blob: 257903ce802077b60e6f986b5fa1ad8f6fa8d4ab [file] [log] [blame]
Gilles Peskinefd14bca2017-05-11 17:57:22 +02001## This file contains a record of how some of the test data was
2## generated. The final build products are committed to the repository
3## as well to make sure that the test data is identical. You do not
4## need to use this makefile unless you're extending mbed TLS's tests.
Gilles Peskinef040a172017-05-05 18:56:12 +02005
Gilles Peskinefd14bca2017-05-11 17:57:22 +02006## Many data files were generated prior to the existence of this
7## makefile, so the method of their generation was not recorded.
Gilles Peskinef040a172017-05-05 18:56:12 +02008
Gilles Peskinefd14bca2017-05-11 17:57:22 +02009## Note that in addition to depending on the version of the data
10## generation tool, many of the build outputs are randomized, so
11## running this makefile twice would not produce the same results.
12
13## Tools
14OPENSSL ?= openssl
Manuel Pégourié-Gonnard29d60fb2017-06-05 10:20:32 +020015FAKETIME ?= faketime
Gilles Peskined1ff7572020-08-21 19:47:22 +020016
Gilles Peskine18035632020-09-24 16:36:04 +020017TOP_DIR = ../..
Gilles Peskined1ff7572020-08-21 19:47:22 +020018MBEDTLS_CERT_WRITE ?= $(TOP_DIR)/programs/x509/cert_write
19MBEDTLS_CERT_REQ ?= $(TOP_DIR)/programs/x509/cert_req
Hanno Becker50cb93a2018-10-08 17:15:28 +010020
Gilles Peskinefd14bca2017-05-11 17:57:22 +020021
22## Build the generated test data. Note that since the final outputs
23## are committed to the repository, this target should do nothing on a
24## fresh checkout. Furthermore, since the generation is randomized,
25## re-running the same targets may result in differing files. The goal
26## of this makefile is primarily to serve as a record of how the
27## targets were generated in the first place.
Gilles Peskinef040a172017-05-05 18:56:12 +020028default: all_final
29
30all_intermediate := # temporary files
31all_final := # files used by tests
32
Gilles Peskinefd14bca2017-05-11 17:57:22 +020033
34
35################################################################
36#### Generate certificates from existing keys
37################################################################
38
Hanno Becker418a6222017-09-14 07:51:28 +010039test_ca_crt = test-ca.crt
Gilles Peskinefd14bca2017-05-11 17:57:22 +020040test_ca_key_file_rsa = test-ca.key
41test_ca_pwd_rsa = PolarSSLTest
42test_ca_config_file = test-ca.opensslconf
43
Hanno Beckerb8377752018-10-31 15:29:19 +000044test-ca.req.sha256: $(test_ca_key_file_rsa)
45 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$(test_ca_key_file_rsa) password=$(test_ca_pwd_rsa) subject_name="C=NL,O=PolarSSL,CN=PolarSSL Test CA" md=SHA256
46all_intermediate += test-ca.req.sha256
47
48test-ca.crt: $(test_ca_key_file_rsa) test-ca.req.sha256
Ron Eldor9eeb8612019-02-12 15:03:42 +020049 $(MBEDTLS_CERT_WRITE) is_ca=1 serial=3 request_file=test-ca.req.sha256 selfsign=1 issuer_name="C=NL,O=PolarSSL,CN=PolarSSL Test CA" issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144400 not_after=20290210144400 md=SHA1 version=3 output_file=$@
Hanno Beckere21387e2019-03-12 16:49:26 +000050all_final += test-ca.crt
51
52test-ca.crt.der: test-ca.crt
Hanno Becker462c3e52019-01-31 10:55:42 +000053 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
Hanno Beckere21387e2019-03-12 16:49:26 +000054all_final += test-ca.crt.der
55
56test-ca.key.der: $(test_ca_key_file_rsa)
57 $(OPENSSL) pkey -in $< -out $@ -inform PEM -outform DER -passin "pass:$(test_ca_pwd_rsa)"
58all_final += test-ca.key.der
Hanno Beckerb8377752018-10-31 15:29:19 +000059
60test-ca-sha1.crt: $(test_ca_key_file_rsa) test-ca.req.sha256
Ron Eldor9eeb8612019-02-12 15:03:42 +020061 $(MBEDTLS_CERT_WRITE) is_ca=1 serial=3 request_file=test-ca.req.sha256 selfsign=1 issuer_name="C=NL,O=PolarSSL,CN=PolarSSL Test CA" issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144400 not_after=20290210144400 md=SHA1 version=3 output_file=$@
Gilles Peskinef040a172017-05-05 18:56:12 +020062all_final += test-ca-sha1.crt
Hanno Beckerb8377752018-10-31 15:29:19 +000063
Hanno Beckere21387e2019-03-12 16:49:26 +000064test-ca-sha1.crt.der: test-ca-sha1.crt
65 $(OPENSSL) x509 -in $< -out $@ -inform PEM -outform DER
66all_final += test-ca-sha1.crt.der
67
Hanno Beckerb8377752018-10-31 15:29:19 +000068test-ca-sha256.crt: $(test_ca_key_file_rsa) test-ca.req.sha256
Ron Eldor9eeb8612019-02-12 15:03:42 +020069 $(MBEDTLS_CERT_WRITE) is_ca=1 serial=3 request_file=test-ca.req.sha256 selfsign=1 issuer_name="C=NL,O=PolarSSL,CN=PolarSSL Test CA" issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144400 not_after=20290210144400 md=SHA256 version=3 output_file=$@
Gilles Peskinef040a172017-05-05 18:56:12 +020070all_final += test-ca-sha256.crt
71
Hanno Beckere21387e2019-03-12 16:49:26 +000072test-ca-sha256.crt.der: test-ca-sha256.crt
73 $(OPENSSL) x509 -in $< -out $@ -inform PEM -outform DER
74all_final += test-ca-sha256.crt.der
75
Ron Eldor9eeb8612019-02-12 15:03:42 +020076test-ca_utf8.crt: $(test_ca_key_file_rsa)
77 $(OPENSSL) req -x509 -new -nodes -key $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 3 -config $(test_ca_config_file) -sha1 -days 3653 -utf8 -subj "/C=NL/O=PolarSSL/CN=PolarSSL Test CA" -out $@
78all_final += test-ca_utf8.crt
79
80test-ca_printable.crt: $(test_ca_key_file_rsa)
81 $(OPENSSL) req -x509 -new -nodes -key $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 3 -config $(test_ca_config_file) -sha1 -days 3653 -subj "/C=NL/O=PolarSSL/CN=PolarSSL Test CA" -out $@
82all_final += test-ca_printable.crt
83
84test-ca_uppercase.crt: $(test_ca_key_file_rsa)
85 $(OPENSSL) req -x509 -new -nodes -key $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 3 -config $(test_ca_config_file) -sha1 -days 3653 -subj "/C=NL/O=PolarSSL/CN=PolarSSL Test CA" -out $@
86all_final += test-ca_uppercase.crt
87
Manuel Pégourié-Gonnard2d825d42017-07-03 18:06:38 +020088test_ca_key_file_rsa_alt = test-ca-alt.key
89
Ron Eldor9eeb8612019-02-12 15:03:42 +020090cert_example_multi.csr: rsa_pkcs1_1024_clear.pem
91 $(OPENSSL) req -new -subj "/C=NL/O=PolarSSL/CN=www.example.com" -set_serial 17 -config $(test_ca_config_file) -extensions dns_alt_names -days 3650 -key rsa_pkcs1_1024_clear.pem -out $@
92
93cert_example_multi.crt: cert_example_multi.csr
94 $(OPENSSL) x509 -req -CA $(test_ca_crt) -CAkey $(test_ca_key_file_rsa) -extfile $(test_ca_config_file) -extensions dns_alt_names -passin "pass:$(test_ca_pwd_rsa)" -set_serial 17 -days 3653 -sha256 -in $< > $@
95
Przemek Stekiel92cce3f2023-01-25 10:33:26 +010096test_csr_v3_keyUsage.csr.der: rsa_pkcs1_1024_clear.pem
Przemek Stekiel16096852023-01-24 09:24:19 +010097 $(OPENSSL) req -new -subj '/CN=etcd' -config $(test_ca_config_file) -key rsa_pkcs1_1024_clear.pem -outform DER -out $@ -reqexts csr_ext_v3_keyUsage
Przemek Stekiel92cce3f2023-01-25 10:33:26 +010098test_csr_v3_subjectAltName.csr.der: rsa_pkcs1_1024_clear.pem
Przemek Stekiel16096852023-01-24 09:24:19 +010099 $(OPENSSL) req -new -subj '/CN=etcd' -config $(test_ca_config_file) -key rsa_pkcs1_1024_clear.pem -outform DER -out $@ -reqexts csr_ext_v3_subjectAltName
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100100test_csr_v3_nsCertType.csr.der: rsa_pkcs1_1024_clear.pem
Przemek Stekiel16096852023-01-24 09:24:19 +0100101 $(OPENSSL) req -new -subj '/CN=etcd' -config $(test_ca_config_file) -key rsa_pkcs1_1024_clear.pem -outform DER -out $@ -reqexts csr_ext_v3_nsCertType
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100102test_csr_v3_all.csr.der: rsa_pkcs1_1024_clear.pem
Przemek Stekiel16096852023-01-24 09:24:19 +0100103 $(OPENSSL) req -new -subj '/CN=etcd' -config $(test_ca_config_file) -key rsa_pkcs1_1024_clear.pem -outform DER -out $@ -reqexts csr_ext_v3_all
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100104test_csr_v3_all_malformed_extensions_sequence_tag.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100105 (hexdump -ve '1/1 "%.2X"' $< | sed "s/300B0603551D0F040403/200B0603551D0F040403/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100106test_csr_v3_all_malformed_extension_id_tag.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100107 (hexdump -ve '1/1 "%.2X"' $< | sed "s/0603551D0F0404030201/0703551D0F0404030201/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100108test_csr_v3_all_malformed_extension_data_tag.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100109 (hexdump -ve '1/1 "%.2X"' $< | sed "s/040403020102302F0603/050403020102302F0603/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100110test_csr_v3_all_malformed_extension_data_len1.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100111 (hexdump -ve '1/1 "%.2X"' $< | sed "s/040403020102302F0603/040503020102302F0603/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100112test_csr_v3_all_malformed_extension_data_len2.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100113 (hexdump -ve '1/1 "%.2X"' $< | sed "s/040403020102302F0603/040303020102302F0603/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100114test_csr_v3_all_malformed_extension_key_usage_bitstream_tag.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100115 (hexdump -ve '1/1 "%.2X"' $< | sed "s/03020102302F0603551D/04020102302F0603551D/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100116test_csr_v3_all_malformed_extension_subject_alt_name_sequence_tag.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100117 (hexdump -ve '1/1 "%.2X"' $< | sed "s/3026A02406082B060105/4026A02406082B060105/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100118test_csr_v3_all_malformed_extension_ns_cert_bitstream_tag.csr.der: test_csr_v3_all.csr.der
Przemek Stekield7992df2023-01-25 16:19:50 +0100119 (hexdump -ve '1/1 "%.2X"' $< | sed "s/03020780300D06092A86/04020780300D06092A86/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100120test_csr_v3_all_malformed_duplicated_extension.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100121 (hexdump -ve '1/1 "%.2X"' $< | sed "s/551D11/551D0F/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100122test_csr_v3_all_malformed_extension_type_oid.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100123 (hexdump -ve '1/1 "%.2X"' $< | sed "s/551D11/551DFF/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100124test_csr_v3_all_malformed_attributes_sequence_tag.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100125 (hexdump -ve '1/1 "%.2X"' $< | sed "s/306006092A864886F70D/406006092A864886F70D/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100126test_csr_v3_all_malformed_attributes_id_tag.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100127 (hexdump -ve '1/1 "%.2X"' $< | sed "s/06092A864886F70D0109/07092A864886F70D0109/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100128test_csr_v3_all_malformed_attributes_extension_request.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100129 (hexdump -ve '1/1 "%.2X"' $< | sed "s/2A864886F70D01090E/2A864886F70D01090F/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100130test_csr_v3_all_malformed_attributes_extension_request_set_tag.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100131 (hexdump -ve '1/1 "%.2X"' $< | sed "s/31533051300B0603551D/32533051300B0603551D/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100132test_csr_v3_all_malformed_attributes_extension_request_sequence_tag.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100133 (hexdump -ve '1/1 "%.2X"' $< | sed "s/3051300B0603551D0F04/3151300B0603551D0F04/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100134test_csr_v3_all_malformed_attributes_len1.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100135 (hexdump -ve '1/1 "%.2X"' $< | sed "s/306006092A864886F70D/306106092A864886F70D/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100136test_csr_v3_all_malformed_attributes_len2.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100137 (hexdump -ve '1/1 "%.2X"' $< | sed "s/306006092A864886F70D/305906092A864886F70D/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100138test_csr_v3_all_malformed_attributes_extension_request_sequence_len1.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100139 (hexdump -ve '1/1 "%.2X"' $< | sed "s/3051300B0603551D0F04/3052300B0603551D0F04/" | xxd -r -p ) > $@
Przemek Stekiel92cce3f2023-01-25 10:33:26 +0100140test_csr_v3_all_malformed_attributes_extension_request_sequence_len2.csr.der: test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100141 (hexdump -ve '1/1 "%.2X"' $< | sed "s/3051300B0603551D0F04/3050300B0603551D0F04/" | xxd -r -p ) > $@
Przemek Stekiele7fbbb32023-01-12 15:30:45 +0100142
Przemek Stekiel608e3ef2023-02-09 14:47:50 +0100143test_cert_rfc822name.crt.der: cert_example_multi.csr
144 $(OPENSSL) x509 -req -CA $(test_ca_crt) -CAkey $(test_ca_key_file_rsa) -extfile $(test_ca_config_file) -outform DER -extensions rfc822name_names -passin "pass:$(test_ca_pwd_rsa)" -set_serial 17 -days 3653 -sha256 -in $< > $@
145
Ron Eldor9eeb8612019-02-12 15:03:42 +0200146$(test_ca_key_file_rsa_alt):test-ca.opensslconf
Manuel Pégourié-Gonnard2d825d42017-07-03 18:06:38 +0200147 $(OPENSSL) genrsa -out $@ 2048
148test-ca-alt.csr: $(test_ca_key_file_rsa_alt) $(test_ca_config_file)
149 $(OPENSSL) req -new -config $(test_ca_config_file) -key $(test_ca_key_file_rsa_alt) -subj "/C=NL/O=PolarSSL/CN=PolarSSL Test CA" -out $@
150all_intermediate += test-ca-alt.csr
151test-ca-alt.crt: $(test_ca_key_file_rsa_alt) $(test_ca_config_file) test-ca-alt.csr
152 $(OPENSSL) req -x509 -config $(test_ca_config_file) -key $(test_ca_key_file_rsa_alt) -set_serial 0 -days 3653 -sha256 -in test-ca-alt.csr -out $@
153all_final += test-ca-alt.crt
154test-ca-alt-good.crt: test-ca-alt.crt test-ca-sha256.crt
155 cat test-ca-alt.crt test-ca-sha256.crt > $@
156all_final += test-ca-alt-good.crt
157test-ca-good-alt.crt: test-ca-alt.crt test-ca-sha256.crt
158 cat test-ca-sha256.crt test-ca-alt.crt > $@
159all_final += test-ca-good-alt.crt
160
Manuel Pégourié-Gonnardbc313012017-06-27 12:51:52 +0200161test_ca_crt_file_ec = test-ca2.crt
162test_ca_key_file_ec = test-ca2.key
163
Ron Eldor9eeb8612019-02-12 15:03:42 +0200164test-ca2.req.sha256: $(test_ca_key_file_ec)
165 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$(test_ca_key_file_ec) subject_name="C=NL,O=PolarSSL,CN=Polarssl Test EC CA" md=SHA256
166all_intermediate += test-ca2.req.sha256
167
168test-ca2.crt: $(test_ca_key_file_ec) test-ca2.req.sha256
169 $(MBEDTLS_CERT_WRITE) is_ca=1 serial=13926223505202072808 request_file=test-ca2.req.sha256 selfsign=1 issuer_name="C=NL,O=PolarSSL,CN=Polarssl Test EC CA" issuer_key=$(test_ca_key_file_ec) not_before=20190210144400 not_after=20290210144400 md=SHA256 version=3 output_file=$@
170all_final += test-ca.crt
171
Ron Eldor74d9acc2019-03-21 14:00:03 +0200172test-ca-any_policy.crt: $(test_ca_key_file_rsa) test-ca.req.sha256
173 $(OPENSSL) req -x509 -config $(test_ca_config_file) -extensions v3_any_policy_ca -key $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 0 -days 3653 -sha256 -in test-ca.req.sha256 -out $@
174all_final += test-ca-any_policy.crt
175
176test-ca-any_policy_ec.crt: $(test_ca_key_file_ec) test-ca.req_ec.sha256
177 $(OPENSSL) req -x509 -config $(test_ca_config_file) -extensions v3_any_policy_ca -key $(test_ca_key_file_ec) -set_serial 0 -days 3653 -sha256 -in test-ca.req_ec.sha256 -out $@
178all_final += test-ca-any_policy_ec.crt
179
180test-ca-any_policy_with_qualifier.crt: $(test_ca_key_file_rsa) test-ca.req.sha256
181 $(OPENSSL) req -x509 -config $(test_ca_config_file) -extensions v3_any_policy_qualifier_ca -key $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 0 -days 3653 -sha256 -in test-ca.req.sha256 -out $@
182all_final += test-ca-any_policy_with_qualifier.crt
183
184test-ca-any_policy_with_qualifier_ec.crt: $(test_ca_key_file_ec) test-ca.req_ec.sha256
185 $(OPENSSL) req -x509 -config $(test_ca_config_file) -extensions v3_any_policy_qualifier_ca -key $(test_ca_key_file_ec) -set_serial 0 -days 3653 -sha256 -in test-ca.req_ec.sha256 -out $@
186all_final += test-ca-any_policy_with_qualifier_ec.crt
187
188test-ca-multi_policy.crt: $(test_ca_key_file_rsa) test-ca.req.sha256
189 $(OPENSSL) req -x509 -config $(test_ca_config_file) -extensions v3_multi_policy_ca -key $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 0 -days 3653 -sha256 -in test-ca.req.sha256 -out $@
190all_final += test-ca-multi_policy.crt
191
192test-ca-multi_policy_ec.crt: $(test_ca_key_file_ec) test-ca.req_ec.sha256
193 $(OPENSSL) req -x509 -config $(test_ca_config_file) -extensions v3_multi_policy_ca -key $(test_ca_key_file_ec) -set_serial 0 -days 3653 -sha256 -in test-ca.req_ec.sha256 -out $@
194all_final += test-ca-multi_policy_ec.crt
195
196test-ca-unsupported_policy.crt: $(test_ca_key_file_rsa) test-ca.req.sha256
197 $(OPENSSL) req -x509 -config $(test_ca_config_file) -extensions v3_unsupported_policy_ca -key $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 0 -days 3653 -sha256 -in test-ca.req.sha256 -out $@
198all_final += test-ca-unsupported_policy.crt
199
200test-ca-unsupported_policy_ec.crt: $(test_ca_key_file_ec) test-ca.req_ec.sha256
201 $(OPENSSL) req -x509 -config $(test_ca_config_file) -extensions v3_unsupported_policy_ca -key $(test_ca_key_file_ec) -set_serial 0 -days 3653 -sha256 -in test-ca.req_ec.sha256 -out $@
202all_final += test-ca-unsupported_policy_ec.crt
203
204test-ca.req_ec.sha256: $(test_ca_key_file_ec)
205 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$(test_ca_key_file_ec) subject_name="C=NL, O=PolarSSL, CN=Polarssl Test EC CA" md=SHA256
206all_intermediate += test-ca.req_ec.sha256
207
Hanno Beckere21387e2019-03-12 16:49:26 +0000208test-ca2.crt.der: $(test_ca_crt_file_ec)
209 $(OPENSSL) x509 -in $(test_ca_crt_file_ec) -out $@ -inform PEM -outform DER
210all_final += test-ca2.crt.der
211
212test-ca2.key.der: $(test_ca_key_file_ec)
213 $(OPENSSL) pkey -in $(test_ca_key_file_ec) -out $@ -inform PEM -outform DER
214all_final += test-ca2.key.der
215
Hanno Beckerb9630812018-10-31 16:28:05 +0000216test_ca_crt_cat12 = test-ca_cat12.crt
217$(test_ca_crt_cat12): $(test_ca_crt) $(test_ca_crt_file_ec)
218 cat $(test_ca_crt) $(test_ca_crt_file_ec) > $@
219all_final += $(test_ca_crt_cat12)
220
221test_ca_crt_cat21 = test-ca_cat21.crt
222$(test_ca_crt_cat21): $(test_ca_crt) $(test_ca_crt_file_ec)
223 cat $(test_ca_crt_file_ec) $(test_ca_crt) > $@
224all_final += $(test_ca_crt_cat21)
225
Manuel Pégourié-Gonnardbc313012017-06-27 12:51:52 +0200226test-int-ca.csr: test-int-ca.key $(test_ca_config_file)
227 $(OPENSSL) req -new -config $(test_ca_config_file) -key test-int-ca.key -subj "/C=NL/O=PolarSSL/CN=PolarSSL Test Intermediate CA" -out $@
228all_intermediate += test-int-ca.csr
Manuel Pégourié-Gonnard7ff243a2017-08-08 18:54:13 +0200229test-int-ca-exp.crt: $(test_ca_crt_file_ec) $(test_ca_key_file_ec) $(test_ca_config_file) test-int-ca.csr
Manuel Pégourié-Gonnardbc313012017-06-27 12:51:52 +0200230 $(FAKETIME) -f -3653d $(OPENSSL) x509 -req -extfile $(test_ca_config_file) -extensions v3_ca -CA $(test_ca_crt_file_ec) -CAkey $(test_ca_key_file_ec) -set_serial 14 -days 3653 -sha256 -in test-int-ca.csr -out $@
231all_final += test-int-ca-exp.crt
232
Ron Eldor9eeb8612019-02-12 15:03:42 +0200233enco-cert-utf8str.pem: rsa_pkcs1_1024_clear.pem
234 $(MBEDTLS_CERT_WRITE) subject_key=rsa_pkcs1_1024_clear.pem subject_name="CN=dw.yonan.net" issuer_crt=enco-ca-prstr.pem issuer_key=rsa_pkcs1_1024_clear.pem not_before=20190210144406 not_after=20290210144406 md=SHA1 version=3 output_file=$@
235
Manuel Pégourié-Gonnardfd3e4fb2018-03-13 11:53:30 +0100236crl-idp.pem: $(test_ca_crt) $(test_ca_key_file_rsa) $(test_ca_config_file)
237 $(OPENSSL) ca -gencrl -batch -cert $(test_ca_crt) -keyfile $(test_ca_key_file_rsa) -key $(test_ca_pwd_rsa) -config $(test_ca_config_file) -name test_ca -md sha256 -crldays 3653 -crlexts crl_ext_idp -out $@
Manuel Pégourié-Gonnarda63305d2018-03-14 12:23:56 +0100238all_final += crl-idp.pem
239crl-idpnc.pem: $(test_ca_crt) $(test_ca_key_file_rsa) $(test_ca_config_file)
240 $(OPENSSL) ca -gencrl -batch -cert $(test_ca_crt) -keyfile $(test_ca_key_file_rsa) -key $(test_ca_pwd_rsa) -config $(test_ca_config_file) -name test_ca -md sha256 -crldays 3653 -crlexts crl_ext_idp_nc -out $@
241all_final += crl-idpnc.pem
Manuel Pégourié-Gonnardfd3e4fb2018-03-13 11:53:30 +0100242
Gilles Peskinefd14bca2017-05-11 17:57:22 +0200243cli_crt_key_file_rsa = cli-rsa.key
244cli_crt_extensions_file = cli.opensslconf
245
Gilles Peskinef040a172017-05-05 18:56:12 +0200246cli-rsa.csr: $(cli_crt_key_file_rsa)
Hanno Becker386f99c2018-11-01 17:20:22 +0000247 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Client 2" md=SHA1
Gilles Peskinef040a172017-05-05 18:56:12 +0200248all_intermediate += cli-rsa.csr
Hanno Becker386f99c2018-11-01 17:20:22 +0000249
250cli-rsa-sha1.crt: cli-rsa.csr
Ron Eldor9eeb8612019-02-12 15:03:42 +0200251 $(MBEDTLS_CERT_WRITE) request_file=$< serial=4 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA1 version=3 output_file=$@
Hanno Becker386f99c2018-11-01 17:20:22 +0000252
253cli-rsa-sha256.crt: cli-rsa.csr
Ron Eldor9eeb8612019-02-12 15:03:42 +0200254 $(MBEDTLS_CERT_WRITE) request_file=$< serial=4 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA256 version=3 output_file=$@
Gilles Peskinef040a172017-05-05 18:56:12 +0200255all_final += cli-rsa-sha256.crt
256
Hanno Beckere21387e2019-03-12 16:49:26 +0000257cli-rsa-sha256.crt.der: cli-rsa-sha256.crt
258 $(OPENSSL) x509 -in $< -out $@ -inform PEM -outform DER
259all_final += cli-rsa-sha256.crt.der
260
Paul Elliottca17ebf2020-11-24 17:30:18 +0000261cli-rsa-sha256-badalg.crt.der: cli-rsa-sha256.crt.der
262 hexdump -ve '1/1 "%.2X"' $< | sed "s/06092A864886F70D01010B0500/06092A864886F70D01010B0900/2" | xxd -r -p > $@
263all_final += cli-rsa-sha256-badalg.crt.der
264
265cli-rsa.key.der: $(cli_crt_key_file_rsa)
Hanno Beckere21387e2019-03-12 16:49:26 +0000266 $(OPENSSL) pkey -in $< -out $@ -inform PEM -outform DER
267all_final += cli-rsa.key.der
268
Manuel Pégourié-Gonnard29d60fb2017-06-05 10:20:32 +0200269test_ca_int_rsa1 = test-int-ca.crt
270
271server7.csr: server7.key
272 $(OPENSSL) req -new -key server7.key -subj "/C=NL/O=PolarSSL/CN=localhost" -out $@
273all_intermediate += server7.csr
274server7-expired.crt: server7.csr $(test_ca_int_rsa1)
275 $(FAKETIME) -f -3653d $(OPENSSL) x509 -req -extfile $(cli_crt_extensions_file) -extensions cli-rsa -CA $(test_ca_int_rsa1) -CAkey test-int-ca.key -set_serial 16 -days 3653 -sha256 -in server7.csr | cat - $(test_ca_int_rsa1) > $@
276all_final += server7-expired.crt
277server7-future.crt: server7.csr $(test_ca_int_rsa1)
278 $(FAKETIME) -f +3653d $(OPENSSL) x509 -req -extfile $(cli_crt_extensions_file) -extensions cli-rsa -CA $(test_ca_int_rsa1) -CAkey test-int-ca.key -set_serial 16 -days 3653 -sha256 -in server7.csr | cat - $(test_ca_int_rsa1) > $@
279all_final += server7-future.crt
Manuel Pégourié-Gonnard4dfc04a2017-06-05 11:12:13 +0200280server7-badsign.crt: server7.crt $(test_ca_int_rsa1)
Manuel Pégourié-Gonnardd19a41d2017-07-14 11:05:59 +0200281 { head -n-2 $<; tail -n-2 $< | sed -e '1s/0\(=*\)$$/_\1/' -e '1s/[^_=]\(=*\)$$/0\1/' -e '1s/_/1/'; cat $(test_ca_int_rsa1); } > $@
Manuel Pégourié-Gonnard4dfc04a2017-06-05 11:12:13 +0200282all_final += server7-badsign.crt
Manuel Pégourié-Gonnardbc313012017-06-27 12:51:52 +0200283server7_int-ca-exp.crt: server7.crt test-int-ca-exp.crt
284 cat server7.crt test-int-ca-exp.crt > $@
285all_final += server7_int-ca-exp.crt
286
Ron Eldor9eeb8612019-02-12 15:03:42 +0200287cli2.req.sha256: cli2.key
288 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Test Client 2" md=SHA256
289
290all_final += server1.req.sha1
291cli2.crt: cli2.req.sha256
292 $(MBEDTLS_CERT_WRITE) request_file=cli2.req.sha256 serial=13 selfsign=0 issuer_name="C=NL,O=PolarSSL,CN=PolarSSL Test EC CA" issuer_key=$(test_ca_key_file_ec) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144400 not_after=20290210144400 md=SHA256 version=3 output_file=$@
293all_final += cli2.crt
294
Hanno Beckere21387e2019-03-12 16:49:26 +0000295cli2.crt.der: cli2.crt
296 $(OPENSSL) x509 -in $< -out $@ -inform PEM -outform DER
297all_final += cli2.crt.der
298
Hanno Becker4cbea4b2019-05-30 16:08:12 +0100299cli2.key.der: cli2.key
Hanno Beckere21387e2019-03-12 16:49:26 +0000300 $(OPENSSL) pkey -in $< -out $@ -inform PEM -outform DER
301all_final += cli2.key.der
302
Hanno Becker226eedb2020-08-17 12:14:00 +0100303server5_pwd_ec = PolarSSLTest
304
Hanno Becker4cbea4b2019-05-30 16:08:12 +0100305server5.crt.der: server5.crt
Hanno Beckere21387e2019-03-12 16:49:26 +0000306 $(OPENSSL) x509 -in $< -out $@ -inform PEM -outform DER
307all_final += server5.crt.der
308
Hanno Becker4cbea4b2019-05-30 16:08:12 +0100309server5.key.der: server5.key
Hanno Beckere21387e2019-03-12 16:49:26 +0000310 $(OPENSSL) pkey -in $< -out $@ -inform PEM -outform DER
311all_final += server5.key.der
312
Hanno Becker226eedb2020-08-17 12:14:00 +0100313server5.key.enc: server5.key
314 $(OPENSSL) ec -aes256 -in $< -out $@ -passout "pass:$(server5_pwd_ec)"
315all_final += server5.key.enc
316
Manuel Pégourié-Gonnardbc313012017-06-27 12:51:52 +0200317server5-ss-expired.crt: server5.key
318 $(FAKETIME) -f -3653d $(OPENSSL) req -x509 -new -subj "/C=UK/O=mbed TLS/OU=testsuite/CN=localhost" -days 3653 -sha256 -key $< -out $@
319all_final += server5-ss-expired.crt
320
Manuel Pégourié-Gonnardc10afdb2017-06-29 09:48:08 +0200321# try to forge a copy of test-int-ca3 with different key
322server5-ss-forgeca.crt: server5.key
323 $(FAKETIME) '2015-09-01 14:08:43' $(OPENSSL) req -x509 -new -subj "/C=UK/O=mbed TLS/CN=mbed TLS Test intermediate CA 3" -set_serial 77 -config $(test_ca_config_file) -extensions noext_ca -days 3650 -sha256 -key $< -out $@
324all_final += server5-ss-forgeca.crt
325
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200326server5-othername.crt: server5.key
327 $(OPENSSL) req -x509 -new -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS othername SAN" -set_serial 77 -config $(test_ca_config_file) -extensions othername_san -days 3650 -sha256 -key $< -out $@
328
Victor Barpp Gomesd0225af2022-09-29 11:40:20 -0300329server5-nonprintable_othername.crt: server5.key
330 $(OPENSSL) req -x509 -new -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS non-printable othername SAN" -set_serial 77 -config $(test_ca_config_file) -extensions nonprintable_othername_san -days 3650 -sha256 -key $< -out $@
331
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200332server5-unsupported_othername.crt: server5.key
David Horstmann119d7e22022-11-25 15:50:30 +0000333 $(OPENSSL) req -x509 -new -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS unsupported othername SAN" -set_serial 77 -config $(test_ca_config_file) -extensions unsupported_othername_san -days 3650 -sha256 -key $< -out $@
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200334
Ron Eldor3c4734a2019-03-25 14:05:23 +0200335server5-fan.crt: server5.key
336 $(OPENSSL) req -x509 -new -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS FAN" -set_serial 77 -config $(test_ca_config_file) -extensions fan_cert -days 3650 -sha256 -key server5.key -out $@
337
Manuel Pégourié-Gonnard7d2a4d82020-07-23 12:39:53 +0200338server5-tricky-ip-san.crt: server5.key
339 $(OPENSSL) req -x509 -new -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS Tricky IP SAN" -set_serial 77 -config $(test_ca_config_file) -extensions tricky_ip_san -days 3650 -sha256 -key server5.key -out $@
Andrzej Kurek303704e2023-03-06 04:50:47 -0500340
Andrzej Kurekd3486322023-01-20 05:21:52 -0500341server5-directoryname.crt.der: server5.key
342 $(OPENSSL) req -x509 -outform der -new -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS directoryName SAN" -set_serial 77 -config $(test_ca_config_file) -extensions directory_name_san -days 3650 -sha256 -key server5.key -out $@
Andrzej Kureke12b01d2023-01-10 06:47:38 -0500343
Andrzej Kurekd3486322023-01-20 05:21:52 -0500344server5-two-directorynames.crt.der: server5.key
345 $(OPENSSL) req -x509 -outform der -new -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS directoryName SAN" -set_serial 77 -config $(test_ca_config_file) -extensions two_directorynames -days 3650 -sha256 -key server5.key -out $@
Andrzej Kurek4a4f1ec2023-01-12 06:51:20 -0500346
Andrzej Kurekd90376e2023-01-20 07:08:57 -0500347# directoryname sequence tag malformed
348server5-directoryname-seq-malformed.crt.der: server5-two-directorynames.crt.der
349 hexdump -ve '1/1 "%.2X"' $< | sed "s/62A4473045310B/62A4473145310B/" | xxd -r -p > $@
Andrzej Kurek303704e2023-03-06 04:50:47 -0500350
Andrzej Kurekd90376e2023-01-20 07:08:57 -0500351# Second directoryname OID length malformed 03 -> 15
352server5-second-directoryname-oid-malformed.crt.der: server5-two-directorynames.crt.der
Andrzej Kurekd3486322023-01-20 05:21:52 -0500353 hexdump -ve '1/1 "%.2X"' $< | sed "s/0355040A0C0A4D414C464F524D5F4D45/1555040A0C0A4D414C464F524D5F4D45/" | xxd -r -p > $@
Andrzej Kurek151d85d2023-01-12 08:59:37 -0500354
Manuel Pégourié-Gonnard7d2a4d82020-07-23 12:39:53 +0200355all_final += server5-tricky-ip-san.crt
356
Andrzej Kurek570a0f82023-02-14 05:52:49 -0500357rsa_single_san_uri.crt.der: rsa_single_san_uri.key
358 $(OPENSSL) req -x509 -outform der -nodes -days 7300 -newkey rsa:2048 -key $< -out $@ -addext "subjectAltName = URI:urn:example.com:5ff40f78-9210-494f-8206-c2c082f0609c" -extensions 'v3_req' -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS URI SAN"
359
360rsa_multiple_san_uri.crt.der: rsa_multiple_san_uri.key
361 $(OPENSSL) req -x509 -outform der -nodes -days 7300 -newkey rsa:2048 -key $< -out $@ -addext "subjectAltName = URI:urn:example.com:5ff40f78-9210-494f-8206-c2c082f0609c, URI:urn:example.com:5ff40f78-9210-494f-8206-abcde1234567" -extensions 'v3_req' -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS URI SAN"
362
Manuel Pégourié-Gonnardd19a41d2017-07-14 11:05:59 +0200363server10-badsign.crt: server10.crt
364 { head -n-2 $<; tail -n-2 $< | sed -e '1s/0\(=*\)$$/_\1/' -e '1s/[^_=]\(=*\)$$/0\1/' -e '1s/_/1/'; } > $@
365all_final += server10-badsign.crt
366server10-bs_int3.pem: server10-badsign.crt test-int-ca3.crt
367 cat server10-badsign.crt test-int-ca3.crt > $@
368all_final += server10-bs_int3.pem
369test-int-ca3-badsign.crt: test-int-ca3.crt
370 { head -n-2 $<; tail -n-2 $< | sed -e '1s/0\(=*\)$$/_\1/' -e '1s/[^_=]\(=*\)$$/0\1/' -e '1s/_/1/'; } > $@
371all_final += test-int-ca3-badsign.crt
372server10_int3-bs.pem: server10.crt test-int-ca3-badsign.crt
373 cat server10.crt test-int-ca3-badsign.crt > $@
Jaeden Amero001626e2019-02-27 11:16:41 +0000374all_final += server10_int3-bs.pem
Manuel Pégourié-Gonnardc10afdb2017-06-29 09:48:08 +0200375
Ron Eldorb0065182017-10-16 12:40:27 +0300376rsa_pkcs1_2048_public.pem: server8.key
Ron Eldor3f2da842017-10-17 15:50:30 +0300377 $(OPENSSL) rsa -in $< -outform PEM -RSAPublicKey_out -out $@
378all_final += rsa_pkcs1_2048_public.pem
Gilles Peskineea8d6972017-11-28 17:30:52 +0100379
Ron Eldorb0065182017-10-16 12:40:27 +0300380rsa_pkcs1_2048_public.der: rsa_pkcs1_2048_public.pem
Ron Eldor3f2da842017-10-17 15:50:30 +0300381 $(OPENSSL) rsa -RSAPublicKey_in -in $< -outform DER -RSAPublicKey_out -out $@
382all_final += rsa_pkcs1_2048_public.der
383
384rsa_pkcs8_2048_public.pem: server8.key
385 $(OPENSSL) rsa -in $< -outform PEM -pubout -out $@
386all_final += rsa_pkcs8_2048_public.pem
387
388rsa_pkcs8_2048_public.der: rsa_pkcs8_2048_public.pem
389 $(OPENSSL) rsa -pubin -in $< -outform DER -pubout -out $@
Ron Eldorb0065182017-10-16 12:40:27 +0300390all_final += rsa_pkcs8_2048_public.der
Gilles Peskineea8d6972017-11-28 17:30:52 +0100391
Hanno Beckerd16f6122017-09-05 09:23:50 +0100392################################################################
393#### Generate various RSA keys
394################################################################
Gilles Peskinebc70a182017-05-09 15:59:24 +0200395
Hanno Beckerd16f6122017-09-05 09:23:50 +0100396### Password used for PKCS1-encoded encrypted RSA keys
397keys_rsa_basic_pwd = testkey
398
399### Password used for PKCS8-encoded encrypted RSA keys
400keys_rsa_pkcs8_pwd = PolarSSLTest
401
402### Basic 1024-, 2048- and 4096-bit unencrypted RSA keys from which
403### all other encrypted RSA keys are derived.
Hanno Becker08a36dd2017-09-29 20:05:23 +0100404rsa_pkcs1_1024_clear.pem:
Hanno Beckerd16f6122017-09-05 09:23:50 +0100405 $(OPENSSL) genrsa -out $@ 1024
Hanno Becker08a36dd2017-09-29 20:05:23 +0100406all_final += rsa_pkcs1_1024_clear.pem
407rsa_pkcs1_2048_clear.pem:
Hanno Beckerd16f6122017-09-05 09:23:50 +0100408 $(OPENSSL) genrsa -out $@ 2048
Hanno Becker08a36dd2017-09-29 20:05:23 +0100409all_final += rsa_pkcs1_2048_clear.pem
410rsa_pkcs1_4096_clear.pem:
Hanno Beckerd16f6122017-09-05 09:23:50 +0100411 $(OPENSSL) genrsa -out $@ 4096
Hanno Becker08a36dd2017-09-29 20:05:23 +0100412all_final += rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100413
414###
415### PKCS1-encoded, encrypted RSA keys
416###
417
418### 1024-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100419rsa_pkcs1_1024_des.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100420 $(OPENSSL) rsa -des -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100421all_final += rsa_pkcs1_1024_des.pem
422rsa_pkcs1_1024_3des.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100423 $(OPENSSL) rsa -des3 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100424all_final += rsa_pkcs1_1024_3des.pem
425rsa_pkcs1_1024_aes128.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100426 $(OPENSSL) rsa -aes128 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100427all_final += rsa_pkcs1_1024_aes128.pem
428rsa_pkcs1_1024_aes192.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100429 $(OPENSSL) rsa -aes192 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100430all_final += rsa_pkcs1_1024_aes192.pem
431rsa_pkcs1_1024_aes256.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100432 $(OPENSSL) rsa -aes256 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100433all_final += rsa_pkcs1_1024_aes256.pem
434keys_rsa_enc_basic_1024: rsa_pkcs1_1024_des.pem rsa_pkcs1_1024_3des.pem rsa_pkcs1_1024_aes128.pem rsa_pkcs1_1024_aes192.pem rsa_pkcs1_1024_aes256.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100435
436# 2048-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100437rsa_pkcs1_2048_des.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100438 $(OPENSSL) rsa -des -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100439all_final += rsa_pkcs1_2048_des.pem
440rsa_pkcs1_2048_3des.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100441 $(OPENSSL) rsa -des3 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100442all_final += rsa_pkcs1_2048_3des.pem
443rsa_pkcs1_2048_aes128.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100444 $(OPENSSL) rsa -aes128 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100445all_final += rsa_pkcs1_2048_aes128.pem
446rsa_pkcs1_2048_aes192.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100447 $(OPENSSL) rsa -aes192 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100448all_final += rsa_pkcs1_2048_aes192.pem
449rsa_pkcs1_2048_aes256.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100450 $(OPENSSL) rsa -aes256 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100451all_final += rsa_pkcs1_2048_aes256.pem
452keys_rsa_enc_basic_2048: rsa_pkcs1_2048_des.pem rsa_pkcs1_2048_3des.pem rsa_pkcs1_2048_aes128.pem rsa_pkcs1_2048_aes192.pem rsa_pkcs1_2048_aes256.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100453
454# 4096-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100455rsa_pkcs1_4096_des.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100456 $(OPENSSL) rsa -des -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100457all_final += rsa_pkcs1_4096_des.pem
458rsa_pkcs1_4096_3des.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100459 $(OPENSSL) rsa -des3 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100460all_final += rsa_pkcs1_4096_3des.pem
461rsa_pkcs1_4096_aes128.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100462 $(OPENSSL) rsa -aes128 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100463all_final += rsa_pkcs1_4096_aes128.pem
464rsa_pkcs1_4096_aes192.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100465 $(OPENSSL) rsa -aes192 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100466all_final += rsa_pkcs1_4096_aes192.pem
467rsa_pkcs1_4096_aes256.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100468 $(OPENSSL) rsa -aes256 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100469all_final += rsa_pkcs1_4096_aes256.pem
470keys_rsa_enc_basic_4096: rsa_pkcs1_4096_des.pem rsa_pkcs1_4096_3des.pem rsa_pkcs1_4096_aes128.pem rsa_pkcs1_4096_aes192.pem rsa_pkcs1_4096_aes256.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100471
472###
473### PKCS8-v1 encoded, encrypted RSA keys
474###
475
476### 1024-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100477rsa_pkcs8_pbe_sha1_1024_3des.der: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100478 $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-3DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100479all_final += rsa_pkcs8_pbe_sha1_1024_3des.der
480rsa_pkcs8_pbe_sha1_1024_3des.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100481 $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-3DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100482all_final += rsa_pkcs8_pbe_sha1_1024_3des.pem
483keys_rsa_enc_pkcs8_v1_1024_3des: rsa_pkcs8_pbe_sha1_1024_3des.pem rsa_pkcs8_pbe_sha1_1024_3des.der
Hanno Beckerd16f6122017-09-05 09:23:50 +0100484
Hanno Becker08a36dd2017-09-29 20:05:23 +0100485rsa_pkcs8_pbe_sha1_1024_2des.der: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100486 $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-2DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100487all_final += rsa_pkcs8_pbe_sha1_1024_2des.der
488rsa_pkcs8_pbe_sha1_1024_2des.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100489 $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-2DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100490all_final += rsa_pkcs8_pbe_sha1_1024_2des.pem
491keys_rsa_enc_pkcs8_v1_1024_2des: rsa_pkcs8_pbe_sha1_1024_2des.pem rsa_pkcs8_pbe_sha1_1024_2des.der
Hanno Beckerd16f6122017-09-05 09:23:50 +0100492
TRodziewicz75628d52021-06-18 12:56:27 +0200493keys_rsa_enc_pkcs8_v1_1024: keys_rsa_enc_pkcs8_v1_1024_3des keys_rsa_enc_pkcs8_v1_1024_2des
494
Hanno Beckerd16f6122017-09-05 09:23:50 +0100495### 2048-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100496rsa_pkcs8_pbe_sha1_2048_3des.der: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100497 $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-3DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100498all_final += rsa_pkcs8_pbe_sha1_2048_3des.der
499rsa_pkcs8_pbe_sha1_2048_3des.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100500 $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-3DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100501all_final += rsa_pkcs8_pbe_sha1_2048_3des.pem
502keys_rsa_enc_pkcs8_v1_2048_3des: rsa_pkcs8_pbe_sha1_2048_3des.pem rsa_pkcs8_pbe_sha1_2048_3des.der
Hanno Beckerd16f6122017-09-05 09:23:50 +0100503
Hanno Becker08a36dd2017-09-29 20:05:23 +0100504rsa_pkcs8_pbe_sha1_2048_2des.der: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100505 $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-2DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100506all_final += rsa_pkcs8_pbe_sha1_2048_2des.der
507rsa_pkcs8_pbe_sha1_2048_2des.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100508 $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-2DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100509all_final += rsa_pkcs8_pbe_sha1_2048_2des.pem
510keys_rsa_enc_pkcs8_v1_2048_2des: rsa_pkcs8_pbe_sha1_2048_2des.pem rsa_pkcs8_pbe_sha1_2048_2des.der
Hanno Beckerd16f6122017-09-05 09:23:50 +0100511
TRodziewicz75628d52021-06-18 12:56:27 +0200512keys_rsa_enc_pkcs8_v1_2048: keys_rsa_enc_pkcs8_v1_2048_3des keys_rsa_enc_pkcs8_v1_2048_2des
513
Hanno Beckerd16f6122017-09-05 09:23:50 +0100514### 4096-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100515rsa_pkcs8_pbe_sha1_4096_3des.der: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100516 $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-3DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100517all_final += rsa_pkcs8_pbe_sha1_4096_3des.der
518rsa_pkcs8_pbe_sha1_4096_3des.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100519 $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-3DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100520all_final += rsa_pkcs8_pbe_sha1_4096_3des.pem
521keys_rsa_enc_pkcs8_v1_4096_3des: rsa_pkcs8_pbe_sha1_4096_3des.pem rsa_pkcs8_pbe_sha1_4096_3des.der
Hanno Beckerd16f6122017-09-05 09:23:50 +0100522
Hanno Becker08a36dd2017-09-29 20:05:23 +0100523rsa_pkcs8_pbe_sha1_4096_2des.der: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100524 $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-2DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100525all_final += rsa_pkcs8_pbe_sha1_4096_2des.der
526rsa_pkcs8_pbe_sha1_4096_2des.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100527 $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-2DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100528all_final += rsa_pkcs8_pbe_sha1_4096_2des.pem
529keys_rsa_enc_pkcs8_v1_4096_2des: rsa_pkcs8_pbe_sha1_4096_2des.pem rsa_pkcs8_pbe_sha1_4096_2des.der
Hanno Beckerd16f6122017-09-05 09:23:50 +0100530
TRodziewicz75628d52021-06-18 12:56:27 +0200531keys_rsa_enc_pkcs8_v1_4096: keys_rsa_enc_pkcs8_v1_4096_3des keys_rsa_enc_pkcs8_v1_4096_2des
532
Hanno Beckerd16f6122017-09-05 09:23:50 +0100533###
Antonio Quartullif476b9d2018-02-01 13:54:13 +0800534### PKCS8-v2 encoded, encrypted RSA keys, no PRF specified (default for OpenSSL1.0: hmacWithSHA1)
Hanno Beckerd16f6122017-09-05 09:23:50 +0100535###
536
537### 1024-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100538rsa_pkcs8_pbes2_pbkdf2_1024_3des.der: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100539 $(OPENSSL) pkcs8 -topk8 -v2 des3 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100540all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des.der
541rsa_pkcs8_pbes2_pbkdf2_1024_3des.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100542 $(OPENSSL) pkcs8 -topk8 -v2 des3 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100543all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des.pem
544keys_rsa_enc_pkcs8_v2_1024_3des: rsa_pkcs8_pbes2_pbkdf2_1024_3des.der rsa_pkcs8_pbes2_pbkdf2_1024_3des.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100545
Hanno Becker08a36dd2017-09-29 20:05:23 +0100546rsa_pkcs8_pbes2_pbkdf2_1024_des.der: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100547 $(OPENSSL) pkcs8 -topk8 -v2 des -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100548all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des.der
549rsa_pkcs8_pbes2_pbkdf2_1024_des.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100550 $(OPENSSL) pkcs8 -topk8 -v2 des -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100551all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des.pem
552keys_rsa_enc_pkcs8_v2_1024_des: rsa_pkcs8_pbes2_pbkdf2_1024_des.der rsa_pkcs8_pbes2_pbkdf2_1024_des.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100553
554keys_rsa_enc_pkcs8_v2_1024: keys_rsa_enc_pkcs8_v2_1024_3des keys_rsa_enc_pkcs8_v2_1024_des
555
556### 2048-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100557rsa_pkcs8_pbes2_pbkdf2_2048_3des.der: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100558 $(OPENSSL) pkcs8 -topk8 -v2 des3 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100559all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des.der
560rsa_pkcs8_pbes2_pbkdf2_2048_3des.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100561 $(OPENSSL) pkcs8 -topk8 -v2 des3 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100562all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des.pem
563keys_rsa_enc_pkcs8_v2_2048_3des: rsa_pkcs8_pbes2_pbkdf2_2048_3des.der rsa_pkcs8_pbes2_pbkdf2_2048_3des.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100564
Hanno Becker08a36dd2017-09-29 20:05:23 +0100565rsa_pkcs8_pbes2_pbkdf2_2048_des.der: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100566 $(OPENSSL) pkcs8 -topk8 -v2 des -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100567all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des.der
568rsa_pkcs8_pbes2_pbkdf2_2048_des.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100569 $(OPENSSL) pkcs8 -topk8 -v2 des -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100570all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des.pem
571keys_rsa_enc_pkcs8_v2_2048_des: rsa_pkcs8_pbes2_pbkdf2_2048_des.der rsa_pkcs8_pbes2_pbkdf2_2048_des.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100572
573keys_rsa_enc_pkcs8_v2_2048: keys_rsa_enc_pkcs8_v2_2048_3des keys_rsa_enc_pkcs8_v2_2048_des
574
575### 4096-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100576rsa_pkcs8_pbes2_pbkdf2_4096_3des.der: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100577 $(OPENSSL) pkcs8 -topk8 -v2 des3 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100578all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des.der
579rsa_pkcs8_pbes2_pbkdf2_4096_3des.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100580 $(OPENSSL) pkcs8 -topk8 -v2 des3 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100581all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des.pem
582keys_rsa_enc_pkcs8_v2_4096_3des: rsa_pkcs8_pbes2_pbkdf2_4096_3des.der rsa_pkcs8_pbes2_pbkdf2_4096_3des.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100583
Hanno Becker08a36dd2017-09-29 20:05:23 +0100584rsa_pkcs8_pbes2_pbkdf2_4096_des.der: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100585 $(OPENSSL) pkcs8 -topk8 -v2 des -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100586all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des.der
587rsa_pkcs8_pbes2_pbkdf2_4096_des.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100588 $(OPENSSL) pkcs8 -topk8 -v2 des -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100589all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des.pem
590keys_rsa_enc_pkcs8_v2_4096_des: rsa_pkcs8_pbes2_pbkdf2_4096_des.der rsa_pkcs8_pbes2_pbkdf2_4096_des.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100591
592keys_rsa_enc_pkcs8_v2_4096: keys_rsa_enc_pkcs8_v2_4096_3des keys_rsa_enc_pkcs8_v2_4096_des
593
594###
Antonio Quartullif476b9d2018-02-01 13:54:13 +0800595### PKCS8-v2 encoded, encrypted RSA keys, PRF hmacWithSHA224
596###
597
598### 1024-bit
599rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha224.der: rsa_pkcs1_1024_clear.pem
600 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA224 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
601all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha224.der
602rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha224.pem: rsa_pkcs1_1024_clear.pem
603 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA224 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
604all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha224.pem
605keys_rsa_enc_pkcs8_v2_1024_3des_sha224: rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha224.der rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha224.pem
606
607rsa_pkcs8_pbes2_pbkdf2_1024_des_sha224.der: rsa_pkcs1_1024_clear.pem
608 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA224 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
609all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha224.der
610rsa_pkcs8_pbes2_pbkdf2_1024_des_sha224.pem: rsa_pkcs1_1024_clear.pem
611 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA224 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
612all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha224.pem
613keys_rsa_enc_pkcs8_v2_1024_des_sha224: rsa_pkcs8_pbes2_pbkdf2_1024_des_sha224.der rsa_pkcs8_pbes2_pbkdf2_1024_des_sha224.pem
614
615keys_rsa_enc_pkcs8_v2_1024_sha224: keys_rsa_enc_pkcs8_v2_1024_3des_sha224 keys_rsa_enc_pkcs8_v2_1024_des_sha224
616
617### 2048-bit
618rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha224.der: rsa_pkcs1_2048_clear.pem
619 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA224 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
620all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha224.der
621rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha224.pem: rsa_pkcs1_2048_clear.pem
622 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA224 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
623all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha224.pem
624keys_rsa_enc_pkcs8_v2_2048_3des_sha224: rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha224.der rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha224.pem
625
626rsa_pkcs8_pbes2_pbkdf2_2048_des_sha224.der: rsa_pkcs1_2048_clear.pem
627 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA224 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
628all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha224.der
629rsa_pkcs8_pbes2_pbkdf2_2048_des_sha224.pem: rsa_pkcs1_2048_clear.pem
630 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA224 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
631all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha224.pem
632keys_rsa_enc_pkcs8_v2_2048_des_sha224: rsa_pkcs8_pbes2_pbkdf2_2048_des_sha224.der rsa_pkcs8_pbes2_pbkdf2_2048_des_sha224.pem
633
634keys_rsa_enc_pkcs8_v2_2048_sha224: keys_rsa_enc_pkcs8_v2_2048_3des_sha224 keys_rsa_enc_pkcs8_v2_2048_des_sha224
635
636### 4096-bit
637rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha224.der: rsa_pkcs1_4096_clear.pem
638 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA224 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
639all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha224.der
640rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha224.pem: rsa_pkcs1_4096_clear.pem
641 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA224 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
642all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha224.pem
643keys_rsa_enc_pkcs8_v2_4096_3des_sha224: rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha224.der rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha224.pem
644
645rsa_pkcs8_pbes2_pbkdf2_4096_des_sha224.der: rsa_pkcs1_4096_clear.pem
646 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA224 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
647all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha224.der
648rsa_pkcs8_pbes2_pbkdf2_4096_des_sha224.pem: rsa_pkcs1_4096_clear.pem
649 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA224 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
650all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha224.pem
651keys_rsa_enc_pkcs8_v2_4096_des_sha224: rsa_pkcs8_pbes2_pbkdf2_4096_des_sha224.der rsa_pkcs8_pbes2_pbkdf2_4096_des_sha224.pem
652
653keys_rsa_enc_pkcs8_v2_4096_sha224: keys_rsa_enc_pkcs8_v2_4096_3des_sha224 keys_rsa_enc_pkcs8_v2_4096_des_sha224
654
655###
656### PKCS8-v2 encoded, encrypted RSA keys, PRF hmacWithSHA256
657###
658
659### 1024-bit
660rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha256.der: rsa_pkcs1_1024_clear.pem
661 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA256 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
662all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha256.der
663rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha256.pem: rsa_pkcs1_1024_clear.pem
664 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA256 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
665all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha256.pem
666keys_rsa_enc_pkcs8_v2_1024_3des_sha256: rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha256.der rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha256.pem
667
668rsa_pkcs8_pbes2_pbkdf2_1024_des_sha256.der: rsa_pkcs1_1024_clear.pem
669 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA256 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
670all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha256.der
671rsa_pkcs8_pbes2_pbkdf2_1024_des_sha256.pem: rsa_pkcs1_1024_clear.pem
672 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA256 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
673all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha256.pem
674keys_rsa_enc_pkcs8_v2_1024_des_sha256: rsa_pkcs8_pbes2_pbkdf2_1024_des_sha256.der rsa_pkcs8_pbes2_pbkdf2_1024_des_sha256.pem
675
676keys_rsa_enc_pkcs8_v2_1024_sha256: keys_rsa_enc_pkcs8_v2_1024_3des_sha256 keys_rsa_enc_pkcs8_v2_1024_des_sha256
677
678### 2048-bit
679rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha256.der: rsa_pkcs1_2048_clear.pem
680 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA256 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
681all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha256.der
682rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha256.pem: rsa_pkcs1_2048_clear.pem
683 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA256 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
684all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha256.pem
685keys_rsa_enc_pkcs8_v2_2048_3des_sha256: rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha256.der rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha256.pem
686
687rsa_pkcs8_pbes2_pbkdf2_2048_des_sha256.der: rsa_pkcs1_2048_clear.pem
688 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA256 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
689all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha256.der
690rsa_pkcs8_pbes2_pbkdf2_2048_des_sha256.pem: rsa_pkcs1_2048_clear.pem
691 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA256 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
692all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha256.pem
693keys_rsa_enc_pkcs8_v2_2048_des_sha256: rsa_pkcs8_pbes2_pbkdf2_2048_des_sha256.der rsa_pkcs8_pbes2_pbkdf2_2048_des_sha256.pem
694
695keys_rsa_enc_pkcs8_v2_2048_sha256: keys_rsa_enc_pkcs8_v2_2048_3des_sha256 keys_rsa_enc_pkcs8_v2_2048_des_sha256
696
697### 4096-bit
698rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha256.der: rsa_pkcs1_4096_clear.pem
699 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA256 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
700all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha256.der
701rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha256.pem: rsa_pkcs1_4096_clear.pem
702 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA256 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
703all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha256.pem
704keys_rsa_enc_pkcs8_v2_4096_3des_sha256: rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha256.der rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha256.pem
705
706rsa_pkcs8_pbes2_pbkdf2_4096_des_sha256.der: rsa_pkcs1_4096_clear.pem
707 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA256 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
708all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha256.der
709rsa_pkcs8_pbes2_pbkdf2_4096_des_sha256.pem: rsa_pkcs1_4096_clear.pem
710 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA256 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
711all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha256.pem
712keys_rsa_enc_pkcs8_v2_4096_des_sha256: rsa_pkcs8_pbes2_pbkdf2_4096_des_sha256.der rsa_pkcs8_pbes2_pbkdf2_4096_des_sha256.pem
713
714keys_rsa_enc_pkcs8_v2_4096_sha256: keys_rsa_enc_pkcs8_v2_4096_3des_sha256 keys_rsa_enc_pkcs8_v2_4096_des_sha256
715
716###
717### PKCS8-v2 encoded, encrypted RSA keys, PRF hmacWithSHA384
718###
719
720### 1024-bit
721rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha384.der: rsa_pkcs1_1024_clear.pem
722 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA384 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
723all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha384.der
724rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha384.pem: rsa_pkcs1_1024_clear.pem
725 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA384 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
726all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha384.pem
727keys_rsa_enc_pkcs8_v2_1024_3des_sha384: rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha384.der rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha384.pem
728
729rsa_pkcs8_pbes2_pbkdf2_1024_des_sha384.der: rsa_pkcs1_1024_clear.pem
730 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA384 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
731all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha384.der
732rsa_pkcs8_pbes2_pbkdf2_1024_des_sha384.pem: rsa_pkcs1_1024_clear.pem
733 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA384 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
734all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha384.pem
735keys_rsa_enc_pkcs8_v2_1024_des_sha384: rsa_pkcs8_pbes2_pbkdf2_1024_des_sha384.der rsa_pkcs8_pbes2_pbkdf2_1024_des_sha384.pem
736
737keys_rsa_enc_pkcs8_v2_1024_sha384: keys_rsa_enc_pkcs8_v2_1024_3des_sha384 keys_rsa_enc_pkcs8_v2_1024_des_sha384
738
739### 2048-bit
740rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha384.der: rsa_pkcs1_2048_clear.pem
741 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA384 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
742all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha384.der
743rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha384.pem: rsa_pkcs1_2048_clear.pem
744 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA384 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
745all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha384.pem
746keys_rsa_enc_pkcs8_v2_2048_3des_sha384: rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha384.der rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha384.pem
747
748rsa_pkcs8_pbes2_pbkdf2_2048_des_sha384.der: rsa_pkcs1_2048_clear.pem
749 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA384 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
750all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha384.der
751rsa_pkcs8_pbes2_pbkdf2_2048_des_sha384.pem: rsa_pkcs1_2048_clear.pem
752 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA384 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
753all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha384.pem
754keys_rsa_enc_pkcs8_v2_2048_des_sha384: rsa_pkcs8_pbes2_pbkdf2_2048_des_sha384.der rsa_pkcs8_pbes2_pbkdf2_2048_des_sha384.pem
755
756keys_rsa_enc_pkcs8_v2_2048_sha384: keys_rsa_enc_pkcs8_v2_2048_3des_sha384 keys_rsa_enc_pkcs8_v2_2048_des_sha384
757
758### 4096-bit
759rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha384.der: rsa_pkcs1_4096_clear.pem
760 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA384 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
761all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha384.der
762rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha384.pem: rsa_pkcs1_4096_clear.pem
763 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA384 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
764all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha384.pem
765keys_rsa_enc_pkcs8_v2_4096_3des_sha384: rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha384.der rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha384.pem
766
767rsa_pkcs8_pbes2_pbkdf2_4096_des_sha384.der: rsa_pkcs1_4096_clear.pem
768 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA384 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
769all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha384.der
770rsa_pkcs8_pbes2_pbkdf2_4096_des_sha384.pem: rsa_pkcs1_4096_clear.pem
771 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA384 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
772all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha384.pem
773keys_rsa_enc_pkcs8_v2_4096_des_sha384: rsa_pkcs8_pbes2_pbkdf2_4096_des_sha384.der rsa_pkcs8_pbes2_pbkdf2_4096_des_sha384.pem
774
775keys_rsa_enc_pkcs8_v2_4096_sha384: keys_rsa_enc_pkcs8_v2_4096_3des_sha384 keys_rsa_enc_pkcs8_v2_4096_des_sha384
776
777###
778### PKCS8-v2 encoded, encrypted RSA keys, PRF hmacWithSHA512
779###
780
781### 1024-bit
782rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha512.der: rsa_pkcs1_1024_clear.pem
783 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA512 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
784all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha512.der
785rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha512.pem: rsa_pkcs1_1024_clear.pem
786 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA512 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
787all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha512.pem
788keys_rsa_enc_pkcs8_v2_1024_3des_sha512: rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha512.der rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha512.pem
789
790rsa_pkcs8_pbes2_pbkdf2_1024_des_sha512.der: rsa_pkcs1_1024_clear.pem
791 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA512 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
792all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha512.der
793rsa_pkcs8_pbes2_pbkdf2_1024_des_sha512.pem: rsa_pkcs1_1024_clear.pem
794 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA512 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
795all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha512.pem
796keys_rsa_enc_pkcs8_v2_1024_des_sha512: rsa_pkcs8_pbes2_pbkdf2_1024_des_sha512.der rsa_pkcs8_pbes2_pbkdf2_1024_des_sha512.pem
797
798keys_rsa_enc_pkcs8_v2_1024_sha512: keys_rsa_enc_pkcs8_v2_1024_3des_sha512 keys_rsa_enc_pkcs8_v2_1024_des_sha512
799
800### 2048-bit
801rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha512.der: rsa_pkcs1_2048_clear.pem
802 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA512 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
803all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha512.der
804rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha512.pem: rsa_pkcs1_2048_clear.pem
805 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA512 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
806all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha512.pem
807keys_rsa_enc_pkcs8_v2_2048_3des_sha512: rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha512.der rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha512.pem
808
809rsa_pkcs8_pbes2_pbkdf2_2048_des_sha512.der: rsa_pkcs1_2048_clear.pem
810 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA512 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
811all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha512.der
812rsa_pkcs8_pbes2_pbkdf2_2048_des_sha512.pem: rsa_pkcs1_2048_clear.pem
813 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA512 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
814all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha512.pem
815keys_rsa_enc_pkcs8_v2_2048_des_sha512: rsa_pkcs8_pbes2_pbkdf2_2048_des_sha512.der rsa_pkcs8_pbes2_pbkdf2_2048_des_sha512.pem
816
817keys_rsa_enc_pkcs8_v2_2048_sha512: keys_rsa_enc_pkcs8_v2_2048_3des_sha512 keys_rsa_enc_pkcs8_v2_2048_des_sha512
818
819### 4096-bit
820rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha512.der: rsa_pkcs1_4096_clear.pem
821 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA512 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
822all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha512.der
823rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha512.pem: rsa_pkcs1_4096_clear.pem
824 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA512 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
825all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha512.pem
826keys_rsa_enc_pkcs8_v2_4096_3des_sha512: rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha512.der rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha512.pem
827
828rsa_pkcs8_pbes2_pbkdf2_4096_des_sha512.der: rsa_pkcs1_4096_clear.pem
829 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA512 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
830all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha512.der
831rsa_pkcs8_pbes2_pbkdf2_4096_des_sha512.pem: rsa_pkcs1_4096_clear.pem
832 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA512 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
833all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha512.pem
834keys_rsa_enc_pkcs8_v2_4096_des_sha512: rsa_pkcs8_pbes2_pbkdf2_4096_des_sha512.der rsa_pkcs8_pbes2_pbkdf2_4096_des_sha512.pem
835
836keys_rsa_enc_pkcs8_v2_4096_sha512: keys_rsa_enc_pkcs8_v2_4096_3des_sha512 keys_rsa_enc_pkcs8_v2_4096_des_sha512
837
838###
Hanno Beckerd16f6122017-09-05 09:23:50 +0100839### Rules to generate all RSA keys from a particular class
840###
841
842### Generate basic unencrypted RSA keys
Hanno Becker08a36dd2017-09-29 20:05:23 +0100843keys_rsa_unenc: rsa_pkcs1_1024_clear.pem rsa_pkcs1_2048_clear.pem rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100844
845### Generate PKCS1-encoded encrypted RSA keys
846keys_rsa_enc_basic: keys_rsa_enc_basic_1024 keys_rsa_enc_basic_2048 keys_rsa_enc_basic_4096
847
848### Generate PKCS8-v1 encrypted RSA keys
849keys_rsa_enc_pkcs8_v1: keys_rsa_enc_pkcs8_v1_1024 keys_rsa_enc_pkcs8_v1_2048 keys_rsa_enc_pkcs8_v1_4096
850
851### Generate PKCS8-v2 encrypted RSA keys
Antonio Quartullif476b9d2018-02-01 13:54:13 +0800852keys_rsa_enc_pkcs8_v2: keys_rsa_enc_pkcs8_v2_1024 keys_rsa_enc_pkcs8_v2_2048 keys_rsa_enc_pkcs8_v2_4096 keys_rsa_enc_pkcs8_v2_1024_sha224 keys_rsa_enc_pkcs8_v2_2048_sha224 keys_rsa_enc_pkcs8_v2_4096_sha224 keys_rsa_enc_pkcs8_v2_1024_sha256 keys_rsa_enc_pkcs8_v2_2048_sha256 keys_rsa_enc_pkcs8_v2_4096_sha256 keys_rsa_enc_pkcs8_v2_1024_sha384 keys_rsa_enc_pkcs8_v2_2048_sha384 keys_rsa_enc_pkcs8_v2_4096_sha384 keys_rsa_enc_pkcs8_v2_1024_sha512 keys_rsa_enc_pkcs8_v2_2048_sha512 keys_rsa_enc_pkcs8_v2_4096_sha512
Hanno Beckerd16f6122017-09-05 09:23:50 +0100853
854### Generate all RSA keys
855keys_rsa_all: keys_rsa_unenc keys_rsa_enc_basic keys_rsa_enc_pkcs8_v1 keys_rsa_enc_pkcs8_v2
856
Jethro Beekmand2df9362018-02-16 13:11:04 -0800857################################################################
858#### Generate various EC keys
859################################################################
Gilles Peskineea8d6972017-11-28 17:30:52 +0100860
Jethro Beekmand2df9362018-02-16 13:11:04 -0800861###
862### PKCS8 encoded
863###
864
865ec_prv.pk8.der:
866 $(OPENSSL) genpkey -algorithm EC -pkeyopt ec_paramgen_curve:prime192v1 -pkeyopt ec_param_enc:named_curve -out $@ -outform DER
867all_final += ec_prv.pk8.der
868
869# ### Instructions for creating `ec_prv.pk8nopub.der`,
870# ### `ec_prv.pk8nopubparam.der`, and `ec_prv.pk8param.der` by hand from
871# ### `ec_prv.pk8.der`.
872#
873# These instructions assume you are familiar with ASN.1 DER encoding and can
874# use a hex editor to manipulate DER.
875#
876# The relevant ASN.1 definitions for a PKCS#8 encoded Elliptic Curve key are:
877#
878# PrivateKeyInfo ::= SEQUENCE {
879# version Version,
880# privateKeyAlgorithm PrivateKeyAlgorithmIdentifier,
881# privateKey PrivateKey,
882# attributes [0] IMPLICIT Attributes OPTIONAL
883# }
884#
885# AlgorithmIdentifier ::= SEQUENCE {
886# algorithm OBJECT IDENTIFIER,
887# parameters ANY DEFINED BY algorithm OPTIONAL
888# }
889#
890# ECParameters ::= CHOICE {
891# namedCurve OBJECT IDENTIFIER
892# -- implicitCurve NULL
893# -- specifiedCurve SpecifiedECDomain
894# }
895#
896# ECPrivateKey ::= SEQUENCE {
897# version INTEGER { ecPrivkeyVer1(1) } (ecPrivkeyVer1),
898# privateKey OCTET STRING,
899# parameters [0] ECParameters {{ NamedCurve }} OPTIONAL,
900# publicKey [1] BIT STRING OPTIONAL
901# }
902#
903# `ec_prv.pk8.der` as generatde above by OpenSSL should have the following
904# fields:
905#
906# * privateKeyAlgorithm namedCurve
907# * privateKey.parameters NOT PRESENT
908# * privateKey.publicKey PRESENT
909# * attributes NOT PRESENT
910#
911# # ec_prv.pk8nopub.der
912#
913# Take `ec_prv.pk8.der` and remove `privateKey.publicKey`.
914#
915# # ec_prv.pk8nopubparam.der
916#
917# Take `ec_prv.pk8nopub.der` and add `privateKey.parameters`, the same value as
918# `privateKeyAlgorithm.namedCurve`. Don't forget to add the explicit tag.
919#
920# # ec_prv.pk8param.der
921#
922# Take `ec_prv.pk8.der` and add `privateKey.parameters`, the same value as
923# `privateKeyAlgorithm.namedCurve`. Don't forget to add the explicit tag.
924
925ec_prv.pk8.pem: ec_prv.pk8.der
926 $(OPENSSL) pkey -in $< -inform DER -out $@
927all_final += ec_prv.pk8.pem
928ec_prv.pk8nopub.pem: ec_prv.pk8nopub.der
929 $(OPENSSL) pkey -in $< -inform DER -out $@
930all_final += ec_prv.pk8nopub.pem
931ec_prv.pk8nopubparam.pem: ec_prv.pk8nopubparam.der
932 $(OPENSSL) pkey -in $< -inform DER -out $@
933all_final += ec_prv.pk8nopubparam.pem
934ec_prv.pk8param.pem: ec_prv.pk8param.der
935 $(OPENSSL) pkey -in $< -inform DER -out $@
936all_final += ec_prv.pk8param.pem
Gilles Peskineea8d6972017-11-28 17:30:52 +0100937
Valerio Setti8820b572023-04-27 10:03:08 +0200938ec_pub.pem: ec_prv.sec1.der
939 $(OPENSSL) pkey -in $< -inform DER -outform PEM -pubout -out $@
940all_final += ec_pub.pem
Valerio Settic8b78652023-04-26 12:24:26 +0200941
Valerio Setti0c960162023-01-16 16:56:30 +0100942ec_prv.sec1.comp.pem: ec_prv.sec1.pem
943 $(OPENSSL) ec -in $< -out $@ -conv_form compressed
944all_final += ec_prv.sec1.comp.pem
945
946ec_224_prv.comp.pem: ec_224_prv.pem
947 $(OPENSSL) ec -in $< -out $@ -conv_form compressed
948all_final += ec_224_prv.comp.pem
949
950ec_256_prv.comp.pem: ec_256_prv.pem
951 $(OPENSSL) ec -in $< -out $@ -conv_form compressed
952all_final += ec_256_prv.comp.pem
953
954ec_384_prv.comp.pem: ec_384_prv.pem
955 $(OPENSSL) ec -in $< -out $@ -conv_form compressed
956all_final += ec_384_prv.comp.pem
957
958ec_521_prv.comp.pem: ec_521_prv.pem
959 $(OPENSSL) ec -in $< -out $@ -conv_form compressed
960all_final += ec_521_prv.comp.pem
961
962ec_bp256_prv.comp.pem: ec_bp256_prv.pem
963 $(OPENSSL) ec -in $< -out $@ -conv_form compressed
964all_final += ec_bp256_prv.comp.pem
965
966ec_bp384_prv.comp.pem: ec_bp384_prv.pem
967 $(OPENSSL) ec -in $< -out $@ -conv_form compressed
968all_final += ec_bp384_prv.comp.pem
969
970ec_bp512_prv.comp.pem: ec_bp512_prv.pem
971 $(OPENSSL) ec -in $< -out $@ -conv_form compressed
972all_final += ec_bp512_prv.comp.pem
973
974ec_pub.comp.pem: ec_pub.pem
975 $(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
976all_final += ec_pub.comp.pem
977
Valerio Settide7bb5b2023-01-25 14:02:03 +0100978ec_224_pub.comp.pem: ec_224_pub.pem
979 $(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
980all_final += ec_224_pub.comp.pem
981
Valerio Setti0c960162023-01-16 16:56:30 +0100982ec_256_pub.comp.pem: ec_256_pub.pem
983 $(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
984all_final += ec_256_pub.comp.pem
985
986ec_384_pub.comp.pem: ec_384_pub.pem
987 $(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
Valerio Settiff159532023-01-16 17:34:53 +0100988all_final += ec_384_pub.comp.pem
Valerio Setti0c960162023-01-16 16:56:30 +0100989
990ec_521_pub.comp.pem: ec_521_pub.pem
991 $(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
992all_final += ec_521_pub.comp.pem
993
994ec_bp256_pub.comp.pem: ec_bp256_pub.pem
995 $(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
996all_final += ec_bp256_pub.comp.pem
997
998ec_bp384_pub.comp.pem: ec_bp384_pub.pem
999 $(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
1000all_final += ec_bp384_pub.comp.pem
1001
1002ec_bp512_pub.comp.pem: ec_bp512_pub.pem
1003 $(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
1004all_final += ec_bp512_pub.comp.pem
1005
Gilles Peskineea8d6972017-11-28 17:30:52 +01001006################################################################
Valerio Setti547b3a42023-04-24 10:24:37 +02001007#### Convert PEM keys to DER format
Valerio Setti8b7d4322023-04-18 11:08:44 +02001008################################################################
1009server1.pubkey.der: server1.pubkey
1010 $(OPENSSL) pkey -pubin -in $< -out $@ -outform DER
1011all_final += server1.pubkey.der
1012
Valerio Setti232a0062023-04-18 12:53:19 +02001013rsa4096_pub.der: rsa4096_pub.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001014 $(OPENSSL) pkey -pubin -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001015all_final += rsa4096_pub.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001016
Valerio Setti232a0062023-04-18 12:53:19 +02001017ec_pub.der: ec_pub.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001018 $(OPENSSL) pkey -pubin -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001019all_final += ec_pub.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001020
Valerio Setti232a0062023-04-18 12:53:19 +02001021ec_521_pub.der: ec_521_pub.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001022 $(OPENSSL) pkey -pubin -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001023all_final += ec_521_pub.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001024
Valerio Setti232a0062023-04-18 12:53:19 +02001025ec_bp512_pub.der: ec_bp512_pub.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001026 $(OPENSSL) pkey -pubin -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001027all_final += ec_bp512_pub.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001028
1029server1.key.der: server1.key
1030 $(OPENSSL) pkey -in $< -out $@ -outform DER
1031all_final += server1.key.der
1032
Valerio Setti232a0062023-04-18 12:53:19 +02001033rsa4096_prv.der: rsa4096_prv.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001034 $(OPENSSL) pkey -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001035all_final += rsa4096_prv.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001036
Valerio Setti232a0062023-04-18 12:53:19 +02001037ec_prv.sec1.der: ec_prv.sec1.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001038 $(OPENSSL) pkey -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001039all_final += ec_prv.sec1.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001040
Valerio Setti232a0062023-04-18 12:53:19 +02001041ec_256_long_prv.der: ec_256_long_prv.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001042 $(OPENSSL) pkey -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001043all_final += ec_256_long_prv.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001044
Valerio Setti232a0062023-04-18 12:53:19 +02001045ec_521_prv.der: ec_521_prv.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001046 $(OPENSSL) pkey -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001047all_final += ec_521_prv.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001048
Valerio Setti232a0062023-04-18 12:53:19 +02001049ec_521_short_prv.der: ec_521_short_prv.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001050 $(OPENSSL) pkey -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001051all_final += ec_521_short_prv.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001052
Valerio Setti232a0062023-04-18 12:53:19 +02001053ec_bp512_prv.der: ec_bp512_prv.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001054 $(OPENSSL) pkey -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001055all_final += ec_bp512_prv.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001056
1057################################################################
Hanno Becker50cb93a2018-10-08 17:15:28 +01001058### Generate CSRs for X.509 write test suite
1059################################################################
1060
1061server1.req.sha1: server1.key
1062 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1
1063all_final += server1.req.sha1
1064
Hanno Becker50cb93a2018-10-08 17:15:28 +01001065server1.req.md5: server1.key
1066 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=MD5
1067all_final += server1.req.md5
1068
1069server1.req.sha224: server1.key
1070 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA224
1071all_final += server1.req.sha224
1072
1073server1.req.sha256: server1.key
1074 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA256
1075all_final += server1.req.sha256
1076
Valerio Setti48e8fc72022-10-19 15:14:29 +02001077server1.req.sha256.ext: server1.key
1078 # Generating this with OpenSSL as a comparison point to test we're getting the same result
Przemek Stekiel8e83d3a2023-02-14 12:01:16 +01001079 openssl req -new -out $@ -key $< -subj '/C=NL/O=PolarSSL/CN=PolarSSL Server 1' -sha256 -addext "extendedKeyUsage=serverAuth" -addext "subjectAltName=URI:http://pki.example.com/,IP:127.1.1.0,DNS:example.com"
Valerio Setti48e8fc72022-10-19 15:14:29 +02001080all_final += server1.req.sha256.ext
1081
Hanno Becker50cb93a2018-10-08 17:15:28 +01001082server1.req.sha384: server1.key
1083 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA384
1084all_final += server1.req.sha384
1085
1086server1.req.sha512: server1.key
1087 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA512
1088all_final += server1.req.sha512
1089
1090server1.req.cert_type: server1.key
1091 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< ns_cert_type=ssl_server subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1
1092all_final += server1.req.cert_type
1093
1094server1.req.key_usage: server1.key
1095 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< key_usage=digital_signature,non_repudiation,key_encipherment subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1
1096all_final += server1.req.key_usage
1097
1098server1.req.ku-ct: server1.key
1099 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< key_usage=digital_signature,non_repudiation,key_encipherment ns_cert_type=ssl_server subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1
1100all_final += server1.req.ku-ct
1101
Andres Amaya Garcia7067f812018-09-26 10:51:16 +01001102server1.req.key_usage_empty: server1.key
1103 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1 force_key_usage=1
1104all_final += server1.req.key_usage_empty
1105
1106server1.req.cert_type_empty: server1.key
1107 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1 force_ns_cert_type=1
1108all_final += server1.req.cert_type_empty
1109
Werner Lewisb33dacd2022-05-20 12:48:46 +01001110server1.req.commas.sha256: server1.key
1111 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL\, Commas,CN=PolarSSL Server 1" md=SHA256
1112all_final += server1.req.commas.sha256
1113
Hanno Beckerebc1f402018-10-31 16:35:59 +00001114# server2*
1115
Hanno Becker226eedb2020-08-17 12:14:00 +01001116server2_pwd_ec = PolarSSLTest
1117
Hanno Beckerebc1f402018-10-31 16:35:59 +00001118server2.req.sha256: server2.key
1119 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=localhost" md=SHA256
1120all_intermediate += server2.req.sha256
1121
Hanno Beckere21387e2019-03-12 16:49:26 +00001122server2.crt.der: server2.crt
1123 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1124all_final += server2.crt.der
1125
1126server2-sha256.crt.der: server2-sha256.crt
1127 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1128all_final += server2-sha256.crt.der
1129
1130server2.key.der: server2.key
1131 $(OPENSSL) pkey -in $< -out $@ -inform PEM -outform DER
1132all_final += server2.key.der
1133
Hanno Becker226eedb2020-08-17 12:14:00 +01001134server2.key.enc: server2.key
1135 $(OPENSSL) rsa -aes256 -in $< -out $@ -passout "pass:$(server2_pwd_ec)"
1136all_final += server2.key.enc
1137
Hanno Becker0dd11392018-11-02 08:56:15 +00001138# server5*
1139
1140# The use of 'Server 1' in the DN is intentional here, as the DN is hardcoded in the x509_write test suite.'
1141server5.req.ku.sha1: server5.key
1142 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< key_usage=digital_signature,non_repudiation subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1
1143all_final += server5.req.ku.sha1
1144
Hanno Becker50cb93a2018-10-08 17:15:28 +01001145################################################################
Hanno Becker418a6222017-09-14 07:51:28 +01001146### Generate certificates for CRT write check tests
Gilles Peskineea8d6972017-11-28 17:30:52 +01001147################################################################
1148
Hanno Becker418a6222017-09-14 07:51:28 +01001149### The test files use the Mbed TLS generated certificates server1*.crt,
1150### but for comparison with OpenSSL also rules for OpenSSL-generated
1151### certificates server1*.crt.openssl are offered.
1152###
1153### Known differences:
1154### * OpenSSL encodes trailing zero-bits in bit-strings occurring in X.509 extension
1155### as unused bits, while Mbed TLS doesn't.
Gilles Peskinef040a172017-05-05 18:56:12 +02001156
Hanno Becker418a6222017-09-14 07:51:28 +01001157test_ca_server1_db = test-ca.server1.db
1158test_ca_server1_serial = test-ca.server1.serial
1159test_ca_server1_config_file = test-ca.server1.opensslconf
1160
Hanno Becker50cb93a2018-10-08 17:15:28 +01001161# server1*
Hanno Becker418a6222017-09-14 07:51:28 +01001162
Hanno Becker50cb93a2018-10-08 17:15:28 +01001163server1.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Ron Eldor9eeb8612019-02-12 15:03:42 +02001164 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 version=3 output_file=$@
Valerio Setti18b9b032023-01-27 11:47:57 +01001165server1.long_serial.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Valerio Setti856cec42023-01-12 14:56:54 +01001166 echo "112233445566778899aabbccddeeff0011223344" > test-ca.server1.tmp.serial
1167 $(OPENSSL) ca -in server1.req.sha256 -key PolarSSLTest -config test-ca.server1.test_serial.opensslconf -notext -batch -out $@
Valerio Setti18b9b032023-01-27 11:47:57 +01001168server1.80serial.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Valerio Setti856cec42023-01-12 14:56:54 +01001169 echo "8011223344" > test-ca.server1.tmp.serial
1170 $(OPENSSL) ca -in server1.req.sha256 -key PolarSSLTest -config test-ca.server1.test_serial.opensslconf -notext -batch -out $@
Valerio Setti18b9b032023-01-27 11:47:57 +01001171server1.long_serial_FF.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
1172 echo "ffffffffffffffffffffffffffffffff" > test-ca.server1.tmp.serial
1173 $(OPENSSL) ca -in server1.req.sha256 -key PolarSSLTest -config test-ca.server1.test_serial.opensslconf -notext -batch -out $@
Hanno Becker50cb93a2018-10-08 17:15:28 +01001174server1.noauthid.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Ron Eldor9eeb8612019-02-12 15:03:42 +02001175 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA1 authority_identifier=0 version=3 output_file=$@
Hanno Becker58fc28c2019-03-14 13:33:20 +00001176server1.crt.der: server1.crt
Ron Eldor9eeb8612019-02-12 15:03:42 +02001177 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA1 authority_identifier=0 version=3 output_file=$@
1178server1.der: server1.crt
Hanno Becker418a6222017-09-14 07:51:28 +01001179 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
Werner Lewisb33dacd2022-05-20 12:48:46 +01001180server1.commas.crt: server1.key server1.req.commas.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
1181 $(MBEDTLS_CERT_WRITE) request_file=server1.req.commas.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 version=3 output_file=$@
1182all_final += server1.crt server1.noauthid.crt server1.crt.der server1.commas.crt
Hanno Becker418a6222017-09-14 07:51:28 +01001183
Hanno Becker50cb93a2018-10-08 17:15:28 +01001184server1.key_usage.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Ron Eldor9eeb8612019-02-12 15:03:42 +02001185 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 key_usage=digital_signature,non_repudiation,key_encipherment version=3 output_file=$@
Hanno Becker50cb93a2018-10-08 17:15:28 +01001186server1.key_usage_noauthid.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Ron Eldor9eeb8612019-02-12 15:03:42 +02001187 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 key_usage=digital_signature,non_repudiation,key_encipherment authority_identifier=0 version=3 output_file=$@
Hanno Becker418a6222017-09-14 07:51:28 +01001188server1.key_usage.der: server1.key_usage.crt
1189 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1190all_final += server1.key_usage.crt server1.key_usage_noauthid.crt server1.key_usage.der
1191
Hanno Becker50cb93a2018-10-08 17:15:28 +01001192server1.cert_type.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Ron Eldor9eeb8612019-02-12 15:03:42 +02001193 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 ns_cert_type=ssl_server version=3 output_file=$@
Hanno Becker50cb93a2018-10-08 17:15:28 +01001194server1.cert_type_noauthid.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Ron Eldor9eeb8612019-02-12 15:03:42 +02001195 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 ns_cert_type=ssl_server authority_identifier=0 version=3 output_file=$@
Hanno Becker418a6222017-09-14 07:51:28 +01001196server1.cert_type.der: server1.cert_type.crt
1197 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1198all_final += server1.cert_type.crt server1.cert_type_noauthid.crt server1.cert_type.der
1199
Hanno Becker50cb93a2018-10-08 17:15:28 +01001200server1.v1.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Ron Eldor9eeb8612019-02-12 15:03:42 +02001201 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 version=1 output_file=$@
Hanno Becker418a6222017-09-14 07:51:28 +01001202server1.v1.der: server1.v1.crt
1203 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1204all_final += server1.v1.crt server1.v1.der
1205
Darren Krahn9c134ce2021-01-13 22:04:45 -08001206server1.ca.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
1207 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 is_ca=1 version=3 output_file=$@
1208server1.ca_noauthid.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
1209 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA1 authority_identifier=0 is_ca=1 version=3 output_file=$@
1210server1.ca.der: server1.ca.crt
1211 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1212all_final += server1.ca.crt server1.ca_noauthid.crt server1.ca.der
1213
Ron Eldor9eeb8612019-02-12 15:03:42 +02001214server1_ca.crt: server1.crt $(test_ca_crt)
1215 cat server1.crt $(test_ca_crt) > $@
1216all_final += server1_ca.crt
1217
1218cert_sha1.crt: server1.key
1219 $(MBEDTLS_CERT_WRITE) subject_key=server1.key subject_name="C=NL, O=PolarSSL, CN=PolarSSL Cert SHA1" serial=7 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA1 version=3 output_file=$@
1220all_final += cert_sha1.crt
1221
1222cert_sha224.crt: server1.key
1223 $(MBEDTLS_CERT_WRITE) subject_key=server1.key subject_name="C=NL, O=PolarSSL, CN=PolarSSL Cert SHA224" serial=8 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA224 version=3 output_file=$@
1224all_final += cert_sha224.crt
1225
1226cert_sha256.crt: server1.key
1227 $(MBEDTLS_CERT_WRITE) subject_key=server1.key subject_name="C=NL, O=PolarSSL, CN=PolarSSL Cert SHA256" serial=9 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA256 version=3 output_file=$@
1228all_final += cert_sha256.crt
1229
1230cert_sha384.crt: server1.key
1231 $(MBEDTLS_CERT_WRITE) subject_key=server1.key subject_name="C=NL, O=PolarSSL, CN=PolarSSL Cert SHA384" serial=10 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA384 version=3 output_file=$@
1232all_final += cert_sha384.crt
1233
1234cert_sha512.crt: server1.key
1235 $(MBEDTLS_CERT_WRITE) subject_key=server1.key subject_name="C=NL, O=PolarSSL, CN=PolarSSL Cert SHA512" serial=11 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA512 version=3 output_file=$@
1236all_final += cert_sha512.crt
1237
1238cert_example_wildcard.crt: server1.key
1239 $(MBEDTLS_CERT_WRITE) subject_key=server1.key subject_name="C=NL, O=PolarSSL, CN=*.example.com" serial=12 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA1 version=3 output_file=$@
1240all_final += cert_example_wildcard.crt
1241
Hanno Becker418a6222017-09-14 07:51:28 +01001242# OpenSSL-generated certificates for comparison
Hanno Becker81535d02017-09-13 15:39:59 +01001243# Also provide certificates in DER format to allow
Hanno Becker418a6222017-09-14 07:51:28 +01001244# direct binary comparison using e.g. dumpasn1
Hanno Becker50cb93a2018-10-08 17:15:28 +01001245server1.crt.openssl server1.key_usage.crt.openssl server1.cert_type.crt.openssl: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa) $(test_ca_server1_config_file)
Hanno Becker418a6222017-09-14 07:51:28 +01001246 echo "01" > $(test_ca_server1_serial)
1247 rm -f $(test_ca_server1_db)
1248 touch $(test_ca_server1_db)
Hanno Becker50cb93a2018-10-08 17:15:28 +01001249 $(OPENSSL) ca -batch -passin "pass:$(test_ca_pwd_rsa)" -config $(test_ca_server1_config_file) -in server1.req.sha256 -extensions v3_ext -extfile $@.v3_ext -out $@
Hanno Becker418a6222017-09-14 07:51:28 +01001250server1.der.openssl: server1.crt.openssl
1251 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1252server1.key_usage.der.openssl: server1.key_usage.crt.openssl
1253 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1254server1.cert_type.der.openssl: server1.cert_type.crt.openssl
1255 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1256
Hanno Becker50cb93a2018-10-08 17:15:28 +01001257server1.v1.crt.openssl: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa) $(test_ca_server1_config_file)
Hanno Becker418a6222017-09-14 07:51:28 +01001258 echo "01" > $(test_ca_server1_serial)
1259 rm -f $(test_ca_server1_db)
1260 touch $(test_ca_server1_db)
Hanno Becker50cb93a2018-10-08 17:15:28 +01001261 $(OPENSSL) ca -batch -passin "pass:$(test_ca_pwd_rsa)" -config $(test_ca_server1_config_file) -in server1.req.sha256 -out $@
Hanno Becker418a6222017-09-14 07:51:28 +01001262server1.v1.der.openssl: server1.v1.crt.openssl
1263 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1264
Ron Eldorb7c96262019-02-06 18:48:37 +02001265# To revoke certificate in the openssl database:
1266#
1267# $(OPENSSL) ca -gencrl -batch -cert $(test_ca_crt) -keyfile $(test_ca_key_file_rsa) -key $(test_ca_pwd_rsa) -config $(test_ca_server1_config_file) -md sha256 -crldays 365 -revoke server1.crt
1268
1269crl.pem: $(test_ca_crt) $(test_ca_key_file_rsa) $(test_ca_config_file)
1270 $(OPENSSL) ca -gencrl -batch -cert $(test_ca_crt) -keyfile $(test_ca_key_file_rsa) -key $(test_ca_pwd_rsa) -config $(test_ca_server1_config_file) -md sha1 -crldays 3653 -out $@
1271
Raoul Strackxa4e86142020-06-15 17:03:13 +02001272crl-futureRevocationDate.pem: $(test_ca_crt) $(test_ca_key_file_rsa) $(test_ca_config_file) test-ca.server1.future-crl.db test-ca.server1.future-crl.opensslconf
1273 $(FAKETIME) '2028-12-31' $(OPENSSL) ca -gencrl -config test-ca.server1.future-crl.opensslconf -crldays 365 -passin "pass:$(test_ca_pwd_rsa)" -out $@
1274
1275server1_all: crl.pem crl-futureRevocationDate.pem server1.crt server1.noauthid.crt server1.crt.openssl server1.v1.crt server1.v1.crt.openssl server1.key_usage.crt server1.key_usage_noauthid.crt server1.key_usage.crt.openssl server1.cert_type.crt server1.cert_type_noauthid.crt server1.cert_type.crt.openssl server1.der server1.der.openssl server1.v1.der server1.v1.der.openssl server1.key_usage.der server1.key_usage.der.openssl server1.cert_type.der server1.cert_type.der.openssl
Gilles Peskinef040a172017-05-05 18:56:12 +02001276
Hanno Beckerebc1f402018-10-31 16:35:59 +00001277# server2*
1278
1279server2.crt: server2.req.sha256
Ron Eldor9eeb8612019-02-12 15:03:42 +02001280 $(MBEDTLS_CERT_WRITE) request_file=server2.req.sha256 serial=2 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA1 version=3 output_file=$@
Hanno Beckere21387e2019-03-12 16:49:26 +00001281all_final += server2.crt
Hanno Beckerebc1f402018-10-31 16:35:59 +00001282
Ron Eldor9eeb8612019-02-12 15:03:42 +02001283server2.der: server2.crt
1284 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1285all_final += server2.crt server2.der
1286
Hanno Beckerebc1f402018-10-31 16:35:59 +00001287server2-sha256.crt: server2.req.sha256
Ron Eldor9eeb8612019-02-12 15:03:42 +02001288 $(MBEDTLS_CERT_WRITE) request_file=server2.req.sha256 serial=2 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA256 version=3 output_file=$@
Hanno Beckerebc1f402018-10-31 16:35:59 +00001289all_final += server2-sha256.crt
1290
TRodziewicz10e8cf52021-05-31 17:58:57 +02001291# MD5 test certificate
Gilles Peskinef040a172017-05-05 18:56:12 +02001292
Hanno Becker2e0f71f2019-06-03 14:14:04 +01001293cert_md_test_key = $(cli_crt_key_file_rsa)
1294
Hanno Becker2e0f71f2019-06-03 14:14:04 +01001295cert_md5.csr: $(cert_md_test_key)
1296 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Cert MD5" md=MD5
1297all_intermediate += cert_md5.csr
1298
1299cert_md5.crt: cert_md5.csr
Hanno Becker53756b32019-06-03 14:14:38 +01001300 $(MBEDTLS_CERT_WRITE) request_file=$< serial=6 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20000101121212 not_after=20300101121212 md=MD5 version=3 output_file=$@
Hanno Becker2e0f71f2019-06-03 14:14:04 +01001301all_final += cert_md5.crt
Gilles Peskinef040a172017-05-05 18:56:12 +02001302
Jerry Yu0f99af82021-11-05 11:04:05 +08001303# TLSv1.3 test certificates
Jerry Yudda036d2021-11-30 11:19:41 +08001304ecdsa_secp256r1.key: ec_256_prv.pem
Ronald Cron64bff9f2021-12-10 14:53:24 +01001305 cp $< $@
Jerry Yu0f99af82021-11-05 11:04:05 +08001306
Jerry Yudda036d2021-11-30 11:19:41 +08001307ecdsa_secp256r1.csr: ecdsa_secp256r1.key
Jerry Yu0f99af82021-11-05 11:04:05 +08001308 $(OPENSSL) req -new -subj "/C=NL/O=PolarSSL/CN=localhost" \
1309 -key $< -out $@
Jerry Yudda036d2021-11-30 11:19:41 +08001310all_intermediate += ecdsa_secp256r1.csr
1311ecdsa_secp256r1.crt: ecdsa_secp256r1.csr
Jerry Yu0f99af82021-11-05 11:04:05 +08001312 $(OPENSSL) x509 -req -CA $(test_ca_crt_file_ec) -CAkey $(test_ca_key_file_ec) \
1313 -set_serial 77 -days 3653 -sha384 -in $< -out $@
Jerry Yudda036d2021-11-30 11:19:41 +08001314all_final += ecdsa_secp256r1.crt ecdsa_secp256r1.key
1315tls13_certs: ecdsa_secp256r1.crt ecdsa_secp256r1.key
Jerry Yu0f99af82021-11-05 11:04:05 +08001316
Jerry Yudda036d2021-11-30 11:19:41 +08001317ecdsa_secp384r1.key: ec_384_prv.pem
Ronald Cron64bff9f2021-12-10 14:53:24 +01001318 cp $< $@
Jerry Yudda036d2021-11-30 11:19:41 +08001319ecdsa_secp384r1.csr: ecdsa_secp384r1.key
Jerry Yu0f99af82021-11-05 11:04:05 +08001320 $(OPENSSL) req -new -subj "/C=NL/O=PolarSSL/CN=localhost" \
1321 -key $< -out $@
Jerry Yudda036d2021-11-30 11:19:41 +08001322all_intermediate += ecdsa_secp384r1.csr
1323ecdsa_secp384r1.crt: ecdsa_secp384r1.csr
Jerry Yu0f99af82021-11-05 11:04:05 +08001324 $(OPENSSL) x509 -req -CA $(test_ca_crt_file_ec) -CAkey $(test_ca_key_file_ec) \
Jerry Yudda036d2021-11-30 11:19:41 +08001325 -set_serial 77 -days 3653 -sha384 -in $< -out $@
1326all_final += ecdsa_secp384r1.crt ecdsa_secp384r1.key
1327tls13_certs: ecdsa_secp384r1.crt ecdsa_secp384r1.key
1328
1329ecdsa_secp521r1.key: ec_521_prv.pem
Ronald Cron64bff9f2021-12-10 14:53:24 +01001330 cp $< $@
Jerry Yudda036d2021-11-30 11:19:41 +08001331ecdsa_secp521r1.csr: ecdsa_secp521r1.key
1332 $(OPENSSL) req -new -subj "/C=NL/O=PolarSSL/CN=localhost" \
1333 -key $< -out $@
1334all_intermediate += ecdsa_secp521r1.csr
1335ecdsa_secp521r1.crt: ecdsa_secp521r1.csr
1336 $(OPENSSL) x509 -req -CA $(test_ca_crt_file_ec) -CAkey $(test_ca_key_file_ec) \
1337 -set_serial 77 -days 3653 -sha384 -in $< -out $@
1338all_final += ecdsa_secp521r1.crt ecdsa_secp521r1.key
1339tls13_certs: ecdsa_secp521r1.crt ecdsa_secp521r1.key
Jerry Yu0f99af82021-11-05 11:04:05 +08001340
Nayna Jainc9deb182020-11-16 19:03:12 +00001341# PKCS7 test data
1342pkcs7_test_cert_1 = pkcs7-rsa-sha256-1.crt
1343pkcs7_test_cert_2 = pkcs7-rsa-sha256-2.crt
Nick Childa0c15d02023-01-30 19:30:38 +00001344pkcs7_test_cert_3 = pkcs7-rsa-sha256-3.crt
Manuel Pégourié-Gonnard600bd302022-02-21 11:30:43 +01001345pkcs7_test_file = pkcs7_data.bin
Nayna Jainc9deb182020-11-16 19:03:12 +00001346
Nick Childfc234b72022-11-02 15:23:39 -05001347$(pkcs7_test_file):
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001348 printf "Hello\15\n" > $@
Nick Childfc234b72022-11-02 15:23:39 -05001349all_final += $(pkcs7_test_file)
1350
Dave Rodgmanc5874db2023-02-16 16:14:46 +00001351pkcs7_zerolendata.bin:
1352 printf '' > $@
1353all_final += pkcs7_zerolendata.bin
1354
Nick Childfc234b72022-11-02 15:23:39 -05001355pkcs7_data_1.bin:
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001356 printf "2\15\n" > $@
Nick Childfc234b72022-11-02 15:23:39 -05001357all_final += pkcs7_data_1.bin
1358
Nayna Jainc9deb182020-11-16 19:03:12 +00001359# Generate signing cert
1360pkcs7-rsa-sha256-1.crt:
1361 $(OPENSSL) req -x509 -subj="/C=NL/O=PKCS7/CN=PKCS7 Cert 1" -sha256 -nodes -days 365 -newkey rsa:2048 -keyout pkcs7-rsa-sha256-1.key -out pkcs7-rsa-sha256-1.crt
1362 cat pkcs7-rsa-sha256-1.crt pkcs7-rsa-sha256-1.key > pkcs7-rsa-sha256-1.pem
1363all_final += pkcs7-rsa-sha256-1.crt
1364
1365pkcs7-rsa-sha256-2.crt:
1366 $(OPENSSL) req -x509 -subj="/C=NL/O=PKCS7/CN=PKCS7 Cert 2" -sha256 -nodes -days 365 -newkey rsa:2048 -keyout pkcs7-rsa-sha256-2.key -out pkcs7-rsa-sha256-2.crt
1367 cat pkcs7-rsa-sha256-2.crt pkcs7-rsa-sha256-2.key > pkcs7-rsa-sha256-2.pem
1368all_final += pkcs7-rsa-sha256-2.crt
1369
Nick Childa0c15d02023-01-30 19:30:38 +00001370pkcs7-rsa-sha256-3.crt:
1371 $(OPENSSL) req -x509 -subj="/C=NL/O=PKCS7/CN=PKCS7 Cert 3" -sha256 -nodes -days 365 -newkey rsa:2048 -keyout pkcs7-rsa-sha256-3.key -out pkcs7-rsa-sha256-3.crt
1372 cat pkcs7-rsa-sha256-3.crt pkcs7-rsa-sha256-3.key > pkcs7-rsa-sha256-3.pem
1373all_final += pkcs7-rsa-sha256-3.crt
1374
Nick Childe8a81162022-12-15 14:00:51 -06001375pkcs7-rsa-expired.crt:
1376 $(FAKETIME) -f -3650d $(OPENSSL) req -x509 -subj="/C=NL/O=PKCS7/CN=PKCS7 Cert Expired" -sha256 -nodes -days 365 -newkey rsa:2048 -keyout pkcs7-rsa-expired.key -out pkcs7-rsa-expired.crt
1377all_final += pkcs7-rsa-expired.crt
1378
Dave Rodgman2e844252023-03-11 10:24:30 +00001379# File with an otherwise valid signature signed with an expired cert
1380pkcs7_data_rsa_expired.der: pkcs7-rsa-expired.key pkcs7-rsa-expired.crt pkcs7_data.bin
1381 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha256 -inkey pkcs7-rsa-expired.key -signer pkcs7-rsa-expired.crt -noattr -outform DER -out $@
1382all_final += pkcs7_data_rsa_expired.der
1383
Nick Child45525d32022-02-25 11:54:34 -06001384# Convert signing certs to DER for testing PEM-free builds
1385pkcs7-rsa-sha256-1.der: $(pkcs7_test_cert_1)
1386 $(OPENSSL) x509 -in pkcs7-rsa-sha256-1.crt -out $@ -outform DER
1387all_final += pkcs7-rsa-sha256-1.der
1388
1389pkcs7-rsa-sha256-2.der: $(pkcs7_test_cert_2)
1390 $(OPENSSL) x509 -in pkcs7-rsa-sha256-2.crt -out $@ -outform DER
1391all_final += pkcs7-rsa-sha256-2.der
1392
Dave Rodgman2e844252023-03-11 10:24:30 +00001393pkcs7-rsa-expired.der: pkcs7-rsa-expired.crt
1394 $(OPENSSL) x509 -in pkcs7-rsa-expired.crt -out $@ -outform DER
1395all_final += pkcs7-rsa-expired.der
1396
Dave Rodgmanc5874db2023-02-16 16:14:46 +00001397# pkcs7 signature file over zero-len data
1398pkcs7_zerolendata_detached.der: pkcs7_zerolendata.bin pkcs7-rsa-sha256-1.key pkcs7-rsa-sha256-1.crt
1399 $(OPENSSL) smime -sign -md sha256 -nocerts -noattr -in pkcs7_zerolendata.bin -inkey pkcs7-rsa-sha256-1.key -outform DER -binary -signer pkcs7-rsa-sha256-1.crt -out pkcs7_zerolendata_detached.der
1400all_final += pkcs7_zerolendata_detached.der
1401
Nayna Jainc9deb182020-11-16 19:03:12 +00001402# pkcs7 signature file with CERT
1403pkcs7_data_cert_signed_sha256.der: $(pkcs7_test_file) $(pkcs7_test_cert_1)
Manuel Pégourié-Gonnard600bd302022-02-21 11:30:43 +01001404 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha256 -signer pkcs7-rsa-sha256-1.pem -noattr -outform DER -out $@
Nayna Jainc9deb182020-11-16 19:03:12 +00001405all_final += pkcs7_data_cert_signed_sha256.der
1406
1407# pkcs7 signature file with CERT and sha1
1408pkcs7_data_cert_signed_sha1.der: $(pkcs7_test_file) $(pkcs7_test_cert_1)
Manuel Pégourié-Gonnard600bd302022-02-21 11:30:43 +01001409 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha1 -signer pkcs7-rsa-sha256-1.pem -noattr -outform DER -out $@
Nayna Jainc9deb182020-11-16 19:03:12 +00001410all_final += pkcs7_data_cert_signed_sha1.der
1411
1412# pkcs7 signature file with CERT and sha512
1413pkcs7_data_cert_signed_sha512.der: $(pkcs7_test_file) $(pkcs7_test_cert_1)
Manuel Pégourié-Gonnard600bd302022-02-21 11:30:43 +01001414 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha512 -signer pkcs7-rsa-sha256-1.pem -noattr -outform DER -out $@
Nayna Jainc9deb182020-11-16 19:03:12 +00001415all_final += pkcs7_data_cert_signed_sha512.der
1416
1417# pkcs7 signature file without CERT
1418pkcs7_data_without_cert_signed.der: $(pkcs7_test_file) $(pkcs7_test_cert_1)
Manuel Pégourié-Gonnard600bd302022-02-21 11:30:43 +01001419 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha256 -signer pkcs7-rsa-sha256-1.pem -nocerts -noattr -outform DER -out $@
Nayna Jainc9deb182020-11-16 19:03:12 +00001420all_final += pkcs7_data_without_cert_signed.der
1421
Nick Child3dafc6c2023-02-07 19:59:58 +00001422# pkcs7 signature file with signature
1423pkcs7_data_with_signature.der: $(pkcs7_test_file) $(pkcs7_test_cert_1)
1424 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha256 -signer pkcs7-rsa-sha256-1.pem -nocerts -noattr -nodetach -outform DER -out $@
1425all_final += pkcs7_data_with_signature.der
1426
Nick Childa0c15d02023-01-30 19:30:38 +00001427# pkcs7 signature file with two signers
Nayna Jainc9deb182020-11-16 19:03:12 +00001428pkcs7_data_multiple_signed.der: $(pkcs7_test_file) $(pkcs7_test_cert_1) $(pkcs7_test_cert_2)
Manuel Pégourié-Gonnard600bd302022-02-21 11:30:43 +01001429 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha256 -signer pkcs7-rsa-sha256-1.pem -signer pkcs7-rsa-sha256-2.pem -nocerts -noattr -outform DER -out $@
Nayna Jainc9deb182020-11-16 19:03:12 +00001430all_final += pkcs7_data_multiple_signed.der
1431
Nick Childa0c15d02023-01-30 19:30:38 +00001432# pkcs7 signature file with three signers
1433pkcs7_data_3_signed.der: $(pkcs7_test_file) $(pkcs7_test_cert_1) $(pkcs7_test_cert_2) $(pkcs7_test_cert_3)
1434 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha256 -signer pkcs7-rsa-sha256-1.pem -signer pkcs7-rsa-sha256-2.pem -signer pkcs7-rsa-sha256-3.pem -nocerts -noattr -outform DER -out $@
1435all_final += pkcs7_data_3_signed.der
1436
Nayna Jainc9deb182020-11-16 19:03:12 +00001437# pkcs7 signature file with multiple certificates
1438pkcs7_data_multiple_certs_signed.der: $(pkcs7_test_file) $(pkcs7_test_cert_1) $(pkcs7_test_cert_2)
Manuel Pégourié-Gonnard600bd302022-02-21 11:30:43 +01001439 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha256 -signer pkcs7-rsa-sha256-1.pem -signer pkcs7-rsa-sha256-2.pem -noattr -outform DER -out $@
Nayna Jainc9deb182020-11-16 19:03:12 +00001440all_final += pkcs7_data_multiple_certs_signed.der
1441
1442# pkcs7 signature file with corrupted CERT
1443pkcs7_data_signed_badcert.der: pkcs7_data_cert_signed_sha256.der
1444 cp pkcs7_data_cert_signed_sha256.der $@
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001445 echo 'a1' | xxd -r -p | dd of=$@ bs=1 seek=547 conv=notrunc
Nayna Jainc9deb182020-11-16 19:03:12 +00001446all_final += pkcs7_data_signed_badcert.der
1447
1448# pkcs7 signature file with corrupted signer info
1449pkcs7_data_signed_badsigner.der: pkcs7_data_cert_signed_sha256.der
1450 cp pkcs7_data_cert_signed_sha256.der $@
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001451 echo 'a1' | xxd -r -p | dd of=$@ bs=1 seek=918 conv=notrunc
Nayna Jainc9deb182020-11-16 19:03:12 +00001452all_final += pkcs7_data_signed_badsigner.der
1453
Bence Szépkúti24897132023-01-19 20:57:44 +01001454# pkcs7 signature file with invalid tag in signerInfo[1].serial after long issuer name
1455pkcs7_signerInfo_1_serial_invalid_tag_after_long_name.der: pkcs7_data_multiple_signed.der
1456 cp $< $@
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001457 echo 'a1' | xxd -r -p | dd of=$@ bs=1 seek=498 conv=notrunc
Bence Szépkúti24897132023-01-19 20:57:44 +01001458all_final += pkcs7_signerInfo_1_serial_invalid_tag_after_long_name.der
1459
1460# pkcs7 signature file with invalid tag in signerInfo[2]
1461pkcs7_signerInfo_2_invalid_tag.der: pkcs7_data_3_signed.der
1462 cp $< $@
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001463 echo 'a1' | xxd -r -p | dd of=$@ bs=1 seek=810 conv=notrunc
Bence Szépkúti24897132023-01-19 20:57:44 +01001464all_final += pkcs7_signerInfo_2_invalid_tag.der
1465
Xiaokang Qian72b4bca2023-03-06 07:50:43 +00001466# pkcs7 signature file with corrupted signer info[1]
1467pkcs7_data_signed_badsigner1_badsize.der: pkcs7_data_3_signed.der
1468 cp pkcs7_data_3_signed.der $@
Xiaokang Qianc96d2de2023-03-07 10:35:47 +00001469 echo '72' | xxd -p -r | dd of=$@ bs=1 seek=438 conv=notrunc
Xiaokang Qian72b4bca2023-03-06 07:50:43 +00001470all_final += pkcs7_data_signed_badsigner1_badsize.der
1471
Xiaokang Qian8993a142023-03-06 08:32:20 +00001472pkcs7_data_signed_badsigner1_badtag.der: pkcs7_data_3_signed.der
1473 cp pkcs7_data_3_signed.der $@
Xiaokang Qianc96d2de2023-03-07 10:35:47 +00001474 echo 'a1' | xxd -p -r | dd of=$@ bs=1 seek=442 conv=notrunc
Xiaokang Qian8993a142023-03-06 08:32:20 +00001475all_final += pkcs7_data_signed_badsigner1_badtag.der
1476
Xiaokang Qian9c703d82023-03-06 08:44:12 +00001477pkcs7_data_signed_badsigner1_fuzzbad.der: pkcs7_data_3_signed.der
1478 cp pkcs7_data_3_signed.der $@
Xiaokang Qianc96d2de2023-03-07 10:35:47 +00001479 echo 'a1' | xxd -p -r | dd of=$@ bs=1 seek=550 conv=notrunc
Xiaokang Qian9c703d82023-03-06 08:44:12 +00001480all_final += pkcs7_data_signed_badsigner1_fuzzbad.der
1481
Xiaokang Qiane8c696f2023-03-06 07:58:14 +00001482# pkcs7 signature file with corrupted signer info[2]
1483pkcs7_data_signed_badsigner2_badsize.der: pkcs7_data_3_signed.der
1484 cp pkcs7_data_3_signed.der $@
Xiaokang Qianc96d2de2023-03-07 10:35:47 +00001485 echo '72'| xxd -p -r | dd of=$@ bs=1 seek=813 conv=notrunc
Xiaokang Qiane8c696f2023-03-06 07:58:14 +00001486all_final += pkcs7_data_signed_badsigner2_badsize
1487
Xiaokang Qian8993a142023-03-06 08:32:20 +00001488pkcs7_data_signed_badsigner2_badtag.der: pkcs7_data_3_signed.der
1489 cp pkcs7_data_3_signed.der $@
Xiaokang Qianc96d2de2023-03-07 10:35:47 +00001490 echo 'a1'| xxd -p -r | dd of=$@ bs=1 seek=817 conv=notrunc
Xiaokang Qian8993a142023-03-06 08:32:20 +00001491all_final += pkcs7_data_signed_badsigner2_badtag
1492
Xiaokang Qian9c703d82023-03-06 08:44:12 +00001493pkcs7_data_signed_badsigner2_fuzzbad.der: pkcs7_data_3_signed.der
1494 cp pkcs7_data_3_signed.der $@
Xiaokang Qianc96d2de2023-03-07 10:35:47 +00001495 echo 'a1'| xxd -p -r | dd of=$@ bs=1 seek=925 conv=notrunc
Xiaokang Qian9c703d82023-03-06 08:44:12 +00001496all_final += pkcs7_data_signed_badsigner2_fuzzbad
1497
Nayna Jainc9deb182020-11-16 19:03:12 +00001498# pkcs7 file with version 2
1499pkcs7_data_cert_signed_v2.der: pkcs7_data_cert_signed_sha256.der
1500 cp pkcs7_data_cert_signed_sha256.der $@
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001501 echo '02' | xxd -r -p | dd of=$@ bs=1 seek=25 conv=notrunc
Nayna Jainc9deb182020-11-16 19:03:12 +00001502all_final += pkcs7_data_cert_signed_v2.der
1503
1504pkcs7_data_cert_encrypted.der: $(pkcs7_test_file) $(pkcs7_test_cert_1)
Manuel Pégourié-Gonnard600bd302022-02-21 11:30:43 +01001505 $(OPENSSL) smime -encrypt -aes256 -in pkcs7_data.bin -binary -outform DER -out $@ pkcs7-rsa-sha256-1.crt
Nayna Jainc9deb182020-11-16 19:03:12 +00001506all_final += pkcs7_data_cert_encrypted.der
1507
1508## Negative tests
1509# For some interesting sizes, what happens if we make them off-by-one?
1510pkcs7_signerInfo_issuer_invalid_size.der: pkcs7_data_cert_signed_sha256.der
1511 cp $< $@
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001512 echo '35' | xxd -r -p | dd of=$@ seek=919 bs=1 conv=notrunc
Nayna Jainc9deb182020-11-16 19:03:12 +00001513all_final += pkcs7_signerInfo_issuer_invalid_size.der
1514
1515pkcs7_signerInfo_serial_invalid_size.der: pkcs7_data_cert_signed_sha256.der
1516 cp $< $@
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001517 echo '15' | xxd -r -p | dd of=$@ seek=973 bs=1 conv=notrunc
Nayna Jainc9deb182020-11-16 19:03:12 +00001518all_final += pkcs7_signerInfo_serial_invalid_size.der
1519
Nayna Jain673a2262020-12-14 22:44:49 +00001520# pkcs7 signature file just with signed data
1521pkcs7_data_cert_signeddata_sha256.der: pkcs7_data_cert_signed_sha256.der
1522 dd if=pkcs7_data_cert_signed_sha256.der of=$@ skip=19 bs=1
1523all_final += pkcs7_data_cert_signeddata_sha256.der
1524
Gilles Peskinef040a172017-05-05 18:56:12 +02001525################################################################
Gilles Peskinec6b0d962020-12-08 22:31:52 +01001526#### Diffie-Hellman parameters
1527################################################################
1528
1529dh.998.pem:
1530 $(OPENSSL) dhparam -out $@ -text 998
1531
1532dh.999.pem:
1533 $(OPENSSL) dhparam -out $@ -text 999
1534
1535################################################################
Gilles Peskinef040a172017-05-05 18:56:12 +02001536#### Meta targets
1537################################################################
1538
1539all_final: $(all_final)
1540all: $(all_intermediate) $(all_final)
1541
Gilles Peskinefd14bca2017-05-11 17:57:22 +02001542.PHONY: default all_final all
Gilles Peskineea8d6972017-11-28 17:30:52 +01001543.PHONY: keys_rsa_all
1544.PHONY: keys_rsa_unenc keys_rsa_enc_basic
1545.PHONY: keys_rsa_enc_pkcs8_v1 keys_rsa_enc_pkcs8_v2
1546.PHONY: keys_rsa_enc_basic_1024 keys_rsa_enc_basic_2048 keys_rsa_enc_basic_4096
1547.PHONY: keys_rsa_enc_pkcs8_v1_1024 keys_rsa_enc_pkcs8_v2_1024
1548.PHONY: keys_rsa_enc_pkcs8_v1_2048 keys_rsa_enc_pkcs8_v2_2048
1549.PHONY: keys_rsa_enc_pkcs8_v1_4096 keys_rsa_enc_pkcs8_v2_4096
1550.PHONY: server1_all
Gilles Peskinefd14bca2017-05-11 17:57:22 +02001551
Gilles Peskinef040a172017-05-05 18:56:12 +02001552# These files should not be committed to the repository.
1553list_intermediate:
1554 @printf '%s\n' $(all_intermediate) | sort
1555# These files should be committed to the repository so that the test data is
1556# available upon checkout without running a randomized process depending on
1557# third-party tools.
1558list_final:
1559 @printf '%s\n' $(all_final) | sort
Gilles Peskinefd14bca2017-05-11 17:57:22 +02001560.PHONY: list_intermediate list_final
Gilles Peskinef040a172017-05-05 18:56:12 +02001561
Gilles Peskinefd14bca2017-05-11 17:57:22 +02001562## Remove intermediate files
Gilles Peskinef040a172017-05-05 18:56:12 +02001563clean:
1564 rm -f $(all_intermediate)
Gilles Peskinefd14bca2017-05-11 17:57:22 +02001565## Remove all build products, even the ones that are committed
Gilles Peskinef040a172017-05-05 18:56:12 +02001566neat: clean
1567 rm -f $(all_final)
Gilles Peskinefd14bca2017-05-11 17:57:22 +02001568.PHONY: clean neat