diff options
| author | Dave Rodgman <dave.rodgman@arm.com> | 2023-03-11 10:24:30 +0000 |
|---|---|---|
| committer | Dave Rodgman <dave.rodgman@arm.com> | 2023-03-11 10:24:30 +0000 |
| commit | 2e8442565a5a67ca935abee573259cf419eaf7fe (patch) | |
| tree | e7f5766f27d543ebee3b5c94f72f2148f26bccb7 /tests/data_files/Makefile | |
| parent | cc77fe8e52d65fbe596ed73ee824903751c253cf (diff) | |
| download | mbedtls-2e8442565a5a67ca935abee573259cf419eaf7fe.zip mbedtls-2e8442565a5a67ca935abee573259cf419eaf7fe.tar.gz mbedtls-2e8442565a5a67ca935abee573259cf419eaf7fe.tar.bz2 | |
Add PKCS #7 test files using expired cert
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
Diffstat (limited to 'tests/data_files/Makefile')
| -rw-r--r-- | tests/data_files/Makefile | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/tests/data_files/Makefile b/tests/data_files/Makefile index 80bdd25..e638caf 100644 --- a/tests/data_files/Makefile +++ b/tests/data_files/Makefile @@ -1306,6 +1306,11 @@ pkcs7-rsa-expired.crt: $(FAKETIME) -f -3650d $(OPENSSL) req -x509 -subj="/C=NL/O=PKCS7/CN=PKCS7 Cert Expired" -sha256 -nodes -days 365 -newkey rsa:2048 -keyout pkcs7-rsa-expired.key -out pkcs7-rsa-expired.crt all_final += pkcs7-rsa-expired.crt +# File with an otherwise valid signature signed with an expired cert +pkcs7_data_rsa_expired.der: pkcs7-rsa-expired.key pkcs7-rsa-expired.crt pkcs7_data.bin + $(OPENSSL) smime -sign -binary -in pkcs7_data.bin -out $@ -md sha256 -inkey pkcs7-rsa-expired.key -signer pkcs7-rsa-expired.crt -noattr -outform DER -out $@ +all_final += pkcs7_data_rsa_expired.der + # Convert signing certs to DER for testing PEM-free builds pkcs7-rsa-sha256-1.der: $(pkcs7_test_cert_1) $(OPENSSL) x509 -in pkcs7-rsa-sha256-1.crt -out $@ -outform DER @@ -1315,6 +1320,10 @@ pkcs7-rsa-sha256-2.der: $(pkcs7_test_cert_2) $(OPENSSL) x509 -in pkcs7-rsa-sha256-2.crt -out $@ -outform DER all_final += pkcs7-rsa-sha256-2.der +pkcs7-rsa-expired.der: pkcs7-rsa-expired.crt + $(OPENSSL) x509 -in pkcs7-rsa-expired.crt -out $@ -outform DER +all_final += pkcs7-rsa-expired.der + # pkcs7 signature file over zero-len data pkcs7_zerolendata_detached.der: pkcs7_zerolendata.bin pkcs7-rsa-sha256-1.key pkcs7-rsa-sha256-1.crt $(OPENSSL) smime -sign -md sha256 -nocerts -noattr -in pkcs7_zerolendata.bin -inkey pkcs7-rsa-sha256-1.key -outform DER -binary -signer pkcs7-rsa-sha256-1.crt -out pkcs7_zerolendata_detached.der |