nhyatt/osslsigncode
1
0
Fork 0
mirror of https://github.com/mtrojnar/osslsigncode.git synced 2025-07-18 18:00:58 -05:00
Code Issues Projects Releases Wiki Activity

Tests: use TSA-CRLfile

Browse Source
This commit is contained in:
olszomal
2023-04-04 14:52:30 +02:00
committed by Michał Trojnara
parent 3d7b8d2a21
commit edcb18d63f
4 changed files with 66 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
tests/conf/openssl_tsa_root.cnf
View File

@ -2,10 +2,8 @@
[ default ]
name = TSACA
domain_suffix = timestampauthority.com
aia_url = http://$name.$domain_suffix/$name.crt
crl_url = http://$name.$domain_suffix/$name.crl
ocsp_url = http://ocsp.$name.$domain_suffix:9080
domain_suffix = timestampauthority
crl_url = http://127.0.0.1:8080/$name
name_opt = utf8, esc_ctrl, multiline, lname, align
default_ca = CA_default
@ -17,6 +15,7 @@ new_certs_dir = $dir/CA
database = $dir/CA/index.txt
serial = $dir/CA/serial
crlnumber = $dir/CA/crlnumber
crl_extensions = crl_ext
rand_serial = yes
private_key = $dir/CA/$name.key
certificate = $dir/tmp/$name.pem
@ -43,17 +42,16 @@ basicConstraints = critical, CA:false
extendedKeyUsage = critical, timeStamping
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always
authorityInfoAccess = @issuer_info
crlDistributionPoints = @crl_info
nameConstraints = @name_constraints
[ issuer_info ]
caIssuers;URI.0 = $aia_url
OCSP;URI.0 = $ocsp_url
[ crl_info ]
URI.0 = $crl_url
[ crl_ext ]
# Extension for CRLs
authorityKeyIdentifier = keyid:always
[ name_constraints ]
permitted;DNS.0=test.com
permitted;DNS.1=test.org