WolfSSL
/
wolfssl-nginx
mirror of https://github.com/wolfSSL/wolfssl-nginx.git
1
0
Fork 0
Code Issues Releases Wiki Activity

Updates for wolfSSL v3.11

pull/2/head
Sean Parkinson 2017-06-19 16:14:10 +10:00
parent cc3974cc78
commit 479c127b5f
9 changed files with 114 additions and 111 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

48
conf/ecc-3-ca.crt
View File

@ -5,27 +5,27 @@ Certificate:
Signature Algorithm: ecdsa-with-SHA256 Signature Algorithm: ecdsa-with-SHA256
Issuer: CN=ecc-3-root Issuer: CN=ecc-3-root
Validity Validity
Not Before: Apr 13 04:17:19 2017 GMT Not Before: Jun 19 05:54:16 2017 GMT
Not After : Apr 11 04:17:19 2027 GMT Not After : Jun 17 05:54:16 2027 GMT
Subject: CN=ecc-3-ca Subject: CN=ecc-3-ca
Subject Public Key Info: Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit) Public-Key: (256 bit)
pub: pub:
04:9a:3c:72:c0:55:c5:61:97:d1:04:8d:44:92:31: 04:6a:59:73:9d:90:22:61:88:83:e7:41:0b:3e:12:
fc:d8:92:3d:58:fa:11:af:e3:ba:b5:4a:62:00:06: 42:7f:ed:e2:48:0a:c8:fd:33:c4:24:42:fe:b0:de:
0f:11:ff:c8:b6:50:12:4d:15:ed:67:6f:c8:af:6c: 1c:0a:35:fa:80:13:6a:8e:17:94:48:e1:50:0c:65:
5e:26:8c:d4:23:fc:38:e2:9f:d6:c5:6a:4a:ac:76: 88:d3:65:b4:eb:0a:ee:66:13:2b:d8:d1:21:d0:60:
a7:e2:10:f5:d9 19:ed:15:35:a2
ASN1 OID: prime256v1 ASN1 OID: prime256v1
NIST CURVE: P-256 NIST CURVE: P-256
X509v3 extensions: X509v3 extensions:
X509v3 Subject Key Identifier: X509v3 Subject Key Identifier:
A2:7D:87:7F:41:EE:FC:77:91:7F:8C:21:EA:22:83:FA:3A:05:C0:97 56:97:4A:CA:89:49:93:EB:FA:D9:8B:27:F0:AC:3F:02:18:5B:9E:EC
X509v3 Authority Key Identifier: X509v3 Authority Key Identifier:
keyid:AA:4F:85:4C:EB:3E:30:B9:88:84:0F:E4:81:17:EB:51:85:38:D7:F4 keyid:22:A7:EE:D4:06:BB:8C:B1:42:00:35:E3:D6:CB:FA:60:4A:63:1C:BB
DirName:/CN=ecc-3-root DirName:/CN=ecc-3-root
serial:8F:9F:50:14:32:87:37:CD serial:F7:F4:16:5B:3E:0E:9F:61
X509v3 Basic Constraints: X509v3 Basic Constraints:
CA:TRUE CA:TRUE
@ -34,19 +34,19 @@ Certificate:
X509v3 Extended Key Usage: X509v3 Extended Key Usage:
TLS Web Server Authentication TLS Web Server Authentication
Signature Algorithm: ecdsa-with-SHA256 Signature Algorithm: ecdsa-with-SHA256
30:45:02:20:70:8c:84:94:5a:94:02:ca:00:d2:53:94:58:21: 30:44:02:20:41:00:84:12:c1:06:2b:de:0c:7f:64:b9:32:f2:
aa:4c:58:2b:fa:bb:f6:89:e5:f0:06:33:97:49:02:bb:d5:a1: 93:cb:dc:58:62:0c:69:9f:2e:8a:aa:7a:3c:ad:37:ea:3b:37:
02:21:00:83:79:23:a7:49:40:1f:17:2d:65:17:62:8e:7f:3c: 02:20:79:4d:c8:9e:ee:40:fc:f9:2b:13:45:2e:e4:1d:dc:64:
69:15:d7:1b:ce:e9:99:9a:e0:b4:ba:0c:c0:8b:97:05:be 42:b4:29:b3:12:c9:d5:79:ff:d0:13:e4:2d:86:e1:1d
-----BEGIN CERTIFICATE----- -----BEGIN CERTIFICATE-----
MIIBsjCCAVigAwIBAgICEAAwCgYIKoZIzj0EAwIwFTETMBEGA1UEAwwKZWNjLTMt MIIBsTCCAVigAwIBAgICEAAwCgYIKoZIzj0EAwIwFTETMBEGA1UEAwwKZWNjLTMt
cm9vdDAeFw0xNzA0MTMwNDE3MTlaFw0yNzA0MTEwNDE3MTlaMBMxETAPBgNVBAMM cm9vdDAeFw0xNzA2MTkwNTU0MTZaFw0yNzA2MTcwNTU0MTZaMBMxETAPBgNVBAMM
CGVjYy0zLWNhMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEmjxywFXFYZfRBI1E CGVjYy0zLWNhMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEallznZAiYYiD50EL
kjH82JI9WPoRr+O6tUpiAAYPEf/ItlASTRXtZ2/Ir2xeJozUI/w44p/WxWpKrHan PhJCf+3iSArI/TPEJEL+sN4cCjX6gBNqjheUSOFQDGWI02W06wruZhMr2NEh0GAZ
4hD12aOBmTCBljAdBgNVHQ4EFgQUon2Hf0Hu/HeRf4wh6iKD+joFwJcwRQYDVR0j 7RU1oqOBmTCBljAdBgNVHQ4EFgQUVpdKyolJk+v62Ysn8Kw/AhhbnuwwRQYDVR0j
BD4wPIAUqk+FTOs+MLmIhA/kgRfrUYU41/ShGaQXMBUxEzARBgNVBAMMCmVjYy0z BD4wPIAUIqfu1Aa7jLFCADXj1sv6YEpjHLuhGaQXMBUxEzARBgNVBAMMCmVjYy0z
LXJvb3SCCQCPn1AUMoc3zTAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwICxDATBgNV LXJvb3SCCQD39BZbPg6fYTAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwICxDATBgNV
HSUEDDAKBggrBgEFBQcDATAKBggqhkjOPQQDAgNIADBFAiBwjISUWpQCygDSU5RY HSUEDDAKBggrBgEFBQcDATAKBggqhkjOPQQDAgNHADBEAiBBAIQSwQYr3gx/ZLky
IapMWCv6u/aJ5fAGM5dJArvVoQIhAIN5I6dJQB8XLWUXYo5/PGkV1xvO6Zma4LS6 8pPL3FhiDGmfLoqqejytN+o7NwIgeU3Inu5A/PkrE0Uu5B3cZEK0KbMSydV5/9AT
DMCLlwW+ 5C2G4R0=
-----END CERTIFICATE----- -----END CERTIFICATE-----

6
conf/ecc-3-ca.key
View File

@ -2,7 +2,7 @@
BggqhkjOPQMBBw== BggqhkjOPQMBBw==
-----END EC PARAMETERS----- -----END EC PARAMETERS-----
-----BEGIN EC PRIVATE KEY----- -----BEGIN EC PRIVATE KEY-----
MHcCAQEEIOdvdNBuIVhOGFNlp1XpaEGHx86yC+80/v1fWlX++8V5oAoGCCqGSM49 MHcCAQEEIAXuRIzrJI0MlidV7UFXsxKHwub33c4dArzM0XhPqdVtoAoGCCqGSM49
AwEHoUQDQgAEmjxywFXFYZfRBI1EkjH82JI9WPoRr+O6tUpiAAYPEf/ItlASTRXt AwEHoUQDQgAEallznZAiYYiD50ELPhJCf+3iSArI/TPEJEL+sN4cCjX6gBNqjheU
Z2/Ir2xeJozUI/w44p/WxWpKrHan4hD12Q== SOFQDGWI02W06wruZhMr2NEh0GAZ7RU1og==
-----END EC PRIVATE KEY----- -----END EC PRIVATE KEY-----

90
conf/ecc-3-caleaf.crt
View File

@ -5,42 +5,42 @@ Certificate:
Signature Algorithm: ecdsa-with-SHA256 Signature Algorithm: ecdsa-with-SHA256
Issuer: CN=ecc-3-ca Issuer: CN=ecc-3-ca
Validity Validity
Not Before: Apr 13 04:17:19 2017 GMT Not Before: Jun 19 05:54:16 2017 GMT
Not After : Apr 11 04:17:19 2027 GMT Not After : Jun 17 05:54:16 2027 GMT
Subject: CN=ecc-3-leaf Subject: CN=ecc-3-leaf
Subject Public Key Info: Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit) Public-Key: (256 bit)
pub: pub:
04:fb:29:bb:9d:a4:5a:05:a4:ee:3b:fc:e5:2a:29: 04:90:e4:28:ec:c1:2f:f6:39:94:ae:d8:29:d0:fe:
50:6b:65:9c:c8:dc:64:0a:e8:66:58:fe:8c:fe:cc: e9:81:a3:30:7e:29:45:6b:71:af:f2:20:1e:92:1a:
16:de:02:fb:8a:08:29:d0:57:2d:96:48:04:06:e3: f0:a9:6c:bc:86:c6:d2:b8:42:1c:49:80:98:91:e4:
06:4a:bf:ad:e1:ae:6e:01:3d:ee:40:ed:97:5e:3d: a6:08:68:4f:7a:fd:6e:f9:dd:e8:46:6d:ca:21:06:
93:eb:bb:d4:e4 a5:16:33:e6:19
ASN1 OID: prime256v1 ASN1 OID: prime256v1
NIST CURVE: P-256 NIST CURVE: P-256
X509v3 extensions: X509v3 extensions:
X509v3 Basic Constraints: X509v3 Basic Constraints:
CA:FALSE CA:FALSE
X509v3 Subject Key Identifier: X509v3 Subject Key Identifier:
FB:85:93:45:F4:E7:12:B2:03:E9:13:36:B3:A8:83:6A:71:AE:9A:84 E1:12:31:5D:A4:2A:C8:8D:B2:45:5B:D3:2F:28:B0:72:4E:8B:E5:07
X509v3 Authority Key Identifier: X509v3 Authority Key Identifier:
keyid:A2:7D:87:7F:41:EE:FC:77:91:7F:8C:21:EA:22:83:FA:3A:05:C0:97 keyid:56:97:4A:CA:89:49:93:EB:FA:D9:8B:27:F0:AC:3F:02:18:5B:9E:EC
Signature Algorithm: ecdsa-with-SHA256 Signature Algorithm: ecdsa-with-SHA256
30:44:02:20:06:e5:65:fc:50:08:94:24:47:32:99:c2:42:3e: 30:45:02:21:00:b6:85:2c:df:3a:f1:a3:e0:1d:37:c7:d8:61:
74:1a:85:6a:be:4f:b1:ef:26:65:b3:1a:3f:dc:94:5e:ab:9e: 6e:0c:c1:d9:8f:c6:64:ec:0b:9f:ce:84:a1:4a:cc:bd:ca:fd:
02:20:4a:c6:0b:f2:95:da:fa:be:48:d8:f1:e8:21:03:9e:fb: 1d:02:20:69:74:24:e7:a4:a0:eb:0a:ea:a8:e0:f5:c1:e0:78:
e4:4f:1b:9a:87:e0:96:4e:ef:a3:c8:ac:63:95:f0:c6 61:de:c8:82:2e:0f:a2:09:f6:5e:69:e7:68:8e:d9:56:29
-----BEGIN CERTIFICATE----- -----BEGIN CERTIFICATE-----
MIIBZDCCAQugAwIBAgICEAEwCgYIKoZIzj0EAwIwEzERMA8GA1UEAwwIZWNjLTMt MIIBZTCCAQugAwIBAgICEAEwCgYIKoZIzj0EAwIwEzERMA8GA1UEAwwIZWNjLTMt
Y2EwHhcNMTcwNDEzMDQxNzE5WhcNMjcwNDExMDQxNzE5WjAVMRMwEQYDVQQDDApl Y2EwHhcNMTcwNjE5MDU1NDE2WhcNMjcwNjE3MDU1NDE2WjAVMRMwEQYDVQQDDApl
Y2MtMy1sZWFmMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE+ym7naRaBaTuO/zl Y2MtMy1sZWFmMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEkOQo7MEv9jmUrtgp
KilQa2WcyNxkCuhmWP6M/swW3gL7iggp0FctlkgEBuMGSr+t4a5uAT3uQO2XXj2T 0P7pgaMwfilFa3Gv8iAekhrwqWy8hsbSuEIcSYCYkeSmCGhPev1u+d3oRm3KIQal
67vU5KNNMEswCQYDVR0TBAIwADAdBgNVHQ4EFgQU+4WTRfTnErID6RM2s6iDanGu FjPmGaNNMEswCQYDVR0TBAIwADAdBgNVHQ4EFgQU4RIxXaQqyI2yRVvTLyiwck6L
moQwHwYDVR0jBBgwFoAUon2Hf0Hu/HeRf4wh6iKD+joFwJcwCgYIKoZIzj0EAwID 5QcwHwYDVR0jBBgwFoAUVpdKyolJk+v62Ysn8Kw/AhhbnuwwCgYIKoZIzj0EAwID
RwAwRAIgBuVl/FAIlCRHMpnCQj50GoVqvk+x7yZlsxo/3JReq54CIErGC/KV2vq+ SAAwRQIhALaFLN868aPgHTfH2GFuDMHZj8Zk7AufzoShSsy9yv0dAiBpdCTnpKDr
SNjx6CEDnvvkTxuah+CWTu+jyKxjlfDG Cuqo4PXB4Hhh3siCLg+iCfZeaedojtlWKQ==
-----END CERTIFICATE----- -----END CERTIFICATE-----
Certificate: Certificate:
Data: Data:
@ -49,27 +49,27 @@ Certificate:
Signature Algorithm: ecdsa-with-SHA256 Signature Algorithm: ecdsa-with-SHA256
Issuer: CN=ecc-3-root Issuer: CN=ecc-3-root
Validity Validity
Not Before: Apr 13 04:17:19 2017 GMT Not Before: Jun 19 05:54:16 2017 GMT
Not After : Apr 11 04:17:19 2027 GMT Not After : Jun 17 05:54:16 2027 GMT
Subject: CN=ecc-3-ca Subject: CN=ecc-3-ca
Subject Public Key Info: Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit) Public-Key: (256 bit)
pub: pub:
04:9a:3c:72:c0:55:c5:61:97:d1:04:8d:44:92:31: 04:6a:59:73:9d:90:22:61:88:83:e7:41:0b:3e:12:
fc:d8:92:3d:58:fa:11:af:e3:ba:b5:4a:62:00:06: 42:7f:ed:e2:48:0a:c8:fd:33:c4:24:42:fe:b0:de:
0f:11:ff:c8:b6:50:12:4d:15:ed:67:6f:c8:af:6c: 1c:0a:35:fa:80:13:6a:8e:17:94:48:e1:50:0c:65:
5e:26:8c:d4:23:fc:38:e2:9f:d6:c5:6a:4a:ac:76: 88:d3:65:b4:eb:0a:ee:66:13:2b:d8:d1:21:d0:60:
a7:e2:10:f5:d9 19:ed:15:35:a2
ASN1 OID: prime256v1 ASN1 OID: prime256v1
NIST CURVE: P-256 NIST CURVE: P-256
X509v3 extensions: X509v3 extensions:
X509v3 Subject Key Identifier: X509v3 Subject Key Identifier:
A2:7D:87:7F:41:EE:FC:77:91:7F:8C:21:EA:22:83:FA:3A:05:C0:97 56:97:4A:CA:89:49:93:EB:FA:D9:8B:27:F0:AC:3F:02:18:5B:9E:EC
X509v3 Authority Key Identifier: X509v3 Authority Key Identifier:
keyid:AA:4F:85:4C:EB:3E:30:B9:88:84:0F:E4:81:17:EB:51:85:38:D7:F4 keyid:22:A7:EE:D4:06:BB:8C:B1:42:00:35:E3:D6:CB:FA:60:4A:63:1C:BB
DirName:/CN=ecc-3-root DirName:/CN=ecc-3-root
serial:8F:9F:50:14:32:87:37:CD serial:F7:F4:16:5B:3E:0E:9F:61
X509v3 Basic Constraints: X509v3 Basic Constraints:
CA:TRUE CA:TRUE
@ -78,19 +78,19 @@ Certificate:
X509v3 Extended Key Usage: X509v3 Extended Key Usage:
TLS Web Server Authentication TLS Web Server Authentication
Signature Algorithm: ecdsa-with-SHA256 Signature Algorithm: ecdsa-with-SHA256
30:45:02:20:70:8c:84:94:5a:94:02:ca:00:d2:53:94:58:21: 30:44:02:20:41:00:84:12:c1:06:2b:de:0c:7f:64:b9:32:f2:
aa:4c:58:2b:fa:bb:f6:89:e5:f0:06:33:97:49:02:bb:d5:a1: 93:cb:dc:58:62:0c:69:9f:2e:8a:aa:7a:3c:ad:37:ea:3b:37:
02:21:00:83:79:23:a7:49:40:1f:17:2d:65:17:62:8e:7f:3c: 02:20:79:4d:c8:9e:ee:40:fc:f9:2b:13:45:2e:e4:1d:dc:64:
69:15:d7:1b:ce:e9:99:9a:e0:b4:ba:0c:c0:8b:97:05:be 42:b4:29:b3:12:c9:d5:79:ff:d0:13:e4:2d:86:e1:1d
-----BEGIN CERTIFICATE----- -----BEGIN CERTIFICATE-----
MIIBsjCCAVigAwIBAgICEAAwCgYIKoZIzj0EAwIwFTETMBEGA1UEAwwKZWNjLTMt MIIBsTCCAVigAwIBAgICEAAwCgYIKoZIzj0EAwIwFTETMBEGA1UEAwwKZWNjLTMt
cm9vdDAeFw0xNzA0MTMwNDE3MTlaFw0yNzA0MTEwNDE3MTlaMBMxETAPBgNVBAMM cm9vdDAeFw0xNzA2MTkwNTU0MTZaFw0yNzA2MTcwNTU0MTZaMBMxETAPBgNVBAMM
CGVjYy0zLWNhMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEmjxywFXFYZfRBI1E CGVjYy0zLWNhMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEallznZAiYYiD50EL
kjH82JI9WPoRr+O6tUpiAAYPEf/ItlASTRXtZ2/Ir2xeJozUI/w44p/WxWpKrHan PhJCf+3iSArI/TPEJEL+sN4cCjX6gBNqjheUSOFQDGWI02W06wruZhMr2NEh0GAZ
4hD12aOBmTCBljAdBgNVHQ4EFgQUon2Hf0Hu/HeRf4wh6iKD+joFwJcwRQYDVR0j 7RU1oqOBmTCBljAdBgNVHQ4EFgQUVpdKyolJk+v62Ysn8Kw/AhhbnuwwRQYDVR0j
BD4wPIAUqk+FTOs+MLmIhA/kgRfrUYU41/ShGaQXMBUxEzARBgNVBAMMCmVjYy0z BD4wPIAUIqfu1Aa7jLFCADXj1sv6YEpjHLuhGaQXMBUxEzARBgNVBAMMCmVjYy0z
LXJvb3SCCQCPn1AUMoc3zTAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwICxDATBgNV LXJvb3SCCQD39BZbPg6fYTAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwICxDATBgNV
HSUEDDAKBggrBgEFBQcDATAKBggqhkjOPQQDAgNIADBFAiBwjISUWpQCygDSU5RY HSUEDDAKBggrBgEFBQcDATAKBggqhkjOPQQDAgNHADBEAiBBAIQSwQYr3gx/ZLky
IapMWCv6u/aJ5fAGM5dJArvVoQIhAIN5I6dJQB8XLWUXYo5/PGkV1xvO6Zma4LS6 8pPL3FhiDGmfLoqqejytN+o7NwIgeU3Inu5A/PkrE0Uu5B3cZEK0KbMSydV5/9AT
DMCLlwW+ 5C2G4R0=
-----END CERTIFICATE----- -----END CERTIFICATE-----

42
conf/ecc-3-leaf.crt
View File

@ -5,40 +5,40 @@ Certificate:
Signature Algorithm: ecdsa-with-SHA256 Signature Algorithm: ecdsa-with-SHA256
Issuer: CN=ecc-3-ca Issuer: CN=ecc-3-ca
Validity Validity
Not Before: Apr 13 04:17:19 2017 GMT Not Before: Jun 19 05:54:16 2017 GMT
Not After : Apr 11 04:17:19 2027 GMT Not After : Jun 17 05:54:16 2027 GMT
Subject: CN=ecc-3-leaf Subject: CN=ecc-3-leaf
Subject Public Key Info: Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit) Public-Key: (256 bit)
pub: pub:
04:fb:29:bb:9d:a4:5a:05:a4:ee:3b:fc:e5:2a:29: 04:90:e4:28:ec:c1:2f:f6:39:94:ae:d8:29:d0:fe:
50:6b:65:9c:c8:dc:64:0a:e8:66:58:fe:8c:fe:cc: e9:81:a3:30:7e:29:45:6b:71:af:f2:20:1e:92:1a:
16:de:02:fb:8a:08:29:d0:57:2d:96:48:04:06:e3: f0:a9:6c:bc:86:c6:d2:b8:42:1c:49:80:98:91:e4:
06:4a:bf:ad:e1:ae:6e:01:3d:ee:40:ed:97:5e:3d: a6:08:68:4f:7a:fd:6e:f9:dd:e8:46:6d:ca:21:06:
93:eb:bb:d4:e4 a5:16:33:e6:19
ASN1 OID: prime256v1 ASN1 OID: prime256v1
NIST CURVE: P-256 NIST CURVE: P-256
X509v3 extensions: X509v3 extensions:
X509v3 Basic Constraints: X509v3 Basic Constraints:
CA:FALSE CA:FALSE
X509v3 Subject Key Identifier: X509v3 Subject Key Identifier:
FB:85:93:45:F4:E7:12:B2:03:E9:13:36:B3:A8:83:6A:71:AE:9A:84 E1:12:31:5D:A4:2A:C8:8D:B2:45:5B:D3:2F:28:B0:72:4E:8B:E5:07
X509v3 Authority Key Identifier: X509v3 Authority Key Identifier:
keyid:A2:7D:87:7F:41:EE:FC:77:91:7F:8C:21:EA:22:83:FA:3A:05:C0:97 keyid:56:97:4A:CA:89:49:93:EB:FA:D9:8B:27:F0:AC:3F:02:18:5B:9E:EC
Signature Algorithm: ecdsa-with-SHA256 Signature Algorithm: ecdsa-with-SHA256
30:44:02:20:06:e5:65:fc:50:08:94:24:47:32:99:c2:42:3e: 30:45:02:21:00:b6:85:2c:df:3a:f1:a3:e0:1d:37:c7:d8:61:
74:1a:85:6a:be:4f:b1:ef:26:65:b3:1a:3f:dc:94:5e:ab:9e: 6e:0c:c1:d9:8f:c6:64:ec:0b:9f:ce:84:a1:4a:cc:bd:ca:fd:
02:20:4a:c6:0b:f2:95:da:fa:be:48:d8:f1:e8:21:03:9e:fb: 1d:02:20:69:74:24:e7:a4:a0:eb:0a:ea:a8:e0:f5:c1:e0:78:
e4:4f:1b:9a:87:e0:96:4e:ef:a3:c8:ac:63:95:f0:c6 61:de:c8:82:2e:0f:a2:09:f6:5e:69:e7:68:8e:d9:56:29
-----BEGIN CERTIFICATE----- -----BEGIN CERTIFICATE-----
MIIBZDCCAQugAwIBAgICEAEwCgYIKoZIzj0EAwIwEzERMA8GA1UEAwwIZWNjLTMt MIIBZTCCAQugAwIBAgICEAEwCgYIKoZIzj0EAwIwEzERMA8GA1UEAwwIZWNjLTMt
Y2EwHhcNMTcwNDEzMDQxNzE5WhcNMjcwNDExMDQxNzE5WjAVMRMwEQYDVQQDDApl Y2EwHhcNMTcwNjE5MDU1NDE2WhcNMjcwNjE3MDU1NDE2WjAVMRMwEQYDVQQDDApl
Y2MtMy1sZWFmMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE+ym7naRaBaTuO/zl Y2MtMy1sZWFmMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEkOQo7MEv9jmUrtgp
KilQa2WcyNxkCuhmWP6M/swW3gL7iggp0FctlkgEBuMGSr+t4a5uAT3uQO2XXj2T 0P7pgaMwfilFa3Gv8iAekhrwqWy8hsbSuEIcSYCYkeSmCGhPev1u+d3oRm3KIQal
67vU5KNNMEswCQYDVR0TBAIwADAdBgNVHQ4EFgQU+4WTRfTnErID6RM2s6iDanGu FjPmGaNNMEswCQYDVR0TBAIwADAdBgNVHQ4EFgQU4RIxXaQqyI2yRVvTLyiwck6L
moQwHwYDVR0jBBgwFoAUon2Hf0Hu/HeRf4wh6iKD+joFwJcwCgYIKoZIzj0EAwID 5QcwHwYDVR0jBBgwFoAUVpdKyolJk+v62Ysn8Kw/AhhbnuwwCgYIKoZIzj0EAwID
RwAwRAIgBuVl/FAIlCRHMpnCQj50GoVqvk+x7yZlsxo/3JReq54CIErGC/KV2vq+ SAAwRQIhALaFLN868aPgHTfH2GFuDMHZj8Zk7AufzoShSsy9yv0dAiBpdCTnpKDr
SNjx6CEDnvvkTxuah+CWTu+jyKxjlfDG Cuqo4PXB4Hhh3siCLg+iCfZeaedojtlWKQ==
-----END CERTIFICATE----- -----END CERTIFICATE-----

6
conf/ecc-3-leaf.key
View File

@ -2,7 +2,7 @@
BggqhkjOPQMBBw== BggqhkjOPQMBBw==
-----END EC PARAMETERS----- -----END EC PARAMETERS-----
-----BEGIN EC PRIVATE KEY----- -----BEGIN EC PRIVATE KEY-----
MHcCAQEEIGG5W4DVYxQGUlQCFVF6knJBJhIpyxlQn3oOC0b+XMK+oAoGCCqGSM49 MHcCAQEEIFmYxpCUc58+GkjbbcdB/02wpH+O+x5GRt2L3aOhHG/5oAoGCCqGSM49
AwEHoUQDQgAE+ym7naRaBaTuO/zlKilQa2WcyNxkCuhmWP6M/swW3gL7iggp0Fct AwEHoUQDQgAEkOQo7MEv9jmUrtgp0P7pgaMwfilFa3Gv8iAekhrwqWy8hsbSuEIc
lkgEBuMGSr+t4a5uAT3uQO2XXj2T67vU5A== SYCYkeSmCGhPev1u+d3oRm3KIQalFjPmGQ==
-----END EC PRIVATE KEY----- -----END EC PRIVATE KEY-----

18
conf/ecc-3-root.crt
View File

@ -1,11 +1,11 @@
-----BEGIN CERTIFICATE----- -----BEGIN CERTIFICATE-----
MIIBljCCAT2gAwIBAgIJAI+fUBQyhzfNMAoGCCqGSM49BAMCMBUxEzARBgNVBAMM MIIBlzCCAT2gAwIBAgIJAPf0Fls+Dp9hMAoGCCqGSM49BAMCMBUxEzARBgNVBAMM
CmVjYy0zLXJvb3QwHhcNMTcwNDEzMDQxNzE5WhcNMTcwNTEzMDQxNzE5WjAVMRMw CmVjYy0zLXJvb3QwHhcNMTcwNjE5MDU1NDE2WhcNMjcwNjE3MDU1NDE2WjAVMRMw
EQYDVQQDDAplY2MtMy1yb290MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEu5gb EQYDVQQDDAplY2MtMy1yb290MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEFW6o
zk5/vNactCMgdIockN9P9W3QTazRkMRGdSdjV2mvc9rXBitFvxcJNVD3G+biakdu XBSyHww9qeH/QOa9Njj9t2i6akog4A0VJHZaFGHPkSHKkRXoAQaWlmst50AGzmVG
W/TfwO1i6c3j04jPFaN2MHQwHQYDVR0OBBYEFKpPhUzrPjC5iIQP5IEX61GFONf0 tRIwT0oYiA0mLR8G9KN2MHQwHQYDVR0OBBYEFCKn7tQGu4yxQgA149bL+mBKYxy7
MEUGA1UdIwQ+MDyAFKpPhUzrPjC5iIQP5IEX61GFONf0oRmkFzAVMRMwEQYDVQQD MEUGA1UdIwQ+MDyAFCKn7tQGu4yxQgA149bL+mBKYxy7oRmkFzAVMRMwEQYDVQQD
DAplY2MtMy1yb290ggkAj59QFDKHN80wDAYDVR0TBAUwAwEB/zAKBggqhkjOPQQD DAplY2MtMy1yb290ggkA9/QWWz4On2EwDAYDVR0TBAUwAwEB/zAKBggqhkjOPQQD
AgNHADBEAiAjK8/tUwXXbbWGhuPXwNfia6u8xX375sjle3aPw3E8WwIgE8YEwq3G AgNIADBFAiAxBGSjCh4bYJDhgC5XbB+MlwTITgxmMTviI0Mgjh1BbAIhAKUtwhAm
Hca5vKPwkbpe8IrfC0GLfs4wBnlPOsZApZU= 9pAaoWk3nhXP5i8/xYuu/RvH+uW9HHzSSRo8
-----END CERTIFICATE----- -----END CERTIFICATE-----

6
conf/ecc-3-root.key
View File

@ -2,7 +2,7 @@
BggqhkjOPQMBBw== BggqhkjOPQMBBw==
-----END EC PARAMETERS----- -----END EC PARAMETERS-----
-----BEGIN EC PRIVATE KEY----- -----BEGIN EC PRIVATE KEY-----
MHcCAQEEIEmIgFcBGNFjUcXURgcXgKa3Wdr2GoUK1MufLO5/fal1oAoGCCqGSM49 MHcCAQEEICJaRkRLlwe2+qRDeif5N7CJZsBokFyEQ9p8clle/+Z4oAoGCCqGSM49
AwEHoUQDQgAEu5gbzk5/vNactCMgdIockN9P9W3QTazRkMRGdSdjV2mvc9rXBitF AwEHoUQDQgAEFW6oXBSyHww9qeH/QOa9Njj9t2i6akog4A0VJHZaFGHPkSHKkRXo
vxcJNVD3G+biakduW/TfwO1i6c3j04jPFQ== AQaWlmst50AGzmVGtRIwT0oYiA0mLR8G9A==
-----END EC PRIVATE KEY----- -----END EC PRIVATE KEY-----

2
conf/gen-certs.sh
View File

@ -75,7 +75,7 @@ do
openssl req -x509 -new \ openssl req -x509 -new \
-config $OPENSSL_CONF -subj "/CN=${NAME}/" \ -config $OPENSSL_CONF -subj "/CN=${NAME}/" \
-out "./${NAME}.crt" -key "./${NAME}.key" \ -out "./${NAME}.crt" -key "./${NAME}.key" \
-extensions $EXT \ -extensions $EXT -days 3650 \
>/dev/null 2>&1 >/dev/null 2>&1
RET=$? RET=$?
if [ "$RET" != "0" ]; then if [ "$RET" != "0" ]; then

7
test.sh
View File

@ -79,6 +79,9 @@ UNKNOWN=0
run_nginx() { run_nginx() {
# valgrind --leak-check=full # valgrind --leak-check=full
echo ${NGINX_BIN} -p ${WN_PATH} \
-g "error_log ${WN_ERROR_LOG} debug;" \
${NGINX_OPTS}
${NGINX_BIN} -p ${WN_PATH} \ ${NGINX_BIN} -p ${WN_PATH} \
-g "error_log ${WN_ERROR_LOG} debug;" \ -g "error_log ${WN_ERROR_LOG} debug;" \
${NGINX_OPTS} ${NGINX_OPTS}
@ -359,7 +362,7 @@ echo '#'
PORT=11471 PORT=11471
echo "# Port: $PORT" echo "# Port: $PORT"
OPTS= OPTS=
EXPECT=("err = -360") EXPECT=("err" "360")
stapling_test stapling_test
stapling_test stapling_test
# Good certificate - response file # Good certificate - response file
@ -380,7 +383,7 @@ echo '#'
PORT=11473 PORT=11473
echo "# Port: $PORT" echo "# Port: $PORT"
OPTS= OPTS=
EXPECT=("err = -360") EXPECT=("err" "360")
stapling_test stapling_test
# No certificate for verification of OCSP response # No certificate for verification of OCSP response
echo echo