From: Alan T. DeKok Date: Sat, 24 Mar 2018 21:20:49 +0000 (-0400) Subject: generate ecc and rsa. Update Makefile to match. X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=25581934065a4bc618ba641b5edee2b6722be20f;p=thirdparty%2Ffreeradius-server.git generate ecc and rsa. Update Makefile to match. --- diff --git a/src/tests/certs/.gitignore b/src/tests/certs/.gitignore index c05a7d6c541..7ce41b82a35 100644 --- a/src/tests/certs/.gitignore +++ b/src/tests/certs/.gitignore @@ -1 +1,2 @@ *.0 +tmp diff --git a/src/tests/certs/Makefile b/src/tests/certs/Makefile index 66e8484955a..aa9565a8445 100644 --- a/src/tests/certs/Makefile +++ b/src/tests/certs/Makefile @@ -3,7 +3,7 @@ # .PHONY: all all: - @rm -rf tmp + @rm -rf tmp rsa ecc @mkdir -p tmp @cp -a ../../../raddb/certs/ tmp/ @$(MAKE) -C tmp distclean @@ -16,17 +16,17 @@ all: @sed 's/^default_days.*= 60/default_days = 365/' < tmp/ocsp.cnf > tmp/foo @mv tmp/foo tmp/ocsp.cnf @$(MAKE) -C tmp - @cp tmp/ca.* tmp/server.* tmp/client.* tmp/ocsp.* tmp/dh . + @mv tmp/rsa tmp/ecc . .PHONY: print print: - @openssl x509 -text -in ca.pem - @openssl x509 -text -in server.pem - @openssl x509 -text -in client.pem + @openssl x509 -text -in rsa/ca.pem + @openssl x509 -text -in rsa/server.pem + @openssl x509 -text -in rsa/client.pem .PHONY: verify verify: - @openssl verify -CAfile ca.pem server.pem - @openssl verify -CAfile ca.pem ocsp.pem + @openssl verify -CAfile rsa/ca.pem rsa/server.pem + @openssl verify -CAfile rsa/ca.pem rsa/ocsp.pem @c_rehash . - @openssl verify -CApath . client.pem + @openssl verify -CApath rsa rsa/client.pem diff --git a/src/tests/certs/ecc/ca.der b/src/tests/certs/ecc/ca.der new file mode 100644 index 00000000000..819f81e3813 Binary files /dev/null and b/src/tests/certs/ecc/ca.der differ diff --git a/src/tests/certs/ecc/ca.key b/src/tests/certs/ecc/ca.key new file mode 100644 index 00000000000..40aba624c45 --- /dev/null +++ b/src/tests/certs/ecc/ca.key @@ -0,0 +1,8 @@ +-----BEGIN EC PARAMETERS----- +BggqhkjOPQMBBw== +-----END EC PARAMETERS----- +-----BEGIN EC PRIVATE KEY----- +MHcCAQEEINAlMQ96YAV6KT50x7DzXRh6vr3+eGIRkPbn3+35RxLYoAoGCCqGSM49 +AwEHoUQDQgAELmLecj79lnFywp3RNi1ayhcZcvAUJ48ZJstBO5zpdPm92H2Sy/GJ +Dta4P8ODNZzFLSMnjQWtwAN3azEh2g1w7w== +-----END EC PRIVATE KEY----- diff --git a/src/tests/certs/ecc/ca.pem b/src/tests/certs/ecc/ca.pem new file mode 100644 index 00000000000..5dd1e9157b5 --- /dev/null +++ b/src/tests/certs/ecc/ca.pem @@ -0,0 +1,20 @@ +-----BEGIN CERTIFICATE----- +MIIDUzCCAvqgAwIBAgIJAKbWgfwA5PMOMAkGByqGSM49BAEwgZIxCzAJBgNVBAYT +AkZSMQ8wDQYDVQQIDAZSYWRpdXMxEjAQBgNVBAcMCVNvbWV3aGVyZTEUMBIGA1UE +CgwLRXhhbXBsZSBJbmMxIDAeBgkqhkiG9w0BCQEWEWFkbWluQGV4YW1wbGUub3Jn +MSYwJAYDVQQDDB1FeGFtcGxlIENlcnRpZmljYXRlIEF1dGhvcml0eTAeFw0xODAz +MjQyMDAwNTlaFw0xOTAzMjQyMDAwNTlaMIGSMQswCQYDVQQGEwJGUjEPMA0GA1UE +CAwGUmFkaXVzMRIwEAYDVQQHDAlTb21ld2hlcmUxFDASBgNVBAoMC0V4YW1wbGUg +SW5jMSAwHgYJKoZIhvcNAQkBFhFhZG1pbkBleGFtcGxlLm9yZzEmMCQGA1UEAwwd +RXhhbXBsZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwWTATBgcqhkjOPQIBBggqhkjO +PQMBBwNCAAQuYt5yPv2WcXLCndE2LVrKFxly8BQnjxkmy0E7nOl0+b3YfZLL8YkO +1rg/w4M1nMUtIyeNBa3AA3drMSHaDXDvo4IBNjCCATIwHQYDVR0OBBYEFMz5tpPc +Ect397pauwbPYDjDNQjzMIHHBgNVHSMEgb8wgbyAFMz5tpPcEct397pauwbPYDjD +NQjzoYGYpIGVMIGSMQswCQYDVQQGEwJGUjEPMA0GA1UECAwGUmFkaXVzMRIwEAYD +VQQHDAlTb21ld2hlcmUxFDASBgNVBAoMC0V4YW1wbGUgSW5jMSAwHgYJKoZIhvcN +AQkBFhFhZG1pbkBleGFtcGxlLm9yZzEmMCQGA1UEAwwdRXhhbXBsZSBDZXJ0aWZp +Y2F0ZSBBdXRob3JpdHmCCQCm1oH8AOTzDjAPBgNVHRMBAf8EBTADAQH/MDYGA1Ud +HwQvMC0wK6ApoCeGJWh0dHA6Ly93d3cuZXhhbXBsZS5jb20vZXhhbXBsZV9jYS5j +cmwwCQYHKoZIzj0EAQNIADBFAiEAsXKCdYWAcN8fSw8O6EtwqgCpkN3mgMrVhqjy +1sxEuFUCIGhW6WX2Y396cgF6jIFJ1fO4NnmC58lcsSsUmk9aqTCy +-----END CERTIFICATE----- diff --git a/src/tests/certs/ecc/client.crt b/src/tests/certs/ecc/client.crt new file mode 100644 index 00000000000..4af6dda5a05 --- /dev/null +++ b/src/tests/certs/ecc/client.crt @@ -0,0 +1,54 @@ +Certificate: + Data: + Version: 3 (0x2) + Serial Number: 4 (0x4) + Signature Algorithm: ecdsa-with-SHA1 + Issuer: C=FR, ST=Radius, L=Somewhere, O=Example Inc/emailAddress=admin@example.org, CN=Example Certificate Authority + Validity + Not Before: Mar 24 20:00:59 2018 GMT + Not After : Mar 24 20:00:59 2019 GMT + Subject: C=FR, ST=Radius, O=Example Inc, CN=Example user/emailAddress=user.example@example.org + Subject Public Key Info: + Public Key Algorithm: id-ecPublicKey + EC Public Key: + pub: + 04:09:ec:b9:12:04:a7:09:54:95:73:40:da:28:46: + 62:da:b1:2a:88:fa:f0:d8:6f:0d:cf:a1:be:34:31: + 7f:11:a9:7a:de:11:7e:12:47:c8:5b:c4:8a:cc:a5: + 58:ca:68:6f:e5:50:c0:8e:cd:d8:2a:b3:06:da:35: + a4:50:f3:82:8f + ASN1 OID: prime256v1 + X509v3 extensions: + X509v3 Basic Constraints: + CA:FALSE + X509v3 Key Usage: + Digital Signature, Non Repudiation, Key Encipherment + X509v3 Extended Key Usage: + TLS Web Client Authentication + X509v3 CRL Distribution Points: + URI:http://www.example.com/example_ca.crl + + Authority Information Access: + OCSP - URI:http://www.example.org/ocsp + + Signature Algorithm: ecdsa-with-SHA1 + 30:46:02:21:00:92:65:dc:e8:ce:c1:ae:96:a2:e8:2a:eb:d2: + 42:5c:91:ab:43:82:48:e4:d9:7b:b0:4c:a0:61:99:2e:85:fa: + 7f:02:21:00:b6:68:48:3c:db:ab:11:70:c0:ec:e1:be:bc:ea: + 04:62:5f:07:1f:89:c0:43:97:74:69:09:d3:7d:eb:69:9d:89 +-----BEGIN CERTIFICATE----- +MIIClzCCAj2gAwIBAgIBBDAJBgcqhkjOPQQBMIGSMQswCQYDVQQGEwJGUjEPMA0G +A1UECAwGUmFkaXVzMRIwEAYDVQQHDAlTb21ld2hlcmUxFDASBgNVBAoMC0V4YW1w +bGUgSW5jMSAwHgYJKoZIhvcNAQkBFhFhZG1pbkBleGFtcGxlLm9yZzEmMCQGA1UE +AwwdRXhhbXBsZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMTgwMzI0MjAwMDU5 +WhcNMTkwMzI0MjAwMDU5WjB0MQswCQYDVQQGEwJGUjEPMA0GA1UECAwGUmFkaXVz +MRQwEgYDVQQKDAtFeGFtcGxlIEluYzEVMBMGA1UEAwwMRXhhbXBsZSB1c2VyMScw +JQYJKoZIhvcNAQkBFhh1c2VyLmV4YW1wbGVAZXhhbXBsZS5vcmcwWTATBgcqhkjO +PQIBBggqhkjOPQMBBwNCAAQJ7LkSBKcJVJVzQNooRmLasSqI+vDYbw3Pob40MX8R +qXreEX4SR8hbxIrMpVjKaG/lUMCOzdgqswbaNaRQ84KPo4GhMIGeMAkGA1UdEwQC +MAAwCwYDVR0PBAQDAgXgMBMGA1UdJQQMMAoGCCsGAQUFBwMCMDYGA1UdHwQvMC0w +K6ApoCeGJWh0dHA6Ly93d3cuZXhhbXBsZS5jb20vZXhhbXBsZV9jYS5jcmwwNwYI +KwYBBQUHAQEEKzApMCcGCCsGAQUFBzABhhtodHRwOi8vd3d3LmV4YW1wbGUub3Jn +L29jc3AwCQYHKoZIzj0EAQNJADBGAiEAkmXc6M7Brpai6Crr0kJckatDgkjk2Xuw +TKBhmS6F+n8CIQC2aEg826sRcMDs4b686gRiXwcficBDl3RpCdN962mdiQ== +-----END CERTIFICATE----- diff --git a/src/tests/certs/ecc/client.csr b/src/tests/certs/ecc/client.csr new file mode 100644 index 00000000000..2f2b54885ef --- /dev/null +++ b/src/tests/certs/ecc/client.csr @@ -0,0 +1,10 @@ +-----BEGIN CERTIFICATE REQUEST----- +MIIBXzCCAQYCAQAwgaMxCzAJBgNVBAYTAkZSMQ8wDQYDVQQIDAZSYWRpdXMxEjAQ +BgNVBAcMCVNvbWV3aGVyZTEUMBIGA1UECgwLRXhhbXBsZSBJbmMxJzAlBgkqhkiG +9w0BCQEWGHVzZXIuZXhhbXBsZUBleGFtcGxlLm9yZzEVMBMGA1UEAwwMRXhhbXBs +ZSB1c2VyMRkwFwYDVR0RDBB1c2VyQGV4YW1wbGUub3JnMFkwEwYHKoZIzj0CAQYI +KoZIzj0DAQcDQgAECey5EgSnCVSVc0DaKEZi2rEqiPrw2G8Nz6G+NDF/Eal63hF+ +EkfIW8SKzKVYymhv5VDAjs3YKrMG2jWkUPOCj6AAMAkGByqGSM49BAEDSAAwRQIg +BojYJrwYnBtW+EOCrnwNejAOKF+ov1GmtzKAsHS+WHsCIQDnuUju0vAUvoOde9/W +cbA6JdWM/ZjPgNwSSnxAQT9qpQ== +-----END CERTIFICATE REQUEST----- diff --git a/src/tests/certs/ecc/client.key b/src/tests/certs/ecc/client.key new file mode 100644 index 00000000000..40f67f8f4f6 --- /dev/null +++ b/src/tests/certs/ecc/client.key @@ -0,0 +1,8 @@ +-----BEGIN EC PARAMETERS----- +BggqhkjOPQMBBw== +-----END EC PARAMETERS----- +-----BEGIN EC PRIVATE KEY----- +MHcCAQEEICMD+5l0xUAm/SBig4xCg3ccSgFPTILBbD+W6NclpzNJoAoGCCqGSM49 +AwEHoUQDQgAECey5EgSnCVSVc0DaKEZi2rEqiPrw2G8Nz6G+NDF/Eal63hF+EkfI +W8SKzKVYymhv5VDAjs3YKrMG2jWkUPOCjw== +-----END EC PRIVATE KEY----- diff --git a/src/tests/certs/ecc/client.p12 b/src/tests/certs/ecc/client.p12 new file mode 100644 index 00000000000..1fbe79f4b5e Binary files /dev/null and b/src/tests/certs/ecc/client.p12 differ diff --git a/src/tests/certs/ecc/client.pem b/src/tests/certs/ecc/client.pem new file mode 100644 index 00000000000..a1317928b7b --- /dev/null +++ b/src/tests/certs/ecc/client.pem @@ -0,0 +1,31 @@ +Bag Attributes + localKeyID: C3 FA 33 BF 62 A0 B1 41 7F C5 2E C3 72 DE 48 93 4E F3 43 99 +subject=/C=FR/ST=Radius/O=Example Inc/CN=Example user/emailAddress=user.example@example.org +issuer=/C=FR/ST=Radius/L=Somewhere/O=Example Inc/emailAddress=admin@example.org/CN=Example Certificate Authority +-----BEGIN CERTIFICATE----- +MIIClzCCAj2gAwIBAgIBBDAJBgcqhkjOPQQBMIGSMQswCQYDVQQGEwJGUjEPMA0G +A1UECAwGUmFkaXVzMRIwEAYDVQQHDAlTb21ld2hlcmUxFDASBgNVBAoMC0V4YW1w +bGUgSW5jMSAwHgYJKoZIhvcNAQkBFhFhZG1pbkBleGFtcGxlLm9yZzEmMCQGA1UE +AwwdRXhhbXBsZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMTgwMzI0MjAwMDU5 +WhcNMTkwMzI0MjAwMDU5WjB0MQswCQYDVQQGEwJGUjEPMA0GA1UECAwGUmFkaXVz +MRQwEgYDVQQKDAtFeGFtcGxlIEluYzEVMBMGA1UEAwwMRXhhbXBsZSB1c2VyMScw +JQYJKoZIhvcNAQkBFhh1c2VyLmV4YW1wbGVAZXhhbXBsZS5vcmcwWTATBgcqhkjO +PQIBBggqhkjOPQMBBwNCAAQJ7LkSBKcJVJVzQNooRmLasSqI+vDYbw3Pob40MX8R +qXreEX4SR8hbxIrMpVjKaG/lUMCOzdgqswbaNaRQ84KPo4GhMIGeMAkGA1UdEwQC +MAAwCwYDVR0PBAQDAgXgMBMGA1UdJQQMMAoGCCsGAQUFBwMCMDYGA1UdHwQvMC0w +K6ApoCeGJWh0dHA6Ly93d3cuZXhhbXBsZS5jb20vZXhhbXBsZV9jYS5jcmwwNwYI +KwYBBQUHAQEEKzApMCcGCCsGAQUFBzABhhtodHRwOi8vd3d3LmV4YW1wbGUub3Jn +L29jc3AwCQYHKoZIzj0EAQNJADBGAiEAkmXc6M7Brpai6Crr0kJckatDgkjk2Xuw +TKBhmS6F+n8CIQC2aEg826sRcMDs4b686gRiXwcficBDl3RpCdN962mdiQ== +-----END CERTIFICATE----- +Bag Attributes + localKeyID: C3 FA 33 BF 62 A0 B1 41 7F C5 2E C3 72 DE 48 93 4E F3 43 99 +Key Attributes: +-----BEGIN EC PRIVATE KEY----- +Proc-Type: 4,ENCRYPTED +DEK-Info: DES-EDE3-CBC,F765608781A097B2 + +jdzGz45zRX2np9E3QJpAaP4U+TxZuSg3vSpAr8SPgnAgPacM86yBKRfdLgi0IsbE +S0TVKbFLMEhKrM98ZOU7vEjpAo64j1vgqOSXrIo1UxEebEWc+RxMr1aLUYo1s3he +zd9UmBB1QG8kK0SEsoB1iXlbrPqNuIBQWQUxRtmRIfE= +-----END EC PRIVATE KEY----- diff --git a/src/tests/certs/ecc/ocsp.crt b/src/tests/certs/ecc/ocsp.crt new file mode 100644 index 00000000000..9fe08daac84 --- /dev/null +++ b/src/tests/certs/ecc/ocsp.crt @@ -0,0 +1,46 @@ +Certificate: + Data: + Version: 3 (0x2) + Serial Number: 6 (0x6) + Signature Algorithm: ecdsa-with-SHA1 + Issuer: C=FR, ST=Radius, L=Somewhere, O=Example Inc/emailAddress=admin@example.org, CN=Example Certificate Authority + Validity + Not Before: Mar 24 20:00:59 2018 GMT + Not After : Mar 24 20:00:59 2019 GMT + Subject: C=FR, ST=Radius, O=Example Inc, CN=Example OCSP Responder Certificate/emailAddress=admin@example.org + Subject Public Key Info: + Public Key Algorithm: id-ecPublicKey + EC Public Key: + pub: + 04:9f:11:2d:9b:d0:76:07:2c:01:8a:9a:28:29:10: + 78:ec:67:f8:2b:f9:c3:15:8c:1b:3b:ef:d4:f1:93: + 18:07:cf:33:bd:50:85:f2:a1:2a:de:59:a3:59:84: + ca:25:f8:46:34:6b:d4:bc:7d:52:42:fa:9a:78:40: + ec:d1:93:f0:bd + ASN1 OID: prime256v1 + X509v3 extensions: + X509v3 Basic Constraints: + CA:FALSE + X509v3 Key Usage: + Digital Signature, Non Repudiation, Key Encipherment + X509v3 Extended Key Usage: + OCSP Signing + Signature Algorithm: ecdsa-with-SHA1 + 30:44:02:20:57:10:5d:3c:52:57:63:32:fa:db:00:33:c8:aa: + 28:dd:2e:6f:4f:70:6f:29:39:33:ca:61:0f:91:a2:5b:a0:bb: + 02:20:3a:1f:fa:43:71:95:33:75:b3:3b:5a:7b:fb:85:ea:c6: + 3f:96:00:b6:71:11:b0:bf:a9:0c:66:d1:f6:32:f2:3f +-----BEGIN CERTIFICATE----- +MIICMjCCAdqgAwIBAgIBBjAJBgcqhkjOPQQBMIGSMQswCQYDVQQGEwJGUjEPMA0G +A1UECAwGUmFkaXVzMRIwEAYDVQQHDAlTb21ld2hlcmUxFDASBgNVBAoMC0V4YW1w +bGUgSW5jMSAwHgYJKoZIhvcNAQkBFhFhZG1pbkBleGFtcGxlLm9yZzEmMCQGA1UE +AwwdRXhhbXBsZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMTgwMzI0MjAwMDU5 +WhcNMTkwMzI0MjAwMDU5WjCBgzELMAkGA1UEBhMCRlIxDzANBgNVBAgMBlJhZGl1 +czEUMBIGA1UECgwLRXhhbXBsZSBJbmMxKzApBgNVBAMMIkV4YW1wbGUgT0NTUCBS +ZXNwb25kZXIgQ2VydGlmaWNhdGUxIDAeBgkqhkiG9w0BCQEWEWFkbWluQGV4YW1w +bGUub3JnMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEnxEtm9B2BywBipooKRB4 +7Gf4K/nDFYwbO+/U8ZMYB88zvVCF8qEq3lmjWYTKJfhGNGvUvH1SQvqaeEDs0ZPw +vaMvMC0wCQYDVR0TBAIwADALBgNVHQ8EBAMCBeAwEwYDVR0lBAwwCgYIKwYBBQUH +AwkwCQYHKoZIzj0EAQNHADBEAiBXEF08UldjMvrbADPIqijdLm9PcG8pOTPKYQ+R +oluguwIgOh/6Q3GVM3WzO1p7+4Xqxj+WALZxEbC/qQxm0fYy8j8= +-----END CERTIFICATE----- diff --git a/src/tests/certs/ecc/ocsp.csr b/src/tests/certs/ecc/ocsp.csr new file mode 100644 index 00000000000..ce3e6a06428 --- /dev/null +++ b/src/tests/certs/ecc/ocsp.csr @@ -0,0 +1,10 @@ +-----BEGIN CERTIFICATE REQUEST----- +MIIBbTCCARUCAQAwgbIxCzAJBgNVBAYTAkZSMQ8wDQYDVQQIDAZSYWRpdXMxEjAQ +BgNVBAcMCVNvbWV3aGVyZTEUMBIGA1UECgwLRXhhbXBsZSBJbmMxIDAeBgkqhkiG +9w0BCQEWEWFkbWluQGV4YW1wbGUub3JnMSswKQYDVQQDDCJFeGFtcGxlIE9DU1Ag +UmVzcG9uZGVyIENlcnRpZmljYXRlMRkwFwYDVR0RDBBvY3NwLmV4YW1wbGUub3Jn +MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEnxEtm9B2BywBipooKRB47Gf4K/nD +FYwbO+/U8ZMYB88zvVCF8qEq3lmjWYTKJfhGNGvUvH1SQvqaeEDs0ZPwvaAAMAkG +ByqGSM49BAEDRwAwRAIgfQNyppE4enx6Hae2Vvl2/T5fz++LsulhoyV2oOSz78cC +IH4yMPYBY/BADopLgfnPcklwURkHDYdfih/68wmmS3g1 +-----END CERTIFICATE REQUEST----- diff --git a/src/tests/certs/ecc/ocsp.key b/src/tests/certs/ecc/ocsp.key new file mode 100644 index 00000000000..1ffc24035d6 --- /dev/null +++ b/src/tests/certs/ecc/ocsp.key @@ -0,0 +1,8 @@ +-----BEGIN EC PARAMETERS----- +BggqhkjOPQMBBw== +-----END EC PARAMETERS----- +-----BEGIN EC PRIVATE KEY----- +MHcCAQEEIOFQXZpe733Q9d1C9Bt8QqoVVAIjsd4q9aa2G+CF+rijoAoGCCqGSM49 +AwEHoUQDQgAEnxEtm9B2BywBipooKRB47Gf4K/nDFYwbO+/U8ZMYB88zvVCF8qEq +3lmjWYTKJfhGNGvUvH1SQvqaeEDs0ZPwvQ== +-----END EC PRIVATE KEY----- diff --git a/src/tests/certs/ecc/ocsp.p12 b/src/tests/certs/ecc/ocsp.p12 new file mode 100644 index 00000000000..cc2ef477b52 Binary files /dev/null and b/src/tests/certs/ecc/ocsp.p12 differ diff --git a/src/tests/certs/ecc/ocsp.pem b/src/tests/certs/ecc/ocsp.pem new file mode 100644 index 00000000000..efa015086af --- /dev/null +++ b/src/tests/certs/ecc/ocsp.pem @@ -0,0 +1,29 @@ +Bag Attributes + localKeyID: F7 DE 4A 73 CB 64 40 76 99 08 89 35 10 9F 39 69 1D EC 7C AD +subject=/C=FR/ST=Radius/O=Example Inc/CN=Example OCSP Responder Certificate/emailAddress=admin@example.org +issuer=/C=FR/ST=Radius/L=Somewhere/O=Example Inc/emailAddress=admin@example.org/CN=Example Certificate Authority +-----BEGIN CERTIFICATE----- +MIICMjCCAdqgAwIBAgIBBjAJBgcqhkjOPQQBMIGSMQswCQYDVQQGEwJGUjEPMA0G +A1UECAwGUmFkaXVzMRIwEAYDVQQHDAlTb21ld2hlcmUxFDASBgNVBAoMC0V4YW1w +bGUgSW5jMSAwHgYJKoZIhvcNAQkBFhFhZG1pbkBleGFtcGxlLm9yZzEmMCQGA1UE +AwwdRXhhbXBsZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMTgwMzI0MjAwMDU5 +WhcNMTkwMzI0MjAwMDU5WjCBgzELMAkGA1UEBhMCRlIxDzANBgNVBAgMBlJhZGl1 +czEUMBIGA1UECgwLRXhhbXBsZSBJbmMxKzApBgNVBAMMIkV4YW1wbGUgT0NTUCBS +ZXNwb25kZXIgQ2VydGlmaWNhdGUxIDAeBgkqhkiG9w0BCQEWEWFkbWluQGV4YW1w +bGUub3JnMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEnxEtm9B2BywBipooKRB4 +7Gf4K/nDFYwbO+/U8ZMYB88zvVCF8qEq3lmjWYTKJfhGNGvUvH1SQvqaeEDs0ZPw +vaMvMC0wCQYDVR0TBAIwADALBgNVHQ8EBAMCBeAwEwYDVR0lBAwwCgYIKwYBBQUH +AwkwCQYHKoZIzj0EAQNHADBEAiBXEF08UldjMvrbADPIqijdLm9PcG8pOTPKYQ+R +oluguwIgOh/6Q3GVM3WzO1p7+4Xqxj+WALZxEbC/qQxm0fYy8j8= +-----END CERTIFICATE----- +Bag Attributes + localKeyID: F7 DE 4A 73 CB 64 40 76 99 08 89 35 10 9F 39 69 1D EC 7C AD +Key Attributes: +-----BEGIN EC PRIVATE KEY----- +Proc-Type: 4,ENCRYPTED +DEK-Info: DES-EDE3-CBC,3D76F8E077C2A96C + +6P8hOXomSHM5O9EnzEp+MAdEp2LGfJp8/v1MNeyWVg9uJLIWLeOON2oWFYsPJAbm +EZE01uqrkEHU7As9uYW5iIa2ylDYE6iibGBlbwzipjHwdYnp7Qj3dGElt0ApDysV +Cv1RvrzqXIP4yoFtdlehzFVcmIFQwXx8dxUFLCuUGbc= +-----END EC PRIVATE KEY----- diff --git a/src/tests/certs/ecc/server.crt b/src/tests/certs/ecc/server.crt new file mode 100644 index 00000000000..b6324125115 --- /dev/null +++ b/src/tests/certs/ecc/server.crt @@ -0,0 +1,55 @@ +Certificate: + Data: + Version: 3 (0x2) + Serial Number: 2 (0x2) + Signature Algorithm: ecdsa-with-SHA1 + Issuer: C=FR, ST=Radius, L=Somewhere, O=Example Inc/emailAddress=admin@example.org, CN=Example Certificate Authority + Validity + Not Before: Mar 24 20:00:59 2018 GMT + Not After : Mar 24 20:00:59 2019 GMT + Subject: C=FR, ST=Radius, O=Example Inc, CN=Example Server Certificate/emailAddress=admin@example.org + Subject Public Key Info: + Public Key Algorithm: id-ecPublicKey + EC Public Key: + pub: + 04:b0:3b:4d:78:cd:c2:d4:c7:5b:10:f0:41:c4:d1: + 7a:59:fb:8c:ea:07:ec:32:9f:b7:cd:c9:50:4c:7c: + 4a:b2:ee:6e:d6:68:6d:31:42:97:4c:75:4d:c4:f5: + 7b:a4:f1:c8:d9:c5:fb:c4:a6:48:15:ac:0d:4c:f5: + d6:c6:81:05:34 + ASN1 OID: prime256v1 + X509v3 extensions: + X509v3 Basic Constraints: + CA:FALSE + X509v3 Key Usage: + Digital Signature, Non Repudiation, Key Encipherment + X509v3 Extended Key Usage: + TLS Web Server Authentication + X509v3 CRL Distribution Points: + URI:http://www.example.com/example_ca.crl + + Authority Information Access: + OCSP - URI:http://www.example.org/ocsp + + Signature Algorithm: ecdsa-with-SHA1 + 30:46:02:21:00:fd:56:bc:41:24:9a:bb:11:5b:82:83:7c:8a: + 8b:f9:29:4a:a4:d7:2f:d1:9c:93:c5:ab:65:19:0b:56:07:77: + 03:02:21:00:da:53:26:d3:30:70:6a:6a:98:6e:ed:c4:4a:c6: + 8b:4f:de:cf:30:b9:9d:1f:e6:8d:ec:60:ef:9b:6a:a1:e4:bc +-----BEGIN CERTIFICATE----- +MIICnjCCAkSgAwIBAgIBAjAJBgcqhkjOPQQBMIGSMQswCQYDVQQGEwJGUjEPMA0G +A1UECAwGUmFkaXVzMRIwEAYDVQQHDAlTb21ld2hlcmUxFDASBgNVBAoMC0V4YW1w +bGUgSW5jMSAwHgYJKoZIhvcNAQkBFhFhZG1pbkBleGFtcGxlLm9yZzEmMCQGA1UE +AwwdRXhhbXBsZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMTgwMzI0MjAwMDU5 +WhcNMTkwMzI0MjAwMDU5WjB7MQswCQYDVQQGEwJGUjEPMA0GA1UECAwGUmFkaXVz +MRQwEgYDVQQKDAtFeGFtcGxlIEluYzEjMCEGA1UEAwwaRXhhbXBsZSBTZXJ2ZXIg +Q2VydGlmaWNhdGUxIDAeBgkqhkiG9w0BCQEWEWFkbWluQGV4YW1wbGUub3JnMFkw +EwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEsDtNeM3C1MdbEPBBxNF6WfuM6gfsMp+3 +zclQTHxKsu5u1mhtMUKXTHVNxPV7pPHI2cX7xKZIFawNTPXWxoEFNKOBoTCBnjAJ +BgNVHRMEAjAAMAsGA1UdDwQEAwIF4DATBgNVHSUEDDAKBggrBgEFBQcDATA2BgNV +HR8ELzAtMCugKaAnhiVodHRwOi8vd3d3LmV4YW1wbGUuY29tL2V4YW1wbGVfY2Eu +Y3JsMDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAYYbaHR0cDovL3d3dy5leGFt +cGxlLm9yZy9vY3NwMAkGByqGSM49BAEDSQAwRgIhAP1WvEEkmrsRW4KDfIqL+SlK +pNcv0ZyTxatlGQtWB3cDAiEA2lMm0zBwamqYbu3ESsaLT97PMLmdH+aN7GDvm2qh +5Lw= +-----END CERTIFICATE----- diff --git a/src/tests/certs/ecc/server.csr b/src/tests/certs/ecc/server.csr new file mode 100644 index 00000000000..f22c155b9a9 --- /dev/null +++ b/src/tests/certs/ecc/server.csr @@ -0,0 +1,10 @@ +-----BEGIN CERTIFICATE REQUEST----- +MIIBZzCCAQ8CAQAwgawxCzAJBgNVBAYTAkZSMQ8wDQYDVQQIDAZSYWRpdXMxEjAQ +BgNVBAcMCVNvbWV3aGVyZTEUMBIGA1UECgwLRXhhbXBsZSBJbmMxIDAeBgkqhkiG +9w0BCQEWEWFkbWluQGV4YW1wbGUub3JnMSMwIQYDVQQDDBpFeGFtcGxlIFNlcnZl +ciBDZXJ0aWZpY2F0ZTEbMBkGA1UdEQwScmFkaXVzLmV4YW1wbGUub3JnMFkwEwYH +KoZIzj0CAQYIKoZIzj0DAQcDQgAEsDtNeM3C1MdbEPBBxNF6WfuM6gfsMp+3zclQ +THxKsu5u1mhtMUKXTHVNxPV7pPHI2cX7xKZIFawNTPXWxoEFNKAAMAkGByqGSM49 +BAEDRwAwRAIgVXQHqjXWgINbA66ciLa1mqtDZUPpNFBUncmrm+aieVQCICmeMEos +XJo52c+idpr/EORkQmwFjwI64tyDfHIlrzq0 +-----END CERTIFICATE REQUEST----- diff --git a/src/tests/certs/ecc/server.key b/src/tests/certs/ecc/server.key new file mode 100644 index 00000000000..428536d5075 --- /dev/null +++ b/src/tests/certs/ecc/server.key @@ -0,0 +1,8 @@ +-----BEGIN EC PARAMETERS----- +BggqhkjOPQMBBw== +-----END EC PARAMETERS----- +-----BEGIN EC PRIVATE KEY----- +MHcCAQEEICWC0TfchD1so8Nfw2l76XBJS+wg3ggzglFnXh5E/Q+zoAoGCCqGSM49 +AwEHoUQDQgAEsDtNeM3C1MdbEPBBxNF6WfuM6gfsMp+3zclQTHxKsu5u1mhtMUKX +THVNxPV7pPHI2cX7xKZIFawNTPXWxoEFNA== +-----END EC PRIVATE KEY----- diff --git a/src/tests/certs/ecc/server.p12 b/src/tests/certs/ecc/server.p12 new file mode 100644 index 00000000000..d74454e1d5a Binary files /dev/null and b/src/tests/certs/ecc/server.p12 differ diff --git a/src/tests/certs/ecc/server.pem b/src/tests/certs/ecc/server.pem new file mode 100644 index 00000000000..fada743f4cf --- /dev/null +++ b/src/tests/certs/ecc/server.pem @@ -0,0 +1,32 @@ +Bag Attributes + localKeyID: 51 0F 01 DD A0 8B F4 AB AC 5E EC F8 7D 85 30 15 3A 3B 9B FE +subject=/C=FR/ST=Radius/O=Example Inc/CN=Example Server Certificate/emailAddress=admin@example.org +issuer=/C=FR/ST=Radius/L=Somewhere/O=Example Inc/emailAddress=admin@example.org/CN=Example Certificate Authority +-----BEGIN CERTIFICATE----- +MIICnjCCAkSgAwIBAgIBAjAJBgcqhkjOPQQBMIGSMQswCQYDVQQGEwJGUjEPMA0G +A1UECAwGUmFkaXVzMRIwEAYDVQQHDAlTb21ld2hlcmUxFDASBgNVBAoMC0V4YW1w +bGUgSW5jMSAwHgYJKoZIhvcNAQkBFhFhZG1pbkBleGFtcGxlLm9yZzEmMCQGA1UE +AwwdRXhhbXBsZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMTgwMzI0MjAwMDU5 +WhcNMTkwMzI0MjAwMDU5WjB7MQswCQYDVQQGEwJGUjEPMA0GA1UECAwGUmFkaXVz +MRQwEgYDVQQKDAtFeGFtcGxlIEluYzEjMCEGA1UEAwwaRXhhbXBsZSBTZXJ2ZXIg +Q2VydGlmaWNhdGUxIDAeBgkqhkiG9w0BCQEWEWFkbWluQGV4YW1wbGUub3JnMFkw +EwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEsDtNeM3C1MdbEPBBxNF6WfuM6gfsMp+3 +zclQTHxKsu5u1mhtMUKXTHVNxPV7pPHI2cX7xKZIFawNTPXWxoEFNKOBoTCBnjAJ +BgNVHRMEAjAAMAsGA1UdDwQEAwIF4DATBgNVHSUEDDAKBggrBgEFBQcDATA2BgNV +HR8ELzAtMCugKaAnhiVodHRwOi8vd3d3LmV4YW1wbGUuY29tL2V4YW1wbGVfY2Eu +Y3JsMDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAYYbaHR0cDovL3d3dy5leGFt +cGxlLm9yZy9vY3NwMAkGByqGSM49BAEDSQAwRgIhAP1WvEEkmrsRW4KDfIqL+SlK +pNcv0ZyTxatlGQtWB3cDAiEA2lMm0zBwamqYbu3ESsaLT97PMLmdH+aN7GDvm2qh +5Lw= +-----END CERTIFICATE----- +Bag Attributes + localKeyID: 51 0F 01 DD A0 8B F4 AB AC 5E EC F8 7D 85 30 15 3A 3B 9B FE +Key Attributes: +-----BEGIN EC PRIVATE KEY----- +Proc-Type: 4,ENCRYPTED +DEK-Info: DES-EDE3-CBC,BEDD4C349D6727ED + +iu3eMqez5PyqLRIbOxZknW6s6CySz/pP7r+xQtmFJaCFP55AR8pvooI6lUNVRGTN +dyEA0j/jYz64GOtFozGyDCY2ffLY0iC42lxaps8SorpL+Y3JqsSRlkvsB8/vM7HO +SBiLy5JX9iEW5IjfHdqWsCSLJzMrr9nDwUb8WU3nNcw= +-----END EC PRIVATE KEY----- diff --git a/src/tests/certs/rsa/ca.der b/src/tests/certs/rsa/ca.der new file mode 100644 index 00000000000..e23d184271d Binary files /dev/null and b/src/tests/certs/rsa/ca.der differ diff --git a/src/tests/certs/rsa/ca.key b/src/tests/certs/rsa/ca.key new file mode 100644 index 00000000000..a208ab220e1 --- /dev/null +++ b/src/tests/certs/rsa/ca.key @@ -0,0 +1,30 @@ +-----BEGIN RSA PRIVATE KEY----- +Proc-Type: 4,ENCRYPTED +DEK-Info: DES-EDE3-CBC,E19FE4539ADD257A + +Hj5ZNPmy2cd0UaDr6jPf5aNEtE/jcgO376zPpmy9tOJ+Xq2WZPP3cKw/RjCgaU2O +jcjwYmH9CbRrjEgrXpfZeYsLR/cTyt+j0+/EDepTbNeLBScBLAaCQfdb4EOmTxwp +K74uZu8Z0YctXeeEmw8yOMNeDjKhGnjzPtrNKMsjW/F6gPgri9u7JHT3K+YZJ5Wo +NFcgqcnmabHPiN8xFW8rZyvbi6K5u3mb7hRMapCL4OBZM/4B+yjeg8FOPlrXZeIJ +0mv0mBWbiacyvEjxkuOz+MYwfJD8Fe11mMgzfn0MgcVNM6cf7OKXOmCG7o/DRxu6 +S0m+1pZRb5bAlbPajZAmi7zbeoXslLq8ycDkLY+esvnNZHxXI/LvTouRhlqx7bSR ++xcFSYb55r0J6EKn3jl/QqIheJbNVwdCiGEaSTqlONu7KtFttg9FGw3IS5Y2HiLG +glGNPH5AngnlcsYXwFmsjdAJOMZ3ugJoJkLjCXl1tuesaOZ5enAAVhIw9V7SAmHn +HWsM9f50QCSYjVNSNbUei5Flh4QsmWZk5KjU2ynNW1aqTDQvogqvy4B6UnI6Z1pi +NYmc7FeU+dluZBnUR5CsN5r7uiP+Ww5hQEiU8nxIQ4FxheiTr9hlu6iO+0gI555z +DQDHvosb35RIeKfe7iK/g67BKx9nuA0fiqAjtmRFGBD2GK/cAznLNlR5dO69JA8C +R6VR7irk/4YG3WzxrBLdq6ie/nDm6ntxBnbJdWUdZL1q1FB7YEzaH+rJdN56Z9iQ +oz8Ktv3Ch1QTJLizVgJqbl/UBJO6JuIYFn/4Cd20JJ1Q4plKXmB501jq2NMHQ9L1 +T/f91utuTMorvtAlGb1VMWVO3oVNoW+FIN7PfDQdPYxCVs/8EDbCxkNO0qr+HeYk +dltKQG++RrkEinQXOzBBS07t8sQihrfmIMFgtqMESAy9LnUKwQVv4moZnogJWep/ +lrTehLwsRiSf7U9cISpF1kdbzVM1+WdVn+6dT1X6t/mlYF7fCuFVGo9KvtqWgkqr +LhhK3clrEr2CodEer0nQTmCfX4yPMzy1ec5DA4u7HMJygP4xgM3KL1SGj1p9QurD +z8Hi7wGw679+qmvjZD50m9MZWlDeTIA1b9v9Bu/7ctYgocPsc1o7M0/m7CgmRwna +S5g3bIEOkwoKw3t7h0N9qEm39PMXtl5lKxWmWSn0S7Mjj1wvGUBtj6N7bckbJomd +WF0TTBHgXCrJJdeRGlzHdYoE/2UiMhkOYWMl4TUlfjrbWpZy6NYYGIyqTtKogomy +p3OaRbd0SFL2ST+yQ5CL7SMQyFdH5tu21Bv6fMfqYhC3rdKPW3xPBIjkgFr+yvqN +CbxNA4MChYXRnvoNpLAT0ZdN9c/DaK1izlywa/Kpi0VceB8GVU5WJq+9zB6Aa7fM +y3+I2e1h1+3EvKVzSf/UhjK8cAdIsJWxY6KDsvqpdLPOFfWGFwsByI3JgWdQ4CCs +Wpo3IZv26XmTZj5gvmm+qU98Wl4DYXxGNiEok8TgZhBOglVvdcu/sM7vIR89EZsV +UUUG2QV6ZjhzPGd3m0vsncBsN88hMkWLMG8z+ymH0vcAdEIqLGhG1Q== +-----END RSA PRIVATE KEY----- diff --git a/src/tests/certs/rsa/ca.pem b/src/tests/certs/rsa/ca.pem new file mode 100644 index 00000000000..f969807a52c --- /dev/null +++ b/src/tests/certs/rsa/ca.pem @@ -0,0 +1,29 @@ +-----BEGIN CERTIFICATE----- +MIIE4TCCA8mgAwIBAgIJAP0PqfrmiStSMA0GCSqGSIb3DQEBBQUAMIGSMQswCQYD +VQQGEwJGUjEPMA0GA1UECAwGUmFkaXVzMRIwEAYDVQQHDAlTb21ld2hlcmUxFDAS +BgNVBAoMC0V4YW1wbGUgSW5jMSAwHgYJKoZIhvcNAQkBFhFhZG1pbkBleGFtcGxl +Lm9yZzEmMCQGA1UEAwwdRXhhbXBsZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcN +MTgwMzI0MjAwMDU5WhcNMTkwMzI0MjAwMDU5WjCBkjELMAkGA1UEBhMCRlIxDzAN +BgNVBAgMBlJhZGl1czESMBAGA1UEBwwJU29tZXdoZXJlMRQwEgYDVQQKDAtFeGFt +cGxlIEluYzEgMB4GCSqGSIb3DQEJARYRYWRtaW5AZXhhbXBsZS5vcmcxJjAkBgNV +BAMMHUV4YW1wbGUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0B +AQEFAAOCAQ8AMIIBCgKCAQEAzKmZpdqm65oIrzTKVEt4dkslM/dhEH+8TU08gAt/ +6S8LJDnupjsxGgaAc20MsFPpS/O3gDw/1p0i72NnwtPLr8xRyQgLPnxslyVaD0eP +qbo3UloGrM2vQv4mYuOdYvwSk0rYuMSnu4I9DauYdTAh4q857sj7sCWhRDQHzI0/ +dSikI65kVsRVAxJc9fclm6lDT31ULuTA/xlDc++NbMDQQxvsPbij6tTD4pnde0al +LvMHViLNokk1yxxdRQzxDpV051io9ZUgDBPFSTwb7PcRx/C26mZKadLv8U/RpZwC +vrupg5yQmfyI5YWHVaaBLehs448SYhRQ/Yv2MC23mtDpiwIDAQABo4IBNjCCATIw +HQYDVR0OBBYEFHn4vwPqlFaj0Dg+OpLkXqIn3+aSMIHHBgNVHSMEgb8wgbyAFHn4 +vwPqlFaj0Dg+OpLkXqIn3+aSoYGYpIGVMIGSMQswCQYDVQQGEwJGUjEPMA0GA1UE +CAwGUmFkaXVzMRIwEAYDVQQHDAlTb21ld2hlcmUxFDASBgNVBAoMC0V4YW1wbGUg +SW5jMSAwHgYJKoZIhvcNAQkBFhFhZG1pbkBleGFtcGxlLm9yZzEmMCQGA1UEAwwd +RXhhbXBsZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHmCCQD9D6n65okrUjAPBgNVHRMB +Af8EBTADAQH/MDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6Ly93d3cuZXhhbXBsZS5j +b20vZXhhbXBsZV9jYS5jcmwwDQYJKoZIhvcNAQEFBQADggEBAAdMzmWl95W2fbJ5 +rZ1W6P71hdUwdgX7CgjGkiq8b8bpPmDnf7Nfu6ziJqOcDCukA610zpWtrzMxcZpP +rpBYir3tSqaYGCzknGyKqI08wfwxivklqcWYcFFFnz1DmF9hIE7zZKBKEHYOB0og +K1BdT1danRRz0BFJ8WbNGnC1AHvL/67YF3v4ewyRkyY977MdCmK2GEU3MPPJtf5X +FZpK2s4vpO9XJigaA4F7ZmYYMozLmH04mPGBk7v53XJYvjIoYYkHnj59XFLDZxQJ +ilKeY+rXSimXRTcPalgIlWeFszMUcWSxpx4PBXLikPvZcKy2XRo9xBqvBA4UkHrO +TWhVTyA= +-----END CERTIFICATE----- diff --git a/src/tests/certs/rsa/client.crt b/src/tests/certs/rsa/client.crt new file mode 100644 index 00000000000..3da6def4022 --- /dev/null +++ b/src/tests/certs/rsa/client.crt @@ -0,0 +1,87 @@ +Certificate: + Data: + Version: 3 (0x2) + Serial Number: 3 (0x3) + Signature Algorithm: sha256WithRSAEncryption + Issuer: C=FR, ST=Radius, L=Somewhere, O=Example Inc/emailAddress=admin@example.org, CN=Example Certificate Authority + Validity + Not Before: Mar 24 20:00:59 2018 GMT + Not After : Mar 24 20:00:59 2019 GMT + Subject: C=FR, ST=Radius, O=Example Inc, CN=Example user/emailAddress=user.example@example.org + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + RSA Public Key: (2048 bit) + Modulus (2048 bit): + 00:c0:5a:b8:df:f1:2e:77:b0:b4:48:99:79:a9:c9: + a3:02:2b:77:9e:99:db:d9:d9:30:97:4b:65:5c:1f: + ad:8a:e8:d6:ae:fb:c7:f6:79:f4:8d:07:9b:1b:d7: + 01:59:d0:db:63:58:c1:a3:46:06:62:6a:11:fd:35: + b7:e7:b6:a3:b2:b9:64:22:87:3c:e7:d8:5e:48:2a: + bd:fb:3c:96:1e:76:d7:ba:ee:8d:2b:ab:1e:ce:13: + 79:30:b6:06:43:76:a7:f7:fd:a7:ef:6d:13:4c:9c: + 75:37:ee:b0:d6:9d:3d:23:b7:d9:ca:7d:88:b0:df: + 53:f5:92:1c:4b:1a:3e:6d:2c:a3:fc:d6:02:a8:20: + cc:85:94:dc:38:3f:00:31:29:b1:43:97:fa:2a:cb: + 5d:27:db:40:93:b4:5d:c9:a0:94:de:f1:0f:72:09: + f6:16:d3:3c:f5:c4:b4:ec:da:4c:f1:84:20:96:dc: + d1:e2:ca:ed:09:7a:4b:7f:f7:31:6b:87:41:15:20: + 13:32:9e:46:86:f8:7e:77:e5:db:13:2e:0f:0a:df: + aa:26:5a:cf:65:f0:e2:71:f2:57:33:ae:90:f5:93: + c9:3b:ab:1d:88:75:95:80:f1:c6:2a:f5:4d:69:fc: + 01:5f:ff:4f:3d:84:f9:01:c4:88:26:c6:4e:d0:4f: + 94:eb + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Basic Constraints: + CA:FALSE + X509v3 Key Usage: + Digital Signature, Non Repudiation, Key Encipherment + X509v3 Extended Key Usage: + TLS Web Client Authentication + X509v3 CRL Distribution Points: + URI:http://www.example.com/example_ca.crl + + Authority Information Access: + OCSP - URI:http://www.example.org/ocsp + + Signature Algorithm: sha256WithRSAEncryption + 77:ca:9c:ec:51:6e:d8:a0:a4:7c:11:26:31:28:e5:47:48:9e: + 5f:f7:d3:be:cf:95:19:23:65:9b:06:e2:20:19:ad:55:92:5e: + d9:35:40:ea:7f:13:25:bc:15:6e:e1:06:c4:69:be:11:64:25: + e5:f3:4c:a7:50:64:31:d8:c6:78:72:d0:d1:4b:7a:32:da:7a: + bd:77:38:36:e2:a6:5b:c5:ae:f1:bf:eb:c6:84:63:61:88:ca: + 6a:86:f4:26:bf:fd:e5:75:e6:eb:11:cf:61:12:7c:b1:2b:37: + bb:82:3a:96:b8:1b:33:3f:3b:bc:81:2c:90:e0:b5:fd:1c:c1: + 1a:89:e9:9c:63:fa:25:81:78:3e:7d:9d:b6:01:51:57:b0:c2: + ea:3f:ca:30:66:b2:d6:40:df:ff:6b:0b:0b:2b:a7:cc:dc:12: + 59:07:b1:22:2a:e2:47:25:b8:f9:d5:87:a3:36:13:7c:b8:92: + 44:b5:d5:95:2d:aa:d5:e6:88:5e:2d:4e:3c:0a:d0:4f:47:2a: + 80:01:c5:7b:d0:66:19:a1:50:79:98:85:e9:af:44:5b:0b:e7: + 7b:17:e3:84:10:78:42:4a:4f:19:87:2d:d1:82:1a:36:47:c5: + 2f:65:a2:07:c3:87:fa:32:a5:70:0d:7c:85:9c:0e:63:f8:be: + ed:07:f0:81 +-----BEGIN CERTIFICATE----- +MIIEJDCCAwygAwIBAgIBAzANBgkqhkiG9w0BAQsFADCBkjELMAkGA1UEBhMCRlIx +DzANBgNVBAgMBlJhZGl1czESMBAGA1UEBwwJU29tZXdoZXJlMRQwEgYDVQQKDAtF +eGFtcGxlIEluYzEgMB4GCSqGSIb3DQEJARYRYWRtaW5AZXhhbXBsZS5vcmcxJjAk +BgNVBAMMHUV4YW1wbGUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MB4XDTE4MDMyNDIw +MDA1OVoXDTE5MDMyNDIwMDA1OVowdDELMAkGA1UEBhMCRlIxDzANBgNVBAgMBlJh +ZGl1czEUMBIGA1UECgwLRXhhbXBsZSBJbmMxFTATBgNVBAMMDEV4YW1wbGUgdXNl +cjEnMCUGCSqGSIb3DQEJARYYdXNlci5leGFtcGxlQGV4YW1wbGUub3JnMIIBIjAN +BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFq43/Eud7C0SJl5qcmjAit3npnb +2dkwl0tlXB+tiujWrvvH9nn0jQebG9cBWdDbY1jBo0YGYmoR/TW357ajsrlkIoc8 +59heSCq9+zyWHnbXuu6NK6sezhN5MLYGQ3an9/2n720TTJx1N+6w1p09I7fZyn2I +sN9T9ZIcSxo+bSyj/NYCqCDMhZTcOD8AMSmxQ5f6KstdJ9tAk7RdyaCU3vEPcgn2 +FtM89cS07NpM8YQgltzR4srtCXpLf/cxa4dBFSATMp5Ghvh+d+XbEy4PCt+qJlrP +ZfDicfJXM66Q9ZPJO6sdiHWVgPHGKvVNafwBX/9PPYT5AcSIJsZO0E+U6wIDAQAB +o4GhMIGeMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgXgMBMGA1UdJQQMMAoGCCsGAQUF +BwMCMDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6Ly93d3cuZXhhbXBsZS5jb20vZXhh +bXBsZV9jYS5jcmwwNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzABhhtodHRwOi8v +d3d3LmV4YW1wbGUub3JnL29jc3AwDQYJKoZIhvcNAQELBQADggEBAHfKnOxRbtig +pHwRJjEo5UdInl/3077PlRkjZZsG4iAZrVWSXtk1QOp/EyW8FW7hBsRpvhFkJeXz +TKdQZDHYxnhy0NFLejLaer13ODbiplvFrvG/68aEY2GIymqG9Ca//eV15usRz2ES +fLErN7uCOpa4GzM/O7yBLJDgtf0cwRqJ6Zxj+iWBeD59nbYBUVewwuo/yjBmstZA +3/9rCwsrp8zcElkHsSIq4kcluPnVh6M2E3y4kkS11ZUtqtXmiF4tTjwK0E9HKoAB +xXvQZhmhUHmYhemvRFsL53sX44QQeEJKTxmHLdGCGjZHxS9logfDh/oypXANfIWc +DmP4vu0H8IE= +-----END CERTIFICATE----- diff --git a/src/tests/certs/rsa/client.csr b/src/tests/certs/rsa/client.csr new file mode 100644 index 00000000000..84349132c4d --- /dev/null +++ b/src/tests/certs/rsa/client.csr @@ -0,0 +1,18 @@ +-----BEGIN CERTIFICATE REQUEST----- +MIIC6TCCAdECAQAwgaMxCzAJBgNVBAYTAkZSMQ8wDQYDVQQIDAZSYWRpdXMxEjAQ +BgNVBAcMCVNvbWV3aGVyZTEUMBIGA1UECgwLRXhhbXBsZSBJbmMxJzAlBgkqhkiG +9w0BCQEWGHVzZXIuZXhhbXBsZUBleGFtcGxlLm9yZzEVMBMGA1UEAwwMRXhhbXBs +ZSB1c2VyMRkwFwYDVR0RDBB1c2VyQGV4YW1wbGUub3JnMIIBIjANBgkqhkiG9w0B +AQEFAAOCAQ8AMIIBCgKCAQEAwFq43/Eud7C0SJl5qcmjAit3npnb2dkwl0tlXB+t +iujWrvvH9nn0jQebG9cBWdDbY1jBo0YGYmoR/TW357ajsrlkIoc859heSCq9+zyW +HnbXuu6NK6sezhN5MLYGQ3an9/2n720TTJx1N+6w1p09I7fZyn2IsN9T9ZIcSxo+ +bSyj/NYCqCDMhZTcOD8AMSmxQ5f6KstdJ9tAk7RdyaCU3vEPcgn2FtM89cS07NpM +8YQgltzR4srtCXpLf/cxa4dBFSATMp5Ghvh+d+XbEy4PCt+qJlrPZfDicfJXM66Q +9ZPJO6sdiHWVgPHGKvVNafwBX/9PPYT5AcSIJsZO0E+U6wIDAQABoAAwDQYJKoZI +hvcNAQEFBQADggEBAFqnmqGFI7WBxYP90EqubHT6iWdgnDXvcNWI+NYti2QH7SwT +eFoDhPZ5xCp+foQepsQANuBCCWrfIM4iKe41W4q5isE+LrePLyGkx4puNDiQinzA +O6bx+ogakC4inSnCTT6qQfWGR3OPCvhRaqgn6UiFAuJEAdWHF3vigALDrj75OQbN +S7091VXjXrNzXlDN/c2oZkBfC/HEi8vJuCDsIFDcU4ay1b1Q73S4OWKMgDT3Ddmc +3uzYWdUwHlwq2vOuKyIECP7EQb1h41VC2t8hllRyuA8BlvWOSkcCtEtIyWZuj+dZ +GGQvRqVaDC6UTX1oeXM5gU5TMP0Czkkw28ixNyw= +-----END CERTIFICATE REQUEST----- diff --git a/src/tests/certs/rsa/client.key b/src/tests/certs/rsa/client.key new file mode 100644 index 00000000000..ed160ddfecd --- /dev/null +++ b/src/tests/certs/rsa/client.key @@ -0,0 +1,30 @@ +-----BEGIN RSA PRIVATE KEY----- +Proc-Type: 4,ENCRYPTED +DEK-Info: DES-EDE3-CBC,33ABF990832DF48B + +bcK1rY/rMevlaqG2wqTxnXfFh/3UjPVWdPXs2CgGcV+IVfT2JE+dMZRcmGP/ux6t +8XdlsD8s2/0gMosQasOgaenC1Oj8zyioD0CSvJl9Gl4qMrFrv8XxKbPmZeXGuqLM +tBp6MD7spW6RZm1jh8VmqM71UiCf29aTiUos4OVQwV6LzklJv8L3vvliSIceCRtS +2ha+VqcT5RBY7IeOz9c825pWYY5rUsqoK5IwETLUTSvV+3CvqrFRPZSUUrd5jmP3 +kr3xdEe8hIbiZa3grQc2KVtGyixdp17FWWTJcAvr/e67oXHtj8hWoMOAzFj0sti8 +p20ELZEXltT32P/iGABDuZT50+TWsKsaVpllw5SscC06aqM70zhCaJZvH+3yJOhN +d9jZBRqbFDGqhE8S/tt4qJwrxQqjWeI8L+3khzxYP1/svvhZfq9WqAUDS3u8/ou7 +o0y3KNvtFVCXRMhWa2to8F+lYqydVIvUbPkj2HW8RNd7o4U99jObuwfAxdBH+4Sq +7weGETyn/G3djOc3sWgQeyeJ0UFFwCA9keIEpjb5o3brRXeByoo7lKc8gjL6IdpG +JAXlmlIKm7Qut5Yzb8HHh9xqHV0AFHYo8Qyv/9doUt7pdtRSX2OH8f6pZh593BxT +HrkEvHaVTbYKdFh7UMBV1GKDOoT1b36gLiCu4hjSs8okaQtu2dIOWh2IIY7m22qR +g2idNR+cdSs81Tske1yZQpXGY50CZkPWY13oAhhL5+6FMIwCo5F+PUOwrJvLbyuQ +P961RKWMYQiKwdt1MnO2nSodFIY+GM5ToNHzflarwuB6A2v90YRLk+lWOcqXjQz8 +Wx08nh1BdJdQMHID7puJ5RVMvAMicyInhVXQCuSas/043y4SUWVfkxLQVbr+rjBw +R30z6heuRCfd60L9I+r7Il6LZcuycgxyR5fbRjdKquYtCEQ30GpMuyebEitQIngv +FaUSCo8DW+PiznceO62cwIMtBy1XMyVQryuvfHcqp7Hqh6LAsXh8PjIz/YJMyvce +rXa1i9ZsfpbgTl6EOfc+axpiS8ytiJUlercKMdts7Z3jWGLVXgK2Tj0SExa1C/pj +Q39Lk+JRp4OiZxXXWVVIeiKIU34XlzoneOPdbmNvm47D48295iJw5nwqhTlnTu+L +PZQOrV8GV/zpwZURkXKkL6EcDIs1yBFhGqA+FRt9u4U/eZre6IeKGqe+fohX+J84 +ru+Z9NWd8NbuKMgVNzRy5rpKDaBehPbYigZFspl8dI7zJd3eU3YVkFIN6hQHC8Zl +X3JU0cOoo27REFihVRwX3KCZw6Fihm83LJDdgkyk7yee6+At05z6iP+WGiEsFwRH +aFP9ziwtHTtNjrezIKx9mZl7B6K7jXeqFqcGweD5UrRYw4pPn4uhLdBaoywpO0hq +pt2Mt7Wgqo9cCx0BfwEoKZ+BdjvcNxDxgoQaCWw2r3uYdrmJDpEVeW7WQymMJh71 +u27NRrfcpxjTS88qNMeknAw4ATjxftkE7TarydlisPOxMrug7DNf7BRWQh6jXemV +mHOTvo395DheL4WdWSqEvDCbefRPG88cXoRjO60lQoiSd6OH+KwVtg== +-----END RSA PRIVATE KEY----- diff --git a/src/tests/certs/rsa/client.p12 b/src/tests/certs/rsa/client.p12 new file mode 100644 index 00000000000..eef40a87b8e Binary files /dev/null and b/src/tests/certs/rsa/client.p12 differ diff --git a/src/tests/certs/rsa/client.pem b/src/tests/certs/rsa/client.pem new file mode 100644 index 00000000000..c2fb1c4f9a7 --- /dev/null +++ b/src/tests/certs/rsa/client.pem @@ -0,0 +1,62 @@ +Bag Attributes + localKeyID: 34 D8 3A F6 02 A1 50 DC 3C F2 A0 5E 16 D4 AA FA 14 2D 2F 88 +subject=/C=FR/ST=Radius/O=Example Inc/CN=Example user/emailAddress=user.example@example.org +issuer=/C=FR/ST=Radius/L=Somewhere/O=Example Inc/emailAddress=admin@example.org/CN=Example Certificate Authority +-----BEGIN CERTIFICATE----- +MIIEJDCCAwygAwIBAgIBAzANBgkqhkiG9w0BAQsFADCBkjELMAkGA1UEBhMCRlIx +DzANBgNVBAgMBlJhZGl1czESMBAGA1UEBwwJU29tZXdoZXJlMRQwEgYDVQQKDAtF +eGFtcGxlIEluYzEgMB4GCSqGSIb3DQEJARYRYWRtaW5AZXhhbXBsZS5vcmcxJjAk +BgNVBAMMHUV4YW1wbGUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MB4XDTE4MDMyNDIw +MDA1OVoXDTE5MDMyNDIwMDA1OVowdDELMAkGA1UEBhMCRlIxDzANBgNVBAgMBlJh +ZGl1czEUMBIGA1UECgwLRXhhbXBsZSBJbmMxFTATBgNVBAMMDEV4YW1wbGUgdXNl +cjEnMCUGCSqGSIb3DQEJARYYdXNlci5leGFtcGxlQGV4YW1wbGUub3JnMIIBIjAN +BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFq43/Eud7C0SJl5qcmjAit3npnb +2dkwl0tlXB+tiujWrvvH9nn0jQebG9cBWdDbY1jBo0YGYmoR/TW357ajsrlkIoc8 +59heSCq9+zyWHnbXuu6NK6sezhN5MLYGQ3an9/2n720TTJx1N+6w1p09I7fZyn2I +sN9T9ZIcSxo+bSyj/NYCqCDMhZTcOD8AMSmxQ5f6KstdJ9tAk7RdyaCU3vEPcgn2 +FtM89cS07NpM8YQgltzR4srtCXpLf/cxa4dBFSATMp5Ghvh+d+XbEy4PCt+qJlrP +ZfDicfJXM66Q9ZPJO6sdiHWVgPHGKvVNafwBX/9PPYT5AcSIJsZO0E+U6wIDAQAB +o4GhMIGeMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgXgMBMGA1UdJQQMMAoGCCsGAQUF +BwMCMDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6Ly93d3cuZXhhbXBsZS5jb20vZXhh +bXBsZV9jYS5jcmwwNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzABhhtodHRwOi8v +d3d3LmV4YW1wbGUub3JnL29jc3AwDQYJKoZIhvcNAQELBQADggEBAHfKnOxRbtig +pHwRJjEo5UdInl/3077PlRkjZZsG4iAZrVWSXtk1QOp/EyW8FW7hBsRpvhFkJeXz +TKdQZDHYxnhy0NFLejLaer13ODbiplvFrvG/68aEY2GIymqG9Ca//eV15usRz2ES +fLErN7uCOpa4GzM/O7yBLJDgtf0cwRqJ6Zxj+iWBeD59nbYBUVewwuo/yjBmstZA +3/9rCwsrp8zcElkHsSIq4kcluPnVh6M2E3y4kkS11ZUtqtXmiF4tTjwK0E9HKoAB +xXvQZhmhUHmYhemvRFsL53sX44QQeEJKTxmHLdGCGjZHxS9logfDh/oypXANfIWc +DmP4vu0H8IE= +-----END CERTIFICATE----- +Bag Attributes + localKeyID: 34 D8 3A F6 02 A1 50 DC 3C F2 A0 5E 16 D4 AA FA 14 2D 2F 88 +Key Attributes: +-----BEGIN RSA PRIVATE KEY----- +Proc-Type: 4,ENCRYPTED +DEK-Info: DES-EDE3-CBC,311F2EB971D7DC3C + +RJYUZ7mwfqVg/IFUGHLlsb/4IbfDa/luG75B8xrchdeA4aVofaQw7L54+ONYpChE +So5/wxU+wVwHU7YTAPeK296x59aS2BbUmrdTJymXBHw1VA5UId5cDXiacB8eZ5qP +WBnyMXSgZpYX+X+VzFxJOt9wU+8pJcsoWP6pF44d5BMb1gWGRJYEMd5UIGRKtMvT +mK62P6qHa0Wb+193CEVRC9ZSSFlqsWuYsj3bJyHpGRQhlvvJhOEAajowqJdEu8Ov +ZVyzj7xnXx6lsdRbxMwKkpNEbeejDT40vZH7Som0D/LGCekk6gNu9TZDp1pwJ/K+ +/3fcz78wsbwDU3nguG7QGVJK0JtVq2/BM6dXAWiJ/oYw5E9NYw1xaXamz9+8/vht +1ddfgN2zu5wFgf3B53NzeyIzQaA6n/RXEOx5363TnD6D836qXAZ5IusvbF0/EdAA +V3CQ8nwVB/Y9w4CrvQLSGJGsZl1Vg9na0sM+A5D7fis4MlEYl1GIk7XNWnf/ridz +ciWJI2F6fOCcAPFptvX04gXsc6ZlUTBEb7j4RzfrfvVLtwVg69/p+LFo9GV2pHtJ ++iPiXoshE8FfUQBTzwgQ39wLkfZhtmp1wlRaguoKc9ZaluAuIfgJjV3Lq7iPL7x8 +z/ILuGOSE+gdamm6so3csJ9rWf4XPSpQT4t4z7z+YqU3dc6/da85WSqVAj0ZMuwu +rhs1JEhAy3bqyvXQC8FMGvOq9yEI5ePv1VCUWczii2VYraPUvqlAq1lTnw43YTps +4z4L9HSIH3nItgcj4Tm/woeAXH2Wt72++c7Lz5LUz3oZfA/XaWMcdreCiV4y3zfH +Fh4/XCcp70Is01HvNg8u8thws0YMZl8cNA9PifO2xn2A6oa6cHRGcpsiSWcvQWKK +mPoWV0Xd1n3lB1U4/RO02irYiSu/sPmY61mbLaqpKL0DnUjSXcKsWjkuV8Z0IXED +v5Tv6AE4+JJV+pwsepbIrnAinuDvQBxpH6A9/i6c/usQsXoppp/qE8HEUp3CllUm ++T76obRaspdWlf+VbchYxrJ1jidQsiAw5OD0EEUKT1tBY+9Z0v242qwrCCpWgTJN +stkpLOrRg8wI8sI/BiLR7lNdMGDitPral3sTakB7cEG7f4CkRnzS8DLvAOe7JJXM ++aeMLG/NuDfhZRRP/E9KYX4By4YIm9bsHiYIDljyQ2bzcVnClpnxfFW3/34KoZay +rjLnQaMSXaxGypENT8daHIzg+w4zqRYI4RUKqgUBuo7JmYZTlegJH6HhYuZ8kV5a +k5veZRITQjJpTTKFw5wP+ds0gk1b4xfhTl/np9XmQe0NvOpWdZB5r6ZyK58ydJUg +/VMOdVPhjAZ/uCjWDjEP6h/M5OeNQmHuUat1rWmbe7qkFK6cbJUVY5WQF4CCJ7ea +kzY7cS5m59blVaacjSf5i4D2kxl+pQPfQBcxyKwxtFAUVRVj6VtI5rsCVpRlvRGe +TxzjpekHnyreFwncoHCeE/VqIR1Z0wyfZ/d4l+URdDzGTwu51dbm1NSjRgeFoVw3 +i33Dg3T2n/GzQuHsckOCdm5rpKhUG6TU2h6QbrDBxMG12KbxZsvzHg== +-----END RSA PRIVATE KEY----- diff --git a/src/tests/certs/rsa/ocsp.crt b/src/tests/certs/rsa/ocsp.crt new file mode 100644 index 00000000000..070bf48d461 --- /dev/null +++ b/src/tests/certs/rsa/ocsp.crt @@ -0,0 +1,79 @@ +Certificate: + Data: + Version: 3 (0x2) + Serial Number: 5 (0x5) + Signature Algorithm: sha256WithRSAEncryption + Issuer: C=FR, ST=Radius, L=Somewhere, O=Example Inc/emailAddress=admin@example.org, CN=Example Certificate Authority + Validity + Not Before: Mar 24 20:00:59 2018 GMT + Not After : Mar 24 20:00:59 2019 GMT + Subject: C=FR, ST=Radius, O=Example Inc, CN=Example OCSP Responder Certificate/emailAddress=admin@example.org + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + RSA Public Key: (2048 bit) + Modulus (2048 bit): + 00:b4:4b:03:f5:38:f1:b3:f9:ae:c0:55:4d:0c:ec: + 3e:1e:37:70:2f:41:f1:b1:79:f3:f5:6c:ff:2f:df: + 64:a3:23:c8:57:8a:43:aa:67:1c:6c:7b:45:0d:59: + 00:04:d3:26:4c:c4:5f:93:d4:c7:13:58:8c:db:25: + 69:fd:13:b0:6c:23:04:d4:5a:08:e8:b3:76:c9:71: + 1a:80:b4:88:bb:59:a6:db:26:7c:08:38:ca:31:2e: + 91:b8:54:5b:37:8e:70:1f:7a:a6:c2:9e:9e:8c:e6: + 28:fb:9c:7a:03:fb:17:80:77:fd:48:f0:9c:3e:91: + c3:25:30:7e:b2:65:0c:55:97:8b:91:25:eb:b2:0e: + 92:7a:e0:fb:66:7f:4a:8a:2d:ec:be:0d:79:63:a7: + e6:66:77:61:89:eb:6e:1e:f6:ff:b3:cc:f8:cb:79: + 6c:6c:3e:32:e5:42:ad:2c:77:14:2f:6f:bb:5e:5a: + ae:27:ad:32:00:35:ce:77:8e:ac:66:a9:5f:7b:26: + 81:c9:d8:21:d1:bb:2b:f3:f8:4d:64:ac:00:4c:98: + 16:d4:46:a2:d4:06:1e:7d:b0:2d:0d:5f:47:bd:92: + 89:23:f2:e3:b9:a0:0d:10:83:d8:da:fb:a3:a5:12: + e0:8b:fa:80:b9:f5:00:90:2d:2a:25:e5:2d:85:ee: + a3:c9 + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Basic Constraints: + CA:FALSE + X509v3 Key Usage: + Digital Signature, Non Repudiation, Key Encipherment + X509v3 Extended Key Usage: + OCSP Signing + Signature Algorithm: sha256WithRSAEncryption + 1d:6c:30:f6:97:b1:99:63:28:00:e3:37:99:76:2b:d5:0b:1c: + a4:d7:dd:52:66:44:72:70:f1:46:4f:4d:35:33:f9:87:5e:94: + ae:55:f3:1c:6c:2a:4f:ba:39:37:20:d1:5a:25:98:fc:d7:bc: + 84:60:f9:c1:16:a7:7e:f5:e7:a9:9a:8a:a4:08:68:b7:04:5f: + 76:b6:1e:4a:f2:43:0c:a0:2a:c3:3a:21:84:5b:6f:89:ee:2c: + cb:92:89:97:4e:0d:e6:50:ab:fd:44:59:5e:50:55:c0:7d:07: + 5a:f2:1d:e5:b1:b9:36:14:64:ae:07:4e:68:48:34:04:d4:53: + 6a:49:5f:17:fe:98:1b:8c:9c:ea:b6:c8:f1:31:4b:8b:86:00: + ce:60:84:63:59:11:16:c8:b2:21:73:08:91:04:f1:2e:e4:88: + ea:b9:b6:0f:2c:06:ef:13:78:02:be:d2:3c:8f:f3:fe:d5:95: + 3d:57:0a:91:37:70:08:50:1c:cc:ec:68:14:9e:34:92:eb:3a: + 06:b4:a9:cb:e1:aa:25:d1:26:64:79:f2:d7:e6:ee:39:88:9c: + 24:a4:0f:4f:1e:24:34:5b:bb:ea:10:0c:bc:9c:c0:05:d4:45: + 1d:b3:08:94:50:ce:fb:2b:5f:83:3b:3b:aa:91:2e:01:34:fd: + e4:16:08:69 +-----BEGIN CERTIFICATE----- +MIIDwTCCAqmgAwIBAgIBBTANBgkqhkiG9w0BAQsFADCBkjELMAkGA1UEBhMCRlIx +DzANBgNVBAgMBlJhZGl1czESMBAGA1UEBwwJU29tZXdoZXJlMRQwEgYDVQQKDAtF +eGFtcGxlIEluYzEgMB4GCSqGSIb3DQEJARYRYWRtaW5AZXhhbXBsZS5vcmcxJjAk +BgNVBAMMHUV4YW1wbGUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MB4XDTE4MDMyNDIw +MDA1OVoXDTE5MDMyNDIwMDA1OVowgYMxCzAJBgNVBAYTAkZSMQ8wDQYDVQQIDAZS +YWRpdXMxFDASBgNVBAoMC0V4YW1wbGUgSW5jMSswKQYDVQQDDCJFeGFtcGxlIE9D +U1AgUmVzcG9uZGVyIENlcnRpZmljYXRlMSAwHgYJKoZIhvcNAQkBFhFhZG1pbkBl +eGFtcGxlLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALRLA/U4 +8bP5rsBVTQzsPh43cC9B8bF58/Vs/y/fZKMjyFeKQ6pnHGx7RQ1ZAATTJkzEX5PU +xxNYjNslaf0TsGwjBNRaCOizdslxGoC0iLtZptsmfAg4yjEukbhUWzeOcB96psKe +nozmKPucegP7F4B3/UjwnD6RwyUwfrJlDFWXi5El67IOknrg+2Z/Soot7L4NeWOn +5mZ3YYnrbh72/7PM+Mt5bGw+MuVCrSx3FC9vu15arietMgA1zneOrGapX3smgcnY +IdG7K/P4TWSsAEyYFtRGotQGHn2wLQ1fR72SiSPy47mgDRCD2Nr7o6US4Iv6gLn1 +AJAtKiXlLYXuo8kCAwEAAaMvMC0wCQYDVR0TBAIwADALBgNVHQ8EBAMCBeAwEwYD +VR0lBAwwCgYIKwYBBQUHAwkwDQYJKoZIhvcNAQELBQADggEBAB1sMPaXsZljKADj +N5l2K9ULHKTX3VJmRHJw8UZPTTUz+YdelK5V8xxsKk+6OTcg0VolmPzXvIRg+cEW +p37156maiqQIaLcEX3a2HkryQwygKsM6IYRbb4nuLMuSiZdODeZQq/1EWV5QVcB9 +B1ryHeWxuTYUZK4HTmhINATUU2pJXxf+mBuMnOq2yPExS4uGAM5ghGNZERbIsiFz +CJEE8S7kiOq5tg8sBu8TeAK+0jyP8/7VlT1XCpE3cAhQHMzsaBSeNJLrOga0qcvh +qiXRJmR58tfm7jmInCSkD08eJDRbu+oQDLycwAXURR2zCJRQzvsrX4M7O6qRLgE0 +/eQWCGk= +-----END CERTIFICATE----- diff --git a/src/tests/certs/rsa/ocsp.csr b/src/tests/certs/rsa/ocsp.csr new file mode 100644 index 00000000000..4baa4a9225d --- /dev/null +++ b/src/tests/certs/rsa/ocsp.csr @@ -0,0 +1,18 @@ +-----BEGIN CERTIFICATE REQUEST----- +MIIC+DCCAeACAQAwgbIxCzAJBgNVBAYTAkZSMQ8wDQYDVQQIDAZSYWRpdXMxEjAQ +BgNVBAcMCVNvbWV3aGVyZTEUMBIGA1UECgwLRXhhbXBsZSBJbmMxIDAeBgkqhkiG +9w0BCQEWEWFkbWluQGV4YW1wbGUub3JnMSswKQYDVQQDDCJFeGFtcGxlIE9DU1Ag +UmVzcG9uZGVyIENlcnRpZmljYXRlMRkwFwYDVR0RDBBvY3NwLmV4YW1wbGUub3Jn +MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEsD9Tjxs/muwFVNDOw+ +HjdwL0HxsXnz9Wz/L99koyPIV4pDqmccbHtFDVkABNMmTMRfk9THE1iM2yVp/ROw +bCME1FoI6LN2yXEagLSIu1mm2yZ8CDjKMS6RuFRbN45wH3qmwp6ejOYo+5x6A/sX +gHf9SPCcPpHDJTB+smUMVZeLkSXrsg6SeuD7Zn9Kii3svg15Y6fmZndhietuHvb/ +s8z4y3lsbD4y5UKtLHcUL2+7XlquJ60yADXOd46sZqlfeyaBydgh0bsr8/hNZKwA +TJgW1Eai1AYefbAtDV9HvZKJI/LjuaANEIPY2vujpRLgi/qAufUAkC0qJeUthe6j +yQIDAQABoAAwDQYJKoZIhvcNAQEFBQADggEBAFTurO9w+QG/1cT6Jbs8qJVh8jyQ +nMwPDvpxcF+oq7wBUNjqU2Bs4VbKfKFD3f67MmLnJ2jhDl/7tCh3aXFiR5Zs+3Nn +gWdg1QQkGQt8ehSsOfk7fML8U31PpqPRW4XZxJYmIJdgQHK9KboRkbTqM+DOjbW4 +az9SWXEBQaFH2/6EASLWgTLJHoqDloB3Joi3d6GkIv18DJ3TA4N0lHr+YfFCFUem +/iLUb2DDBpj7m6dJajOchhQJcVxQz8f6mpbqYM6jZe42r4lIkWniS69WvLuC0EUe +ez4NYGEZhNiQenkkz8PEJkZVsvG89jrtZS0He36dBZdl1Bbhg/6qIYhJCRw= +-----END CERTIFICATE REQUEST----- diff --git a/src/tests/certs/rsa/ocsp.key b/src/tests/certs/rsa/ocsp.key new file mode 100644 index 00000000000..061efb78e4d --- /dev/null +++ b/src/tests/certs/rsa/ocsp.key @@ -0,0 +1,30 @@ +-----BEGIN RSA PRIVATE KEY----- +Proc-Type: 4,ENCRYPTED +DEK-Info: DES-EDE3-CBC,08E55FB3F75F001F + +Ovy8QT6TTb+hy5CFBVou+ukRxLNWJ5u5xMM4e8/EE49vVE0Ksqg4BipRtJaROBb6 +AKLuj75oOwauuqZlJX7UevY7fRUHUzADMQ/2AYjlIvTlDnWnsPckbgbxcnL3avgI +8HycPWkpa7NYwTG9SqhtqsrFUSU/k869Bhzs4oK1kVdeSYzhmPsXN2+sti7gQAoU +GSVW/diq9OSuX0Zf0eHb6snMhz0ym8xSxRF/9QbWRd4y7csQRSDtIY+xw4Li5idU +QXLlkgn3LcXxixZyxgPt+Zd2WFr400uaOBp4nlPMeelzZf3rl5BD4UPI/kWd/Eg+ +Ky0UF2IzFmJPG5QL1btwILtDsrsh+4wm5XvwR2jsPBqEVgI/8UszeS20/x0a1wdH +97UUQnWRYtIFZx5jF5y5R/Ilga380DKECqCaIXqN7NxLN5jxMz8glWEkmMjnKJBw +oyGzcyM0jOC/f9S7/XVrRzCJdVDNT+Nps19OMV3Y8tzMvUaUbpv5eW7Gwflejz5Y +b8B5Udx1YXinhml/VumQhr33d4dbc+Vtzj8WjLi/VHABbxjBZMqpLRudXdXxIBrs +OgacgPyKo1miLYiUQQ3fTP5TaKSLkF1wZf78VwLmULDlGNr/p+dWLh2G252038A9 +6TFYMSdFbo0Qcsy/gDXXVdXzflj/5uNC7SqqQPk4YUVk/QIhgKzM7p2yC9IeNRJO +FOS5qSJIzDJXQZayhxhxghxwhFRlqGjgDqNeFFz38g2mZYNPhz/lJ4cIGBqn4ztx +qYBVB2tyNv/nwNUttCQpMgBgJmnotvzH83fRVBoMhiCAoOruJnvYbLF2lrwPQWWd +HFiYvQJVY8K+VDsVQKbe1nDGvxav20jdWyuPjXSzGWRCHBJMCerhjEAr3ae8K6J6 +azQNdv0E89sVqajMfIUTCqJ8zxNIorG2f66hRTwAS86KgWZcfcm93Qxe3QcSKaEx +eolvYpg8xTvJq0CM1Mqc0MfdCeV4iD8yar29VWGQA+sH0lkYi+w5iNnbj7ZzCNfk +HSLi4vozo7DGj2IrsrYgteIX9lczQpX1J/DLLWMTvG9IjlDeMgqO0VTJg0YhNpAa +FuDpO7gRdroKB7EVqXy9BNpNA9ARXSsM3G/D7ql2qKJ+Vv9fqy8vFRzQn6NP4HhR +pt3nsVIW3oZ4JHSqyR1HKa5gaZ17v9+Cx7fsVi18DLDtPLKQBXinV5v1T3xf5Run ++geeRhqUUf86gQjrPjRzH4sOHzd+kP4kuUvITXs1jV/e6ocuQvA3ZbhqrdHxb0vz +yVq/fh++NzqxgJC75JXJfoWTNKDfQXMNdzlyyHsSW9R8Q8BR+VAnErY4E1HqGqJ6 +PmGiAlTs4ZilAhn/XtOoGZhElUsips9gCiCVCKDISRa5PLUUGcTd/KZ5xY9/o33y +QGOdiwz9+WYRzj3c+/cRCN+yrGcS9SRtLHvU6n+Yw68U5klMg5D09LojaGAYvXpd +cZNMhVdjkyullr/uWog6RUH5H3Og14tIxkyAhxw4iU++BqNEzuX/nVa3MrI+LBKV +cix+R8knvfGE1GMZqscT8o6V10bntJhmC/hv91S9pONNvQ4wSFkzls0NvUiPkmGT +-----END RSA PRIVATE KEY----- diff --git a/src/tests/certs/rsa/ocsp.p12 b/src/tests/certs/rsa/ocsp.p12 new file mode 100644 index 00000000000..2d2d718f506 Binary files /dev/null and b/src/tests/certs/rsa/ocsp.p12 differ diff --git a/src/tests/certs/rsa/ocsp.pem b/src/tests/certs/rsa/ocsp.pem new file mode 100644 index 00000000000..23c61449681 --- /dev/null +++ b/src/tests/certs/rsa/ocsp.pem @@ -0,0 +1,60 @@ +Bag Attributes + localKeyID: 61 BB DA AB EA 34 AF C7 D5 BD 40 BD 4C 63 7A A7 B4 1B A9 D3 +subject=/C=FR/ST=Radius/O=Example Inc/CN=Example OCSP Responder Certificate/emailAddress=admin@example.org +issuer=/C=FR/ST=Radius/L=Somewhere/O=Example Inc/emailAddress=admin@example.org/CN=Example Certificate Authority +-----BEGIN CERTIFICATE----- +MIIDwTCCAqmgAwIBAgIBBTANBgkqhkiG9w0BAQsFADCBkjELMAkGA1UEBhMCRlIx +DzANBgNVBAgMBlJhZGl1czESMBAGA1UEBwwJU29tZXdoZXJlMRQwEgYDVQQKDAtF +eGFtcGxlIEluYzEgMB4GCSqGSIb3DQEJARYRYWRtaW5AZXhhbXBsZS5vcmcxJjAk +BgNVBAMMHUV4YW1wbGUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MB4XDTE4MDMyNDIw +MDA1OVoXDTE5MDMyNDIwMDA1OVowgYMxCzAJBgNVBAYTAkZSMQ8wDQYDVQQIDAZS +YWRpdXMxFDASBgNVBAoMC0V4YW1wbGUgSW5jMSswKQYDVQQDDCJFeGFtcGxlIE9D +U1AgUmVzcG9uZGVyIENlcnRpZmljYXRlMSAwHgYJKoZIhvcNAQkBFhFhZG1pbkBl +eGFtcGxlLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALRLA/U4 +8bP5rsBVTQzsPh43cC9B8bF58/Vs/y/fZKMjyFeKQ6pnHGx7RQ1ZAATTJkzEX5PU +xxNYjNslaf0TsGwjBNRaCOizdslxGoC0iLtZptsmfAg4yjEukbhUWzeOcB96psKe +nozmKPucegP7F4B3/UjwnD6RwyUwfrJlDFWXi5El67IOknrg+2Z/Soot7L4NeWOn +5mZ3YYnrbh72/7PM+Mt5bGw+MuVCrSx3FC9vu15arietMgA1zneOrGapX3smgcnY +IdG7K/P4TWSsAEyYFtRGotQGHn2wLQ1fR72SiSPy47mgDRCD2Nr7o6US4Iv6gLn1 +AJAtKiXlLYXuo8kCAwEAAaMvMC0wCQYDVR0TBAIwADALBgNVHQ8EBAMCBeAwEwYD +VR0lBAwwCgYIKwYBBQUHAwkwDQYJKoZIhvcNAQELBQADggEBAB1sMPaXsZljKADj +N5l2K9ULHKTX3VJmRHJw8UZPTTUz+YdelK5V8xxsKk+6OTcg0VolmPzXvIRg+cEW +p37156maiqQIaLcEX3a2HkryQwygKsM6IYRbb4nuLMuSiZdODeZQq/1EWV5QVcB9 +B1ryHeWxuTYUZK4HTmhINATUU2pJXxf+mBuMnOq2yPExS4uGAM5ghGNZERbIsiFz +CJEE8S7kiOq5tg8sBu8TeAK+0jyP8/7VlT1XCpE3cAhQHMzsaBSeNJLrOga0qcvh +qiXRJmR58tfm7jmInCSkD08eJDRbu+oQDLycwAXURR2zCJRQzvsrX4M7O6qRLgE0 +/eQWCGk= +-----END CERTIFICATE----- +Bag Attributes + localKeyID: 61 BB DA AB EA 34 AF C7 D5 BD 40 BD 4C 63 7A A7 B4 1B A9 D3 +Key Attributes: +-----BEGIN RSA PRIVATE KEY----- +Proc-Type: 4,ENCRYPTED +DEK-Info: DES-EDE3-CBC,75340480CFF9522C + +JKwwZE4TX6DNKORhUjpoVIbQAIGyHMGvyzEt2ML5QhvB1/4jrNCVfV6Q9Ga5wq// +9OmwZFARA3RlthMYi8i48FMsZ541mnDUWyogmELSL2ntSnX9MCkEJ/CTkx2mEAZP ++OoC2A8Wr7E0ZFCEWazS3PNbw/rjJV7QB9i1lcCavboHuPALpGuvpUufKBFoo0f5 +yIowHsNaoUVIwvO3tV8s0Xz7XxHu5h9M/7sNVpbiAzJ5qyoGF6bd/PZ6Ze0xOiU2 +ioEKPwbJ7bOeOOVHmRTH7bGQdLd2HhU/Il15kqblfNc2qd9HeQn4Cig63Je2CxCZ +FxQKfCc4r46w1lFg8bR9h9GjB+fEsPUqMsnL4wr/K+wjDNISp0CCwt66Xnfxo3it +mD9uyJNIakzk6PLIs0Zk/lxw4GkIBkpzx+o9g3vtaPxxzJeByx8Rw+UewWTmye5Y +uk0DepHotrkNCDPgucG30m+EiPLKA7Ng+13LpViB/GZGWsBb94iTZDvyQbnVI8y2 +W4agJoG70KmjbosxANh4DbCGFlMyNfjT4+1GEr8hWeBFC4SWaZIoqDylpuyhMHzT +DRfUGNDID/PoHSvNE0c1/+IEhc2o6XEAws2nl34oF5VM1erJiuaGy0kSSAKfiK/x +kUCpHwGr+84iWneOlGFrKIxvY5vRe4sN971Rsc3a0gLyrWHiLVYR2jq+P2mayNza +4lKD4CKnuir15WUqJGkTdmC/pY8AhP3s6obbcquhgbx6qpWpb4JdUEG4b4CxhHwa +rvsZADFsJZ333hZfQxXl48b5lQ6DGSl3KNX0gH7Qgp0V3MjZwig74JYLiYdnjuKg +XWGn8pbxY2ee2K1JiGP5nR/+Ed5vIqlzk4NnDvNbW3jWERVr0rth2wt0z/G3ySwl +GS7PZTdyEcT+CN8wv0BD/W4JcVIGomqx8RL9FU3SY8UFjiASrlCOE9qtXnddD93n +zIoBNbg96p6ydTpRdXwaACxOPahf9kwnSUsnVFhsbkLB+5VKMnaA+K8TOqBTFRRP +bOLCxcZU4cPCoRJ9lEvtU8hP0JB92Y16qaVQgIa4vTftsJfUkwejQzlGpbQa76BN +qxQGHbPGcnFLNGEv2IWhVyR5Z23F7gqxmDIF62Yz8nZU/UZ4u6xEVjz3IuPcrba9 +gURFH0j+P8Ctbk5i2yEliJV7lKIh8kOpSB1LrAZ6Uj0q7eb8/YlxskvyGUFNWyoo +PeISPS6/jBoT+JP4LAAQoIK5/uCNI/+IqPCBga80tsT6PDAEk1M747Bx4fLWK2Mt +8W867PRAuPlXlZgM1TR4fv5mT6B6akQaULjCI8AIGy6FosDJh5fAkWlgRPGWHR6C +8lJEoKE7oc9VKcRoJy6a/B/jxh3AatabQ5zJ8x9znphe1k+8AonPkYh76kReD6uh +1ZXzCsw91UeBztStXmLEbsq558AKOevj91W8A1gddMteUgd1nL1NvHsgZqAr5rre +K7XRAK+NDL0jDNal31fGyW6QjHbAo5/qZKPK1jdKrGKLJeZPJON30ELxjEsdiZ0y +GtObam92PUs71bUnDFOm9L4Xm5yW3174ua+wNFYeW87nG/oQzOn9krqk8M8d07An +-----END RSA PRIVATE KEY----- diff --git a/src/tests/certs/rsa/server.crt b/src/tests/certs/rsa/server.crt new file mode 100644 index 00000000000..96631fc939b --- /dev/null +++ b/src/tests/certs/rsa/server.crt @@ -0,0 +1,87 @@ +Certificate: + Data: + Version: 3 (0x2) + Serial Number: 1 (0x1) + Signature Algorithm: sha256WithRSAEncryption + Issuer: C=FR, ST=Radius, L=Somewhere, O=Example Inc/emailAddress=admin@example.org, CN=Example Certificate Authority + Validity + Not Before: Mar 24 20:00:59 2018 GMT + Not After : Mar 24 20:00:59 2019 GMT + Subject: C=FR, ST=Radius, O=Example Inc, CN=Example Server Certificate/emailAddress=admin@example.org + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + RSA Public Key: (2048 bit) + Modulus (2048 bit): + 00:a4:94:78:24:9d:3f:1c:c5:98:1e:d9:e6:7e:54: + 82:36:11:c1:e2:75:c5:54:3b:75:21:f7:25:41:3a: + d6:0c:b8:d7:08:e7:70:ce:89:e4:df:81:8a:d5:cf: + 68:c0:dd:c1:3a:00:61:b2:2f:45:22:38:83:71:5a: + c1:07:4e:98:cf:e6:b8:f3:88:73:a7:cf:98:ea:ea: + 84:29:42:cb:00:5d:37:a8:22:9e:92:48:56:6f:2b: + 56:28:c7:80:fc:c8:7d:32:70:e3:5b:e4:72:6b:36: + 41:b7:53:d4:b9:8f:3d:4a:9c:8a:40:8e:f1:9a:5d: + 61:90:6b:2f:41:44:5d:ae:5b:24:e4:e8:a6:e0:fa: + b0:40:5f:ee:81:3e:cb:bc:f2:fa:98:df:5c:6a:fd: + 83:b2:d8:ea:d8:30:c9:ba:cf:a8:82:24:2f:86:cb: + 55:a0:3a:71:b4:0a:68:51:d8:90:df:c5:4a:32:96: + de:51:02:9e:e8:ae:c1:9c:26:d8:d5:ff:54:cf:a3: + 57:9b:49:e9:15:65:c6:9b:b6:92:7d:9e:6c:61:09: + 2e:0d:4c:fe:de:c7:90:6c:01:fa:fc:71:89:05:c6: + 40:9c:64:31:99:09:f1:f1:1f:ca:82:22:09:5a:cf: + bc:75:b0:b4:ee:59:fa:75:12:e1:65:f4:4e:5c:24: + 98:3d + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Basic Constraints: + CA:FALSE + X509v3 Key Usage: + Digital Signature, Non Repudiation, Key Encipherment + X509v3 Extended Key Usage: + TLS Web Server Authentication + X509v3 CRL Distribution Points: + URI:http://www.example.com/example_ca.crl + + Authority Information Access: + OCSP - URI:http://www.example.org/ocsp + + Signature Algorithm: sha256WithRSAEncryption + 3d:72:5b:85:16:9f:f8:3c:10:18:1b:18:4d:44:40:9f:33:39: + af:b2:f2:ee:c9:ed:c6:96:13:79:a4:f4:da:d6:b5:71:58:b8: + de:5d:c4:02:6a:ee:32:9e:77:77:ac:87:15:b5:44:b5:2c:84: + b8:05:ef:a8:2f:6e:ef:d0:ff:b6:95:72:52:a5:f2:4d:6b:6d: + d4:2c:ee:ae:ea:e8:fb:7f:69:62:a8:d3:77:e9:ec:03:9d:3e: + 7f:08:1f:ac:72:4a:cf:c1:be:ff:12:09:94:49:30:43:cc:95: + a5:78:2b:6d:71:f4:5a:28:79:1b:a9:d2:16:66:56:fb:42:08: + 4d:6d:b3:aa:36:7e:85:4c:c2:86:dc:9a:7d:f6:ee:b2:72:40: + fe:58:34:1e:29:2b:16:87:a0:86:36:63:b8:cc:9f:3a:43:05: + 3f:ef:96:a4:1a:e5:3c:97:8b:70:fd:4a:89:3c:8a:4b:03:2a: + 9e:97:52:69:bb:c1:a9:0a:db:4b:9c:b9:1f:46:b8:bd:39:85: + cd:e4:2f:8b:99:5d:70:7b:cd:e5:94:1d:7b:82:0b:14:03:fa: + 05:66:8f:2b:73:e9:73:f6:d0:83:6d:e5:83:80:9d:79:36:c2: + 39:8d:ce:dd:20:64:41:47:b9:1b:cf:2f:d7:e3:a0:96:07:fb: + 7a:a1:7c:30 +-----BEGIN CERTIFICATE----- +MIIEKzCCAxOgAwIBAgIBATANBgkqhkiG9w0BAQsFADCBkjELMAkGA1UEBhMCRlIx +DzANBgNVBAgMBlJhZGl1czESMBAGA1UEBwwJU29tZXdoZXJlMRQwEgYDVQQKDAtF +eGFtcGxlIEluYzEgMB4GCSqGSIb3DQEJARYRYWRtaW5AZXhhbXBsZS5vcmcxJjAk +BgNVBAMMHUV4YW1wbGUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MB4XDTE4MDMyNDIw +MDA1OVoXDTE5MDMyNDIwMDA1OVowezELMAkGA1UEBhMCRlIxDzANBgNVBAgMBlJh +ZGl1czEUMBIGA1UECgwLRXhhbXBsZSBJbmMxIzAhBgNVBAMMGkV4YW1wbGUgU2Vy +dmVyIENlcnRpZmljYXRlMSAwHgYJKoZIhvcNAQkBFhFhZG1pbkBleGFtcGxlLm9y +ZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKSUeCSdPxzFmB7Z5n5U +gjYRweJ1xVQ7dSH3JUE61gy41wjncM6J5N+BitXPaMDdwToAYbIvRSI4g3FawQdO +mM/muPOIc6fPmOrqhClCywBdN6ginpJIVm8rVijHgPzIfTJw41vkcms2QbdT1LmP +PUqcikCO8ZpdYZBrL0FEXa5bJOTopuD6sEBf7oE+y7zy+pjfXGr9g7LY6tgwybrP +qIIkL4bLVaA6cbQKaFHYkN/FSjKW3lECnuiuwZwm2NX/VM+jV5tJ6RVlxpu2kn2e +bGEJLg1M/t7HkGwB+vxxiQXGQJxkMZkJ8fEfyoIiCVrPvHWwtO5Z+nUS4WX0Tlwk +mD0CAwEAAaOBoTCBnjAJBgNVHRMEAjAAMAsGA1UdDwQEAwIF4DATBgNVHSUEDDAK +BggrBgEFBQcDATA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vd3d3LmV4YW1wbGUu +Y29tL2V4YW1wbGVfY2EuY3JsMDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAYYb +aHR0cDovL3d3dy5leGFtcGxlLm9yZy9vY3NwMA0GCSqGSIb3DQEBCwUAA4IBAQA9 +cluFFp/4PBAYGxhNRECfMzmvsvLuye3GlhN5pPTa1rVxWLjeXcQCau4ynnd3rIcV +tUS1LIS4Be+oL27v0P+2lXJSpfJNa23ULO6u6uj7f2liqNN36ewDnT5/CB+sckrP +wb7/EgmUSTBDzJWleCttcfRaKHkbqdIWZlb7QghNbbOqNn6FTMKG3Jp99u6yckD+ +WDQeKSsWh6CGNmO4zJ86QwU/75akGuU8l4tw/UqJPIpLAyqel1Jpu8GpCttLnLkf +Rri9OYXN5C+LmV1we83llB17ggsUA/oFZo8rc+lz9tCDbeWDgJ15NsI5jc7dIGRB +R7kbzy/X46CWB/t6oXww +-----END CERTIFICATE----- diff --git a/src/tests/certs/rsa/server.csr b/src/tests/certs/rsa/server.csr new file mode 100644 index 00000000000..ec6a49c9572 --- /dev/null +++ b/src/tests/certs/rsa/server.csr @@ -0,0 +1,18 @@ +-----BEGIN CERTIFICATE REQUEST----- +MIIC8jCCAdoCAQAwgawxCzAJBgNVBAYTAkZSMQ8wDQYDVQQIDAZSYWRpdXMxEjAQ +BgNVBAcMCVNvbWV3aGVyZTEUMBIGA1UECgwLRXhhbXBsZSBJbmMxIDAeBgkqhkiG +9w0BCQEWEWFkbWluQGV4YW1wbGUub3JnMSMwIQYDVQQDDBpFeGFtcGxlIFNlcnZl +ciBDZXJ0aWZpY2F0ZTEbMBkGA1UdEQwScmFkaXVzLmV4YW1wbGUub3JnMIIBIjAN +BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJR4JJ0/HMWYHtnmflSCNhHB4nXF +VDt1IfclQTrWDLjXCOdwzonk34GK1c9owN3BOgBhsi9FIjiDcVrBB06Yz+a484hz +p8+Y6uqEKULLAF03qCKekkhWbytWKMeA/Mh9MnDjW+RyazZBt1PUuY89SpyKQI7x +ml1hkGsvQURdrlsk5Oim4PqwQF/ugT7LvPL6mN9cav2Dstjq2DDJus+ogiQvhstV +oDpxtApoUdiQ38VKMpbeUQKe6K7BnCbY1f9Uz6NXm0npFWXGm7aSfZ5sYQkuDUz+ +3seQbAH6/HGJBcZAnGQxmQnx8R/KgiIJWs+8dbC07ln6dRLhZfROXCSYPQIDAQAB +oAAwDQYJKoZIhvcNAQEFBQADggEBAC6ekpk7aIBuDw1Cyn48rdzsGQL8G65EE1pe +adxFlFpouJ9wYVqij756fMm/v6VR7E0Mgt56nViu85CssWwgyvv2Ik3Bv7jAShCO +AuxYb2vV0TBvH841fZDelWBVbZ8dstjfpZRdLS4E6CfLiW6FV9suRBG5YVRGaqLf +GtgwVacPWC8HwnuoVFNTDdhHgWexFcGb3VKiO1lcv4UzDK7piHhUo4UTEMu9ehC+ +0jA0HrkBmxJY7p0Zz9ZrrWm30/RZuws8K6X9IoaBmJEZdp9IKFznH5X3ymkrxAHh ++CR44aWB9B6hc5rO4OS7cdj0/Thi6bncYuhAku0KQ1sYtNZUVbc= +-----END CERTIFICATE REQUEST----- diff --git a/src/tests/certs/rsa/server.key b/src/tests/certs/rsa/server.key new file mode 100644 index 00000000000..ca445b8cef4 --- /dev/null +++ b/src/tests/certs/rsa/server.key @@ -0,0 +1,30 @@ +-----BEGIN RSA PRIVATE KEY----- +Proc-Type: 4,ENCRYPTED +DEK-Info: DES-EDE3-CBC,98D18D5B1978F147 + +RsDlCHXlxAo87RkIofggTbtwNyzWnPYiwkJ/XlYpoarBTozurGX85RZeKhalhWJH +VELEuWsWQQCAlh2vbHkYabhzsfrnFjGi72Vpz/5gczRvN5p8xEfbKInhOrR/oFH+ +a9CaQ0BDZViRWY90L7aKzUEwdTNS936+WxLvJkxDZb4zgBCnqvSSotOooUq0EbPZ +dSICcWF4Adezr16zIJisjgMNw5dTfW5G59zJ1uBbuzhiKHOcsnERkWvkSH8q2/m6 +c8a1RJEZxvM8bHzhDnu44E+Ig31ZtC0PXTwT5ab934zDIiclc/m0t0B7Zx7KV0k1 +fGUqiHoTGDFTRl2Vduit+1i47K0nKJ2D8gpRWB8oeBRs5g5s/tVe+hQCdYqTiV1k +1CWxMghlQQAulRPtUvL1qOfwZLLn6dCV/01/6KU1U3Mhy0Y8OPW0yR1fUpzgprKY +XA7tp3CAUdwhK+U2OHAtCBjdbGgvsvwu3tS38pYVvKL754ozIWY5mgu6xYF/YtnJ +tgLE0POv+75fWm6v1Yx4/U9NlieQXc4P3+e4MV5OQQyOjVFAE8dYrcJ21kOymN6g +Dj6ZubZnPVVuFlBZECLb8875/tW7IdCFUXuMhVVmAYhSdo5VCoHIN9ppTOw2EiIt +bCwzmv3xu9JFziHM2e5PfG5LWG1GhJA0S5upVQd5YoTrRtSTeeInnsa/K1SkCSmz +Q0OWvL2ey8uJr1w5V3GbQq5WkMTiDAgalIVYvpqrF3Bfs773cmxV3CtYUgEipgAA +6hjKg7jAkYdmzjQVutG79/ZWjJ6cVuiaioVxQqFXMdqUItVSW1+3J7X8ZJ5FCo+8 +2/guWTqqzmhlnU9dDI946LJHlOGBXHrEDgqpYin76VJZ8+Sl8fXJ+MY/Zq2LqXSd +nW+FGljTRc0GUcRkm56buMGDDnIl/JiwjG34lhEn367c3WMJPixF0OhH/uIMduL5 +x04iNYabzv8+jiVCnn/dr45Q4EBh76+feBHbYAtAU/blD6vKsOqOnpWGO6GxuJj+ +rcPWkzzL1HSUUKpAjNV9QyiuRow+0RtEL2bpcvmPEBsmU+xhyl/216ngGWMgZeRA +/RaIGLA9JEYUUeEwk5MhsdxkYDL8PxzP1LTmUwqdMc1eYdUB0+QXPjIerxTzaJ8Q +SV+VtkFfSYi+GaTsRXj5mbfTC4/xP1LeTVfCMuEtmqNcfxGjtstUTe9413mKRA85 +FsBjKVOqoabABBdW5/sbq35TJ/j7nKtmMq2tWcMpnLET6EucH4L/8MnDNCQ3i1np +ajboB2Cufd7S0qnBsUVUIeDn/mu2kBUpaWmDJNHhmd6ZSKWwV46uri3jbE8+UN2a +MQA0MmSCI1hNyOUI7JcI2s8W+nRd//PKZ0V3aLoAGywX4nOoSI39vltlf7uy1XnK +iW1xae1k6XGWjbaaARziZVv+XgBAAyz+z2Z/lMDj6/VCeayqggbZKzTOok5CE/ri +52szYBgXkQYqYwVFo17oqUsJ6UM2p5QiBQFim5Gn/9x3660ir8g71owUF6f0MN/k +GWevvqNj34Qu9PeCUEFqIMCHJEsKT7Up6nqDAQRdf5lWf7Rb4MmrCw== +-----END RSA PRIVATE KEY----- diff --git a/src/tests/certs/rsa/server.p12 b/src/tests/certs/rsa/server.p12 new file mode 100644 index 00000000000..8075dfc8bcd Binary files /dev/null and b/src/tests/certs/rsa/server.p12 differ diff --git a/src/tests/certs/rsa/server.pem b/src/tests/certs/rsa/server.pem new file mode 100644 index 00000000000..a3cca0cc8ff --- /dev/null +++ b/src/tests/certs/rsa/server.pem @@ -0,0 +1,62 @@ +Bag Attributes + localKeyID: 5C A9 65 91 A4 B9 8B CD 91 DA 42 DE 4B 31 AE 21 A3 8A 8B 72 +subject=/C=FR/ST=Radius/O=Example Inc/CN=Example Server Certificate/emailAddress=admin@example.org +issuer=/C=FR/ST=Radius/L=Somewhere/O=Example Inc/emailAddress=admin@example.org/CN=Example Certificate Authority +-----BEGIN CERTIFICATE----- +MIIEKzCCAxOgAwIBAgIBATANBgkqhkiG9w0BAQsFADCBkjELMAkGA1UEBhMCRlIx +DzANBgNVBAgMBlJhZGl1czESMBAGA1UEBwwJU29tZXdoZXJlMRQwEgYDVQQKDAtF +eGFtcGxlIEluYzEgMB4GCSqGSIb3DQEJARYRYWRtaW5AZXhhbXBsZS5vcmcxJjAk +BgNVBAMMHUV4YW1wbGUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MB4XDTE4MDMyNDIw +MDA1OVoXDTE5MDMyNDIwMDA1OVowezELMAkGA1UEBhMCRlIxDzANBgNVBAgMBlJh +ZGl1czEUMBIGA1UECgwLRXhhbXBsZSBJbmMxIzAhBgNVBAMMGkV4YW1wbGUgU2Vy +dmVyIENlcnRpZmljYXRlMSAwHgYJKoZIhvcNAQkBFhFhZG1pbkBleGFtcGxlLm9y +ZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKSUeCSdPxzFmB7Z5n5U +gjYRweJ1xVQ7dSH3JUE61gy41wjncM6J5N+BitXPaMDdwToAYbIvRSI4g3FawQdO +mM/muPOIc6fPmOrqhClCywBdN6ginpJIVm8rVijHgPzIfTJw41vkcms2QbdT1LmP +PUqcikCO8ZpdYZBrL0FEXa5bJOTopuD6sEBf7oE+y7zy+pjfXGr9g7LY6tgwybrP +qIIkL4bLVaA6cbQKaFHYkN/FSjKW3lECnuiuwZwm2NX/VM+jV5tJ6RVlxpu2kn2e +bGEJLg1M/t7HkGwB+vxxiQXGQJxkMZkJ8fEfyoIiCVrPvHWwtO5Z+nUS4WX0Tlwk +mD0CAwEAAaOBoTCBnjAJBgNVHRMEAjAAMAsGA1UdDwQEAwIF4DATBgNVHSUEDDAK +BggrBgEFBQcDATA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vd3d3LmV4YW1wbGUu +Y29tL2V4YW1wbGVfY2EuY3JsMDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAYYb +aHR0cDovL3d3dy5leGFtcGxlLm9yZy9vY3NwMA0GCSqGSIb3DQEBCwUAA4IBAQA9 +cluFFp/4PBAYGxhNRECfMzmvsvLuye3GlhN5pPTa1rVxWLjeXcQCau4ynnd3rIcV +tUS1LIS4Be+oL27v0P+2lXJSpfJNa23ULO6u6uj7f2liqNN36ewDnT5/CB+sckrP +wb7/EgmUSTBDzJWleCttcfRaKHkbqdIWZlb7QghNbbOqNn6FTMKG3Jp99u6yckD+ +WDQeKSsWh6CGNmO4zJ86QwU/75akGuU8l4tw/UqJPIpLAyqel1Jpu8GpCttLnLkf +Rri9OYXN5C+LmV1we83llB17ggsUA/oFZo8rc+lz9tCDbeWDgJ15NsI5jc7dIGRB +R7kbzy/X46CWB/t6oXww +-----END CERTIFICATE----- +Bag Attributes + localKeyID: 5C A9 65 91 A4 B9 8B CD 91 DA 42 DE 4B 31 AE 21 A3 8A 8B 72 +Key Attributes: +-----BEGIN RSA PRIVATE KEY----- +Proc-Type: 4,ENCRYPTED +DEK-Info: DES-EDE3-CBC,53563C58B4FDB621 + +pz2cyjsWb5jD8XaluVYwJxWWsElgXziyaNUYMqKXledQwMIOegt+0UCWwkgRPUUp +zP9cQjuGPS9c4P6r2MT4hNhOtfhspJsV3PCloK4Hu6uawDGH2fkU90IEa7ucTtgr +R1UNyId2M3cYRlMo/zljhNC93SqFSuDhTUXPsKjXl2ajzjqJlcebtrRLE0PCXbaN +/93GBVmVLffpO3cMVgvih5YfYGg9dzZRmc+YrldKXXBSris1PVHCDR0Ug25vLWCR +xg8wWo3nGq8MzYKhyopHGFZjlK5R5TDA7po6FisuOdI9bHizJOxJImIvOJuuU350 +8Gn6Uv5/Y9yJ8VqfdLq3Jz9lpVVY7zOBuDTN9cDsnw9n6yhv9VbtyLfM4bFC8ZLF +ejXyWQWB2bm/J5lqmdoWIe8g4zEUKi3+Nf25Ao7dJYjLdEnlxrJrCLK8ueMKpfde +C7X/BiwwocJxtUXppjILg1+KpiYiOIvLBSJRusDmOP7JtAAT4e/tzjUvR7LbP12e +cCnr48uphpQ0qAQkgsJn/xaaa+wP/ogELKdTbdRcXVq1b45N+55svUjlmwnSc3Ch +rXztLnQ0mlRGPTdweU5MYeEP9o/is32dS+99cnIVdkyD6kaaBYQ23ZcLyDp7q9FM +J2U2/QFFTRosh8lGA4B3cZwoAp0fDmm6bySSrGi7M1vebqMKdeoG57/An7d2PMTU +JMXiydThXYHleljxI2m8Bu8SIbIlcAdQlA+TGp9pi0TggMzCIv3s63gFBYwwhwBM +SgjDwo4soo4r5ScGqQMMtz/kB4mnu9YtVUC24T61lWnMImUJU2FT8OqWLDwiBY1A +unJUvgjq57ozHxHfqeLQvgU51JN7Q3WHRzb4tLrAgJwQLzWXIzeEzDYFzaZ1jfo0 +u8QLkq+/xF0eQkxvjYyO0vxBpSO+Bw52vyeLI0dLs+8nUOMzMjSO6/3hQFCdXqA2 +I48TaHTdsuzeF1hD2SG50R3xwgUFUphAFUiVTCg+JetF3VMouy4+8fVcCXTTHcSg +WltGnVviNYIZRLfhQUrHx7a+Gzto4ayD4lo6LbW3KJtStWj9lfceTaWvKLQ33Xb8 +DZxCtY26XRF6URP9JAfZcMz2vUPfd13xUb1O/M2DZjwH+M0Uxr1BcBljUGtZi8n9 +iCORyF6Ow0qUF9k9SGFt7dslDv8Dd4DvuHX50RbH4fuyRGUMnBXoX8GcQVX0/Vpo +toLYnuns2T9JB5hr3eOyVgF/wk1Jy4CUdKj0lEDCVmzIxr3igrGW+Hj/H9EJWbxy +6/mtU/0VVvYka+83rlxZ/9MBshebd2tJMucE+B5codmlJXfbJoiTT2vlM/mINa+6 +gc/tu+Tqo7TvT5J4ebP/jOrlX1ckv1hU3dkRbHGKwOqCmztjMWpBfI7kOe7+k9tL +dJ8Qu7LlOPn2uyMaeCI7XAgDXvM0GCR4sipk7ta+UO0azhnYMxHfHBHA/x9inZc0 +x369QhCtbzoaVfXms13SaouHk8+UZYkujdAuFpsXg8iY/s4B9T5bXPM3ENbDBwAk +96RkXwp+c8VSh3nimjoTE5PFnmo7yn+aRptjOrLxdIZdyF9SMei5Jw== +-----END RSA PRIVATE KEY-----