TrustedFirmware Git Browser
Code Review Sign In
review.trustedfirmware.org / mirror / mbed-tls / b63b0afc05c700280438c23f9bf68596ae6e865c / . / tests / suites / test_suite_x509parse.data
blob: e130567e5da8cb7586df16e532e459d9407162e3 [file] [log] [blame]
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]1X509 Certificate information #1
2x509_cert_info:"data_files/server1.crt":"cert. version \: 3\nserial number \: 01\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued on \: 2009-02-09 21\:12\:35\nexpires on \: 2011-02-09 21\:12\:35\nsigned using \: RSA+SHA1\nRSA key size \: 2048 bits\n"
3
4X509 Certificate information #2
5x509_cert_info:"data_files/server2.crt":"cert. version \: 3\nserial number \: 09\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2009-02-10 22\:15\:12\nexpires on \: 2011-02-10 22\:15\:12\nsigned using \: RSA+SHA1\nRSA key size \: 2048 bits\n"
6
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]7X509 Certificate information #3
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]8x509_cert_info:"data_files/test-ca.crt":"cert. version \: 3\nserial number \: 00\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued on \: 2009-02-09 21\:12\:25\nexpires on \: 2019-02-10 21\:12\:25\nsigned using \: RSA+SHA1\nRSA key size \: 2048 bits\n"
9
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]10X509 Certificate information MD2 Digest
11x509_cert_info:"data_files/cert_md2.crt":"cert. version \: 3\nserial number \: 09\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert MD2\nissued on \: 2009-07-12 10\:56\:59\nexpires on \: 2011-07-12 10\:56\:59\nsigned using \: RSA+MD2\nRSA key size \: 2048 bits\n"
12
13X509 Certificate information MD4 Digest
14x509_cert_info:"data_files/cert_md4.crt":"cert. version \: 3\nserial number \: 0A\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert MD4\nissued on \: 2009-07-12 10\:56\:59\nexpires on \: 2011-07-12 10\:56\:59\nsigned using \: RSA+MD4\nRSA key size \: 2048 bits\n"
15
16X509 Certificate information MD5 Digest
17x509_cert_info:"data_files/cert_md5.crt":"cert. version \: 3\nserial number \: 0B\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert MD5\nissued on \: 2009-07-12 10\:56\:59\nexpires on \: 2011-07-12 10\:56\:59\nsigned using \: RSA+MD5\nRSA key size \: 2048 bits\n"
18
19X509 Certificate information SHA1 Digest
20x509_cert_info:"data_files/cert_sha1.crt":"cert. version \: 3\nserial number \: 0C\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA1\nissued on \: 2009-07-12 10\:56\:59\nexpires on \: 2011-07-12 10\:56\:59\nsigned using \: RSA+SHA1\nRSA key size \: 2048 bits\n"
21
22X509 Certificate information SHA224 Digest
23x509_cert_info:"data_files/cert_sha224.crt":"cert. version \: 3\nserial number \: 0D\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA224\nissued on \: 2009-07-12 10\:56\:59\nexpires on \: 2011-07-12 10\:56\:59\nsigned using \: RSA+SHA224\nRSA key size \: 2048 bits\n"
24
25X509 Certificate information SHA256 Digest
26x509_cert_info:"data_files/cert_sha256.crt":"cert. version \: 3\nserial number \: 0E\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA256\nissued on \: 2009-07-12 10\:56\:59\nexpires on \: 2011-07-12 10\:56\:59\nsigned using \: RSA+SHA256\nRSA key size \: 2048 bits\n"
27
28X509 Certificate information SHA384 Digest
29x509_cert_info:"data_files/cert_sha384.crt":"cert. version \: 3\nserial number \: 0F\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA384\nissued on \: 2009-07-12 10\:56\:59\nexpires on \: 2011-07-12 10\:56\:59\nsigned using \: RSA+SHA384\nRSA key size \: 2048 bits\n"
30
31X509 Certificate information SHA512 Digest
32x509_cert_info:"data_files/cert_sha512.crt":"cert. version \: 3\nserial number \: 10\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA512\nissued on \: 2009-07-12 10\:57\:00\nexpires on \: 2011-07-12 10\:57\:00\nsigned using \: RSA+SHA512\nRSA key size \: 2048 bits\n"
33
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]34X509 CRL information #1
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]35x509_crl_info:"data_files/crl_expired.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2009-02-09 21\:12\:36\nnext update \: 2009-04-10 21\:12\:36\nRevoked certificates\:\nserial number\: 01 revocation date\: 2009-02-09 21\:12\:36\nserial number\: 03 revocation date\: 2009-02-09 21\:12\:36\nsigned using \: RSA+SHA1\n"
36
37X509 CRL Information MD2 Digest
38x509_crl_info:"data_files/crl_md2.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2009-07-19 19\:56\:37\nnext update \: 2009-09-17 19\:56\:37\nRevoked certificates\:\nserial number\: 01 revocation date\: 2009-02-09 21\:12\:36\nserial number\: 03 revocation date\: 2009-02-09 21\:12\:36\nsigned using \: RSA+MD2\n"
39
40X509 CRL Information MD4 Digest
41x509_crl_info:"data_files/crl_md4.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2009-07-19 19\:56\:37\nnext update \: 2009-09-17 19\:56\:37\nRevoked certificates\:\nserial number\: 01 revocation date\: 2009-02-09 21\:12\:36\nserial number\: 03 revocation date\: 2009-02-09 21\:12\:36\nsigned using \: RSA+MD4\n"
42
43X509 CRL Information MD5 Digest
44x509_crl_info:"data_files/crl_md5.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2009-07-19 19\:56\:37\nnext update \: 2009-09-17 19\:56\:37\nRevoked certificates\:\nserial number\: 01 revocation date\: 2009-02-09 21\:12\:36\nserial number\: 03 revocation date\: 2009-02-09 21\:12\:36\nsigned using \: RSA+MD5\n"
45
46X509 CRL Information SHA1 Digest
47x509_crl_info:"data_files/crl_sha1.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2009-07-19 19\:56\:37\nnext update \: 2009-09-17 19\:56\:37\nRevoked certificates\:\nserial number\: 01 revocation date\: 2009-02-09 21\:12\:36\nserial number\: 03 revocation date\: 2009-02-09 21\:12\:36\nsigned using \: RSA+SHA1\n"
48
49X509 CRL Information SHA224 Digest
50x509_crl_info:"data_files/crl_sha224.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2009-07-19 19\:56\:37\nnext update \: 2009-09-17 19\:56\:37\nRevoked certificates\:\nserial number\: 01 revocation date\: 2009-02-09 21\:12\:36\nserial number\: 03 revocation date\: 2009-02-09 21\:12\:36\nsigned using \: RSA+SHA224\n"
51
52X509 CRL Information SHA256 Digest
53x509_crl_info:"data_files/crl_sha256.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2009-07-19 19\:56\:37\nnext update \: 2009-09-17 19\:56\:37\nRevoked certificates\:\nserial number\: 01 revocation date\: 2009-02-09 21\:12\:36\nserial number\: 03 revocation date\: 2009-02-09 21\:12\:36\nsigned using \: RSA+SHA256\n"
54
55X509 CRL Information SHA384 Digest
56x509_crl_info:"data_files/crl_sha384.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2009-07-19 19\:56\:37\nnext update \: 2009-09-17 19\:56\:37\nRevoked certificates\:\nserial number\: 01 revocation date\: 2009-02-09 21\:12\:36\nserial number\: 03 revocation date\: 2009-02-09 21\:12\:36\nsigned using \: RSA+SHA384\n"
57
58X509 CRL Information SHA512 Digest
59x509_crl_info:"data_files/crl_sha512.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2009-07-19 19\:56\:37\nnext update \: 2009-09-17 19\:56\:37\nRevoked certificates\:\nserial number\: 01 revocation date\: 2009-02-09 21\:12\:36\nserial number\: 03 revocation date\: 2009-02-09 21\:12\:36\nsigned using \: RSA+SHA512\n"
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]60
61X509 Parse Key #1 (No password when required)
Paul Bakker46b80712009-10-03 20:01:39 +0000[diff] [blame]62depends_on:POLARSSL_MD5_C
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]63x509parse_keyfile:"data_files/test-ca.key":NULL:POLARSSL_ERR_X509_KEY_PASSWORD_REQUIRED
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]64
65X509 Parse Key #2 (Correct password)
Paul Bakker46b80712009-10-03 20:01:39 +0000[diff] [blame]66depends_on:POLARSSL_MD5_C
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]67x509parse_keyfile:"data_files/test-ca.key":"PolarSSLTest":0
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]68
69X509 Parse Key #3 (Wrong password)
Paul Bakker46b80712009-10-03 20:01:39 +0000[diff] [blame]70depends_on:POLARSSL_MD5_C
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]71x509parse_keyfile:"data_files/test-ca.key":"PolarSSLWRONG":POLARSSL_ERR_X509_KEY_PASSWORD_MISMATCH
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]72
73X509 Get Distinguished Name #1
74x509_dn_gets:"data_files/server1.crt":subject:"C=NL, O=PolarSSL, CN=PolarSSL Server 1"
75
76X509 Get Distinguished Name #2
77x509_dn_gets:"data_files/server1.crt":issuer:"C=NL, O=PolarSSL, CN=PolarSSL Test CA"
78
79X509 Get Distinguished Name #3
80x509_dn_gets:"data_files/server2.crt":subject:"C=NL, O=PolarSSL, CN=localhost"
81
82X509 Get Distinguished Name #4
83x509_dn_gets:"data_files/server2.crt":issuer:"C=NL, O=PolarSSL, CN=PolarSSL Test CA"
84
85X509 Time Expired #1
86x509_time_expired:"data_files/server1.crt":valid_from:1
87
88X509 Time Expired #2
89x509_time_expired:"data_files/server1.crt":valid_to:0
90
91X509 Time Expired #3
92x509_time_expired:"data_files/server2.crt":valid_from:1
93
94X509 Time Expired #4
95x509_time_expired:"data_files/server2.crt":valid_to:0
96
97X509 Time Expired #5
98x509_time_expired:"data_files/test-ca.crt":valid_from:1
99
100X509 Time Expired #6
101x509_time_expired:"data_files/test-ca.crt":valid_to:0
102
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]103X509 Certificate verification #1 (Revoked Cert, Expired CRL)
Paul Bakkerb63b0af2011-01-13 17:54:59 +0000[diff] [blame^]104x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":NULL:POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_REVOKED | BADCRL_EXPIRED:NULL
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]105
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]106X509 Certificate verification #2 (Revoked Cert, Expired CRL)
Paul Bakkerb63b0af2011-01-13 17:54:59 +0000[diff] [blame^]107x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"PolarSSL Server 1":POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_REVOKED | BADCRL_EXPIRED:NULL
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]108
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]109X509 Certificate verification #3 (Revoked Cert, Expired CRL, CN Mismatch)
Paul Bakkerb63b0af2011-01-13 17:54:59 +0000[diff] [blame^]110x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"PolarSSL Wrong CN":POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_REVOKED | BADCRL_EXPIRED | BADCERT_CN_MISMATCH:NULL
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]111
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]112X509 Certificate verification #4 (Valid Cert, Expired CRL)
Paul Bakkerb63b0af2011-01-13 17:54:59 +0000[diff] [blame^]113x509_verify:"data_files/server2.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":NULL:POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCRL_EXPIRED:NULL
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]114
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]115X509 Certificate verification #5 (Revoked Cert)
Paul Bakkerb63b0af2011-01-13 17:54:59 +0000[diff] [blame^]116x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_REVOKED:NULL
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]117
118X509 Certificate verification #6 (Revoked Cert)
Paul Bakkerb63b0af2011-01-13 17:54:59 +0000[diff] [blame^]119x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"PolarSSL Server 1":POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_REVOKED:NULL
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]120
121X509 Certificate verification #7 (Revoked Cert, CN Mismatch)
Paul Bakkerb63b0af2011-01-13 17:54:59 +0000[diff] [blame^]122x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"PolarSSL Wrong CN":POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_REVOKED | BADCERT_CN_MISMATCH:NULL
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]123
124X509 Certificate verification #8 (Valid Cert)
Paul Bakkerb63b0af2011-01-13 17:54:59 +0000[diff] [blame^]125x509_verify:"data_files/server2.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0:0:NULL
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]126
127X509 Certificate verification #9 (Not trusted Cert)
Paul Bakkerb63b0af2011-01-13 17:54:59 +0000[diff] [blame^]128x509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl.pem":NULL:POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_NOT_TRUSTED:NULL
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]129
130X509 Certificate verification #10 (Not trusted Cert, Expired CRL)
Paul Bakkerb63b0af2011-01-13 17:54:59 +0000[diff] [blame^]131x509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl_expired.pem":NULL:POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_NOT_TRUSTED:NULL
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]132
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]133X509 Certificate verification #11 (Valid Cert MD2 Digest)
Paul Bakker46b80712009-10-03 20:01:39 +0000[diff] [blame]134depends_on:POLARSSL_MD2_C
Paul Bakkerb63b0af2011-01-13 17:54:59 +0000[diff] [blame^]135x509_verify:"data_files/cert_md2.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0:0:NULL
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]136
137X509 Certificate verification #12 (Valid Cert MD4 Digest)
Paul Bakker46b80712009-10-03 20:01:39 +0000[diff] [blame]138depends_on:POLARSSL_MD4_C
Paul Bakkerb63b0af2011-01-13 17:54:59 +0000[diff] [blame^]139x509_verify:"data_files/cert_md4.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0:0:NULL
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]140
141X509 Certificate verification #13 (Valid Cert MD5 Digest)
Paul Bakker46b80712009-10-03 20:01:39 +0000[diff] [blame]142depends_on:POLARSSL_MD5_C
Paul Bakkerb63b0af2011-01-13 17:54:59 +0000[diff] [blame^]143x509_verify:"data_files/cert_md5.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0:0:NULL
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]144
145X509 Certificate verification #14 (Valid Cert SHA1 Digest)
Paul Bakker46b80712009-10-03 20:01:39 +0000[diff] [blame]146depends_on:POLARSSL_SHA1_C
Paul Bakkerb63b0af2011-01-13 17:54:59 +0000[diff] [blame^]147x509_verify:"data_files/cert_sha1.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0:0:NULL
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]148
149X509 Certificate verification #15 (Valid Cert SHA224 Digest)
Paul Bakker46b80712009-10-03 20:01:39 +0000[diff] [blame]150depends_on:POLARSSL_SHA2_C
Paul Bakkerb63b0af2011-01-13 17:54:59 +0000[diff] [blame^]151x509_verify:"data_files/cert_sha224.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0:0:NULL
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]152
153X509 Certificate verification #16 (Valid Cert SHA256 Digest)
Paul Bakker46b80712009-10-03 20:01:39 +0000[diff] [blame]154depends_on:POLARSSL_SHA2_C
Paul Bakkerb63b0af2011-01-13 17:54:59 +0000[diff] [blame^]155x509_verify:"data_files/cert_sha256.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0:0:NULL
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]156
157X509 Certificate verification #17 (Valid Cert SHA384 Digest)
Paul Bakker46b80712009-10-03 20:01:39 +0000[diff] [blame]158depends_on:POLARSSL_SHA4_C
Paul Bakkerb63b0af2011-01-13 17:54:59 +0000[diff] [blame^]159x509_verify:"data_files/cert_sha384.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0:0:NULL
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]160
161X509 Certificate verification #18 (Valid Cert SHA512 Digest)
Paul Bakker46b80712009-10-03 20:01:39 +0000[diff] [blame]162depends_on:POLARSSL_SHA4_C
Paul Bakkerb63b0af2011-01-13 17:54:59 +0000[diff] [blame^]163x509_verify:"data_files/cert_sha512.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:0:0:NULL
164
165X509 Certificate verification #19 (Valid Cert, denying callback)
166depends_on:POLARSSL_SHA4_C
167x509_verify:"data_files/cert_sha512.crt":"data_files/test-ca.crt":"data_files/crl.pem":NULL:POLARSSL_ERR_X509_CERT_VERIFY_FAILED:0:&verify_none
168
169X509 Certificate verification #20 (Not trusted Cert, allowing callback)
170x509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl_expired.pem":NULL:POLARSSL_ERR_X509_CERT_VERIFY_FAILED:BADCERT_NOT_TRUSTED:&verify_all
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]171
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]172X509 Parse Selftest
Paul Bakker46b80712009-10-03 20:01:39 +0000[diff] [blame]173depends_on:POLARSSL_MD5_C
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]174x509_selftest:
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]175
176X509 Certificate ASN1 (Incorrect first tag)
177x509parse_crt:"":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT
178
179X509 Certificate ASN1 (Correct first tag, data length does not match)
180x509parse_crt:"300000":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT | POLARSSL_ERR_ASN1_LENGTH_MISMATCH
181
182X509 Certificate ASN1 (Correct first tag, no more data)
183x509parse_crt:"3000":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT | POLARSSL_ERR_ASN1_OUT_OF_DATA
184
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]185X509 Certificate ASN1 (Correct first tag, length data incomplete)
186x509parse_crt:"30023083":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT | POLARSSL_ERR_ASN1_INVALID_LENGTH
187
188X509 Certificate ASN1 (Correct first tag, length data incomplete)
189x509parse_crt:"30023081":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT | POLARSSL_ERR_ASN1_OUT_OF_DATA
190
191X509 Certificate ASN1 (Correct first tag, length data incomplete)
192x509parse_crt:"3003308200":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT | POLARSSL_ERR_ASN1_OUT_OF_DATA
193
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]194X509 Certificate ASN1 (Correct first tag, second tag no TBSCertificate)
195x509parse_crt:"300100":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT | POLARSSL_ERR_ASN1_UNEXPECTED_TAG
196
197X509 Certificate ASN1 (TBSCertificate, no version tag, serial missing)
198x509parse_crt:"3003300100":"":POLARSSL_ERR_X509_CERT_INVALID_SERIAL | POLARSSL_ERR_ASN1_UNEXPECTED_TAG
199
200X509 Certificate ASN1 (TBSCertificate, invalid version tag)
201x509parse_crt:"30053003a00101":"":POLARSSL_ERR_X509_CERT_INVALID_VERSION | POLARSSL_ERR_ASN1_UNEXPECTED_TAG
202
203X509 Certificate ASN1 (TBSCertificate, valid version tag, no length)
204x509parse_crt:"30053003a00102":"":POLARSSL_ERR_X509_CERT_INVALID_VERSION | POLARSSL_ERR_ASN1_OUT_OF_DATA
205
206X509 Certificate ASN1 (TBSCertificate, valid version tag, invalid length)
207x509parse_crt:"30163014a012021000000000000000000000000000000000":"":POLARSSL_ERR_X509_CERT_INVALID_VERSION | POLARSSL_ERR_ASN1_INVALID_LENGTH
208
209X509 Certificate ASN1 (TBSCertificate, valid version tag, no serial)
210x509parse_crt:"30073005a003020104":"":POLARSSL_ERR_X509_CERT_INVALID_SERIAL | POLARSSL_ERR_ASN1_OUT_OF_DATA
211
212X509 Certificate ASN1 (TBSCertificate, invalid length version tag)
213x509parse_crt:"30083006a00402010400":"":POLARSSL_ERR_X509_CERT_INVALID_VERSION | POLARSSL_ERR_ASN1_LENGTH_MISMATCH
214
215X509 Certificate ASN1 (TBSCertificate, incorrect serial tag)
216x509parse_crt:"30083006a00302010400":"":POLARSSL_ERR_X509_CERT_INVALID_SERIAL | POLARSSL_ERR_ASN1_UNEXPECTED_TAG
217
218X509 Certificate ASN1 (TBSCertificate, incorrect serial length)
219x509parse_crt:"30083006a00302010482":"":POLARSSL_ERR_X509_CERT_INVALID_SERIAL | POLARSSL_ERR_ASN1_OUT_OF_DATA
220
221X509 Certificate ASN1 (TBSCertificate, correct serial, no alg)
222x509parse_crt:"300d300ba0030201048204deadbeef":"":POLARSSL_ERR_X509_CERT_INVALID_ALG | POLARSSL_ERR_ASN1_OUT_OF_DATA
223
224X509 Certificate ASN1 (TBSCertificate, correct serial, no alg oid)
225x509parse_crt:"300e300ca0030201048204deadbeef00":"":POLARSSL_ERR_X509_CERT_INVALID_ALG | POLARSSL_ERR_ASN1_UNEXPECTED_TAG
226
Paul Bakker345fb492009-07-20 21:26:07 +0000[diff] [blame]227X509 Certificate ASN1 (TBSCertificate, alg oid no data in sequence)
228x509parse_crt:"300f300da0030201048204deadbeef3000":"":POLARSSL_ERR_X509_CERT_INVALID_ALG | POLARSSL_ERR_ASN1_OUT_OF_DATA
229
230X509 Certificate ASN1 (TBSCertificate, alg with params)
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]231x509parse_crt:"30163014a0030201048204deadbeef30070604cafed00d01":"":POLARSSL_ERR_X509_CERT_INVALID_ALG | POLARSSL_ERR_ASN1_UNEXPECTED_TAG
232
Paul Bakker345fb492009-07-20 21:26:07 +0000[diff] [blame]233X509 Certificate ASN1 (TBSCertificate, correct alg data, no params unknown version)
234x509parse_crt:"30153013a0030201048204deadbeef30060604cafed00d":"":POLARSSL_ERR_X509_CERT_UNKNOWN_VERSION
235
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]236X509 Certificate ASN1 (TBSCertificate, correct alg data, unknown version)
237x509parse_crt:"30173015a0030201048204deadbeef30080604cafed00d0500":"":POLARSSL_ERR_X509_CERT_UNKNOWN_VERSION
238
Paul Bakker345fb492009-07-20 21:26:07 +0000[diff] [blame]239X509 Certificate ASN1 (TBSCertificate, correct alg data, length mismatch)
240x509parse_crt:"30183016a0030201048204deadbeef30090604cafed00d050000":"":POLARSSL_ERR_X509_CERT_INVALID_ALG | POLARSSL_ERR_ASN1_LENGTH_MISMATCH
241
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]242X509 Certificate ASN1 (TBSCertificate, correct alg, unknown alg_id)
243x509parse_crt:"30173015a0030201028204deadbeef30080604cafed00d0500":"":POLARSSL_ERR_X509_CERT_UNKNOWN_SIG_ALG
244
245X509 Certificate ASN1 (TBSCertificate, correct alg, specific alg_id)
246x509parse_crt:"301c301aa0030201028204deadbeef300d06092a864886f70d0101020500":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT | POLARSSL_ERR_ASN1_OUT_OF_DATA
247
248X509 Certificate ASN1 (TBSCertificate, correct alg, unknown specific alg_id)
249x509parse_crt:"301c301aa0030201028204deadbeef300d06092a864886f70d0101010500":"":POLARSSL_ERR_X509_CERT_UNKNOWN_SIG_ALG
250
251X509 Certificate ASN1 (TBSCertificate, issuer no set data)
252x509parse_crt:"301e301ca0030201028204deadbeef300d06092a864886f70d01010205003000":"":POLARSSL_ERR_X509_CERT_INVALID_NAME | POLARSSL_ERR_ASN1_OUT_OF_DATA
253
254X509 Certificate ASN1 (TBSCertificate, issuer no inner seq data)
255x509parse_crt:"3020301ea0030201028204deadbeef300d06092a864886f70d010102050030023100":"":POLARSSL_ERR_X509_CERT_INVALID_NAME | POLARSSL_ERR_ASN1_OUT_OF_DATA
256
257X509 Certificate ASN1 (TBSCertificate, issuer no inner set data)
258x509parse_crt:"30223020a0030201028204deadbeef300d06092a864886f70d0101020500300431023000":"":POLARSSL_ERR_X509_CERT_INVALID_NAME | POLARSSL_ERR_ASN1_OUT_OF_DATA
259
260X509 Certificate ASN1 (TBSCertificate, issuer two inner set datas)
261x509parse_crt:"30243022a0030201028204deadbeef300d06092a864886f70d01010205003006310430003000":"":POLARSSL_ERR_X509_CERT_INVALID_NAME | POLARSSL_ERR_ASN1_LENGTH_MISMATCH
262
263X509 Certificate ASN1 (TBSCertificate, issuer no oid data)
264x509parse_crt:"30243022a0030201028204deadbeef300d06092a864886f70d01010205003006310430020600":"":POLARSSL_ERR_X509_CERT_INVALID_NAME | POLARSSL_ERR_ASN1_OUT_OF_DATA
265
266X509 Certificate ASN1 (TBSCertificate, issuer invalid tag)
267x509parse_crt:"302a3028a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600060454657374":"":POLARSSL_ERR_X509_CERT_INVALID_NAME | POLARSSL_ERR_ASN1_UNEXPECTED_TAG
268
Paul Bakker345fb492009-07-20 21:26:07 +0000[diff] [blame]269X509 Certificate ASN1 (TBSCertificate, issuer, no string data)
270x509parse_crt:"30253023a0030201028204deadbeef300d06092a864886f70d0101020500300731053003060013":"":POLARSSL_ERR_X509_CERT_INVALID_NAME | POLARSSL_ERR_ASN1_OUT_OF_DATA
271
272X509 Certificate ASN1 (TBSCertificate, issuer, too much data in string)
273x509parse_crt:"302b3029a0030201028204deadbeef300d06092a864886f70d0101020500300d310b3009060013045465737400":"":POLARSSL_ERR_X509_CERT_INVALID_NAME | POLARSSL_ERR_ASN1_LENGTH_MISMATCH
274
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]275X509 Certificate ASN1 (TBSCertificate, valid issuer, no validity)
276x509parse_crt:"302a3028a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374":"":POLARSSL_ERR_X509_CERT_INVALID_DATE | POLARSSL_ERR_ASN1_OUT_OF_DATA
277
278X509 Certificate ASN1 (TBSCertificate, too much date data)
279x509parse_crt:"30493047a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301d170c303930313031303030303030170c30393132333132333539353900":"":POLARSSL_ERR_X509_CERT_INVALID_DATE | POLARSSL_ERR_ASN1_LENGTH_MISMATCH
280
Paul Bakker345fb492009-07-20 21:26:07 +0000[diff] [blame]281X509 Certificate ASN1 (TBSCertificate, invalid from date)
282x509parse_crt:"30483046a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303000000000170c303931323331323300000000":"":POLARSSL_ERR_X509_CERT_INVALID_DATE
283
284X509 Certificate ASN1 (TBSCertificate, invalid to date)
285x509parse_crt:"30483046a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323300000000":"":POLARSSL_ERR_X509_CERT_INVALID_DATE
286
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]287X509 Certificate ASN1 (TBSCertificate, valid validity, no subject)
288x509parse_crt:"30493047a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT | POLARSSL_ERR_ASN1_OUT_OF_DATA
289
290X509 Certificate ASN1 (TBSCertificate, valid subject, no pubkeyinfo)
291x509parse_crt:"30563054a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT | POLARSSL_ERR_ASN1_OUT_OF_DATA
292
Paul Bakker345fb492009-07-20 21:26:07 +0000[diff] [blame]293X509 Certificate ASN1 (TBSCertificate, pubkey, no alg)
294x509parse_crt:"30583056a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743000":"":POLARSSL_ERR_X509_CERT_INVALID_ALG | POLARSSL_ERR_ASN1_OUT_OF_DATA
295
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]296X509 Certificate ASN1 (TBSCertificate, valid subject, unknown pk alg)
297x509parse_crt:"30673065a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374300f300d06092A864886F70D0101000500":"":POLARSSL_ERR_X509_CERT_UNKNOWN_PK_ALG
298
299X509 Certificate ASN1 (TBSCertificate, pubkey, no bitstring)
300x509parse_crt:"30673065a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374300f300d06092A864886F70D0101010500":"":POLARSSL_ERR_X509_CERT_INVALID_PUBKEY | POLARSSL_ERR_ASN1_OUT_OF_DATA
301
302X509 Certificate ASN1 (TBSCertificate, pubkey, no bitstring data)
303x509parse_crt:"30693067a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743011300d06092A864886F70D01010105000300":"":POLARSSL_ERR_X509_CERT_INVALID_PUBKEY | POLARSSL_ERR_ASN1_OUT_OF_DATA
304
305X509 Certificate ASN1 (TBSCertificate, pubkey, invalid bitstring start)
306x509parse_crt:"306a3068a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743012300d06092A864886F70D0101010500030101":"":POLARSSL_ERR_X509_CERT_INVALID_PUBKEY
307
308X509 Certificate ASN1 (TBSCertificate, pubkey, invalid internal bitstring length)
309x509parse_crt:"306d306ba0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743015300d06092A864886F70D0101010500030400300000":"":POLARSSL_ERR_X509_CERT_INVALID_PUBKEY | POLARSSL_ERR_ASN1_LENGTH_MISMATCH
310
Paul Bakker345fb492009-07-20 21:26:07 +0000[diff] [blame]311X509 Certificate ASN1 (TBSCertificate, pubkey, invalid internal bitstring tag)
312x509parse_crt:"306d306ba0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743015300d06092A864886F70D0101010500030400310000":"":POLARSSL_ERR_X509_CERT_INVALID_PUBKEY | POLARSSL_ERR_ASN1_UNEXPECTED_TAG
313
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]314X509 Certificate ASN1 (TBSCertificate, pubkey, invalid mpi)
315x509parse_crt:"30743072a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301c300d06092A864886F70D0101010500030b0030080202ffff0302ffff":"":POLARSSL_ERR_X509_CERT_INVALID_PUBKEY | POLARSSL_ERR_ASN1_UNEXPECTED_TAG
316
Paul Bakker345fb492009-07-20 21:26:07 +0000[diff] [blame]317X509 Certificate ASN1 (TBSCertificate, pubkey, total length mismatch)
318x509parse_crt:"30753073a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301d300d06092A864886F70D0101010500030b0030080202ffff0202ffff00":"":POLARSSL_ERR_X509_CERT_INVALID_PUBKEY | POLARSSL_ERR_ASN1_LENGTH_MISMATCH
319
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]320X509 Certificate ASN1 (TBSCertificate, pubkey, check failed)
321x509parse_crt:"30743072a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301c300d06092A864886F70D0101010500030b0030080202ffff0202ffff":"":POLARSSL_ERR_RSA_KEY_CHECK_FAILED
322
323X509 Certificate ASN1 (TBSCertificate, pubkey, check failed, expanded length notation)
324x509parse_crt:"308183308180a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210fffffffffffffffffffffffffffffffe0202ffff":"":POLARSSL_ERR_RSA_KEY_CHECK_FAILED
325
326X509 Certificate ASN1 (TBSCertificate v3, Optional UIDs, Extensions not present)
327x509parse_crt:"308183308180a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff":"":POLARSSL_ERR_X509_CERT_INVALID_ALG | POLARSSL_ERR_ASN1_OUT_OF_DATA
328
329X509 Certificate ASN1 (TBSCertificate v3, issuerID wrong tag)
330x509parse_crt:"308184308181a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff00":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT | POLARSSL_ERR_ASN1_LENGTH_MISMATCH
331
332X509 Certificate ASN1 (TBSCertificate v3, UIDs, no ext)
333x509parse_crt:"308189308186a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bb":"":POLARSSL_ERR_X509_CERT_INVALID_ALG | POLARSSL_ERR_ASN1_OUT_OF_DATA
334
Paul Bakker345fb492009-07-20 21:26:07 +0000[diff] [blame]335X509 Certificate ASN1 (TBSCertificate v3, UIDs, invalid length)
336x509parse_crt:"308189308186a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa183aaa201bb":"":POLARSSL_ERR_ASN1_INVALID_LENGTH
337
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]338X509 Certificate ASN1 (TBSCertificate v3, ext empty)
339x509parse_crt:"30818b308188a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba300":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS | POLARSSL_ERR_ASN1_OUT_OF_DATA
340
341X509 Certificate ASN1 (TBSCertificate v3, ext length mismatch)
342x509parse_crt:"30818e30818ba0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba303300000":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS | POLARSSL_ERR_ASN1_LENGTH_MISMATCH
343
344X509 Certificate ASN1 (TBSCertificate v3, first ext invalid)
345x509parse_crt:"30818f30818ca0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba30330023000":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS | POLARSSL_ERR_ASN1_OUT_OF_DATA
346
Paul Bakkere4ff4132009-07-27 20:22:10 +0000[diff] [blame]347X509 Certificate ASN1 (TBSCertificate v3, first ext invalid tag)
348x509parse_crt:"30819030818da0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba3043002310000":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS | POLARSSL_ERR_ASN1_UNEXPECTED_TAG
349
Paul Bakkerc6ce8382009-07-27 21:34:45 +0000[diff] [blame]350X509 Certificate ASN1 (TBSCertificate v3, ext BasicContraint tag, bool len missing)
351x509parse_crt:"308198308195a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba30c300a30060603551d1301010100":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS | POLARSSL_ERR_ASN1_OUT_OF_DATA
352
353X509 Certificate ASN1 (TBSCertificate v3, ext BasicContraint tag, data missing)
354x509parse_crt:"308198308195a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba30c300a30080603551d1301010100":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS | POLARSSL_ERR_ASN1_OUT_OF_DATA
355
356X509 Certificate ASN1 (TBSCertificate v3, ext BasicContraint tag, no octet present)
357x509parse_crt:"308198308195a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba30d300b30090603551d1301010100":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS | POLARSSL_ERR_ASN1_UNEXPECTED_TAG
Paul Bakkere4ff4132009-07-27 20:22:10 +0000[diff] [blame]358
359X509 Certificate ASN1 (TBSCertificate v3, ext BasicContraint tag, octet data missing)
360x509parse_crt:"30819c308199a0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba311300f300d0603551d130101010403300100":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS | POLARSSL_ERR_ASN1_UNEXPECTED_TAG
361
362X509 Certificate ASN1 (TBSCertificate v3, ext BasicContraint tag, no pathlen)
Paul Bakkerc6ce8382009-07-27 21:34:45 +0000[diff] [blame]363x509parse_crt:"30819f30819ca0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba314301230100603551d130101010406300402010102":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS | POLARSSL_ERR_ASN1_OUT_OF_DATA
Paul Bakkere4ff4132009-07-27 20:22:10 +0000[diff] [blame]364
365X509 Certificate ASN1 (TBSCertificate v3, ext BasicContraint tag, octet len mismatch)
366x509parse_crt:"3081a230819fa0030201028204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101aaa201bba317301530130603551d130101010409300702010102010100":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS | POLARSSL_ERR_ASN1_LENGTH_MISMATCH
367
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]368X509 Certificate ASN1 (correct pubkey, no sig_alg)
369x509parse_crt:"308183308180a0030201008204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff":"":POLARSSL_ERR_X509_CERT_INVALID_ALG | POLARSSL_ERR_ASN1_OUT_OF_DATA
370
371X509 Certificate ASN1 (sig_alg mismatch)
372x509parse_crt:"308192308180a0030201008204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0102020500":"":POLARSSL_ERR_X509_CERT_SIG_MISMATCH
373
374X509 Certificate ASN1 (sig_alg, no sig)
375x509parse_crt:"308192308180a0030201008204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500":"":POLARSSL_ERR_X509_CERT_INVALID_SIGNATURE | POLARSSL_ERR_ASN1_OUT_OF_DATA
376
377X509 Certificate ASN1 (signature, invalid sig data)
378x509parse_crt:"308195308180a0030201008204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030100":"":POLARSSL_ERR_X509_CERT_INVALID_SIGNATURE
379
380X509 Certificate ASN1 (signature, data left)
381x509parse_crt:"308197308180a0030201008204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff00":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT | POLARSSL_ERR_ASN1_LENGTH_MISMATCH
382
383X509 Certificate ASN1 (correct)
384x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA+MD2\nRSA key size \: 128 bits\n":0
385
Paul Bakker91200182010-02-18 21:26:15 +0000[diff] [blame]386X509 Certificate ASN1 (GeneralizedTime instead of UTCTime)
387x509parse_crt:"308198308182a0030201008204deadbeef300d06092a864886f70d0101020500300c310a30080600130454657374301e180e3230313030313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2010-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA+MD2\nRSA key size \: 128 bits\n":0
388
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]389X509 Certificate ASN1 (Name with X520 CN)
390x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d0101020500300f310d300b0603550403130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: CN=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA+MD2\nRSA key size \: 128 bits\n":0
391
392X509 Certificate ASN1 (Name with X520 C)
393x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d0101020500300f310d300b0603550406130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: C=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA+MD2\nRSA key size \: 128 bits\n":0
394
395X509 Certificate ASN1 (Name with X520 L)
396x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d0101020500300f310d300b0603550407130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: L=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA+MD2\nRSA key size \: 128 bits\n":0
397
398X509 Certificate ASN1 (Name with X520 ST)
399x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d0101020500300f310d300b0603550408130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ST=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA+MD2\nRSA key size \: 128 bits\n":0
400
401X509 Certificate ASN1 (Name with X520 O)
402x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d0101020500300f310d300b060355040a130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: O=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA+MD2\nRSA key size \: 128 bits\n":0
403
404X509 Certificate ASN1 (Name with X520 OU)
405x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d0101020500300f310d300b060355040b130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: OU=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA+MD2\nRSA key size \: 128 bits\n":0
406
407X509 Certificate ASN1 (Name with unknown X520 part)
408x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d0101020500300f310d300b06035504de130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: 0xDE=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA+MD2\nRSA key size \: 128 bits\n":0
409
410X509 Certificate ASN1 (Name with PKCS9 email)
411x509parse_crt:"30819f308189a0030201008204deadbeef300d06092a864886f70d010102050030153113301106092a864886f70d010901130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: emailAddress=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA+MD2\nRSA key size \: 128 bits\n":0
412
413X509 Certificate ASN1 (Name with unknown PKCS9 part)
414x509parse_crt:"30819f308189a0030201008204deadbeef300d06092a864886f70d010102050030153113301106092a864886f70d0109ab130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d0101020500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: 0xAB=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA+MD2\nRSA key size \: 128 bits\n":0
415
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]416X509 CRL ASN1 (Incorrect first tag)
417x509parse_crl:"":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT
418
419X509 CRL ASN1 (Correct first tag, data length does not match)
420x509parse_crl:"300000":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT | POLARSSL_ERR_ASN1_LENGTH_MISMATCH
421
422X509 CRL ASN1 (TBSCertList, tag missing)
423x509parse_crl:"3000":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT | POLARSSL_ERR_ASN1_OUT_OF_DATA
424
425X509 CRL ASN1 (TBSCertList, version tag len missing)
426x509parse_crl:"30033001a0":"":POLARSSL_ERR_ASN1_OUT_OF_DATA
427
428X509 CRL ASN1 (TBSCertList, version correct, alg missing)
429x509parse_crl:"30073005a003020100":"":POLARSSL_ERR_X509_CERT_INVALID_ALG | POLARSSL_ERR_ASN1_OUT_OF_DATA
430
431X509 CRL ASN1 (TBSCertList, alg correct, incorrect version)
432x509parse_crl:"300d300ba003020102300406000500":"":POLARSSL_ERR_X509_CERT_UNKNOWN_VERSION
433
434X509 CRL ASN1 (TBSCertList, correct version, sig_oid1 unknown)
435x509parse_crl:"300d300ba003020100300406000500":"":POLARSSL_ERR_X509_CERT_UNKNOWN_SIG_ALG
436
437X509 CRL ASN1 (TBSCertList, sig_oid1 id unknown)
438x509parse_crl:"30163014a003020100300d06092a864886f70d01010f0500":"":POLARSSL_ERR_X509_CERT_UNKNOWN_SIG_ALG
439
440X509 CRL ASN1 (TBSCertList, sig_oid1 correct, issuer missing)
441x509parse_crl:"30163014a003020100300d06092a864886f70d01010e0500":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT | POLARSSL_ERR_ASN1_OUT_OF_DATA
442
443X509 CRL ASN1 (TBSCertList, issuer set missing)
444x509parse_crl:"30183016a003020100300d06092a864886f70d01010e05003000":"":POLARSSL_ERR_X509_CERT_INVALID_NAME | POLARSSL_ERR_ASN1_OUT_OF_DATA
445
446X509 CRL ASN1 (TBSCertList, correct issuer, thisUpdate missing)
447x509parse_crl:"30273025a003020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344":"":POLARSSL_ERR_X509_CERT_INVALID_DATE | POLARSSL_ERR_ASN1_OUT_OF_DATA
448
449X509 CRL ASN1 (TBSCertList, correct thisUpdate, nextUpdate missing, entries length missing)
450x509parse_crl:"30363034a003020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c30393031303130303030303030":"":POLARSSL_ERR_ASN1_OUT_OF_DATA
451
Paul Bakkere4ff4132009-07-27 20:22:10 +0000[diff] [blame]452X509 CRL ASN1 (TBSCertList v2, entries present, invalid extension length)
453x509parse_crl:"304c304aa003020101300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539a3":"":POLARSSL_ERR_ASN1_OUT_OF_DATA
454
455X509 CRL ASN1 (TBSCertList v2, entries present, invalid inner extension length)
456x509parse_crl:"3050304ea003020101300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539a303300130":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS | POLARSSL_ERR_ASN1_OUT_OF_DATA
457
458X509 CRL ASN1 (TBSCertList v2, entries present, correct inner extension)
459x509parse_crl:"3051304fa003020101300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539a30430023000":"":POLARSSL_ERR_X509_CERT_INVALID_ALG | POLARSSL_ERR_ASN1_OUT_OF_DATA
460
461X509 CRL ASN1 (TBSCertList v2, entries present, incorrect outer extension length)
462x509parse_crl:"30523050a003020101300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539a3053002300000":"":POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS | POLARSSL_ERR_ASN1_LENGTH_MISMATCH
463
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]464X509 CRL ASN1 (TBSCertList, entries present, invalid sig_alg)
465x509parse_crl:"304c3049a003020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c30383132333132333539353900":"":POLARSSL_ERR_X509_CERT_INVALID_ALG | POLARSSL_ERR_ASN1_UNEXPECTED_TAG
466
467X509 CRL ASN1 (TBSCertList, entries present, date in entry invalid)
Paul Bakker91200182010-02-18 21:26:15 +0000[diff] [blame]468x509parse_crl:"304c3049a003020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd190c30383132333132333539353900":"":POLARSSL_ERR_X509_CERT_INVALID_DATE | POLARSSL_ERR_ASN1_UNEXPECTED_TAG
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]469
470X509 CRL ASN1 (TBSCertList, sig_alg present, sig_alg does not match)
471x509parse_crl:"305a3049a003020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010d0500":"":POLARSSL_ERR_X509_CERT_SIG_MISMATCH
472
Paul Bakkere4ff4132009-07-27 20:22:10 +0000[diff] [blame]473X509 CRL ASN1 (TBSCertList, sig present, len mismatch)
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]474x509parse_crl:"305f3049a003020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010e05000302000100":"":POLARSSL_ERR_X509_CERT_INVALID_FORMAT | POLARSSL_ERR_ASN1_LENGTH_MISMATCH
475
476X509 CRL ASN1 (TBSCertList, sig present)
477x509parse_crl:"305e3049a003020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010e050003020001":"CRL version \: 1\nissuer name \: CN=ABCD\nthis update \: 2009-01-01 00\:00\:00\nnext update \: 0000-00-00 00\:00\:00\nRevoked certificates\:\nserial number\: AB\:CD revocation date\: 2008-12-31 23\:59\:59\nsigned using \: RSA+SHA224\n":0
478
Paul Bakkere4ff4132009-07-27 20:22:10 +0000[diff] [blame]479X509 CRL ASN1 (TBSCertList, no entries)
480x509parse_crl:"30483033a003020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300d06092a864886f70d01010e050003020001":"CRL version \: 1\nissuer name \: CN=ABCD\nthis update \: 2009-01-01 00\:00\:00\nnext update \: 0000-00-00 00\:00\:00\nRevoked certificates\:\nsigned using \: RSA+SHA224\n":0
481
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]482X509 Key ASN1 (Incorrect first tag)
483x509parse_key:"":"":POLARSSL_ERR_X509_KEY_INVALID_FORMAT | POLARSSL_ERR_ASN1_OUT_OF_DATA
484
485X509 Key ASN1 (RSAPrivateKey, incorrect version tag)
486x509parse_key:"300100":"":POLARSSL_ERR_X509_KEY_INVALID_FORMAT | POLARSSL_ERR_ASN1_UNEXPECTED_TAG
487
488X509 Key ASN1 (RSAPrivateKey, version tag missing)
489x509parse_key:"3000":"":POLARSSL_ERR_X509_KEY_INVALID_FORMAT | POLARSSL_ERR_ASN1_OUT_OF_DATA
490
491X509 Key ASN1 (RSAPrivateKey, invalid version)
492x509parse_key:"3003020101":"":POLARSSL_ERR_X509_KEY_INVALID_VERSION
493
494X509 Key ASN1 (RSAPrivateKey, correct version, incorrect tag)
495x509parse_key:"300402010000":"":POLARSSL_ERR_X509_KEY_INVALID_FORMAT | POLARSSL_ERR_ASN1_UNEXPECTED_TAG
496
497X509 Key ASN1 (RSAPrivateKey, values present, length mismatch)
498x509parse_key:"301c02010002010102010102010102010102010102010102010102010100":"":POLARSSL_ERR_X509_KEY_INVALID_FORMAT | POLARSSL_ERR_ASN1_LENGTH_MISMATCH
499
500X509 Key ASN1 (RSAPrivateKey, values present, check_privkey fails)
501x509parse_key:"301b020100020101020101020101020101020101020101020101020101":"":POLARSSL_ERR_RSA_KEY_CHECK_FAILED