oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

hx509: Add support for CSRs w/ BasicConstraints

Browse Source
This commit is contained in:
Nicolas Williams
2023-11-01 16:12:24 -05:00
committed by Nico Williams
parent 0f998cdbc2
commit be0d1e68e5
6 changed files with 260 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

48
lib/hx509/test_req.in
View File

@@ -161,3 +161,51 @@ Certificate Request:
EOF
fi
fi
${hxtool} request-create \
--ca \
--ca-path-length=3 \
--subject="cn=ca-cert" \
--key=FILE:$srcdir/data/key.der \
pkcs10-request.der || exit 1
${hxtool} request-print PKCS10:pkcs10-request.der > "${objdir}/actual"|| exit 1
cat > "$objdir/expected" <<EOF
request print
PKCS#10 CertificationRequest:
cA: yes
pathLenConstraint: 3
name: CN=ca-cert
EOF
diff "$objdir/expected" "${objdir}/actual" || exit 1
${hxtool} request-create \
--ca \
--subject="cn=ca-cert" \
--key=FILE:$srcdir/data/key.der \
pkcs10-request.der || exit 1
${hxtool} request-print PKCS10:pkcs10-request.der > "${objdir}/actual"|| exit 1
cat > "$objdir/expected" <<EOF
request print
PKCS#10 CertificationRequest:
cA: yes
pathLenConstraint: unspecified
name: CN=ca-cert
EOF
diff "$objdir/expected" "${objdir}/actual" || exit 1
${hxtool} request-create \
--ee \
--subject="cn=ca-cert" \
--key=FILE:$srcdir/data/key.der \
pkcs10-request.der || exit 1
${hxtool} request-print PKCS10:pkcs10-request.der > "${objdir}/actual" || exit 1
cat > "$objdir/expected" <<EOF
request print
PKCS#10 CertificationRequest:
cA: no
pathLenConstraint: unspecified
name: CN=ca-cert
EOF
diff "$objdir/expected" "${objdir}/actual" || exit 1
exit 0