mirror of
https://github.com/rn10950/RetroZilla.git
synced 2024-11-14 19:50:12 +01:00
106 lines
1.4 KiB
INI
106 lines
1.4 KiB
INI
|
# This Source Code Form is subject to the terms of the Mozilla Public
|
||
|
# License, v. 2.0. If a copy of the MPL was not distributed with this
|
||
|
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
||
|
|
||
|
scenario CRLDP
|
||
|
|
||
|
entity Root
|
||
|
type Root
|
||
|
|
||
|
entity CA0
|
||
|
type Intermediate
|
||
|
issuer Root
|
||
|
|
||
|
entity CA1
|
||
|
type Intermediate
|
||
|
crldp CA0
|
||
|
issuer CA0
|
||
|
serial 10
|
||
|
aia CA0:Root
|
||
|
|
||
|
entity EE11
|
||
|
type EE
|
||
|
crldp CA0
|
||
|
issuer CA1
|
||
|
|
||
|
entity CA2
|
||
|
type Intermediate
|
||
|
crldp CA0
|
||
|
issuer CA0
|
||
|
serial 20
|
||
|
aia CA0:Root
|
||
|
|
||
|
entity EE21
|
||
|
type EE
|
||
|
issuer CA2
|
||
|
|
||
|
entity EE1
|
||
|
type EE
|
||
|
crldp CA0
|
||
|
issuer CA0
|
||
|
serial 30
|
||
|
aia CA0:Root
|
||
|
|
||
|
entity EE2
|
||
|
type EE
|
||
|
crldp CA0
|
||
|
issuer CA0
|
||
|
serial 40
|
||
|
aia CA0:Root
|
||
|
|
||
|
crl Root
|
||
|
crl CA0
|
||
|
crl CA1
|
||
|
crl CA2
|
||
|
|
||
|
revoke CA0
|
||
|
serial 20
|
||
|
|
||
|
revoke CA0
|
||
|
serial 40
|
||
|
|
||
|
copycrl CA0
|
||
|
|
||
|
db All
|
||
|
|
||
|
import Root::CTu,CTu,CTu
|
||
|
|
||
|
# intermediate CA - OK, EE - OK
|
||
|
verify EE11:CA1
|
||
|
cert CA1:CA0
|
||
|
trust Root:
|
||
|
fetch
|
||
|
rev_type chain
|
||
|
rev_flags requireFreshInfo
|
||
|
rev_mtype crl
|
||
|
result pass
|
||
|
|
||
|
# intermediate CA - revoked, EE - OK
|
||
|
verify EE21:CA2
|
||
|
cert CA2:CA0
|
||
|
trust Root:
|
||
|
fetch
|
||
|
rev_type chain
|
||
|
rev_flags requireFreshInfo
|
||
|
rev_mtype crl
|
||
|
result fail
|
||
|
|
||
|
# direct EE - OK
|
||
|
verify EE1:CA0
|
||
|
trust Root:
|
||
|
fetch
|
||
|
rev_type leaf
|
||
|
rev_flags requireFreshInfo
|
||
|
rev_mtype crl
|
||
|
result pass
|
||
|
|
||
|
# direct EE - revoked
|
||
|
verify EE2:CA0
|
||
|
trust Root:
|
||
|
fetch
|
||
|
rev_type leaf
|
||
|
rev_flags requireFreshInfo
|
||
|
rev_mtype crl
|
||
|
result fail
|
||
|
|