jeltz/hostap
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
hostap/tests/hwsim/auth_serv/ocsp-responder.pem

55 lines
2.6 KiB
Text
Raw Normal View History

tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Certificate:
Data:
Version: 3 (0x2)
tests: Renew the expired OCSP responder certificate This certificate expired and that makes couple of test cases fail. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2016-01-12 23:38:29 +01:00
Serial Number: 15624081837803162831 (0xd8d3e3a6cbe3cccf)
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=FI, O=w1.fi, CN=Root CA
Validity
tests: Renew the expired OCSP responder certificate This certificate expired and that makes couple of test cases fail. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2016-01-12 23:38:29 +01:00
Not Before: Jan 12 22:37:50 2016 GMT
Not After : Jan 11 22:37:50 2021 GMT
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Subject: C=FI, O=w1.fi, CN=ocsp.w1.fi
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (1024 bit)
Modulus:
00:b2:5e:2f:1d:e7:2c:f6:6c:ab:b0:16:9e:fa:12:
2f:b2:4c:c8:23:7b:68:08:76:38:83:97:f5:3f:05:
ac:5d:d9:81:a9:ce:75:92:a1:bc:96:c6:c8:00:ee:
1e:d7:f0:da:8a:d8:e7:c0:d7:42:c3:25:62:e7:c7:
60:fa:a8:82:4c:1b:ce:73:9a:ab:8d:b3:fe:3d:b6:
7f:01:fe:59:64:42:75:a8:04:18:07:2d:22:64:27:
b9:f1:af:01:b4:ed:bf:a6:ea:91:78:d1:9c:30:f5:
61:37:ff:f9:1b:f8:16:5f:6b:77:32:f9:d7:e3:9d:
0c:d5:c3:b9:43:16:f0:3a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
X509v3 Key Usage:
Digital Signature, Non Repudiation, Key Encipherment
X509v3 Extended Key Usage:
OCSP Signing
Signature Algorithm: sha256WithRSAEncryption
tests: Renew the expired OCSP responder certificate This certificate expired and that makes couple of test cases fail. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2016-01-12 23:38:29 +01:00
ae:47:b6:23:18:58:9a:d4:26:63:ad:41:c1:5d:3e:34:78:c3:
80:29:f6:10:2b:95:3b:dc:ef:f2:b3:b8:4b:23:07:a0:11:e5:
5c:b6:4e:7c:6d:d4:62:a2:ae:0f:fd:25:ef:bf:9a:1a:4a:d5:
21:c1:9a:0f:57:e6:da:96:b5:e6:d9:02:1e:5b:98:e3:35:8b:
b6:0d:24:22:d3:35:a4:20:e7:42:ea:ba:11:72:a0:64:84:73:
3c:ce:28:5b:b0:24:53:e9:47:a4:ee:07:85:b2:7a:ec:95:8f:
5b:4b:02:b7:c9:3b:2f:e3:30:57:f9:0c:df:f8:a9:7c:4d:b5:
0f:01
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
-----BEGIN CERTIFICATE-----
tests: Renew the expired OCSP responder certificate This certificate expired and that makes couple of test cases fail. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2016-01-12 23:38:29 +01:00
MIICDjCCAXegAwIBAgIJANjT46bL48zPMA0GCSqGSIb3DQEBCwUAMC8xCzAJBgNV
BAYTAkZJMQ4wDAYDVQQKDAV3MS5maTEQMA4GA1UEAwwHUm9vdCBDQTAeFw0xNjAx
MTIyMjM3NTBaFw0yMTAxMTEyMjM3NTBaMDIxCzAJBgNVBAYTAkZJMQ4wDAYDVQQK
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
DAV3MS5maTETMBEGA1UEAwwKb2NzcC53MS5maTCBnzANBgkqhkiG9w0BAQEFAAOB
jQAwgYkCgYEAsl4vHecs9myrsBae+hIvskzII3toCHY4g5f1PwWsXdmBqc51kqG8
lsbIAO4e1/DaitjnwNdCwyVi58dg+qiCTBvOc5qrjbP+PbZ/Af5ZZEJ1qAQYBy0i
ZCe58a8BtO2/puqReNGcMPVhN//5G/gWX2t3MvnX450M1cO5QxbwOsMCAwEAAaMv
MC0wCQYDVR0TBAIwADALBgNVHQ8EBAMCBeAwEwYDVR0lBAwwCgYIKwYBBQUHAwkw
tests: Renew the expired OCSP responder certificate This certificate expired and that makes couple of test cases fail. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2016-01-12 23:38:29 +01:00
DQYJKoZIhvcNAQELBQADgYEArke2IxhYmtQmY61BwV0+NHjDgCn2ECuVO9zv8rO4
SyMHoBHlXLZOfG3UYqKuD/0l77+aGkrVIcGaD1fm2pa15tkCHluY4zWLtg0kItM1
pCDnQuq6EXKgZIRzPM4oW7AkU+lHpO4HhbJ67JWPW0sCt8k7L+MwV/kM3/ipfE21
DwE=
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
-----END CERTIFICATE-----
Reference in a new issue Copy permalink