aboutsummaryrefslogtreecommitdiff
path: root/scripts
diff options
context:
space:
mode:
Diffstat (limited to 'scripts')
-rw-r--r--scripts/testroot.cer119
-rw-r--r--scripts/testroot.cnf50
-rw-r--r--scripts/testroot.generate.sh14
-rw-r--r--scripts/testroot.key50
-rw-r--r--scripts/testroot.sh15
5 files changed, 104 insertions, 144 deletions
diff --git a/scripts/testroot.cer b/scripts/testroot.cer
index 65523c17..d41b7cc8 100644
--- a/scripts/testroot.cer
+++ b/scripts/testroot.cer
@@ -1,41 +1,42 @@
Certificate:
Data:
Version: 3 (0x2)
- Serial Number: 1 (0x1)
+ Serial Number:
+ c8:11:e3:cb:30:1b:67:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=testroot
Validity
- Not Before: Oct 31 16:30:59 2007 GMT
- Not After : Oct 30 16:30:59 2008 GMT
+ Not Before: Oct 31 16:55:24 2007 GMT
+ Not After : Nov 30 16:55:24 2007 GMT
Subject: CN=testroot
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (2048 bit)
Modulus (2048 bit):
- 00:bc:c8:c0:a7:e1:9e:77:3a:e1:28:47:a3:36:a8:
- 68:cc:72:58:c4:39:44:30:11:5b:a8:f3:0f:69:0c:
- 9b:89:59:d5:84:23:28:af:65:bf:b6:ff:6c:e4:29:
- ca:04:45:3c:73:cb:07:28:f2:6f:ff:6b:0e:5e:ad:
- dd:64:66:ea:33:ec:d9:76:3f:e8:b5:fe:cc:5a:13:
- 4a:05:29:1e:6f:5b:25:80:55:6c:93:cb:25:ab:b2:
- ae:df:06:1d:2d:48:88:8a:90:c6:87:9a:04:15:b9:
- f4:54:25:6b:94:f8:ba:a8:54:34:06:dc:01:60:0e:
- 98:70:19:7a:1c:b4:a0:89:3b:8e:ff:99:eb:12:a2:
- 79:27:23:71:78:9f:39:64:b4:5b:3d:b7:bb:73:d0:
- 96:35:4c:dc:ec:74:06:e3:62:48:35:be:9b:16:19:
- d0:bf:17:ba:78:eb:cb:9f:4e:b1:f5:35:18:e5:8d:
- bb:cc:cc:d4:f7:6b:77:5e:90:98:9b:61:7a:b3:e2:
- 8a:f1:a6:55:4b:7e:2f:6b:be:f1:39:16:b9:65:6a:
- d5:b7:52:68:1d:94:8c:6e:3c:88:03:ff:77:b5:03:
- 6a:a5:b0:d3:dc:b6:6f:1d:c7:99:c4:74:f1:e7:6d:
- dd:27:4e:45:a1:12:6a:5b:72:1c:03:88:22:3e:0b:
- f0:c9
+ 00:a9:67:b9:29:3a:56:fb:03:5e:7d:fa:6d:fa:8f:
+ b1:ba:82:74:56:c5:f2:f9:b1:62:ce:ee:25:9c:7d:
+ c2:d4:b9:70:ec:05:bb:fa:23:2a:95:67:5a:ee:9d:
+ bf:7b:fa:f2:7b:e6:f5:c2:9e:f4:10:b4:87:23:23:
+ 5e:26:17:31:c6:eb:01:e5:a8:12:b0:84:ed:ee:24:
+ c8:2c:d7:76:b7:2e:ce:2e:cd:17:63:77:97:43:db:
+ 7c:0b:f3:27:c6:74:71:be:ac:15:3b:d0:e7:79:4d:
+ 48:16:91:0a:07:85:33:4a:25:1f:3e:09:c1:18:19:
+ 38:75:7a:d4:3f:3c:b1:71:02:1b:46:10:1a:a8:40:
+ 22:c3:95:73:ff:2b:1a:56:83:d7:0e:ee:8d:03:38:
+ f4:78:e0:b2:fa:6a:64:d8:7c:cb:3a:6f:c5:de:b9:
+ 3b:06:85:c5:da:2f:88:63:68:b7:40:33:1b:b2:b0:
+ ac:76:da:14:db:6f:52:a4:2d:43:ea:5c:18:b3:2f:
+ aa:9e:e3:15:ed:a0:3a:70:a5:e0:fe:89:77:eb:89:
+ be:88:31:ae:2d:14:e9:3b:5e:b5:87:08:64:0e:7f:
+ fd:96:8f:db:1b:60:ac:c3:a1:44:eb:04:3c:26:4c:
+ 3c:bf:d8:8b:d1:fa:cb:67:d6:c7:1b:75:2a:83:e1:
+ d4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
- C8:E5:D2:94:2B:61:B7:69:75:97:2D:B8:24:BE:23:A1:98:B9:11:64
+ 12:BF:AA:01:F4:4E:BD:37:6B:CF:16:7D:33:A5:E4:63:D1:F4:2F:FE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
@@ -59,42 +60,42 @@ Certificate:
2001:db8:0:0:0:10:0:44/128
Signature Algorithm: sha256WithRSAEncryption
- 68:a8:f8:da:90:20:05:79:b6:0d:35:75:9a:6a:c6:5f:70:10:
- db:12:2c:29:be:4e:d9:e7:ce:09:44:8d:3e:45:47:40:df:bb:
- 0c:fa:66:89:71:07:41:69:8b:89:26:61:69:f4:e8:4e:ad:61:
- 9c:1a:63:de:e6:8a:1b:9e:e3:83:3b:b2:fe:e5:ee:91:14:39:
- 73:da:1e:ee:5b:65:d2:51:58:cd:25:9a:d6:5a:21:8e:9a:b2:
- 30:3c:ac:e7:8c:4a:01:00:62:cd:56:25:d4:34:e9:f0:f5:3a:
- 84:31:f0:d9:68:31:1d:4a:59:bd:3b:e7:5a:15:8b:16:ef:ec:
- 5c:1d:1b:cb:df:e2:d2:39:35:ca:4f:48:ed:c4:12:1b:0c:bf:
- 35:96:72:00:aa:8a:6a:af:2a:73:4a:e6:59:dc:46:df:9c:63:
- f7:72:eb:05:3f:64:a8:0d:a5:3f:87:6e:c3:23:d3:c1:98:06:
- eb:20:c0:ec:ea:c4:1f:f3:bd:0c:95:63:a2:38:74:95:f8:76:
- fa:43:4d:49:14:1a:1a:1e:15:50:c2:63:1b:75:e3:1d:06:55:
- 1a:74:ed:60:bf:86:9d:4e:ea:5a:28:06:d9:fa:a5:64:f7:50:
- 2c:b7:24:64:9b:bb:fd:89:2f:39:42:15:35:ea:cb:d1:00:36:
- c0:9a:ef:59
+ 5a:62:2a:b6:f4:0d:84:56:fd:37:d5:a1:c9:40:3c:bc:24:fe:
+ ee:df:8d:ce:d3:ac:7e:54:61:0b:ed:aa:bf:03:62:eb:95:fb:
+ 17:f0:b3:f6:bd:0e:b6:25:94:f2:18:58:c8:dd:16:dc:d0:4c:
+ cb:99:d5:9d:ea:34:5b:f1:29:c7:84:b4:93:40:f9:d3:19:0b:
+ 4c:fe:6f:49:d4:60:a7:ba:b7:02:89:d4:31:50:e2:9d:b9:cf:
+ d9:d5:26:6e:ff:9d:b6:a8:50:40:e0:1b:07:3c:6d:30:98:5e:
+ 42:84:b5:15:5f:f2:ae:89:1e:75:bc:2c:e9:55:b1:51:28:8b:
+ 4c:3a:30:87:31:d2:d0:79:f9:07:ed:f0:09:42:af:e6:88:c4:
+ bf:cd:79:4e:28:f6:34:ac:a4:56:bd:a8:29:b7:04:0c:9c:2f:
+ be:84:ce:0e:9c:e6:f0:14:23:f0:15:59:21:1a:01:0a:7e:4d:
+ 93:b2:92:07:73:6e:a2:69:a2:1e:9e:91:ab:b2:bf:af:d9:7c:
+ e0:f5:43:d2:3f:e4:da:c8:f0:0a:09:8b:aa:56:bf:f8:b8:1c:
+ 50:87:94:4c:18:0b:64:a7:4d:1a:ae:dc:9d:12:d9:06:38:f7:
+ 4e:97:d4:5b:f1:3a:8f:3f:2c:82:75:c6:b2:75:1f:2c:78:00:
+ 02:9c:24:d6
-----BEGIN CERTIFICATE-----
-MIID9TCCAt2gAwIBAgIBATANBgkqhkiG9w0BAQsFADATMREwDwYDVQQDEwh0ZXN0
-cm9vdDAeFw0wNzEwMzExNjMwNTlaFw0wODEwMzAxNjMwNTlaMBMxETAPBgNVBAMT
-CHRlc3Ryb290MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMjAp+Ge
-dzrhKEejNqhozHJYxDlEMBFbqPMPaQybiVnVhCMor2W/tv9s5CnKBEU8c8sHKPJv
-/2sOXq3dZGbqM+zZdj/otf7MWhNKBSkeb1slgFVsk8slq7Ku3wYdLUiIipDGh5oE
-Fbn0VCVrlPi6qFQ0BtwBYA6YcBl6HLSgiTuO/5nrEqJ5JyNxeJ85ZLRbPbe7c9CW
-NUzc7HQG42JINb6bFhnQvxe6eOvLn06x9TUY5Y27zMzU92t3XpCYm2F6s+KK8aZV
-S34va77xORa5ZWrVt1JoHZSMbjyIA/93tQNqpbDT3LZvHceZxHTx523dJ05FoRJq
-W3IcA4giPgvwyQIDAQABo4IBUjCCAU4wDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4E
-FgQUyOXSlCtht2l1ly24JL4joZi5EWQwDgYDVR0PAQH/BAQDAgEGMDMGCCsGAQUF
-BwELBCcwJTAjBggrBgEFBQcwBYYXcnN5bmM6Ly93b21iYXQuaW52YWxpZC8wJgYI
-KwYBBQUHAQgBAf8EFzAVoBMwETAKAgMA/BUCAwD8HAIDAPwgMIGuBggrBgEFBQcB
-BwEB/wSBnjCBmzAyBAIAATAsAwQACgAAAwQACgMAMA4DBQDAAAIBAwUBwAACIDAO
-AwUCwAACLAMFAMAAAmQwZQQCAAIwXzAmAxECIAENuAAAAAAAAAAAAAAARAMRACAB
-DbgAAAAAAAAAAAAAAQADEAAgAQ24AAAAAAAAAAAKAAADEAAgAQ24AAAAAAAAAAAK
-AwADEQAgAQ24AAAAAAAAABAAAABEMA0GCSqGSIb3DQEBCwUAA4IBAQBoqPjakCAF
-ebYNNXWaasZfcBDbEiwpvk7Z584JRI0+RUdA37sM+maJcQdBaYuJJmFp9OhOrWGc
-GmPe5oobnuODO7L+5e6RFDlz2h7uW2XSUVjNJZrWWiGOmrIwPKznjEoBAGLNViXU
-NOnw9TqEMfDZaDEdSlm9O+daFYsW7+xcHRvL3+LSOTXKT0jtxBIbDL81lnIAqopq
-rypzSuZZ3EbfnGP3cusFP2SoDaU/h27DI9PBmAbrIMDs6sQf870MlWOiOHSV+Hb6
-Q01JFBoaHhVQwmMbdeMdBlUadO1gv4adTupaKAbZ+qVk91AstyRkm7v9iS85QhU1
-6svRADbAmu9Z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-----END CERTIFICATE-----
diff --git a/scripts/testroot.cnf b/scripts/testroot.cnf
index a962316a..a1c256c9 100644
--- a/scripts/testroot.cnf
+++ b/scripts/testroot.cnf
@@ -2,38 +2,6 @@
#
# Generate test root resource certificate for use with testroot.py server.
-[ ca ]
-default_ca = ca_default
-
-[ ca_default ]
-certificate = testroot.cer
-serial = testroot.serial
-private_key = testroot.key
-database = testroot.index
-new_certs_dir = .
-name_opt = ca_default
-cert_opt = ca_default
-default_days = 365
-default_crl_days = 30
-default_md = sha256
-preserve = no
-copy_extensions = copy
-policy = ca_policy_anything
-unique_subject = no
-x509_extensions = ca_x509_ext
-crl_extensions = crl_x509_ext
-
-[ ca_policy_anything ]
-countryName = optional
-stateOrProvinceName = optional
-localityName = optional
-organizationName = optional
-organizationalUnitName = optional
-commonName = supplied
-emailAddress = optional
-givenName = optional
-surname = optional
-
[ req ]
default_bits = 2048
encrypt_key = no
@@ -49,26 +17,16 @@ basicConstraints = critical,CA:true
subjectKeyIdentifier = hash
keyUsage = critical,keyCertSign,cRLSign
subjectInfoAccess = 1.3.6.1.5.5.7.48.5;URI:rsync://wombat.invalid/
-sbgp-autonomousSysNum = critical,@asid_ext
-sbgp-ipAddrBlock = critical,@addr_ext
-
-[ ca_x509_ext ]
-basicConstraints = critical,CA:true
-keyUsage = critical,keyCertSign,cRLSign
-subjectInfoAccess = 1.3.6.1.5.5.7.48.5;URI:rsync://wombat.invalid/
-sbgp-autonomousSysNum = critical,@asid_ext
-sbgp-ipAddrBlock = critical,@addr_ext
-
-[ crl_x509_ext ]
-authorityKeyIdentifier = keyid:always
+sbgp-autonomousSysNum = critical,@req_asid_ext
+sbgp-ipAddrBlock = critical,@req_addr_ext
-[ asid_ext ]
+[ req_asid_ext ]
AS.0 = 64533
AS.1 = 64534-64540
AS.2 = 64544
-[ addr_ext ]
+[ req_addr_ext ]
IPv4.0 = 10.0.0.0/24
IPv4.1 = 10.3.0.0/24
diff --git a/scripts/testroot.generate.sh b/scripts/testroot.generate.sh
deleted file mode 100644
index cfba7155..00000000
--- a/scripts/testroot.generate.sh
+++ /dev/null
@@ -1,14 +0,0 @@
-#!/bin/sh -
-# $Id$
-#
-# Generate test root resource certificate for use with testroot.py server.
-
-tempfiles='01.pem testroot.index testroot.index.old testroot.serial testroot.serial.old testroot.index.attr testroot.req'
-
-rm -f $tempfiles
-touch testroot.index
-echo 01 >testroot.serial
-../openssl/openssl/apps/openssl genrsa -out testroot.key 2048
-../openssl/openssl/apps/openssl req -new -config testroot.cnf -key testroot.key -out testroot.req
-../openssl/openssl/apps/openssl ca -batch -out testroot.cer -in testroot.req -extfile testroot.cnf -config testroot.cnf -selfsign
-rm -f $tempfiles
diff --git a/scripts/testroot.key b/scripts/testroot.key
index 23afc952..cd9ec603 100644
--- a/scripts/testroot.key
+++ b/scripts/testroot.key
@@ -1,27 +1,27 @@
-----BEGIN RSA PRIVATE KEY-----
-MIIEogIBAAKCAQEAvMjAp+GedzrhKEejNqhozHJYxDlEMBFbqPMPaQybiVnVhCMo
-r2W/tv9s5CnKBEU8c8sHKPJv/2sOXq3dZGbqM+zZdj/otf7MWhNKBSkeb1slgFVs
-k8slq7Ku3wYdLUiIipDGh5oEFbn0VCVrlPi6qFQ0BtwBYA6YcBl6HLSgiTuO/5nr
-EqJ5JyNxeJ85ZLRbPbe7c9CWNUzc7HQG42JINb6bFhnQvxe6eOvLn06x9TUY5Y27
-zMzU92t3XpCYm2F6s+KK8aZVS34va77xORa5ZWrVt1JoHZSMbjyIA/93tQNqpbDT
-3LZvHceZxHTx523dJ05FoRJqW3IcA4giPgvwyQIDAQABAoIBABsjTLaVc182YpmU
-uryntvD02xfSF6BFToTZ8/Qo8M7s0Am/uCCGoumejDu8WiMFBOysWeoj97+i1xz7
-J2FAfhhayuP5ye0npJ6qOTDGuW5OjvSE0yfnwxGMjSDYUydoTuCEcVWa6U1qPto9
-ytpOax65hAUcaUIytu0ebHRl7tHrMzqyfiF1yBV24iBHY+bDpaq1XCkw6078G8cs
-sOWfc41x9ef/ZwXxczeKRPXWNuKfPtTxBsLfi0Ajegu2161NnIZe0/WWXSc08+ea
-Rx/GQkjzpjoC6UzPQUpQZJc2estv4aG89j0uGIFHN+iMPSUp+SwIiSRrXmU/KhHP
-HN5G0QUCgYEA96y4FerIoUHrVSNTVyeD9XAsqFKUo8FFmc5iXdxlV9qi3E7mUn39
-rUsqHnzDMzmiMiVr8cRS5afGv48wyxWxRvyLHt1eFdRIE41ngLAL7ixa7trwARnG
-17mjbMxhwUI+KiA+deJCdvibzNHmjFYaCgrha+vn95TOog8V1kf/zs8CgYEAwyFF
-bXan8DV2gwROTBol0MZQfhilLQOutfG8jSqFc/WMNMQRXOc6B7eX+pN4+Gtaxq5P
-ZOWM3wr7256L+d16PY2s2KAbgB9pU9uQnqWlMO1N/O9SCRyEJRsoqmd+Wr2WZ0Dt
-N+eV6tjnLs4V6yQPa5SX+EBxRF/TnnMKxmu3bOcCgYB2eQsxiLZh1LtyZUx3UzKf
-FAJ4nc/2KPxXH08UYNmlVbMzuRYZfaT74QmLvdhNx5Lbc+UXp/aTXlcGyMLpUj4T
-m7gckn1v6bR0jd5lw1BhpJv2x4morSDdjjIrV/Sm0j4UPopCL3HloPQ93GXw2Trp
-dNzxl83FM0xIXvjuIFCwJwKBgBmE8WqGeSIuK8iouIC1brqmJQLIwFlpwOCks88W
-f4uR0ntYJRksWGeH+EVaIhkDGUUgqNt+NfU5n4SycIYGFCWWsMNH9TDFauX/siM9
-cKQ8dNWeivEMHLAppCDdFiZR4yiv0hZcoDutkFaLt0wgVC/yqAlcjDOwAKIZU5Bt
-p/iDAoGAWINV18TWOv1p+5cJCIj5KmJLABGKV7ZLVgc5cDgXBIxRVoe3HtE1qzmY
-84W0sHa9WUOvptBAdQpv+LR33x2Egst70PfIjuiOYCNEJQBO0lWJF0m/j2eutiyC
-gxba7MR8jZUgA0z7mlsL0hWSShF97gLTi7xTT56EOtf+Fk/0HFI=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-----END RSA PRIVATE KEY-----
diff --git a/scripts/testroot.sh b/scripts/testroot.sh
new file mode 100644
index 00000000..f4336b2b
--- /dev/null
+++ b/scripts/testroot.sh
@@ -0,0 +1,15 @@
+#!/bin/sh -
+# $Id$
+#
+# Script to test against testroot.py.
+#
+# This blows away rpkid's database and rebuilds it with what we need
+# for this test. In the long run we must do better than this, but
+# gotta start somewhere.
+
+if test ! -r testroot.cer -o ! -r testroot.key
+then
+ ../openssl/openssl/apps/openssl req -new -newkey rsa:2048 -nodes -keyout testroot.key -out testroot.req -config testroot.cnf
+ ../openssl/openssl/apps/openssl x509 -req -in testroot.req -out testroot.cer -extfile testroot.cnf -extensions req_x509_ext -signkey testroot.key -text -sha256
+ rm -f testroot.req
+fi