aboutsummaryrefslogtreecommitdiff
path: root/test/certs
AgeCommit message (Expand)AuthorFilesLines
2022-11-23Rename the "timing" program to "timing_load_creds" and integrate it with test...Dr. David von Oheimb2-0/+48
2022-11-21Add test cases for verification of time stamping certificatesLutz Jaenicke10-0/+182
2022-11-12Resign test/certs/rootCA.pem to expire in 100 yearsBernd Edlinger1-18/+76
2022-11-12Update the validity period of ed25519 cerificatesBernd Edlinger2-14/+74
2022-07-12test/certs/setup.sh: add missing comment on CA cert variant without basic con...Dr. David von Oheimb1-2/+2
2022-06-05Update further expiring certificates that affect testsTomas Mraz3-33/+34
2022-06-03Change the SCT issuer key to RSA 2048Bernd Edlinger4-37/+57
2022-06-01Update expired SCT issuer certificateTomas Mraz1-15/+15
2022-01-03Test that PEM_BUFSIZE is passed into pem_password_cbTomas Mraz1-0/+30
2021-12-14Add a TLS test for name constraints with an EE cert without a SANMatt Caswell1-0/+40
2021-12-14Add a new Name Constraints test certMatt Caswell4-8/+74
2021-10-05Test for DANE cross cert fixViktor Dukhovni4-0/+67
2021-07-02test_pem_reading: Test loading a key from a file with multiple PEM dataTomas Mraz1-0/+90
2021-06-0925-test_verify.t: Add test case: accept trusted self-signed EE cert with key ...Dr. David von Oheimb1-0/+19
2021-06-09test/certs/mkcert.sh: Correct description of geneealt parametersDr. David von Oheimb1-2/+2
2021-06-08Fix the expected output of printing certificatesMatt Caswell2-2/+2
2021-06-04Test a bad SmtpUTF8Mailbox name constraintMatt Caswell3-0/+62
2021-06-02ee-self-signed.pem: Restore original version, adding -attime to 25-test_verify.tDr. David von Oheimb1-17/+16
2021-05-27TEST: Prefer using precomputed RSA and DH keys for more efficient testsDr. David von Oheimb1-0/+14
2021-05-05test/certs/setup.sh: Fix two glitchesDr. David von Oheimb3-12/+12
2021-05-05update test/certs/ee-pathlen.pem to contain SKID and AKIDDr. David von Oheimb1-9/+10
2021-05-05test/certs/setup.sh: structural cleanupDr. David von Oheimb1-41/+32
2021-04-08PEM_X509_INFO_read_bio_ex(): Generalize to allow parsing any type of private keyDr. David von Oheimb1-0/+30
2021-04-08d2i_PrivateKey{,_ex}() and PEM_X509_INFO_read_bio_ex(): Fix handling of RSA/D...Dr. David von Oheimb1-0/+74
2021-03-04test/x509: Test for issuer being overwritten when printing.Tomas Mraz3-104/+93
2021-03-03Fix NULL access in ssl_build_cert_chain() when ctx is NULL.Shane Lontis1-0/+84
2021-03-03test_ssl_new: X448, X25519, and EdDSA are supported with fipsTomas Mraz1-6/+6
2021-01-28check_sig_alg_match(): weaken sig nid comparison to allow RSA{,PSS} key verif...Dr. David von Oheimb6-9/+117
2021-01-28Update copyright yearRichard Levitte1-1/+1
2021-01-20make various test CA certs RFC 5280 compliant w.r.t. X509 extensionsDr. David von Oheimb41-402/+416
2021-01-13apps/req.c: Add -copy_extensions option for use with -x509; default: noneDr. David von Oheimb1-0/+18
2021-01-13X509_cmp(): Fix comparison in case x509v3_cache_extensions() failed to due to...Dr. David von Oheimb1-0/+19
2020-12-04test/certs/setup.sh: Fix two glitchesDr. David von Oheimb1-3/+3
2020-12-03x509_vfy.c: Restore rejection of expired trusted (root) certificateDr. David von Oheimb2-0/+19
2020-11-18Add some additional test certificates/keysMatt Caswell9-0/+318
2020-09-30Prune low-level ASN.1 parse errors from error queue in der2key_decode() etc.Dr. David von Oheimb1-0/+20
2020-09-26Implement treatment of id-pkix-ocsp-no-check extension for OCSP_basic_verify()Dr. David von Oheimb4-1/+67
2020-09-26Generate a certificate with critical id-pkix-ocsp-nocheck extensionTomas Mraz2-1/+38
2020-09-21Correct certificate and key names for explicit ec param testTomas Mraz1-2/+4
2020-09-17Disallow certs with explicit curve in verification chainTomas Mraz11-0/+116
2020-08-20apps: make use of OSSL_STORE for generalized certs and CRLs loadingDr. David von Oheimb2-0/+0
2020-07-28Fix a test_verify failureMatt Caswell2-17/+18
2020-07-28Deprecate -nodes in favor of -noenc in pkcs12 and req appDr. David von Oheimb1-1/+1
2020-07-01Fix issue 1418 by moving check of KU_KEY_CERT_SIGN and weakening check_issued()Dr. David von Oheimb2-0/+21
2020-04-25Add support for unusal 'othername' subjectAltNamesDirk-Willem van Gulik1-0/+36
2020-04-23Update copyright yearMatt Caswell1-1/+1
2020-04-06Add test cases for the non CA certificate with pathlen:0Tomas Mraz2-1/+20
2020-03-25Issuer Sign Tool extention supportNikolay Morozov1-0/+30
2020-02-11Generate new Ed488 certificatesKurt Roeckx4-12/+28
2020-02-05Create a new embeddedSCTs1 that's signed using SHA256Kurt Roeckx10-37/+129