output: add Russian security class policies

Add Russian Security Class certificate policies (per
draft-deremin-rfc4491-bis).

Signed-off-by: Dmitry Baryshkov <dbaryshkov@gmail.com>

diff --git a/lib/x509/output.c b/lib/x509/output.c
index d2da3916dbceaab3714de6b35f84a6b7ddcec5e5..c8b0c66ddbab82fb58d1deebadd9bf8e51e781ae 100644 (file)
--- a/lib/x509/output.c
+++ b/lib/x509/output.c
@@ -969,6 +969,14 @@ static const struct oid_to_string cp_oid2str[] = {
        ENTRY("2.23.140.1.2.3", "CA/B Individual Validated"),
        ENTRY("2.23.140.1.1", "CA/B Extended Validation"),
 
+       /* draft-deremin-rfc4491-bis */
+       ENTRY("1.2.643.100.113.1", "Russian security class KC1"),
+       ENTRY("1.2.643.100.113.2", "Russian security class KC2"),
+       ENTRY("1.2.643.100.113.3", "Russian security class KC3"),
+       ENTRY("1.2.643.100.113.4", "Russian security class KB1"),
+       ENTRY("1.2.643.100.113.5", "Russian security class KB2"),
+       ENTRY("1.2.643.100.113.6", "Russian security class KA1"),
+
        {NULL, 0, NULL, 0},
 };
 

diff --git a/tests/cert-tests/data/grfc.crt b/tests/cert-tests/data/grfc.crt
index 5161c9cb79b409e9e028cccd022b3745f19b174a..0b06f778b859941428a1fd58bbbc9ed09a91131c 100644 (file)
--- a/tests/cert-tests/data/grfc.crt
+++ b/tests/cert-tests/data/grfc.crt
@@ -37,8 +37,8 @@ X.509 Certificate Information:
                        ASCII: ...
                        Hexdump: 020100
                Certificate Policies (not critical):
-                       1.2.643.100.113.1
-                       1.2.643.100.113.2
+                       1.2.643.100.113.1 (Russian security class KC1)
+                       1.2.643.100.113.2 (Russian security class KC2)
                        2.5.29.32.0 (anyPolicy)
        Signature Algorithm: GOSTR341001
        Signature: