVQQGEwJVUzEYMBYGA1UEAwwPY3J5cHRvZ3JhcGh5IENBMA0GCSqG +SIb3DQEBCwUAA4IBAQA0zwxdhbb+rUYNUNVNigzbbHPI314FomvMzXGgn0or7+n4 +L5RJeZ1lB/PL2Iq6nasJb03ikrNguS9/reQSNdZ/mTTYrui5uNavlCICesm8hM7m +z1X/pjnZS/S0WaIgeWrPkRI/tqqE0eFSfDt9qvLvu/2Fj+q+/tLImKPKk1lPqzCQ +QfRFYUGhVk8vvm8rk8l6A6QfrPRF8vA1jZQbZfVrA3sluYIFQLb4G0oClSIKdz+n +tjYsoHwWF00ivnRfFHBW7CNaMOFz5erX1fMPb8w4Fum1lfaFvE8ON3FlPMEYfToo +GHgtF5mM7Gz3OPPU2R6LcJC4IsPSxISFiBHjBJRH +-----END CERTIFICATE----- -- cgit v1.2.3