GitHub/openssl
1
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2026-06-06 20:18:09 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
feature/ech
openssl/test/certs
T
History
sftcd 2fa00e9e9f Add tests and documentation and fix a couple of issues identified by added tests 
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
MergeDate: Mon Feb 16 15:41:15 2026
(Merged from https://github.com/openssl/openssl/pull/29200)
2026-02-17 13:35:01 +00:00
..
echdir
Add tests and documentation and fix a couple of issues identified by added tests
2026-02-17 13:35:01 +00:00
acert_bc1.pem
x509_acert: Add more parsing and printing tests
2024-04-24 14:08:05 +01:00
acert_bc2.pem
x509_acert: Add more parsing and printing tests
2024-04-24 14:08:05 +01:00
acert_ietf.pem
x509_acert: Add simple API tests
2024-04-24 14:05:35 +01:00
acert.pem
x509_acert: Add simple API tests
2024-04-24 14:05:35 +01:00
alt1-cert.pem
Limit scope of CN name constraints
2018-05-23 11:12:13 -04:00
alt1-key.pem
Limit scope of CN name constraints
2018-05-23 11:12:13 -04:00
alt2-cert.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
alt2-key.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
alt3-cert.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
alt3-key.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
bad-othername-cert.pem
Add testcase for nc_match_single type confusion
2023-02-07 17:05:10 +01:00
bad-othername-namec-inter.pem
Test a bad SmtpUTF8Mailbox name constraint
2021-06-04 17:18:31 +01:00
bad-othername-namec-key.pem
Test a bad SmtpUTF8Mailbox name constraint
2021-06-04 17:18:31 +01:00
bad-othername-namec.pem
Test a bad SmtpUTF8Mailbox name constraint
2021-06-04 17:18:31 +01:00
bad-pc3-cert.pem
Create some proxy certificates
2016-06-20 21:34:37 +02:00
bad-pc3-key.pem
Create some proxy certificates
2016-06-20 21:34:37 +02:00
bad-pc4-cert.pem
Create some proxy certificates
2016-06-20 21:34:37 +02:00
bad-pc4-key.pem
Create some proxy certificates
2016-06-20 21:34:37 +02:00
bad-pc6-cert.pem
Create some proxy certificates
2016-06-20 21:34:37 +02:00
bad-pc6-key.pem
Create some proxy certificates
2016-06-20 21:34:37 +02:00
bad.key
…
bad.pem
…
badalt1-cert.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
badalt1-key.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
badalt2-cert.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
badalt2-key.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
badalt3-cert.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
badalt3-key.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
badalt4-cert.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
badalt4-key.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
badalt5-cert.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
badalt5-key.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
badalt6-cert.pem
Limit scope of CN name constraints
2018-05-23 11:12:13 -04:00
badalt6-key.pem
Limit scope of CN name constraints
2018-05-23 11:12:13 -04:00
badalt7-cert.pem
Limit scope of CN name constraints
2018-05-23 11:12:13 -04:00
badalt7-key.pem
Limit scope of CN name constraints
2018-05-23 11:12:13 -04:00
badalt8-cert.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
badalt8-key.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
badalt9-cert.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
badalt9-key.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
badalt10-cert.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
badalt10-key.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
badcn1-cert.pem
Limit scope of CN name constraints
2018-05-23 11:12:13 -04:00
badcn1-key.pem
Limit scope of CN name constraints
2018-05-23 11:12:13 -04:00
ca-anyEKU.pem
Compat self-signed trust with reject-only aux data
2016-01-31 21:24:12 -05:00
ca-cert2.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
ca-cert-768.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
ca-cert-768i.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
ca-cert-ec-explicit.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
ca-cert-ec-named.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
ca-cert-md5-any.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
ca-cert-md5.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
ca-cert.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
ca-clientAuth.pem
Compat self-signed trust with reject-only aux data
2016-01-31 21:24:12 -05:00
ca-expired.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
ca-key2.pem
Commit pre-generated test_verify certs
2016-01-20 19:03:14 -05:00
ca-key-768.pem
Move peer chain security checks into x509_vfy.c
2016-04-03 11:35:35 -04:00
ca-key-ec-explicit.pem
Disallow certs with explicit curve in verification chain
2020-09-17 17:15:15 +02:00
ca-key-ec-named.pem
Disallow certs with explicit curve in verification chain
2020-09-17 17:15:15 +02:00
ca-key.pem
Commit pre-generated test_verify certs
2016-01-20 19:03:14 -05:00
ca-name2.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
ca-nonbc.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
ca-nonca.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
ca-pol-cert.pem
Generate some certificates with the certificatePolicies extension
2023-03-28 13:31:17 +02:00
ca-pss-cert.pem
check_sig_alg_match(): weaken sig nid comparison to allow RSA{,PSS} key verify RSA-PSS
2021-01-28 15:05:04 +01:00
ca-pss-key.pem
check_sig_alg_match(): weaken sig nid comparison to allow RSA{,PSS} key verify RSA-PSS
2021-01-28 15:05:04 +01:00
ca-root2.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
ca-serverAuth.pem
Commit pre-generated test_verify certs
2016-01-20 19:03:14 -05:00
ca+anyEKU.pem
Compat self-signed trust with reject-only aux data
2016-01-31 21:24:12 -05:00
ca+clientAuth.pem
Commit pre-generated test_verify certs
2016-01-20 19:03:14 -05:00
ca+serverAuth.pem
Commit pre-generated test_verify certs
2016-01-20 19:03:14 -05:00
cca-anyEKU.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
cca-cert.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
cca-clientAuth.pem
test/certs/setup.sh: Fix two glitches
2021-05-05 09:51:39 +02:00
cca-serverAuth.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
cca+anyEKU.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
cca+clientAuth.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
cca+serverAuth.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
cert-key-cert.pem
test_pem_reading: Test loading a key from a file with multiple PEM data
2021-07-02 15:33:34 +02:00
client-ed448-cert.pem
Update tests for TLS Ed448
2018-03-05 11:39:44 +00:00
client-ed448-key.pem
Update tests for TLS Ed448
2018-03-05 11:39:44 +00:00
client-ed25519-cert.pem
Add Ed25519 EE certificates
2017-06-21 14:11:01 +01:00
client-ed25519-key.pem
Add Ed25519 EE certificates
2017-06-21 14:11:01 +01:00
client-pss-restrict-cert.pem
Enable setting SSL_CERT_FLAG_TLS_STRICT with ssl config
2022-06-03 13:22:42 +10:00
client-pss-restrict-key.pem
Enable setting SSL_CERT_FLAG_TLS_STRICT with ssl config
2022-06-03 13:22:42 +10:00
croot-anyEKU.pem
Compat self-signed trust with reject-only aux data
2016-01-31 21:24:12 -05:00
croot-cert.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
croot-clientAuth.pem
Compat self-signed trust with reject-only aux data
2016-01-31 21:24:12 -05:00
croot-serverAuth.pem
Compat self-signed trust with reject-only aux data
2016-01-31 21:24:12 -05:00
croot+anyEKU.pem
Compat self-signed trust with reject-only aux data
2016-01-31 21:24:12 -05:00
croot+clientAuth.pem
Compat self-signed trust with reject-only aux data
2016-01-31 21:24:12 -05:00
croot+serverAuth.pem
Compat self-signed trust with reject-only aux data
2016-01-31 21:24:12 -05:00
cross-key.pem
Test for DANE cross cert fix
2021-09-03 00:11:53 -04:00
cross-root.pem
Test for DANE cross cert fix
2021-09-03 00:11:53 -04:00
ct-server-key-public.pem
Create a new embeddedSCTs1 that's signed using SHA256
2020-02-05 22:04:37 +01:00
ct-server-key.pem
Create a new embeddedSCTs1 that's signed using SHA256
2020-02-05 22:04:37 +01:00
cyrillic_crl.pem
Switch command-line utils to new nameopt API.
2017-04-25 12:37:17 -04:00
cyrillic_crl.utf8
Change hexdump width to a multiple of 8 bytes
2025-12-03 17:45:15 +01:00
cyrillic.msb
Change hexdump width to a multiple of 8 bytes
2025-12-03 17:45:15 +01:00
cyrillic.pem
test/x509: Test for issuer being overwritten when printing.
2021-03-04 12:15:37 +01:00
cyrillic.utf8
Change hexdump width to a multiple of 8 bytes
2025-12-03 17:45:15 +01:00
dhk2048.pem
TEST: Prefer using precomputed RSA and DH keys for more efficient tests
2021-05-27 11:06:01 +02:00
dhp2048.pem
test_ssl_new: X448, X25519, and EdDSA are supported with fips
2021-03-03 10:00:21 +10:00
ec_privkey_with_chain.pem
d2i_PrivateKey{,_ex}() and PEM_X509_INFO_read_bio_ex(): Fix handling of RSA/DSA/EC private key
2021-04-08 15:18:58 +02:00
echserver.key
ECH external APIs
2026-02-17 13:35:01 +00:00
echserver.pem
ECH external APIs
2026-02-17 13:35:01 +00:00
ee-cert2.pem
Commit pre-generated test_verify certs
2016-01-20 19:03:14 -05:00
ee-cert-768.pem
Move peer chain security checks into x509_vfy.c
2016-04-03 11:35:35 -04:00
ee-cert-768i.pem
Move peer chain security checks into x509_vfy.c
2016-04-03 11:35:35 -04:00
ee-cert-1024.pem
Add some additional test certificates/keys
2020-11-18 14:14:53 +00:00
ee-cert-3072.pem
Add some additional test certificates/keys
2020-11-18 14:14:53 +00:00
ee-cert-4096.pem
Add some additional test certificates/keys
2020-11-18 14:14:53 +00:00
ee-cert-8192.pem
Add some additional test certificates/keys
2020-11-18 14:14:53 +00:00
ee-cert-crit-unknown-ext.pem
Implement treatment of id-pkix-ocsp-no-check extension for OCSP_basic_verify()
2020-09-26 14:03:44 +02:00
ee-cert-ec-explicit.pem
Disallow certs with explicit curve in verification chain
2020-09-17 17:15:15 +02:00
ee-cert-ec-named-explicit.pem
Disallow certs with explicit curve in verification chain
2020-09-17 17:15:15 +02:00
ee-cert-ec-named-named.pem
Disallow certs with explicit curve in verification chain
2020-09-17 17:15:15 +02:00
ee-cert-ec-sha3-224.pem
test: add verify test for EC cert signed with SHA3
2023-10-02 12:46:24 +02:00
ee-cert-ec-sha3-256.pem
test: add verify test for EC cert signed with SHA3
2023-10-02 12:46:24 +02:00
ee-cert-ec-sha3-384.pem
test: add verify test for EC cert signed with SHA3
2023-10-02 12:46:24 +02:00
ee-cert-ec-sha3-512.pem
test: add verify test for EC cert signed with SHA3
2023-10-02 12:46:24 +02:00
ee-cert-md5.pem
Move peer chain security checks into x509_vfy.c
2016-04-03 11:35:35 -04:00
ee-cert-noncrit-unknown-ext.pem
Implement treatment of id-pkix-ocsp-no-check extension for OCSP_basic_verify()
2020-09-26 14:03:44 +02:00
ee-cert-ocsp-nocheck.pem
Implement treatment of id-pkix-ocsp-no-check extension for OCSP_basic_verify()
2020-09-26 14:03:44 +02:00
ee-cert-policies-bad.pem
Generate some certificates with the certificatePolicies extension
2023-03-28 13:31:17 +02:00
ee-cert-policies.pem
Generate some certificates with the certificatePolicies extension
2023-03-28 13:31:17 +02:00
ee-cert.pem
Commit pre-generated test_verify certs
2016-01-20 19:03:14 -05:00
ee-client-chain.pem
Update client authentication tests
2016-06-03 11:59:46 +02:00
ee-client.pem
Commit pre-generated test_verify certs
2016-01-20 19:03:14 -05:00
ee-clientAuth.pem
Commit pre-generated test_verify certs
2016-01-20 19:03:14 -05:00
ee-codesign-anyextkeyusage.pem
X509: add tests for purpose code signing in verify application
2022-08-18 10:24:53 +02:00
ee-codesign-crlsign.pem
X509: add tests for purpose code signing in verify application
2022-08-18 10:24:53 +02:00
ee-codesign-keycertsign.pem
X509: add tests for purpose code signing in verify application
2022-08-18 10:24:53 +02:00
ee-codesign-noncritical.pem
X509: add tests for purpose code signing in verify application
2022-08-18 10:24:53 +02:00
ee-codesign-serverauth.pem
X509: add tests for purpose code signing in verify application
2022-08-18 10:24:53 +02:00
ee-codesign.pem
X509: add tests for purpose code signing in verify application
2022-08-18 10:24:53 +02:00
ee-ecdsa-client-chain.pem
Add ECDSA client certificates
2017-02-16 16:43:44 +00:00
ee-ecdsa-key.pem
Add ECDSA client certificates
2017-02-16 16:43:44 +00:00
ee-ed25519.pem
Update the validity period of ed25519 cerificates
2022-11-12 13:17:57 +01:00
ee-expired2.pem
Bring in boundary test from #28584
2025-10-16 09:23:46 -04:00
ee-expired.pem
Commit pre-generated test_verify certs
2016-01-20 19:03:14 -05:00
ee-key-768.pem
Move peer chain security checks into x509_vfy.c
2016-04-03 11:35:35 -04:00
ee-key-1024.pem
Add some additional test certificates/keys
2020-11-18 14:14:53 +00:00
ee-key-3072.pem
Add some additional test certificates/keys
2020-11-18 14:14:53 +00:00
ee-key-4096.pem
Add some additional test certificates/keys
2020-11-18 14:14:53 +00:00
ee-key-8192.pem
Add some additional test certificates/keys
2020-11-18 14:14:53 +00:00
ee-key-ec-explicit.pem
Disallow certs with explicit curve in verification chain
2020-09-17 17:15:15 +02:00
ee-key-ec-named-explicit.pem
Disallow certs with explicit curve in verification chain
2020-09-17 17:15:15 +02:00
ee-key-ec-named-named.pem
Disallow certs with explicit curve in verification chain
2020-09-17 17:15:15 +02:00
ee-key.pem
Commit pre-generated test_verify certs
2016-01-20 19:03:14 -05:00
ee-name2.pem
Commit pre-generated test_verify certs
2016-01-20 19:03:14 -05:00
ee-pathlen.pem
update test/certs/ee-pathlen.pem to contain SKID and AKID
2021-05-05 09:51:39 +02:00
ee-pss-cert.pem
check_sig_alg_match(): weaken sig nid comparison to allow RSA{,PSS} key verify RSA-PSS
2021-01-28 15:05:04 +01:00
ee-pss-sha1-cert.pem
Add certificates with PSS signatures
2017-04-25 22:12:34 +01:00
ee-pss-sha256-cert.pem
Add certificates with PSS signatures
2017-04-25 22:12:34 +01:00
ee-pss-wrong1.5-cert.pem
check_sig_alg_match(): weaken sig nid comparison to allow RSA{,PSS} key verify RSA-PSS
2021-01-28 15:05:04 +01:00
ee-self-signed-pss.pem
Add test for ASN1_item_verify()
2024-06-21 10:03:42 +02:00
ee-self-signed.pem
ee-self-signed.pem: Restore original version, adding -attime to 25-test_verify.t
2021-06-02 14:49:13 +02:00
ee-serverAuth.pem
Commit pre-generated test_verify certs
2016-01-20 19:03:14 -05:00
ee-ss-with-keyCertSign.pem
25-test_verify.t: Add test case: accept trusted self-signed EE cert with key usage keyCertSign also when strict
2021-06-09 16:06:10 +02:00
ee-timestampsign-CABforum-anyextkeyusage.pem
Add test cases for verification of time stamping certificates
2022-06-22 16:58:08 +10:00
ee-timestampsign-CABforum-crlsign.pem
Add test cases for verification of time stamping certificates
2022-06-22 16:58:08 +10:00
ee-timestampsign-CABforum-keycertsign.pem
Add test cases for verification of time stamping certificates
2022-06-22 16:58:08 +10:00
ee-timestampsign-CABforum-noncritxku.pem
Add test cases for verification of time stamping certificates
2022-06-22 16:58:08 +10:00
ee-timestampsign-CABforum-serverauth.pem
Add test cases for verification of time stamping certificates
2022-06-22 16:58:08 +10:00
ee-timestampsign-CABforum.pem
Add test cases for verification of time stamping certificates
2022-06-22 16:58:08 +10:00
ee-timestampsign-rfc3161-digsig.pem
Add test cases for verification of time stamping certificates
2022-06-22 16:58:08 +10:00
ee-timestampsign-rfc3161-noncritxku.pem
Add test cases for verification of time stamping certificates
2022-06-22 16:58:08 +10:00
ee-timestampsign-rfc3161.pem
Add test cases for verification of time stamping certificates
2022-06-22 16:58:08 +10:00
ee+clientAuth.pem
Commit pre-generated test_verify certs
2016-01-20 19:03:14 -05:00
ee+serverAuth.pem
Commit pre-generated test_verify certs
2016-01-20 19:03:14 -05:00
embeddedSCTs1_issuer-key.pem
Change the SCT issuer key to RSA 2048
2022-06-03 17:17:08 +02:00
embeddedSCTs1_issuer.pem
Change the SCT issuer key to RSA 2048
2022-06-03 17:17:08 +02:00
embeddedSCTs1-key.pem
Create a new embeddedSCTs1 that's signed using SHA256
2020-02-05 22:04:37 +01:00
embeddedSCTs1.pem
Change the SCT issuer key to RSA 2048
2022-06-03 17:17:08 +02:00
embeddedSCTs1.sct
Change the SCT issuer key to RSA 2048
2022-06-03 17:17:08 +02:00
embeddedSCTs1.tlssct
Create a new embeddedSCTs1 that's signed using SHA256
2020-02-05 22:04:37 +01:00
embeddedSCTs3_issuer.pem
CT policy validation
2016-03-01 20:03:25 +00:00
embeddedSCTs3.pem
Tests for parsing and printing certificates containing SCTs
2016-02-25 13:59:11 -05:00
embeddedSCTs3.sct
Create a new embeddedSCTs1 that's signed using SHA256
2020-02-05 22:04:37 +01:00
ext-aAissuingDistributionPoint.pem
test: aAissuingDistributionPoint X.509v3 extension
2025-01-17 18:39:24 +01:00
ext-acceptableCertPolicies.pem
test: add tests for acceptable policies exts
2024-06-26 15:00:27 +02:00
ext-acceptablePrivilegePolicies.pem
test: add tests for acceptable policies exts
2024-06-26 15:00:27 +02:00
ext-allowedAttributeAssignments.pem
test: allowedAttributeAssignments X.509v3 extension
2025-01-02 20:06:59 +01:00
ext-associatedInformation.pem
Support subjectDirectoryAttributes and associatedInformation exts
2024-06-24 15:33:21 +02:00
ext-attributeDescriptor.pem
test: the attributeDescriptor X.509v3 extension
2024-11-13 11:53:34 +01:00
ext-attributeMappings.pem
test: the attributeMappings X.509v3 extension
2024-12-23 09:58:15 +00:00
ext-auditIdentity.pem
test: auditIdentity X.509v3 extension decoding and display
2024-08-26 10:38:44 +01:00
ext-authorityAttributeIdentifier.pem
test: authorityAttributeIdentifier X.509v3 extension
2024-09-10 19:17:34 +02:00
ext-basicAttConstraints.pem
test: the basicAttConstraints X.509v3 extension
2024-07-24 16:14:17 -04:00
ext-check.csr
25-test_req.t: Add systematic SKID+AKID tests for self-issued (incl. self-signed) certs
2021-11-11 20:18:56 +01:00
ext-delegatedNameConstraints.pem
feat: add delegatedNameConstraints and holderNameConstraints exts
2024-06-20 19:59:22 +02:00
ext-groupAC.pem
Support all NULL-syntax X.509v3 extensions
2023-09-25 15:12:04 -04:00
ext-holderNameConstraints.pem
feat: add delegatedNameConstraints and holderNameConstraints exts
2024-06-20 19:59:22 +02:00
ext-indirectIssuer.pem
Support all NULL-syntax X.509v3 extensions
2023-09-25 15:12:04 -04:00
ext-issuedOnBehalfOf.pem
test: issuedOnBehalfOf X.509v3 extension
2024-08-27 16:48:57 +02:00
ext-noAssertion.pem
Support all NULL-syntax X.509v3 extensions
2023-09-25 15:12:04 -04:00
ext-noRevAvail.pem
Support all NULL-syntax X.509v3 extensions
2023-09-25 15:12:04 -04:00
ext-roleSpecCertIdentifier.pem
test: the roleSpecCertIdentifier X.509v3 extension
2024-09-16 22:56:02 +02:00
ext-singleUse.pem
Support all NULL-syntax X.509v3 extensions
2023-09-25 15:12:04 -04:00
ext-sOAIdentifier.pem
Support all NULL-syntax X.509v3 extensions
2023-09-25 15:12:04 -04:00
ext-subjectDirectoryAttributes.pem
Support subjectDirectoryAttributes and associatedInformation exts
2024-06-24 15:33:21 +02:00
ext-targetingInformation.pem
Add support for targetingInformation X.509v3 extension
2024-06-17 14:03:25 +02:00
ext-timeSpecification-absolute.pem
test: the timeSpecification X.509v3 extension
2024-12-11 18:26:37 +01:00
ext-timeSpecification-periodic.pem
test: the timeSpecification X.509v3 extension
2024-12-11 18:26:37 +01:00
ext-userNotice.pem
test: userNotice X.509v3 extension
2024-07-04 09:36:11 +02:00
fake-gp.pem
Add support for unusal 'othername' subjectAltNames
2020-04-25 18:52:30 +03:00
goodcn1-cert.pem
Limit scope of CN name constraints
2018-05-23 11:12:13 -04:00
goodcn1-key.pem
Limit scope of CN name constraints
2018-05-23 11:12:13 -04:00
goodcn2-cert.pem
Add a new Name Constraints test cert
2021-12-14 13:48:34 +00:00
goodcn2-chain.pem
Add a TLS test for name constraints with an EE cert without a SAN
2021-12-14 13:48:34 +00:00
goodcn2-key.pem
Add a new Name Constraints test cert
2021-12-14 13:48:34 +00:00
grfc.pem
Issuer Sign Tool extention support
2020-03-25 15:33:53 +03:00
interCA.key
…
interCA.pem
…
invalid-cert.pem
X509_cmp(): Fix comparison in case x509v3_cache_extensions() failed to due to invalid cert
2021-01-13 11:19:17 +01:00
key-pass-12345.pem
PEM_X509_INFO_read_bio_ex(): Generalize to allow parsing any type of private key
2021-04-08 15:18:58 +02:00
leaf-chain.pem
Fix NULL access in ssl_build_cert_chain() when ctx is NULL.
2021-03-03 16:16:19 +10:00
leaf-encrypted.key
Test that PEM_BUFSIZE is passed into pem_password_cb
2022-01-03 10:35:36 +01:00
leaf.key
…
leaf.pem
…
many-constraints.pem
Guard against DoS in name constraints handling.
2017-09-22 22:00:55 +02:00
many-names1.pem
Guard against DoS in name constraints handling.
2017-09-22 22:00:55 +02:00
many-names2.pem
Guard against DoS in name constraints handling.
2017-09-22 22:00:55 +02:00
many-names3.pem
Guard against DoS in name constraints handling.
2017-09-22 22:00:55 +02:00
mkcert.sh
Copyright year updates
2023-09-07 09:59:15 +01:00
nc-uri-cert.pem
x509: allow SAN URIs to contain userinfo
2025-03-04 17:30:34 +01:00
nca+anyEKU.pem
test/certs/setup.sh: Fix two glitches
2021-05-05 09:51:39 +02:00
nca+serverAuth.pem
Add tests for non-ca trusted roots and intermediates
2016-01-31 21:24:16 -05:00
ncca1-cert.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
ncca1-key.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
ncca2-cert.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
ncca2-key.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
ncca3-cert.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
ncca3-key.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
ncca4-cert.pem
x509: allow SAN URIs to contain userinfo
2025-03-04 17:30:34 +01:00
ncca4-key.pem
x509: allow SAN URIs to contain userinfo
2025-03-04 17:30:34 +01:00
ncca-cert.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
ncca-key.pem
Extend mkcert.sh to support nameConstraints generation and more complex
2016-07-11 23:30:04 +01:00
nccaothername-cert.pem
Add testcase for nc_match_single type confusion
2023-02-07 17:05:10 +01:00
nccaothername-key.pem
Add testcase for nc_match_single type confusion
2023-02-07 17:05:10 +01:00
nroot+anyEKU.pem
Add tests for non-ca trusted roots and intermediates
2016-01-31 21:24:16 -05:00
nroot+serverAuth.pem
Add tests for non-ca trusted roots and intermediates
2016-01-31 21:24:16 -05:00
p256-ee-rsa-ca-cert.pem
Fix sigalg corner cases
2025-03-31 14:07:56 +02:00
p256-ee-rsa-ca-key.pem
Fix sigalg corner cases
2025-03-31 14:07:56 +02:00
p256-server-cert.pem
Add P-384 root and P-384, P-256 EE certificates.
2017-02-24 23:30:49 +00:00
p256-server-key.pem
Add P-384 root and P-384, P-256 EE certificates.
2017-02-24 23:30:49 +00:00
p384-root-key.pem
Add P-384 root and P-384, P-256 EE certificates.
2017-02-24 23:30:49 +00:00
p384-root.pem
Add P-384 root and P-384, P-256 EE certificates.
2017-02-24 23:30:49 +00:00
p384-server-cert.pem
Add P-384 root and P-384, P-256 EE certificates.
2017-02-24 23:30:49 +00:00
p384-server-key.pem
Add P-384 root and P-384, P-256 EE certificates.
2017-02-24 23:30:49 +00:00
pathlen.pem
Add some accessor API's
2016-06-08 11:37:06 -04:00
pc1-cert.pem
Create some proxy certificates
2016-06-20 21:34:37 +02:00
pc1-key.pem
Create some proxy certificates
2016-06-20 21:34:37 +02:00
pc2-cert.pem
Create some proxy certificates
2016-06-20 21:34:37 +02:00
pc2-key.pem
Create some proxy certificates
2016-06-20 21:34:37 +02:00
pc5-cert.pem
Create some proxy certificates
2016-06-20 21:34:37 +02:00
pc5-key.pem
Create some proxy certificates
2016-06-20 21:34:37 +02:00
pkitsta.pem
test: add test case for deadlock reported in #19643
2022-12-08 11:11:11 +01:00
root2-serverAuth.pem
Check chain extensions also for trusted certificates
2016-01-31 21:23:23 -05:00
root2+clientAuth.pem
Check chain extensions also for trusted certificates
2016-01-31 21:23:23 -05:00
root2+serverAuth.pem
Check chain extensions also for trusted certificates
2016-01-31 21:23:23 -05:00
root-anyEKU.pem
Check chain extensions also for trusted certificates
2016-01-31 21:23:23 -05:00
root-cert2.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
root-cert-768.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
root-cert-md5.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
root-cert-rsa2.pem
Fix cert with rsa instead of rsaEncryption as public key algorithm
2018-12-31 09:47:12 +01:00
root-cert.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
root-clientAuth.pem
Compat self-signed trust with reject-only aux data
2016-01-31 21:24:12 -05:00
root-cross-cert.pem
Test for DANE cross cert fix
2021-09-03 00:11:53 -04:00
root-ed448-cert.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
root-ed448-key.pem
Generate new Ed488 certificates
2020-02-11 23:23:42 +01:00
root-ed25519.pem
Update the validity period of ed25519 cerificates
2022-11-12 13:17:57 +01:00
root-ed25519.privkey.pem
Configure: make C++ build tests optional and configurable
2019-03-05 09:26:13 +01:00
root-ed25519.pubkey.pem
Configure: make C++ build tests optional and configurable
2019-03-05 09:26:13 +01:00
root-expired.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
root-key2.pem
Commit pre-generated test_verify certs
2016-01-20 19:03:14 -05:00
root-key-768.pem
Move peer chain security checks into x509_vfy.c
2016-04-03 11:35:35 -04:00
root-key.pem
Commit pre-generated test_verify certs
2016-01-20 19:03:14 -05:00
root-ml-dsa-44-cert.pem
ML-DSA: Add TLS certificate test
2025-02-14 10:46:04 +01:00
root-ml-dsa-44-key.pem
ML-DSA: Add TLS certificate test
2025-02-14 10:46:04 +01:00
root-name2.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
root-nonca.pem
Commit pre-generated test_verify certs
2016-01-20 19:03:14 -05:00
root-noserver.pem
More X509_verify_cert() tests via verify(1).
2016-01-20 19:04:11 -05:00
root-serverAuth.pem
Commit pre-generated test_verify certs
2016-01-20 19:03:14 -05:00
root+anyEKU.pem
Check chain extensions also for trusted certificates
2016-01-31 21:23:23 -05:00
root+clientAuth.pem
Commit pre-generated test_verify certs
2016-01-20 19:03:14 -05:00
root+serverAuth.pem
Commit pre-generated test_verify certs
2016-01-20 19:03:14 -05:00
rootCA.key
…
rootCA.pem
Resign test/certs/rootCA.pem to expire in 100 years
2022-11-12 13:17:57 +01:00
rootcert.pem
More X509_verify_cert() tests via verify(1).
2016-01-20 19:04:11 -05:00
rootkey.pem
More X509_verify_cert() tests via verify(1).
2016-01-20 19:04:11 -05:00
roots.pem
…
sca-anyEKU.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
sca-cert.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
sca-clientAuth.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
sca-serverAuth.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
sca+anyEKU.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
sca+clientAuth.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
sca+serverAuth.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
server-cecdsa-cert.pem
EC certificate with compression point
2017-02-24 23:52:22 +00:00
server-cecdsa-key.pem
EC certificate with compression point
2017-02-24 23:52:22 +00:00
server-dsa-cert.pem
Add DH parameters, DSA cert and key
2017-02-17 16:33:12 +00:00
server-dsa-key.pem
Add DH parameters, DSA cert and key
2017-02-17 16:33:12 +00:00
server-dsa-pubkey.pem
Prune low-level ASN.1 parse errors from error queue in der2key_decode() etc.
2020-09-30 20:49:44 +02:00
server-ecdsa-brainpoolP256r1-cert.pem
Add some test brainpool certificates
2018-11-12 11:10:21 +00:00
server-ecdsa-brainpoolP256r1-key.pem
Add some test brainpool certificates
2018-11-12 11:10:21 +00:00
server-ecdsa-cert.pem
add ECDSA test server certificate
2017-01-15 00:23:33 +00:00
server-ecdsa-key.pem
add ECDSA test server certificate
2017-01-15 00:23:33 +00:00
server-ed448-cert.pem
Generate new Ed488 certificates
2020-02-11 23:23:42 +01:00
server-ed448-key.pem
Update tests for TLS Ed448
2018-03-05 11:39:44 +00:00
server-ed25519-cert.pem
Add Ed25519 EE certificates
2017-06-21 14:11:01 +01:00
server-ed25519-key.pem
Add Ed25519 EE certificates
2017-06-21 14:11:01 +01:00
server-ml-dsa-44-cert.pem
ML-DSA: Add TLS certificate test
2025-02-14 10:46:04 +01:00
server-ml-dsa-44-key.pem
ML-DSA: Add TLS certificate test
2025-02-14 10:46:04 +01:00
server-pss-cert.pem
Add RSA-PSS test certificates
2017-09-20 12:50:23 +01:00
server-pss-key.pem
Add RSA-PSS test certificates
2017-09-20 12:50:23 +01:00
server-pss-restrict-cert.pem
Add Restricted PSS certificate and key
2019-08-09 13:19:16 +01:00
server-pss-restrict-key.pem
Add Restricted PSS certificate and key
2019-08-09 13:19:16 +01:00
server-trusted.pem
More X509_verify_cert() tests via verify(1).
2016-01-20 19:04:11 -05:00
servercert.pem
More X509_verify_cert() tests via verify(1).
2016-01-20 19:04:11 -05:00
serverkey.pem
More X509_verify_cert() tests via verify(1).
2016-01-20 19:04:11 -05:00
setup.sh
Bring in boundary test from #28584
2025-10-16 09:23:46 -04:00
sm2-ca-cert.pem
Update further expiring certificates that affect tests
2022-06-05 10:59:40 +02:00
sm2-csr.pem
Support SM2 certificate signing
2019-06-28 18:58:19 +08:00
sm2-pub.key
Add a test for pkeyutl encrypt/decrypt using SM2
2023-06-26 09:28:23 +01:00
sm2-root.crt
Update further expiring certificates that affect tests
2022-06-05 10:59:40 +02:00
sm2-root.key
Support SM2 certificate signing
2019-06-28 18:58:19 +08:00
sm2.key
Support raw input data in apps/pkeyutl
2019-02-27 10:05:17 +08:00
sm2.pem
Update further expiring certificates that affect tests
2022-06-05 10:59:40 +02:00
some-names1.pem
Guard against DoS in name constraints handling.
2017-09-22 22:00:55 +02:00
some-names2.pem
Guard against DoS in name constraints handling.
2017-09-22 22:00:55 +02:00
some-names3.pem
Guard against DoS in name constraints handling.
2017-09-22 22:00:55 +02:00
sroot-anyEKU.pem
Compat self-signed trust with reject-only aux data
2016-01-31 21:24:12 -05:00
sroot-cert.pem
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
2021-01-20 15:53:47 +01:00
sroot-clientAuth.pem
Compat self-signed trust with reject-only aux data
2016-01-31 21:24:12 -05:00
sroot-serverAuth.pem
Compat self-signed trust with reject-only aux data
2016-01-31 21:24:12 -05:00
sroot+anyEKU.pem
Compat self-signed trust with reject-only aux data
2016-01-31 21:24:12 -05:00
sroot+clientAuth.pem
Compat self-signed trust with reject-only aux data
2016-01-31 21:24:12 -05:00
sroot+serverAuth.pem
Compat self-signed trust with reject-only aux data
2016-01-31 21:24:12 -05:00
subinterCA-ss.pem
…
subinterCA.key
…
subinterCA.pem
…
tab-in-dn.pem
apps: Escape control characters in DNs by default
2025-03-03 09:08:34 +01:00
tab-in-dn.text
Change hexdump width to a multiple of 8 bytes
2025-12-03 17:45:15 +01:00
timing-cert.pem
Rename the "timing" program to "timing_load_creds" and integrate it with test/build.info
2022-08-16 12:50:41 +02:00
timing-key.pem
Rename the "timing" program to "timing_load_creds" and integrate it with test/build.info
2022-08-16 12:50:41 +02:00
untrusted.pem
…
v3-certs-RC2.p12
apps: make use of OSSL_STORE for generalized certs and CRLs loading
2020-08-20 14:55:34 +02:00
v3-certs-TDES.p12
apps: make use of OSSL_STORE for generalized certs and CRLs loading
2020-08-20 14:55:34 +02:00
wrongcert.pem
More X509_verify_cert() tests via verify(1).
2016-01-20 19:04:11 -05:00
wrongkey.pem
More X509_verify_cert() tests via verify(1).
2016-01-20 19:04:11 -05:00
x509-check-key.pem
Add test cases for X509_check_private_key
2017-06-06 17:50:06 +01:00
x509-check.csr
Add test cases for X509_check_private_key
2017-06-06 17:50:06 +01:00
x509-req-detect-invalid-version.pem
Make x509_req_test ANSI Compatible
2024-06-21 15:40:45 -04:00