jeltz/hostap
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
hostap/tests/hwsim/auth_serv/ocsp-responder.pem

77 lines
4 KiB
Text
Raw Permalink Normal View History

tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Certificate:
Data:
Version: 3 (0x2)
tests: Move from 1024 bit private keys to 2048 bit keys Crypto libraries are starting to refuse to accept the old shorter keys, so move all test certificates and DH to use 2048 bit (or longer) keys. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-02 19:58:40 +02:00
Serial Number:
tests: Update server and user certificates (2020) The previous versions expired, so need to re-sign these to fix number of the EAP test cases. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2021-05-03 19:03:28 +02:00
d8:d3:e3:a6:cb:e3:cd:72
tests: Move from 1024 bit private keys to 2048 bit keys Crypto libraries are starting to refuse to accept the old shorter keys, so move all test certificates and DH to use 2048 bit (or longer) keys. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-02 19:58:40 +02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=FI, L=Tuusula, O=w1.fi, CN=Root CA
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Validity
tests: Update server and user certificates (2020) The previous versions expired, so need to re-sign these to fix number of the EAP test cases. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2021-05-03 19:03:28 +02:00
Not Before: May 3 17:02:53 2021 GMT
Not After : May 3 17:02:53 2022 GMT
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Subject: C=FI, O=w1.fi, CN=ocsp.w1.fi
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
tests: Move from 1024 bit private keys to 2048 bit keys Crypto libraries are starting to refuse to accept the old shorter keys, so move all test certificates and DH to use 2048 bit (or longer) keys. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-02 19:58:40 +02:00
RSA Public-Key: (2048 bit)
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Modulus:
tests: Move from 1024 bit private keys to 2048 bit keys Crypto libraries are starting to refuse to accept the old shorter keys, so move all test certificates and DH to use 2048 bit (or longer) keys. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-02 19:58:40 +02:00
00:a7:22:85:5d:bb:3b:1c:02:9a:01:73:aa:88:63:
6e:a1:43:33:b5:fd:02:fe:1f:c8:23:04:8b:8c:51:
52:5b:e0:cc:62:60:2a:aa:ba:88:4f:41:39:6b:fb:
34:c0:a2:7a:77:2e:e1:56:9e:ef:ca:ae:67:d5:f9:
8b:5f:ab:ae:87:e1:b0:14:23:03:ad:69:4b:df:2b:
91:70:75:cd:bf:65:40:12:d0:eb:2f:89:f0:41:15:
1b:ed:4c:0d:3a:92:96:91:f8:cd:54:38:15:eb:6b:
45:9f:52:85:7e:4e:15:ab:4e:4b:eb:22:c2:5d:be:
ff:36:6f:42:27:d8:4b:c6:e1:be:f8:08:cf:ac:fd:
51:30:a2:e8:80:13:00:05:b6:05:55:42:0b:fa:1e:
40:84:50:09:8c:25:35:54:25:45:39:9f:4e:7c:0a:
d9:c4:4a:0c:16:4e:3e:68:7f:1b:ad:c9:53:08:5c:
b8:04:d4:d6:93:62:fd:af:f9:b4:1d:f4:96:3e:9b:
9d:14:6d:1c:6c:23:ae:3d:c7:b4:cf:31:90:20:6a:
80:99:62:7e:5c:e9:d5:d5:bd:59:4d:a3:d9:dc:e9:
fb:e8:7b:65:87:d5:f9:49:9e:be:0e:f3:a9:21:de:
94:e8:54:fc:80:cf:da:e3:8f:9a:c6:4c:76:18:0e:
fe:ab
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
X509v3 Key Usage:
Digital Signature, Non Repudiation, Key Encipherment
X509v3 Extended Key Usage:
OCSP Signing
Signature Algorithm: sha256WithRSAEncryption
tests: Update server and user certificates (2020) The previous versions expired, so need to re-sign these to fix number of the EAP test cases. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2021-05-03 19:03:28 +02:00
b9:ef:0b:f2:ad:4b:e1:ac:0b:34:e2:ed:a7:db:20:3d:51:12:
62:f8:1a:e4:b7:25:8a:3e:fa:be:98:2e:e0:33:d8:d1:97:a6:
27:2a:c7:ba:05:ef:9b:f4:36:a2:b7:55:fc:85:fe:39:99:aa:
fe:b6:a0:cd:68:6b:3a:fd:a5:cc:63:e3:b2:90:70:bd:85:d8:
29:47:ba:d8:ae:46:46:4a:af:e6:19:4f:7e:b3:42:74:3b:1f:
c4:00:8f:a5:15:eb:cc:3d:d6:9d:92:c5:0a:61:78:10:0b:2a:
18:4e:eb:cd:74:32:c0:fb:d1:7d:00:3e:c3:00:4e:a6:c0:4e:
9b:b7:78:b7:5f:aa:96:d8:91:88:d5:83:fa:a3:65:69:b3:94:
e0:a9:4f:90:8d:64:ef:2e:bf:86:37:8a:61:3c:e9:a1:81:39:
08:75:d9:ea:c8:d6:5b:56:b0:f2:1a:36:2d:82:93:41:45:71:
c0:a1:f0:25:39:30:ef:44:79:ad:8b:18:fd:06:4c:c0:4b:62:
cf:f1:fb:bc:7b:ee:38:09:05:44:fa:4a:3c:c4:53:b9:68:18:
c1:6c:e4:ae:e0:ce:00:70:67:d1:37:ce:90:c6:0e:dc:c0:e3:
c8:01:5d:33:32:ab:c4:cb:45:1c:27:36:f7:b2:31:f7:99:8c:
b1:72:65:89
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
-----BEGIN CERTIFICATE-----
tests: Update server and user certificates (2020) The previous versions expired, so need to re-sign these to fix number of the EAP test cases. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2021-05-03 19:03:28 +02:00
MIIDJTCCAg2gAwIBAgIJANjT46bL481yMA0GCSqGSIb3DQEBCwUAMEExCzAJBgNV
tests: Move from 1024 bit private keys to 2048 bit keys Crypto libraries are starting to refuse to accept the old shorter keys, so move all test certificates and DH to use 2048 bit (or longer) keys. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-02 19:58:40 +02:00
BAYTAkZJMRAwDgYDVQQHDAdUdXVzdWxhMQ4wDAYDVQQKDAV3MS5maTEQMA4GA1UE
tests: Update server and user certificates (2020) The previous versions expired, so need to re-sign these to fix number of the EAP test cases. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2021-05-03 19:03:28 +02:00
AwwHUm9vdCBDQTAeFw0yMTA1MDMxNzAyNTNaFw0yMjA1MDMxNzAyNTNaMDIxCzAJ
tests: Move from 1024 bit private keys to 2048 bit keys Crypto libraries are starting to refuse to accept the old shorter keys, so move all test certificates and DH to use 2048 bit (or longer) keys. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-02 19:58:40 +02:00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: Update server and user certificates (2020) The previous versions expired, so need to re-sign these to fix number of the EAP test cases. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2021-05-03 19:03:28 +02:00
BQUHAwkwDQYJKoZIhvcNAQELBQADggEBALnvC/KtS+GsCzTi7afbID1REmL4GuS3
JYo++r6YLuAz2NGXpicqx7oF75v0NqK3VfyF/jmZqv62oM1oazr9pcxj47KQcL2F
2ClHutiuRkZKr+YZT36zQnQ7H8QAj6UV68w91p2SxQpheBALKhhO6810MsD70X0A
PsMATqbATpu3eLdfqpbYkYjVg/qjZWmzlOCpT5CNZO8uv4Y3imE86aGBOQh12erI
1ltWsPIaNi2Ck0FFccCh8CU5MO9Eea2LGP0GTMBLYs/x+7x77jgJBUT6SjzEU7lo
GMFs5K7gzgBwZ9E3zpDGDtzA48gBXTMyq8TLRRwnNveyMfeZjLFyZYk=
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
-----END CERTIFICATE-----
Reference in a new issue Copy permalink