aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
Diffstat
-rw-r--r--scripts/testroot.cer100
-rw-r--r--scripts/testroot.cnf81
-rw-r--r--scripts/testroot.key27
-rw-r--r--scripts/testroot.sh10
4 files changed, 218 insertions, 0 deletions
diff --git a/scripts/testroot.cer b/scripts/testroot.cer
new file mode 100644
index 00000000..2a34036e
--- /dev/null
+++ b/scripts/testroot.cer
@@ -0,0 +1,100 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=testroot
+ Validity
+ Not Before: Oct 31 05:10:17 2007 GMT
+ Not After : Oct 30 05:10:17 2008 GMT
+ Subject: CN=testroot
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:e9:eb:56:03:b9:fd:c6:fe:04:d9:3b:5f:a4:a5:
+ 9b:8d:56:b6:eb:8e:3e:78:21:45:90:7f:c1:6d:88:
+ 9b:d0:d8:9a:48:ae:d3:03:2b:e3:f8:d1:06:4b:a3:
+ 27:d6:7b:76:58:b9:16:c1:34:52:5d:03:5b:48:65:
+ da:fe:b6:17:15:7e:bf:9e:2e:11:94:6c:0e:50:54:
+ fa:41:00:6f:64:e2:5f:5f:06:ab:ff:f9:e0:81:89:
+ 57:07:8d:db:fa:4f:f0:5c:d4:81:06:00:f4:23:c3:
+ 5e:1f:e5:32:19:63:f4:45:15:f7:ab:9f:0d:77:6b:
+ 31:4c:df:ac:c1:27:45:7e:63:e1:45:a2:11:fb:ab:
+ e8:97:58:8b:59:69:0c:38:85:bf:ce:e6:49:43:51:
+ 6e:60:6a:4c:5d:ef:fd:de:49:c1:23:4b:8a:fa:97:
+ ad:5a:81:d6:79:02:77:74:65:f8:3d:fb:84:fc:ea:
+ 6a:46:81:5d:d6:9d:20:8a:95:40:34:5e:71:a1:b8:
+ f4:43:e6:19:1f:30:7b:d2:95:ad:a3:88:91:a9:66:
+ 85:56:2c:d4:bf:55:6a:93:0f:42:28:3f:5b:8f:df:
+ 21:f2:2b:11:24:3e:f8:df:e0:ae:5e:79:07:e8:ec:
+ 4c:c6:c9:e9:65:3d:14:e0:5d:11:cd:ea:79:89:a6:
+ 89:91
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Subject Key Identifier:
+ 43:1F:00:E0:CF:B5:03:B2:63:9B:61:90:BC:B8:CC:D1:F7:F7:64:42
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Subject Information Access:
+ 1.3.6.1.5.5.7.48.5 - URI:rsync://wombat.invalid/
+
+ sbgp-autonomousSysNum: critical
+ Autonomous System Numbers:
+ 64533-64540
+ 64544
+
+ sbgp-ipAddrBlock: critical
+ IPv4:
+ 10.0.0.0/24
+ 10.3.0.0/24
+ 192.0.2.1-192.0.2.33
+ 192.0.2.44-192.0.2.100
+ IPv6:
+ 2001:db8:0:0:0:0:0:44-2001:db8:0:0:0:0:0:100
+ 2001:db8:0:0:0:0:a00::/120
+ 2001:db8:0:0:0:0:a03::/120
+ 2001:db8:0:0:0:10:0:44/128
+
+ Signature Algorithm: sha256WithRSAEncryption
+ 86:5e:ea:5c:d0:0a:de:c2:c3:11:77:a0:5f:b2:de:86:73:b1:
+ 6a:70:19:ac:4a:9f:5a:e1:35:d6:7b:5e:a5:8c:b1:fc:73:24:
+ eb:6d:32:69:12:8e:8d:0f:eb:4b:76:8e:84:a3:85:b8:ff:0f:
+ 87:e8:64:b8:f2:5e:03:71:9c:20:4c:97:ee:38:f6:4b:6e:7b:
+ 39:cd:be:79:19:ba:2e:76:ed:ed:e1:7b:5a:2f:45:9a:6b:a3:
+ 59:b2:6e:ec:6a:52:ef:bd:6a:41:b3:e2:4a:c9:5a:70:6f:30:
+ 71:db:b7:ad:19:28:ab:c4:99:88:d3:04:ed:3c:74:fa:0e:0c:
+ ef:c6:30:2f:83:5f:87:56:17:d1:a8:7f:3a:87:fa:fd:1c:72:
+ ad:fa:19:46:28:03:f4:c4:6a:0c:a0:ff:be:f2:cb:92:0e:a3:
+ 87:20:ed:41:85:2f:ea:e2:73:9d:a7:a0:cc:02:33:56:3d:27:
+ f4:13:bf:b8:57:35:4b:f2:1d:46:56:f2:0a:69:dd:90:15:4c:
+ 2a:ae:f5:6c:1d:7a:ff:b4:7f:da:cf:dd:3b:9e:7d:42:6f:ac:
+ c8:87:e4:f3:d8:0e:ae:a8:da:59:b2:f5:67:5f:58:de:2a:ec:
+ 78:ea:82:d4:b3:fa:61:87:c9:fa:65:cd:67:65:41:ab:f0:2f:
+ 9d:63:d9:9a
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/scripts/testroot.cnf b/scripts/testroot.cnf
new file mode 100644
index 00000000..238bd8ab
--- /dev/null
+++ b/scripts/testroot.cnf
@@ -0,0 +1,81 @@
+# $Id$
+#
+# Generate test root resource certificate for use with testroot.py server.
+
+[ ca ]
+default_ca = ca_default
+
+[ ca_default ]
+certificate = testroot.cer
+serial = testroot.serial
+private_key = testroot.key
+database = testroot.index
+new_certs_dir = /tmp
+name_opt = ca_default
+cert_opt = ca_default
+default_days = 365
+default_crl_days = 30
+default_md = sha256
+preserve = no
+copy_extensions = copy
+policy = ca_policy_anything
+unique_subject = no
+x509_extensions = ca_x509_ext
+crl_extensions = crl_x509_ext
+
+[ ca_policy_anything ]
+countryName = optional
+stateOrProvinceName = optional
+localityName = optional
+organizationName = optional
+organizationalUnitName = optional
+commonName = supplied
+emailAddress = optional
+givenName = optional
+surname = optional
+
+[ req ]
+default_bits = 2048
+encrypt_key = no
+distinguished_name = req_dn
+req_extensions = req_x509_ext
+prompt = no
+
+[ req_dn ]
+CN = testroot
+
+[ req_x509_ext ]
+basicConstraints = critical,CA:true
+subjectKeyIdentifier = hash
+keyUsage = critical,keyCertSign,cRLSign
+subjectInfoAccess = 1.3.6.1.5.5.7.48.5;URI:rsync://wombat.invalid/
+sbgp-autonomousSysNum = critical,@asid_ext
+sbgp-ipAddrBlock = critical,@addr_ext
+
+[ ca_x509_ext ]
+basicConstraints = critical,CA:true
+keyUsage = critical,keyCertSign,cRLSign
+subjectInfoAccess = 1.3.6.1.5.5.7.48.5;URI:rsync://wombat.invalid/
+sbgp-autonomousSysNum = critical,@asid_ext
+sbgp-ipAddrBlock = critical,@addr_ext
+
+[ crl_x509_ext ]
+authorityKeyIdentifier = keyid:always
+
+[ asid_ext ]
+
+AS.0 = 64533
+AS.1 = 64534-64540
+AS.2 = 64544
+
+[ addr_ext ]
+
+IPv4.0 = 10.0.0.0/24
+IPv4.1 = 10.3.0.0/24
+IPv4.2 = 192.0.2.1-192.0.2.33
+IPv4.3 = 192.0.2.44-192.0.2.100
+
+IPv6.0 = 2001:db8::44-2001:db8::100
+IPv6.1 = 2001:db8::a00:0/120
+IPv6.2 = 2001:db8::a03:0/120
+IPv6.3 = 2001:db8::10:0:44/128
diff --git a/scripts/testroot.key b/scripts/testroot.key
new file mode 100644
index 00000000..baf44b68
--- /dev/null
+++ b/scripts/testroot.key
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/scripts/testroot.sh b/scripts/testroot.sh
new file mode 100644
index 00000000..ae94141d
--- /dev/null
+++ b/scripts/testroot.sh
@@ -0,0 +1,10 @@
+#!/bin/sh -
+# $Id$
+#
+# Generate test root resource certificate for use with testroot.py server.
+
+touch testroot.index
+echo 01 >testroot.serial
+../openssl/openssl/apps/openssl genrsa -out testroot.key 2048
+../openssl/openssl/apps/openssl req -new -config testroot.cnf -key testroot.key -out testroot.req
+../openssl/openssl/apps/openssl ca -batch -out testroot.cer -in testroot.req -extfile testroot.cnf -config testroot.cnf -selfsign
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-14 10:16:30 +0000