Gilles Peskine | fd14bca | 2017-05-11 17:57:22 +0200 | [diff] [blame] | 1 | ## This file contains a record of how some of the test data was |
| 2 | ## generated. The final build products are committed to the repository |
| 3 | ## as well to make sure that the test data is identical. You do not |
| 4 | ## need to use this makefile unless you're extending mbed TLS's tests. |
Gilles Peskine | f040a17 | 2017-05-05 18:56:12 +0200 | [diff] [blame] | 5 | |
Gilles Peskine | fd14bca | 2017-05-11 17:57:22 +0200 | [diff] [blame] | 6 | ## Many data files were generated prior to the existence of this |
| 7 | ## makefile, so the method of their generation was not recorded. |
Gilles Peskine | f040a17 | 2017-05-05 18:56:12 +0200 | [diff] [blame] | 8 | |
Gilles Peskine | fd14bca | 2017-05-11 17:57:22 +0200 | [diff] [blame] | 9 | ## Note that in addition to depending on the version of the data |
| 10 | ## generation tool, many of the build outputs are randomized, so |
| 11 | ## running this makefile twice would not produce the same results. |
| 12 | |
| 13 | ## Tools |
| 14 | OPENSSL ?= openssl |
Manuel Pégourié-Gonnard | 29d60fb | 2017-06-05 10:20:32 +0200 | [diff] [blame] | 15 | FAKETIME ?= faketime |
Hanno Becker | 418a622 | 2017-09-14 07:51:28 +0100 | [diff] [blame] | 16 | MBEDTLS_CERT_WRITE ?= $(PWD)/../../programs/x509/cert_write |
Hanno Becker | 50cb93a | 2018-10-08 17:15:28 +0100 | [diff] [blame^] | 17 | MBEDTLS_CERT_REQ ?= $(PWD)/../../programs/x509/cert_req |
| 18 | |
Gilles Peskine | fd14bca | 2017-05-11 17:57:22 +0200 | [diff] [blame] | 19 | |
| 20 | ## Build the generated test data. Note that since the final outputs |
| 21 | ## are committed to the repository, this target should do nothing on a |
| 22 | ## fresh checkout. Furthermore, since the generation is randomized, |
| 23 | ## re-running the same targets may result in differing files. The goal |
| 24 | ## of this makefile is primarily to serve as a record of how the |
| 25 | ## targets were generated in the first place. |
Gilles Peskine | f040a17 | 2017-05-05 18:56:12 +0200 | [diff] [blame] | 26 | default: all_final |
| 27 | |
| 28 | all_intermediate := # temporary files |
| 29 | all_final := # files used by tests |
| 30 | |
Gilles Peskine | fd14bca | 2017-05-11 17:57:22 +0200 | [diff] [blame] | 31 | |
| 32 | |
| 33 | ################################################################ |
| 34 | #### Generate certificates from existing keys |
| 35 | ################################################################ |
| 36 | |
Hanno Becker | 418a622 | 2017-09-14 07:51:28 +0100 | [diff] [blame] | 37 | test_ca_crt = test-ca.crt |
Gilles Peskine | fd14bca | 2017-05-11 17:57:22 +0200 | [diff] [blame] | 38 | test_ca_key_file_rsa = test-ca.key |
| 39 | test_ca_pwd_rsa = PolarSSLTest |
| 40 | test_ca_config_file = test-ca.opensslconf |
| 41 | |
Gilles Peskine | f040a17 | 2017-05-05 18:56:12 +0200 | [diff] [blame] | 42 | test-ca.csr: $(test_ca_key_file_rsa) $(test_ca_config_file) |
| 43 | $(OPENSSL) req -new -config $(test_ca_config_file) -key $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -subj "/C=NL/O=PolarSSL/CN=PolarSSL Test CA" -out $@ |
| 44 | all_intermediate += test-ca.csr |
| 45 | test-ca-sha1.crt: $(test_ca_key_file_rsa) $(test_ca_config_file) test-ca.csr |
| 46 | $(OPENSSL) req -x509 -config $(test_ca_config_file) -key $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 0 -days 3653 -sha1 -in test-ca.csr -out $@ |
| 47 | all_final += test-ca-sha1.crt |
| 48 | test-ca-sha256.crt: $(test_ca_key_file_rsa) $(test_ca_config_file) test-ca.csr |
| 49 | $(OPENSSL) req -x509 -config $(test_ca_config_file) -key $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 0 -days 3653 -sha256 -in test-ca.csr -out $@ |
| 50 | all_final += test-ca-sha256.crt |
| 51 | |
Manuel Pégourié-Gonnard | 2d825d4 | 2017-07-03 18:06:38 +0200 | [diff] [blame] | 52 | test_ca_key_file_rsa_alt = test-ca-alt.key |
| 53 | |
| 54 | $(test_ca_key_file_rsa_alt): |
| 55 | $(OPENSSL) genrsa -out $@ 2048 |
| 56 | test-ca-alt.csr: $(test_ca_key_file_rsa_alt) $(test_ca_config_file) |
| 57 | $(OPENSSL) req -new -config $(test_ca_config_file) -key $(test_ca_key_file_rsa_alt) -subj "/C=NL/O=PolarSSL/CN=PolarSSL Test CA" -out $@ |
| 58 | all_intermediate += test-ca-alt.csr |
| 59 | test-ca-alt.crt: $(test_ca_key_file_rsa_alt) $(test_ca_config_file) test-ca-alt.csr |
| 60 | $(OPENSSL) req -x509 -config $(test_ca_config_file) -key $(test_ca_key_file_rsa_alt) -set_serial 0 -days 3653 -sha256 -in test-ca-alt.csr -out $@ |
| 61 | all_final += test-ca-alt.crt |
| 62 | test-ca-alt-good.crt: test-ca-alt.crt test-ca-sha256.crt |
| 63 | cat test-ca-alt.crt test-ca-sha256.crt > $@ |
| 64 | all_final += test-ca-alt-good.crt |
| 65 | test-ca-good-alt.crt: test-ca-alt.crt test-ca-sha256.crt |
| 66 | cat test-ca-sha256.crt test-ca-alt.crt > $@ |
| 67 | all_final += test-ca-good-alt.crt |
| 68 | |
Manuel Pégourié-Gonnard | bc31301 | 2017-06-27 12:51:52 +0200 | [diff] [blame] | 69 | test_ca_crt_file_ec = test-ca2.crt |
| 70 | test_ca_key_file_ec = test-ca2.key |
| 71 | |
| 72 | test-int-ca.csr: test-int-ca.key $(test_ca_config_file) |
| 73 | $(OPENSSL) req -new -config $(test_ca_config_file) -key test-int-ca.key -subj "/C=NL/O=PolarSSL/CN=PolarSSL Test Intermediate CA" -out $@ |
| 74 | all_intermediate += test-int-ca.csr |
Manuel Pégourié-Gonnard | 7ff243a | 2017-08-08 18:54:13 +0200 | [diff] [blame] | 75 | test-int-ca-exp.crt: $(test_ca_crt_file_ec) $(test_ca_key_file_ec) $(test_ca_config_file) test-int-ca.csr |
Manuel Pégourié-Gonnard | bc31301 | 2017-06-27 12:51:52 +0200 | [diff] [blame] | 76 | $(FAKETIME) -f -3653d $(OPENSSL) x509 -req -extfile $(test_ca_config_file) -extensions v3_ca -CA $(test_ca_crt_file_ec) -CAkey $(test_ca_key_file_ec) -set_serial 14 -days 3653 -sha256 -in test-int-ca.csr -out $@ |
| 77 | all_final += test-int-ca-exp.crt |
| 78 | |
Manuel Pégourié-Gonnard | fd3e4fb | 2018-03-13 11:53:30 +0100 | [diff] [blame] | 79 | crl-idp.pem: $(test_ca_crt) $(test_ca_key_file_rsa) $(test_ca_config_file) |
| 80 | $(OPENSSL) ca -gencrl -batch -cert $(test_ca_crt) -keyfile $(test_ca_key_file_rsa) -key $(test_ca_pwd_rsa) -config $(test_ca_config_file) -name test_ca -md sha256 -crldays 3653 -crlexts crl_ext_idp -out $@ |
Manuel Pégourié-Gonnard | a63305d | 2018-03-14 12:23:56 +0100 | [diff] [blame] | 81 | all_final += crl-idp.pem |
| 82 | crl-idpnc.pem: $(test_ca_crt) $(test_ca_key_file_rsa) $(test_ca_config_file) |
| 83 | $(OPENSSL) ca -gencrl -batch -cert $(test_ca_crt) -keyfile $(test_ca_key_file_rsa) -key $(test_ca_pwd_rsa) -config $(test_ca_config_file) -name test_ca -md sha256 -crldays 3653 -crlexts crl_ext_idp_nc -out $@ |
| 84 | all_final += crl-idpnc.pem |
Manuel Pégourié-Gonnard | fd3e4fb | 2018-03-13 11:53:30 +0100 | [diff] [blame] | 85 | |
Gilles Peskine | fd14bca | 2017-05-11 17:57:22 +0200 | [diff] [blame] | 86 | cli_crt_key_file_rsa = cli-rsa.key |
| 87 | cli_crt_extensions_file = cli.opensslconf |
| 88 | |
Gilles Peskine | f040a17 | 2017-05-05 18:56:12 +0200 | [diff] [blame] | 89 | cli-rsa.csr: $(cli_crt_key_file_rsa) |
| 90 | $(OPENSSL) req -new -key $(cli_crt_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -subj "/C=NL/O=PolarSSL/CN=PolarSSL Client 2" -out $@ |
| 91 | all_intermediate += cli-rsa.csr |
| 92 | cli-rsa-sha1.crt: $(cli_crt_key_file_rsa) test-ca-sha1.crt cli-rsa.csr |
| 93 | $(OPENSSL) x509 -req -extfile $(cli_crt_extensions_file) -extensions cli-rsa -CA test-ca-sha1.crt -CAkey $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 4 -days 3653 -sha1 -in cli-rsa.csr -out $@ |
| 94 | all_final += cli-rsa-sha1.crt |
| 95 | cli-rsa-sha256.crt: $(cli_crt_key_file_rsa) test-ca-sha256.crt cli-rsa.csr |
| 96 | $(OPENSSL) x509 -req -extfile $(cli_crt_extensions_file) -extensions cli-rsa -CA test-ca-sha256.crt -CAkey $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 4 -days 3653 -sha256 -in cli-rsa.csr -out $@ |
| 97 | all_final += cli-rsa-sha256.crt |
| 98 | |
Gilles Peskine | bc70a18 | 2017-05-09 15:59:24 +0200 | [diff] [blame] | 99 | server2-rsa.csr: server2.key |
| 100 | $(OPENSSL) req -new -key server2.key -passin "pass:$(test_ca_pwd_rsa)" -subj "/C=NL/O=PolarSSL/CN=localhost" -out $@ |
| 101 | all_intermediate += server2-rsa.csr |
| 102 | server2-sha256.crt: server2-rsa.csr |
| 103 | $(OPENSSL) x509 -req -extfile $(cli_crt_extensions_file) -extensions cli-rsa -CA test-ca-sha256.crt -CAkey $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 4 -days 3653 -sha256 -in server2-rsa.csr -out $@ |
| 104 | all_final += server2-sha256.crt |
| 105 | |
Manuel Pégourié-Gonnard | 29d60fb | 2017-06-05 10:20:32 +0200 | [diff] [blame] | 106 | test_ca_int_rsa1 = test-int-ca.crt |
| 107 | |
| 108 | server7.csr: server7.key |
| 109 | $(OPENSSL) req -new -key server7.key -subj "/C=NL/O=PolarSSL/CN=localhost" -out $@ |
| 110 | all_intermediate += server7.csr |
| 111 | server7-expired.crt: server7.csr $(test_ca_int_rsa1) |
| 112 | $(FAKETIME) -f -3653d $(OPENSSL) x509 -req -extfile $(cli_crt_extensions_file) -extensions cli-rsa -CA $(test_ca_int_rsa1) -CAkey test-int-ca.key -set_serial 16 -days 3653 -sha256 -in server7.csr | cat - $(test_ca_int_rsa1) > $@ |
| 113 | all_final += server7-expired.crt |
| 114 | server7-future.crt: server7.csr $(test_ca_int_rsa1) |
| 115 | $(FAKETIME) -f +3653d $(OPENSSL) x509 -req -extfile $(cli_crt_extensions_file) -extensions cli-rsa -CA $(test_ca_int_rsa1) -CAkey test-int-ca.key -set_serial 16 -days 3653 -sha256 -in server7.csr | cat - $(test_ca_int_rsa1) > $@ |
| 116 | all_final += server7-future.crt |
Manuel Pégourié-Gonnard | 4dfc04a | 2017-06-05 11:12:13 +0200 | [diff] [blame] | 117 | server7-badsign.crt: server7.crt $(test_ca_int_rsa1) |
| 118 | { head -n-2 server7.crt; tail -n-2 server7.crt | sed -e '1s/0\(=*\)$$/_\1/' -e '1s/[^_=]\(=*\)$$/0\1/' -e '1s/_/1/'; cat test-int-ca.crt; } > server7-badsign.crt |
| 119 | all_final += server7-badsign.crt |
Manuel Pégourié-Gonnard | bc31301 | 2017-06-27 12:51:52 +0200 | [diff] [blame] | 120 | server7_int-ca-exp.crt: server7.crt test-int-ca-exp.crt |
| 121 | cat server7.crt test-int-ca-exp.crt > $@ |
| 122 | all_final += server7_int-ca-exp.crt |
| 123 | |
| 124 | server5-ss-expired.crt: server5.key |
| 125 | $(FAKETIME) -f -3653d $(OPENSSL) req -x509 -new -subj "/C=UK/O=mbed TLS/OU=testsuite/CN=localhost" -days 3653 -sha256 -key $< -out $@ |
| 126 | all_final += server5-ss-expired.crt |
| 127 | |
Manuel Pégourié-Gonnard | c10afdb | 2017-06-29 09:48:08 +0200 | [diff] [blame] | 128 | # try to forge a copy of test-int-ca3 with different key |
| 129 | server5-ss-forgeca.crt: server5.key |
| 130 | $(FAKETIME) '2015-09-01 14:08:43' $(OPENSSL) req -x509 -new -subj "/C=UK/O=mbed TLS/CN=mbed TLS Test intermediate CA 3" -set_serial 77 -config $(test_ca_config_file) -extensions noext_ca -days 3650 -sha256 -key $< -out $@ |
| 131 | all_final += server5-ss-forgeca.crt |
| 132 | |
Ron Eldor | b006518 | 2017-10-16 12:40:27 +0300 | [diff] [blame] | 133 | rsa_pkcs1_2048_public.pem: server8.key |
Ron Eldor | 3f2da84 | 2017-10-17 15:50:30 +0300 | [diff] [blame] | 134 | $(OPENSSL) rsa -in $< -outform PEM -RSAPublicKey_out -out $@ |
| 135 | all_final += rsa_pkcs1_2048_public.pem |
Gilles Peskine | ea8d697 | 2017-11-28 17:30:52 +0100 | [diff] [blame] | 136 | |
Ron Eldor | b006518 | 2017-10-16 12:40:27 +0300 | [diff] [blame] | 137 | rsa_pkcs1_2048_public.der: rsa_pkcs1_2048_public.pem |
Ron Eldor | 3f2da84 | 2017-10-17 15:50:30 +0300 | [diff] [blame] | 138 | $(OPENSSL) rsa -RSAPublicKey_in -in $< -outform DER -RSAPublicKey_out -out $@ |
| 139 | all_final += rsa_pkcs1_2048_public.der |
| 140 | |
| 141 | rsa_pkcs8_2048_public.pem: server8.key |
| 142 | $(OPENSSL) rsa -in $< -outform PEM -pubout -out $@ |
| 143 | all_final += rsa_pkcs8_2048_public.pem |
| 144 | |
| 145 | rsa_pkcs8_2048_public.der: rsa_pkcs8_2048_public.pem |
| 146 | $(OPENSSL) rsa -pubin -in $< -outform DER -pubout -out $@ |
Ron Eldor | b006518 | 2017-10-16 12:40:27 +0300 | [diff] [blame] | 147 | all_final += rsa_pkcs8_2048_public.der |
Gilles Peskine | ea8d697 | 2017-11-28 17:30:52 +0100 | [diff] [blame] | 148 | |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 149 | ################################################################ |
| 150 | #### Generate various RSA keys |
| 151 | ################################################################ |
Gilles Peskine | bc70a18 | 2017-05-09 15:59:24 +0200 | [diff] [blame] | 152 | |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 153 | ### Password used for PKCS1-encoded encrypted RSA keys |
| 154 | keys_rsa_basic_pwd = testkey |
| 155 | |
| 156 | ### Password used for PKCS8-encoded encrypted RSA keys |
| 157 | keys_rsa_pkcs8_pwd = PolarSSLTest |
| 158 | |
| 159 | ### Basic 1024-, 2048- and 4096-bit unencrypted RSA keys from which |
| 160 | ### all other encrypted RSA keys are derived. |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 161 | rsa_pkcs1_1024_clear.pem: |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 162 | $(OPENSSL) genrsa -out $@ 1024 |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 163 | all_final += rsa_pkcs1_1024_clear.pem |
| 164 | rsa_pkcs1_2048_clear.pem: |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 165 | $(OPENSSL) genrsa -out $@ 2048 |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 166 | all_final += rsa_pkcs1_2048_clear.pem |
| 167 | rsa_pkcs1_4096_clear.pem: |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 168 | $(OPENSSL) genrsa -out $@ 4096 |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 169 | all_final += rsa_pkcs1_4096_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 170 | |
| 171 | ### |
| 172 | ### PKCS1-encoded, encrypted RSA keys |
| 173 | ### |
| 174 | |
| 175 | ### 1024-bit |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 176 | rsa_pkcs1_1024_des.pem: rsa_pkcs1_1024_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 177 | $(OPENSSL) rsa -des -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 178 | all_final += rsa_pkcs1_1024_des.pem |
| 179 | rsa_pkcs1_1024_3des.pem: rsa_pkcs1_1024_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 180 | $(OPENSSL) rsa -des3 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 181 | all_final += rsa_pkcs1_1024_3des.pem |
| 182 | rsa_pkcs1_1024_aes128.pem: rsa_pkcs1_1024_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 183 | $(OPENSSL) rsa -aes128 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 184 | all_final += rsa_pkcs1_1024_aes128.pem |
| 185 | rsa_pkcs1_1024_aes192.pem: rsa_pkcs1_1024_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 186 | $(OPENSSL) rsa -aes192 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 187 | all_final += rsa_pkcs1_1024_aes192.pem |
| 188 | rsa_pkcs1_1024_aes256.pem: rsa_pkcs1_1024_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 189 | $(OPENSSL) rsa -aes256 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 190 | all_final += rsa_pkcs1_1024_aes256.pem |
| 191 | keys_rsa_enc_basic_1024: rsa_pkcs1_1024_des.pem rsa_pkcs1_1024_3des.pem rsa_pkcs1_1024_aes128.pem rsa_pkcs1_1024_aes192.pem rsa_pkcs1_1024_aes256.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 192 | |
| 193 | # 2048-bit |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 194 | rsa_pkcs1_2048_des.pem: rsa_pkcs1_2048_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 195 | $(OPENSSL) rsa -des -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 196 | all_final += rsa_pkcs1_2048_des.pem |
| 197 | rsa_pkcs1_2048_3des.pem: rsa_pkcs1_2048_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 198 | $(OPENSSL) rsa -des3 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 199 | all_final += rsa_pkcs1_2048_3des.pem |
| 200 | rsa_pkcs1_2048_aes128.pem: rsa_pkcs1_2048_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 201 | $(OPENSSL) rsa -aes128 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 202 | all_final += rsa_pkcs1_2048_aes128.pem |
| 203 | rsa_pkcs1_2048_aes192.pem: rsa_pkcs1_2048_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 204 | $(OPENSSL) rsa -aes192 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 205 | all_final += rsa_pkcs1_2048_aes192.pem |
| 206 | rsa_pkcs1_2048_aes256.pem: rsa_pkcs1_2048_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 207 | $(OPENSSL) rsa -aes256 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 208 | all_final += rsa_pkcs1_2048_aes256.pem |
| 209 | keys_rsa_enc_basic_2048: rsa_pkcs1_2048_des.pem rsa_pkcs1_2048_3des.pem rsa_pkcs1_2048_aes128.pem rsa_pkcs1_2048_aes192.pem rsa_pkcs1_2048_aes256.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 210 | |
| 211 | # 4096-bit |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 212 | rsa_pkcs1_4096_des.pem: rsa_pkcs1_4096_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 213 | $(OPENSSL) rsa -des -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 214 | all_final += rsa_pkcs1_4096_des.pem |
| 215 | rsa_pkcs1_4096_3des.pem: rsa_pkcs1_4096_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 216 | $(OPENSSL) rsa -des3 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 217 | all_final += rsa_pkcs1_4096_3des.pem |
| 218 | rsa_pkcs1_4096_aes128.pem: rsa_pkcs1_4096_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 219 | $(OPENSSL) rsa -aes128 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 220 | all_final += rsa_pkcs1_4096_aes128.pem |
| 221 | rsa_pkcs1_4096_aes192.pem: rsa_pkcs1_4096_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 222 | $(OPENSSL) rsa -aes192 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 223 | all_final += rsa_pkcs1_4096_aes192.pem |
| 224 | rsa_pkcs1_4096_aes256.pem: rsa_pkcs1_4096_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 225 | $(OPENSSL) rsa -aes256 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 226 | all_final += rsa_pkcs1_4096_aes256.pem |
| 227 | keys_rsa_enc_basic_4096: rsa_pkcs1_4096_des.pem rsa_pkcs1_4096_3des.pem rsa_pkcs1_4096_aes128.pem rsa_pkcs1_4096_aes192.pem rsa_pkcs1_4096_aes256.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 228 | |
| 229 | ### |
| 230 | ### PKCS8-v1 encoded, encrypted RSA keys |
| 231 | ### |
| 232 | |
| 233 | ### 1024-bit |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 234 | rsa_pkcs8_pbe_sha1_1024_3des.der: rsa_pkcs1_1024_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 235 | $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-3DES |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 236 | all_final += rsa_pkcs8_pbe_sha1_1024_3des.der |
| 237 | rsa_pkcs8_pbe_sha1_1024_3des.pem: rsa_pkcs1_1024_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 238 | $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-3DES |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 239 | all_final += rsa_pkcs8_pbe_sha1_1024_3des.pem |
| 240 | keys_rsa_enc_pkcs8_v1_1024_3des: rsa_pkcs8_pbe_sha1_1024_3des.pem rsa_pkcs8_pbe_sha1_1024_3des.der |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 241 | |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 242 | rsa_pkcs8_pbe_sha1_1024_2des.der: rsa_pkcs1_1024_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 243 | $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-2DES |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 244 | all_final += rsa_pkcs8_pbe_sha1_1024_2des.der |
| 245 | rsa_pkcs8_pbe_sha1_1024_2des.pem: rsa_pkcs1_1024_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 246 | $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-2DES |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 247 | all_final += rsa_pkcs8_pbe_sha1_1024_2des.pem |
| 248 | keys_rsa_enc_pkcs8_v1_1024_2des: rsa_pkcs8_pbe_sha1_1024_2des.pem rsa_pkcs8_pbe_sha1_1024_2des.der |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 249 | |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 250 | rsa_pkcs8_pbe_sha1_1024_rc4_128.der: rsa_pkcs1_1024_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 251 | $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-RC4-128 |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 252 | all_final += rsa_pkcs8_pbe_sha1_1024_rc4_128.der |
| 253 | rsa_pkcs8_pbe_sha1_1024_rc4_128.pem: rsa_pkcs1_1024_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 254 | $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-RC4-128 |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 255 | all_final += rsa_pkcs8_pbe_sha1_1024_rc4_128.pem |
| 256 | keys_rsa_enc_pkcs8_v1_1024_rc4_128: rsa_pkcs8_pbe_sha1_1024_rc4_128.pem rsa_pkcs8_pbe_sha1_1024_rc4_128.der |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 257 | |
| 258 | keys_rsa_enc_pkcs8_v1_1024: keys_rsa_enc_pkcs8_v1_1024_3des keys_rsa_enc_pkcs8_v1_1024_2des keys_rsa_enc_pkcs8_v1_1024_rc4_128 |
| 259 | |
| 260 | ### 2048-bit |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 261 | rsa_pkcs8_pbe_sha1_2048_3des.der: rsa_pkcs1_2048_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 262 | $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-3DES |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 263 | all_final += rsa_pkcs8_pbe_sha1_2048_3des.der |
| 264 | rsa_pkcs8_pbe_sha1_2048_3des.pem: rsa_pkcs1_2048_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 265 | $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-3DES |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 266 | all_final += rsa_pkcs8_pbe_sha1_2048_3des.pem |
| 267 | keys_rsa_enc_pkcs8_v1_2048_3des: rsa_pkcs8_pbe_sha1_2048_3des.pem rsa_pkcs8_pbe_sha1_2048_3des.der |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 268 | |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 269 | rsa_pkcs8_pbe_sha1_2048_2des.der: rsa_pkcs1_2048_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 270 | $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-2DES |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 271 | all_final += rsa_pkcs8_pbe_sha1_2048_2des.der |
| 272 | rsa_pkcs8_pbe_sha1_2048_2des.pem: rsa_pkcs1_2048_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 273 | $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-2DES |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 274 | all_final += rsa_pkcs8_pbe_sha1_2048_2des.pem |
| 275 | keys_rsa_enc_pkcs8_v1_2048_2des: rsa_pkcs8_pbe_sha1_2048_2des.pem rsa_pkcs8_pbe_sha1_2048_2des.der |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 276 | |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 277 | rsa_pkcs8_pbe_sha1_2048_rc4_128.der: rsa_pkcs1_2048_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 278 | $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-RC4-128 |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 279 | all_final += rsa_pkcs8_pbe_sha1_2048_rc4_128.der |
| 280 | rsa_pkcs8_pbe_sha1_2048_rc4_128.pem: rsa_pkcs1_2048_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 281 | $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-RC4-128 |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 282 | all_final += rsa_pkcs8_pbe_sha1_2048_rc4_128.pem |
| 283 | keys_rsa_enc_pkcs8_v1_2048_rc4_128: rsa_pkcs8_pbe_sha1_2048_rc4_128.pem rsa_pkcs8_pbe_sha1_2048_rc4_128.der |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 284 | |
| 285 | keys_rsa_enc_pkcs8_v1_2048: keys_rsa_enc_pkcs8_v1_2048_3des keys_rsa_enc_pkcs8_v1_2048_2des keys_rsa_enc_pkcs8_v1_2048_rc4_128 |
| 286 | |
| 287 | ### 4096-bit |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 288 | rsa_pkcs8_pbe_sha1_4096_3des.der: rsa_pkcs1_4096_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 289 | $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-3DES |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 290 | all_final += rsa_pkcs8_pbe_sha1_4096_3des.der |
| 291 | rsa_pkcs8_pbe_sha1_4096_3des.pem: rsa_pkcs1_4096_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 292 | $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-3DES |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 293 | all_final += rsa_pkcs8_pbe_sha1_4096_3des.pem |
| 294 | keys_rsa_enc_pkcs8_v1_4096_3des: rsa_pkcs8_pbe_sha1_4096_3des.pem rsa_pkcs8_pbe_sha1_4096_3des.der |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 295 | |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 296 | rsa_pkcs8_pbe_sha1_4096_2des.der: rsa_pkcs1_4096_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 297 | $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-2DES |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 298 | all_final += rsa_pkcs8_pbe_sha1_4096_2des.der |
| 299 | rsa_pkcs8_pbe_sha1_4096_2des.pem: rsa_pkcs1_4096_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 300 | $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-2DES |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 301 | all_final += rsa_pkcs8_pbe_sha1_4096_2des.pem |
| 302 | keys_rsa_enc_pkcs8_v1_4096_2des: rsa_pkcs8_pbe_sha1_4096_2des.pem rsa_pkcs8_pbe_sha1_4096_2des.der |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 303 | |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 304 | rsa_pkcs8_pbe_sha1_4096_rc4_128.der: rsa_pkcs1_4096_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 305 | $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-RC4-128 |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 306 | all_final += rsa_pkcs8_pbe_sha1_4096_rc4_128.der |
| 307 | rsa_pkcs8_pbe_sha1_4096_rc4_128.pem: rsa_pkcs1_4096_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 308 | $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-RC4-128 |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 309 | all_final += rsa_pkcs8_pbe_sha1_4096_rc4_128.pem |
| 310 | keys_rsa_enc_pkcs8_v1_4096_rc4_128: rsa_pkcs8_pbe_sha1_4096_rc4_128.pem rsa_pkcs8_pbe_sha1_4096_rc4_128.der |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 311 | |
| 312 | keys_rsa_enc_pkcs8_v1_4096: keys_rsa_enc_pkcs8_v1_4096_3des keys_rsa_enc_pkcs8_v1_4096_2des keys_rsa_enc_pkcs8_v1_4096_rc4_128 |
| 313 | |
| 314 | ### |
Antonio Quartulli | f476b9d | 2018-02-01 13:54:13 +0800 | [diff] [blame] | 315 | ### PKCS8-v2 encoded, encrypted RSA keys, no PRF specified (default for OpenSSL1.0: hmacWithSHA1) |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 316 | ### |
| 317 | |
| 318 | ### 1024-bit |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 319 | rsa_pkcs8_pbes2_pbkdf2_1024_3des.der: rsa_pkcs1_1024_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 320 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 321 | all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des.der |
| 322 | rsa_pkcs8_pbes2_pbkdf2_1024_3des.pem: rsa_pkcs1_1024_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 323 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 324 | all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des.pem |
| 325 | keys_rsa_enc_pkcs8_v2_1024_3des: rsa_pkcs8_pbes2_pbkdf2_1024_3des.der rsa_pkcs8_pbes2_pbkdf2_1024_3des.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 326 | |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 327 | rsa_pkcs8_pbes2_pbkdf2_1024_des.der: rsa_pkcs1_1024_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 328 | $(OPENSSL) pkcs8 -topk8 -v2 des -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 329 | all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des.der |
| 330 | rsa_pkcs8_pbes2_pbkdf2_1024_des.pem: rsa_pkcs1_1024_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 331 | $(OPENSSL) pkcs8 -topk8 -v2 des -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 332 | all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des.pem |
| 333 | keys_rsa_enc_pkcs8_v2_1024_des: rsa_pkcs8_pbes2_pbkdf2_1024_des.der rsa_pkcs8_pbes2_pbkdf2_1024_des.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 334 | |
| 335 | keys_rsa_enc_pkcs8_v2_1024: keys_rsa_enc_pkcs8_v2_1024_3des keys_rsa_enc_pkcs8_v2_1024_des |
| 336 | |
| 337 | ### 2048-bit |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 338 | rsa_pkcs8_pbes2_pbkdf2_2048_3des.der: rsa_pkcs1_2048_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 339 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 340 | all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des.der |
| 341 | rsa_pkcs8_pbes2_pbkdf2_2048_3des.pem: rsa_pkcs1_2048_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 342 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 343 | all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des.pem |
| 344 | keys_rsa_enc_pkcs8_v2_2048_3des: rsa_pkcs8_pbes2_pbkdf2_2048_3des.der rsa_pkcs8_pbes2_pbkdf2_2048_3des.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 345 | |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 346 | rsa_pkcs8_pbes2_pbkdf2_2048_des.der: rsa_pkcs1_2048_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 347 | $(OPENSSL) pkcs8 -topk8 -v2 des -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 348 | all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des.der |
| 349 | rsa_pkcs8_pbes2_pbkdf2_2048_des.pem: rsa_pkcs1_2048_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 350 | $(OPENSSL) pkcs8 -topk8 -v2 des -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 351 | all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des.pem |
| 352 | keys_rsa_enc_pkcs8_v2_2048_des: rsa_pkcs8_pbes2_pbkdf2_2048_des.der rsa_pkcs8_pbes2_pbkdf2_2048_des.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 353 | |
| 354 | keys_rsa_enc_pkcs8_v2_2048: keys_rsa_enc_pkcs8_v2_2048_3des keys_rsa_enc_pkcs8_v2_2048_des |
| 355 | |
| 356 | ### 4096-bit |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 357 | rsa_pkcs8_pbes2_pbkdf2_4096_3des.der: rsa_pkcs1_4096_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 358 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 359 | all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des.der |
| 360 | rsa_pkcs8_pbes2_pbkdf2_4096_3des.pem: rsa_pkcs1_4096_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 361 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 362 | all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des.pem |
| 363 | keys_rsa_enc_pkcs8_v2_4096_3des: rsa_pkcs8_pbes2_pbkdf2_4096_3des.der rsa_pkcs8_pbes2_pbkdf2_4096_3des.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 364 | |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 365 | rsa_pkcs8_pbes2_pbkdf2_4096_des.der: rsa_pkcs1_4096_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 366 | $(OPENSSL) pkcs8 -topk8 -v2 des -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 367 | all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des.der |
| 368 | rsa_pkcs8_pbes2_pbkdf2_4096_des.pem: rsa_pkcs1_4096_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 369 | $(OPENSSL) pkcs8 -topk8 -v2 des -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 370 | all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des.pem |
| 371 | keys_rsa_enc_pkcs8_v2_4096_des: rsa_pkcs8_pbes2_pbkdf2_4096_des.der rsa_pkcs8_pbes2_pbkdf2_4096_des.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 372 | |
| 373 | keys_rsa_enc_pkcs8_v2_4096: keys_rsa_enc_pkcs8_v2_4096_3des keys_rsa_enc_pkcs8_v2_4096_des |
| 374 | |
| 375 | ### |
Antonio Quartulli | f476b9d | 2018-02-01 13:54:13 +0800 | [diff] [blame] | 376 | ### PKCS8-v2 encoded, encrypted RSA keys, PRF hmacWithSHA224 |
| 377 | ### |
| 378 | |
| 379 | ### 1024-bit |
| 380 | rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha224.der: rsa_pkcs1_1024_clear.pem |
| 381 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA224 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 382 | all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha224.der |
| 383 | rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha224.pem: rsa_pkcs1_1024_clear.pem |
| 384 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA224 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 385 | all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha224.pem |
| 386 | keys_rsa_enc_pkcs8_v2_1024_3des_sha224: rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha224.der rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha224.pem |
| 387 | |
| 388 | rsa_pkcs8_pbes2_pbkdf2_1024_des_sha224.der: rsa_pkcs1_1024_clear.pem |
| 389 | $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA224 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 390 | all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha224.der |
| 391 | rsa_pkcs8_pbes2_pbkdf2_1024_des_sha224.pem: rsa_pkcs1_1024_clear.pem |
| 392 | $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA224 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 393 | all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha224.pem |
| 394 | keys_rsa_enc_pkcs8_v2_1024_des_sha224: rsa_pkcs8_pbes2_pbkdf2_1024_des_sha224.der rsa_pkcs8_pbes2_pbkdf2_1024_des_sha224.pem |
| 395 | |
| 396 | keys_rsa_enc_pkcs8_v2_1024_sha224: keys_rsa_enc_pkcs8_v2_1024_3des_sha224 keys_rsa_enc_pkcs8_v2_1024_des_sha224 |
| 397 | |
| 398 | ### 2048-bit |
| 399 | rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha224.der: rsa_pkcs1_2048_clear.pem |
| 400 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA224 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 401 | all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha224.der |
| 402 | rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha224.pem: rsa_pkcs1_2048_clear.pem |
| 403 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA224 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 404 | all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha224.pem |
| 405 | keys_rsa_enc_pkcs8_v2_2048_3des_sha224: rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha224.der rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha224.pem |
| 406 | |
| 407 | rsa_pkcs8_pbes2_pbkdf2_2048_des_sha224.der: rsa_pkcs1_2048_clear.pem |
| 408 | $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA224 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 409 | all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha224.der |
| 410 | rsa_pkcs8_pbes2_pbkdf2_2048_des_sha224.pem: rsa_pkcs1_2048_clear.pem |
| 411 | $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA224 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 412 | all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha224.pem |
| 413 | keys_rsa_enc_pkcs8_v2_2048_des_sha224: rsa_pkcs8_pbes2_pbkdf2_2048_des_sha224.der rsa_pkcs8_pbes2_pbkdf2_2048_des_sha224.pem |
| 414 | |
| 415 | keys_rsa_enc_pkcs8_v2_2048_sha224: keys_rsa_enc_pkcs8_v2_2048_3des_sha224 keys_rsa_enc_pkcs8_v2_2048_des_sha224 |
| 416 | |
| 417 | ### 4096-bit |
| 418 | rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha224.der: rsa_pkcs1_4096_clear.pem |
| 419 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA224 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 420 | all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha224.der |
| 421 | rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha224.pem: rsa_pkcs1_4096_clear.pem |
| 422 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA224 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 423 | all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha224.pem |
| 424 | keys_rsa_enc_pkcs8_v2_4096_3des_sha224: rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha224.der rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha224.pem |
| 425 | |
| 426 | rsa_pkcs8_pbes2_pbkdf2_4096_des_sha224.der: rsa_pkcs1_4096_clear.pem |
| 427 | $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA224 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 428 | all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha224.der |
| 429 | rsa_pkcs8_pbes2_pbkdf2_4096_des_sha224.pem: rsa_pkcs1_4096_clear.pem |
| 430 | $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA224 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 431 | all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha224.pem |
| 432 | keys_rsa_enc_pkcs8_v2_4096_des_sha224: rsa_pkcs8_pbes2_pbkdf2_4096_des_sha224.der rsa_pkcs8_pbes2_pbkdf2_4096_des_sha224.pem |
| 433 | |
| 434 | keys_rsa_enc_pkcs8_v2_4096_sha224: keys_rsa_enc_pkcs8_v2_4096_3des_sha224 keys_rsa_enc_pkcs8_v2_4096_des_sha224 |
| 435 | |
| 436 | ### |
| 437 | ### PKCS8-v2 encoded, encrypted RSA keys, PRF hmacWithSHA256 |
| 438 | ### |
| 439 | |
| 440 | ### 1024-bit |
| 441 | rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha256.der: rsa_pkcs1_1024_clear.pem |
| 442 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA256 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 443 | all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha256.der |
| 444 | rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha256.pem: rsa_pkcs1_1024_clear.pem |
| 445 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA256 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 446 | all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha256.pem |
| 447 | keys_rsa_enc_pkcs8_v2_1024_3des_sha256: rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha256.der rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha256.pem |
| 448 | |
| 449 | rsa_pkcs8_pbes2_pbkdf2_1024_des_sha256.der: rsa_pkcs1_1024_clear.pem |
| 450 | $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA256 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 451 | all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha256.der |
| 452 | rsa_pkcs8_pbes2_pbkdf2_1024_des_sha256.pem: rsa_pkcs1_1024_clear.pem |
| 453 | $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA256 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 454 | all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha256.pem |
| 455 | keys_rsa_enc_pkcs8_v2_1024_des_sha256: rsa_pkcs8_pbes2_pbkdf2_1024_des_sha256.der rsa_pkcs8_pbes2_pbkdf2_1024_des_sha256.pem |
| 456 | |
| 457 | keys_rsa_enc_pkcs8_v2_1024_sha256: keys_rsa_enc_pkcs8_v2_1024_3des_sha256 keys_rsa_enc_pkcs8_v2_1024_des_sha256 |
| 458 | |
| 459 | ### 2048-bit |
| 460 | rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha256.der: rsa_pkcs1_2048_clear.pem |
| 461 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA256 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 462 | all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha256.der |
| 463 | rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha256.pem: rsa_pkcs1_2048_clear.pem |
| 464 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA256 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 465 | all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha256.pem |
| 466 | keys_rsa_enc_pkcs8_v2_2048_3des_sha256: rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha256.der rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha256.pem |
| 467 | |
| 468 | rsa_pkcs8_pbes2_pbkdf2_2048_des_sha256.der: rsa_pkcs1_2048_clear.pem |
| 469 | $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA256 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 470 | all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha256.der |
| 471 | rsa_pkcs8_pbes2_pbkdf2_2048_des_sha256.pem: rsa_pkcs1_2048_clear.pem |
| 472 | $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA256 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 473 | all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha256.pem |
| 474 | keys_rsa_enc_pkcs8_v2_2048_des_sha256: rsa_pkcs8_pbes2_pbkdf2_2048_des_sha256.der rsa_pkcs8_pbes2_pbkdf2_2048_des_sha256.pem |
| 475 | |
| 476 | keys_rsa_enc_pkcs8_v2_2048_sha256: keys_rsa_enc_pkcs8_v2_2048_3des_sha256 keys_rsa_enc_pkcs8_v2_2048_des_sha256 |
| 477 | |
| 478 | ### 4096-bit |
| 479 | rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha256.der: rsa_pkcs1_4096_clear.pem |
| 480 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA256 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 481 | all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha256.der |
| 482 | rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha256.pem: rsa_pkcs1_4096_clear.pem |
| 483 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA256 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 484 | all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha256.pem |
| 485 | keys_rsa_enc_pkcs8_v2_4096_3des_sha256: rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha256.der rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha256.pem |
| 486 | |
| 487 | rsa_pkcs8_pbes2_pbkdf2_4096_des_sha256.der: rsa_pkcs1_4096_clear.pem |
| 488 | $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA256 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 489 | all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha256.der |
| 490 | rsa_pkcs8_pbes2_pbkdf2_4096_des_sha256.pem: rsa_pkcs1_4096_clear.pem |
| 491 | $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA256 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 492 | all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha256.pem |
| 493 | keys_rsa_enc_pkcs8_v2_4096_des_sha256: rsa_pkcs8_pbes2_pbkdf2_4096_des_sha256.der rsa_pkcs8_pbes2_pbkdf2_4096_des_sha256.pem |
| 494 | |
| 495 | keys_rsa_enc_pkcs8_v2_4096_sha256: keys_rsa_enc_pkcs8_v2_4096_3des_sha256 keys_rsa_enc_pkcs8_v2_4096_des_sha256 |
| 496 | |
| 497 | ### |
| 498 | ### PKCS8-v2 encoded, encrypted RSA keys, PRF hmacWithSHA384 |
| 499 | ### |
| 500 | |
| 501 | ### 1024-bit |
| 502 | rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha384.der: rsa_pkcs1_1024_clear.pem |
| 503 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA384 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 504 | all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha384.der |
| 505 | rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha384.pem: rsa_pkcs1_1024_clear.pem |
| 506 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA384 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 507 | all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha384.pem |
| 508 | keys_rsa_enc_pkcs8_v2_1024_3des_sha384: rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha384.der rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha384.pem |
| 509 | |
| 510 | rsa_pkcs8_pbes2_pbkdf2_1024_des_sha384.der: rsa_pkcs1_1024_clear.pem |
| 511 | $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA384 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 512 | all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha384.der |
| 513 | rsa_pkcs8_pbes2_pbkdf2_1024_des_sha384.pem: rsa_pkcs1_1024_clear.pem |
| 514 | $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA384 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 515 | all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha384.pem |
| 516 | keys_rsa_enc_pkcs8_v2_1024_des_sha384: rsa_pkcs8_pbes2_pbkdf2_1024_des_sha384.der rsa_pkcs8_pbes2_pbkdf2_1024_des_sha384.pem |
| 517 | |
| 518 | keys_rsa_enc_pkcs8_v2_1024_sha384: keys_rsa_enc_pkcs8_v2_1024_3des_sha384 keys_rsa_enc_pkcs8_v2_1024_des_sha384 |
| 519 | |
| 520 | ### 2048-bit |
| 521 | rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha384.der: rsa_pkcs1_2048_clear.pem |
| 522 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA384 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 523 | all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha384.der |
| 524 | rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha384.pem: rsa_pkcs1_2048_clear.pem |
| 525 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA384 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 526 | all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha384.pem |
| 527 | keys_rsa_enc_pkcs8_v2_2048_3des_sha384: rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha384.der rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha384.pem |
| 528 | |
| 529 | rsa_pkcs8_pbes2_pbkdf2_2048_des_sha384.der: rsa_pkcs1_2048_clear.pem |
| 530 | $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA384 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 531 | all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha384.der |
| 532 | rsa_pkcs8_pbes2_pbkdf2_2048_des_sha384.pem: rsa_pkcs1_2048_clear.pem |
| 533 | $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA384 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 534 | all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha384.pem |
| 535 | keys_rsa_enc_pkcs8_v2_2048_des_sha384: rsa_pkcs8_pbes2_pbkdf2_2048_des_sha384.der rsa_pkcs8_pbes2_pbkdf2_2048_des_sha384.pem |
| 536 | |
| 537 | keys_rsa_enc_pkcs8_v2_2048_sha384: keys_rsa_enc_pkcs8_v2_2048_3des_sha384 keys_rsa_enc_pkcs8_v2_2048_des_sha384 |
| 538 | |
| 539 | ### 4096-bit |
| 540 | rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha384.der: rsa_pkcs1_4096_clear.pem |
| 541 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA384 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 542 | all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha384.der |
| 543 | rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha384.pem: rsa_pkcs1_4096_clear.pem |
| 544 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA384 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 545 | all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha384.pem |
| 546 | keys_rsa_enc_pkcs8_v2_4096_3des_sha384: rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha384.der rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha384.pem |
| 547 | |
| 548 | rsa_pkcs8_pbes2_pbkdf2_4096_des_sha384.der: rsa_pkcs1_4096_clear.pem |
| 549 | $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA384 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 550 | all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha384.der |
| 551 | rsa_pkcs8_pbes2_pbkdf2_4096_des_sha384.pem: rsa_pkcs1_4096_clear.pem |
| 552 | $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA384 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 553 | all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha384.pem |
| 554 | keys_rsa_enc_pkcs8_v2_4096_des_sha384: rsa_pkcs8_pbes2_pbkdf2_4096_des_sha384.der rsa_pkcs8_pbes2_pbkdf2_4096_des_sha384.pem |
| 555 | |
| 556 | keys_rsa_enc_pkcs8_v2_4096_sha384: keys_rsa_enc_pkcs8_v2_4096_3des_sha384 keys_rsa_enc_pkcs8_v2_4096_des_sha384 |
| 557 | |
| 558 | ### |
| 559 | ### PKCS8-v2 encoded, encrypted RSA keys, PRF hmacWithSHA512 |
| 560 | ### |
| 561 | |
| 562 | ### 1024-bit |
| 563 | rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha512.der: rsa_pkcs1_1024_clear.pem |
| 564 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA512 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 565 | all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha512.der |
| 566 | rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha512.pem: rsa_pkcs1_1024_clear.pem |
| 567 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA512 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 568 | all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha512.pem |
| 569 | keys_rsa_enc_pkcs8_v2_1024_3des_sha512: rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha512.der rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha512.pem |
| 570 | |
| 571 | rsa_pkcs8_pbes2_pbkdf2_1024_des_sha512.der: rsa_pkcs1_1024_clear.pem |
| 572 | $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA512 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 573 | all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha512.der |
| 574 | rsa_pkcs8_pbes2_pbkdf2_1024_des_sha512.pem: rsa_pkcs1_1024_clear.pem |
| 575 | $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA512 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 576 | all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha512.pem |
| 577 | keys_rsa_enc_pkcs8_v2_1024_des_sha512: rsa_pkcs8_pbes2_pbkdf2_1024_des_sha512.der rsa_pkcs8_pbes2_pbkdf2_1024_des_sha512.pem |
| 578 | |
| 579 | keys_rsa_enc_pkcs8_v2_1024_sha512: keys_rsa_enc_pkcs8_v2_1024_3des_sha512 keys_rsa_enc_pkcs8_v2_1024_des_sha512 |
| 580 | |
| 581 | ### 2048-bit |
| 582 | rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha512.der: rsa_pkcs1_2048_clear.pem |
| 583 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA512 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 584 | all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha512.der |
| 585 | rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha512.pem: rsa_pkcs1_2048_clear.pem |
| 586 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA512 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 587 | all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha512.pem |
| 588 | keys_rsa_enc_pkcs8_v2_2048_3des_sha512: rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha512.der rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha512.pem |
| 589 | |
| 590 | rsa_pkcs8_pbes2_pbkdf2_2048_des_sha512.der: rsa_pkcs1_2048_clear.pem |
| 591 | $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA512 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 592 | all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha512.der |
| 593 | rsa_pkcs8_pbes2_pbkdf2_2048_des_sha512.pem: rsa_pkcs1_2048_clear.pem |
| 594 | $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA512 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 595 | all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha512.pem |
| 596 | keys_rsa_enc_pkcs8_v2_2048_des_sha512: rsa_pkcs8_pbes2_pbkdf2_2048_des_sha512.der rsa_pkcs8_pbes2_pbkdf2_2048_des_sha512.pem |
| 597 | |
| 598 | keys_rsa_enc_pkcs8_v2_2048_sha512: keys_rsa_enc_pkcs8_v2_2048_3des_sha512 keys_rsa_enc_pkcs8_v2_2048_des_sha512 |
| 599 | |
| 600 | ### 4096-bit |
| 601 | rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha512.der: rsa_pkcs1_4096_clear.pem |
| 602 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA512 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 603 | all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha512.der |
| 604 | rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha512.pem: rsa_pkcs1_4096_clear.pem |
| 605 | $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA512 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 606 | all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha512.pem |
| 607 | keys_rsa_enc_pkcs8_v2_4096_3des_sha512: rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha512.der rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha512.pem |
| 608 | |
| 609 | rsa_pkcs8_pbes2_pbkdf2_4096_des_sha512.der: rsa_pkcs1_4096_clear.pem |
| 610 | $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA512 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 611 | all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha512.der |
| 612 | rsa_pkcs8_pbes2_pbkdf2_4096_des_sha512.pem: rsa_pkcs1_4096_clear.pem |
| 613 | $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA512 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" |
| 614 | all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha512.pem |
| 615 | keys_rsa_enc_pkcs8_v2_4096_des_sha512: rsa_pkcs8_pbes2_pbkdf2_4096_des_sha512.der rsa_pkcs8_pbes2_pbkdf2_4096_des_sha512.pem |
| 616 | |
| 617 | keys_rsa_enc_pkcs8_v2_4096_sha512: keys_rsa_enc_pkcs8_v2_4096_3des_sha512 keys_rsa_enc_pkcs8_v2_4096_des_sha512 |
| 618 | |
| 619 | ### |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 620 | ### Rules to generate all RSA keys from a particular class |
| 621 | ### |
| 622 | |
| 623 | ### Generate basic unencrypted RSA keys |
Hanno Becker | 08a36dd | 2017-09-29 20:05:23 +0100 | [diff] [blame] | 624 | keys_rsa_unenc: rsa_pkcs1_1024_clear.pem rsa_pkcs1_2048_clear.pem rsa_pkcs1_4096_clear.pem |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 625 | |
| 626 | ### Generate PKCS1-encoded encrypted RSA keys |
| 627 | keys_rsa_enc_basic: keys_rsa_enc_basic_1024 keys_rsa_enc_basic_2048 keys_rsa_enc_basic_4096 |
| 628 | |
| 629 | ### Generate PKCS8-v1 encrypted RSA keys |
| 630 | keys_rsa_enc_pkcs8_v1: keys_rsa_enc_pkcs8_v1_1024 keys_rsa_enc_pkcs8_v1_2048 keys_rsa_enc_pkcs8_v1_4096 |
| 631 | |
| 632 | ### Generate PKCS8-v2 encrypted RSA keys |
Antonio Quartulli | f476b9d | 2018-02-01 13:54:13 +0800 | [diff] [blame] | 633 | keys_rsa_enc_pkcs8_v2: keys_rsa_enc_pkcs8_v2_1024 keys_rsa_enc_pkcs8_v2_2048 keys_rsa_enc_pkcs8_v2_4096 keys_rsa_enc_pkcs8_v2_1024_sha224 keys_rsa_enc_pkcs8_v2_2048_sha224 keys_rsa_enc_pkcs8_v2_4096_sha224 keys_rsa_enc_pkcs8_v2_1024_sha256 keys_rsa_enc_pkcs8_v2_2048_sha256 keys_rsa_enc_pkcs8_v2_4096_sha256 keys_rsa_enc_pkcs8_v2_1024_sha384 keys_rsa_enc_pkcs8_v2_2048_sha384 keys_rsa_enc_pkcs8_v2_4096_sha384 keys_rsa_enc_pkcs8_v2_1024_sha512 keys_rsa_enc_pkcs8_v2_2048_sha512 keys_rsa_enc_pkcs8_v2_4096_sha512 |
Hanno Becker | d16f612 | 2017-09-05 09:23:50 +0100 | [diff] [blame] | 634 | |
| 635 | ### Generate all RSA keys |
| 636 | keys_rsa_all: keys_rsa_unenc keys_rsa_enc_basic keys_rsa_enc_pkcs8_v1 keys_rsa_enc_pkcs8_v2 |
| 637 | |
Jethro Beekman | d2df936 | 2018-02-16 13:11:04 -0800 | [diff] [blame] | 638 | ################################################################ |
| 639 | #### Generate various EC keys |
| 640 | ################################################################ |
Gilles Peskine | ea8d697 | 2017-11-28 17:30:52 +0100 | [diff] [blame] | 641 | |
Jethro Beekman | d2df936 | 2018-02-16 13:11:04 -0800 | [diff] [blame] | 642 | ### |
| 643 | ### PKCS8 encoded |
| 644 | ### |
| 645 | |
| 646 | ec_prv.pk8.der: |
| 647 | $(OPENSSL) genpkey -algorithm EC -pkeyopt ec_paramgen_curve:prime192v1 -pkeyopt ec_param_enc:named_curve -out $@ -outform DER |
| 648 | all_final += ec_prv.pk8.der |
| 649 | |
| 650 | # ### Instructions for creating `ec_prv.pk8nopub.der`, |
| 651 | # ### `ec_prv.pk8nopubparam.der`, and `ec_prv.pk8param.der` by hand from |
| 652 | # ### `ec_prv.pk8.der`. |
| 653 | # |
| 654 | # These instructions assume you are familiar with ASN.1 DER encoding and can |
| 655 | # use a hex editor to manipulate DER. |
| 656 | # |
| 657 | # The relevant ASN.1 definitions for a PKCS#8 encoded Elliptic Curve key are: |
| 658 | # |
| 659 | # PrivateKeyInfo ::= SEQUENCE { |
| 660 | # version Version, |
| 661 | # privateKeyAlgorithm PrivateKeyAlgorithmIdentifier, |
| 662 | # privateKey PrivateKey, |
| 663 | # attributes [0] IMPLICIT Attributes OPTIONAL |
| 664 | # } |
| 665 | # |
| 666 | # AlgorithmIdentifier ::= SEQUENCE { |
| 667 | # algorithm OBJECT IDENTIFIER, |
| 668 | # parameters ANY DEFINED BY algorithm OPTIONAL |
| 669 | # } |
| 670 | # |
| 671 | # ECParameters ::= CHOICE { |
| 672 | # namedCurve OBJECT IDENTIFIER |
| 673 | # -- implicitCurve NULL |
| 674 | # -- specifiedCurve SpecifiedECDomain |
| 675 | # } |
| 676 | # |
| 677 | # ECPrivateKey ::= SEQUENCE { |
| 678 | # version INTEGER { ecPrivkeyVer1(1) } (ecPrivkeyVer1), |
| 679 | # privateKey OCTET STRING, |
| 680 | # parameters [0] ECParameters {{ NamedCurve }} OPTIONAL, |
| 681 | # publicKey [1] BIT STRING OPTIONAL |
| 682 | # } |
| 683 | # |
| 684 | # `ec_prv.pk8.der` as generatde above by OpenSSL should have the following |
| 685 | # fields: |
| 686 | # |
| 687 | # * privateKeyAlgorithm namedCurve |
| 688 | # * privateKey.parameters NOT PRESENT |
| 689 | # * privateKey.publicKey PRESENT |
| 690 | # * attributes NOT PRESENT |
| 691 | # |
| 692 | # # ec_prv.pk8nopub.der |
| 693 | # |
| 694 | # Take `ec_prv.pk8.der` and remove `privateKey.publicKey`. |
| 695 | # |
| 696 | # # ec_prv.pk8nopubparam.der |
| 697 | # |
| 698 | # Take `ec_prv.pk8nopub.der` and add `privateKey.parameters`, the same value as |
| 699 | # `privateKeyAlgorithm.namedCurve`. Don't forget to add the explicit tag. |
| 700 | # |
| 701 | # # ec_prv.pk8param.der |
| 702 | # |
| 703 | # Take `ec_prv.pk8.der` and add `privateKey.parameters`, the same value as |
| 704 | # `privateKeyAlgorithm.namedCurve`. Don't forget to add the explicit tag. |
| 705 | |
| 706 | ec_prv.pk8.pem: ec_prv.pk8.der |
| 707 | $(OPENSSL) pkey -in $< -inform DER -out $@ |
| 708 | all_final += ec_prv.pk8.pem |
| 709 | ec_prv.pk8nopub.pem: ec_prv.pk8nopub.der |
| 710 | $(OPENSSL) pkey -in $< -inform DER -out $@ |
| 711 | all_final += ec_prv.pk8nopub.pem |
| 712 | ec_prv.pk8nopubparam.pem: ec_prv.pk8nopubparam.der |
| 713 | $(OPENSSL) pkey -in $< -inform DER -out $@ |
| 714 | all_final += ec_prv.pk8nopubparam.pem |
| 715 | ec_prv.pk8param.pem: ec_prv.pk8param.der |
| 716 | $(OPENSSL) pkey -in $< -inform DER -out $@ |
| 717 | all_final += ec_prv.pk8param.pem |
Gilles Peskine | ea8d697 | 2017-11-28 17:30:52 +0100 | [diff] [blame] | 718 | |
| 719 | ################################################################ |
Hanno Becker | 50cb93a | 2018-10-08 17:15:28 +0100 | [diff] [blame^] | 720 | ### Generate CSRs for X.509 write test suite |
| 721 | ################################################################ |
| 722 | |
| 723 | server1.req.sha1: server1.key |
| 724 | $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1 |
| 725 | all_final += server1.req.sha1 |
| 726 | |
| 727 | server1.req.md4: server1.key |
| 728 | $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=MD4 |
| 729 | all_final += server1.req.md4 |
| 730 | |
| 731 | server1.req.md5: server1.key |
| 732 | $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=MD5 |
| 733 | all_final += server1.req.md5 |
| 734 | |
| 735 | server1.req.sha224: server1.key |
| 736 | $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA224 |
| 737 | all_final += server1.req.sha224 |
| 738 | |
| 739 | server1.req.sha256: server1.key |
| 740 | $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA256 |
| 741 | all_final += server1.req.sha256 |
| 742 | |
| 743 | server1.req.sha384: server1.key |
| 744 | $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA384 |
| 745 | all_final += server1.req.sha384 |
| 746 | |
| 747 | server1.req.sha512: server1.key |
| 748 | $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA512 |
| 749 | all_final += server1.req.sha512 |
| 750 | |
| 751 | server1.req.cert_type: server1.key |
| 752 | $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< ns_cert_type=ssl_server subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1 |
| 753 | all_final += server1.req.cert_type |
| 754 | |
| 755 | server1.req.key_usage: server1.key |
| 756 | $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< key_usage=digital_signature,non_repudiation,key_encipherment subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1 |
| 757 | all_final += server1.req.key_usage |
| 758 | |
| 759 | server1.req.ku-ct: server1.key |
| 760 | $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< key_usage=digital_signature,non_repudiation,key_encipherment ns_cert_type=ssl_server subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1 |
| 761 | all_final += server1.req.ku-ct |
| 762 | |
| 763 | ################################################################ |
Hanno Becker | 418a622 | 2017-09-14 07:51:28 +0100 | [diff] [blame] | 764 | ### Generate certificates for CRT write check tests |
Gilles Peskine | ea8d697 | 2017-11-28 17:30:52 +0100 | [diff] [blame] | 765 | ################################################################ |
| 766 | |
Hanno Becker | 418a622 | 2017-09-14 07:51:28 +0100 | [diff] [blame] | 767 | ### The test files use the Mbed TLS generated certificates server1*.crt, |
| 768 | ### but for comparison with OpenSSL also rules for OpenSSL-generated |
| 769 | ### certificates server1*.crt.openssl are offered. |
| 770 | ### |
| 771 | ### Known differences: |
| 772 | ### * OpenSSL encodes trailing zero-bits in bit-strings occurring in X.509 extension |
| 773 | ### as unused bits, while Mbed TLS doesn't. |
Gilles Peskine | f040a17 | 2017-05-05 18:56:12 +0200 | [diff] [blame] | 774 | |
Hanno Becker | 418a622 | 2017-09-14 07:51:28 +0100 | [diff] [blame] | 775 | test_ca_server1_db = test-ca.server1.db |
| 776 | test_ca_server1_serial = test-ca.server1.serial |
| 777 | test_ca_server1_config_file = test-ca.server1.opensslconf |
| 778 | |
Hanno Becker | 50cb93a | 2018-10-08 17:15:28 +0100 | [diff] [blame^] | 779 | # server1* |
Hanno Becker | 418a622 | 2017-09-14 07:51:28 +0100 | [diff] [blame] | 780 | |
Hanno Becker | 50cb93a | 2018-10-08 17:15:28 +0100 | [diff] [blame^] | 781 | server1.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa) |
| 782 | $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20110212144406 not_after=20210212144406 md=SHA1 version=3 output_file=$@ |
| 783 | server1.noauthid.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa) |
| 784 | $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20110212144406 not_after=20210212144406 md=SHA1 authority_identifier=0 version=3 output_file=$@ |
Hanno Becker | 418a622 | 2017-09-14 07:51:28 +0100 | [diff] [blame] | 785 | server1.der: server1.crt |
| 786 | $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@ |
| 787 | all_final += server1.crt server1.noauthid.crt server1.der |
| 788 | |
Hanno Becker | 50cb93a | 2018-10-08 17:15:28 +0100 | [diff] [blame^] | 789 | server1.key_usage.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa) |
| 790 | $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20110212144406 not_after=20210212144406 md=SHA1 key_usage=digital_signature,non_repudiation,key_encipherment version=3 output_file=$@ |
| 791 | server1.key_usage_noauthid.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa) |
| 792 | $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20110212144406 not_after=20210212144406 md=SHA1 key_usage=digital_signature,non_repudiation,key_encipherment authority_identifier=0 version=3 output_file=$@ |
Hanno Becker | 418a622 | 2017-09-14 07:51:28 +0100 | [diff] [blame] | 793 | server1.key_usage.der: server1.key_usage.crt |
| 794 | $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@ |
| 795 | all_final += server1.key_usage.crt server1.key_usage_noauthid.crt server1.key_usage.der |
| 796 | |
Hanno Becker | 50cb93a | 2018-10-08 17:15:28 +0100 | [diff] [blame^] | 797 | server1.cert_type.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa) |
| 798 | $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20110212144406 not_after=20210212144406 md=SHA1 ns_cert_type=ssl_server version=3 output_file=$@ |
| 799 | server1.cert_type_noauthid.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa) |
| 800 | $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20110212144406 not_after=20210212144406 md=SHA1 ns_cert_type=ssl_server authority_identifier=0 version=3 output_file=$@ |
Hanno Becker | 418a622 | 2017-09-14 07:51:28 +0100 | [diff] [blame] | 801 | server1.cert_type.der: server1.cert_type.crt |
| 802 | $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@ |
| 803 | all_final += server1.cert_type.crt server1.cert_type_noauthid.crt server1.cert_type.der |
| 804 | |
Hanno Becker | 50cb93a | 2018-10-08 17:15:28 +0100 | [diff] [blame^] | 805 | server1.v1.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa) |
| 806 | $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20110212144406 not_after=20210212144406 md=SHA1 version=1 output_file=$@ |
Hanno Becker | 418a622 | 2017-09-14 07:51:28 +0100 | [diff] [blame] | 807 | server1.v1.der: server1.v1.crt |
| 808 | $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@ |
| 809 | all_final += server1.v1.crt server1.v1.der |
| 810 | |
| 811 | # OpenSSL-generated certificates for comparison |
Hanno Becker | 81535d0 | 2017-09-13 15:39:59 +0100 | [diff] [blame] | 812 | # Also provide certificates in DER format to allow |
Hanno Becker | 418a622 | 2017-09-14 07:51:28 +0100 | [diff] [blame] | 813 | # direct binary comparison using e.g. dumpasn1 |
Hanno Becker | 50cb93a | 2018-10-08 17:15:28 +0100 | [diff] [blame^] | 814 | server1.crt.openssl server1.key_usage.crt.openssl server1.cert_type.crt.openssl: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa) $(test_ca_server1_config_file) |
Hanno Becker | 418a622 | 2017-09-14 07:51:28 +0100 | [diff] [blame] | 815 | echo "01" > $(test_ca_server1_serial) |
| 816 | rm -f $(test_ca_server1_db) |
| 817 | touch $(test_ca_server1_db) |
Hanno Becker | 50cb93a | 2018-10-08 17:15:28 +0100 | [diff] [blame^] | 818 | $(OPENSSL) ca -batch -passin "pass:$(test_ca_pwd_rsa)" -config $(test_ca_server1_config_file) -in server1.req.sha256 -extensions v3_ext -extfile $@.v3_ext -out $@ |
Hanno Becker | 418a622 | 2017-09-14 07:51:28 +0100 | [diff] [blame] | 819 | server1.der.openssl: server1.crt.openssl |
| 820 | $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@ |
| 821 | server1.key_usage.der.openssl: server1.key_usage.crt.openssl |
| 822 | $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@ |
| 823 | server1.cert_type.der.openssl: server1.cert_type.crt.openssl |
| 824 | $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@ |
| 825 | |
Hanno Becker | 50cb93a | 2018-10-08 17:15:28 +0100 | [diff] [blame^] | 826 | server1.v1.crt.openssl: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa) $(test_ca_server1_config_file) |
Hanno Becker | 418a622 | 2017-09-14 07:51:28 +0100 | [diff] [blame] | 827 | echo "01" > $(test_ca_server1_serial) |
| 828 | rm -f $(test_ca_server1_db) |
| 829 | touch $(test_ca_server1_db) |
Hanno Becker | 50cb93a | 2018-10-08 17:15:28 +0100 | [diff] [blame^] | 830 | $(OPENSSL) ca -batch -passin "pass:$(test_ca_pwd_rsa)" -config $(test_ca_server1_config_file) -in server1.req.sha256 -out $@ |
Hanno Becker | 418a622 | 2017-09-14 07:51:28 +0100 | [diff] [blame] | 831 | server1.v1.der.openssl: server1.v1.crt.openssl |
| 832 | $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@ |
| 833 | |
Hanno Becker | 50cb93a | 2018-10-08 17:15:28 +0100 | [diff] [blame^] | 834 | server1_all: server1.crt server1.noauthid.crt server1.crt.openssl server1.v1.crt server1.v1.crt.openssl server1.key_usage.crt server1.key_usage_noauthid.crt server1.key_usage.crt.openssl server1.cert_type.crt server1.cert_type_noauthid.crt server1.cert_type.crt.openssl server1.der server1.der.openssl server1.v1.der server1.v1.der.openssl server1.key_usage.der server1.key_usage.der.openssl server1.cert_type.der server1.cert_type.der.openssl |
Manuel Pégourié-Gonnard | c10afdb | 2017-06-29 09:48:08 +0200 | [diff] [blame] | 835 | |
| 836 | |
Gilles Peskine | fd14bca | 2017-05-11 17:57:22 +0200 | [diff] [blame] | 837 | |
| 838 | ################################################################ |
| 839 | #### Meta targets |
| 840 | ################################################################ |
| 841 | |
Gilles Peskine | f040a17 | 2017-05-05 18:56:12 +0200 | [diff] [blame] | 842 | all_final: $(all_final) |
| 843 | all: $(all_intermediate) $(all_final) |
| 844 | |
Gilles Peskine | fd14bca | 2017-05-11 17:57:22 +0200 | [diff] [blame] | 845 | .PHONY: default all_final all |
Gilles Peskine | ea8d697 | 2017-11-28 17:30:52 +0100 | [diff] [blame] | 846 | .PHONY: keys_rsa_all |
| 847 | .PHONY: keys_rsa_unenc keys_rsa_enc_basic |
| 848 | .PHONY: keys_rsa_enc_pkcs8_v1 keys_rsa_enc_pkcs8_v2 |
| 849 | .PHONY: keys_rsa_enc_basic_1024 keys_rsa_enc_basic_2048 keys_rsa_enc_basic_4096 |
| 850 | .PHONY: keys_rsa_enc_pkcs8_v1_1024 keys_rsa_enc_pkcs8_v2_1024 |
| 851 | .PHONY: keys_rsa_enc_pkcs8_v1_2048 keys_rsa_enc_pkcs8_v2_2048 |
| 852 | .PHONY: keys_rsa_enc_pkcs8_v1_4096 keys_rsa_enc_pkcs8_v2_4096 |
| 853 | .PHONY: server1_all |
Gilles Peskine | fd14bca | 2017-05-11 17:57:22 +0200 | [diff] [blame] | 854 | |
Gilles Peskine | f040a17 | 2017-05-05 18:56:12 +0200 | [diff] [blame] | 855 | # These files should not be committed to the repository. |
| 856 | list_intermediate: |
| 857 | @printf '%s\n' $(all_intermediate) | sort |
| 858 | # These files should be committed to the repository so that the test data is |
| 859 | # available upon checkout without running a randomized process depending on |
| 860 | # third-party tools. |
| 861 | list_final: |
| 862 | @printf '%s\n' $(all_final) | sort |
Gilles Peskine | fd14bca | 2017-05-11 17:57:22 +0200 | [diff] [blame] | 863 | .PHONY: list_intermediate list_final |
Gilles Peskine | f040a17 | 2017-05-05 18:56:12 +0200 | [diff] [blame] | 864 | |
Gilles Peskine | fd14bca | 2017-05-11 17:57:22 +0200 | [diff] [blame] | 865 | ## Remove intermediate files |
Gilles Peskine | f040a17 | 2017-05-05 18:56:12 +0200 | [diff] [blame] | 866 | clean: |
| 867 | rm -f $(all_intermediate) |
Gilles Peskine | fd14bca | 2017-05-11 17:57:22 +0200 | [diff] [blame] | 868 | ## Remove all build products, even the ones that are committed |
Gilles Peskine | f040a17 | 2017-05-05 18:56:12 +0200 | [diff] [blame] | 869 | neat: clean |
| 870 | rm -f $(all_final) |
Gilles Peskine | fd14bca | 2017-05-11 17:57:22 +0200 | [diff] [blame] | 871 | .PHONY: clean neat |