WolfSSL
/
wolfssl
mirror of https://github.com/wolfSSL/wolfssl.git
1
0
Fork 0
Code Issues Releases Wiki Activity
wolfssl/certs/include.am

152 lines
5.1 KiB
Plaintext
Raw Normal View History

Brian Aker commits plus some minor changes like AM_CFLAGS getting AC_SUBST and --enable-xxx #ifdef to new header layout
2011-08-24 17:54:58 -05:00
# vim:ft=automake
# All paths should be given relative to the root
#
don't install example certs and keys
2012-05-23 12:28:02 -05:00
EXTRA_DIST += \
PEM example: new example for convert between PEM and DER PEM example converts PEM to DER and DER to PEM. Supports encrypting DER and writing out as PEM. Added better support for 40-bit RC2-CBC PBE. Added AES-128-CBC encryption support with PKCS#5v2. Fixed handling of iterations to support writing 24-bit values. Declared enum types for pass to PKCS#8 encryption APIs. Add more DER and PEM files to certs directory. Add testing of 'pem' with pem.test script.
2023-07-03 00:39:27 -05:00
certs/ca-cert-chain.der \
certs/ca-cert.pem \
certs/ca-key.pem \
add parsing over optional PKCS8 attributes
2024-09-04 16:11:10 -05:00
certs/ca-key-pkcs8-attribute.der \
PEM example: new example for convert between PEM and DER PEM example converts PEM to DER and DER to PEM. Supports encrypting DER and writing out as PEM. Added better support for 40-bit RC2-CBC PBE. Added AES-128-CBC encryption support with PKCS#5v2. Fixed handling of iterations to support writing 24-bit values. Declared enum types for pass to PKCS#8 encryption APIs. Add more DER and PEM files to certs directory. Add testing of 'pem' with pem.test script.
2023-07-03 00:39:27 -05:00
certs/client-cert.pem \
certs/client-keyEnc.pem \
certs/client-key.pem \
certs/client-uri-cert.pem \
certs/client-absolute-urn.pem \
certs/client-relative-uri.pem \
certs/client-crl-dist.pem \
certs/client-crl-dist.der \
certs/ecc-key.pem \
certs/ecc-keyPub.pem \
certs/ecc-params.der \
certs/ecc-params.pem \
certs/ecc-privkey.der \
certs/ecc-privkey.pem \
certs/ecc-privkeyPkcs8.der \
certs/ecc-privkeyPkcs8.pem \
certs/ecc-keyPkcs8Enc.pem \
certs/ecc-keyPkcs8Enc.der \
certs/ecc-key-comp.pem \
certs/ecc-keyPkcs8.pem \
certs/ecc-keyPkcs8.der \
certs/ecc-client-key.pem \
certs/ecc-client-keyPub.pem \
certs/client-ecc-cert.pem \
certs/client-ca.pem \
certs/dh2048.pem \
certs/server-cert.pem \
certs/server-ecc.pem \
certs/server-ecc-self.pem \
certs/server-ecc-comp.pem \
certs/server-ecc-rsa.pem \
certs/server-keyEnc.pem \
certs/server-key.pem \
certs/server-keyPub.der \
certs/server-keyPub.pem \
certs/server-keyPkcs8.der \
certs/server-keyPkcs8Enc12.pem \
certs/server-keyPkcs8Enc2.pem \
certs/server-keyPkcs8Enc.pem \
certs/server-keyPkcs8Enc.der \
certs/server-keyPkcs8.pem \
certs/server-revoked-cert.pem \
certs/server-revoked-key.pem \
certs/wolfssl-website-ca.pem \
certs/test-degenerate.p7b \
add new test file to make dist
2024-03-01 11:12:01 -06:00
certs/test-stream-sign.p7b \
PEM example: new example for convert between PEM and DER PEM example converts PEM to DER and DER to PEM. Supports encrypting DER and writing out as PEM. Added better support for 40-bit RC2-CBC PBE. Added AES-128-CBC encryption support with PKCS#5v2. Fixed handling of iterations to support writing 24-bit values. Declared enum types for pass to PKCS#8 encryption APIs. Add more DER and PEM files to certs directory. Add testing of 'pem' with pem.test script.
2023-07-03 00:39:27 -05:00
certs/test-ber-exp02-05-2022.p7b \
certs/test-servercert.p12 \
certs/test-servercert-rc2.p12 \
certs/ecc-rsa-server.p12 \
certs/dsaparams.der \
certs/dsaparams.pem \
certs/ecc-privOnlyKey.pem \
certs/ecc-privOnlyCert.pem \
certs/dh3072.pem \
certs/dh4096.pem \
certs/client-cert-ext.pem \
certs/csr.attr.der \
certs/csr.dsa.der \
certs/csr.dsa.pem \
certs/csr.signed.der \
certs/csr.ext.der \
certs/entity-no-ca-bool-cert.pem \
certs/entity-no-ca-bool-key.pem \
certs/x942dh2048.der \
certs/x942dh2048.pem \
certs/fpki-cert.der \
ssl.c: Move functions out to separate files Moved E[CD][25519||448] APIs to pk.c Move public key PEM APIs to pk.c. Move wolfSSL loading and using of private keys and certificates to ssl_load.c Move PKCS#7 and PKCS#12 APIs to ssl_p7p12.c. Move session and session cache APIs to ssl_sess.c. Other minor fixes.
2024-03-04 19:02:45 -06:00
certs/rid-cert.der \
certs/dh-priv-2048.der \
certs/dh-priv-2048.pem \
certs/dh-pub-2048.der \
certs/dh-pub-2048.pem \
certs/dsa2048.pem
wolfSSL Compatibility support for OpenVPN * Adds compatibility API's for: * `sk_ASN1_OBJECT_free` * `sk_ASN1_OBJECT_num` * `sk_ASN1_OBJECT_value` * `sk_X509_OBJECT_num` * `sk_X509_OBJECT_value` * `sk_X509_OBJECT_delete` * `sk_X509_NAME_find` * `sk_X509_INFO_free` * `BIO_get_len` * `BIO_set_ssl` * `BIO_should_retry` (stub) * `X509_OBJECT_free` * `X509_NAME_get_index_by_OBJ` * `X509_INFO_free` * `X509_STORE_get0_objects` * `X509_check_purpose` (stub) * `PEM_read_bio_X509_CRL` * `PEM_X509_INFO_read_bio` * `ASN1_BIT_STRING_new` * `ASN1_BIT_STRING_free` * `ASN1_BIT_STRING_get_bit` * `ASN1_BIT_STRING_set_bit` * `DES_check_key_parity` * `EC_GROUP_order_bits` * `EC_get_builtin_curves` * `EVP_CIPHER_CTX_cipher` * `EVP_PKEY_get0_EC_KEY` * `EVP_PKEY_get0_RSA` * `EVP_PKEY_get0_DSA` (stub) * `HMAC_CTX_new` * `HMAC_CTX_free` * `HMAC_CTX_reset` * `HMAC_size` * `OBJ_txt2obj` * `RSA_meth_new` * `RSA_meth_free` * `RSA_meth_set_pub_enc` * `RSA_meth_set_pub_dec` * `RSA_meth_set_priv_enc` * `RSA_meth_set_priv_dec` * `RSA_meth_set_init` * `RSA_meth_set_finish` * `RSA_meth_set0_app_data` * `RSA_get_method_data` * `RSA_set_method` * `RSA_get0_key` * `RSA_set0_key` * `RSA_flags` * `RSA_set_flags` * `RSA_bits` * `SSL_CTX_set_ciphersuites` * `SSL_CTX_set_security_level` (stub) * `SSL_export_keying_material` (stub) * `DSA_bits` (stub) * Changes to support password callback trial and NO_PASSWORD. Replaces PR #2505. * Renamed `wolfSSL_SSL_CTX_get_client_CA_list` to `wolfSSL_CTX_get_client_CA_list`. * Cleanup of "sk" compatibility.
2019-10-15 13:17:51 -05:00
don't install example certs and keys
2012-05-23 12:28:02 -05:00
EXTRA_DIST += \
PEM example: new example for convert between PEM and DER PEM example converts PEM to DER and DER to PEM. Supports encrypting DER and writing out as PEM. Added better support for 40-bit RC2-CBC PBE. Added AES-128-CBC encryption support with PKCS#5v2. Fixed handling of iterations to support writing 24-bit values. Declared enum types for pass to PKCS#8 encryption APIs. Add more DER and PEM files to certs directory. Add testing of 'pem' with pem.test script.
2023-07-03 00:39:27 -05:00
certs/ca-key.der \
certs/ca-cert.der \
certs/client-cert.der \
certs/client-key.der \
certs/client-ecc-cert.der \
certs/client-keyPub.der \
certs/client-keyPub.pem \
certs/dh2048.der \
certs/dh3072.der \
certs/dh4096.der \
certs/dh-pubkey-2048.der \
certs/rsa2048.der \
certs/rsa-pub-2048.pem \
certs/rsa3072.der \
certs/dsa2048.der \
certs/dsa3072.der \
certs/dsa-pubkey-2048.der \
certs/ecc-client-key.der \
certs/ecc-client-keyPub.der \
certs/ecc-key.der \
certs/ecc-keyPub.der \
certs/server-key.der \
certs/server-cert.der \
certs/server-ecc-comp.der \
certs/server-ecc.der \
certs/server-ecc-self.der \
certs/server-ecc-rsa.der \
certs/server-cert-chain.der \
certs/client-cert-ext.der
Testing improvements for cert gen and TLS cert validation: * Fixes to support certificate generation (`WOLFSSL_CERT_GEN`) without RSA enabled. * Added new ECC CA for 384-bit tests. * Created new server cert chain (ECC CA for 256-bit that signs server-ecc.pem) * Created new `./certs/ecc/genecc.sh` script for generating all ECC CA's, generated server cert req (CSR), signing with CA and the required CRL. * Moved the wolfCrypt ECC CA / ECC cert gen test into `ecc_test` as `ecc_test_cert_gen`. * Refactor duplicate code that saves DER to disk, converts DER to PEM and saves PEM to disk into SaveDerAndPem function. * Changed `ecc_test_make_pub` and `ecc_test_key_gen` to use XMALLOC for temp buffers (uses heap instead of stack). * Cleanup to combine all certificate subject information into global `certDefaultName`. * Updated cert request info to use wolfSSL instead of Yassl. * Cleanup to combine keyUsage into `certKeyUsage` and `certKeyUsage2`. * Re-number error codes in rsa_test. * Moved the certext_test after the ecc_test, since it uses a file generated in `ecc_test_cert_gen`.
2017-10-19 18:17:51 -05:00
# ECC CA prime256v1
EXTRA_DIST += \
PEM example: new example for convert between PEM and DER PEM example converts PEM to DER and DER to PEM. Supports encrypting DER and writing out as PEM. Added better support for 40-bit RC2-CBC PBE. Added AES-128-CBC encryption support with PKCS#5v2. Fixed handling of iterations to support writing 24-bit values. Declared enum types for pass to PKCS#8 encryption APIs. Add more DER and PEM files to certs directory. Add testing of 'pem' with pem.test script.
2023-07-03 00:39:27 -05:00
certs/ca-ecc-cert.der \
certs/ca-ecc-cert.pem \
certs/ca-ecc-key.der \
certs/ca-ecc-key.pem
Testing improvements for cert gen and TLS cert validation: * Fixes to support certificate generation (`WOLFSSL_CERT_GEN`) without RSA enabled. * Added new ECC CA for 384-bit tests. * Created new server cert chain (ECC CA for 256-bit that signs server-ecc.pem) * Created new `./certs/ecc/genecc.sh` script for generating all ECC CA's, generated server cert req (CSR), signing with CA and the required CRL. * Moved the wolfCrypt ECC CA / ECC cert gen test into `ecc_test` as `ecc_test_cert_gen`. * Refactor duplicate code that saves DER to disk, converts DER to PEM and saves PEM to disk into SaveDerAndPem function. * Changed `ecc_test_make_pub` and `ecc_test_key_gen` to use XMALLOC for temp buffers (uses heap instead of stack). * Cleanup to combine all certificate subject information into global `certDefaultName`. * Updated cert request info to use wolfSSL instead of Yassl. * Cleanup to combine keyUsage into `certKeyUsage` and `certKeyUsage2`. * Re-number error codes in rsa_test. * Moved the certext_test after the ecc_test, since it uses a file generated in `ecc_test_cert_gen`.
2017-10-19 18:17:51 -05:00
# ECC CA SECP384R1
EXTRA_DIST += \
PEM example: new example for convert between PEM and DER PEM example converts PEM to DER and DER to PEM. Supports encrypting DER and writing out as PEM. Added better support for 40-bit RC2-CBC PBE. Added AES-128-CBC encryption support with PKCS#5v2. Fixed handling of iterations to support writing 24-bit values. Declared enum types for pass to PKCS#8 encryption APIs. Add more DER and PEM files to certs directory. Add testing of 'pem' with pem.test script.
2023-07-03 00:39:27 -05:00
certs/ca-ecc384-cert.der \
certs/ca-ecc384-cert.pem \
certs/ca-ecc384-key.der \
certs/ca-ecc384-key.pem
Brian Aker commits plus some minor changes like AM_CFLAGS getting AC_SUBST and --enable-xxx #ifdef to new header layout
2011-08-24 17:54:58 -05:00
This adds support for "make rpm"
2012-10-20 03:42:34 -05:00
dist_doc_DATA+= certs/taoCert.txt
Brian Aker commits plus some minor changes like AM_CFLAGS getting AC_SUBST and --enable-xxx #ifdef to new header layout
2011-08-24 17:54:58 -05:00
Fix Cert Includes 1. Added files that were missing from the certs directory include.am files. 2. Fixed the duplicate items in the certs directory's include.am files. 3. Reorganized the certs directory include.am files to be a tree.
2018-05-31 19:38:47 -05:00
include certs/1024/include.am
Adds 3072-bit RSA tests using `USE_CERT_BUFFERS_3072`.
2020-01-22 00:16:54 -06:00
include certs/3072/include.am
Add new 4096-bit cert and key to distribution
2019-11-13 17:13:24 -06:00
include certs/4096/include.am
Fix Cert Includes 1. Added files that were missing from the certs directory include.am files. 2. Fixed the duplicate items in the certs directory's include.am files. 3. Reorganized the certs directory include.am files to be a tree.
2018-05-31 19:38:47 -05:00
include certs/crl/include.am
include certs/ecc/include.am
include certs/ed25519/include.am
Add Curve448, X448, Ed448 implementations
2020-02-19 02:07:45 -06:00
include certs/ed448/include.am
TLS 1.3: Fix P-521 algorithm matching Digest size compared to key size - P521 has large key size. Fixed to round down. Added P-521 keys and certificates. Added testing of P-521 keys and certificcates to unittest.
2020-09-14 19:08:30 -05:00
include certs/p521/include.am
SM2/SM3/SM4: Chinese cipher support Add support for: - SM2 elliptic curve and SM2 sign/verify - SM3 digest - SM4 cipher with modes ECB/CBC/CTR/GCM/CCM Add APIs for SM3 and SM4. Add SM2 sign and verify APIs. Add support for SM3 in wc_Hash and wc_Hmac API. Add support for SM3 and SM4 through EVP layer. Add support for SM2-SM3 certificates. Support key ID and name hash being with SHA-1/256 or SM3. Add support for TLS 1.3 cipher suites: TLS-SM4-GCM-SM3, TLS-SM4-CCM-SM3 Add support for TLS 1.2 SM cipher suite: ECDHE-ECDSA-SM4-CBC-SM3 Add support for SM3 in wc_PRF_TLS. Add SM2-SM3 certificates and keys. Generated with GmSSL-3.0.0 and OpenSSL.
2023-02-09 19:48:59 -06:00
include certs/sm2/include.am
Fix Cert Includes 1. Added files that were missing from the certs directory include.am files. 2. Fixed the duplicate items in the certs directory's include.am files. 3. Reorganized the certs directory include.am files to be a tree.
2018-05-31 19:38:47 -05:00
include certs/external/include.am
include certs/ocsp/include.am
TLS v1.3 sniffer support: * Added TLS v1.3 sniffer support using static ephemeral key. * Add support for using a static ephemeral DH and ECC keys with TLS v1.3 using `WOLFSSL_STATIC_EPHEMERAL`. * Adds new API's `wolfSSL_CTX_set_ephemeral_key` and `wolfSSL_set_ephemeral_key`. * Expanded TLS extension support in sniffer. * Refactor of the handshake hashing code. * Added parameter checking to the TLS v1.3 key derivations (protects use of "DoTls13Finished" if handshake resources have been free'd). * Added support for loading DH keys via `wc_DhImportKeyPair` and `wc_DhExportKeyPair`, enabled with `WOLFSSL_DH_EXTRA`. * Added sniffer documentation `sslSniffer/README.md`.
2020-07-09 15:52:49 -05:00
include certs/statickeys/include.am
Fixes from merge of test coverage changes Include new certificates in distribution. Casting changes for clang. Extra error code - recognize in test.
2017-03-09 17:02:29 -06:00
include certs/test/include.am
Add the new path length test certs to include.am.
2016-09-21 14:34:01 -05:00
include certs/test-pathlen/include.am
New tests for cert chains, alternate cert chains, trusted peer certs and DH prime cleanup: * Added ECC and RSA intermediate CA's and server/client chain certificates for testing. * Enhanced suites test to support expected fail arg `-H exitWithRet` in any test .conf file. * Added new `test-altchains.conf` for testing with `WOLFSSL_ALT_CERT_CHAINS` defined. * Added new `test-chains` for testing chains. * Added new `test-dhprime.conf` for DH prime check tests. * Added new `test-trustedpeer.conf` for testing `WOLFSSL_TRUST_PEER_CERT`. * Refactor to add `-2` to disable DH prime check by default (except for new test-dhprime.conf). * Added ability to run a specific test.conf file using syntax like `./tests/unit.test tests/test-altchains.conf`.
2018-12-21 11:33:54 -06:00
include certs/intermediate/include.am
include.am
2021-11-10 17:01:40 -06:00
include certs/falcon/include.am
Certs with RSA-PSS sig Add support for parsing and verifying certificates with RSA-PSS signatures. Including check PSS parameters in key with those in signature algorithm. Add support for parsing private RSA PSS key. Add support for parsing public RSA PSS key.
2022-07-25 02:36:17 -05:00
include certs/rsapss/include.am
Initial commit to add Dilithium NIST PQC winner. Also: * added HAVE_FALCON guards as needed. * corrected minor falcon bugs as I found them. * handling OID sum collision between DILITHIUM_LEVEL5 and DILITHIUM_AES_LEVEL3 Tested with the following commands: examples/server/server -v 4 -l TLS_AES_256_GCM_SHA384 \ -c ~/tmp/dilithium_aes_level5_entity_cert.pem \ -k ~/tmp/dilithium_aes_level5_entity_key.pem \ -A ~/tmp/dilithium_aes_level5_root_cert.pem --pqc P521_KYBER_LEVEL5 examples/client/client -v 4 -l TLS_AES_256_GCM_SHA384 \ -c ~/tmp/dilithium_aes_level5_entity_cert.pem \ -k ~/tmp/dilithium_aes_level5_entity_key.pem \ -A ~/tmp/dilithium_aes_level5_root_cert.pem --pqc P521_KYBER_LEVEL5 with permutations of SHAKE,AES variants and levels 2,3,5
2022-07-13 17:30:12 -05:00
include certs/dilithium/include.am
Add sphincs to wolfCrypt. Note that we will not support sphincs in TLS so nothing above wolfcrypt changes.
2022-08-17 07:59:00 -05:00
include certs/sphincs/include.am
Add support for raw-public-key
2023-06-26 10:45:30 -05:00
include certs/rpk/include.am
Script to find exipred CRLs and certificates Check for expiration in 3 months. First argument is the offset. e.g. "+1 year"
2020-08-20 23:59:19 -05:00