root
/
openssl
mirror of https://github.com/openssl/openssl.git
1
0
Fork 0
Code Issues Actions 7 Packages Projects Releases Wiki Activity
openssl/test/certs
History
Tomas Mraz fdcddd9357 Disallow certs with explicit curve in verification chain 
The check is applied only with X509_V_FLAG_X509_STRICT.

Fixes #12139

Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com>
Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/12909)
 		2020-09-21 10:32:59 +02:00
..
alt1-cert.pem Limit scope of CN name constraints 2018-05-23 11:12:13 -04:00
alt1-key.pem Limit scope of CN name constraints 2018-05-23 11:12:13 -04:00
alt2-cert.pem
…
alt2-key.pem
…
alt3-cert.pem
…
alt3-key.pem
…
bad-pc3-cert.pem
…
bad-pc3-key.pem
…
bad-pc4-cert.pem
…
bad-pc4-key.pem
…
bad-pc6-cert.pem
…
bad-pc6-key.pem
…
bad.key
…
bad.pem
…
badalt1-cert.pem
…
badalt1-key.pem
…
badalt2-cert.pem
…
badalt2-key.pem
…
badalt3-cert.pem
…
badalt3-key.pem
…
badalt4-cert.pem
…
badalt4-key.pem
…
badalt5-cert.pem
…
badalt5-key.pem
…
badalt6-cert.pem Limit scope of CN name constraints 2018-05-23 11:12:13 -04:00
badalt6-key.pem Limit scope of CN name constraints 2018-05-23 11:12:13 -04:00
badalt7-cert.pem Limit scope of CN name constraints 2018-05-23 11:12:13 -04:00
badalt7-key.pem Limit scope of CN name constraints 2018-05-23 11:12:13 -04:00
badalt8-cert.pem
…
badalt8-key.pem
…
badalt9-cert.pem
…
badalt9-key.pem
…
badalt10-cert.pem
…
badalt10-key.pem
…
badcn1-cert.pem Limit scope of CN name constraints 2018-05-23 11:12:13 -04:00
badcn1-key.pem Limit scope of CN name constraints 2018-05-23 11:12:13 -04:00
ca+anyEKU.pem
…
ca+clientAuth.pem
…
ca+serverAuth.pem
…
ca-anyEKU.pem
…
ca-cert-768.pem
…
ca-cert-768i.pem
…
ca-cert-ec-explicit.pem Disallow certs with explicit curve in verification chain 2020-09-21 10:32:59 +02:00
ca-cert-ec-named.pem Disallow certs with explicit curve in verification chain 2020-09-21 10:32:59 +02:00
ca-cert-md5-any.pem
…
ca-cert-md5.pem
…
ca-cert.pem
…
ca-cert2.pem
…
ca-clientAuth.pem
…
ca-expired.pem
…
ca-key-768.pem
…
ca-key-ec-explicit.pem Disallow certs with explicit curve in verification chain 2020-09-21 10:32:59 +02:00
ca-key-ec-named.pem Disallow certs with explicit curve in verification chain 2020-09-21 10:32:59 +02:00
ca-key.pem
…
ca-key2.pem
…
ca-name2.pem
…
ca-nonbc.pem
…
ca-nonca.pem
…
ca-root2.pem
…
ca-serverAuth.pem
…
cca+anyEKU.pem
…
cca+clientAuth.pem
…
cca+serverAuth.pem
…
cca-anyEKU.pem
…
cca-cert.pem
…
cca-clientAuth.pem
…
cca-serverAuth.pem
…
client-ed448-cert.pem Update tests for TLS Ed448 2018-03-05 11:39:44 +00:00
client-ed448-key.pem Update tests for TLS Ed448 2018-03-05 11:39:44 +00:00
client-ed25519-cert.pem
…
client-ed25519-key.pem
…
croot+anyEKU.pem
…
croot+clientAuth.pem
…
croot+serverAuth.pem
…
croot-anyEKU.pem
…
croot-cert.pem
…
croot-clientAuth.pem
…
croot-serverAuth.pem
…
cyrillic.msb
…
cyrillic.pem
…
cyrillic.utf8
…
cyrillic_crl.pem
…
cyrillic_crl.utf8 Modify expected output of a CRL to match the changed printout 2017-11-16 01:19:55 +01:00
dhp2048.pem
…
ee+clientAuth.pem
…
ee+serverAuth.pem
…
ee-cert-768.pem
…
ee-cert-768i.pem
…
ee-cert-ec-explicit.pem Disallow certs with explicit curve in verification chain 2020-09-21 10:32:59 +02:00
ee-cert-ec-named-explicit.pem Disallow certs with explicit curve in verification chain 2020-09-21 10:32:59 +02:00
ee-cert-ec-named-named.pem Disallow certs with explicit curve in verification chain 2020-09-21 10:32:59 +02:00
ee-cert-md5.pem
…
ee-cert.pem
…
ee-cert2.pem
…
ee-client-chain.pem
…
ee-client.pem
…
ee-clientAuth.pem
…
ee-ecdsa-client-chain.pem
…
ee-ecdsa-key.pem
…
ee-ed25519.pem
…
ee-expired.pem
…
ee-key-768.pem
…
ee-key-ec-explicit.pem Disallow certs with explicit curve in verification chain 2020-09-21 10:32:59 +02:00
ee-key-ec-named-explicit.pem Disallow certs with explicit curve in verification chain 2020-09-21 10:32:59 +02:00
ee-key-ec-named-named.pem Disallow certs with explicit curve in verification chain 2020-09-21 10:32:59 +02:00
ee-key.pem
…
ee-name2.pem
…
ee-pathlen.pem Add test cases for the non CA certificate with pathlen:0 2020-04-06 10:30:08 +02:00
ee-pss-sha1-cert.pem
…
ee-pss-sha256-cert.pem
…
ee-self-signed.pem Fix a test_verify failure 2020-07-30 15:49:52 +01:00
ee-serverAuth.pem
…
embeddedSCTs1-key.pem Revert "Create a new embeddedSCTs1 that's signed using SHA256" 2020-03-11 14:56:05 +00:00
embeddedSCTs1.pem Revert "Create a new embeddedSCTs1 that's signed using SHA256" 2020-03-11 14:56:05 +00:00
embeddedSCTs1.sct Revert "Create a new embeddedSCTs1 that's signed using SHA256" 2020-03-11 14:56:05 +00:00
embeddedSCTs1_issuer.pem
…
embeddedSCTs3.pem
…
embeddedSCTs3.sct Revert "Create a new embeddedSCTs1 that's signed using SHA256" 2020-03-11 14:56:05 +00:00
embeddedSCTs3_issuer.pem
…
goodcn1-cert.pem Limit scope of CN name constraints 2018-05-23 11:12:13 -04:00
goodcn1-key.pem Limit scope of CN name constraints 2018-05-23 11:12:13 -04:00
interCA.key
…
interCA.pem
…
leaf.key
…
leaf.pem
…
many-constraints.pem
…
many-names1.pem
…
many-names2.pem
…
many-names3.pem
…
mkcert.sh Revert "Create a new embeddedSCTs1 that's signed using SHA256" 2020-03-11 14:56:05 +00:00
nca+anyEKU.pem
…
nca+serverAuth.pem
…
ncca-cert.pem
…
ncca-key.pem
…
ncca1-cert.pem
…
ncca1-key.pem
…
ncca2-cert.pem
…
ncca2-key.pem
…
ncca3-cert.pem
…
ncca3-key.pem
…
nroot+anyEKU.pem
…
nroot+serverAuth.pem
…
p256-server-cert.pem
…
p256-server-key.pem
…
p384-root-key.pem
…
p384-root.pem
…
p384-server-cert.pem
…
p384-server-key.pem
…
pathlen.pem
…
pc1-cert.pem
…
pc1-key.pem
…
pc2-cert.pem
…
pc2-key.pem
…
pc5-cert.pem
…
pc5-key.pem
…
root+anyEKU.pem
…
root+clientAuth.pem
…
root+serverAuth.pem
…
root-anyEKU.pem
…
root-cert-768.pem
…
root-cert-md5.pem
…
root-cert-rsa2.pem Fix cert with rsa instead of rsaEncryption as public key algorithm 2018-12-31 09:51:04 +01:00
root-cert.pem
…
root-cert2.pem
…
root-clientAuth.pem
…
root-ed448-cert.pem Generate new Ed488 certificates 2020-02-16 11:52:05 +01:00
root-ed448-key.pem Generate new Ed488 certificates 2020-02-16 11:52:05 +01:00
root-ed25519.pem
…
root-key-768.pem
…
root-key.pem
…
root-key2.pem
…
root-name2.pem
…
root-nonca.pem
…
root-noserver.pem
…
root-serverAuth.pem
…
root2+clientAuth.pem
…
root2+serverAuth.pem
…
root2-serverAuth.pem
…
rootCA.key
…
rootCA.pem
…
rootcert.pem
…
rootkey.pem
…
roots.pem
…
sca+anyEKU.pem
…
sca+clientAuth.pem
…
sca+serverAuth.pem
…
sca-anyEKU.pem
…
sca-cert.pem
…
sca-clientAuth.pem
…
sca-serverAuth.pem
…
server-cecdsa-cert.pem
…
server-cecdsa-key.pem
…
server-dsa-cert.pem
…
server-dsa-key.pem
…
server-ecdsa-brainpoolP256r1-cert.pem Add some test brainpool certificates 2018-11-12 11:19:58 +00:00
server-ecdsa-brainpoolP256r1-key.pem Add some test brainpool certificates 2018-11-12 11:19:58 +00:00
server-ecdsa-cert.pem
…
server-ecdsa-key.pem
…
server-ed448-cert.pem Generate new Ed488 certificates 2020-02-16 11:52:05 +01:00
server-ed448-key.pem Update tests for TLS Ed448 2018-03-05 11:39:44 +00:00
server-ed25519-cert.pem
…
server-ed25519-key.pem
…
server-pss-cert.pem
…
server-pss-key.pem
…
server-pss-restrict-cert.pem Add Restricted PSS certificate and key 2019-08-09 13:24:14 +01:00
server-pss-restrict-key.pem Add Restricted PSS certificate and key 2019-08-09 13:24:14 +01:00
server-trusted.pem
…
servercert.pem
…
serverkey.pem
…
setup.sh Disallow certs with explicit curve in verification chain 2020-09-21 10:32:59 +02:00
some-names1.pem
…
some-names2.pem
…
some-names3.pem
…
sroot+anyEKU.pem
…
sroot+clientAuth.pem
…
sroot+serverAuth.pem
…
sroot-anyEKU.pem
…
sroot-cert.pem
…
sroot-clientAuth.pem
…
sroot-serverAuth.pem
…
subinterCA-ss.pem
…
subinterCA.key
…
subinterCA.pem
…
untrusted.pem
…
wrongcert.pem
…
wrongkey.pem
…
x509-check-key.pem
…
x509-check.csr
…