blob: 63486167a3e5df183e80bd73d9306888fec53736 [file] [log] [blame]
Gilles Peskinefd14bca2017-05-11 17:57:22 +02001## This file contains a record of how some of the test data was
2## generated. The final build products are committed to the repository
3## as well to make sure that the test data is identical. You do not
4## need to use this makefile unless you're extending mbed TLS's tests.
Gilles Peskinef040a172017-05-05 18:56:12 +02005
Gilles Peskinefd14bca2017-05-11 17:57:22 +02006## Many data files were generated prior to the existence of this
7## makefile, so the method of their generation was not recorded.
Gilles Peskinef040a172017-05-05 18:56:12 +02008
Gilles Peskinefd14bca2017-05-11 17:57:22 +02009## Note that in addition to depending on the version of the data
10## generation tool, many of the build outputs are randomized, so
11## running this makefile twice would not produce the same results.
12
13## Tools
14OPENSSL ?= openssl
Manuel Pégourié-Gonnard29d60fb2017-06-05 10:20:32 +020015FAKETIME ?= faketime
Gilles Peskined1ff7572020-08-21 19:47:22 +020016
Gilles Peskine18035632020-09-24 16:36:04 +020017TOP_DIR = ../..
Gilles Peskined1ff7572020-08-21 19:47:22 +020018MBEDTLS_CERT_WRITE ?= $(TOP_DIR)/programs/x509/cert_write
19MBEDTLS_CERT_REQ ?= $(TOP_DIR)/programs/x509/cert_req
Hanno Becker50cb93a2018-10-08 17:15:28 +010020
Gilles Peskinefd14bca2017-05-11 17:57:22 +020021
22## Build the generated test data. Note that since the final outputs
23## are committed to the repository, this target should do nothing on a
24## fresh checkout. Furthermore, since the generation is randomized,
25## re-running the same targets may result in differing files. The goal
26## of this makefile is primarily to serve as a record of how the
27## targets were generated in the first place.
Gilles Peskinef040a172017-05-05 18:56:12 +020028default: all_final
29
30all_intermediate := # temporary files
31all_final := # files used by tests
32
Gilles Peskinefd14bca2017-05-11 17:57:22 +020033
34
35################################################################
36#### Generate certificates from existing keys
37################################################################
38
Hanno Becker418a6222017-09-14 07:51:28 +010039test_ca_crt = test-ca.crt
Gilles Peskinefd14bca2017-05-11 17:57:22 +020040test_ca_key_file_rsa = test-ca.key
41test_ca_pwd_rsa = PolarSSLTest
42test_ca_config_file = test-ca.opensslconf
43
Andrzej Kurek00d55982023-05-22 09:37:55 -040044$(test_ca_key_file_rsa):
45 $(OPENSSL) genrsa -aes-128-cbc -passout pass:$(test_ca_pwd_rsa) -out $@ 2048
Mukesh Bharsakleb17f6a22023-04-12 00:05:45 +010046all_final += $(test_ca_key_file_rsa)
47
Hanno Beckerb8377752018-10-31 15:29:19 +000048test-ca.req.sha256: $(test_ca_key_file_rsa)
49 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$(test_ca_key_file_rsa) password=$(test_ca_pwd_rsa) subject_name="C=NL,O=PolarSSL,CN=PolarSSL Test CA" md=SHA256
50all_intermediate += test-ca.req.sha256
51
52test-ca.crt: $(test_ca_key_file_rsa) test-ca.req.sha256
Ron Eldor9eeb8612019-02-12 15:03:42 +020053 $(MBEDTLS_CERT_WRITE) is_ca=1 serial=3 request_file=test-ca.req.sha256 selfsign=1 issuer_name="C=NL,O=PolarSSL,CN=PolarSSL Test CA" issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144400 not_after=20290210144400 md=SHA1 version=3 output_file=$@
Hanno Beckere21387e2019-03-12 16:49:26 +000054all_final += test-ca.crt
55
56test-ca.crt.der: test-ca.crt
Hanno Becker462c3e52019-01-31 10:55:42 +000057 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
Hanno Beckere21387e2019-03-12 16:49:26 +000058all_final += test-ca.crt.der
59
60test-ca.key.der: $(test_ca_key_file_rsa)
61 $(OPENSSL) pkey -in $< -out $@ -inform PEM -outform DER -passin "pass:$(test_ca_pwd_rsa)"
62all_final += test-ca.key.der
Hanno Beckerb8377752018-10-31 15:29:19 +000063
64test-ca-sha1.crt: $(test_ca_key_file_rsa) test-ca.req.sha256
Ron Eldor9eeb8612019-02-12 15:03:42 +020065 $(MBEDTLS_CERT_WRITE) is_ca=1 serial=3 request_file=test-ca.req.sha256 selfsign=1 issuer_name="C=NL,O=PolarSSL,CN=PolarSSL Test CA" issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144400 not_after=20290210144400 md=SHA1 version=3 output_file=$@
Gilles Peskinef040a172017-05-05 18:56:12 +020066all_final += test-ca-sha1.crt
Hanno Beckerb8377752018-10-31 15:29:19 +000067
Hanno Beckere21387e2019-03-12 16:49:26 +000068test-ca-sha1.crt.der: test-ca-sha1.crt
69 $(OPENSSL) x509 -in $< -out $@ -inform PEM -outform DER
70all_final += test-ca-sha1.crt.der
71
Hanno Beckerb8377752018-10-31 15:29:19 +000072test-ca-sha256.crt: $(test_ca_key_file_rsa) test-ca.req.sha256
Ron Eldor9eeb8612019-02-12 15:03:42 +020073 $(MBEDTLS_CERT_WRITE) is_ca=1 serial=3 request_file=test-ca.req.sha256 selfsign=1 issuer_name="C=NL,O=PolarSSL,CN=PolarSSL Test CA" issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144400 not_after=20290210144400 md=SHA256 version=3 output_file=$@
Gilles Peskinef040a172017-05-05 18:56:12 +020074all_final += test-ca-sha256.crt
75
Hanno Beckere21387e2019-03-12 16:49:26 +000076test-ca-sha256.crt.der: test-ca-sha256.crt
77 $(OPENSSL) x509 -in $< -out $@ -inform PEM -outform DER
78all_final += test-ca-sha256.crt.der
79
Ron Eldor9eeb8612019-02-12 15:03:42 +020080test-ca_utf8.crt: $(test_ca_key_file_rsa)
81 $(OPENSSL) req -x509 -new -nodes -key $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 3 -config $(test_ca_config_file) -sha1 -days 3653 -utf8 -subj "/C=NL/O=PolarSSL/CN=PolarSSL Test CA" -out $@
82all_final += test-ca_utf8.crt
83
84test-ca_printable.crt: $(test_ca_key_file_rsa)
85 $(OPENSSL) req -x509 -new -nodes -key $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 3 -config $(test_ca_config_file) -sha1 -days 3653 -subj "/C=NL/O=PolarSSL/CN=PolarSSL Test CA" -out $@
86all_final += test-ca_printable.crt
87
88test-ca_uppercase.crt: $(test_ca_key_file_rsa)
89 $(OPENSSL) req -x509 -new -nodes -key $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 3 -config $(test_ca_config_file) -sha1 -days 3653 -subj "/C=NL/O=PolarSSL/CN=PolarSSL Test CA" -out $@
90all_final += test-ca_uppercase.crt
91
Manuel Pégourié-Gonnard2d825d42017-07-03 18:06:38 +020092test_ca_key_file_rsa_alt = test-ca-alt.key
93
Ron Eldor9eeb8612019-02-12 15:03:42 +020094cert_example_multi.csr: rsa_pkcs1_1024_clear.pem
95 $(OPENSSL) req -new -subj "/C=NL/O=PolarSSL/CN=www.example.com" -set_serial 17 -config $(test_ca_config_file) -extensions dns_alt_names -days 3650 -key rsa_pkcs1_1024_clear.pem -out $@
96
97cert_example_multi.crt: cert_example_multi.csr
98 $(OPENSSL) x509 -req -CA $(test_ca_crt) -CAkey $(test_ca_key_file_rsa) -extfile $(test_ca_config_file) -extensions dns_alt_names -passin "pass:$(test_ca_pwd_rsa)" -set_serial 17 -days 3653 -sha256 -in $< > $@
99
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100100test_csr_v3_keyUsage.csr.der: rsa_pkcs1_1024_clear.pem
Przemek Stekiel16096852023-01-24 09:24:19 +0100101 $(OPENSSL) req -new -subj '/CN=etcd' -config $(test_ca_config_file) -key rsa_pkcs1_1024_clear.pem -outform DER -out $@ -reqexts csr_ext_v3_keyUsage
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100102test_csr_v3_subjectAltName.csr.der: rsa_pkcs1_1024_clear.pem
Przemek Stekiel16096852023-01-24 09:24:19 +0100103 $(OPENSSL) req -new -subj '/CN=etcd' -config $(test_ca_config_file) -key rsa_pkcs1_1024_clear.pem -outform DER -out $@ -reqexts csr_ext_v3_subjectAltName
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100104test_csr_v3_nsCertType.csr.der: rsa_pkcs1_1024_clear.pem
Przemek Stekiel16096852023-01-24 09:24:19 +0100105 $(OPENSSL) req -new -subj '/CN=etcd' -config $(test_ca_config_file) -key rsa_pkcs1_1024_clear.pem -outform DER -out $@ -reqexts csr_ext_v3_nsCertType
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100106test_csr_v3_all.csr.der: rsa_pkcs1_1024_clear.pem
Przemek Stekiel16096852023-01-24 09:24:19 +0100107 $(OPENSSL) req -new -subj '/CN=etcd' -config $(test_ca_config_file) -key rsa_pkcs1_1024_clear.pem -outform DER -out $@ -reqexts csr_ext_v3_all
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100108test_csr_v3_all_malformed_extensions_sequence_tag.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100109 (hexdump -ve '1/1 "%.2X"' $< | sed "s/300B0603551D0F040403/200B0603551D0F040403/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100110test_csr_v3_all_malformed_extension_id_tag.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100111 (hexdump -ve '1/1 "%.2X"' $< | sed "s/0603551D0F0404030201/0703551D0F0404030201/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100112test_csr_v3_all_malformed_extension_data_tag.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100113 (hexdump -ve '1/1 "%.2X"' $< | sed "s/040403020102302F0603/050403020102302F0603/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100114test_csr_v3_all_malformed_extension_data_len1.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100115 (hexdump -ve '1/1 "%.2X"' $< | sed "s/040403020102302F0603/040503020102302F0603/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100116test_csr_v3_all_malformed_extension_data_len2.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100117 (hexdump -ve '1/1 "%.2X"' $< | sed "s/040403020102302F0603/040303020102302F0603/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100118test_csr_v3_all_malformed_extension_key_usage_bitstream_tag.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100119 (hexdump -ve '1/1 "%.2X"' $< | sed "s/03020102302F0603551D/04020102302F0603551D/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100120test_csr_v3_all_malformed_extension_subject_alt_name_sequence_tag.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100121 (hexdump -ve '1/1 "%.2X"' $< | sed "s/3026A02406082B060105/4026A02406082B060105/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100122test_csr_v3_all_malformed_extension_ns_cert_bitstream_tag.csr.der: test_csr_v3_all.csr.der
Przemek Stekield7992df2023-01-25 16:19:50 +0100123 (hexdump -ve '1/1 "%.2X"' $< | sed "s/03020780300D06092A86/04020780300D06092A86/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100124test_csr_v3_all_malformed_duplicated_extension.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100125 (hexdump -ve '1/1 "%.2X"' $< | sed "s/551D11/551D0F/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100126test_csr_v3_all_malformed_extension_type_oid.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100127 (hexdump -ve '1/1 "%.2X"' $< | sed "s/551D11/551DFF/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100128test_csr_v3_all_malformed_attributes_sequence_tag.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100129 (hexdump -ve '1/1 "%.2X"' $< | sed "s/306006092A864886F70D/406006092A864886F70D/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100130test_csr_v3_all_malformed_attributes_id_tag.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100131 (hexdump -ve '1/1 "%.2X"' $< | sed "s/06092A864886F70D0109/07092A864886F70D0109/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100132test_csr_v3_all_malformed_attributes_extension_request.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100133 (hexdump -ve '1/1 "%.2X"' $< | sed "s/2A864886F70D01090E/2A864886F70D01090F/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100134test_csr_v3_all_malformed_attributes_extension_request_set_tag.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100135 (hexdump -ve '1/1 "%.2X"' $< | sed "s/31533051300B0603551D/32533051300B0603551D/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100136test_csr_v3_all_malformed_attributes_extension_request_sequence_tag.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100137 (hexdump -ve '1/1 "%.2X"' $< | sed "s/3051300B0603551D0F04/3151300B0603551D0F04/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100138test_csr_v3_all_malformed_attributes_len1.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100139 (hexdump -ve '1/1 "%.2X"' $< | sed "s/306006092A864886F70D/306106092A864886F70D/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100140test_csr_v3_all_malformed_attributes_len2.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100141 (hexdump -ve '1/1 "%.2X"' $< | sed "s/306006092A864886F70D/305906092A864886F70D/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100142test_csr_v3_all_malformed_attributes_extension_request_sequence_len1.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100143 (hexdump -ve '1/1 "%.2X"' $< | sed "s/3051300B0603551D0F04/3052300B0603551D0F04/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100144test_csr_v3_all_malformed_attributes_extension_request_sequence_len2.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100145 (hexdump -ve '1/1 "%.2X"' $< | sed "s/3051300B0603551D0F04/3050300B0603551D0F04/" | xxd -r -p ) > $@
Przemek Stekiele7fbbb32023-01-12 15:30:45 +0100146
Przemek Stekiel608e3ef2023-02-09 14:47:50 +0100147test_cert_rfc822name.crt.der: cert_example_multi.csr
148 $(OPENSSL) x509 -req -CA $(test_ca_crt) -CAkey $(test_ca_key_file_rsa) -extfile $(test_ca_config_file) -outform DER -extensions rfc822name_names -passin "pass:$(test_ca_pwd_rsa)" -set_serial 17 -days 3653 -sha256 -in $< > $@
149
Ron Eldor9eeb8612019-02-12 15:03:42 +0200150$(test_ca_key_file_rsa_alt):test-ca.opensslconf
Manuel Pégourié-Gonnard2d825d42017-07-03 18:06:38 +0200151 $(OPENSSL) genrsa -out $@ 2048
152test-ca-alt.csr: $(test_ca_key_file_rsa_alt) $(test_ca_config_file)
153 $(OPENSSL) req -new -config $(test_ca_config_file) -key $(test_ca_key_file_rsa_alt) -subj "/C=NL/O=PolarSSL/CN=PolarSSL Test CA" -out $@
154all_intermediate += test-ca-alt.csr
155test-ca-alt.crt: $(test_ca_key_file_rsa_alt) $(test_ca_config_file) test-ca-alt.csr
156 $(OPENSSL) req -x509 -config $(test_ca_config_file) -key $(test_ca_key_file_rsa_alt) -set_serial 0 -days 3653 -sha256 -in test-ca-alt.csr -out $@
157all_final += test-ca-alt.crt
158test-ca-alt-good.crt: test-ca-alt.crt test-ca-sha256.crt
159 cat test-ca-alt.crt test-ca-sha256.crt > $@
160all_final += test-ca-alt-good.crt
161test-ca-good-alt.crt: test-ca-alt.crt test-ca-sha256.crt
162 cat test-ca-sha256.crt test-ca-alt.crt > $@
163all_final += test-ca-good-alt.crt
164
Manuel Pégourié-Gonnardbc313012017-06-27 12:51:52 +0200165test_ca_crt_file_ec = test-ca2.crt
166test_ca_key_file_ec = test-ca2.key
167
Ron Eldor9eeb8612019-02-12 15:03:42 +0200168test-ca2.req.sha256: $(test_ca_key_file_ec)
169 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$(test_ca_key_file_ec) subject_name="C=NL,O=PolarSSL,CN=Polarssl Test EC CA" md=SHA256
170all_intermediate += test-ca2.req.sha256
171
172test-ca2.crt: $(test_ca_key_file_ec) test-ca2.req.sha256
173 $(MBEDTLS_CERT_WRITE) is_ca=1 serial=13926223505202072808 request_file=test-ca2.req.sha256 selfsign=1 issuer_name="C=NL,O=PolarSSL,CN=Polarssl Test EC CA" issuer_key=$(test_ca_key_file_ec) not_before=20190210144400 not_after=20290210144400 md=SHA256 version=3 output_file=$@
174all_final += test-ca.crt
175
Ron Eldor74d9acc2019-03-21 14:00:03 +0200176test-ca-any_policy.crt: $(test_ca_key_file_rsa) test-ca.req.sha256
177 $(OPENSSL) req -x509 -config $(test_ca_config_file) -extensions v3_any_policy_ca -key $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 0 -days 3653 -sha256 -in test-ca.req.sha256 -out $@
178all_final += test-ca-any_policy.crt
179
180test-ca-any_policy_ec.crt: $(test_ca_key_file_ec) test-ca.req_ec.sha256
181 $(OPENSSL) req -x509 -config $(test_ca_config_file) -extensions v3_any_policy_ca -key $(test_ca_key_file_ec) -set_serial 0 -days 3653 -sha256 -in test-ca.req_ec.sha256 -out $@
182all_final += test-ca-any_policy_ec.crt
183
184test-ca-any_policy_with_qualifier.crt: $(test_ca_key_file_rsa) test-ca.req.sha256
185 $(OPENSSL) req -x509 -config $(test_ca_config_file) -extensions v3_any_policy_qualifier_ca -key $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 0 -days 3653 -sha256 -in test-ca.req.sha256 -out $@
186all_final += test-ca-any_policy_with_qualifier.crt
187
188test-ca-any_policy_with_qualifier_ec.crt: $(test_ca_key_file_ec) test-ca.req_ec.sha256
189 $(OPENSSL) req -x509 -config $(test_ca_config_file) -extensions v3_any_policy_qualifier_ca -key $(test_ca_key_file_ec) -set_serial 0 -days 3653 -sha256 -in test-ca.req_ec.sha256 -out $@
190all_final += test-ca-any_policy_with_qualifier_ec.crt
191
192test-ca-multi_policy.crt: $(test_ca_key_file_rsa) test-ca.req.sha256
193 $(OPENSSL) req -x509 -config $(test_ca_config_file) -extensions v3_multi_policy_ca -key $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 0 -days 3653 -sha256 -in test-ca.req.sha256 -out $@
194all_final += test-ca-multi_policy.crt
195
196test-ca-multi_policy_ec.crt: $(test_ca_key_file_ec) test-ca.req_ec.sha256
197 $(OPENSSL) req -x509 -config $(test_ca_config_file) -extensions v3_multi_policy_ca -key $(test_ca_key_file_ec) -set_serial 0 -days 3653 -sha256 -in test-ca.req_ec.sha256 -out $@
198all_final += test-ca-multi_policy_ec.crt
199
200test-ca-unsupported_policy.crt: $(test_ca_key_file_rsa) test-ca.req.sha256
201 $(OPENSSL) req -x509 -config $(test_ca_config_file) -extensions v3_unsupported_policy_ca -key $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 0 -days 3653 -sha256 -in test-ca.req.sha256 -out $@
202all_final += test-ca-unsupported_policy.crt
203
204test-ca-unsupported_policy_ec.crt: $(test_ca_key_file_ec) test-ca.req_ec.sha256
205 $(OPENSSL) req -x509 -config $(test_ca_config_file) -extensions v3_unsupported_policy_ca -key $(test_ca_key_file_ec) -set_serial 0 -days 3653 -sha256 -in test-ca.req_ec.sha256 -out $@
206all_final += test-ca-unsupported_policy_ec.crt
207
208test-ca.req_ec.sha256: $(test_ca_key_file_ec)
209 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$(test_ca_key_file_ec) subject_name="C=NL, O=PolarSSL, CN=Polarssl Test EC CA" md=SHA256
210all_intermediate += test-ca.req_ec.sha256
211
Hanno Beckere21387e2019-03-12 16:49:26 +0000212test-ca2.crt.der: $(test_ca_crt_file_ec)
213 $(OPENSSL) x509 -in $(test_ca_crt_file_ec) -out $@ -inform PEM -outform DER
214all_final += test-ca2.crt.der
215
216test-ca2.key.der: $(test_ca_key_file_ec)
217 $(OPENSSL) pkey -in $(test_ca_key_file_ec) -out $@ -inform PEM -outform DER
218all_final += test-ca2.key.der
219
Hanno Beckerb9630812018-10-31 16:28:05 +0000220test_ca_crt_cat12 = test-ca_cat12.crt
221$(test_ca_crt_cat12): $(test_ca_crt) $(test_ca_crt_file_ec)
222 cat $(test_ca_crt) $(test_ca_crt_file_ec) > $@
223all_final += $(test_ca_crt_cat12)
224
225test_ca_crt_cat21 = test-ca_cat21.crt
226$(test_ca_crt_cat21): $(test_ca_crt) $(test_ca_crt_file_ec)
227 cat $(test_ca_crt_file_ec) $(test_ca_crt) > $@
228all_final += $(test_ca_crt_cat21)
229
Manuel Pégourié-Gonnardbc313012017-06-27 12:51:52 +0200230test-int-ca.csr: test-int-ca.key $(test_ca_config_file)
231 $(OPENSSL) req -new -config $(test_ca_config_file) -key test-int-ca.key -subj "/C=NL/O=PolarSSL/CN=PolarSSL Test Intermediate CA" -out $@
232all_intermediate += test-int-ca.csr
Manuel Pégourié-Gonnard7ff243a2017-08-08 18:54:13 +0200233test-int-ca-exp.crt: $(test_ca_crt_file_ec) $(test_ca_key_file_ec) $(test_ca_config_file) test-int-ca.csr
Manuel Pégourié-Gonnardbc313012017-06-27 12:51:52 +0200234 $(FAKETIME) -f -3653d $(OPENSSL) x509 -req -extfile $(test_ca_config_file) -extensions v3_ca -CA $(test_ca_crt_file_ec) -CAkey $(test_ca_key_file_ec) -set_serial 14 -days 3653 -sha256 -in test-int-ca.csr -out $@
235all_final += test-int-ca-exp.crt
236
Ron Eldor9eeb8612019-02-12 15:03:42 +0200237enco-cert-utf8str.pem: rsa_pkcs1_1024_clear.pem
238 $(MBEDTLS_CERT_WRITE) subject_key=rsa_pkcs1_1024_clear.pem subject_name="CN=dw.yonan.net" issuer_crt=enco-ca-prstr.pem issuer_key=rsa_pkcs1_1024_clear.pem not_before=20190210144406 not_after=20290210144406 md=SHA1 version=3 output_file=$@
239
Manuel Pégourié-Gonnardfd3e4fb2018-03-13 11:53:30 +0100240crl-idp.pem: $(test_ca_crt) $(test_ca_key_file_rsa) $(test_ca_config_file)
241 $(OPENSSL) ca -gencrl -batch -cert $(test_ca_crt) -keyfile $(test_ca_key_file_rsa) -key $(test_ca_pwd_rsa) -config $(test_ca_config_file) -name test_ca -md sha256 -crldays 3653 -crlexts crl_ext_idp -out $@
Manuel Pégourié-Gonnarda63305d2018-03-14 12:23:56 +0100242all_final += crl-idp.pem
243crl-idpnc.pem: $(test_ca_crt) $(test_ca_key_file_rsa) $(test_ca_config_file)
244 $(OPENSSL) ca -gencrl -batch -cert $(test_ca_crt) -keyfile $(test_ca_key_file_rsa) -key $(test_ca_pwd_rsa) -config $(test_ca_config_file) -name test_ca -md sha256 -crldays 3653 -crlexts crl_ext_idp_nc -out $@
245all_final += crl-idpnc.pem
Manuel Pégourié-Gonnardfd3e4fb2018-03-13 11:53:30 +0100246
Gilles Peskinefd14bca2017-05-11 17:57:22 +0200247cli_crt_key_file_rsa = cli-rsa.key
248cli_crt_extensions_file = cli.opensslconf
249
Gilles Peskinef040a172017-05-05 18:56:12 +0200250cli-rsa.csr: $(cli_crt_key_file_rsa)
Hanno Becker386f99c2018-11-01 17:20:22 +0000251 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Client 2" md=SHA1
Gilles Peskinef040a172017-05-05 18:56:12 +0200252all_intermediate += cli-rsa.csr
Hanno Becker386f99c2018-11-01 17:20:22 +0000253
254cli-rsa-sha1.crt: cli-rsa.csr
Ron Eldor9eeb8612019-02-12 15:03:42 +0200255 $(MBEDTLS_CERT_WRITE) request_file=$< serial=4 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA1 version=3 output_file=$@
Hanno Becker386f99c2018-11-01 17:20:22 +0000256
257cli-rsa-sha256.crt: cli-rsa.csr
Ron Eldor9eeb8612019-02-12 15:03:42 +0200258 $(MBEDTLS_CERT_WRITE) request_file=$< serial=4 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA256 version=3 output_file=$@
Gilles Peskinef040a172017-05-05 18:56:12 +0200259all_final += cli-rsa-sha256.crt
260
Hanno Beckere21387e2019-03-12 16:49:26 +0000261cli-rsa-sha256.crt.der: cli-rsa-sha256.crt
262 $(OPENSSL) x509 -in $< -out $@ -inform PEM -outform DER
263all_final += cli-rsa-sha256.crt.der
264
Paul Elliottca17ebf2020-11-24 17:30:18 +0000265cli-rsa-sha256-badalg.crt.der: cli-rsa-sha256.crt.der
266 hexdump -ve '1/1 "%.2X"' $< | sed "s/06092A864886F70D01010B0500/06092A864886F70D01010B0900/2" | xxd -r -p > $@
267all_final += cli-rsa-sha256-badalg.crt.der
268
269cli-rsa.key.der: $(cli_crt_key_file_rsa)
Hanno Beckere21387e2019-03-12 16:49:26 +0000270 $(OPENSSL) pkey -in $< -out $@ -inform PEM -outform DER
271all_final += cli-rsa.key.der
272
Manuel Pégourié-Gonnard29d60fb2017-06-05 10:20:32 +0200273test_ca_int_rsa1 = test-int-ca.crt
274
275server7.csr: server7.key
276 $(OPENSSL) req -new -key server7.key -subj "/C=NL/O=PolarSSL/CN=localhost" -out $@
277all_intermediate += server7.csr
278server7-expired.crt: server7.csr $(test_ca_int_rsa1)
279 $(FAKETIME) -f -3653d $(OPENSSL) x509 -req -extfile $(cli_crt_extensions_file) -extensions cli-rsa -CA $(test_ca_int_rsa1) -CAkey test-int-ca.key -set_serial 16 -days 3653 -sha256 -in server7.csr | cat - $(test_ca_int_rsa1) > $@
280all_final += server7-expired.crt
281server7-future.crt: server7.csr $(test_ca_int_rsa1)
282 $(FAKETIME) -f +3653d $(OPENSSL) x509 -req -extfile $(cli_crt_extensions_file) -extensions cli-rsa -CA $(test_ca_int_rsa1) -CAkey test-int-ca.key -set_serial 16 -days 3653 -sha256 -in server7.csr | cat - $(test_ca_int_rsa1) > $@
283all_final += server7-future.crt
Manuel Pégourié-Gonnard4dfc04a2017-06-05 11:12:13 +0200284server7-badsign.crt: server7.crt $(test_ca_int_rsa1)
Manuel Pégourié-Gonnardd19a41d2017-07-14 11:05:59 +0200285 { head -n-2 $<; tail -n-2 $< | sed -e '1s/0\(=*\)$$/_\1/' -e '1s/[^_=]\(=*\)$$/0\1/' -e '1s/_/1/'; cat $(test_ca_int_rsa1); } > $@
Manuel Pégourié-Gonnard4dfc04a2017-06-05 11:12:13 +0200286all_final += server7-badsign.crt
Manuel Pégourié-Gonnardbc313012017-06-27 12:51:52 +0200287server7_int-ca-exp.crt: server7.crt test-int-ca-exp.crt
288 cat server7.crt test-int-ca-exp.crt > $@
289all_final += server7_int-ca-exp.crt
290
Ron Eldor9eeb8612019-02-12 15:03:42 +0200291cli2.req.sha256: cli2.key
292 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Test Client 2" md=SHA256
293
294all_final += server1.req.sha1
295cli2.crt: cli2.req.sha256
296 $(MBEDTLS_CERT_WRITE) request_file=cli2.req.sha256 serial=13 selfsign=0 issuer_name="C=NL,O=PolarSSL,CN=PolarSSL Test EC CA" issuer_key=$(test_ca_key_file_ec) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144400 not_after=20290210144400 md=SHA256 version=3 output_file=$@
297all_final += cli2.crt
298
Hanno Beckere21387e2019-03-12 16:49:26 +0000299cli2.crt.der: cli2.crt
300 $(OPENSSL) x509 -in $< -out $@ -inform PEM -outform DER
301all_final += cli2.crt.der
302
Hanno Becker4cbea4b2019-05-30 16:08:12 +0100303cli2.key.der: cli2.key
Hanno Beckere21387e2019-03-12 16:49:26 +0000304 $(OPENSSL) pkey -in $< -out $@ -inform PEM -outform DER
305all_final += cli2.key.der
306
Hanno Becker226eedb2020-08-17 12:14:00 +0100307server5_pwd_ec = PolarSSLTest
308
Hanno Becker4cbea4b2019-05-30 16:08:12 +0100309server5.crt.der: server5.crt
Hanno Beckere21387e2019-03-12 16:49:26 +0000310 $(OPENSSL) x509 -in $< -out $@ -inform PEM -outform DER
311all_final += server5.crt.der
312
Hanno Becker4cbea4b2019-05-30 16:08:12 +0100313server5.key.der: server5.key
Hanno Beckere21387e2019-03-12 16:49:26 +0000314 $(OPENSSL) pkey -in $< -out $@ -inform PEM -outform DER
315all_final += server5.key.der
316
Hanno Becker226eedb2020-08-17 12:14:00 +0100317server5.key.enc: server5.key
318 $(OPENSSL) ec -aes256 -in $< -out $@ -passout "pass:$(server5_pwd_ec)"
319all_final += server5.key.enc
320
Manuel Pégourié-Gonnardbc313012017-06-27 12:51:52 +0200321server5-ss-expired.crt: server5.key
322 $(FAKETIME) -f -3653d $(OPENSSL) req -x509 -new -subj "/C=UK/O=mbed TLS/OU=testsuite/CN=localhost" -days 3653 -sha256 -key $< -out $@
323all_final += server5-ss-expired.crt
324
Manuel Pégourié-Gonnardc10afdb2017-06-29 09:48:08 +0200325# try to forge a copy of test-int-ca3 with different key
326server5-ss-forgeca.crt: server5.key
327 $(FAKETIME) '2015-09-01 14:08:43' $(OPENSSL) req -x509 -new -subj "/C=UK/O=mbed TLS/CN=mbed TLS Test intermediate CA 3" -set_serial 77 -config $(test_ca_config_file) -extensions noext_ca -days 3650 -sha256 -key $< -out $@
328all_final += server5-ss-forgeca.crt
329
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200330server5-othername.crt: server5.key
331 $(OPENSSL) req -x509 -new -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS othername SAN" -set_serial 77 -config $(test_ca_config_file) -extensions othername_san -days 3650 -sha256 -key $< -out $@
332
Victor Barpp Gomesd0225af2022-09-29 11:40:20 -0300333server5-nonprintable_othername.crt: server5.key
334 $(OPENSSL) req -x509 -new -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS non-printable othername SAN" -set_serial 77 -config $(test_ca_config_file) -extensions nonprintable_othername_san -days 3650 -sha256 -key $< -out $@
335
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200336server5-unsupported_othername.crt: server5.key
David Horstmann119d7e22022-11-25 15:50:30 +0000337 $(OPENSSL) req -x509 -new -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS unsupported othername SAN" -set_serial 77 -config $(test_ca_config_file) -extensions unsupported_othername_san -days 3650 -sha256 -key $< -out $@
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200338
Ron Eldor3c4734a2019-03-25 14:05:23 +0200339server5-fan.crt: server5.key
340 $(OPENSSL) req -x509 -new -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS FAN" -set_serial 77 -config $(test_ca_config_file) -extensions fan_cert -days 3650 -sha256 -key server5.key -out $@
341
Przemek Stekiel63973ab2023-06-05 16:39:57 +0200342server5-tricky-ip-san.crt.der: server5.key
343 $(OPENSSL) req -x509 -new -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS Tricky IP SAN" -set_serial 77 -config $(test_ca_config_file) -extensions tricky_ip_san -days 3650 -sha256 -key server5.key -outform der -out $@
344
345# malformed IP length
346server5-tricky-ip-san-malformed-len.crt.der: server5-tricky-ip-san.crt.der
347 hexdump -ve '1/1 "%.2X"' $< | sed "s/87046162636487106162/87056162636487106162/" | xxd -r -p > $@
Andrzej Kurek303704e2023-03-06 04:50:47 -0500348
Andrzej Kurekd3486322023-01-20 05:21:52 -0500349server5-directoryname.crt.der: server5.key
350 $(OPENSSL) req -x509 -outform der -new -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS directoryName SAN" -set_serial 77 -config $(test_ca_config_file) -extensions directory_name_san -days 3650 -sha256 -key server5.key -out $@
Andrzej Kureke12b01d2023-01-10 06:47:38 -0500351
Andrzej Kurekd3486322023-01-20 05:21:52 -0500352server5-two-directorynames.crt.der: server5.key
353 $(OPENSSL) req -x509 -outform der -new -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS directoryName SAN" -set_serial 77 -config $(test_ca_config_file) -extensions two_directorynames -days 3650 -sha256 -key server5.key -out $@
Andrzej Kurek4a4f1ec2023-01-12 06:51:20 -0500354
Andrzej Kurekd90376e2023-01-20 07:08:57 -0500355# directoryname sequence tag malformed
356server5-directoryname-seq-malformed.crt.der: server5-two-directorynames.crt.der
357 hexdump -ve '1/1 "%.2X"' $< | sed "s/62A4473045310B/62A4473145310B/" | xxd -r -p > $@
Andrzej Kurek303704e2023-03-06 04:50:47 -0500358
Andrzej Kurekd90376e2023-01-20 07:08:57 -0500359# Second directoryname OID length malformed 03 -> 15
360server5-second-directoryname-oid-malformed.crt.der: server5-two-directorynames.crt.der
Andrzej Kurekd3486322023-01-20 05:21:52 -0500361 hexdump -ve '1/1 "%.2X"' $< | sed "s/0355040A0C0A4D414C464F524D5F4D45/1555040A0C0A4D414C464F524D5F4D45/" | xxd -r -p > $@
Andrzej Kurek151d85d2023-01-12 08:59:37 -0500362
Manuel Pégourié-Gonnard7d2a4d82020-07-23 12:39:53 +0200363all_final += server5-tricky-ip-san.crt
364
Andrzej Kurek570a0f82023-02-14 05:52:49 -0500365rsa_single_san_uri.crt.der: rsa_single_san_uri.key
366 $(OPENSSL) req -x509 -outform der -nodes -days 7300 -newkey rsa:2048 -key $< -out $@ -addext "subjectAltName = URI:urn:example.com:5ff40f78-9210-494f-8206-c2c082f0609c" -extensions 'v3_req' -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS URI SAN"
367
368rsa_multiple_san_uri.crt.der: rsa_multiple_san_uri.key
369 $(OPENSSL) req -x509 -outform der -nodes -days 7300 -newkey rsa:2048 -key $< -out $@ -addext "subjectAltName = URI:urn:example.com:5ff40f78-9210-494f-8206-c2c082f0609c, URI:urn:example.com:5ff40f78-9210-494f-8206-abcde1234567" -extensions 'v3_req' -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS URI SAN"
370
Manuel Pégourié-Gonnardd19a41d2017-07-14 11:05:59 +0200371server10-badsign.crt: server10.crt
372 { head -n-2 $<; tail -n-2 $< | sed -e '1s/0\(=*\)$$/_\1/' -e '1s/[^_=]\(=*\)$$/0\1/' -e '1s/_/1/'; } > $@
373all_final += server10-badsign.crt
374server10-bs_int3.pem: server10-badsign.crt test-int-ca3.crt
375 cat server10-badsign.crt test-int-ca3.crt > $@
376all_final += server10-bs_int3.pem
377test-int-ca3-badsign.crt: test-int-ca3.crt
378 { head -n-2 $<; tail -n-2 $< | sed -e '1s/0\(=*\)$$/_\1/' -e '1s/[^_=]\(=*\)$$/0\1/' -e '1s/_/1/'; } > $@
379all_final += test-int-ca3-badsign.crt
380server10_int3-bs.pem: server10.crt test-int-ca3-badsign.crt
381 cat server10.crt test-int-ca3-badsign.crt > $@
Jaeden Amero001626e2019-02-27 11:16:41 +0000382all_final += server10_int3-bs.pem
Manuel Pégourié-Gonnardc10afdb2017-06-29 09:48:08 +0200383
Ron Eldorb0065182017-10-16 12:40:27 +0300384rsa_pkcs1_2048_public.pem: server8.key
Ron Eldor3f2da842017-10-17 15:50:30 +0300385 $(OPENSSL) rsa -in $< -outform PEM -RSAPublicKey_out -out $@
386all_final += rsa_pkcs1_2048_public.pem
Gilles Peskineea8d6972017-11-28 17:30:52 +0100387
Ron Eldorb0065182017-10-16 12:40:27 +0300388rsa_pkcs1_2048_public.der: rsa_pkcs1_2048_public.pem
Ron Eldor3f2da842017-10-17 15:50:30 +0300389 $(OPENSSL) rsa -RSAPublicKey_in -in $< -outform DER -RSAPublicKey_out -out $@
390all_final += rsa_pkcs1_2048_public.der
391
392rsa_pkcs8_2048_public.pem: server8.key
393 $(OPENSSL) rsa -in $< -outform PEM -pubout -out $@
394all_final += rsa_pkcs8_2048_public.pem
395
396rsa_pkcs8_2048_public.der: rsa_pkcs8_2048_public.pem
397 $(OPENSSL) rsa -pubin -in $< -outform DER -pubout -out $@
Ron Eldorb0065182017-10-16 12:40:27 +0300398all_final += rsa_pkcs8_2048_public.der
Gilles Peskineea8d6972017-11-28 17:30:52 +0100399
Hanno Beckerd16f6122017-09-05 09:23:50 +0100400################################################################
401#### Generate various RSA keys
402################################################################
Gilles Peskinebc70a182017-05-09 15:59:24 +0200403
Hanno Beckerd16f6122017-09-05 09:23:50 +0100404### Password used for PKCS1-encoded encrypted RSA keys
405keys_rsa_basic_pwd = testkey
406
407### Password used for PKCS8-encoded encrypted RSA keys
408keys_rsa_pkcs8_pwd = PolarSSLTest
409
410### Basic 1024-, 2048- and 4096-bit unencrypted RSA keys from which
411### all other encrypted RSA keys are derived.
Hanno Becker08a36dd2017-09-29 20:05:23 +0100412rsa_pkcs1_1024_clear.pem:
Hanno Beckerd16f6122017-09-05 09:23:50 +0100413 $(OPENSSL) genrsa -out $@ 1024
Hanno Becker08a36dd2017-09-29 20:05:23 +0100414all_final += rsa_pkcs1_1024_clear.pem
415rsa_pkcs1_2048_clear.pem:
Hanno Beckerd16f6122017-09-05 09:23:50 +0100416 $(OPENSSL) genrsa -out $@ 2048
Hanno Becker08a36dd2017-09-29 20:05:23 +0100417all_final += rsa_pkcs1_2048_clear.pem
418rsa_pkcs1_4096_clear.pem:
Hanno Beckerd16f6122017-09-05 09:23:50 +0100419 $(OPENSSL) genrsa -out $@ 4096
Hanno Becker08a36dd2017-09-29 20:05:23 +0100420all_final += rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100421
422###
423### PKCS1-encoded, encrypted RSA keys
424###
425
426### 1024-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100427rsa_pkcs1_1024_des.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100428 $(OPENSSL) rsa -des -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100429all_final += rsa_pkcs1_1024_des.pem
430rsa_pkcs1_1024_3des.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100431 $(OPENSSL) rsa -des3 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100432all_final += rsa_pkcs1_1024_3des.pem
433rsa_pkcs1_1024_aes128.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100434 $(OPENSSL) rsa -aes128 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100435all_final += rsa_pkcs1_1024_aes128.pem
436rsa_pkcs1_1024_aes192.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100437 $(OPENSSL) rsa -aes192 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100438all_final += rsa_pkcs1_1024_aes192.pem
439rsa_pkcs1_1024_aes256.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100440 $(OPENSSL) rsa -aes256 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100441all_final += rsa_pkcs1_1024_aes256.pem
442keys_rsa_enc_basic_1024: rsa_pkcs1_1024_des.pem rsa_pkcs1_1024_3des.pem rsa_pkcs1_1024_aes128.pem rsa_pkcs1_1024_aes192.pem rsa_pkcs1_1024_aes256.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100443
444# 2048-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100445rsa_pkcs1_2048_des.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100446 $(OPENSSL) rsa -des -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100447all_final += rsa_pkcs1_2048_des.pem
448rsa_pkcs1_2048_3des.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100449 $(OPENSSL) rsa -des3 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100450all_final += rsa_pkcs1_2048_3des.pem
451rsa_pkcs1_2048_aes128.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100452 $(OPENSSL) rsa -aes128 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100453all_final += rsa_pkcs1_2048_aes128.pem
454rsa_pkcs1_2048_aes192.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100455 $(OPENSSL) rsa -aes192 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100456all_final += rsa_pkcs1_2048_aes192.pem
457rsa_pkcs1_2048_aes256.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100458 $(OPENSSL) rsa -aes256 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100459all_final += rsa_pkcs1_2048_aes256.pem
460keys_rsa_enc_basic_2048: rsa_pkcs1_2048_des.pem rsa_pkcs1_2048_3des.pem rsa_pkcs1_2048_aes128.pem rsa_pkcs1_2048_aes192.pem rsa_pkcs1_2048_aes256.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100461
462# 4096-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100463rsa_pkcs1_4096_des.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100464 $(OPENSSL) rsa -des -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100465all_final += rsa_pkcs1_4096_des.pem
466rsa_pkcs1_4096_3des.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100467 $(OPENSSL) rsa -des3 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100468all_final += rsa_pkcs1_4096_3des.pem
469rsa_pkcs1_4096_aes128.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100470 $(OPENSSL) rsa -aes128 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100471all_final += rsa_pkcs1_4096_aes128.pem
472rsa_pkcs1_4096_aes192.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100473 $(OPENSSL) rsa -aes192 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100474all_final += rsa_pkcs1_4096_aes192.pem
475rsa_pkcs1_4096_aes256.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100476 $(OPENSSL) rsa -aes256 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100477all_final += rsa_pkcs1_4096_aes256.pem
478keys_rsa_enc_basic_4096: rsa_pkcs1_4096_des.pem rsa_pkcs1_4096_3des.pem rsa_pkcs1_4096_aes128.pem rsa_pkcs1_4096_aes192.pem rsa_pkcs1_4096_aes256.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100479
480###
481### PKCS8-v1 encoded, encrypted RSA keys
482###
483
484### 1024-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100485rsa_pkcs8_pbe_sha1_1024_3des.der: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100486 $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-3DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100487all_final += rsa_pkcs8_pbe_sha1_1024_3des.der
488rsa_pkcs8_pbe_sha1_1024_3des.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100489 $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-3DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100490all_final += rsa_pkcs8_pbe_sha1_1024_3des.pem
491keys_rsa_enc_pkcs8_v1_1024_3des: rsa_pkcs8_pbe_sha1_1024_3des.pem rsa_pkcs8_pbe_sha1_1024_3des.der
Hanno Beckerd16f6122017-09-05 09:23:50 +0100492
Hanno Becker08a36dd2017-09-29 20:05:23 +0100493rsa_pkcs8_pbe_sha1_1024_2des.der: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100494 $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-2DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100495all_final += rsa_pkcs8_pbe_sha1_1024_2des.der
496rsa_pkcs8_pbe_sha1_1024_2des.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100497 $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-2DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100498all_final += rsa_pkcs8_pbe_sha1_1024_2des.pem
499keys_rsa_enc_pkcs8_v1_1024_2des: rsa_pkcs8_pbe_sha1_1024_2des.pem rsa_pkcs8_pbe_sha1_1024_2des.der
Hanno Beckerd16f6122017-09-05 09:23:50 +0100500
TRodziewicz75628d52021-06-18 12:56:27 +0200501keys_rsa_enc_pkcs8_v1_1024: keys_rsa_enc_pkcs8_v1_1024_3des keys_rsa_enc_pkcs8_v1_1024_2des
502
Hanno Beckerd16f6122017-09-05 09:23:50 +0100503### 2048-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100504rsa_pkcs8_pbe_sha1_2048_3des.der: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100505 $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-3DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100506all_final += rsa_pkcs8_pbe_sha1_2048_3des.der
507rsa_pkcs8_pbe_sha1_2048_3des.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100508 $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-3DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100509all_final += rsa_pkcs8_pbe_sha1_2048_3des.pem
510keys_rsa_enc_pkcs8_v1_2048_3des: rsa_pkcs8_pbe_sha1_2048_3des.pem rsa_pkcs8_pbe_sha1_2048_3des.der
Hanno Beckerd16f6122017-09-05 09:23:50 +0100511
Hanno Becker08a36dd2017-09-29 20:05:23 +0100512rsa_pkcs8_pbe_sha1_2048_2des.der: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100513 $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-2DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100514all_final += rsa_pkcs8_pbe_sha1_2048_2des.der
515rsa_pkcs8_pbe_sha1_2048_2des.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100516 $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-2DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100517all_final += rsa_pkcs8_pbe_sha1_2048_2des.pem
518keys_rsa_enc_pkcs8_v1_2048_2des: rsa_pkcs8_pbe_sha1_2048_2des.pem rsa_pkcs8_pbe_sha1_2048_2des.der
Hanno Beckerd16f6122017-09-05 09:23:50 +0100519
TRodziewicz75628d52021-06-18 12:56:27 +0200520keys_rsa_enc_pkcs8_v1_2048: keys_rsa_enc_pkcs8_v1_2048_3des keys_rsa_enc_pkcs8_v1_2048_2des
521
Hanno Beckerd16f6122017-09-05 09:23:50 +0100522### 4096-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100523rsa_pkcs8_pbe_sha1_4096_3des.der: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100524 $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-3DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100525all_final += rsa_pkcs8_pbe_sha1_4096_3des.der
526rsa_pkcs8_pbe_sha1_4096_3des.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100527 $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-3DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100528all_final += rsa_pkcs8_pbe_sha1_4096_3des.pem
529keys_rsa_enc_pkcs8_v1_4096_3des: rsa_pkcs8_pbe_sha1_4096_3des.pem rsa_pkcs8_pbe_sha1_4096_3des.der
Hanno Beckerd16f6122017-09-05 09:23:50 +0100530
Hanno Becker08a36dd2017-09-29 20:05:23 +0100531rsa_pkcs8_pbe_sha1_4096_2des.der: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100532 $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-2DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100533all_final += rsa_pkcs8_pbe_sha1_4096_2des.der
534rsa_pkcs8_pbe_sha1_4096_2des.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100535 $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-2DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100536all_final += rsa_pkcs8_pbe_sha1_4096_2des.pem
537keys_rsa_enc_pkcs8_v1_4096_2des: rsa_pkcs8_pbe_sha1_4096_2des.pem rsa_pkcs8_pbe_sha1_4096_2des.der
Hanno Beckerd16f6122017-09-05 09:23:50 +0100538
TRodziewicz75628d52021-06-18 12:56:27 +0200539keys_rsa_enc_pkcs8_v1_4096: keys_rsa_enc_pkcs8_v1_4096_3des keys_rsa_enc_pkcs8_v1_4096_2des
540
Hanno Beckerd16f6122017-09-05 09:23:50 +0100541###
Antonio Quartullif476b9d2018-02-01 13:54:13 +0800542### PKCS8-v2 encoded, encrypted RSA keys, no PRF specified (default for OpenSSL1.0: hmacWithSHA1)
Hanno Beckerd16f6122017-09-05 09:23:50 +0100543###
544
545### 1024-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100546rsa_pkcs8_pbes2_pbkdf2_1024_3des.der: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100547 $(OPENSSL) pkcs8 -topk8 -v2 des3 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100548all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des.der
549rsa_pkcs8_pbes2_pbkdf2_1024_3des.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100550 $(OPENSSL) pkcs8 -topk8 -v2 des3 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100551all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des.pem
552keys_rsa_enc_pkcs8_v2_1024_3des: rsa_pkcs8_pbes2_pbkdf2_1024_3des.der rsa_pkcs8_pbes2_pbkdf2_1024_3des.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100553
Hanno Becker08a36dd2017-09-29 20:05:23 +0100554rsa_pkcs8_pbes2_pbkdf2_1024_des.der: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100555 $(OPENSSL) pkcs8 -topk8 -v2 des -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100556all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des.der
557rsa_pkcs8_pbes2_pbkdf2_1024_des.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100558 $(OPENSSL) pkcs8 -topk8 -v2 des -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100559all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des.pem
560keys_rsa_enc_pkcs8_v2_1024_des: rsa_pkcs8_pbes2_pbkdf2_1024_des.der rsa_pkcs8_pbes2_pbkdf2_1024_des.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100561
562keys_rsa_enc_pkcs8_v2_1024: keys_rsa_enc_pkcs8_v2_1024_3des keys_rsa_enc_pkcs8_v2_1024_des
563
564### 2048-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100565rsa_pkcs8_pbes2_pbkdf2_2048_3des.der: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100566 $(OPENSSL) pkcs8 -topk8 -v2 des3 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100567all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des.der
568rsa_pkcs8_pbes2_pbkdf2_2048_3des.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100569 $(OPENSSL) pkcs8 -topk8 -v2 des3 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100570all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des.pem
571keys_rsa_enc_pkcs8_v2_2048_3des: rsa_pkcs8_pbes2_pbkdf2_2048_3des.der rsa_pkcs8_pbes2_pbkdf2_2048_3des.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100572
Hanno Becker08a36dd2017-09-29 20:05:23 +0100573rsa_pkcs8_pbes2_pbkdf2_2048_des.der: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100574 $(OPENSSL) pkcs8 -topk8 -v2 des -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100575all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des.der
576rsa_pkcs8_pbes2_pbkdf2_2048_des.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100577 $(OPENSSL) pkcs8 -topk8 -v2 des -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100578all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des.pem
579keys_rsa_enc_pkcs8_v2_2048_des: rsa_pkcs8_pbes2_pbkdf2_2048_des.der rsa_pkcs8_pbes2_pbkdf2_2048_des.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100580
581keys_rsa_enc_pkcs8_v2_2048: keys_rsa_enc_pkcs8_v2_2048_3des keys_rsa_enc_pkcs8_v2_2048_des
582
583### 4096-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100584rsa_pkcs8_pbes2_pbkdf2_4096_3des.der: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100585 $(OPENSSL) pkcs8 -topk8 -v2 des3 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100586all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des.der
587rsa_pkcs8_pbes2_pbkdf2_4096_3des.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100588 $(OPENSSL) pkcs8 -topk8 -v2 des3 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100589all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des.pem
590keys_rsa_enc_pkcs8_v2_4096_3des: rsa_pkcs8_pbes2_pbkdf2_4096_3des.der rsa_pkcs8_pbes2_pbkdf2_4096_3des.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100591
Hanno Becker08a36dd2017-09-29 20:05:23 +0100592rsa_pkcs8_pbes2_pbkdf2_4096_des.der: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100593 $(OPENSSL) pkcs8 -topk8 -v2 des -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100594all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des.der
595rsa_pkcs8_pbes2_pbkdf2_4096_des.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100596 $(OPENSSL) pkcs8 -topk8 -v2 des -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100597all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des.pem
598keys_rsa_enc_pkcs8_v2_4096_des: rsa_pkcs8_pbes2_pbkdf2_4096_des.der rsa_pkcs8_pbes2_pbkdf2_4096_des.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100599
600keys_rsa_enc_pkcs8_v2_4096: keys_rsa_enc_pkcs8_v2_4096_3des keys_rsa_enc_pkcs8_v2_4096_des
601
602###
Antonio Quartullif476b9d2018-02-01 13:54:13 +0800603### PKCS8-v2 encoded, encrypted RSA keys, PRF hmacWithSHA224
604###
605
606### 1024-bit
607rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha224.der: rsa_pkcs1_1024_clear.pem
608 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA224 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
609all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha224.der
610rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha224.pem: rsa_pkcs1_1024_clear.pem
611 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA224 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
612all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha224.pem
613keys_rsa_enc_pkcs8_v2_1024_3des_sha224: rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha224.der rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha224.pem
614
615rsa_pkcs8_pbes2_pbkdf2_1024_des_sha224.der: rsa_pkcs1_1024_clear.pem
616 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA224 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
617all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha224.der
618rsa_pkcs8_pbes2_pbkdf2_1024_des_sha224.pem: rsa_pkcs1_1024_clear.pem
619 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA224 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
620all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha224.pem
621keys_rsa_enc_pkcs8_v2_1024_des_sha224: rsa_pkcs8_pbes2_pbkdf2_1024_des_sha224.der rsa_pkcs8_pbes2_pbkdf2_1024_des_sha224.pem
622
623keys_rsa_enc_pkcs8_v2_1024_sha224: keys_rsa_enc_pkcs8_v2_1024_3des_sha224 keys_rsa_enc_pkcs8_v2_1024_des_sha224
624
625### 2048-bit
626rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha224.der: rsa_pkcs1_2048_clear.pem
627 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA224 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
628all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha224.der
629rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha224.pem: rsa_pkcs1_2048_clear.pem
630 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA224 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
631all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha224.pem
632keys_rsa_enc_pkcs8_v2_2048_3des_sha224: rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha224.der rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha224.pem
633
634rsa_pkcs8_pbes2_pbkdf2_2048_des_sha224.der: rsa_pkcs1_2048_clear.pem
635 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA224 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
636all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha224.der
637rsa_pkcs8_pbes2_pbkdf2_2048_des_sha224.pem: rsa_pkcs1_2048_clear.pem
638 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA224 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
639all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha224.pem
640keys_rsa_enc_pkcs8_v2_2048_des_sha224: rsa_pkcs8_pbes2_pbkdf2_2048_des_sha224.der rsa_pkcs8_pbes2_pbkdf2_2048_des_sha224.pem
641
642keys_rsa_enc_pkcs8_v2_2048_sha224: keys_rsa_enc_pkcs8_v2_2048_3des_sha224 keys_rsa_enc_pkcs8_v2_2048_des_sha224
643
644### 4096-bit
645rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha224.der: rsa_pkcs1_4096_clear.pem
646 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA224 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
647all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha224.der
648rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha224.pem: rsa_pkcs1_4096_clear.pem
649 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA224 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
650all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha224.pem
651keys_rsa_enc_pkcs8_v2_4096_3des_sha224: rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha224.der rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha224.pem
652
653rsa_pkcs8_pbes2_pbkdf2_4096_des_sha224.der: rsa_pkcs1_4096_clear.pem
654 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA224 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
655all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha224.der
656rsa_pkcs8_pbes2_pbkdf2_4096_des_sha224.pem: rsa_pkcs1_4096_clear.pem
657 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA224 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
658all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha224.pem
659keys_rsa_enc_pkcs8_v2_4096_des_sha224: rsa_pkcs8_pbes2_pbkdf2_4096_des_sha224.der rsa_pkcs8_pbes2_pbkdf2_4096_des_sha224.pem
660
661keys_rsa_enc_pkcs8_v2_4096_sha224: keys_rsa_enc_pkcs8_v2_4096_3des_sha224 keys_rsa_enc_pkcs8_v2_4096_des_sha224
662
663###
664### PKCS8-v2 encoded, encrypted RSA keys, PRF hmacWithSHA256
665###
666
667### 1024-bit
668rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha256.der: rsa_pkcs1_1024_clear.pem
669 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA256 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
670all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha256.der
671rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha256.pem: rsa_pkcs1_1024_clear.pem
672 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA256 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
673all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha256.pem
674keys_rsa_enc_pkcs8_v2_1024_3des_sha256: rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha256.der rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha256.pem
675
676rsa_pkcs8_pbes2_pbkdf2_1024_des_sha256.der: rsa_pkcs1_1024_clear.pem
677 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA256 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
678all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha256.der
679rsa_pkcs8_pbes2_pbkdf2_1024_des_sha256.pem: rsa_pkcs1_1024_clear.pem
680 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA256 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
681all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha256.pem
682keys_rsa_enc_pkcs8_v2_1024_des_sha256: rsa_pkcs8_pbes2_pbkdf2_1024_des_sha256.der rsa_pkcs8_pbes2_pbkdf2_1024_des_sha256.pem
683
684keys_rsa_enc_pkcs8_v2_1024_sha256: keys_rsa_enc_pkcs8_v2_1024_3des_sha256 keys_rsa_enc_pkcs8_v2_1024_des_sha256
685
686### 2048-bit
687rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha256.der: rsa_pkcs1_2048_clear.pem
688 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA256 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
689all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha256.der
690rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha256.pem: rsa_pkcs1_2048_clear.pem
691 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA256 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
692all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha256.pem
693keys_rsa_enc_pkcs8_v2_2048_3des_sha256: rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha256.der rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha256.pem
694
695rsa_pkcs8_pbes2_pbkdf2_2048_des_sha256.der: rsa_pkcs1_2048_clear.pem
696 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA256 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
697all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha256.der
698rsa_pkcs8_pbes2_pbkdf2_2048_des_sha256.pem: rsa_pkcs1_2048_clear.pem
699 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA256 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
700all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha256.pem
701keys_rsa_enc_pkcs8_v2_2048_des_sha256: rsa_pkcs8_pbes2_pbkdf2_2048_des_sha256.der rsa_pkcs8_pbes2_pbkdf2_2048_des_sha256.pem
702
703keys_rsa_enc_pkcs8_v2_2048_sha256: keys_rsa_enc_pkcs8_v2_2048_3des_sha256 keys_rsa_enc_pkcs8_v2_2048_des_sha256
704
705### 4096-bit
706rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha256.der: rsa_pkcs1_4096_clear.pem
707 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA256 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
708all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha256.der
709rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha256.pem: rsa_pkcs1_4096_clear.pem
710 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA256 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
711all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha256.pem
712keys_rsa_enc_pkcs8_v2_4096_3des_sha256: rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha256.der rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha256.pem
713
714rsa_pkcs8_pbes2_pbkdf2_4096_des_sha256.der: rsa_pkcs1_4096_clear.pem
715 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA256 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
716all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha256.der
717rsa_pkcs8_pbes2_pbkdf2_4096_des_sha256.pem: rsa_pkcs1_4096_clear.pem
718 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA256 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
719all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha256.pem
720keys_rsa_enc_pkcs8_v2_4096_des_sha256: rsa_pkcs8_pbes2_pbkdf2_4096_des_sha256.der rsa_pkcs8_pbes2_pbkdf2_4096_des_sha256.pem
721
722keys_rsa_enc_pkcs8_v2_4096_sha256: keys_rsa_enc_pkcs8_v2_4096_3des_sha256 keys_rsa_enc_pkcs8_v2_4096_des_sha256
723
724###
725### PKCS8-v2 encoded, encrypted RSA keys, PRF hmacWithSHA384
726###
727
728### 1024-bit
729rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha384.der: rsa_pkcs1_1024_clear.pem
730 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA384 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
731all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha384.der
732rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha384.pem: rsa_pkcs1_1024_clear.pem
733 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA384 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
734all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha384.pem
735keys_rsa_enc_pkcs8_v2_1024_3des_sha384: rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha384.der rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha384.pem
736
737rsa_pkcs8_pbes2_pbkdf2_1024_des_sha384.der: rsa_pkcs1_1024_clear.pem
738 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA384 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
739all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha384.der
740rsa_pkcs8_pbes2_pbkdf2_1024_des_sha384.pem: rsa_pkcs1_1024_clear.pem
741 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA384 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
742all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha384.pem
743keys_rsa_enc_pkcs8_v2_1024_des_sha384: rsa_pkcs8_pbes2_pbkdf2_1024_des_sha384.der rsa_pkcs8_pbes2_pbkdf2_1024_des_sha384.pem
744
745keys_rsa_enc_pkcs8_v2_1024_sha384: keys_rsa_enc_pkcs8_v2_1024_3des_sha384 keys_rsa_enc_pkcs8_v2_1024_des_sha384
746
747### 2048-bit
748rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha384.der: rsa_pkcs1_2048_clear.pem
749 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA384 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
750all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha384.der
751rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha384.pem: rsa_pkcs1_2048_clear.pem
752 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA384 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
753all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha384.pem
754keys_rsa_enc_pkcs8_v2_2048_3des_sha384: rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha384.der rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha384.pem
755
756rsa_pkcs8_pbes2_pbkdf2_2048_des_sha384.der: rsa_pkcs1_2048_clear.pem
757 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA384 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
758all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha384.der
759rsa_pkcs8_pbes2_pbkdf2_2048_des_sha384.pem: rsa_pkcs1_2048_clear.pem
760 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA384 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
761all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha384.pem
762keys_rsa_enc_pkcs8_v2_2048_des_sha384: rsa_pkcs8_pbes2_pbkdf2_2048_des_sha384.der rsa_pkcs8_pbes2_pbkdf2_2048_des_sha384.pem
763
764keys_rsa_enc_pkcs8_v2_2048_sha384: keys_rsa_enc_pkcs8_v2_2048_3des_sha384 keys_rsa_enc_pkcs8_v2_2048_des_sha384
765
766### 4096-bit
767rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha384.der: rsa_pkcs1_4096_clear.pem
768 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA384 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
769all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha384.der
770rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha384.pem: rsa_pkcs1_4096_clear.pem
771 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA384 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
772all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha384.pem
773keys_rsa_enc_pkcs8_v2_4096_3des_sha384: rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha384.der rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha384.pem
774
775rsa_pkcs8_pbes2_pbkdf2_4096_des_sha384.der: rsa_pkcs1_4096_clear.pem
776 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA384 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
777all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha384.der
778rsa_pkcs8_pbes2_pbkdf2_4096_des_sha384.pem: rsa_pkcs1_4096_clear.pem
779 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA384 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
780all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha384.pem
781keys_rsa_enc_pkcs8_v2_4096_des_sha384: rsa_pkcs8_pbes2_pbkdf2_4096_des_sha384.der rsa_pkcs8_pbes2_pbkdf2_4096_des_sha384.pem
782
783keys_rsa_enc_pkcs8_v2_4096_sha384: keys_rsa_enc_pkcs8_v2_4096_3des_sha384 keys_rsa_enc_pkcs8_v2_4096_des_sha384
784
785###
786### PKCS8-v2 encoded, encrypted RSA keys, PRF hmacWithSHA512
787###
788
789### 1024-bit
790rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha512.der: rsa_pkcs1_1024_clear.pem
791 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA512 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
792all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha512.der
793rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha512.pem: rsa_pkcs1_1024_clear.pem
794 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA512 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
795all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha512.pem
796keys_rsa_enc_pkcs8_v2_1024_3des_sha512: rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha512.der rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha512.pem
797
798rsa_pkcs8_pbes2_pbkdf2_1024_des_sha512.der: rsa_pkcs1_1024_clear.pem
799 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA512 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
800all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha512.der
801rsa_pkcs8_pbes2_pbkdf2_1024_des_sha512.pem: rsa_pkcs1_1024_clear.pem
802 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA512 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
803all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha512.pem
804keys_rsa_enc_pkcs8_v2_1024_des_sha512: rsa_pkcs8_pbes2_pbkdf2_1024_des_sha512.der rsa_pkcs8_pbes2_pbkdf2_1024_des_sha512.pem
805
806keys_rsa_enc_pkcs8_v2_1024_sha512: keys_rsa_enc_pkcs8_v2_1024_3des_sha512 keys_rsa_enc_pkcs8_v2_1024_des_sha512
807
808### 2048-bit
809rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha512.der: rsa_pkcs1_2048_clear.pem
810 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA512 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
811all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha512.der
812rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha512.pem: rsa_pkcs1_2048_clear.pem
813 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA512 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
814all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha512.pem
815keys_rsa_enc_pkcs8_v2_2048_3des_sha512: rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha512.der rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha512.pem
816
817rsa_pkcs8_pbes2_pbkdf2_2048_des_sha512.der: rsa_pkcs1_2048_clear.pem
818 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA512 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
819all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha512.der
820rsa_pkcs8_pbes2_pbkdf2_2048_des_sha512.pem: rsa_pkcs1_2048_clear.pem
821 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA512 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
822all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha512.pem
823keys_rsa_enc_pkcs8_v2_2048_des_sha512: rsa_pkcs8_pbes2_pbkdf2_2048_des_sha512.der rsa_pkcs8_pbes2_pbkdf2_2048_des_sha512.pem
824
825keys_rsa_enc_pkcs8_v2_2048_sha512: keys_rsa_enc_pkcs8_v2_2048_3des_sha512 keys_rsa_enc_pkcs8_v2_2048_des_sha512
826
827### 4096-bit
828rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha512.der: rsa_pkcs1_4096_clear.pem
829 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA512 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
830all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha512.der
831rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha512.pem: rsa_pkcs1_4096_clear.pem
832 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA512 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
833all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha512.pem
834keys_rsa_enc_pkcs8_v2_4096_3des_sha512: rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha512.der rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha512.pem
835
836rsa_pkcs8_pbes2_pbkdf2_4096_des_sha512.der: rsa_pkcs1_4096_clear.pem
837 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA512 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
838all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha512.der
839rsa_pkcs8_pbes2_pbkdf2_4096_des_sha512.pem: rsa_pkcs1_4096_clear.pem
840 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA512 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
841all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha512.pem
842keys_rsa_enc_pkcs8_v2_4096_des_sha512: rsa_pkcs8_pbes2_pbkdf2_4096_des_sha512.der rsa_pkcs8_pbes2_pbkdf2_4096_des_sha512.pem
843
844keys_rsa_enc_pkcs8_v2_4096_sha512: keys_rsa_enc_pkcs8_v2_4096_3des_sha512 keys_rsa_enc_pkcs8_v2_4096_des_sha512
845
846###
Hanno Beckerd16f6122017-09-05 09:23:50 +0100847### Rules to generate all RSA keys from a particular class
848###
849
850### Generate basic unencrypted RSA keys
Hanno Becker08a36dd2017-09-29 20:05:23 +0100851keys_rsa_unenc: rsa_pkcs1_1024_clear.pem rsa_pkcs1_2048_clear.pem rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100852
853### Generate PKCS1-encoded encrypted RSA keys
854keys_rsa_enc_basic: keys_rsa_enc_basic_1024 keys_rsa_enc_basic_2048 keys_rsa_enc_basic_4096
855
856### Generate PKCS8-v1 encrypted RSA keys
857keys_rsa_enc_pkcs8_v1: keys_rsa_enc_pkcs8_v1_1024 keys_rsa_enc_pkcs8_v1_2048 keys_rsa_enc_pkcs8_v1_4096
858
859### Generate PKCS8-v2 encrypted RSA keys
Antonio Quartullif476b9d2018-02-01 13:54:13 +0800860keys_rsa_enc_pkcs8_v2: keys_rsa_enc_pkcs8_v2_1024 keys_rsa_enc_pkcs8_v2_2048 keys_rsa_enc_pkcs8_v2_4096 keys_rsa_enc_pkcs8_v2_1024_sha224 keys_rsa_enc_pkcs8_v2_2048_sha224 keys_rsa_enc_pkcs8_v2_4096_sha224 keys_rsa_enc_pkcs8_v2_1024_sha256 keys_rsa_enc_pkcs8_v2_2048_sha256 keys_rsa_enc_pkcs8_v2_4096_sha256 keys_rsa_enc_pkcs8_v2_1024_sha384 keys_rsa_enc_pkcs8_v2_2048_sha384 keys_rsa_enc_pkcs8_v2_4096_sha384 keys_rsa_enc_pkcs8_v2_1024_sha512 keys_rsa_enc_pkcs8_v2_2048_sha512 keys_rsa_enc_pkcs8_v2_4096_sha512
Hanno Beckerd16f6122017-09-05 09:23:50 +0100861
862### Generate all RSA keys
863keys_rsa_all: keys_rsa_unenc keys_rsa_enc_basic keys_rsa_enc_pkcs8_v1 keys_rsa_enc_pkcs8_v2
864
Jethro Beekmand2df9362018-02-16 13:11:04 -0800865################################################################
866#### Generate various EC keys
867################################################################
Gilles Peskineea8d6972017-11-28 17:30:52 +0100868
Jethro Beekmand2df9362018-02-16 13:11:04 -0800869###
870### PKCS8 encoded
871###
872
873ec_prv.pk8.der:
874 $(OPENSSL) genpkey -algorithm EC -pkeyopt ec_paramgen_curve:prime192v1 -pkeyopt ec_param_enc:named_curve -out $@ -outform DER
875all_final += ec_prv.pk8.der
876
877# ### Instructions for creating `ec_prv.pk8nopub.der`,
878# ### `ec_prv.pk8nopubparam.der`, and `ec_prv.pk8param.der` by hand from
879# ### `ec_prv.pk8.der`.
880#
881# These instructions assume you are familiar with ASN.1 DER encoding and can
882# use a hex editor to manipulate DER.
883#
884# The relevant ASN.1 definitions for a PKCS#8 encoded Elliptic Curve key are:
885#
886# PrivateKeyInfo ::= SEQUENCE {
887# version Version,
888# privateKeyAlgorithm PrivateKeyAlgorithmIdentifier,
889# privateKey PrivateKey,
890# attributes [0] IMPLICIT Attributes OPTIONAL
891# }
892#
893# AlgorithmIdentifier ::= SEQUENCE {
894# algorithm OBJECT IDENTIFIER,
895# parameters ANY DEFINED BY algorithm OPTIONAL
896# }
897#
898# ECParameters ::= CHOICE {
899# namedCurve OBJECT IDENTIFIER
900# -- implicitCurve NULL
901# -- specifiedCurve SpecifiedECDomain
902# }
903#
904# ECPrivateKey ::= SEQUENCE {
905# version INTEGER { ecPrivkeyVer1(1) } (ecPrivkeyVer1),
906# privateKey OCTET STRING,
907# parameters [0] ECParameters {{ NamedCurve }} OPTIONAL,
908# publicKey [1] BIT STRING OPTIONAL
909# }
910#
911# `ec_prv.pk8.der` as generatde above by OpenSSL should have the following
912# fields:
913#
914# * privateKeyAlgorithm namedCurve
915# * privateKey.parameters NOT PRESENT
916# * privateKey.publicKey PRESENT
917# * attributes NOT PRESENT
918#
919# # ec_prv.pk8nopub.der
920#
921# Take `ec_prv.pk8.der` and remove `privateKey.publicKey`.
922#
923# # ec_prv.pk8nopubparam.der
924#
925# Take `ec_prv.pk8nopub.der` and add `privateKey.parameters`, the same value as
926# `privateKeyAlgorithm.namedCurve`. Don't forget to add the explicit tag.
927#
928# # ec_prv.pk8param.der
929#
930# Take `ec_prv.pk8.der` and add `privateKey.parameters`, the same value as
931# `privateKeyAlgorithm.namedCurve`. Don't forget to add the explicit tag.
932
933ec_prv.pk8.pem: ec_prv.pk8.der
934 $(OPENSSL) pkey -in $< -inform DER -out $@
935all_final += ec_prv.pk8.pem
936ec_prv.pk8nopub.pem: ec_prv.pk8nopub.der
937 $(OPENSSL) pkey -in $< -inform DER -out $@
938all_final += ec_prv.pk8nopub.pem
939ec_prv.pk8nopubparam.pem: ec_prv.pk8nopubparam.der
940 $(OPENSSL) pkey -in $< -inform DER -out $@
941all_final += ec_prv.pk8nopubparam.pem
942ec_prv.pk8param.pem: ec_prv.pk8param.der
943 $(OPENSSL) pkey -in $< -inform DER -out $@
944all_final += ec_prv.pk8param.pem
Gilles Peskineea8d6972017-11-28 17:30:52 +0100945
Valerio Setti8820b572023-04-27 10:03:08 +0200946ec_pub.pem: ec_prv.sec1.der
947 $(OPENSSL) pkey -in $< -inform DER -outform PEM -pubout -out $@
948all_final += ec_pub.pem
Valerio Settic8b78652023-04-26 12:24:26 +0200949
Valerio Setti0c960162023-01-16 16:56:30 +0100950ec_prv.sec1.comp.pem: ec_prv.sec1.pem
951 $(OPENSSL) ec -in $< -out $@ -conv_form compressed
952all_final += ec_prv.sec1.comp.pem
953
954ec_224_prv.comp.pem: ec_224_prv.pem
955 $(OPENSSL) ec -in $< -out $@ -conv_form compressed
956all_final += ec_224_prv.comp.pem
957
958ec_256_prv.comp.pem: ec_256_prv.pem
959 $(OPENSSL) ec -in $< -out $@ -conv_form compressed
960all_final += ec_256_prv.comp.pem
961
962ec_384_prv.comp.pem: ec_384_prv.pem
963 $(OPENSSL) ec -in $< -out $@ -conv_form compressed
964all_final += ec_384_prv.comp.pem
965
966ec_521_prv.comp.pem: ec_521_prv.pem
967 $(OPENSSL) ec -in $< -out $@ -conv_form compressed
968all_final += ec_521_prv.comp.pem
969
970ec_bp256_prv.comp.pem: ec_bp256_prv.pem
971 $(OPENSSL) ec -in $< -out $@ -conv_form compressed
972all_final += ec_bp256_prv.comp.pem
973
974ec_bp384_prv.comp.pem: ec_bp384_prv.pem
975 $(OPENSSL) ec -in $< -out $@ -conv_form compressed
976all_final += ec_bp384_prv.comp.pem
977
978ec_bp512_prv.comp.pem: ec_bp512_prv.pem
979 $(OPENSSL) ec -in $< -out $@ -conv_form compressed
980all_final += ec_bp512_prv.comp.pem
981
982ec_pub.comp.pem: ec_pub.pem
983 $(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
984all_final += ec_pub.comp.pem
985
Valerio Settide7bb5b2023-01-25 14:02:03 +0100986ec_224_pub.comp.pem: ec_224_pub.pem
987 $(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
988all_final += ec_224_pub.comp.pem
989
Valerio Setti0c960162023-01-16 16:56:30 +0100990ec_256_pub.comp.pem: ec_256_pub.pem
991 $(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
992all_final += ec_256_pub.comp.pem
993
994ec_384_pub.comp.pem: ec_384_pub.pem
995 $(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
Valerio Settiff159532023-01-16 17:34:53 +0100996all_final += ec_384_pub.comp.pem
Valerio Setti0c960162023-01-16 16:56:30 +0100997
998ec_521_pub.comp.pem: ec_521_pub.pem
999 $(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
1000all_final += ec_521_pub.comp.pem
1001
1002ec_bp256_pub.comp.pem: ec_bp256_pub.pem
1003 $(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
1004all_final += ec_bp256_pub.comp.pem
1005
1006ec_bp384_pub.comp.pem: ec_bp384_pub.pem
1007 $(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
1008all_final += ec_bp384_pub.comp.pem
1009
1010ec_bp512_pub.comp.pem: ec_bp512_pub.pem
1011 $(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
1012all_final += ec_bp512_pub.comp.pem
1013
Jethro Beekman01672442023-04-19 14:08:14 +02001014ec_x25519_prv.der:
1015 $(OPENSSL) genpkey -algorithm X25519 -out $@ -outform DER
1016all_final += ec_x25519_prv.der
1017
1018ec_x25519_pub.der: ec_x25519_pub.der
1019 $(OPENSSL) pkey -in $< -inform DER -out $@ -outform DER
1020all_final += ec_x25519_pub.der
1021
1022ec_x25519_prv.pem: ec_x25519_prv.pem
1023 $(OPENSSL) pkey -in $< -inform DER -out $@
1024all_final += ec_x25519_prv.pem
1025
1026ec_x25519_pub.pem: ec_x25519_pub.pem
1027 $(OPENSSL) pkey -in $< -inform DER -out $@
1028all_final += ec_x25519_pub.pem
1029
1030ec_x448_prv.der:
1031 $(OPENSSL) genpkey -algorithm X448 -out $@ -outform DER
1032all_final += ec_x448_prv.der
1033
1034ec_x448_pub.der: ec_x448_pub.der
1035 $(OPENSSL) pkey -in $< -inform DER -out $@ -outform DER
1036all_final += ec_x448_pub.der
1037
1038ec_x448_prv.pem: ec_x448_prv.pem
1039 $(OPENSSL) pkey -in $< -inform DER -out $@
1040all_final += ec_x448_prv.pem
1041
1042ec_x448_pub.pem: ec_x448_pub.pem
1043 $(OPENSSL) pkey -in $< -inform DER -out $@
1044all_final += ec_x448_pub.pem
1045
Gilles Peskineea8d6972017-11-28 17:30:52 +01001046################################################################
Valerio Setti547b3a42023-04-24 10:24:37 +02001047#### Convert PEM keys to DER format
Valerio Setti8b7d4322023-04-18 11:08:44 +02001048################################################################
1049server1.pubkey.der: server1.pubkey
1050 $(OPENSSL) pkey -pubin -in $< -out $@ -outform DER
1051all_final += server1.pubkey.der
1052
Valerio Setti232a0062023-04-18 12:53:19 +02001053rsa4096_pub.der: rsa4096_pub.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001054 $(OPENSSL) pkey -pubin -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001055all_final += rsa4096_pub.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001056
Valerio Setti232a0062023-04-18 12:53:19 +02001057ec_pub.der: ec_pub.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001058 $(OPENSSL) pkey -pubin -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001059all_final += ec_pub.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001060
Valerio Setti232a0062023-04-18 12:53:19 +02001061ec_521_pub.der: ec_521_pub.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001062 $(OPENSSL) pkey -pubin -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001063all_final += ec_521_pub.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001064
Valerio Setti232a0062023-04-18 12:53:19 +02001065ec_bp512_pub.der: ec_bp512_pub.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001066 $(OPENSSL) pkey -pubin -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001067all_final += ec_bp512_pub.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001068
1069server1.key.der: server1.key
1070 $(OPENSSL) pkey -in $< -out $@ -outform DER
1071all_final += server1.key.der
1072
Valerio Setti232a0062023-04-18 12:53:19 +02001073rsa4096_prv.der: rsa4096_prv.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001074 $(OPENSSL) pkey -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001075all_final += rsa4096_prv.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001076
Valerio Setti232a0062023-04-18 12:53:19 +02001077ec_prv.sec1.der: ec_prv.sec1.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001078 $(OPENSSL) pkey -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001079all_final += ec_prv.sec1.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001080
Valerio Setti232a0062023-04-18 12:53:19 +02001081ec_256_long_prv.der: ec_256_long_prv.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001082 $(OPENSSL) pkey -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001083all_final += ec_256_long_prv.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001084
Valerio Setti232a0062023-04-18 12:53:19 +02001085ec_521_prv.der: ec_521_prv.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001086 $(OPENSSL) pkey -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001087all_final += ec_521_prv.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001088
Valerio Setti232a0062023-04-18 12:53:19 +02001089ec_521_short_prv.der: ec_521_short_prv.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001090 $(OPENSSL) pkey -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001091all_final += ec_521_short_prv.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001092
Valerio Setti232a0062023-04-18 12:53:19 +02001093ec_bp512_prv.der: ec_bp512_prv.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001094 $(OPENSSL) pkey -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001095all_final += ec_bp512_prv.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001096
Gilles Peskinef040a172017-05-05 18:56:12 +02001097################################################################
Hanno Becker50cb93a2018-10-08 17:15:28 +01001098### Generate CSRs for X.509 write test suite
1099################################################################
1100
1101server1.req.sha1: server1.key
1102 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1
1103all_final += server1.req.sha1
1104
Hanno Becker50cb93a2018-10-08 17:15:28 +01001105server1.req.md5: server1.key
1106 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=MD5
1107all_final += server1.req.md5
1108
1109server1.req.sha224: server1.key
1110 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA224
1111all_final += server1.req.sha224
1112
1113server1.req.sha256: server1.key
1114 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA256
1115all_final += server1.req.sha256
1116
Valerio Setti48e8fc72022-10-19 15:14:29 +02001117server1.req.sha256.ext: server1.key
1118 # Generating this with OpenSSL as a comparison point to test we're getting the same result
Przemek Stekiel8e83d3a2023-02-14 12:01:16 +01001119 openssl req -new -out $@ -key $< -subj '/C=NL/O=PolarSSL/CN=PolarSSL Server 1' -sha256 -addext "extendedKeyUsage=serverAuth" -addext "subjectAltName=URI:http://pki.example.com/,IP:127.1.1.0,DNS:example.com"
Valerio Setti48e8fc72022-10-19 15:14:29 +02001120all_final += server1.req.sha256.ext
1121
Hanno Becker50cb93a2018-10-08 17:15:28 +01001122server1.req.sha384: server1.key
1123 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA384
1124all_final += server1.req.sha384
1125
1126server1.req.sha512: server1.key
1127 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA512
1128all_final += server1.req.sha512
1129
1130server1.req.cert_type: server1.key
1131 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< ns_cert_type=ssl_server subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1
1132all_final += server1.req.cert_type
1133
1134server1.req.key_usage: server1.key
1135 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< key_usage=digital_signature,non_repudiation,key_encipherment subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1
1136all_final += server1.req.key_usage
1137
1138server1.req.ku-ct: server1.key
1139 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< key_usage=digital_signature,non_repudiation,key_encipherment ns_cert_type=ssl_server subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1
1140all_final += server1.req.ku-ct
1141
Andres Amaya Garcia7067f812018-09-26 10:51:16 +01001142server1.req.key_usage_empty: server1.key
1143 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1 force_key_usage=1
1144all_final += server1.req.key_usage_empty
1145
1146server1.req.cert_type_empty: server1.key
1147 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1 force_ns_cert_type=1
1148all_final += server1.req.cert_type_empty
1149
Werner Lewisb33dacd2022-05-20 12:48:46 +01001150server1.req.commas.sha256: server1.key
1151 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL\, Commas,CN=PolarSSL Server 1" md=SHA256
1152all_final += server1.req.commas.sha256
1153
Hanno Beckerebc1f402018-10-31 16:35:59 +00001154# server2*
1155
Hanno Becker226eedb2020-08-17 12:14:00 +01001156server2_pwd_ec = PolarSSLTest
1157
Hanno Beckerebc1f402018-10-31 16:35:59 +00001158server2.req.sha256: server2.key
1159 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=localhost" md=SHA256
1160all_intermediate += server2.req.sha256
1161
Hanno Beckere21387e2019-03-12 16:49:26 +00001162server2.crt.der: server2.crt
1163 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1164all_final += server2.crt.der
1165
1166server2-sha256.crt.der: server2-sha256.crt
1167 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1168all_final += server2-sha256.crt.der
1169
1170server2.key.der: server2.key
1171 $(OPENSSL) pkey -in $< -out $@ -inform PEM -outform DER
1172all_final += server2.key.der
1173
Hanno Becker226eedb2020-08-17 12:14:00 +01001174server2.key.enc: server2.key
1175 $(OPENSSL) rsa -aes256 -in $< -out $@ -passout "pass:$(server2_pwd_ec)"
1176all_final += server2.key.enc
1177
Hanno Becker0dd11392018-11-02 08:56:15 +00001178# server5*
1179
1180# The use of 'Server 1' in the DN is intentional here, as the DN is hardcoded in the x509_write test suite.'
1181server5.req.ku.sha1: server5.key
1182 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< key_usage=digital_signature,non_repudiation subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1
1183all_final += server5.req.ku.sha1
1184
Hanno Becker50cb93a2018-10-08 17:15:28 +01001185################################################################
Hanno Becker418a6222017-09-14 07:51:28 +01001186### Generate certificates for CRT write check tests
Gilles Peskineea8d6972017-11-28 17:30:52 +01001187################################################################
1188
Hanno Becker418a6222017-09-14 07:51:28 +01001189### The test files use the Mbed TLS generated certificates server1*.crt,
1190### but for comparison with OpenSSL also rules for OpenSSL-generated
1191### certificates server1*.crt.openssl are offered.
1192###
1193### Known differences:
1194### * OpenSSL encodes trailing zero-bits in bit-strings occurring in X.509 extension
1195### as unused bits, while Mbed TLS doesn't.
Gilles Peskinef040a172017-05-05 18:56:12 +02001196
Hanno Becker418a6222017-09-14 07:51:28 +01001197test_ca_server1_db = test-ca.server1.db
1198test_ca_server1_serial = test-ca.server1.serial
1199test_ca_server1_config_file = test-ca.server1.opensslconf
1200
Hanno Becker50cb93a2018-10-08 17:15:28 +01001201# server1*
Hanno Becker418a6222017-09-14 07:51:28 +01001202
Hanno Becker50cb93a2018-10-08 17:15:28 +01001203server1.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Ron Eldor9eeb8612019-02-12 15:03:42 +02001204 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 version=3 output_file=$@
Andrzej Kurekccdd9752023-04-01 10:38:30 -04001205server1.allSubjectAltNames.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
1206 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 version=3 output_file=$@ san=URI:http://pki.example.com\;IP:1.2.3.4\;DN:C=UK,O="Mbed TLS",CN="SubjectAltName test"\;DNS:example.com\;RFC822:mail@example.com
Valerio Setti18b9b032023-01-27 11:47:57 +01001207server1.long_serial.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Valerio Setti856cec42023-01-12 14:56:54 +01001208 echo "112233445566778899aabbccddeeff0011223344" > test-ca.server1.tmp.serial
1209 $(OPENSSL) ca -in server1.req.sha256 -key PolarSSLTest -config test-ca.server1.test_serial.opensslconf -notext -batch -out $@
Valerio Setti18b9b032023-01-27 11:47:57 +01001210server1.80serial.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Valerio Setti856cec42023-01-12 14:56:54 +01001211 echo "8011223344" > test-ca.server1.tmp.serial
1212 $(OPENSSL) ca -in server1.req.sha256 -key PolarSSLTest -config test-ca.server1.test_serial.opensslconf -notext -batch -out $@
Valerio Setti18b9b032023-01-27 11:47:57 +01001213server1.long_serial_FF.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
1214 echo "ffffffffffffffffffffffffffffffff" > test-ca.server1.tmp.serial
1215 $(OPENSSL) ca -in server1.req.sha256 -key PolarSSLTest -config test-ca.server1.test_serial.opensslconf -notext -batch -out $@
Hanno Becker50cb93a2018-10-08 17:15:28 +01001216server1.noauthid.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Ron Eldor9eeb8612019-02-12 15:03:42 +02001217 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA1 authority_identifier=0 version=3 output_file=$@
Hanno Becker58fc28c2019-03-14 13:33:20 +00001218server1.crt.der: server1.crt
Ron Eldor9eeb8612019-02-12 15:03:42 +02001219 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA1 authority_identifier=0 version=3 output_file=$@
1220server1.der: server1.crt
Hanno Becker418a6222017-09-14 07:51:28 +01001221 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
Werner Lewisb33dacd2022-05-20 12:48:46 +01001222server1.commas.crt: server1.key server1.req.commas.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
1223 $(MBEDTLS_CERT_WRITE) request_file=server1.req.commas.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 version=3 output_file=$@
1224all_final += server1.crt server1.noauthid.crt server1.crt.der server1.commas.crt
Hanno Becker418a6222017-09-14 07:51:28 +01001225
Hanno Becker50cb93a2018-10-08 17:15:28 +01001226server1.key_usage.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Ron Eldor9eeb8612019-02-12 15:03:42 +02001227 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 key_usage=digital_signature,non_repudiation,key_encipherment version=3 output_file=$@
Hanno Becker50cb93a2018-10-08 17:15:28 +01001228server1.key_usage_noauthid.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Ron Eldor9eeb8612019-02-12 15:03:42 +02001229 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 key_usage=digital_signature,non_repudiation,key_encipherment authority_identifier=0 version=3 output_file=$@
Hanno Becker418a6222017-09-14 07:51:28 +01001230server1.key_usage.der: server1.key_usage.crt
1231 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1232all_final += server1.key_usage.crt server1.key_usage_noauthid.crt server1.key_usage.der
1233
Hanno Becker50cb93a2018-10-08 17:15:28 +01001234server1.cert_type.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Ron Eldor9eeb8612019-02-12 15:03:42 +02001235 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 ns_cert_type=ssl_server version=3 output_file=$@
Hanno Becker50cb93a2018-10-08 17:15:28 +01001236server1.cert_type_noauthid.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Ron Eldor9eeb8612019-02-12 15:03:42 +02001237 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 ns_cert_type=ssl_server authority_identifier=0 version=3 output_file=$@
Hanno Becker418a6222017-09-14 07:51:28 +01001238server1.cert_type.der: server1.cert_type.crt
1239 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1240all_final += server1.cert_type.crt server1.cert_type_noauthid.crt server1.cert_type.der
1241
Hanno Becker50cb93a2018-10-08 17:15:28 +01001242server1.v1.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Ron Eldor9eeb8612019-02-12 15:03:42 +02001243 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 version=1 output_file=$@
Hanno Becker418a6222017-09-14 07:51:28 +01001244server1.v1.der: server1.v1.crt
1245 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1246all_final += server1.v1.crt server1.v1.der
1247
Darren Krahn9c134ce2021-01-13 22:04:45 -08001248server1.ca.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
1249 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 is_ca=1 version=3 output_file=$@
1250server1.ca_noauthid.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
1251 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA1 authority_identifier=0 is_ca=1 version=3 output_file=$@
1252server1.ca.der: server1.ca.crt
1253 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1254all_final += server1.ca.crt server1.ca_noauthid.crt server1.ca.der
1255
Ron Eldor9eeb8612019-02-12 15:03:42 +02001256server1_ca.crt: server1.crt $(test_ca_crt)
1257 cat server1.crt $(test_ca_crt) > $@
1258all_final += server1_ca.crt
1259
1260cert_sha1.crt: server1.key
1261 $(MBEDTLS_CERT_WRITE) subject_key=server1.key subject_name="C=NL, O=PolarSSL, CN=PolarSSL Cert SHA1" serial=7 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA1 version=3 output_file=$@
1262all_final += cert_sha1.crt
1263
1264cert_sha224.crt: server1.key
1265 $(MBEDTLS_CERT_WRITE) subject_key=server1.key subject_name="C=NL, O=PolarSSL, CN=PolarSSL Cert SHA224" serial=8 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA224 version=3 output_file=$@
1266all_final += cert_sha224.crt
1267
1268cert_sha256.crt: server1.key
1269 $(MBEDTLS_CERT_WRITE) subject_key=server1.key subject_name="C=NL, O=PolarSSL, CN=PolarSSL Cert SHA256" serial=9 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA256 version=3 output_file=$@
1270all_final += cert_sha256.crt
1271
1272cert_sha384.crt: server1.key
1273 $(MBEDTLS_CERT_WRITE) subject_key=server1.key subject_name="C=NL, O=PolarSSL, CN=PolarSSL Cert SHA384" serial=10 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA384 version=3 output_file=$@
1274all_final += cert_sha384.crt
1275
1276cert_sha512.crt: server1.key
1277 $(MBEDTLS_CERT_WRITE) subject_key=server1.key subject_name="C=NL, O=PolarSSL, CN=PolarSSL Cert SHA512" serial=11 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA512 version=3 output_file=$@
1278all_final += cert_sha512.crt
1279
1280cert_example_wildcard.crt: server1.key
1281 $(MBEDTLS_CERT_WRITE) subject_key=server1.key subject_name="C=NL, O=PolarSSL, CN=*.example.com" serial=12 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA1 version=3 output_file=$@
1282all_final += cert_example_wildcard.crt
1283
Hanno Becker418a6222017-09-14 07:51:28 +01001284# OpenSSL-generated certificates for comparison
Hanno Becker81535d02017-09-13 15:39:59 +01001285# Also provide certificates in DER format to allow
Hanno Becker418a6222017-09-14 07:51:28 +01001286# direct binary comparison using e.g. dumpasn1
Hanno Becker50cb93a2018-10-08 17:15:28 +01001287server1.crt.openssl server1.key_usage.crt.openssl server1.cert_type.crt.openssl: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa) $(test_ca_server1_config_file)
Hanno Becker418a6222017-09-14 07:51:28 +01001288 echo "01" > $(test_ca_server1_serial)
1289 rm -f $(test_ca_server1_db)
1290 touch $(test_ca_server1_db)
Hanno Becker50cb93a2018-10-08 17:15:28 +01001291 $(OPENSSL) ca -batch -passin "pass:$(test_ca_pwd_rsa)" -config $(test_ca_server1_config_file) -in server1.req.sha256 -extensions v3_ext -extfile $@.v3_ext -out $@
Hanno Becker418a6222017-09-14 07:51:28 +01001292server1.der.openssl: server1.crt.openssl
1293 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1294server1.key_usage.der.openssl: server1.key_usage.crt.openssl
1295 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1296server1.cert_type.der.openssl: server1.cert_type.crt.openssl
1297 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1298
Hanno Becker50cb93a2018-10-08 17:15:28 +01001299server1.v1.crt.openssl: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa) $(test_ca_server1_config_file)
Hanno Becker418a6222017-09-14 07:51:28 +01001300 echo "01" > $(test_ca_server1_serial)
1301 rm -f $(test_ca_server1_db)
1302 touch $(test_ca_server1_db)
Hanno Becker50cb93a2018-10-08 17:15:28 +01001303 $(OPENSSL) ca -batch -passin "pass:$(test_ca_pwd_rsa)" -config $(test_ca_server1_config_file) -in server1.req.sha256 -out $@
Hanno Becker418a6222017-09-14 07:51:28 +01001304server1.v1.der.openssl: server1.v1.crt.openssl
1305 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1306
Ron Eldorb7c96262019-02-06 18:48:37 +02001307# To revoke certificate in the openssl database:
1308#
1309# $(OPENSSL) ca -gencrl -batch -cert $(test_ca_crt) -keyfile $(test_ca_key_file_rsa) -key $(test_ca_pwd_rsa) -config $(test_ca_server1_config_file) -md sha256 -crldays 365 -revoke server1.crt
1310
1311crl.pem: $(test_ca_crt) $(test_ca_key_file_rsa) $(test_ca_config_file)
1312 $(OPENSSL) ca -gencrl -batch -cert $(test_ca_crt) -keyfile $(test_ca_key_file_rsa) -key $(test_ca_pwd_rsa) -config $(test_ca_server1_config_file) -md sha1 -crldays 3653 -out $@
1313
Raoul Strackxa4e86142020-06-15 17:03:13 +02001314crl-futureRevocationDate.pem: $(test_ca_crt) $(test_ca_key_file_rsa) $(test_ca_config_file) test-ca.server1.future-crl.db test-ca.server1.future-crl.opensslconf
1315 $(FAKETIME) '2028-12-31' $(OPENSSL) ca -gencrl -config test-ca.server1.future-crl.opensslconf -crldays 365 -passin "pass:$(test_ca_pwd_rsa)" -out $@
1316
1317server1_all: crl.pem crl-futureRevocationDate.pem server1.crt server1.noauthid.crt server1.crt.openssl server1.v1.crt server1.v1.crt.openssl server1.key_usage.crt server1.key_usage_noauthid.crt server1.key_usage.crt.openssl server1.cert_type.crt server1.cert_type_noauthid.crt server1.cert_type.crt.openssl server1.der server1.der.openssl server1.v1.der server1.v1.der.openssl server1.key_usage.der server1.key_usage.der.openssl server1.cert_type.der server1.cert_type.der.openssl
Gilles Peskinef040a172017-05-05 18:56:12 +02001318
Hanno Beckerebc1f402018-10-31 16:35:59 +00001319# server2*
1320
1321server2.crt: server2.req.sha256
Ron Eldor9eeb8612019-02-12 15:03:42 +02001322 $(MBEDTLS_CERT_WRITE) request_file=server2.req.sha256 serial=2 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA1 version=3 output_file=$@
Hanno Beckere21387e2019-03-12 16:49:26 +00001323all_final += server2.crt
Hanno Beckerebc1f402018-10-31 16:35:59 +00001324
Ron Eldor9eeb8612019-02-12 15:03:42 +02001325server2.der: server2.crt
1326 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1327all_final += server2.crt server2.der
1328
Hanno Beckerebc1f402018-10-31 16:35:59 +00001329server2-sha256.crt: server2.req.sha256
Ron Eldor9eeb8612019-02-12 15:03:42 +02001330 $(MBEDTLS_CERT_WRITE) request_file=server2.req.sha256 serial=2 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA256 version=3 output_file=$@
Hanno Beckerebc1f402018-10-31 16:35:59 +00001331all_final += server2-sha256.crt
1332
TRodziewicz10e8cf52021-05-31 17:58:57 +02001333# MD5 test certificate
Gilles Peskinef040a172017-05-05 18:56:12 +02001334
Hanno Becker2e0f71f2019-06-03 14:14:04 +01001335cert_md_test_key = $(cli_crt_key_file_rsa)
1336
Hanno Becker2e0f71f2019-06-03 14:14:04 +01001337cert_md5.csr: $(cert_md_test_key)
1338 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Cert MD5" md=MD5
1339all_intermediate += cert_md5.csr
1340
1341cert_md5.crt: cert_md5.csr
Hanno Becker53756b32019-06-03 14:14:38 +01001342 $(MBEDTLS_CERT_WRITE) request_file=$< serial=6 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20000101121212 not_after=20300101121212 md=MD5 version=3 output_file=$@
Hanno Becker2e0f71f2019-06-03 14:14:04 +01001343all_final += cert_md5.crt
Gilles Peskinef040a172017-05-05 18:56:12 +02001344
Jerry Yu0f99af82021-11-05 11:04:05 +08001345# TLSv1.3 test certificates
Jerry Yudda036d2021-11-30 11:19:41 +08001346ecdsa_secp256r1.key: ec_256_prv.pem
Ronald Cron64bff9f2021-12-10 14:53:24 +01001347 cp $< $@
Jerry Yu0f99af82021-11-05 11:04:05 +08001348
Jerry Yudda036d2021-11-30 11:19:41 +08001349ecdsa_secp256r1.csr: ecdsa_secp256r1.key
Jerry Yu0f99af82021-11-05 11:04:05 +08001350 $(OPENSSL) req -new -subj "/C=NL/O=PolarSSL/CN=localhost" \
1351 -key $< -out $@
Jerry Yudda036d2021-11-30 11:19:41 +08001352all_intermediate += ecdsa_secp256r1.csr
1353ecdsa_secp256r1.crt: ecdsa_secp256r1.csr
Jerry Yu0f99af82021-11-05 11:04:05 +08001354 $(OPENSSL) x509 -req -CA $(test_ca_crt_file_ec) -CAkey $(test_ca_key_file_ec) \
1355 -set_serial 77 -days 3653 -sha384 -in $< -out $@
Jerry Yudda036d2021-11-30 11:19:41 +08001356all_final += ecdsa_secp256r1.crt ecdsa_secp256r1.key
1357tls13_certs: ecdsa_secp256r1.crt ecdsa_secp256r1.key
Jerry Yu0f99af82021-11-05 11:04:05 +08001358
Jerry Yudda036d2021-11-30 11:19:41 +08001359ecdsa_secp384r1.key: ec_384_prv.pem
Ronald Cron64bff9f2021-12-10 14:53:24 +01001360 cp $< $@
Jerry Yudda036d2021-11-30 11:19:41 +08001361ecdsa_secp384r1.csr: ecdsa_secp384r1.key
Jerry Yu0f99af82021-11-05 11:04:05 +08001362 $(OPENSSL) req -new -subj "/C=NL/O=PolarSSL/CN=localhost" \
1363 -key $< -out $@
Jerry Yudda036d2021-11-30 11:19:41 +08001364all_intermediate += ecdsa_secp384r1.csr
1365ecdsa_secp384r1.crt: ecdsa_secp384r1.csr
Jerry Yu0f99af82021-11-05 11:04:05 +08001366 $(OPENSSL) x509 -req -CA $(test_ca_crt_file_ec) -CAkey $(test_ca_key_file_ec) \
Jerry Yudda036d2021-11-30 11:19:41 +08001367 -set_serial 77 -days 3653 -sha384 -in $< -out $@
1368all_final += ecdsa_secp384r1.crt ecdsa_secp384r1.key
1369tls13_certs: ecdsa_secp384r1.crt ecdsa_secp384r1.key
1370
1371ecdsa_secp521r1.key: ec_521_prv.pem
Ronald Cron64bff9f2021-12-10 14:53:24 +01001372 cp $< $@
Jerry Yudda036d2021-11-30 11:19:41 +08001373ecdsa_secp521r1.csr: ecdsa_secp521r1.key
1374 $(OPENSSL) req -new -subj "/C=NL/O=PolarSSL/CN=localhost" \
1375 -key $< -out $@
1376all_intermediate += ecdsa_secp521r1.csr
1377ecdsa_secp521r1.crt: ecdsa_secp521r1.csr
1378 $(OPENSSL) x509 -req -CA $(test_ca_crt_file_ec) -CAkey $(test_ca_key_file_ec) \
1379 -set_serial 77 -days 3653 -sha384 -in $< -out $@
1380all_final += ecdsa_secp521r1.crt ecdsa_secp521r1.key
1381tls13_certs: ecdsa_secp521r1.crt ecdsa_secp521r1.key
Jerry Yu0f99af82021-11-05 11:04:05 +08001382
Nayna Jainc9deb182020-11-16 19:03:12 +00001383# PKCS7 test data
1384pkcs7_test_cert_1 = pkcs7-rsa-sha256-1.crt
1385pkcs7_test_cert_2 = pkcs7-rsa-sha256-2.crt
Nick Childa0c15d02023-01-30 19:30:38 +00001386pkcs7_test_cert_3 = pkcs7-rsa-sha256-3.crt
Manuel Pégourié-Gonnard600bd302022-02-21 11:30:43 +01001387pkcs7_test_file = pkcs7_data.bin
Nayna Jainc9deb182020-11-16 19:03:12 +00001388
Nick Childfc234b72022-11-02 15:23:39 -05001389$(pkcs7_test_file):
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001390 printf "Hello\15\n" > $@
Nick Childfc234b72022-11-02 15:23:39 -05001391all_final += $(pkcs7_test_file)
1392
Dave Rodgmanc5874db2023-02-16 16:14:46 +00001393pkcs7_zerolendata.bin:
1394 printf '' > $@
1395all_final += pkcs7_zerolendata.bin
1396
Nick Childfc234b72022-11-02 15:23:39 -05001397pkcs7_data_1.bin:
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001398 printf "2\15\n" > $@
Nick Childfc234b72022-11-02 15:23:39 -05001399all_final += pkcs7_data_1.bin
1400
Nayna Jainc9deb182020-11-16 19:03:12 +00001401# Generate signing cert
1402pkcs7-rsa-sha256-1.crt:
1403 $(OPENSSL) req -x509 -subj="/C=NL/O=PKCS7/CN=PKCS7 Cert 1" -sha256 -nodes -days 365 -newkey rsa:2048 -keyout pkcs7-rsa-sha256-1.key -out pkcs7-rsa-sha256-1.crt
1404 cat pkcs7-rsa-sha256-1.crt pkcs7-rsa-sha256-1.key > pkcs7-rsa-sha256-1.pem
1405all_final += pkcs7-rsa-sha256-1.crt
1406
1407pkcs7-rsa-sha256-2.crt:
1408 $(OPENSSL) req -x509 -subj="/C=NL/O=PKCS7/CN=PKCS7 Cert 2" -sha256 -nodes -days 365 -newkey rsa:2048 -keyout pkcs7-rsa-sha256-2.key -out pkcs7-rsa-sha256-2.crt
1409 cat pkcs7-rsa-sha256-2.crt pkcs7-rsa-sha256-2.key > pkcs7-rsa-sha256-2.pem
1410all_final += pkcs7-rsa-sha256-2.crt
1411
Nick Childa0c15d02023-01-30 19:30:38 +00001412pkcs7-rsa-sha256-3.crt:
1413 $(OPENSSL) req -x509 -subj="/C=NL/O=PKCS7/CN=PKCS7 Cert 3" -sha256 -nodes -days 365 -newkey rsa:2048 -keyout pkcs7-rsa-sha256-3.key -out pkcs7-rsa-sha256-3.crt
1414 cat pkcs7-rsa-sha256-3.crt pkcs7-rsa-sha256-3.key > pkcs7-rsa-sha256-3.pem
1415all_final += pkcs7-rsa-sha256-3.crt
1416
Nick Childe8a81162022-12-15 14:00:51 -06001417pkcs7-rsa-expired.crt:
1418 $(FAKETIME) -f -3650d $(OPENSSL) req -x509 -subj="/C=NL/O=PKCS7/CN=PKCS7 Cert Expired" -sha256 -nodes -days 365 -newkey rsa:2048 -keyout pkcs7-rsa-expired.key -out pkcs7-rsa-expired.crt
1419all_final += pkcs7-rsa-expired.crt
1420
Dave Rodgman2e844252023-03-11 10:24:30 +00001421# File with an otherwise valid signature signed with an expired cert
1422pkcs7_data_rsa_expired.der: pkcs7-rsa-expired.key pkcs7-rsa-expired.crt pkcs7_data.bin
1423 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha256 -inkey pkcs7-rsa-expired.key -signer pkcs7-rsa-expired.crt -noattr -outform DER -out $@
1424all_final += pkcs7_data_rsa_expired.der
1425
Nick Child45525d32022-02-25 11:54:34 -06001426# Convert signing certs to DER for testing PEM-free builds
1427pkcs7-rsa-sha256-1.der: $(pkcs7_test_cert_1)
1428 $(OPENSSL) x509 -in pkcs7-rsa-sha256-1.crt -out $@ -outform DER
1429all_final += pkcs7-rsa-sha256-1.der
1430
1431pkcs7-rsa-sha256-2.der: $(pkcs7_test_cert_2)
1432 $(OPENSSL) x509 -in pkcs7-rsa-sha256-2.crt -out $@ -outform DER
1433all_final += pkcs7-rsa-sha256-2.der
1434
Dave Rodgman2e844252023-03-11 10:24:30 +00001435pkcs7-rsa-expired.der: pkcs7-rsa-expired.crt
1436 $(OPENSSL) x509 -in pkcs7-rsa-expired.crt -out $@ -outform DER
1437all_final += pkcs7-rsa-expired.der
1438
Dave Rodgmanc5874db2023-02-16 16:14:46 +00001439# pkcs7 signature file over zero-len data
1440pkcs7_zerolendata_detached.der: pkcs7_zerolendata.bin pkcs7-rsa-sha256-1.key pkcs7-rsa-sha256-1.crt
1441 $(OPENSSL) smime -sign -md sha256 -nocerts -noattr -in pkcs7_zerolendata.bin -inkey pkcs7-rsa-sha256-1.key -outform DER -binary -signer pkcs7-rsa-sha256-1.crt -out pkcs7_zerolendata_detached.der
1442all_final += pkcs7_zerolendata_detached.der
1443
Nayna Jainc9deb182020-11-16 19:03:12 +00001444# pkcs7 signature file with CERT
1445pkcs7_data_cert_signed_sha256.der: $(pkcs7_test_file) $(pkcs7_test_cert_1)
Manuel Pégourié-Gonnard600bd302022-02-21 11:30:43 +01001446 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha256 -signer pkcs7-rsa-sha256-1.pem -noattr -outform DER -out $@
Nayna Jainc9deb182020-11-16 19:03:12 +00001447all_final += pkcs7_data_cert_signed_sha256.der
1448
1449# pkcs7 signature file with CERT and sha1
1450pkcs7_data_cert_signed_sha1.der: $(pkcs7_test_file) $(pkcs7_test_cert_1)
Manuel Pégourié-Gonnard600bd302022-02-21 11:30:43 +01001451 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha1 -signer pkcs7-rsa-sha256-1.pem -noattr -outform DER -out $@
Nayna Jainc9deb182020-11-16 19:03:12 +00001452all_final += pkcs7_data_cert_signed_sha1.der
1453
1454# pkcs7 signature file with CERT and sha512
1455pkcs7_data_cert_signed_sha512.der: $(pkcs7_test_file) $(pkcs7_test_cert_1)
Manuel Pégourié-Gonnard600bd302022-02-21 11:30:43 +01001456 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha512 -signer pkcs7-rsa-sha256-1.pem -noattr -outform DER -out $@
Nayna Jainc9deb182020-11-16 19:03:12 +00001457all_final += pkcs7_data_cert_signed_sha512.der
1458
1459# pkcs7 signature file without CERT
1460pkcs7_data_without_cert_signed.der: $(pkcs7_test_file) $(pkcs7_test_cert_1)
Manuel Pégourié-Gonnard600bd302022-02-21 11:30:43 +01001461 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha256 -signer pkcs7-rsa-sha256-1.pem -nocerts -noattr -outform DER -out $@
Nayna Jainc9deb182020-11-16 19:03:12 +00001462all_final += pkcs7_data_without_cert_signed.der
1463
Nick Child3dafc6c2023-02-07 19:59:58 +00001464# pkcs7 signature file with signature
1465pkcs7_data_with_signature.der: $(pkcs7_test_file) $(pkcs7_test_cert_1)
1466 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha256 -signer pkcs7-rsa-sha256-1.pem -nocerts -noattr -nodetach -outform DER -out $@
1467all_final += pkcs7_data_with_signature.der
1468
Nick Childa0c15d02023-01-30 19:30:38 +00001469# pkcs7 signature file with two signers
Nayna Jainc9deb182020-11-16 19:03:12 +00001470pkcs7_data_multiple_signed.der: $(pkcs7_test_file) $(pkcs7_test_cert_1) $(pkcs7_test_cert_2)
Manuel Pégourié-Gonnard600bd302022-02-21 11:30:43 +01001471 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha256 -signer pkcs7-rsa-sha256-1.pem -signer pkcs7-rsa-sha256-2.pem -nocerts -noattr -outform DER -out $@
Nayna Jainc9deb182020-11-16 19:03:12 +00001472all_final += pkcs7_data_multiple_signed.der
1473
Nick Childa0c15d02023-01-30 19:30:38 +00001474# pkcs7 signature file with three signers
1475pkcs7_data_3_signed.der: $(pkcs7_test_file) $(pkcs7_test_cert_1) $(pkcs7_test_cert_2) $(pkcs7_test_cert_3)
1476 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha256 -signer pkcs7-rsa-sha256-1.pem -signer pkcs7-rsa-sha256-2.pem -signer pkcs7-rsa-sha256-3.pem -nocerts -noattr -outform DER -out $@
1477all_final += pkcs7_data_3_signed.der
1478
Nayna Jainc9deb182020-11-16 19:03:12 +00001479# pkcs7 signature file with multiple certificates
1480pkcs7_data_multiple_certs_signed.der: $(pkcs7_test_file) $(pkcs7_test_cert_1) $(pkcs7_test_cert_2)
Manuel Pégourié-Gonnard600bd302022-02-21 11:30:43 +01001481 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha256 -signer pkcs7-rsa-sha256-1.pem -signer pkcs7-rsa-sha256-2.pem -noattr -outform DER -out $@
Nayna Jainc9deb182020-11-16 19:03:12 +00001482all_final += pkcs7_data_multiple_certs_signed.der
1483
1484# pkcs7 signature file with corrupted CERT
1485pkcs7_data_signed_badcert.der: pkcs7_data_cert_signed_sha256.der
1486 cp pkcs7_data_cert_signed_sha256.der $@
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001487 echo 'a1' | xxd -r -p | dd of=$@ bs=1 seek=547 conv=notrunc
Nayna Jainc9deb182020-11-16 19:03:12 +00001488all_final += pkcs7_data_signed_badcert.der
1489
1490# pkcs7 signature file with corrupted signer info
1491pkcs7_data_signed_badsigner.der: pkcs7_data_cert_signed_sha256.der
1492 cp pkcs7_data_cert_signed_sha256.der $@
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001493 echo 'a1' | xxd -r -p | dd of=$@ bs=1 seek=918 conv=notrunc
Nayna Jainc9deb182020-11-16 19:03:12 +00001494all_final += pkcs7_data_signed_badsigner.der
1495
Bence Szépkúti24897132023-01-19 20:57:44 +01001496# pkcs7 signature file with invalid tag in signerInfo[1].serial after long issuer name
1497pkcs7_signerInfo_1_serial_invalid_tag_after_long_name.der: pkcs7_data_multiple_signed.der
1498 cp $< $@
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001499 echo 'a1' | xxd -r -p | dd of=$@ bs=1 seek=498 conv=notrunc
Bence Szépkúti24897132023-01-19 20:57:44 +01001500all_final += pkcs7_signerInfo_1_serial_invalid_tag_after_long_name.der
1501
1502# pkcs7 signature file with invalid tag in signerInfo[2]
1503pkcs7_signerInfo_2_invalid_tag.der: pkcs7_data_3_signed.der
1504 cp $< $@
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001505 echo 'a1' | xxd -r -p | dd of=$@ bs=1 seek=810 conv=notrunc
Bence Szépkúti24897132023-01-19 20:57:44 +01001506all_final += pkcs7_signerInfo_2_invalid_tag.der
1507
Xiaokang Qian72b4bca2023-03-06 07:50:43 +00001508# pkcs7 signature file with corrupted signer info[1]
1509pkcs7_data_signed_badsigner1_badsize.der: pkcs7_data_3_signed.der
1510 cp pkcs7_data_3_signed.der $@
Xiaokang Qianc96d2de2023-03-07 10:35:47 +00001511 echo '72' | xxd -p -r | dd of=$@ bs=1 seek=438 conv=notrunc
Xiaokang Qian72b4bca2023-03-06 07:50:43 +00001512all_final += pkcs7_data_signed_badsigner1_badsize.der
1513
Xiaokang Qian8993a142023-03-06 08:32:20 +00001514pkcs7_data_signed_badsigner1_badtag.der: pkcs7_data_3_signed.der
1515 cp pkcs7_data_3_signed.der $@
Xiaokang Qianc96d2de2023-03-07 10:35:47 +00001516 echo 'a1' | xxd -p -r | dd of=$@ bs=1 seek=442 conv=notrunc
Xiaokang Qian8993a142023-03-06 08:32:20 +00001517all_final += pkcs7_data_signed_badsigner1_badtag.der
1518
Xiaokang Qian9c703d82023-03-06 08:44:12 +00001519pkcs7_data_signed_badsigner1_fuzzbad.der: pkcs7_data_3_signed.der
1520 cp pkcs7_data_3_signed.der $@
Xiaokang Qianc96d2de2023-03-07 10:35:47 +00001521 echo 'a1' | xxd -p -r | dd of=$@ bs=1 seek=550 conv=notrunc
Xiaokang Qian9c703d82023-03-06 08:44:12 +00001522all_final += pkcs7_data_signed_badsigner1_fuzzbad.der
1523
Xiaokang Qiane8c696f2023-03-06 07:58:14 +00001524# pkcs7 signature file with corrupted signer info[2]
1525pkcs7_data_signed_badsigner2_badsize.der: pkcs7_data_3_signed.der
1526 cp pkcs7_data_3_signed.der $@
Xiaokang Qianc96d2de2023-03-07 10:35:47 +00001527 echo '72'| xxd -p -r | dd of=$@ bs=1 seek=813 conv=notrunc
Xiaokang Qiane8c696f2023-03-06 07:58:14 +00001528all_final += pkcs7_data_signed_badsigner2_badsize
1529
Xiaokang Qian8993a142023-03-06 08:32:20 +00001530pkcs7_data_signed_badsigner2_badtag.der: pkcs7_data_3_signed.der
1531 cp pkcs7_data_3_signed.der $@
Xiaokang Qianc96d2de2023-03-07 10:35:47 +00001532 echo 'a1'| xxd -p -r | dd of=$@ bs=1 seek=817 conv=notrunc
Xiaokang Qian8993a142023-03-06 08:32:20 +00001533all_final += pkcs7_data_signed_badsigner2_badtag
1534
Xiaokang Qian9c703d82023-03-06 08:44:12 +00001535pkcs7_data_signed_badsigner2_fuzzbad.der: pkcs7_data_3_signed.der
1536 cp pkcs7_data_3_signed.der $@
Xiaokang Qianc96d2de2023-03-07 10:35:47 +00001537 echo 'a1'| xxd -p -r | dd of=$@ bs=1 seek=925 conv=notrunc
Xiaokang Qian9c703d82023-03-06 08:44:12 +00001538all_final += pkcs7_data_signed_badsigner2_fuzzbad
1539
Nayna Jainc9deb182020-11-16 19:03:12 +00001540# pkcs7 file with version 2
1541pkcs7_data_cert_signed_v2.der: pkcs7_data_cert_signed_sha256.der
1542 cp pkcs7_data_cert_signed_sha256.der $@
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001543 echo '02' | xxd -r -p | dd of=$@ bs=1 seek=25 conv=notrunc
Nayna Jainc9deb182020-11-16 19:03:12 +00001544all_final += pkcs7_data_cert_signed_v2.der
1545
1546pkcs7_data_cert_encrypted.der: $(pkcs7_test_file) $(pkcs7_test_cert_1)
Manuel Pégourié-Gonnard600bd302022-02-21 11:30:43 +01001547 $(OPENSSL) smime -encrypt -aes256 -in pkcs7_data.bin -binary -outform DER -out $@ pkcs7-rsa-sha256-1.crt
Nayna Jainc9deb182020-11-16 19:03:12 +00001548all_final += pkcs7_data_cert_encrypted.der
1549
1550## Negative tests
1551# For some interesting sizes, what happens if we make them off-by-one?
1552pkcs7_signerInfo_issuer_invalid_size.der: pkcs7_data_cert_signed_sha256.der
1553 cp $< $@
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001554 echo '35' | xxd -r -p | dd of=$@ seek=919 bs=1 conv=notrunc
Nayna Jainc9deb182020-11-16 19:03:12 +00001555all_final += pkcs7_signerInfo_issuer_invalid_size.der
1556
1557pkcs7_signerInfo_serial_invalid_size.der: pkcs7_data_cert_signed_sha256.der
1558 cp $< $@
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001559 echo '15' | xxd -r -p | dd of=$@ seek=973 bs=1 conv=notrunc
Nayna Jainc9deb182020-11-16 19:03:12 +00001560all_final += pkcs7_signerInfo_serial_invalid_size.der
1561
Nayna Jain673a2262020-12-14 22:44:49 +00001562# pkcs7 signature file just with signed data
1563pkcs7_data_cert_signeddata_sha256.der: pkcs7_data_cert_signed_sha256.der
1564 dd if=pkcs7_data_cert_signed_sha256.der of=$@ skip=19 bs=1
1565all_final += pkcs7_data_cert_signeddata_sha256.der
1566
Gilles Peskinef040a172017-05-05 18:56:12 +02001567################################################################
Gilles Peskinec6b0d962020-12-08 22:31:52 +01001568#### Diffie-Hellman parameters
1569################################################################
1570
1571dh.998.pem:
1572 $(OPENSSL) dhparam -out $@ -text 998
1573
1574dh.999.pem:
1575 $(OPENSSL) dhparam -out $@ -text 999
1576
1577################################################################
Gilles Peskinef040a172017-05-05 18:56:12 +02001578#### Meta targets
1579################################################################
1580
1581all_final: $(all_final)
1582all: $(all_intermediate) $(all_final)
1583
Gilles Peskinefd14bca2017-05-11 17:57:22 +02001584.PHONY: default all_final all
Gilles Peskineea8d6972017-11-28 17:30:52 +01001585.PHONY: keys_rsa_all
1586.PHONY: keys_rsa_unenc keys_rsa_enc_basic
1587.PHONY: keys_rsa_enc_pkcs8_v1 keys_rsa_enc_pkcs8_v2
1588.PHONY: keys_rsa_enc_basic_1024 keys_rsa_enc_basic_2048 keys_rsa_enc_basic_4096
1589.PHONY: keys_rsa_enc_pkcs8_v1_1024 keys_rsa_enc_pkcs8_v2_1024
1590.PHONY: keys_rsa_enc_pkcs8_v1_2048 keys_rsa_enc_pkcs8_v2_2048
1591.PHONY: keys_rsa_enc_pkcs8_v1_4096 keys_rsa_enc_pkcs8_v2_4096
1592.PHONY: server1_all
Gilles Peskinefd14bca2017-05-11 17:57:22 +02001593
Gilles Peskinef040a172017-05-05 18:56:12 +02001594# These files should not be committed to the repository.
1595list_intermediate:
1596 @printf '%s\n' $(all_intermediate) | sort
1597# These files should be committed to the repository so that the test data is
1598# available upon checkout without running a randomized process depending on
1599# third-party tools.
1600list_final:
1601 @printf '%s\n' $(all_final) | sort
Gilles Peskinefd14bca2017-05-11 17:57:22 +02001602.PHONY: list_intermediate list_final
Gilles Peskinef040a172017-05-05 18:56:12 +02001603
Gilles Peskinefd14bca2017-05-11 17:57:22 +02001604## Remove intermediate files
Gilles Peskinef040a172017-05-05 18:56:12 +02001605clean:
1606 rm -f $(all_intermediate)
Gilles Peskinefd14bca2017-05-11 17:57:22 +02001607## Remove all build products, even the ones that are committed
Gilles Peskinef040a172017-05-05 18:56:12 +02001608neat: clean
1609 rm -f $(all_final)
Gilles Peskinefd14bca2017-05-11 17:57:22 +02001610.PHONY: clean neat