blob: f78e39198210355a80b476ee3765072d668f93f6 [file] [log] [blame]
Gilles Peskinefd14bca2017-05-11 17:57:22 +02001## This file contains a record of how some of the test data was
2## generated. The final build products are committed to the repository
3## as well to make sure that the test data is identical. You do not
4## need to use this makefile unless you're extending mbed TLS's tests.
Gilles Peskinef040a172017-05-05 18:56:12 +02005
Gilles Peskinefd14bca2017-05-11 17:57:22 +02006## Many data files were generated prior to the existence of this
7## makefile, so the method of their generation was not recorded.
Gilles Peskinef040a172017-05-05 18:56:12 +02008
Gilles Peskinefd14bca2017-05-11 17:57:22 +02009## Note that in addition to depending on the version of the data
10## generation tool, many of the build outputs are randomized, so
11## running this makefile twice would not produce the same results.
12
13## Tools
14OPENSSL ?= openssl
Manuel Pégourié-Gonnard29d60fb2017-06-05 10:20:32 +020015FAKETIME ?= faketime
Gilles Peskined1ff7572020-08-21 19:47:22 +020016
Gilles Peskine18035632020-09-24 16:36:04 +020017TOP_DIR = ../..
Gilles Peskined1ff7572020-08-21 19:47:22 +020018MBEDTLS_CERT_WRITE ?= $(TOP_DIR)/programs/x509/cert_write
19MBEDTLS_CERT_REQ ?= $(TOP_DIR)/programs/x509/cert_req
Hanno Becker50cb93a2018-10-08 17:15:28 +010020
Gilles Peskinefd14bca2017-05-11 17:57:22 +020021
22## Build the generated test data. Note that since the final outputs
23## are committed to the repository, this target should do nothing on a
24## fresh checkout. Furthermore, since the generation is randomized,
25## re-running the same targets may result in differing files. The goal
26## of this makefile is primarily to serve as a record of how the
27## targets were generated in the first place.
Gilles Peskinef040a172017-05-05 18:56:12 +020028default: all_final
29
30all_intermediate := # temporary files
31all_final := # files used by tests
32
Gilles Peskinefd14bca2017-05-11 17:57:22 +020033
34
35################################################################
36#### Generate certificates from existing keys
37################################################################
38
Hanno Becker418a6222017-09-14 07:51:28 +010039test_ca_crt = test-ca.crt
Gilles Peskinefd14bca2017-05-11 17:57:22 +020040test_ca_key_file_rsa = test-ca.key
41test_ca_pwd_rsa = PolarSSLTest
42test_ca_config_file = test-ca.opensslconf
43
Andrzej Kurek00d55982023-05-22 09:37:55 -040044$(test_ca_key_file_rsa):
45 $(OPENSSL) genrsa -aes-128-cbc -passout pass:$(test_ca_pwd_rsa) -out $@ 2048
Mukesh Bharsakleb17f6a22023-04-12 00:05:45 +010046all_final += $(test_ca_key_file_rsa)
47
Hanno Beckerb8377752018-10-31 15:29:19 +000048test-ca.req.sha256: $(test_ca_key_file_rsa)
49 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$(test_ca_key_file_rsa) password=$(test_ca_pwd_rsa) subject_name="C=NL,O=PolarSSL,CN=PolarSSL Test CA" md=SHA256
50all_intermediate += test-ca.req.sha256
51
Jerry Yu54e86322023-06-27 16:40:00 +080052parse_input/test-ca.crt test-ca.crt: $(test_ca_key_file_rsa) test-ca.req.sha256
Ron Eldor9eeb8612019-02-12 15:03:42 +020053 $(MBEDTLS_CERT_WRITE) is_ca=1 serial=3 request_file=test-ca.req.sha256 selfsign=1 issuer_name="C=NL,O=PolarSSL,CN=PolarSSL Test CA" issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144400 not_after=20290210144400 md=SHA1 version=3 output_file=$@
Hanno Beckere21387e2019-03-12 16:49:26 +000054all_final += test-ca.crt
55
Jerry Yu92d1ec62023-06-27 16:53:25 +080056parse_input/test-ca.crt.der: test-ca.crt
Hanno Becker462c3e52019-01-31 10:55:42 +000057 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
Hanno Beckere21387e2019-03-12 16:49:26 +000058
59test-ca.key.der: $(test_ca_key_file_rsa)
60 $(OPENSSL) pkey -in $< -out $@ -inform PEM -outform DER -passin "pass:$(test_ca_pwd_rsa)"
61all_final += test-ca.key.der
Hanno Beckerb8377752018-10-31 15:29:19 +000062
63test-ca-sha1.crt: $(test_ca_key_file_rsa) test-ca.req.sha256
Ron Eldor9eeb8612019-02-12 15:03:42 +020064 $(MBEDTLS_CERT_WRITE) is_ca=1 serial=3 request_file=test-ca.req.sha256 selfsign=1 issuer_name="C=NL,O=PolarSSL,CN=PolarSSL Test CA" issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144400 not_after=20290210144400 md=SHA1 version=3 output_file=$@
Gilles Peskinef040a172017-05-05 18:56:12 +020065all_final += test-ca-sha1.crt
Hanno Beckerb8377752018-10-31 15:29:19 +000066
Hanno Beckere21387e2019-03-12 16:49:26 +000067test-ca-sha1.crt.der: test-ca-sha1.crt
68 $(OPENSSL) x509 -in $< -out $@ -inform PEM -outform DER
69all_final += test-ca-sha1.crt.der
70
Hanno Beckerb8377752018-10-31 15:29:19 +000071test-ca-sha256.crt: $(test_ca_key_file_rsa) test-ca.req.sha256
Ron Eldor9eeb8612019-02-12 15:03:42 +020072 $(MBEDTLS_CERT_WRITE) is_ca=1 serial=3 request_file=test-ca.req.sha256 selfsign=1 issuer_name="C=NL,O=PolarSSL,CN=PolarSSL Test CA" issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144400 not_after=20290210144400 md=SHA256 version=3 output_file=$@
Gilles Peskinef040a172017-05-05 18:56:12 +020073all_final += test-ca-sha256.crt
74
Hanno Beckere21387e2019-03-12 16:49:26 +000075test-ca-sha256.crt.der: test-ca-sha256.crt
76 $(OPENSSL) x509 -in $< -out $@ -inform PEM -outform DER
77all_final += test-ca-sha256.crt.der
78
Ron Eldor9eeb8612019-02-12 15:03:42 +020079test-ca_utf8.crt: $(test_ca_key_file_rsa)
80 $(OPENSSL) req -x509 -new -nodes -key $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 3 -config $(test_ca_config_file) -sha1 -days 3653 -utf8 -subj "/C=NL/O=PolarSSL/CN=PolarSSL Test CA" -out $@
81all_final += test-ca_utf8.crt
82
83test-ca_printable.crt: $(test_ca_key_file_rsa)
84 $(OPENSSL) req -x509 -new -nodes -key $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 3 -config $(test_ca_config_file) -sha1 -days 3653 -subj "/C=NL/O=PolarSSL/CN=PolarSSL Test CA" -out $@
85all_final += test-ca_printable.crt
86
87test-ca_uppercase.crt: $(test_ca_key_file_rsa)
88 $(OPENSSL) req -x509 -new -nodes -key $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 3 -config $(test_ca_config_file) -sha1 -days 3653 -subj "/C=NL/O=PolarSSL/CN=PolarSSL Test CA" -out $@
89all_final += test-ca_uppercase.crt
90
Manuel Pégourié-Gonnard2d825d42017-07-03 18:06:38 +020091test_ca_key_file_rsa_alt = test-ca-alt.key
92
Ron Eldor9eeb8612019-02-12 15:03:42 +020093cert_example_multi.csr: rsa_pkcs1_1024_clear.pem
94 $(OPENSSL) req -new -subj "/C=NL/O=PolarSSL/CN=www.example.com" -set_serial 17 -config $(test_ca_config_file) -extensions dns_alt_names -days 3650 -key rsa_pkcs1_1024_clear.pem -out $@
95
Jerry Yu54e86322023-06-27 16:40:00 +080096parse_input/cert_example_multi.crt cert_example_multi.crt: cert_example_multi.csr
Ron Eldor9eeb8612019-02-12 15:03:42 +020097 $(OPENSSL) x509 -req -CA $(test_ca_crt) -CAkey $(test_ca_key_file_rsa) -extfile $(test_ca_config_file) -extensions dns_alt_names -passin "pass:$(test_ca_pwd_rsa)" -set_serial 17 -days 3653 -sha256 -in $< > $@
98
Jerry Yu92d1ec62023-06-27 16:53:25 +080099parse_input/test_csr_v3_keyUsage.csr.der: rsa_pkcs1_1024_clear.pem
Przemek Stekiel16096852023-01-24 09:24:19 +0100100 $(OPENSSL) req -new -subj '/CN=etcd' -config $(test_ca_config_file) -key rsa_pkcs1_1024_clear.pem -outform DER -out $@ -reqexts csr_ext_v3_keyUsage
Jerry Yu92d1ec62023-06-27 16:53:25 +0800101parse_input/test_csr_v3_subjectAltName.csr.der: rsa_pkcs1_1024_clear.pem
Przemek Stekiel16096852023-01-24 09:24:19 +0100102 $(OPENSSL) req -new -subj '/CN=etcd' -config $(test_ca_config_file) -key rsa_pkcs1_1024_clear.pem -outform DER -out $@ -reqexts csr_ext_v3_subjectAltName
Jerry Yu92d1ec62023-06-27 16:53:25 +0800103parse_input/test_csr_v3_nsCertType.csr.der: rsa_pkcs1_1024_clear.pem
Przemek Stekiel16096852023-01-24 09:24:19 +0100104 $(OPENSSL) req -new -subj '/CN=etcd' -config $(test_ca_config_file) -key rsa_pkcs1_1024_clear.pem -outform DER -out $@ -reqexts csr_ext_v3_nsCertType
Jerry Yu92d1ec62023-06-27 16:53:25 +0800105parse_input/test_csr_v3_all.csr.der: rsa_pkcs1_1024_clear.pem
Przemek Stekiel16096852023-01-24 09:24:19 +0100106 $(OPENSSL) req -new -subj '/CN=etcd' -config $(test_ca_config_file) -key rsa_pkcs1_1024_clear.pem -outform DER -out $@ -reqexts csr_ext_v3_all
Jerry Yu7d2a54c2023-06-27 16:57:36 +0800107parse_input/test_csr_v3_all_malformed_extensions_sequence_tag.csr.der: parse_input/test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100108 (hexdump -ve '1/1 "%.2X"' $< | sed "s/300B0603551D0F040403/200B0603551D0F040403/" | xxd -r -p ) > $@
Jerry Yu7d2a54c2023-06-27 16:57:36 +0800109parse_input/test_csr_v3_all_malformed_extension_id_tag.csr.der: parse_input/test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100110 (hexdump -ve '1/1 "%.2X"' $< | sed "s/0603551D0F0404030201/0703551D0F0404030201/" | xxd -r -p ) > $@
Jerry Yu7d2a54c2023-06-27 16:57:36 +0800111parse_input/test_csr_v3_all_malformed_extension_data_tag.csr.der: parse_input/test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100112 (hexdump -ve '1/1 "%.2X"' $< | sed "s/040403020102302F0603/050403020102302F0603/" | xxd -r -p ) > $@
Jerry Yu7d2a54c2023-06-27 16:57:36 +0800113parse_input/test_csr_v3_all_malformed_extension_data_len1.csr.der: parse_input/test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100114 (hexdump -ve '1/1 "%.2X"' $< | sed "s/040403020102302F0603/040503020102302F0603/" | xxd -r -p ) > $@
Jerry Yu7d2a54c2023-06-27 16:57:36 +0800115parse_input/test_csr_v3_all_malformed_extension_data_len2.csr.der: parse_input/test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100116 (hexdump -ve '1/1 "%.2X"' $< | sed "s/040403020102302F0603/040303020102302F0603/" | xxd -r -p ) > $@
Jerry Yu7d2a54c2023-06-27 16:57:36 +0800117parse_input/test_csr_v3_all_malformed_extension_key_usage_bitstream_tag.csr.der: parse_input/test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100118 (hexdump -ve '1/1 "%.2X"' $< | sed "s/03020102302F0603551D/04020102302F0603551D/" | xxd -r -p ) > $@
Jerry Yu7d2a54c2023-06-27 16:57:36 +0800119parse_input/test_csr_v3_all_malformed_extension_subject_alt_name_sequence_tag.csr.der: parse_input/test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100120 (hexdump -ve '1/1 "%.2X"' $< | sed "s/3026A02406082B060105/4026A02406082B060105/" | xxd -r -p ) > $@
Jerry Yu7d2a54c2023-06-27 16:57:36 +0800121parse_input/test_csr_v3_all_malformed_extension_ns_cert_bitstream_tag.csr.der: parse_input/test_csr_v3_all.csr.der
Przemek Stekield7992df2023-01-25 16:19:50 +0100122 (hexdump -ve '1/1 "%.2X"' $< | sed "s/03020780300D06092A86/04020780300D06092A86/" | xxd -r -p ) > $@
Jerry Yu7d2a54c2023-06-27 16:57:36 +0800123parse_input/test_csr_v3_all_malformed_duplicated_extension.csr.der: parse_input/test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100124 (hexdump -ve '1/1 "%.2X"' $< | sed "s/551D11/551D0F/" | xxd -r -p ) > $@
Jerry Yu7d2a54c2023-06-27 16:57:36 +0800125parse_input/test_csr_v3_all_malformed_extension_type_oid.csr.der: parse_input/test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100126 (hexdump -ve '1/1 "%.2X"' $< | sed "s/551D11/551DFF/" | xxd -r -p ) > $@
Jerry Yu7d2a54c2023-06-27 16:57:36 +0800127parse_input/test_csr_v3_all_malformed_attributes_sequence_tag.csr.der: parse_input/test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100128 (hexdump -ve '1/1 "%.2X"' $< | sed "s/306006092A864886F70D/406006092A864886F70D/" | xxd -r -p ) > $@
Jerry Yu7d2a54c2023-06-27 16:57:36 +0800129parse_input/test_csr_v3_all_malformed_attributes_id_tag.csr.der: parse_input/test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100130 (hexdump -ve '1/1 "%.2X"' $< | sed "s/06092A864886F70D0109/07092A864886F70D0109/" | xxd -r -p ) > $@
Jerry Yu7d2a54c2023-06-27 16:57:36 +0800131parse_input/test_csr_v3_all_malformed_attributes_extension_request.csr.der: parse_input/test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100132 (hexdump -ve '1/1 "%.2X"' $< | sed "s/2A864886F70D01090E/2A864886F70D01090F/" | xxd -r -p ) > $@
Jerry Yu7d2a54c2023-06-27 16:57:36 +0800133parse_input/test_csr_v3_all_malformed_attributes_extension_request_set_tag.csr.der: parse_input/test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100134 (hexdump -ve '1/1 "%.2X"' $< | sed "s/31533051300B0603551D/32533051300B0603551D/" | xxd -r -p ) > $@
Jerry Yu7d2a54c2023-06-27 16:57:36 +0800135parse_input/test_csr_v3_all_malformed_attributes_extension_request_sequence_tag.csr.der: parse_input/test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100136 (hexdump -ve '1/1 "%.2X"' $< | sed "s/3051300B0603551D0F04/3151300B0603551D0F04/" | xxd -r -p ) > $@
Jerry Yu7d2a54c2023-06-27 16:57:36 +0800137parse_input/test_csr_v3_all_malformed_attributes_len1.csr.der: parse_input/test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100138 (hexdump -ve '1/1 "%.2X"' $< | sed "s/306006092A864886F70D/306106092A864886F70D/" | xxd -r -p ) > $@
Jerry Yu7d2a54c2023-06-27 16:57:36 +0800139parse_input/test_csr_v3_all_malformed_attributes_len2.csr.der: parse_input/test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100140 (hexdump -ve '1/1 "%.2X"' $< | sed "s/306006092A864886F70D/305906092A864886F70D/" | xxd -r -p ) > $@
Jerry Yu7d2a54c2023-06-27 16:57:36 +0800141parse_input/test_csr_v3_all_malformed_attributes_extension_request_sequence_len1.csr.der: parse_input/test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100142 (hexdump -ve '1/1 "%.2X"' $< | sed "s/3051300B0603551D0F04/3052300B0603551D0F04/" | xxd -r -p ) > $@
Jerry Yu7d2a54c2023-06-27 16:57:36 +0800143parse_input/test_csr_v3_all_malformed_attributes_extension_request_sequence_len2.csr.der: parse_input/test_csr_v3_all.csr.der
Przemek Stekiel16096852023-01-24 09:24:19 +0100144 (hexdump -ve '1/1 "%.2X"' $< | sed "s/3051300B0603551D0F04/3050300B0603551D0F04/" | xxd -r -p ) > $@
Przemek Stekiele7fbbb32023-01-12 15:30:45 +0100145
Jerry Yu92d1ec62023-06-27 16:53:25 +0800146parse_input/test_cert_rfc822name.crt.der: cert_example_multi.csr
Przemek Stekiel608e3ef2023-02-09 14:47:50 +0100147 $(OPENSSL) x509 -req -CA $(test_ca_crt) -CAkey $(test_ca_key_file_rsa) -extfile $(test_ca_config_file) -outform DER -extensions rfc822name_names -passin "pass:$(test_ca_pwd_rsa)" -set_serial 17 -days 3653 -sha256 -in $< > $@
148
Ron Eldor9eeb8612019-02-12 15:03:42 +0200149$(test_ca_key_file_rsa_alt):test-ca.opensslconf
Manuel Pégourié-Gonnard2d825d42017-07-03 18:06:38 +0200150 $(OPENSSL) genrsa -out $@ 2048
151test-ca-alt.csr: $(test_ca_key_file_rsa_alt) $(test_ca_config_file)
152 $(OPENSSL) req -new -config $(test_ca_config_file) -key $(test_ca_key_file_rsa_alt) -subj "/C=NL/O=PolarSSL/CN=PolarSSL Test CA" -out $@
153all_intermediate += test-ca-alt.csr
154test-ca-alt.crt: $(test_ca_key_file_rsa_alt) $(test_ca_config_file) test-ca-alt.csr
155 $(OPENSSL) req -x509 -config $(test_ca_config_file) -key $(test_ca_key_file_rsa_alt) -set_serial 0 -days 3653 -sha256 -in test-ca-alt.csr -out $@
156all_final += test-ca-alt.crt
157test-ca-alt-good.crt: test-ca-alt.crt test-ca-sha256.crt
158 cat test-ca-alt.crt test-ca-sha256.crt > $@
159all_final += test-ca-alt-good.crt
160test-ca-good-alt.crt: test-ca-alt.crt test-ca-sha256.crt
161 cat test-ca-sha256.crt test-ca-alt.crt > $@
162all_final += test-ca-good-alt.crt
163
Manuel Pégourié-Gonnardbc313012017-06-27 12:51:52 +0200164test_ca_crt_file_ec = test-ca2.crt
165test_ca_key_file_ec = test-ca2.key
166
Ron Eldor9eeb8612019-02-12 15:03:42 +0200167test-ca2.req.sha256: $(test_ca_key_file_ec)
168 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$(test_ca_key_file_ec) subject_name="C=NL,O=PolarSSL,CN=Polarssl Test EC CA" md=SHA256
169all_intermediate += test-ca2.req.sha256
170
171test-ca2.crt: $(test_ca_key_file_ec) test-ca2.req.sha256
172 $(MBEDTLS_CERT_WRITE) is_ca=1 serial=13926223505202072808 request_file=test-ca2.req.sha256 selfsign=1 issuer_name="C=NL,O=PolarSSL,CN=Polarssl Test EC CA" issuer_key=$(test_ca_key_file_ec) not_before=20190210144400 not_after=20290210144400 md=SHA256 version=3 output_file=$@
Pengyu Lv467deef2023-05-12 12:04:50 +0800173all_final += test-ca2.crt
174
175test-ca2-future.crt: $(test_ca_key_file_ec) test-ca2.req.sha256
Pengyu Lvc7995a82023-06-02 13:23:39 +0800176 $(MBEDTLS_CERT_WRITE) is_ca=1 serial=13926223505202072808 request_file=test-ca2.req.sha256 selfsign=1 \
177 issuer_name="C=NL,O=PolarSSL,CN=Polarssl Test EC CA" issuer_key=$(test_ca_key_file_ec) \
178 not_before=20290210144400 not_after=20390210144400 md=SHA256 version=3 output_file=$@
Pengyu Lv467deef2023-05-12 12:04:50 +0800179all_intermediate += test-ca2-future.crt
180
181test_ca_ec_cat := # files that concatenate different crt
182test-ca2_cat-future-invalid.crt: test-ca2-future.crt server6.crt
183test_ca_ec_cat += test-ca2_cat-future-invalid.crt
184test-ca2_cat-future-present.crt: test-ca2-future.crt test-ca2.crt
185test_ca_ec_cat += test-ca2_cat-future-present.crt
186test-ca2_cat-present-future.crt: test-ca2.crt test-ca2-future.crt
187test_ca_ec_cat += test-ca2_cat-present-future.crt
188test-ca2_cat-present-past.crt: test-ca2.crt test-ca2-expired.crt
189test_ca_ec_cat += test-ca2_cat-present-past.crt
190test-ca2_cat-past-invalid.crt: test-ca2-expired.crt server6.crt
191test_ca_ec_cat += test-ca2_cat-past-invalid.crt
192test-ca2_cat-past-present.crt: test-ca2-expired.crt test-ca2.crt
193test_ca_ec_cat += test-ca2_cat-past-present.crt
194$(test_ca_ec_cat):
195 cat $^ > $@
196all_final += $(test_ca_ec_cat)
Ron Eldor9eeb8612019-02-12 15:03:42 +0200197
Jerry Yu92d1ec62023-06-27 16:53:25 +0800198parse_input/test-ca-any_policy.crt: $(test_ca_key_file_rsa) test-ca.req.sha256
Ron Eldor74d9acc2019-03-21 14:00:03 +0200199 $(OPENSSL) req -x509 -config $(test_ca_config_file) -extensions v3_any_policy_ca -key $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 0 -days 3653 -sha256 -in test-ca.req.sha256 -out $@
Ron Eldor74d9acc2019-03-21 14:00:03 +0200200
Jerry Yu92d1ec62023-06-27 16:53:25 +0800201parse_input/test-ca-any_policy_ec.crt: $(test_ca_key_file_ec) test-ca.req_ec.sha256
Ron Eldor74d9acc2019-03-21 14:00:03 +0200202 $(OPENSSL) req -x509 -config $(test_ca_config_file) -extensions v3_any_policy_ca -key $(test_ca_key_file_ec) -set_serial 0 -days 3653 -sha256 -in test-ca.req_ec.sha256 -out $@
Ron Eldor74d9acc2019-03-21 14:00:03 +0200203
Jerry Yu92d1ec62023-06-27 16:53:25 +0800204parse_input/test-ca-any_policy_with_qualifier.crt: $(test_ca_key_file_rsa) test-ca.req.sha256
Ron Eldor74d9acc2019-03-21 14:00:03 +0200205 $(OPENSSL) req -x509 -config $(test_ca_config_file) -extensions v3_any_policy_qualifier_ca -key $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 0 -days 3653 -sha256 -in test-ca.req.sha256 -out $@
Ron Eldor74d9acc2019-03-21 14:00:03 +0200206
Jerry Yu92d1ec62023-06-27 16:53:25 +0800207parse_input/test-ca-any_policy_with_qualifier_ec.crt: $(test_ca_key_file_ec) test-ca.req_ec.sha256
Ron Eldor74d9acc2019-03-21 14:00:03 +0200208 $(OPENSSL) req -x509 -config $(test_ca_config_file) -extensions v3_any_policy_qualifier_ca -key $(test_ca_key_file_ec) -set_serial 0 -days 3653 -sha256 -in test-ca.req_ec.sha256 -out $@
Ron Eldor74d9acc2019-03-21 14:00:03 +0200209
Jerry Yu92d1ec62023-06-27 16:53:25 +0800210parse_input/test-ca-multi_policy.crt: $(test_ca_key_file_rsa) test-ca.req.sha256
Ron Eldor74d9acc2019-03-21 14:00:03 +0200211 $(OPENSSL) req -x509 -config $(test_ca_config_file) -extensions v3_multi_policy_ca -key $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 0 -days 3653 -sha256 -in test-ca.req.sha256 -out $@
Ron Eldor74d9acc2019-03-21 14:00:03 +0200212
Jerry Yu92d1ec62023-06-27 16:53:25 +0800213parse_input/test-ca-multi_policy_ec.crt: $(test_ca_key_file_ec) test-ca.req_ec.sha256
Ron Eldor74d9acc2019-03-21 14:00:03 +0200214 $(OPENSSL) req -x509 -config $(test_ca_config_file) -extensions v3_multi_policy_ca -key $(test_ca_key_file_ec) -set_serial 0 -days 3653 -sha256 -in test-ca.req_ec.sha256 -out $@
Ron Eldor74d9acc2019-03-21 14:00:03 +0200215
Jerry Yu92d1ec62023-06-27 16:53:25 +0800216parse_input/test-ca-unsupported_policy.crt: $(test_ca_key_file_rsa) test-ca.req.sha256
Ron Eldor74d9acc2019-03-21 14:00:03 +0200217 $(OPENSSL) req -x509 -config $(test_ca_config_file) -extensions v3_unsupported_policy_ca -key $(test_ca_key_file_rsa) -passin "pass:$(test_ca_pwd_rsa)" -set_serial 0 -days 3653 -sha256 -in test-ca.req.sha256 -out $@
Ron Eldor74d9acc2019-03-21 14:00:03 +0200218
Jerry Yu92d1ec62023-06-27 16:53:25 +0800219parse_input/test-ca-unsupported_policy_ec.crt: $(test_ca_key_file_ec) test-ca.req_ec.sha256
Ron Eldor74d9acc2019-03-21 14:00:03 +0200220 $(OPENSSL) req -x509 -config $(test_ca_config_file) -extensions v3_unsupported_policy_ca -key $(test_ca_key_file_ec) -set_serial 0 -days 3653 -sha256 -in test-ca.req_ec.sha256 -out $@
Ron Eldor74d9acc2019-03-21 14:00:03 +0200221
222test-ca.req_ec.sha256: $(test_ca_key_file_ec)
223 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$(test_ca_key_file_ec) subject_name="C=NL, O=PolarSSL, CN=Polarssl Test EC CA" md=SHA256
224all_intermediate += test-ca.req_ec.sha256
225
Hanno Beckere21387e2019-03-12 16:49:26 +0000226test-ca2.crt.der: $(test_ca_crt_file_ec)
227 $(OPENSSL) x509 -in $(test_ca_crt_file_ec) -out $@ -inform PEM -outform DER
228all_final += test-ca2.crt.der
229
230test-ca2.key.der: $(test_ca_key_file_ec)
231 $(OPENSSL) pkey -in $(test_ca_key_file_ec) -out $@ -inform PEM -outform DER
232all_final += test-ca2.key.der
233
Hanno Beckerb9630812018-10-31 16:28:05 +0000234test_ca_crt_cat12 = test-ca_cat12.crt
235$(test_ca_crt_cat12): $(test_ca_crt) $(test_ca_crt_file_ec)
236 cat $(test_ca_crt) $(test_ca_crt_file_ec) > $@
237all_final += $(test_ca_crt_cat12)
238
239test_ca_crt_cat21 = test-ca_cat21.crt
240$(test_ca_crt_cat21): $(test_ca_crt) $(test_ca_crt_file_ec)
241 cat $(test_ca_crt_file_ec) $(test_ca_crt) > $@
242all_final += $(test_ca_crt_cat21)
243
Manuel Pégourié-Gonnardbc313012017-06-27 12:51:52 +0200244test-int-ca.csr: test-int-ca.key $(test_ca_config_file)
245 $(OPENSSL) req -new -config $(test_ca_config_file) -key test-int-ca.key -subj "/C=NL/O=PolarSSL/CN=PolarSSL Test Intermediate CA" -out $@
Pengyu Lv0f5ca2d2023-05-25 09:24:17 +0800246
247test-int-ca2.csr: test-int-ca2.key $(test_ca_config_file)
248 $(OPENSSL) req -new -config $(test_ca_config_file) -key test-int-ca2.key \
249 -subj "/C=NL/O=PolarSSL/CN=PolarSSL Test Intermediate EC CA" -out $@
250
251test-int-ca3.csr: test-int-ca3.key $(test_ca_config_file)
252 $(OPENSSL) req -new -config $(test_ca_config_file) -key test-int-ca3.key \
253 -subj "/C=UK/O=mbed TLS/CN=mbed TLS Test intermediate CA 3" -out $@
254
255all_intermediate += test-int-ca.csr test-int-ca2.csr test-int-ca3.csr
256
257test-int-ca.crt: $(test_ca_crt_file_ec) $(test_ca_key_file_ec) $(test_ca_config_file) test-int-ca.csr
Pengyu Lvc7995a82023-06-02 13:23:39 +0800258 $(OPENSSL) x509 -req -extfile $(test_ca_config_file) -extensions v3_ca \
259 -CA $(test_ca_crt_file_ec) -CAkey $(test_ca_key_file_ec) \
260 -set_serial 14 -days 3653 -sha256 -in test-int-ca.csr -out $@
Pengyu Lv0f5ca2d2023-05-25 09:24:17 +0800261
262test-int-ca2.crt: $(test_ca_key_file_rsa) $(test_ca_crt) $(test_ca_config_file) test-int-ca2.csr
263 $(OPENSSL) x509 -req -extfile $(test_ca_config_file) -extensions v3_ca -CA $(test_ca_crt) \
264 -CAkey $(test_ca_key_file_rsa) -set_serial 15 -days 3653 -sha256 -in test-int-ca2.csr \
265 -passin "pass:$(test_ca_pwd_rsa)" -out $@
266
267# Note: This requests openssl version >= 3.x.xx
268test-int-ca3.crt: test-int-ca2.crt test-int-ca2.key $(test_ca_config_file) test-int-ca3.csr
269 $(OPENSSL) x509 -req -extfile $(test_ca_config_file) -extensions no_subj_auth_id \
270 -CA test-int-ca2.crt -CAkey test-int-ca2.key -set_serial 77 -days 3653 \
271 -sha256 -in test-int-ca3.csr -out $@
272
Manuel Pégourié-Gonnard7ff243a2017-08-08 18:54:13 +0200273test-int-ca-exp.crt: $(test_ca_crt_file_ec) $(test_ca_key_file_ec) $(test_ca_config_file) test-int-ca.csr
Manuel Pégourié-Gonnardbc313012017-06-27 12:51:52 +0200274 $(FAKETIME) -f -3653d $(OPENSSL) x509 -req -extfile $(test_ca_config_file) -extensions v3_ca -CA $(test_ca_crt_file_ec) -CAkey $(test_ca_key_file_ec) -set_serial 14 -days 3653 -sha256 -in test-int-ca.csr -out $@
Pengyu Lv0f5ca2d2023-05-25 09:24:17 +0800275
276all_final += test-int-ca-exp.crt test-int-ca.crt test-int-ca2.crt test-int-ca3.crt
Manuel Pégourié-Gonnardbc313012017-06-27 12:51:52 +0200277
Ron Eldor9eeb8612019-02-12 15:03:42 +0200278enco-cert-utf8str.pem: rsa_pkcs1_1024_clear.pem
279 $(MBEDTLS_CERT_WRITE) subject_key=rsa_pkcs1_1024_clear.pem subject_name="CN=dw.yonan.net" issuer_crt=enco-ca-prstr.pem issuer_key=rsa_pkcs1_1024_clear.pem not_before=20190210144406 not_after=20290210144406 md=SHA1 version=3 output_file=$@
280
Jerry Yu92d1ec62023-06-27 16:53:25 +0800281parse_input/crl-idp.pem: $(test_ca_crt) $(test_ca_key_file_rsa) $(test_ca_config_file)
Manuel Pégourié-Gonnardfd3e4fb2018-03-13 11:53:30 +0100282 $(OPENSSL) ca -gencrl -batch -cert $(test_ca_crt) -keyfile $(test_ca_key_file_rsa) -key $(test_ca_pwd_rsa) -config $(test_ca_config_file) -name test_ca -md sha256 -crldays 3653 -crlexts crl_ext_idp -out $@
Jerry Yu92d1ec62023-06-27 16:53:25 +0800283parse_input/crl-idpnc.pem: $(test_ca_crt) $(test_ca_key_file_rsa) $(test_ca_config_file)
Manuel Pégourié-Gonnarda63305d2018-03-14 12:23:56 +0100284 $(OPENSSL) ca -gencrl -batch -cert $(test_ca_crt) -keyfile $(test_ca_key_file_rsa) -key $(test_ca_pwd_rsa) -config $(test_ca_config_file) -name test_ca -md sha256 -crldays 3653 -crlexts crl_ext_idp_nc -out $@
Manuel Pégourié-Gonnardfd3e4fb2018-03-13 11:53:30 +0100285
Gilles Peskinefd14bca2017-05-11 17:57:22 +0200286cli_crt_key_file_rsa = cli-rsa.key
287cli_crt_extensions_file = cli.opensslconf
288
Gilles Peskinef040a172017-05-05 18:56:12 +0200289cli-rsa.csr: $(cli_crt_key_file_rsa)
Hanno Becker386f99c2018-11-01 17:20:22 +0000290 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Client 2" md=SHA1
Gilles Peskinef040a172017-05-05 18:56:12 +0200291all_intermediate += cli-rsa.csr
Hanno Becker386f99c2018-11-01 17:20:22 +0000292
293cli-rsa-sha1.crt: cli-rsa.csr
Ron Eldor9eeb8612019-02-12 15:03:42 +0200294 $(MBEDTLS_CERT_WRITE) request_file=$< serial=4 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA1 version=3 output_file=$@
Hanno Becker386f99c2018-11-01 17:20:22 +0000295
296cli-rsa-sha256.crt: cli-rsa.csr
Ron Eldor9eeb8612019-02-12 15:03:42 +0200297 $(MBEDTLS_CERT_WRITE) request_file=$< serial=4 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA256 version=3 output_file=$@
Gilles Peskinef040a172017-05-05 18:56:12 +0200298all_final += cli-rsa-sha256.crt
299
Hanno Beckere21387e2019-03-12 16:49:26 +0000300cli-rsa-sha256.crt.der: cli-rsa-sha256.crt
301 $(OPENSSL) x509 -in $< -out $@ -inform PEM -outform DER
302all_final += cli-rsa-sha256.crt.der
303
Jerry Yu92d1ec62023-06-27 16:53:25 +0800304parse_input/cli-rsa-sha256-badalg.crt.der: cli-rsa-sha256.crt.der
Paul Elliottca17ebf2020-11-24 17:30:18 +0000305 hexdump -ve '1/1 "%.2X"' $< | sed "s/06092A864886F70D01010B0500/06092A864886F70D01010B0900/2" | xxd -r -p > $@
Paul Elliottca17ebf2020-11-24 17:30:18 +0000306
307cli-rsa.key.der: $(cli_crt_key_file_rsa)
Hanno Beckere21387e2019-03-12 16:49:26 +0000308 $(OPENSSL) pkey -in $< -out $@ -inform PEM -outform DER
309all_final += cli-rsa.key.der
310
Manuel Pégourié-Gonnard29d60fb2017-06-05 10:20:32 +0200311test_ca_int_rsa1 = test-int-ca.crt
Pengyu Lv2d5e6ae2023-05-12 16:27:26 +0800312test_ca_int_ec = test-int-ca2.crt
Pengyu Lv44c42fe2023-05-12 17:52:09 +0800313test_ca_int_key_file_ec = test-int-ca2.key
Pengyu Lv2d5e6ae2023-05-12 16:27:26 +0800314
315# server7*
Manuel Pégourié-Gonnard29d60fb2017-06-05 10:20:32 +0200316
317server7.csr: server7.key
318 $(OPENSSL) req -new -key server7.key -subj "/C=NL/O=PolarSSL/CN=localhost" -out $@
319all_intermediate += server7.csr
Pengyu Lv2d5e6ae2023-05-12 16:27:26 +0800320
321server7.crt: server7.csr $(test_ca_int_rsa1)
Pengyu Lvc7995a82023-06-02 13:23:39 +0800322 $(OPENSSL) x509 -req -extfile $(cli_crt_extensions_file) -extensions cli-rsa \
323 -CA $(test_ca_int_rsa1) -CAkey test-int-ca.key \
324 -set_serial 16 -days 3653 -sha256 -in server7.csr > $@
Pengyu Lv2d5e6ae2023-05-12 16:27:26 +0800325all_final += server7.crt
326
Manuel Pégourié-Gonnard29d60fb2017-06-05 10:20:32 +0200327server7-expired.crt: server7.csr $(test_ca_int_rsa1)
328 $(FAKETIME) -f -3653d $(OPENSSL) x509 -req -extfile $(cli_crt_extensions_file) -extensions cli-rsa -CA $(test_ca_int_rsa1) -CAkey test-int-ca.key -set_serial 16 -days 3653 -sha256 -in server7.csr | cat - $(test_ca_int_rsa1) > $@
329all_final += server7-expired.crt
Pengyu Lv2d5e6ae2023-05-12 16:27:26 +0800330
Manuel Pégourié-Gonnard29d60fb2017-06-05 10:20:32 +0200331server7-future.crt: server7.csr $(test_ca_int_rsa1)
332 $(FAKETIME) -f +3653d $(OPENSSL) x509 -req -extfile $(cli_crt_extensions_file) -extensions cli-rsa -CA $(test_ca_int_rsa1) -CAkey test-int-ca.key -set_serial 16 -days 3653 -sha256 -in server7.csr | cat - $(test_ca_int_rsa1) > $@
333all_final += server7-future.crt
Pengyu Lv2d5e6ae2023-05-12 16:27:26 +0800334
Manuel Pégourié-Gonnard4dfc04a2017-06-05 11:12:13 +0200335server7-badsign.crt: server7.crt $(test_ca_int_rsa1)
Manuel Pégourié-Gonnardd19a41d2017-07-14 11:05:59 +0200336 { head -n-2 $<; tail -n-2 $< | sed -e '1s/0\(=*\)$$/_\1/' -e '1s/[^_=]\(=*\)$$/0\1/' -e '1s/_/1/'; cat $(test_ca_int_rsa1); } > $@
Manuel Pégourié-Gonnard4dfc04a2017-06-05 11:12:13 +0200337all_final += server7-badsign.crt
Pengyu Lv2d5e6ae2023-05-12 16:27:26 +0800338
Jerry Yu54e86322023-06-27 16:40:00 +0800339parse_input/server7_int-ca.crt server7_int-ca.crt: server7.crt $(test_ca_int_rsa1)
Pengyu Lv2d5e6ae2023-05-12 16:27:26 +0800340 cat server7.crt $(test_ca_int_rsa1) > $@
341all_final += server7_int-ca.crt
342
Jerry Yu92d1ec62023-06-27 16:53:25 +0800343parse_input/server7_pem_space.crt: server7.crt $(test_ca_int_rsa1)
Pengyu Lv2d5e6ae2023-05-12 16:27:26 +0800344 cat server7.crt $(test_ca_int_rsa1) | sed '4s/\(.\)$$/ \1/' > $@
Pengyu Lv2d5e6ae2023-05-12 16:27:26 +0800345
Jerry Yu92d1ec62023-06-27 16:53:25 +0800346parse_input/server7_all_space.crt: server7.crt $(test_ca_int_rsa1)
Pengyu Lv2d5e6ae2023-05-12 16:27:26 +0800347 { cat server7.crt | sed '4s/\(.\)$$/ \1/'; cat test-int-ca.crt | sed '4s/\(.\)$$/ \1/'; } > $@
Pengyu Lv2d5e6ae2023-05-12 16:27:26 +0800348
Jerry Yu92d1ec62023-06-27 16:53:25 +0800349parse_input/server7_trailing_space.crt: server7.crt $(test_ca_int_rsa1)
Pengyu Lv2d5e6ae2023-05-12 16:27:26 +0800350 cat server7.crt $(test_ca_int_rsa1) | sed 's/\(.\)$$/\1 /' > $@
Pengyu Lv2d5e6ae2023-05-12 16:27:26 +0800351
352server7_int-ca_ca2.crt: server7.crt $(test_ca_int_rsa1) $(test_ca_crt_file_ec)
353 cat server7.crt $(test_ca_int_rsa1) $(test_ca_crt_file_ec) > $@
354all_final += server7_int-ca_ca2.crt
355
Manuel Pégourié-Gonnardbc313012017-06-27 12:51:52 +0200356server7_int-ca-exp.crt: server7.crt test-int-ca-exp.crt
357 cat server7.crt test-int-ca-exp.crt > $@
358all_final += server7_int-ca-exp.crt
359
Pengyu Lv2d5e6ae2023-05-12 16:27:26 +0800360server7_spurious_int-ca.crt: server7.crt $(test_ca_int_ec) $(test_ca_int_rsa1)
361 cat server7.crt $(test_ca_int_ec) $(test_ca_int_rsa1) > $@
362all_final += server7_spurious_int-ca.crt
363
Pengyu Lv44c42fe2023-05-12 17:52:09 +0800364# server8*
365
366server8.crt: server8.key
Pengyu Lvc7995a82023-06-02 13:23:39 +0800367 $(MBEDTLS_CERT_WRITE) subject_key=$< subject_name="C=NL, O=PolarSSL, CN=localhost" serial=17 \
368 issuer_crt=$(test_ca_int_ec) issuer_key=$(test_ca_int_key_file_ec) \
369 not_before=20190210144406 not_after=20290210144406 \
370 md=SHA256 version=3 output_file=$@
Pengyu Lv44c42fe2023-05-12 17:52:09 +0800371all_final += server8.crt
372
373server8_int-ca2.crt: server8.crt $(test_ca_int_ec)
374 cat $^ > $@
375all_final += server8_int-ca2.crt
376
Ron Eldor9eeb8612019-02-12 15:03:42 +0200377cli2.req.sha256: cli2.key
378 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Test Client 2" md=SHA256
379
380all_final += server1.req.sha1
381cli2.crt: cli2.req.sha256
382 $(MBEDTLS_CERT_WRITE) request_file=cli2.req.sha256 serial=13 selfsign=0 issuer_name="C=NL,O=PolarSSL,CN=PolarSSL Test EC CA" issuer_key=$(test_ca_key_file_ec) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144400 not_after=20290210144400 md=SHA256 version=3 output_file=$@
383all_final += cli2.crt
384
Hanno Beckere21387e2019-03-12 16:49:26 +0000385cli2.crt.der: cli2.crt
386 $(OPENSSL) x509 -in $< -out $@ -inform PEM -outform DER
387all_final += cli2.crt.der
388
Hanno Becker4cbea4b2019-05-30 16:08:12 +0100389cli2.key.der: cli2.key
Hanno Beckere21387e2019-03-12 16:49:26 +0000390 $(OPENSSL) pkey -in $< -out $@ -inform PEM -outform DER
391all_final += cli2.key.der
392
Hanno Becker226eedb2020-08-17 12:14:00 +0100393server5_pwd_ec = PolarSSLTest
394
Hanno Becker4cbea4b2019-05-30 16:08:12 +0100395server5.crt.der: server5.crt
Hanno Beckere21387e2019-03-12 16:49:26 +0000396 $(OPENSSL) x509 -in $< -out $@ -inform PEM -outform DER
397all_final += server5.crt.der
398
Hanno Becker4cbea4b2019-05-30 16:08:12 +0100399server5.key.der: server5.key
Hanno Beckere21387e2019-03-12 16:49:26 +0000400 $(OPENSSL) pkey -in $< -out $@ -inform PEM -outform DER
401all_final += server5.key.der
402
Hanno Becker226eedb2020-08-17 12:14:00 +0100403server5.key.enc: server5.key
404 $(OPENSSL) ec -aes256 -in $< -out $@ -passout "pass:$(server5_pwd_ec)"
405all_final += server5.key.enc
406
Manuel Pégourié-Gonnardbc313012017-06-27 12:51:52 +0200407server5-ss-expired.crt: server5.key
408 $(FAKETIME) -f -3653d $(OPENSSL) req -x509 -new -subj "/C=UK/O=mbed TLS/OU=testsuite/CN=localhost" -days 3653 -sha256 -key $< -out $@
409all_final += server5-ss-expired.crt
410
Manuel Pégourié-Gonnardc10afdb2017-06-29 09:48:08 +0200411# try to forge a copy of test-int-ca3 with different key
412server5-ss-forgeca.crt: server5.key
413 $(FAKETIME) '2015-09-01 14:08:43' $(OPENSSL) req -x509 -new -subj "/C=UK/O=mbed TLS/CN=mbed TLS Test intermediate CA 3" -set_serial 77 -config $(test_ca_config_file) -extensions noext_ca -days 3650 -sha256 -key $< -out $@
414all_final += server5-ss-forgeca.crt
415
Jerry Yu92d1ec62023-06-27 16:53:25 +0800416parse_input/server5-othername.crt: server5.key
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200417 $(OPENSSL) req -x509 -new -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS othername SAN" -set_serial 77 -config $(test_ca_config_file) -extensions othername_san -days 3650 -sha256 -key $< -out $@
418
Jerry Yu92d1ec62023-06-27 16:53:25 +0800419parse_input/server5-nonprintable_othername.crt: server5.key
Victor Barpp Gomesd0225af2022-09-29 11:40:20 -0300420 $(OPENSSL) req -x509 -new -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS non-printable othername SAN" -set_serial 77 -config $(test_ca_config_file) -extensions nonprintable_othername_san -days 3650 -sha256 -key $< -out $@
421
Jerry Yu92d1ec62023-06-27 16:53:25 +0800422parse_input/server5-unsupported_othername.crt: server5.key
David Horstmann119d7e22022-11-25 15:50:30 +0000423 $(OPENSSL) req -x509 -new -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS unsupported othername SAN" -set_serial 77 -config $(test_ca_config_file) -extensions unsupported_othername_san -days 3650 -sha256 -key $< -out $@
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200424
Jerry Yu92d1ec62023-06-27 16:53:25 +0800425parse_input/server5-fan.crt: server5.key
Ron Eldor3c4734a2019-03-25 14:05:23 +0200426 $(OPENSSL) req -x509 -new -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS FAN" -set_serial 77 -config $(test_ca_config_file) -extensions fan_cert -days 3650 -sha256 -key server5.key -out $@
427
Przemek Stekiel63973ab2023-06-05 16:39:57 +0200428server5-tricky-ip-san.crt.der: server5.key
429 $(OPENSSL) req -x509 -new -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS Tricky IP SAN" -set_serial 77 -config $(test_ca_config_file) -extensions tricky_ip_san -days 3650 -sha256 -key server5.key -outform der -out $@
430
431# malformed IP length
432server5-tricky-ip-san-malformed-len.crt.der: server5-tricky-ip-san.crt.der
433 hexdump -ve '1/1 "%.2X"' $< | sed "s/87046162636487106162/87056162636487106162/" | xxd -r -p > $@
Andrzej Kurek303704e2023-03-06 04:50:47 -0500434
Jerry Yu92d1ec62023-06-27 16:53:25 +0800435parse_input/server5-directoryname.crt.der: server5.key
Andrzej Kurekd3486322023-01-20 05:21:52 -0500436 $(OPENSSL) req -x509 -outform der -new -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS directoryName SAN" -set_serial 77 -config $(test_ca_config_file) -extensions directory_name_san -days 3650 -sha256 -key server5.key -out $@
Andrzej Kureke12b01d2023-01-10 06:47:38 -0500437
Jerry Yu92d1ec62023-06-27 16:53:25 +0800438parse_input/server5-two-directorynames.crt.der: server5.key
Andrzej Kurekd3486322023-01-20 05:21:52 -0500439 $(OPENSSL) req -x509 -outform der -new -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS directoryName SAN" -set_serial 77 -config $(test_ca_config_file) -extensions two_directorynames -days 3650 -sha256 -key server5.key -out $@
Andrzej Kurek4a4f1ec2023-01-12 06:51:20 -0500440
Jerry Yu460b6cf2023-04-24 17:03:15 +0800441server5-der0.crt: server5.crt.der
442 cp $< $@
443server5-der1a.crt: server5.crt.der
444 cp $< $@
Pengyu Lv6561f7d2023-06-02 12:52:21 +0800445 echo '00' | xxd -r -p | dd of=$@ bs=1 seek=$$(wc -c <$<) conv=notrunc
Jerry Yu460b6cf2023-04-24 17:03:15 +0800446server5-der1b.crt: server5.crt.der
447 cp $< $@
Pengyu Lv6561f7d2023-06-02 12:52:21 +0800448 echo 'c1' | xxd -r -p | dd of=$@ bs=1 seek=$$(wc -c <$<) conv=notrunc
Jerry Yu460b6cf2023-04-24 17:03:15 +0800449server5-der2.crt: server5.crt.der
450 cp $< $@
Pengyu Lv6561f7d2023-06-02 12:52:21 +0800451 echo 'b90a' | xxd -r -p | dd of=$@ bs=1 seek=$$(wc -c <$<) conv=notrunc
Jerry Yu460b6cf2023-04-24 17:03:15 +0800452server5-der4.crt: server5.crt.der
453 cp $< $@
Pengyu Lv6561f7d2023-06-02 12:52:21 +0800454 echo 'a710945f' | xxd -r -p | dd of=$@ bs=1 seek=$$(wc -c <$<) conv=notrunc
Jerry Yu460b6cf2023-04-24 17:03:15 +0800455server5-der8.crt: server5.crt.der
456 cp $< $@
Pengyu Lv6561f7d2023-06-02 12:52:21 +0800457 echo 'a4a7ff27267aaa0f' | xxd -r -p | dd of=$@ bs=1 seek=$$(wc -c <$<) conv=notrunc
Jerry Yu460b6cf2023-04-24 17:03:15 +0800458server5-der9.crt: server5.crt.der
459 cp $< $@
Pengyu Lv6561f7d2023-06-02 12:52:21 +0800460 echo 'cff8303376ffa47a29' | xxd -r -p | dd of=$@ bs=1 seek=$$(wc -c <$<) conv=notrunc
Jerry Yu460b6cf2023-04-24 17:03:15 +0800461all_final += server5-der0.crt server5-der1b.crt server5-der4.crt \
462 server5-der9.crt server5-der1a.crt server5-der2.crt \
463 server5-der8.crt
464
Andrzej Kurekd90376e2023-01-20 07:08:57 -0500465# directoryname sequence tag malformed
Jerry Yu92d1ec62023-06-27 16:53:25 +0800466parse_input/server5-directoryname-seq-malformed.crt.der: server5-two-directorynames.crt.der
Andrzej Kurekd90376e2023-01-20 07:08:57 -0500467 hexdump -ve '1/1 "%.2X"' $< | sed "s/62A4473045310B/62A4473145310B/" | xxd -r -p > $@
Andrzej Kurek303704e2023-03-06 04:50:47 -0500468
Andrzej Kurekd90376e2023-01-20 07:08:57 -0500469# Second directoryname OID length malformed 03 -> 15
Jerry Yu92d1ec62023-06-27 16:53:25 +0800470parse_input/server5-second-directoryname-oid-malformed.crt.der: server5-two-directorynames.crt.der
Andrzej Kurekd3486322023-01-20 05:21:52 -0500471 hexdump -ve '1/1 "%.2X"' $< | sed "s/0355040A0C0A4D414C464F524D5F4D45/1555040A0C0A4D414C464F524D5F4D45/" | xxd -r -p > $@
Andrzej Kurek151d85d2023-01-12 08:59:37 -0500472
Manuel Pégourié-Gonnard7d2a4d82020-07-23 12:39:53 +0200473all_final += server5-tricky-ip-san.crt
474
Jerry Yu54e86322023-06-27 16:40:00 +0800475parse_input/rsa_single_san_uri.crt.der rsa_single_san_uri.crt.der: rsa_single_san_uri.key
Andrzej Kurek570a0f82023-02-14 05:52:49 -0500476 $(OPENSSL) req -x509 -outform der -nodes -days 7300 -newkey rsa:2048 -key $< -out $@ -addext "subjectAltName = URI:urn:example.com:5ff40f78-9210-494f-8206-c2c082f0609c" -extensions 'v3_req' -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS URI SAN"
477
Jerry Yu92d1ec62023-06-27 16:53:25 +0800478parse_input/rsa_multiple_san_uri.crt.der: rsa_multiple_san_uri.key
Andrzej Kurek570a0f82023-02-14 05:52:49 -0500479 $(OPENSSL) req -x509 -outform der -nodes -days 7300 -newkey rsa:2048 -key $< -out $@ -addext "subjectAltName = URI:urn:example.com:5ff40f78-9210-494f-8206-c2c082f0609c, URI:urn:example.com:5ff40f78-9210-494f-8206-abcde1234567" -extensions 'v3_req' -subj "/C=UK/O=Mbed TLS/CN=Mbed TLS URI SAN"
480
Pengyu Lv309d4342023-05-15 11:07:55 +0800481test-int-ca3-badsign.crt: test-int-ca3.crt
482 { head -n-2 $<; tail -n-2 $< | sed -e '1s/0\(=*\)$$/_\1/' -e '1s/[^_=]\(=*\)$$/0\1/' -e '1s/_/1/'; } > $@
483all_final += test-int-ca3-badsign.crt
484
485# server10*
486
487server10.crt: server10.key test-int-ca3.crt test-int-ca3.key
Pengyu Lvc7995a82023-06-02 13:23:39 +0800488 $(MBEDTLS_CERT_WRITE) subject_key=$< subject_name="CN=localhost" serial=75 \
489 issuer_crt=test-int-ca3.crt issuer_key=test-int-ca3.key \
490 subject_identifier=0 authority_identifier=0 \
491 not_before=20190210144406 not_after=20290210144406 \
492 md=SHA256 version=3 output_file=$@
Pengyu Lv309d4342023-05-15 11:07:55 +0800493all_final += server10.crt
Manuel Pégourié-Gonnardd19a41d2017-07-14 11:05:59 +0200494server10-badsign.crt: server10.crt
495 { head -n-2 $<; tail -n-2 $< | sed -e '1s/0\(=*\)$$/_\1/' -e '1s/[^_=]\(=*\)$$/0\1/' -e '1s/_/1/'; } > $@
496all_final += server10-badsign.crt
497server10-bs_int3.pem: server10-badsign.crt test-int-ca3.crt
498 cat server10-badsign.crt test-int-ca3.crt > $@
499all_final += server10-bs_int3.pem
Manuel Pégourié-Gonnardd19a41d2017-07-14 11:05:59 +0200500server10_int3-bs.pem: server10.crt test-int-ca3-badsign.crt
501 cat server10.crt test-int-ca3-badsign.crt > $@
Jaeden Amero001626e2019-02-27 11:16:41 +0000502all_final += server10_int3-bs.pem
Pengyu Lv309d4342023-05-15 11:07:55 +0800503server10_int3_int-ca2.crt: server10.crt test-int-ca3.crt $(test_ca_int_ec)
504 cat $^ > $@
505all_final += server10_int3_int-ca2.crt
506server10_int3_int-ca2_ca.crt: server10.crt test-int-ca3.crt $(test_ca_int_ec) $(test_ca_crt)
507 cat $^ > $@
508all_final += server10_int3_int-ca2_ca.crt
509server10_int3_spurious_int-ca2.crt: server10.crt test-int-ca3.crt $(test_ca_int_rsa1) $(test_ca_int_ec)
510 cat $^ > $@
511all_final += server10_int3_spurious_int-ca2.crt
Manuel Pégourié-Gonnardc10afdb2017-06-29 09:48:08 +0200512
Ron Eldorb0065182017-10-16 12:40:27 +0300513rsa_pkcs1_2048_public.pem: server8.key
Ron Eldor3f2da842017-10-17 15:50:30 +0300514 $(OPENSSL) rsa -in $< -outform PEM -RSAPublicKey_out -out $@
515all_final += rsa_pkcs1_2048_public.pem
Gilles Peskineea8d6972017-11-28 17:30:52 +0100516
Ron Eldorb0065182017-10-16 12:40:27 +0300517rsa_pkcs1_2048_public.der: rsa_pkcs1_2048_public.pem
Ron Eldor3f2da842017-10-17 15:50:30 +0300518 $(OPENSSL) rsa -RSAPublicKey_in -in $< -outform DER -RSAPublicKey_out -out $@
519all_final += rsa_pkcs1_2048_public.der
520
521rsa_pkcs8_2048_public.pem: server8.key
522 $(OPENSSL) rsa -in $< -outform PEM -pubout -out $@
523all_final += rsa_pkcs8_2048_public.pem
524
525rsa_pkcs8_2048_public.der: rsa_pkcs8_2048_public.pem
526 $(OPENSSL) rsa -pubin -in $< -outform DER -pubout -out $@
Ron Eldorb0065182017-10-16 12:40:27 +0300527all_final += rsa_pkcs8_2048_public.der
Gilles Peskineea8d6972017-11-28 17:30:52 +0100528
Pengyu Lvf4b568c2023-05-25 12:26:11 +0800529# Generate crl_cat_*.pem
530# - crt_cat_*.pem: (1+2) concatenations in various orders:
531# ec = crl-ec-sha256.pem, ecfut = crl-future.pem
532# rsa = crl.pem, rsabadpem = same with pem error, rsaexp = crl_expired.pem
533
534crl_cat_ec-rsa.pem:crl-ec-sha256.pem crl.pem
535 cat $^ > $@
536
537crl_cat_rsa-ec.pem:crl.pem crl-ec-sha256.pem
538 cat $^ > $@
539
540all_final += crl_cat_ec-rsa.pem crl_cat_rsa-ec.pem
541
Przemek Stekiel5ff986c2023-04-06 09:22:20 +0200542authorityKeyId_subjectKeyId.crt.der:
Przemek Stekielb3eaf8c2023-06-14 14:25:21 +0200543 $(OPENSSL) req -x509 -nodes -days 7300 -key server2.key -outform DER -out $@ -config authorityKeyId_subjectKeyId.conf -extensions 'v3_req' -set_serial 593828494303792449134898749208168108403991951034
Przemek Stekiel1969f6a2023-04-18 08:38:16 +0200544
545authorityKeyId_no_keyid.crt.der:
Przemek Stekielb3eaf8c2023-06-14 14:25:21 +0200546 $(OPENSSL) req -x509 -nodes -days 7300 -key server2.key -outform DER -out $@ -config authorityKeyId_subjectKeyId.conf -extensions 'v3_req_authorityKeyId_no_keyid' -set_serial 593828494303792449134898749208168108403991951034
Przemek Stekiel1969f6a2023-04-18 08:38:16 +0200547
Przemek Stekiel0b683a92023-05-24 16:06:30 +0200548authorityKeyId_no_issuer.crt.der:
549 $(OPENSSL) req -x509 -nodes -days 7300 -key server2.key -outform DER -out $@ -config authorityKeyId_subjectKeyId.conf -extensions 'v3_req_authorityKeyId_no_issuer'
550
Przemek Stekiel05d5c3e2023-05-16 16:24:44 +0200551authorityKeyId_no_authorityKeyId.crt.der:
552 $(OPENSSL) req -x509 -nodes -days 7300 -key server2.key -outform DER -out $@ -config authorityKeyId_subjectKeyId.conf -extensions 'v3_req_no_authorityKeyId'
Przemek Stekiel1969f6a2023-04-18 08:38:16 +0200553
Przemek Stekiel5ff986c2023-04-06 09:22:20 +0200554authorityKeyId_subjectKeyId_tag_malformed.crt.der: authorityKeyId_subjectKeyId.crt.der
Przemek Stekiel2c64e902023-05-06 20:55:56 +0200555 hexdump -ve '1/1 "%.2X"' $< | sed "s/0414A505E864B8DCDF600F50124D60A864AF4D8B4393/0114A505E864B8DCDF600F50124D60A864AF4D8B4393/" | xxd -r -p > $@
Przemek Stekiel5ff986c2023-04-06 09:22:20 +0200556
Przemek Stekiel64a06e42023-05-08 16:03:33 +0200557authorityKeyId_subjectKeyId_tag_len_malformed.crt.der: authorityKeyId_subjectKeyId.crt.der
558 hexdump -ve '1/1 "%.2X"' $< | sed "s/0414A505E864B8DCDF600F50124D60A864AF4D8B4393/0413A505E864B8DCDF600F50124D60A864AF4D8B4393/" | xxd -r -p > $@
559
Przemek Stekiel5ff986c2023-04-06 09:22:20 +0200560authorityKeyId_subjectKeyId_length_malformed.crt.der: authorityKeyId_subjectKeyId.crt.der
Przemek Stekiel2c64e902023-05-06 20:55:56 +0200561 hexdump -ve '1/1 "%.2X"' $< | sed "s/306D8014A505E864B8DC/306C8014A505E864B8DC/" | xxd -r -p > $@
Przemek Stekiel5ff986c2023-04-06 09:22:20 +0200562
563authorityKeyId_subjectKeyId_sequence_tag_malformed.crt.der: authorityKeyId_subjectKeyId.crt.der
Przemek Stekiel2c64e902023-05-06 20:55:56 +0200564 hexdump -ve '1/1 "%.2X"' $< | sed "s/6F306D8014A505E864B8/6F006D8014A505E864B8/" | xxd -r -p > $@
Przemek Stekiel5ff986c2023-04-06 09:22:20 +0200565
566authorityKeyId_subjectKeyId_keyid_tag_malformed.crt.der: authorityKeyId_subjectKeyId.crt.der
Przemek Stekiel2c64e902023-05-06 20:55:56 +0200567 hexdump -ve '1/1 "%.2X"' $< | sed "s/306D8014A505E864B8DC/306D0014A505E864B8DC/" | xxd -r -p > $@
Przemek Stekiel5ff986c2023-04-06 09:22:20 +0200568
Przemek Stekielb1f0b532023-05-05 16:07:10 +0200569authorityKeyId_subjectKeyId_keyid_tag_len_malformed.crt.der: authorityKeyId_subjectKeyId.crt.der
Przemek Stekiel2c64e902023-05-06 20:55:56 +0200570 hexdump -ve '1/1 "%.2X"' $< | sed "s/306D8014A505E864B8DC/306D80FFA505E864B8DC/" | xxd -r -p > $@
Przemek Stekielb1f0b532023-05-05 16:07:10 +0200571
Przemek Stekiel5ff986c2023-04-06 09:22:20 +0200572authorityKeyId_subjectKeyId_issuer_tag1_malformed.crt.der: authorityKeyId_subjectKeyId.crt.der
573 hexdump -ve '1/1 "%.2X"' $< | sed "s/A13FA43D303B310B3009/003FA43D303B310B3009/" | xxd -r -p > $@
574
575authorityKeyId_subjectKeyId_issuer_tag2_malformed.crt.der: authorityKeyId_subjectKeyId.crt.der
576 hexdump -ve '1/1 "%.2X"' $< | sed "s/A43D303B310B30090603/003D303B310B30090603/" | xxd -r -p > $@
577
Przemek Stekiel64a06e42023-05-08 16:03:33 +0200578authorityKeyId_subjectKeyId_sn_tag_malformed.crt.der: authorityKeyId_subjectKeyId.crt.der
579 hexdump -ve '1/1 "%.2X"' $< | sed "s/8214680430CD074DE63F/8114680430CD074DE63F/" | xxd -r -p > $@
580
581authorityKeyId_subjectKeyId_sn_len_malformed.crt.der: authorityKeyId_subjectKeyId.crt.der
582 hexdump -ve '1/1 "%.2X"' $< | sed "s/8214680430CD074DE63F/8213680430CD074DE63F/" | xxd -r -p > $@
583
Hanno Beckerd16f6122017-09-05 09:23:50 +0100584################################################################
585#### Generate various RSA keys
586################################################################
Gilles Peskinebc70a182017-05-09 15:59:24 +0200587
Hanno Beckerd16f6122017-09-05 09:23:50 +0100588### Password used for PKCS1-encoded encrypted RSA keys
589keys_rsa_basic_pwd = testkey
590
591### Password used for PKCS8-encoded encrypted RSA keys
592keys_rsa_pkcs8_pwd = PolarSSLTest
593
594### Basic 1024-, 2048- and 4096-bit unencrypted RSA keys from which
595### all other encrypted RSA keys are derived.
Hanno Becker08a36dd2017-09-29 20:05:23 +0100596rsa_pkcs1_1024_clear.pem:
Hanno Beckerd16f6122017-09-05 09:23:50 +0100597 $(OPENSSL) genrsa -out $@ 1024
Hanno Becker08a36dd2017-09-29 20:05:23 +0100598all_final += rsa_pkcs1_1024_clear.pem
599rsa_pkcs1_2048_clear.pem:
Hanno Beckerd16f6122017-09-05 09:23:50 +0100600 $(OPENSSL) genrsa -out $@ 2048
Hanno Becker08a36dd2017-09-29 20:05:23 +0100601all_final += rsa_pkcs1_2048_clear.pem
602rsa_pkcs1_4096_clear.pem:
Hanno Beckerd16f6122017-09-05 09:23:50 +0100603 $(OPENSSL) genrsa -out $@ 4096
Hanno Becker08a36dd2017-09-29 20:05:23 +0100604all_final += rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100605
606###
607### PKCS1-encoded, encrypted RSA keys
608###
609
610### 1024-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100611rsa_pkcs1_1024_des.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100612 $(OPENSSL) rsa -des -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100613all_final += rsa_pkcs1_1024_des.pem
614rsa_pkcs1_1024_3des.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100615 $(OPENSSL) rsa -des3 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100616all_final += rsa_pkcs1_1024_3des.pem
617rsa_pkcs1_1024_aes128.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100618 $(OPENSSL) rsa -aes128 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100619all_final += rsa_pkcs1_1024_aes128.pem
620rsa_pkcs1_1024_aes192.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100621 $(OPENSSL) rsa -aes192 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100622all_final += rsa_pkcs1_1024_aes192.pem
623rsa_pkcs1_1024_aes256.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100624 $(OPENSSL) rsa -aes256 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100625all_final += rsa_pkcs1_1024_aes256.pem
626keys_rsa_enc_basic_1024: rsa_pkcs1_1024_des.pem rsa_pkcs1_1024_3des.pem rsa_pkcs1_1024_aes128.pem rsa_pkcs1_1024_aes192.pem rsa_pkcs1_1024_aes256.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100627
628# 2048-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100629rsa_pkcs1_2048_des.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100630 $(OPENSSL) rsa -des -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100631all_final += rsa_pkcs1_2048_des.pem
632rsa_pkcs1_2048_3des.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100633 $(OPENSSL) rsa -des3 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100634all_final += rsa_pkcs1_2048_3des.pem
635rsa_pkcs1_2048_aes128.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100636 $(OPENSSL) rsa -aes128 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100637all_final += rsa_pkcs1_2048_aes128.pem
638rsa_pkcs1_2048_aes192.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100639 $(OPENSSL) rsa -aes192 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100640all_final += rsa_pkcs1_2048_aes192.pem
641rsa_pkcs1_2048_aes256.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100642 $(OPENSSL) rsa -aes256 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100643all_final += rsa_pkcs1_2048_aes256.pem
644keys_rsa_enc_basic_2048: rsa_pkcs1_2048_des.pem rsa_pkcs1_2048_3des.pem rsa_pkcs1_2048_aes128.pem rsa_pkcs1_2048_aes192.pem rsa_pkcs1_2048_aes256.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100645
646# 4096-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100647rsa_pkcs1_4096_des.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100648 $(OPENSSL) rsa -des -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100649all_final += rsa_pkcs1_4096_des.pem
650rsa_pkcs1_4096_3des.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100651 $(OPENSSL) rsa -des3 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100652all_final += rsa_pkcs1_4096_3des.pem
653rsa_pkcs1_4096_aes128.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100654 $(OPENSSL) rsa -aes128 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100655all_final += rsa_pkcs1_4096_aes128.pem
656rsa_pkcs1_4096_aes192.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100657 $(OPENSSL) rsa -aes192 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100658all_final += rsa_pkcs1_4096_aes192.pem
659rsa_pkcs1_4096_aes256.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100660 $(OPENSSL) rsa -aes256 -in $< -out $@ -passout "pass:$(keys_rsa_basic_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100661all_final += rsa_pkcs1_4096_aes256.pem
662keys_rsa_enc_basic_4096: rsa_pkcs1_4096_des.pem rsa_pkcs1_4096_3des.pem rsa_pkcs1_4096_aes128.pem rsa_pkcs1_4096_aes192.pem rsa_pkcs1_4096_aes256.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100663
664###
665### PKCS8-v1 encoded, encrypted RSA keys
666###
667
668### 1024-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100669rsa_pkcs8_pbe_sha1_1024_3des.der: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100670 $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-3DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100671all_final += rsa_pkcs8_pbe_sha1_1024_3des.der
672rsa_pkcs8_pbe_sha1_1024_3des.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100673 $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-3DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100674all_final += rsa_pkcs8_pbe_sha1_1024_3des.pem
675keys_rsa_enc_pkcs8_v1_1024_3des: rsa_pkcs8_pbe_sha1_1024_3des.pem rsa_pkcs8_pbe_sha1_1024_3des.der
Hanno Beckerd16f6122017-09-05 09:23:50 +0100676
Hanno Becker08a36dd2017-09-29 20:05:23 +0100677rsa_pkcs8_pbe_sha1_1024_2des.der: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100678 $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-2DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100679all_final += rsa_pkcs8_pbe_sha1_1024_2des.der
680rsa_pkcs8_pbe_sha1_1024_2des.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100681 $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-2DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100682all_final += rsa_pkcs8_pbe_sha1_1024_2des.pem
683keys_rsa_enc_pkcs8_v1_1024_2des: rsa_pkcs8_pbe_sha1_1024_2des.pem rsa_pkcs8_pbe_sha1_1024_2des.der
Hanno Beckerd16f6122017-09-05 09:23:50 +0100684
TRodziewicz75628d52021-06-18 12:56:27 +0200685keys_rsa_enc_pkcs8_v1_1024: keys_rsa_enc_pkcs8_v1_1024_3des keys_rsa_enc_pkcs8_v1_1024_2des
686
Hanno Beckerd16f6122017-09-05 09:23:50 +0100687### 2048-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100688rsa_pkcs8_pbe_sha1_2048_3des.der: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100689 $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-3DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100690all_final += rsa_pkcs8_pbe_sha1_2048_3des.der
691rsa_pkcs8_pbe_sha1_2048_3des.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100692 $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-3DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100693all_final += rsa_pkcs8_pbe_sha1_2048_3des.pem
694keys_rsa_enc_pkcs8_v1_2048_3des: rsa_pkcs8_pbe_sha1_2048_3des.pem rsa_pkcs8_pbe_sha1_2048_3des.der
Hanno Beckerd16f6122017-09-05 09:23:50 +0100695
Hanno Becker08a36dd2017-09-29 20:05:23 +0100696rsa_pkcs8_pbe_sha1_2048_2des.der: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100697 $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-2DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100698all_final += rsa_pkcs8_pbe_sha1_2048_2des.der
699rsa_pkcs8_pbe_sha1_2048_2des.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100700 $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-2DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100701all_final += rsa_pkcs8_pbe_sha1_2048_2des.pem
702keys_rsa_enc_pkcs8_v1_2048_2des: rsa_pkcs8_pbe_sha1_2048_2des.pem rsa_pkcs8_pbe_sha1_2048_2des.der
Hanno Beckerd16f6122017-09-05 09:23:50 +0100703
TRodziewicz75628d52021-06-18 12:56:27 +0200704keys_rsa_enc_pkcs8_v1_2048: keys_rsa_enc_pkcs8_v1_2048_3des keys_rsa_enc_pkcs8_v1_2048_2des
705
Hanno Beckerd16f6122017-09-05 09:23:50 +0100706### 4096-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100707rsa_pkcs8_pbe_sha1_4096_3des.der: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100708 $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-3DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100709all_final += rsa_pkcs8_pbe_sha1_4096_3des.der
710rsa_pkcs8_pbe_sha1_4096_3des.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100711 $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-3DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100712all_final += rsa_pkcs8_pbe_sha1_4096_3des.pem
713keys_rsa_enc_pkcs8_v1_4096_3des: rsa_pkcs8_pbe_sha1_4096_3des.pem rsa_pkcs8_pbe_sha1_4096_3des.der
Hanno Beckerd16f6122017-09-05 09:23:50 +0100714
Hanno Becker08a36dd2017-09-29 20:05:23 +0100715rsa_pkcs8_pbe_sha1_4096_2des.der: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100716 $(OPENSSL) pkcs8 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-2DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100717all_final += rsa_pkcs8_pbe_sha1_4096_2des.der
718rsa_pkcs8_pbe_sha1_4096_2des.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100719 $(OPENSSL) pkcs8 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)" -topk8 -v1 PBE-SHA1-2DES
Hanno Becker08a36dd2017-09-29 20:05:23 +0100720all_final += rsa_pkcs8_pbe_sha1_4096_2des.pem
721keys_rsa_enc_pkcs8_v1_4096_2des: rsa_pkcs8_pbe_sha1_4096_2des.pem rsa_pkcs8_pbe_sha1_4096_2des.der
Hanno Beckerd16f6122017-09-05 09:23:50 +0100722
TRodziewicz75628d52021-06-18 12:56:27 +0200723keys_rsa_enc_pkcs8_v1_4096: keys_rsa_enc_pkcs8_v1_4096_3des keys_rsa_enc_pkcs8_v1_4096_2des
724
Hanno Beckerd16f6122017-09-05 09:23:50 +0100725###
Antonio Quartullif476b9d2018-02-01 13:54:13 +0800726### PKCS8-v2 encoded, encrypted RSA keys, no PRF specified (default for OpenSSL1.0: hmacWithSHA1)
Hanno Beckerd16f6122017-09-05 09:23:50 +0100727###
728
729### 1024-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100730rsa_pkcs8_pbes2_pbkdf2_1024_3des.der: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100731 $(OPENSSL) pkcs8 -topk8 -v2 des3 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100732all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des.der
733rsa_pkcs8_pbes2_pbkdf2_1024_3des.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100734 $(OPENSSL) pkcs8 -topk8 -v2 des3 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100735all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des.pem
736keys_rsa_enc_pkcs8_v2_1024_3des: rsa_pkcs8_pbes2_pbkdf2_1024_3des.der rsa_pkcs8_pbes2_pbkdf2_1024_3des.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100737
Hanno Becker08a36dd2017-09-29 20:05:23 +0100738rsa_pkcs8_pbes2_pbkdf2_1024_des.der: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100739 $(OPENSSL) pkcs8 -topk8 -v2 des -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100740all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des.der
741rsa_pkcs8_pbes2_pbkdf2_1024_des.pem: rsa_pkcs1_1024_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100742 $(OPENSSL) pkcs8 -topk8 -v2 des -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100743all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des.pem
744keys_rsa_enc_pkcs8_v2_1024_des: rsa_pkcs8_pbes2_pbkdf2_1024_des.der rsa_pkcs8_pbes2_pbkdf2_1024_des.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100745
746keys_rsa_enc_pkcs8_v2_1024: keys_rsa_enc_pkcs8_v2_1024_3des keys_rsa_enc_pkcs8_v2_1024_des
747
748### 2048-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100749rsa_pkcs8_pbes2_pbkdf2_2048_3des.der: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100750 $(OPENSSL) pkcs8 -topk8 -v2 des3 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100751all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des.der
752rsa_pkcs8_pbes2_pbkdf2_2048_3des.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100753 $(OPENSSL) pkcs8 -topk8 -v2 des3 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100754all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des.pem
755keys_rsa_enc_pkcs8_v2_2048_3des: rsa_pkcs8_pbes2_pbkdf2_2048_3des.der rsa_pkcs8_pbes2_pbkdf2_2048_3des.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100756
Hanno Becker08a36dd2017-09-29 20:05:23 +0100757rsa_pkcs8_pbes2_pbkdf2_2048_des.der: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100758 $(OPENSSL) pkcs8 -topk8 -v2 des -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100759all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des.der
760rsa_pkcs8_pbes2_pbkdf2_2048_des.pem: rsa_pkcs1_2048_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100761 $(OPENSSL) pkcs8 -topk8 -v2 des -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100762all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des.pem
763keys_rsa_enc_pkcs8_v2_2048_des: rsa_pkcs8_pbes2_pbkdf2_2048_des.der rsa_pkcs8_pbes2_pbkdf2_2048_des.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100764
765keys_rsa_enc_pkcs8_v2_2048: keys_rsa_enc_pkcs8_v2_2048_3des keys_rsa_enc_pkcs8_v2_2048_des
766
767### 4096-bit
Hanno Becker08a36dd2017-09-29 20:05:23 +0100768rsa_pkcs8_pbes2_pbkdf2_4096_3des.der: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100769 $(OPENSSL) pkcs8 -topk8 -v2 des3 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100770all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des.der
771rsa_pkcs8_pbes2_pbkdf2_4096_3des.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100772 $(OPENSSL) pkcs8 -topk8 -v2 des3 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100773all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des.pem
774keys_rsa_enc_pkcs8_v2_4096_3des: rsa_pkcs8_pbes2_pbkdf2_4096_3des.der rsa_pkcs8_pbes2_pbkdf2_4096_3des.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100775
Hanno Becker08a36dd2017-09-29 20:05:23 +0100776rsa_pkcs8_pbes2_pbkdf2_4096_des.der: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100777 $(OPENSSL) pkcs8 -topk8 -v2 des -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100778all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des.der
779rsa_pkcs8_pbes2_pbkdf2_4096_des.pem: rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100780 $(OPENSSL) pkcs8 -topk8 -v2 des -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
Hanno Becker08a36dd2017-09-29 20:05:23 +0100781all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des.pem
782keys_rsa_enc_pkcs8_v2_4096_des: rsa_pkcs8_pbes2_pbkdf2_4096_des.der rsa_pkcs8_pbes2_pbkdf2_4096_des.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +0100783
784keys_rsa_enc_pkcs8_v2_4096: keys_rsa_enc_pkcs8_v2_4096_3des keys_rsa_enc_pkcs8_v2_4096_des
785
786###
Antonio Quartullif476b9d2018-02-01 13:54:13 +0800787### PKCS8-v2 encoded, encrypted RSA keys, PRF hmacWithSHA224
788###
789
790### 1024-bit
791rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha224.der: rsa_pkcs1_1024_clear.pem
792 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA224 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
793all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha224.der
794rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha224.pem: rsa_pkcs1_1024_clear.pem
795 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA224 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
796all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha224.pem
797keys_rsa_enc_pkcs8_v2_1024_3des_sha224: rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha224.der rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha224.pem
798
799rsa_pkcs8_pbes2_pbkdf2_1024_des_sha224.der: rsa_pkcs1_1024_clear.pem
800 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA224 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
801all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha224.der
802rsa_pkcs8_pbes2_pbkdf2_1024_des_sha224.pem: rsa_pkcs1_1024_clear.pem
803 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA224 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
804all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha224.pem
805keys_rsa_enc_pkcs8_v2_1024_des_sha224: rsa_pkcs8_pbes2_pbkdf2_1024_des_sha224.der rsa_pkcs8_pbes2_pbkdf2_1024_des_sha224.pem
806
807keys_rsa_enc_pkcs8_v2_1024_sha224: keys_rsa_enc_pkcs8_v2_1024_3des_sha224 keys_rsa_enc_pkcs8_v2_1024_des_sha224
808
809### 2048-bit
810rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha224.der: rsa_pkcs1_2048_clear.pem
811 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA224 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
812all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha224.der
813rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha224.pem: rsa_pkcs1_2048_clear.pem
814 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA224 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
815all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha224.pem
816keys_rsa_enc_pkcs8_v2_2048_3des_sha224: rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha224.der rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha224.pem
817
818rsa_pkcs8_pbes2_pbkdf2_2048_des_sha224.der: rsa_pkcs1_2048_clear.pem
819 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA224 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
820all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha224.der
821rsa_pkcs8_pbes2_pbkdf2_2048_des_sha224.pem: rsa_pkcs1_2048_clear.pem
822 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA224 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
823all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha224.pem
824keys_rsa_enc_pkcs8_v2_2048_des_sha224: rsa_pkcs8_pbes2_pbkdf2_2048_des_sha224.der rsa_pkcs8_pbes2_pbkdf2_2048_des_sha224.pem
825
826keys_rsa_enc_pkcs8_v2_2048_sha224: keys_rsa_enc_pkcs8_v2_2048_3des_sha224 keys_rsa_enc_pkcs8_v2_2048_des_sha224
827
828### 4096-bit
829rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha224.der: rsa_pkcs1_4096_clear.pem
830 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA224 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
831all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha224.der
832rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha224.pem: rsa_pkcs1_4096_clear.pem
833 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA224 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
834all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha224.pem
835keys_rsa_enc_pkcs8_v2_4096_3des_sha224: rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha224.der rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha224.pem
836
837rsa_pkcs8_pbes2_pbkdf2_4096_des_sha224.der: rsa_pkcs1_4096_clear.pem
838 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA224 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
839all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha224.der
840rsa_pkcs8_pbes2_pbkdf2_4096_des_sha224.pem: rsa_pkcs1_4096_clear.pem
841 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA224 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
842all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha224.pem
843keys_rsa_enc_pkcs8_v2_4096_des_sha224: rsa_pkcs8_pbes2_pbkdf2_4096_des_sha224.der rsa_pkcs8_pbes2_pbkdf2_4096_des_sha224.pem
844
845keys_rsa_enc_pkcs8_v2_4096_sha224: keys_rsa_enc_pkcs8_v2_4096_3des_sha224 keys_rsa_enc_pkcs8_v2_4096_des_sha224
846
847###
848### PKCS8-v2 encoded, encrypted RSA keys, PRF hmacWithSHA256
849###
850
851### 1024-bit
852rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha256.der: rsa_pkcs1_1024_clear.pem
853 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA256 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
854all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha256.der
855rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha256.pem: rsa_pkcs1_1024_clear.pem
856 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA256 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
857all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha256.pem
858keys_rsa_enc_pkcs8_v2_1024_3des_sha256: rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha256.der rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha256.pem
859
860rsa_pkcs8_pbes2_pbkdf2_1024_des_sha256.der: rsa_pkcs1_1024_clear.pem
861 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA256 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
862all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha256.der
863rsa_pkcs8_pbes2_pbkdf2_1024_des_sha256.pem: rsa_pkcs1_1024_clear.pem
864 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA256 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
865all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha256.pem
866keys_rsa_enc_pkcs8_v2_1024_des_sha256: rsa_pkcs8_pbes2_pbkdf2_1024_des_sha256.der rsa_pkcs8_pbes2_pbkdf2_1024_des_sha256.pem
867
868keys_rsa_enc_pkcs8_v2_1024_sha256: keys_rsa_enc_pkcs8_v2_1024_3des_sha256 keys_rsa_enc_pkcs8_v2_1024_des_sha256
869
870### 2048-bit
871rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha256.der: rsa_pkcs1_2048_clear.pem
872 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA256 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
873all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha256.der
874rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha256.pem: rsa_pkcs1_2048_clear.pem
875 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA256 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
876all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha256.pem
877keys_rsa_enc_pkcs8_v2_2048_3des_sha256: rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha256.der rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha256.pem
878
879rsa_pkcs8_pbes2_pbkdf2_2048_des_sha256.der: rsa_pkcs1_2048_clear.pem
880 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA256 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
881all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha256.der
882rsa_pkcs8_pbes2_pbkdf2_2048_des_sha256.pem: rsa_pkcs1_2048_clear.pem
883 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA256 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
884all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha256.pem
885keys_rsa_enc_pkcs8_v2_2048_des_sha256: rsa_pkcs8_pbes2_pbkdf2_2048_des_sha256.der rsa_pkcs8_pbes2_pbkdf2_2048_des_sha256.pem
886
887keys_rsa_enc_pkcs8_v2_2048_sha256: keys_rsa_enc_pkcs8_v2_2048_3des_sha256 keys_rsa_enc_pkcs8_v2_2048_des_sha256
888
889### 4096-bit
890rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha256.der: rsa_pkcs1_4096_clear.pem
891 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA256 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
892all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha256.der
893rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha256.pem: rsa_pkcs1_4096_clear.pem
894 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA256 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
895all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha256.pem
896keys_rsa_enc_pkcs8_v2_4096_3des_sha256: rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha256.der rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha256.pem
897
898rsa_pkcs8_pbes2_pbkdf2_4096_des_sha256.der: rsa_pkcs1_4096_clear.pem
899 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA256 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
900all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha256.der
901rsa_pkcs8_pbes2_pbkdf2_4096_des_sha256.pem: rsa_pkcs1_4096_clear.pem
902 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA256 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
903all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha256.pem
904keys_rsa_enc_pkcs8_v2_4096_des_sha256: rsa_pkcs8_pbes2_pbkdf2_4096_des_sha256.der rsa_pkcs8_pbes2_pbkdf2_4096_des_sha256.pem
905
906keys_rsa_enc_pkcs8_v2_4096_sha256: keys_rsa_enc_pkcs8_v2_4096_3des_sha256 keys_rsa_enc_pkcs8_v2_4096_des_sha256
907
908###
909### PKCS8-v2 encoded, encrypted RSA keys, PRF hmacWithSHA384
910###
911
912### 1024-bit
913rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha384.der: rsa_pkcs1_1024_clear.pem
914 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA384 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
915all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha384.der
916rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha384.pem: rsa_pkcs1_1024_clear.pem
917 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA384 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
918all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha384.pem
919keys_rsa_enc_pkcs8_v2_1024_3des_sha384: rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha384.der rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha384.pem
920
921rsa_pkcs8_pbes2_pbkdf2_1024_des_sha384.der: rsa_pkcs1_1024_clear.pem
922 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA384 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
923all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha384.der
924rsa_pkcs8_pbes2_pbkdf2_1024_des_sha384.pem: rsa_pkcs1_1024_clear.pem
925 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA384 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
926all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha384.pem
927keys_rsa_enc_pkcs8_v2_1024_des_sha384: rsa_pkcs8_pbes2_pbkdf2_1024_des_sha384.der rsa_pkcs8_pbes2_pbkdf2_1024_des_sha384.pem
928
929keys_rsa_enc_pkcs8_v2_1024_sha384: keys_rsa_enc_pkcs8_v2_1024_3des_sha384 keys_rsa_enc_pkcs8_v2_1024_des_sha384
930
931### 2048-bit
932rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha384.der: rsa_pkcs1_2048_clear.pem
933 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA384 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
934all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha384.der
935rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha384.pem: rsa_pkcs1_2048_clear.pem
936 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA384 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
937all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha384.pem
938keys_rsa_enc_pkcs8_v2_2048_3des_sha384: rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha384.der rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha384.pem
939
940rsa_pkcs8_pbes2_pbkdf2_2048_des_sha384.der: rsa_pkcs1_2048_clear.pem
941 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA384 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
942all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha384.der
943rsa_pkcs8_pbes2_pbkdf2_2048_des_sha384.pem: rsa_pkcs1_2048_clear.pem
944 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA384 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
945all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha384.pem
946keys_rsa_enc_pkcs8_v2_2048_des_sha384: rsa_pkcs8_pbes2_pbkdf2_2048_des_sha384.der rsa_pkcs8_pbes2_pbkdf2_2048_des_sha384.pem
947
948keys_rsa_enc_pkcs8_v2_2048_sha384: keys_rsa_enc_pkcs8_v2_2048_3des_sha384 keys_rsa_enc_pkcs8_v2_2048_des_sha384
949
950### 4096-bit
951rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha384.der: rsa_pkcs1_4096_clear.pem
952 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA384 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
953all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha384.der
954rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha384.pem: rsa_pkcs1_4096_clear.pem
955 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA384 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
956all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha384.pem
957keys_rsa_enc_pkcs8_v2_4096_3des_sha384: rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha384.der rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha384.pem
958
959rsa_pkcs8_pbes2_pbkdf2_4096_des_sha384.der: rsa_pkcs1_4096_clear.pem
960 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA384 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
961all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha384.der
962rsa_pkcs8_pbes2_pbkdf2_4096_des_sha384.pem: rsa_pkcs1_4096_clear.pem
963 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA384 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
964all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha384.pem
965keys_rsa_enc_pkcs8_v2_4096_des_sha384: rsa_pkcs8_pbes2_pbkdf2_4096_des_sha384.der rsa_pkcs8_pbes2_pbkdf2_4096_des_sha384.pem
966
967keys_rsa_enc_pkcs8_v2_4096_sha384: keys_rsa_enc_pkcs8_v2_4096_3des_sha384 keys_rsa_enc_pkcs8_v2_4096_des_sha384
968
969###
970### PKCS8-v2 encoded, encrypted RSA keys, PRF hmacWithSHA512
971###
972
973### 1024-bit
974rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha512.der: rsa_pkcs1_1024_clear.pem
975 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA512 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
976all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha512.der
977rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha512.pem: rsa_pkcs1_1024_clear.pem
978 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA512 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
979all_final += rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha512.pem
980keys_rsa_enc_pkcs8_v2_1024_3des_sha512: rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha512.der rsa_pkcs8_pbes2_pbkdf2_1024_3des_sha512.pem
981
982rsa_pkcs8_pbes2_pbkdf2_1024_des_sha512.der: rsa_pkcs1_1024_clear.pem
983 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA512 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
984all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha512.der
985rsa_pkcs8_pbes2_pbkdf2_1024_des_sha512.pem: rsa_pkcs1_1024_clear.pem
986 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA512 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
987all_final += rsa_pkcs8_pbes2_pbkdf2_1024_des_sha512.pem
988keys_rsa_enc_pkcs8_v2_1024_des_sha512: rsa_pkcs8_pbes2_pbkdf2_1024_des_sha512.der rsa_pkcs8_pbes2_pbkdf2_1024_des_sha512.pem
989
990keys_rsa_enc_pkcs8_v2_1024_sha512: keys_rsa_enc_pkcs8_v2_1024_3des_sha512 keys_rsa_enc_pkcs8_v2_1024_des_sha512
991
992### 2048-bit
993rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha512.der: rsa_pkcs1_2048_clear.pem
994 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA512 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
995all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha512.der
996rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha512.pem: rsa_pkcs1_2048_clear.pem
997 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA512 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
998all_final += rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha512.pem
999keys_rsa_enc_pkcs8_v2_2048_3des_sha512: rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha512.der rsa_pkcs8_pbes2_pbkdf2_2048_3des_sha512.pem
1000
1001rsa_pkcs8_pbes2_pbkdf2_2048_des_sha512.der: rsa_pkcs1_2048_clear.pem
1002 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA512 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
1003all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha512.der
1004rsa_pkcs8_pbes2_pbkdf2_2048_des_sha512.pem: rsa_pkcs1_2048_clear.pem
1005 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA512 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
1006all_final += rsa_pkcs8_pbes2_pbkdf2_2048_des_sha512.pem
1007keys_rsa_enc_pkcs8_v2_2048_des_sha512: rsa_pkcs8_pbes2_pbkdf2_2048_des_sha512.der rsa_pkcs8_pbes2_pbkdf2_2048_des_sha512.pem
1008
1009keys_rsa_enc_pkcs8_v2_2048_sha512: keys_rsa_enc_pkcs8_v2_2048_3des_sha512 keys_rsa_enc_pkcs8_v2_2048_des_sha512
1010
1011### 4096-bit
1012rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha512.der: rsa_pkcs1_4096_clear.pem
1013 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA512 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
1014all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha512.der
1015rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha512.pem: rsa_pkcs1_4096_clear.pem
1016 $(OPENSSL) pkcs8 -topk8 -v2 des3 -v2prf hmacWithSHA512 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
1017all_final += rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha512.pem
1018keys_rsa_enc_pkcs8_v2_4096_3des_sha512: rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha512.der rsa_pkcs8_pbes2_pbkdf2_4096_3des_sha512.pem
1019
1020rsa_pkcs8_pbes2_pbkdf2_4096_des_sha512.der: rsa_pkcs1_4096_clear.pem
1021 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA512 -inform PEM -in $< -outform DER -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
1022all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha512.der
1023rsa_pkcs8_pbes2_pbkdf2_4096_des_sha512.pem: rsa_pkcs1_4096_clear.pem
1024 $(OPENSSL) pkcs8 -topk8 -v2 des -v2prf hmacWithSHA512 -inform PEM -in $< -outform PEM -out $@ -passout "pass:$(keys_rsa_pkcs8_pwd)"
1025all_final += rsa_pkcs8_pbes2_pbkdf2_4096_des_sha512.pem
1026keys_rsa_enc_pkcs8_v2_4096_des_sha512: rsa_pkcs8_pbes2_pbkdf2_4096_des_sha512.der rsa_pkcs8_pbes2_pbkdf2_4096_des_sha512.pem
1027
1028keys_rsa_enc_pkcs8_v2_4096_sha512: keys_rsa_enc_pkcs8_v2_4096_3des_sha512 keys_rsa_enc_pkcs8_v2_4096_des_sha512
1029
1030###
Hanno Beckerd16f6122017-09-05 09:23:50 +01001031### Rules to generate all RSA keys from a particular class
1032###
1033
1034### Generate basic unencrypted RSA keys
Hanno Becker08a36dd2017-09-29 20:05:23 +01001035keys_rsa_unenc: rsa_pkcs1_1024_clear.pem rsa_pkcs1_2048_clear.pem rsa_pkcs1_4096_clear.pem
Hanno Beckerd16f6122017-09-05 09:23:50 +01001036
1037### Generate PKCS1-encoded encrypted RSA keys
1038keys_rsa_enc_basic: keys_rsa_enc_basic_1024 keys_rsa_enc_basic_2048 keys_rsa_enc_basic_4096
1039
1040### Generate PKCS8-v1 encrypted RSA keys
1041keys_rsa_enc_pkcs8_v1: keys_rsa_enc_pkcs8_v1_1024 keys_rsa_enc_pkcs8_v1_2048 keys_rsa_enc_pkcs8_v1_4096
1042
1043### Generate PKCS8-v2 encrypted RSA keys
Antonio Quartullif476b9d2018-02-01 13:54:13 +08001044keys_rsa_enc_pkcs8_v2: keys_rsa_enc_pkcs8_v2_1024 keys_rsa_enc_pkcs8_v2_2048 keys_rsa_enc_pkcs8_v2_4096 keys_rsa_enc_pkcs8_v2_1024_sha224 keys_rsa_enc_pkcs8_v2_2048_sha224 keys_rsa_enc_pkcs8_v2_4096_sha224 keys_rsa_enc_pkcs8_v2_1024_sha256 keys_rsa_enc_pkcs8_v2_2048_sha256 keys_rsa_enc_pkcs8_v2_4096_sha256 keys_rsa_enc_pkcs8_v2_1024_sha384 keys_rsa_enc_pkcs8_v2_2048_sha384 keys_rsa_enc_pkcs8_v2_4096_sha384 keys_rsa_enc_pkcs8_v2_1024_sha512 keys_rsa_enc_pkcs8_v2_2048_sha512 keys_rsa_enc_pkcs8_v2_4096_sha512
Hanno Beckerd16f6122017-09-05 09:23:50 +01001045
1046### Generate all RSA keys
1047keys_rsa_all: keys_rsa_unenc keys_rsa_enc_basic keys_rsa_enc_pkcs8_v1 keys_rsa_enc_pkcs8_v2
1048
Jethro Beekmand2df9362018-02-16 13:11:04 -08001049################################################################
1050#### Generate various EC keys
1051################################################################
Gilles Peskineea8d6972017-11-28 17:30:52 +01001052
Jethro Beekmand2df9362018-02-16 13:11:04 -08001053###
1054### PKCS8 encoded
1055###
1056
1057ec_prv.pk8.der:
1058 $(OPENSSL) genpkey -algorithm EC -pkeyopt ec_paramgen_curve:prime192v1 -pkeyopt ec_param_enc:named_curve -out $@ -outform DER
1059all_final += ec_prv.pk8.der
1060
1061# ### Instructions for creating `ec_prv.pk8nopub.der`,
1062# ### `ec_prv.pk8nopubparam.der`, and `ec_prv.pk8param.der` by hand from
1063# ### `ec_prv.pk8.der`.
1064#
1065# These instructions assume you are familiar with ASN.1 DER encoding and can
1066# use a hex editor to manipulate DER.
1067#
1068# The relevant ASN.1 definitions for a PKCS#8 encoded Elliptic Curve key are:
1069#
1070# PrivateKeyInfo ::= SEQUENCE {
1071# version Version,
1072# privateKeyAlgorithm PrivateKeyAlgorithmIdentifier,
1073# privateKey PrivateKey,
1074# attributes [0] IMPLICIT Attributes OPTIONAL
1075# }
1076#
1077# AlgorithmIdentifier ::= SEQUENCE {
1078# algorithm OBJECT IDENTIFIER,
1079# parameters ANY DEFINED BY algorithm OPTIONAL
1080# }
1081#
1082# ECParameters ::= CHOICE {
1083# namedCurve OBJECT IDENTIFIER
1084# -- implicitCurve NULL
1085# -- specifiedCurve SpecifiedECDomain
1086# }
1087#
1088# ECPrivateKey ::= SEQUENCE {
1089# version INTEGER { ecPrivkeyVer1(1) } (ecPrivkeyVer1),
1090# privateKey OCTET STRING,
1091# parameters [0] ECParameters {{ NamedCurve }} OPTIONAL,
1092# publicKey [1] BIT STRING OPTIONAL
1093# }
1094#
1095# `ec_prv.pk8.der` as generatde above by OpenSSL should have the following
1096# fields:
1097#
1098# * privateKeyAlgorithm namedCurve
1099# * privateKey.parameters NOT PRESENT
1100# * privateKey.publicKey PRESENT
1101# * attributes NOT PRESENT
1102#
1103# # ec_prv.pk8nopub.der
1104#
1105# Take `ec_prv.pk8.der` and remove `privateKey.publicKey`.
1106#
1107# # ec_prv.pk8nopubparam.der
1108#
1109# Take `ec_prv.pk8nopub.der` and add `privateKey.parameters`, the same value as
1110# `privateKeyAlgorithm.namedCurve`. Don't forget to add the explicit tag.
1111#
1112# # ec_prv.pk8param.der
1113#
1114# Take `ec_prv.pk8.der` and add `privateKey.parameters`, the same value as
1115# `privateKeyAlgorithm.namedCurve`. Don't forget to add the explicit tag.
1116
1117ec_prv.pk8.pem: ec_prv.pk8.der
1118 $(OPENSSL) pkey -in $< -inform DER -out $@
1119all_final += ec_prv.pk8.pem
1120ec_prv.pk8nopub.pem: ec_prv.pk8nopub.der
1121 $(OPENSSL) pkey -in $< -inform DER -out $@
1122all_final += ec_prv.pk8nopub.pem
1123ec_prv.pk8nopubparam.pem: ec_prv.pk8nopubparam.der
1124 $(OPENSSL) pkey -in $< -inform DER -out $@
1125all_final += ec_prv.pk8nopubparam.pem
1126ec_prv.pk8param.pem: ec_prv.pk8param.der
1127 $(OPENSSL) pkey -in $< -inform DER -out $@
1128all_final += ec_prv.pk8param.pem
Gilles Peskineea8d6972017-11-28 17:30:52 +01001129
Valerio Setti8820b572023-04-27 10:03:08 +02001130ec_pub.pem: ec_prv.sec1.der
1131 $(OPENSSL) pkey -in $< -inform DER -outform PEM -pubout -out $@
1132all_final += ec_pub.pem
Valerio Settic8b78652023-04-26 12:24:26 +02001133
Valerio Setti0c960162023-01-16 16:56:30 +01001134ec_prv.sec1.comp.pem: ec_prv.sec1.pem
1135 $(OPENSSL) ec -in $< -out $@ -conv_form compressed
1136all_final += ec_prv.sec1.comp.pem
1137
1138ec_224_prv.comp.pem: ec_224_prv.pem
1139 $(OPENSSL) ec -in $< -out $@ -conv_form compressed
1140all_final += ec_224_prv.comp.pem
1141
1142ec_256_prv.comp.pem: ec_256_prv.pem
1143 $(OPENSSL) ec -in $< -out $@ -conv_form compressed
1144all_final += ec_256_prv.comp.pem
1145
1146ec_384_prv.comp.pem: ec_384_prv.pem
1147 $(OPENSSL) ec -in $< -out $@ -conv_form compressed
1148all_final += ec_384_prv.comp.pem
1149
1150ec_521_prv.comp.pem: ec_521_prv.pem
1151 $(OPENSSL) ec -in $< -out $@ -conv_form compressed
1152all_final += ec_521_prv.comp.pem
1153
1154ec_bp256_prv.comp.pem: ec_bp256_prv.pem
1155 $(OPENSSL) ec -in $< -out $@ -conv_form compressed
1156all_final += ec_bp256_prv.comp.pem
1157
1158ec_bp384_prv.comp.pem: ec_bp384_prv.pem
1159 $(OPENSSL) ec -in $< -out $@ -conv_form compressed
1160all_final += ec_bp384_prv.comp.pem
1161
1162ec_bp512_prv.comp.pem: ec_bp512_prv.pem
1163 $(OPENSSL) ec -in $< -out $@ -conv_form compressed
1164all_final += ec_bp512_prv.comp.pem
1165
1166ec_pub.comp.pem: ec_pub.pem
1167 $(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
1168all_final += ec_pub.comp.pem
1169
Valerio Settide7bb5b2023-01-25 14:02:03 +01001170ec_224_pub.comp.pem: ec_224_pub.pem
1171 $(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
1172all_final += ec_224_pub.comp.pem
1173
Valerio Setti0c960162023-01-16 16:56:30 +01001174ec_256_pub.comp.pem: ec_256_pub.pem
1175 $(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
1176all_final += ec_256_pub.comp.pem
1177
1178ec_384_pub.comp.pem: ec_384_pub.pem
1179 $(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
Valerio Settiff159532023-01-16 17:34:53 +01001180all_final += ec_384_pub.comp.pem
Valerio Setti0c960162023-01-16 16:56:30 +01001181
1182ec_521_pub.comp.pem: ec_521_pub.pem
1183 $(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
1184all_final += ec_521_pub.comp.pem
1185
1186ec_bp256_pub.comp.pem: ec_bp256_pub.pem
1187 $(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
1188all_final += ec_bp256_pub.comp.pem
1189
1190ec_bp384_pub.comp.pem: ec_bp384_pub.pem
1191 $(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
1192all_final += ec_bp384_pub.comp.pem
1193
1194ec_bp512_pub.comp.pem: ec_bp512_pub.pem
1195 $(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
1196all_final += ec_bp512_pub.comp.pem
1197
Jethro Beekman01672442023-04-19 14:08:14 +02001198ec_x25519_prv.der:
1199 $(OPENSSL) genpkey -algorithm X25519 -out $@ -outform DER
1200all_final += ec_x25519_prv.der
1201
Pengyu Lvd1200ee2023-05-30 18:54:39 +08001202ec_x25519_pub.der: ec_x25519_prv.der
1203 $(OPENSSL) pkey -in $< -inform DER -out $@ -outform DER -pubout
Jethro Beekman01672442023-04-19 14:08:14 +02001204all_final += ec_x25519_pub.der
1205
Pengyu Lvd1200ee2023-05-30 18:54:39 +08001206ec_x25519_prv.pem: ec_x25519_prv.der
Jethro Beekman01672442023-04-19 14:08:14 +02001207 $(OPENSSL) pkey -in $< -inform DER -out $@
1208all_final += ec_x25519_prv.pem
1209
Pengyu Lv21e59392023-06-05 17:40:15 +08001210ec_x25519_pub.pem: ec_x25519_prv.der
1211 $(OPENSSL) pkey -in $< -inform DER -out $@ -pubout
Jethro Beekman01672442023-04-19 14:08:14 +02001212all_final += ec_x25519_pub.pem
1213
1214ec_x448_prv.der:
1215 $(OPENSSL) genpkey -algorithm X448 -out $@ -outform DER
1216all_final += ec_x448_prv.der
1217
Pengyu Lvd1200ee2023-05-30 18:54:39 +08001218ec_x448_pub.der: ec_x448_prv.der
1219 $(OPENSSL) pkey -in $< -inform DER -out $@ -outform DER -pubout
Jethro Beekman01672442023-04-19 14:08:14 +02001220all_final += ec_x448_pub.der
1221
Pengyu Lvd1200ee2023-05-30 18:54:39 +08001222ec_x448_prv.pem: ec_x448_prv.der
Jethro Beekman01672442023-04-19 14:08:14 +02001223 $(OPENSSL) pkey -in $< -inform DER -out $@
1224all_final += ec_x448_prv.pem
1225
Pengyu Lv21e59392023-06-05 17:40:15 +08001226ec_x448_pub.pem: ec_x448_prv.der
1227 $(OPENSSL) pkey -in $< -inform DER -out $@ -pubout
Jethro Beekman01672442023-04-19 14:08:14 +02001228all_final += ec_x448_pub.pem
1229
Gilles Peskineea8d6972017-11-28 17:30:52 +01001230################################################################
Valerio Setti547b3a42023-04-24 10:24:37 +02001231#### Convert PEM keys to DER format
Valerio Setti8b7d4322023-04-18 11:08:44 +02001232################################################################
1233server1.pubkey.der: server1.pubkey
1234 $(OPENSSL) pkey -pubin -in $< -out $@ -outform DER
1235all_final += server1.pubkey.der
1236
Valerio Setti232a0062023-04-18 12:53:19 +02001237rsa4096_pub.der: rsa4096_pub.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001238 $(OPENSSL) pkey -pubin -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001239all_final += rsa4096_pub.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001240
Valerio Setti232a0062023-04-18 12:53:19 +02001241ec_pub.der: ec_pub.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001242 $(OPENSSL) pkey -pubin -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001243all_final += ec_pub.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001244
Valerio Setti232a0062023-04-18 12:53:19 +02001245ec_521_pub.der: ec_521_pub.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001246 $(OPENSSL) pkey -pubin -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001247all_final += ec_521_pub.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001248
Valerio Setti232a0062023-04-18 12:53:19 +02001249ec_bp512_pub.der: ec_bp512_pub.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001250 $(OPENSSL) pkey -pubin -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001251all_final += ec_bp512_pub.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001252
1253server1.key.der: server1.key
1254 $(OPENSSL) pkey -in $< -out $@ -outform DER
1255all_final += server1.key.der
1256
Valerio Setti232a0062023-04-18 12:53:19 +02001257rsa4096_prv.der: rsa4096_prv.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001258 $(OPENSSL) pkey -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001259all_final += rsa4096_prv.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001260
Valerio Setti232a0062023-04-18 12:53:19 +02001261ec_prv.sec1.der: ec_prv.sec1.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001262 $(OPENSSL) pkey -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001263all_final += ec_prv.sec1.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001264
Valerio Setti232a0062023-04-18 12:53:19 +02001265ec_256_long_prv.der: ec_256_long_prv.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001266 $(OPENSSL) pkey -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001267all_final += ec_256_long_prv.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001268
Valerio Setti232a0062023-04-18 12:53:19 +02001269ec_521_prv.der: ec_521_prv.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001270 $(OPENSSL) pkey -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001271all_final += ec_521_prv.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001272
Valerio Setti232a0062023-04-18 12:53:19 +02001273ec_521_short_prv.der: ec_521_short_prv.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001274 $(OPENSSL) pkey -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001275all_final += ec_521_short_prv.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001276
Valerio Setti232a0062023-04-18 12:53:19 +02001277ec_bp512_prv.der: ec_bp512_prv.pem
Valerio Setti8b7d4322023-04-18 11:08:44 +02001278 $(OPENSSL) pkey -in $< -out $@ -outform DER
Valerio Setti232a0062023-04-18 12:53:19 +02001279all_final += ec_bp512_prv.der
Valerio Setti8b7d4322023-04-18 11:08:44 +02001280
Gilles Peskinef040a172017-05-05 18:56:12 +02001281################################################################
Hanno Becker50cb93a2018-10-08 17:15:28 +01001282### Generate CSRs for X.509 write test suite
1283################################################################
1284
Jerry Yu54e86322023-06-27 16:40:00 +08001285parse_input/server1.req.sha1 server1.req.sha1: server1.key
Hanno Becker50cb93a2018-10-08 17:15:28 +01001286 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1
1287all_final += server1.req.sha1
1288
Jerry Yu54e86322023-06-27 16:40:00 +08001289parse_input/server1.req.md5 server1.req.md5: server1.key
Hanno Becker50cb93a2018-10-08 17:15:28 +01001290 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=MD5
1291all_final += server1.req.md5
1292
Jerry Yu54e86322023-06-27 16:40:00 +08001293parse_input/server1.req.sha224 server1.req.sha224: server1.key
Hanno Becker50cb93a2018-10-08 17:15:28 +01001294 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA224
1295all_final += server1.req.sha224
1296
Jerry Yu54e86322023-06-27 16:40:00 +08001297parse_input/server1.req.sha256 server1.req.sha256: server1.key
Hanno Becker50cb93a2018-10-08 17:15:28 +01001298 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA256
1299all_final += server1.req.sha256
1300
Valerio Setti48e8fc72022-10-19 15:14:29 +02001301server1.req.sha256.ext: server1.key
1302 # Generating this with OpenSSL as a comparison point to test we're getting the same result
Przemek Stekiel8e83d3a2023-02-14 12:01:16 +01001303 openssl req -new -out $@ -key $< -subj '/C=NL/O=PolarSSL/CN=PolarSSL Server 1' -sha256 -addext "extendedKeyUsage=serverAuth" -addext "subjectAltName=URI:http://pki.example.com/,IP:127.1.1.0,DNS:example.com"
Valerio Setti48e8fc72022-10-19 15:14:29 +02001304all_final += server1.req.sha256.ext
1305
Jerry Yu54e86322023-06-27 16:40:00 +08001306parse_input/server1.req.sha384 server1.req.sha384: server1.key
Hanno Becker50cb93a2018-10-08 17:15:28 +01001307 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA384
1308all_final += server1.req.sha384
1309
Jerry Yu54e86322023-06-27 16:40:00 +08001310parse_input/server1.req.sha512 server1.req.sha512: server1.key
Hanno Becker50cb93a2018-10-08 17:15:28 +01001311 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA512
1312all_final += server1.req.sha512
1313
1314server1.req.cert_type: server1.key
1315 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< ns_cert_type=ssl_server subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1
1316all_final += server1.req.cert_type
1317
1318server1.req.key_usage: server1.key
1319 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< key_usage=digital_signature,non_repudiation,key_encipherment subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1
1320all_final += server1.req.key_usage
1321
1322server1.req.ku-ct: server1.key
1323 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< key_usage=digital_signature,non_repudiation,key_encipherment ns_cert_type=ssl_server subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1
1324all_final += server1.req.ku-ct
1325
Andres Amaya Garcia7067f812018-09-26 10:51:16 +01001326server1.req.key_usage_empty: server1.key
1327 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1 force_key_usage=1
1328all_final += server1.req.key_usage_empty
1329
1330server1.req.cert_type_empty: server1.key
1331 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1 force_ns_cert_type=1
1332all_final += server1.req.cert_type_empty
1333
Jerry Yu92d1ec62023-06-27 16:53:25 +08001334parse_input/server1.req.commas.sha256: server1.key
Werner Lewisb33dacd2022-05-20 12:48:46 +01001335 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL\, Commas,CN=PolarSSL Server 1" md=SHA256
Werner Lewisb33dacd2022-05-20 12:48:46 +01001336
Hanno Beckerebc1f402018-10-31 16:35:59 +00001337# server2*
1338
Hanno Becker226eedb2020-08-17 12:14:00 +01001339server2_pwd_ec = PolarSSLTest
1340
Hanno Beckerebc1f402018-10-31 16:35:59 +00001341server2.req.sha256: server2.key
1342 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=localhost" md=SHA256
1343all_intermediate += server2.req.sha256
1344
Jerry Yu54e86322023-06-27 16:40:00 +08001345parse_input/server2.crt.der server2.crt.der: server2.crt
Hanno Beckere21387e2019-03-12 16:49:26 +00001346 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1347all_final += server2.crt.der
1348
1349server2-sha256.crt.der: server2-sha256.crt
1350 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1351all_final += server2-sha256.crt.der
1352
1353server2.key.der: server2.key
1354 $(OPENSSL) pkey -in $< -out $@ -inform PEM -outform DER
1355all_final += server2.key.der
1356
Hanno Becker226eedb2020-08-17 12:14:00 +01001357server2.key.enc: server2.key
1358 $(OPENSSL) rsa -aes256 -in $< -out $@ -passout "pass:$(server2_pwd_ec)"
1359all_final += server2.key.enc
1360
Hanno Becker0dd11392018-11-02 08:56:15 +00001361# server5*
1362
Jerry Yub7b40b42023-04-23 17:49:39 +08001363server5.csr: server5.key
1364 $(OPENSSL) req -new -subj "/C=NL/O=PolarSSL/CN=localhost" \
1365 -key $< -out $@
1366all_intermediate += server5.csr
Jerry Yu54e86322023-06-27 16:40:00 +08001367parse_input/server5.crt server5.crt: server5-sha256.crt
Jerry Yu540b0222023-05-12 16:31:26 +08001368 cp $< $@
1369all_intermediate += server5-sha256.crt
1370server5-sha%.crt: server5.csr $(test_ca_crt_file_ec) $(test_ca_key_file_ec) server5.crt.openssl.v3_ext
1371 $(OPENSSL) x509 -req -CA $(test_ca_crt_file_ec) -CAkey $(test_ca_key_file_ec) \
1372 -extfile server5.crt.openssl.v3_ext -set_serial 9 -days 3650 \
1373 -sha$(@:server5-sha%.crt=%) -in $< -out $@
1374all_final += server5.crt server5-sha1.crt server5-sha224.crt server5-sha384.crt server5-sha512.crt
Jerry Yub7b40b42023-04-23 17:49:39 +08001375
1376server5-badsign.crt: server5.crt
1377 { head -n-2 $<; tail -n-2 $< | sed -e '1s/0\(=*\)$$/_\1/' -e '1s/[^_=]\(=*\)$$/0\1/' -e '1s/_/1/'; } > $@
1378all_final += server5-badsign.crt
1379
Hanno Becker0dd11392018-11-02 08:56:15 +00001380# The use of 'Server 1' in the DN is intentional here, as the DN is hardcoded in the x509_write test suite.'
1381server5.req.ku.sha1: server5.key
1382 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< key_usage=digital_signature,non_repudiation subject_name="C=NL,O=PolarSSL,CN=PolarSSL Server 1" md=SHA1
1383all_final += server5.req.ku.sha1
1384
Jerry Yu964ddb52023-05-09 13:46:38 +08001385# server6*
1386
1387server6.csr: server6.key
1388 $(OPENSSL) req -new -subj "/C=NL/O=PolarSSL/CN=localhost" \
1389 -key $< -out $@
1390all_intermediate += server6.csr
1391server6.crt: server6.csr $(test_ca_crt_file_ec) $(test_ca_key_file_ec)
1392 $(OPENSSL) x509 -req -CA $(test_ca_crt_file_ec) -CAkey $(test_ca_key_file_ec) \
1393 -extfile server5.crt.openssl.v3_ext -set_serial 10 -days 3650 -sha256 -in $< -out $@
1394all_final += server6.crt
1395
Hanno Becker50cb93a2018-10-08 17:15:28 +01001396################################################################
Hanno Becker418a6222017-09-14 07:51:28 +01001397### Generate certificates for CRT write check tests
Gilles Peskineea8d6972017-11-28 17:30:52 +01001398################################################################
1399
Hanno Becker418a6222017-09-14 07:51:28 +01001400### The test files use the Mbed TLS generated certificates server1*.crt,
1401### but for comparison with OpenSSL also rules for OpenSSL-generated
1402### certificates server1*.crt.openssl are offered.
1403###
1404### Known differences:
1405### * OpenSSL encodes trailing zero-bits in bit-strings occurring in X.509 extension
1406### as unused bits, while Mbed TLS doesn't.
Gilles Peskinef040a172017-05-05 18:56:12 +02001407
Hanno Becker418a6222017-09-14 07:51:28 +01001408test_ca_server1_db = test-ca.server1.db
1409test_ca_server1_serial = test-ca.server1.serial
1410test_ca_server1_config_file = test-ca.server1.opensslconf
1411
Hanno Becker50cb93a2018-10-08 17:15:28 +01001412# server1*
Hanno Becker418a6222017-09-14 07:51:28 +01001413
Jerry Yu54e86322023-06-27 16:40:00 +08001414parse_input/server1.crt server1.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Ron Eldor9eeb8612019-02-12 15:03:42 +02001415 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 version=3 output_file=$@
Jerry Yu54e86322023-06-27 16:40:00 +08001416server1.allSubjectAltNames.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Andrzej Kurekccdd9752023-04-01 10:38:30 -04001417 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 version=3 output_file=$@ san=URI:http://pki.example.com\;IP:1.2.3.4\;DN:C=UK,O="Mbed TLS",CN="SubjectAltName test"\;DNS:example.com\;RFC822:mail@example.com
Valerio Setti18b9b032023-01-27 11:47:57 +01001418server1.long_serial.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Valerio Setti856cec42023-01-12 14:56:54 +01001419 echo "112233445566778899aabbccddeeff0011223344" > test-ca.server1.tmp.serial
1420 $(OPENSSL) ca -in server1.req.sha256 -key PolarSSLTest -config test-ca.server1.test_serial.opensslconf -notext -batch -out $@
Valerio Setti18b9b032023-01-27 11:47:57 +01001421server1.80serial.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Valerio Setti856cec42023-01-12 14:56:54 +01001422 echo "8011223344" > test-ca.server1.tmp.serial
1423 $(OPENSSL) ca -in server1.req.sha256 -key PolarSSLTest -config test-ca.server1.test_serial.opensslconf -notext -batch -out $@
Valerio Setti18b9b032023-01-27 11:47:57 +01001424server1.long_serial_FF.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
1425 echo "ffffffffffffffffffffffffffffffff" > test-ca.server1.tmp.serial
1426 $(OPENSSL) ca -in server1.req.sha256 -key PolarSSLTest -config test-ca.server1.test_serial.opensslconf -notext -batch -out $@
Hanno Becker50cb93a2018-10-08 17:15:28 +01001427server1.noauthid.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Ron Eldor9eeb8612019-02-12 15:03:42 +02001428 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA1 authority_identifier=0 version=3 output_file=$@
Jerry Yu92d1ec62023-06-27 16:53:25 +08001429parse_input/server1.crt.der: server1.crt
Ron Eldor9eeb8612019-02-12 15:03:42 +02001430 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA1 authority_identifier=0 version=3 output_file=$@
1431server1.der: server1.crt
Hanno Becker418a6222017-09-14 07:51:28 +01001432 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
Werner Lewisb33dacd2022-05-20 12:48:46 +01001433server1.commas.crt: server1.key server1.req.commas.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
1434 $(MBEDTLS_CERT_WRITE) request_file=server1.req.commas.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 version=3 output_file=$@
1435all_final += server1.crt server1.noauthid.crt server1.crt.der server1.commas.crt
Hanno Becker418a6222017-09-14 07:51:28 +01001436
Jerry Yu54e86322023-06-27 16:40:00 +08001437parse_input/server1.key_usage.crt server1.key_usage.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Ron Eldor9eeb8612019-02-12 15:03:42 +02001438 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 key_usage=digital_signature,non_repudiation,key_encipherment version=3 output_file=$@
Hanno Becker50cb93a2018-10-08 17:15:28 +01001439server1.key_usage_noauthid.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Ron Eldor9eeb8612019-02-12 15:03:42 +02001440 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 key_usage=digital_signature,non_repudiation,key_encipherment authority_identifier=0 version=3 output_file=$@
Hanno Becker418a6222017-09-14 07:51:28 +01001441server1.key_usage.der: server1.key_usage.crt
1442 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1443all_final += server1.key_usage.crt server1.key_usage_noauthid.crt server1.key_usage.der
1444
Jerry Yu54e86322023-06-27 16:40:00 +08001445parse_input/server1.cert_type.crt server1.cert_type.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Ron Eldor9eeb8612019-02-12 15:03:42 +02001446 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 ns_cert_type=ssl_server version=3 output_file=$@
Hanno Becker50cb93a2018-10-08 17:15:28 +01001447server1.cert_type_noauthid.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Ron Eldor9eeb8612019-02-12 15:03:42 +02001448 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 ns_cert_type=ssl_server authority_identifier=0 version=3 output_file=$@
Hanno Becker418a6222017-09-14 07:51:28 +01001449server1.cert_type.der: server1.cert_type.crt
1450 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1451all_final += server1.cert_type.crt server1.cert_type_noauthid.crt server1.cert_type.der
1452
Hanno Becker50cb93a2018-10-08 17:15:28 +01001453server1.v1.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
Ron Eldor9eeb8612019-02-12 15:03:42 +02001454 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 version=1 output_file=$@
Hanno Becker418a6222017-09-14 07:51:28 +01001455server1.v1.der: server1.v1.crt
1456 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1457all_final += server1.v1.crt server1.v1.der
1458
Darren Krahn9c134ce2021-01-13 22:04:45 -08001459server1.ca.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
1460 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) version=1 not_before=20190210144406 not_after=20290210144406 md=SHA1 is_ca=1 version=3 output_file=$@
1461server1.ca_noauthid.crt: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa)
1462 $(MBEDTLS_CERT_WRITE) request_file=server1.req.sha256 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA1 authority_identifier=0 is_ca=1 version=3 output_file=$@
1463server1.ca.der: server1.ca.crt
1464 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1465all_final += server1.ca.crt server1.ca_noauthid.crt server1.ca.der
1466
Ron Eldor9eeb8612019-02-12 15:03:42 +02001467server1_ca.crt: server1.crt $(test_ca_crt)
1468 cat server1.crt $(test_ca_crt) > $@
1469all_final += server1_ca.crt
1470
Jerry Yu54e86322023-06-27 16:40:00 +08001471parse_input/cert_sha1.crt cert_sha1.crt: server1.key
Ron Eldor9eeb8612019-02-12 15:03:42 +02001472 $(MBEDTLS_CERT_WRITE) subject_key=server1.key subject_name="C=NL, O=PolarSSL, CN=PolarSSL Cert SHA1" serial=7 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA1 version=3 output_file=$@
1473all_final += cert_sha1.crt
1474
Jerry Yu54e86322023-06-27 16:40:00 +08001475parse_input/cert_sha224.crt cert_sha224.crt: server1.key
Ron Eldor9eeb8612019-02-12 15:03:42 +02001476 $(MBEDTLS_CERT_WRITE) subject_key=server1.key subject_name="C=NL, O=PolarSSL, CN=PolarSSL Cert SHA224" serial=8 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA224 version=3 output_file=$@
1477all_final += cert_sha224.crt
1478
Jerry Yu54e86322023-06-27 16:40:00 +08001479parse_input/cert_sha256.crt cert_sha256.crt: server1.key
Ron Eldor9eeb8612019-02-12 15:03:42 +02001480 $(MBEDTLS_CERT_WRITE) subject_key=server1.key subject_name="C=NL, O=PolarSSL, CN=PolarSSL Cert SHA256" serial=9 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA256 version=3 output_file=$@
1481all_final += cert_sha256.crt
1482
Jerry Yu54e86322023-06-27 16:40:00 +08001483parse_input/cert_sha384.crt cert_sha384.crt: server1.key
Ron Eldor9eeb8612019-02-12 15:03:42 +02001484 $(MBEDTLS_CERT_WRITE) subject_key=server1.key subject_name="C=NL, O=PolarSSL, CN=PolarSSL Cert SHA384" serial=10 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA384 version=3 output_file=$@
1485all_final += cert_sha384.crt
1486
Jerry Yu54e86322023-06-27 16:40:00 +08001487parse_input/cert_sha512.crt cert_sha512.crt: server1.key
Ron Eldor9eeb8612019-02-12 15:03:42 +02001488 $(MBEDTLS_CERT_WRITE) subject_key=server1.key subject_name="C=NL, O=PolarSSL, CN=PolarSSL Cert SHA512" serial=11 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA512 version=3 output_file=$@
1489all_final += cert_sha512.crt
1490
1491cert_example_wildcard.crt: server1.key
1492 $(MBEDTLS_CERT_WRITE) subject_key=server1.key subject_name="C=NL, O=PolarSSL, CN=*.example.com" serial=12 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA1 version=3 output_file=$@
1493all_final += cert_example_wildcard.crt
1494
Hanno Becker418a6222017-09-14 07:51:28 +01001495# OpenSSL-generated certificates for comparison
Hanno Becker81535d02017-09-13 15:39:59 +01001496# Also provide certificates in DER format to allow
Hanno Becker418a6222017-09-14 07:51:28 +01001497# direct binary comparison using e.g. dumpasn1
Hanno Becker50cb93a2018-10-08 17:15:28 +01001498server1.crt.openssl server1.key_usage.crt.openssl server1.cert_type.crt.openssl: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa) $(test_ca_server1_config_file)
Hanno Becker418a6222017-09-14 07:51:28 +01001499 echo "01" > $(test_ca_server1_serial)
1500 rm -f $(test_ca_server1_db)
1501 touch $(test_ca_server1_db)
Hanno Becker50cb93a2018-10-08 17:15:28 +01001502 $(OPENSSL) ca -batch -passin "pass:$(test_ca_pwd_rsa)" -config $(test_ca_server1_config_file) -in server1.req.sha256 -extensions v3_ext -extfile $@.v3_ext -out $@
Hanno Becker418a6222017-09-14 07:51:28 +01001503server1.der.openssl: server1.crt.openssl
1504 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1505server1.key_usage.der.openssl: server1.key_usage.crt.openssl
1506 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1507server1.cert_type.der.openssl: server1.cert_type.crt.openssl
1508 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1509
Hanno Becker50cb93a2018-10-08 17:15:28 +01001510server1.v1.crt.openssl: server1.key server1.req.sha256 $(test_ca_crt) $(test_ca_key_file_rsa) $(test_ca_server1_config_file)
Hanno Becker418a6222017-09-14 07:51:28 +01001511 echo "01" > $(test_ca_server1_serial)
1512 rm -f $(test_ca_server1_db)
1513 touch $(test_ca_server1_db)
Hanno Becker50cb93a2018-10-08 17:15:28 +01001514 $(OPENSSL) ca -batch -passin "pass:$(test_ca_pwd_rsa)" -config $(test_ca_server1_config_file) -in server1.req.sha256 -out $@
Hanno Becker418a6222017-09-14 07:51:28 +01001515server1.v1.der.openssl: server1.v1.crt.openssl
1516 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1517
Ron Eldorb7c96262019-02-06 18:48:37 +02001518# To revoke certificate in the openssl database:
1519#
1520# $(OPENSSL) ca -gencrl -batch -cert $(test_ca_crt) -keyfile $(test_ca_key_file_rsa) -key $(test_ca_pwd_rsa) -config $(test_ca_server1_config_file) -md sha256 -crldays 365 -revoke server1.crt
1521
1522crl.pem: $(test_ca_crt) $(test_ca_key_file_rsa) $(test_ca_config_file)
1523 $(OPENSSL) ca -gencrl -batch -cert $(test_ca_crt) -keyfile $(test_ca_key_file_rsa) -key $(test_ca_pwd_rsa) -config $(test_ca_server1_config_file) -md sha1 -crldays 3653 -out $@
1524
Raoul Strackxa4e86142020-06-15 17:03:13 +02001525crl-futureRevocationDate.pem: $(test_ca_crt) $(test_ca_key_file_rsa) $(test_ca_config_file) test-ca.server1.future-crl.db test-ca.server1.future-crl.opensslconf
1526 $(FAKETIME) '2028-12-31' $(OPENSSL) ca -gencrl -config test-ca.server1.future-crl.opensslconf -crldays 365 -passin "pass:$(test_ca_pwd_rsa)" -out $@
1527
1528server1_all: crl.pem crl-futureRevocationDate.pem server1.crt server1.noauthid.crt server1.crt.openssl server1.v1.crt server1.v1.crt.openssl server1.key_usage.crt server1.key_usage_noauthid.crt server1.key_usage.crt.openssl server1.cert_type.crt server1.cert_type_noauthid.crt server1.cert_type.crt.openssl server1.der server1.der.openssl server1.v1.der server1.v1.der.openssl server1.key_usage.der server1.key_usage.der.openssl server1.cert_type.der server1.cert_type.der.openssl
Gilles Peskinef040a172017-05-05 18:56:12 +02001529
Hanno Beckerebc1f402018-10-31 16:35:59 +00001530# server2*
1531
Jerry Yu54e86322023-06-27 16:40:00 +08001532parse_input/server2.crt server2.crt: server2.req.sha256
Ron Eldor9eeb8612019-02-12 15:03:42 +02001533 $(MBEDTLS_CERT_WRITE) request_file=server2.req.sha256 serial=2 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA1 version=3 output_file=$@
Hanno Beckere21387e2019-03-12 16:49:26 +00001534all_final += server2.crt
Hanno Beckerebc1f402018-10-31 16:35:59 +00001535
Ron Eldor9eeb8612019-02-12 15:03:42 +02001536server2.der: server2.crt
1537 $(OPENSSL) x509 -inform PEM -in $< -outform DER -out $@
1538all_final += server2.crt server2.der
1539
Hanno Beckerebc1f402018-10-31 16:35:59 +00001540server2-sha256.crt: server2.req.sha256
Ron Eldor9eeb8612019-02-12 15:03:42 +02001541 $(MBEDTLS_CERT_WRITE) request_file=server2.req.sha256 serial=2 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20190210144406 not_after=20290210144406 md=SHA256 version=3 output_file=$@
Hanno Beckerebc1f402018-10-31 16:35:59 +00001542all_final += server2-sha256.crt
1543
Pengyu Lvcd61b742023-05-09 12:04:56 +08001544# server3*
1545
Jerry Yu54e86322023-06-27 16:40:00 +08001546parse_input/server3.crt server3.crt: server3.key
Pengyu Lvc7995a82023-06-02 13:23:39 +08001547 $(MBEDTLS_CERT_WRITE) subject_key=$< subject_name="C=NL,O=PolarSSL,CN=localhost" serial=13 \
1548 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) \
1549 not_before=20190210144406 not_after=20290210144406 \
1550 md=SHA1 version=3 output_file=$@
Pengyu Lvcd61b742023-05-09 12:04:56 +08001551all_final += server3.crt
1552
Pengyu Lvf31d18a2023-05-10 09:26:41 +08001553# server4*
1554
Jerry Yu54e86322023-06-27 16:40:00 +08001555parse_input/server4.crt server4.crt: server4.key
Pengyu Lvc7995a82023-06-02 13:23:39 +08001556 $(MBEDTLS_CERT_WRITE) subject_key=$< subject_name="C=NL,O=PolarSSL,CN=localhost" serial=8 \
1557 issuer_crt=$(test_ca_crt_file_ec) issuer_key=$(test_ca_key_file_ec) \
1558 not_before=20190210144400 not_after=20290210144400 \
1559 md=SHA256 version=3 output_file=$@
Pengyu Lvf31d18a2023-05-10 09:26:41 +08001560all_final += server4.crt
1561
TRodziewicz10e8cf52021-05-31 17:58:57 +02001562# MD5 test certificate
Gilles Peskinef040a172017-05-05 18:56:12 +02001563
Hanno Becker2e0f71f2019-06-03 14:14:04 +01001564cert_md_test_key = $(cli_crt_key_file_rsa)
1565
Hanno Becker2e0f71f2019-06-03 14:14:04 +01001566cert_md5.csr: $(cert_md_test_key)
1567 $(MBEDTLS_CERT_REQ) output_file=$@ filename=$< subject_name="C=NL,O=PolarSSL,CN=PolarSSL Cert MD5" md=MD5
1568all_intermediate += cert_md5.csr
1569
Jerry Yu54e86322023-06-27 16:40:00 +08001570parse_input/cert_md5.crt cert_md5.crt: cert_md5.csr
Hanno Becker53756b32019-06-03 14:14:38 +01001571 $(MBEDTLS_CERT_WRITE) request_file=$< serial=6 issuer_crt=$(test_ca_crt) issuer_key=$(test_ca_key_file_rsa) issuer_pwd=$(test_ca_pwd_rsa) not_before=20000101121212 not_after=20300101121212 md=MD5 version=3 output_file=$@
Hanno Becker2e0f71f2019-06-03 14:14:04 +01001572all_final += cert_md5.crt
Gilles Peskinef040a172017-05-05 18:56:12 +02001573
Jerry Yu0f99af82021-11-05 11:04:05 +08001574# TLSv1.3 test certificates
Jerry Yudda036d2021-11-30 11:19:41 +08001575ecdsa_secp256r1.key: ec_256_prv.pem
Ronald Cron64bff9f2021-12-10 14:53:24 +01001576 cp $< $@
Jerry Yu0f99af82021-11-05 11:04:05 +08001577
Jerry Yudda036d2021-11-30 11:19:41 +08001578ecdsa_secp256r1.csr: ecdsa_secp256r1.key
Jerry Yu0f99af82021-11-05 11:04:05 +08001579 $(OPENSSL) req -new -subj "/C=NL/O=PolarSSL/CN=localhost" \
1580 -key $< -out $@
Jerry Yudda036d2021-11-30 11:19:41 +08001581all_intermediate += ecdsa_secp256r1.csr
1582ecdsa_secp256r1.crt: ecdsa_secp256r1.csr
Jerry Yu0f99af82021-11-05 11:04:05 +08001583 $(OPENSSL) x509 -req -CA $(test_ca_crt_file_ec) -CAkey $(test_ca_key_file_ec) \
1584 -set_serial 77 -days 3653 -sha384 -in $< -out $@
Jerry Yudda036d2021-11-30 11:19:41 +08001585all_final += ecdsa_secp256r1.crt ecdsa_secp256r1.key
1586tls13_certs: ecdsa_secp256r1.crt ecdsa_secp256r1.key
Jerry Yu0f99af82021-11-05 11:04:05 +08001587
Jerry Yudda036d2021-11-30 11:19:41 +08001588ecdsa_secp384r1.key: ec_384_prv.pem
Ronald Cron64bff9f2021-12-10 14:53:24 +01001589 cp $< $@
Jerry Yudda036d2021-11-30 11:19:41 +08001590ecdsa_secp384r1.csr: ecdsa_secp384r1.key
Jerry Yu0f99af82021-11-05 11:04:05 +08001591 $(OPENSSL) req -new -subj "/C=NL/O=PolarSSL/CN=localhost" \
1592 -key $< -out $@
Jerry Yudda036d2021-11-30 11:19:41 +08001593all_intermediate += ecdsa_secp384r1.csr
1594ecdsa_secp384r1.crt: ecdsa_secp384r1.csr
Jerry Yu0f99af82021-11-05 11:04:05 +08001595 $(OPENSSL) x509 -req -CA $(test_ca_crt_file_ec) -CAkey $(test_ca_key_file_ec) \
Jerry Yudda036d2021-11-30 11:19:41 +08001596 -set_serial 77 -days 3653 -sha384 -in $< -out $@
1597all_final += ecdsa_secp384r1.crt ecdsa_secp384r1.key
1598tls13_certs: ecdsa_secp384r1.crt ecdsa_secp384r1.key
1599
1600ecdsa_secp521r1.key: ec_521_prv.pem
Ronald Cron64bff9f2021-12-10 14:53:24 +01001601 cp $< $@
Jerry Yudda036d2021-11-30 11:19:41 +08001602ecdsa_secp521r1.csr: ecdsa_secp521r1.key
1603 $(OPENSSL) req -new -subj "/C=NL/O=PolarSSL/CN=localhost" \
1604 -key $< -out $@
1605all_intermediate += ecdsa_secp521r1.csr
1606ecdsa_secp521r1.crt: ecdsa_secp521r1.csr
1607 $(OPENSSL) x509 -req -CA $(test_ca_crt_file_ec) -CAkey $(test_ca_key_file_ec) \
1608 -set_serial 77 -days 3653 -sha384 -in $< -out $@
1609all_final += ecdsa_secp521r1.crt ecdsa_secp521r1.key
1610tls13_certs: ecdsa_secp521r1.crt ecdsa_secp521r1.key
Jerry Yu0f99af82021-11-05 11:04:05 +08001611
Nayna Jainc9deb182020-11-16 19:03:12 +00001612# PKCS7 test data
1613pkcs7_test_cert_1 = pkcs7-rsa-sha256-1.crt
1614pkcs7_test_cert_2 = pkcs7-rsa-sha256-2.crt
Nick Childa0c15d02023-01-30 19:30:38 +00001615pkcs7_test_cert_3 = pkcs7-rsa-sha256-3.crt
Manuel Pégourié-Gonnard600bd302022-02-21 11:30:43 +01001616pkcs7_test_file = pkcs7_data.bin
Nayna Jainc9deb182020-11-16 19:03:12 +00001617
Nick Childfc234b72022-11-02 15:23:39 -05001618$(pkcs7_test_file):
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001619 printf "Hello\15\n" > $@
Nick Childfc234b72022-11-02 15:23:39 -05001620all_final += $(pkcs7_test_file)
1621
Dave Rodgmanc5874db2023-02-16 16:14:46 +00001622pkcs7_zerolendata.bin:
1623 printf '' > $@
1624all_final += pkcs7_zerolendata.bin
1625
Nick Childfc234b72022-11-02 15:23:39 -05001626pkcs7_data_1.bin:
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001627 printf "2\15\n" > $@
Nick Childfc234b72022-11-02 15:23:39 -05001628all_final += pkcs7_data_1.bin
1629
Nayna Jainc9deb182020-11-16 19:03:12 +00001630# Generate signing cert
1631pkcs7-rsa-sha256-1.crt:
Pengyu Lv0a7108f2023-05-25 10:04:05 +08001632 $(OPENSSL) req -x509 -subj="/C=NL/O=PKCS7/CN=PKCS7 Cert 1" -sha256 -nodes -days 3653 -newkey rsa:2048 -keyout pkcs7-rsa-sha256-1.key -out pkcs7-rsa-sha256-1.crt
Nayna Jainc9deb182020-11-16 19:03:12 +00001633 cat pkcs7-rsa-sha256-1.crt pkcs7-rsa-sha256-1.key > pkcs7-rsa-sha256-1.pem
1634all_final += pkcs7-rsa-sha256-1.crt
1635
1636pkcs7-rsa-sha256-2.crt:
Pengyu Lv0a7108f2023-05-25 10:04:05 +08001637 $(OPENSSL) req -x509 -subj="/C=NL/O=PKCS7/CN=PKCS7 Cert 2" -sha256 -nodes -days 3653 -newkey rsa:2048 -keyout pkcs7-rsa-sha256-2.key -out pkcs7-rsa-sha256-2.crt
Nayna Jainc9deb182020-11-16 19:03:12 +00001638 cat pkcs7-rsa-sha256-2.crt pkcs7-rsa-sha256-2.key > pkcs7-rsa-sha256-2.pem
1639all_final += pkcs7-rsa-sha256-2.crt
1640
Nick Childa0c15d02023-01-30 19:30:38 +00001641pkcs7-rsa-sha256-3.crt:
Pengyu Lv0a7108f2023-05-25 10:04:05 +08001642 $(OPENSSL) req -x509 -subj="/C=NL/O=PKCS7/CN=PKCS7 Cert 3" -sha256 -nodes -days 3653 -newkey rsa:2048 -keyout pkcs7-rsa-sha256-3.key -out pkcs7-rsa-sha256-3.crt
Nick Childa0c15d02023-01-30 19:30:38 +00001643 cat pkcs7-rsa-sha256-3.crt pkcs7-rsa-sha256-3.key > pkcs7-rsa-sha256-3.pem
1644all_final += pkcs7-rsa-sha256-3.crt
1645
Nick Childe8a81162022-12-15 14:00:51 -06001646pkcs7-rsa-expired.crt:
1647 $(FAKETIME) -f -3650d $(OPENSSL) req -x509 -subj="/C=NL/O=PKCS7/CN=PKCS7 Cert Expired" -sha256 -nodes -days 365 -newkey rsa:2048 -keyout pkcs7-rsa-expired.key -out pkcs7-rsa-expired.crt
1648all_final += pkcs7-rsa-expired.crt
1649
Dave Rodgman2e844252023-03-11 10:24:30 +00001650# File with an otherwise valid signature signed with an expired cert
1651pkcs7_data_rsa_expired.der: pkcs7-rsa-expired.key pkcs7-rsa-expired.crt pkcs7_data.bin
1652 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha256 -inkey pkcs7-rsa-expired.key -signer pkcs7-rsa-expired.crt -noattr -outform DER -out $@
1653all_final += pkcs7_data_rsa_expired.der
1654
Nick Child45525d32022-02-25 11:54:34 -06001655# Convert signing certs to DER for testing PEM-free builds
1656pkcs7-rsa-sha256-1.der: $(pkcs7_test_cert_1)
1657 $(OPENSSL) x509 -in pkcs7-rsa-sha256-1.crt -out $@ -outform DER
1658all_final += pkcs7-rsa-sha256-1.der
1659
1660pkcs7-rsa-sha256-2.der: $(pkcs7_test_cert_2)
1661 $(OPENSSL) x509 -in pkcs7-rsa-sha256-2.crt -out $@ -outform DER
1662all_final += pkcs7-rsa-sha256-2.der
1663
Dave Rodgman2e844252023-03-11 10:24:30 +00001664pkcs7-rsa-expired.der: pkcs7-rsa-expired.crt
1665 $(OPENSSL) x509 -in pkcs7-rsa-expired.crt -out $@ -outform DER
1666all_final += pkcs7-rsa-expired.der
1667
Dave Rodgmanc5874db2023-02-16 16:14:46 +00001668# pkcs7 signature file over zero-len data
1669pkcs7_zerolendata_detached.der: pkcs7_zerolendata.bin pkcs7-rsa-sha256-1.key pkcs7-rsa-sha256-1.crt
1670 $(OPENSSL) smime -sign -md sha256 -nocerts -noattr -in pkcs7_zerolendata.bin -inkey pkcs7-rsa-sha256-1.key -outform DER -binary -signer pkcs7-rsa-sha256-1.crt -out pkcs7_zerolendata_detached.der
1671all_final += pkcs7_zerolendata_detached.der
1672
Nayna Jainc9deb182020-11-16 19:03:12 +00001673# pkcs7 signature file with CERT
1674pkcs7_data_cert_signed_sha256.der: $(pkcs7_test_file) $(pkcs7_test_cert_1)
Manuel Pégourié-Gonnard600bd302022-02-21 11:30:43 +01001675 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha256 -signer pkcs7-rsa-sha256-1.pem -noattr -outform DER -out $@
Nayna Jainc9deb182020-11-16 19:03:12 +00001676all_final += pkcs7_data_cert_signed_sha256.der
1677
1678# pkcs7 signature file with CERT and sha1
1679pkcs7_data_cert_signed_sha1.der: $(pkcs7_test_file) $(pkcs7_test_cert_1)
Manuel Pégourié-Gonnard600bd302022-02-21 11:30:43 +01001680 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha1 -signer pkcs7-rsa-sha256-1.pem -noattr -outform DER -out $@
Nayna Jainc9deb182020-11-16 19:03:12 +00001681all_final += pkcs7_data_cert_signed_sha1.der
1682
1683# pkcs7 signature file with CERT and sha512
1684pkcs7_data_cert_signed_sha512.der: $(pkcs7_test_file) $(pkcs7_test_cert_1)
Manuel Pégourié-Gonnard600bd302022-02-21 11:30:43 +01001685 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha512 -signer pkcs7-rsa-sha256-1.pem -noattr -outform DER -out $@
Nayna Jainc9deb182020-11-16 19:03:12 +00001686all_final += pkcs7_data_cert_signed_sha512.der
1687
1688# pkcs7 signature file without CERT
1689pkcs7_data_without_cert_signed.der: $(pkcs7_test_file) $(pkcs7_test_cert_1)
Manuel Pégourié-Gonnard600bd302022-02-21 11:30:43 +01001690 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha256 -signer pkcs7-rsa-sha256-1.pem -nocerts -noattr -outform DER -out $@
Nayna Jainc9deb182020-11-16 19:03:12 +00001691all_final += pkcs7_data_without_cert_signed.der
1692
Nick Child3dafc6c2023-02-07 19:59:58 +00001693# pkcs7 signature file with signature
1694pkcs7_data_with_signature.der: $(pkcs7_test_file) $(pkcs7_test_cert_1)
1695 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha256 -signer pkcs7-rsa-sha256-1.pem -nocerts -noattr -nodetach -outform DER -out $@
1696all_final += pkcs7_data_with_signature.der
1697
Nick Childa0c15d02023-01-30 19:30:38 +00001698# pkcs7 signature file with two signers
Nayna Jainc9deb182020-11-16 19:03:12 +00001699pkcs7_data_multiple_signed.der: $(pkcs7_test_file) $(pkcs7_test_cert_1) $(pkcs7_test_cert_2)
Manuel Pégourié-Gonnard600bd302022-02-21 11:30:43 +01001700 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha256 -signer pkcs7-rsa-sha256-1.pem -signer pkcs7-rsa-sha256-2.pem -nocerts -noattr -outform DER -out $@
Nayna Jainc9deb182020-11-16 19:03:12 +00001701all_final += pkcs7_data_multiple_signed.der
1702
Nick Childa0c15d02023-01-30 19:30:38 +00001703# pkcs7 signature file with three signers
1704pkcs7_data_3_signed.der: $(pkcs7_test_file) $(pkcs7_test_cert_1) $(pkcs7_test_cert_2) $(pkcs7_test_cert_3)
1705 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha256 -signer pkcs7-rsa-sha256-1.pem -signer pkcs7-rsa-sha256-2.pem -signer pkcs7-rsa-sha256-3.pem -nocerts -noattr -outform DER -out $@
1706all_final += pkcs7_data_3_signed.der
1707
Nayna Jainc9deb182020-11-16 19:03:12 +00001708# pkcs7 signature file with multiple certificates
1709pkcs7_data_multiple_certs_signed.der: $(pkcs7_test_file) $(pkcs7_test_cert_1) $(pkcs7_test_cert_2)
Manuel Pégourié-Gonnard600bd302022-02-21 11:30:43 +01001710 $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha256 -signer pkcs7-rsa-sha256-1.pem -signer pkcs7-rsa-sha256-2.pem -noattr -outform DER -out $@
Nayna Jainc9deb182020-11-16 19:03:12 +00001711all_final += pkcs7_data_multiple_certs_signed.der
1712
1713# pkcs7 signature file with corrupted CERT
1714pkcs7_data_signed_badcert.der: pkcs7_data_cert_signed_sha256.der
1715 cp pkcs7_data_cert_signed_sha256.der $@
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001716 echo 'a1' | xxd -r -p | dd of=$@ bs=1 seek=547 conv=notrunc
Nayna Jainc9deb182020-11-16 19:03:12 +00001717all_final += pkcs7_data_signed_badcert.der
1718
1719# pkcs7 signature file with corrupted signer info
1720pkcs7_data_signed_badsigner.der: pkcs7_data_cert_signed_sha256.der
1721 cp pkcs7_data_cert_signed_sha256.der $@
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001722 echo 'a1' | xxd -r -p | dd of=$@ bs=1 seek=918 conv=notrunc
Nayna Jainc9deb182020-11-16 19:03:12 +00001723all_final += pkcs7_data_signed_badsigner.der
1724
Bence Szépkúti24897132023-01-19 20:57:44 +01001725# pkcs7 signature file with invalid tag in signerInfo[1].serial after long issuer name
1726pkcs7_signerInfo_1_serial_invalid_tag_after_long_name.der: pkcs7_data_multiple_signed.der
1727 cp $< $@
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001728 echo 'a1' | xxd -r -p | dd of=$@ bs=1 seek=498 conv=notrunc
Bence Szépkúti24897132023-01-19 20:57:44 +01001729all_final += pkcs7_signerInfo_1_serial_invalid_tag_after_long_name.der
1730
1731# pkcs7 signature file with invalid tag in signerInfo[2]
1732pkcs7_signerInfo_2_invalid_tag.der: pkcs7_data_3_signed.der
1733 cp $< $@
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001734 echo 'a1' | xxd -r -p | dd of=$@ bs=1 seek=810 conv=notrunc
Bence Szépkúti24897132023-01-19 20:57:44 +01001735all_final += pkcs7_signerInfo_2_invalid_tag.der
1736
Xiaokang Qian72b4bca2023-03-06 07:50:43 +00001737# pkcs7 signature file with corrupted signer info[1]
1738pkcs7_data_signed_badsigner1_badsize.der: pkcs7_data_3_signed.der
1739 cp pkcs7_data_3_signed.der $@
Xiaokang Qianc96d2de2023-03-07 10:35:47 +00001740 echo '72' | xxd -p -r | dd of=$@ bs=1 seek=438 conv=notrunc
Xiaokang Qian72b4bca2023-03-06 07:50:43 +00001741all_final += pkcs7_data_signed_badsigner1_badsize.der
1742
Xiaokang Qian8993a142023-03-06 08:32:20 +00001743pkcs7_data_signed_badsigner1_badtag.der: pkcs7_data_3_signed.der
1744 cp pkcs7_data_3_signed.der $@
Xiaokang Qianc96d2de2023-03-07 10:35:47 +00001745 echo 'a1' | xxd -p -r | dd of=$@ bs=1 seek=442 conv=notrunc
Xiaokang Qian8993a142023-03-06 08:32:20 +00001746all_final += pkcs7_data_signed_badsigner1_badtag.der
1747
Xiaokang Qian9c703d82023-03-06 08:44:12 +00001748pkcs7_data_signed_badsigner1_fuzzbad.der: pkcs7_data_3_signed.der
1749 cp pkcs7_data_3_signed.der $@
Xiaokang Qianc96d2de2023-03-07 10:35:47 +00001750 echo 'a1' | xxd -p -r | dd of=$@ bs=1 seek=550 conv=notrunc
Xiaokang Qian9c703d82023-03-06 08:44:12 +00001751all_final += pkcs7_data_signed_badsigner1_fuzzbad.der
1752
Xiaokang Qiane8c696f2023-03-06 07:58:14 +00001753# pkcs7 signature file with corrupted signer info[2]
1754pkcs7_data_signed_badsigner2_badsize.der: pkcs7_data_3_signed.der
1755 cp pkcs7_data_3_signed.der $@
Xiaokang Qianc96d2de2023-03-07 10:35:47 +00001756 echo '72'| xxd -p -r | dd of=$@ bs=1 seek=813 conv=notrunc
Pengyu Lv6f804692023-05-08 14:34:22 +08001757all_final += pkcs7_data_signed_badsigner2_badsize.der
Xiaokang Qiane8c696f2023-03-06 07:58:14 +00001758
Xiaokang Qian8993a142023-03-06 08:32:20 +00001759pkcs7_data_signed_badsigner2_badtag.der: pkcs7_data_3_signed.der
1760 cp pkcs7_data_3_signed.der $@
Xiaokang Qianc96d2de2023-03-07 10:35:47 +00001761 echo 'a1'| xxd -p -r | dd of=$@ bs=1 seek=817 conv=notrunc
Pengyu Lv6f804692023-05-08 14:34:22 +08001762all_final += pkcs7_data_signed_badsigner2_badtag.der
Xiaokang Qian8993a142023-03-06 08:32:20 +00001763
Xiaokang Qian9c703d82023-03-06 08:44:12 +00001764pkcs7_data_signed_badsigner2_fuzzbad.der: pkcs7_data_3_signed.der
1765 cp pkcs7_data_3_signed.der $@
Xiaokang Qianc96d2de2023-03-07 10:35:47 +00001766 echo 'a1'| xxd -p -r | dd of=$@ bs=1 seek=925 conv=notrunc
Pengyu Lv6f804692023-05-08 14:34:22 +08001767all_final += pkcs7_data_signed_badsigner2_fuzzbad.der
Xiaokang Qian9c703d82023-03-06 08:44:12 +00001768
Nayna Jainc9deb182020-11-16 19:03:12 +00001769# pkcs7 file with version 2
1770pkcs7_data_cert_signed_v2.der: pkcs7_data_cert_signed_sha256.der
1771 cp pkcs7_data_cert_signed_sha256.der $@
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001772 echo '02' | xxd -r -p | dd of=$@ bs=1 seek=25 conv=notrunc
Nayna Jainc9deb182020-11-16 19:03:12 +00001773all_final += pkcs7_data_cert_signed_v2.der
1774
1775pkcs7_data_cert_encrypted.der: $(pkcs7_test_file) $(pkcs7_test_cert_1)
Manuel Pégourié-Gonnard600bd302022-02-21 11:30:43 +01001776 $(OPENSSL) smime -encrypt -aes256 -in pkcs7_data.bin -binary -outform DER -out $@ pkcs7-rsa-sha256-1.crt
Nayna Jainc9deb182020-11-16 19:03:12 +00001777all_final += pkcs7_data_cert_encrypted.der
1778
1779## Negative tests
1780# For some interesting sizes, what happens if we make them off-by-one?
1781pkcs7_signerInfo_issuer_invalid_size.der: pkcs7_data_cert_signed_sha256.der
1782 cp $< $@
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001783 echo '35' | xxd -r -p | dd of=$@ seek=919 bs=1 conv=notrunc
Nayna Jainc9deb182020-11-16 19:03:12 +00001784all_final += pkcs7_signerInfo_issuer_invalid_size.der
1785
1786pkcs7_signerInfo_serial_invalid_size.der: pkcs7_data_cert_signed_sha256.der
1787 cp $< $@
Bence Szépkúti35d674a2023-02-28 16:59:50 +01001788 echo '15' | xxd -r -p | dd of=$@ seek=973 bs=1 conv=notrunc
Nayna Jainc9deb182020-11-16 19:03:12 +00001789all_final += pkcs7_signerInfo_serial_invalid_size.der
1790
Nayna Jain673a2262020-12-14 22:44:49 +00001791# pkcs7 signature file just with signed data
1792pkcs7_data_cert_signeddata_sha256.der: pkcs7_data_cert_signed_sha256.der
1793 dd if=pkcs7_data_cert_signed_sha256.der of=$@ skip=19 bs=1
1794all_final += pkcs7_data_cert_signeddata_sha256.der
1795
Gilles Peskinef040a172017-05-05 18:56:12 +02001796################################################################
Gilles Peskinec6b0d962020-12-08 22:31:52 +01001797#### Diffie-Hellman parameters
1798################################################################
1799
1800dh.998.pem:
1801 $(OPENSSL) dhparam -out $@ -text 998
1802
1803dh.999.pem:
1804 $(OPENSSL) dhparam -out $@ -text 999
1805
1806################################################################
Gilles Peskinef040a172017-05-05 18:56:12 +02001807#### Meta targets
1808################################################################
1809
1810all_final: $(all_final)
1811all: $(all_intermediate) $(all_final)
1812
Gilles Peskinefd14bca2017-05-11 17:57:22 +02001813.PHONY: default all_final all
Gilles Peskineea8d6972017-11-28 17:30:52 +01001814.PHONY: keys_rsa_all
1815.PHONY: keys_rsa_unenc keys_rsa_enc_basic
1816.PHONY: keys_rsa_enc_pkcs8_v1 keys_rsa_enc_pkcs8_v2
1817.PHONY: keys_rsa_enc_basic_1024 keys_rsa_enc_basic_2048 keys_rsa_enc_basic_4096
1818.PHONY: keys_rsa_enc_pkcs8_v1_1024 keys_rsa_enc_pkcs8_v2_1024
1819.PHONY: keys_rsa_enc_pkcs8_v1_2048 keys_rsa_enc_pkcs8_v2_2048
1820.PHONY: keys_rsa_enc_pkcs8_v1_4096 keys_rsa_enc_pkcs8_v2_4096
1821.PHONY: server1_all
Gilles Peskinefd14bca2017-05-11 17:57:22 +02001822
Gilles Peskinef040a172017-05-05 18:56:12 +02001823# These files should not be committed to the repository.
1824list_intermediate:
1825 @printf '%s\n' $(all_intermediate) | sort
1826# These files should be committed to the repository so that the test data is
1827# available upon checkout without running a randomized process depending on
1828# third-party tools.
1829list_final:
1830 @printf '%s\n' $(all_final) | sort
Gilles Peskinefd14bca2017-05-11 17:57:22 +02001831.PHONY: list_intermediate list_final
Gilles Peskinef040a172017-05-05 18:56:12 +02001832
Gilles Peskinefd14bca2017-05-11 17:57:22 +02001833## Remove intermediate files
Gilles Peskinef040a172017-05-05 18:56:12 +02001834clean:
1835 rm -f $(all_intermediate)
Gilles Peskinefd14bca2017-05-11 17:57:22 +02001836## Remove all build products, even the ones that are committed
Gilles Peskinef040a172017-05-05 18:56:12 +02001837neat: clean
1838 rm -f $(all_final)
Gilles Peskinefd14bca2017-05-11 17:57:22 +02001839.PHONY: clean neat
Pengyu Lv491c64c2023-05-24 10:33:42 +08001840
Pengyu Lvb8b9cd42023-06-06 10:38:35 +08001841.SECONDARY: $(all_intermediate)