Skip to content

Commit 7baf151

Browse files
julek-wolfssljulek-wolfssl
committed
CRL verify the entire chain including loaded CA's
- Regen CRL's as most of them are expired - certs/crl/extra-crls/ca-int-cert-revoked.pem: CRL that revokes certs/intermediate/ca-int-cert.pem signed by certs/ca-cert.pem - Add CheckCertCRL_ex API to not depend on DecodedCert - CheckCertCRLList: accept raw serial or hashed version to work with Signers - Add XELEM_CNT to simplify pre-proc element counting
1 parent 5066771 commit 7baf151

50 files changed

Lines changed: 980 additions & 705 deletions

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎.gitignore‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -410,6 +410,7 @@ XXX-fips-test
410410

411411
# ASYNC
412412
/wolfAsyncCrypt
413+
/async
413414

414415
# Generated user_settings_asm.h.
415416
user_settings_asm.h

‎certs/crl/ca-int-ecc.pem‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,10 @@
11
-----BEGIN X509 CRL-----
2-
MIIBYDCCAQUCAQEwCgYIKoZIzj0EAwIwgaMxCzAJBgNVBAYTAlVTMRMwEQYDVQQI
2+
MIIBXjCCAQUCAQEwCgYIKoZIzj0EAwIwgaMxCzAJBgNVBAYTAlVTMRMwEQYDVQQI
33
DApXYXNoaW5ndG9uMRAwDgYDVQQHDAdTZWF0dGxlMRAwDgYDVQQKDAd3b2xmU1NM
44
MRQwEgYDVQQLDAtEZXZlbG9wbWVudDEkMCIGA1UEAwwbd29sZlNTTCBJbnRlcm1l
55
ZGlhdGUgQ0EgRUNDMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdvbGZzc2wuY29tFw0y
6-
MDA2MTYxOTE3NThaFw0yMzAzMTMxOTE3NThaoDAwLjAfBgNVHSMEGDAWgBQTtXlZ
7-
MrO7tEezNA6AwIMeqoLIWzALBgNVHRQEBAICIAQwCgYIKoZIzj0EAwIDSQAwRgIh
8-
AI0Fl7b1oh6x96i14akYhMMcVHPi7VdLh7fXSf9bMoeqAiEAzxqdobdrD2e53V5b
9-
0o4HUOCgRB1dzH1m+LcRe+LPUnI=
6+
MzA5MjcxMjEwMDlaFw0yNjA2MjMxMjEwMDlaoDAwLjAfBgNVHSMEGDAWgBSXHWDD
7+
hyJZm2AfhLSZHIhNv9oebjALBgNVHRQEBAICIAQwCgYIKoZIzj0EAwIDRwAwRAIg
8+
C6Wlwom5faQm2pTYRBI2DVTdy7DYv1QYsi/y6ZDhPAQCIEfioB8LqiTO0gjSzUVN
9+
KPkEXx3y4Ih3HHcrTwWOVuGv
1010
-----END X509 CRL-----

‎certs/crl/ca-int.pem‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -2,13 +2,13 @@
22
MIICHDCCAQQCAQEwDQYJKoZIhvcNAQELBQAwgZ8xCzAJBgNVBAYTAlVTMRMwEQYD
33
VQQIDApXYXNoaW5ndG9uMRAwDgYDVQQHDAdTZWF0dGxlMRAwDgYDVQQKDAd3b2xm
44
U1NMMRQwEgYDVQQLDAtEZXZlbG9wbWVudDEgMB4GA1UEAwwXd29sZlNTTCBJbnRl
5-
cm1lZGlhdGUgQ0ExHzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20XDTIw
6-
MDYxNjE5MTc1OFoXDTIzMDMxMzE5MTc1OFqgMDAuMB8GA1UdIwQYMBaAFIMc8ZiF
7-
7G4GRTTeUcC6tytnMmZNMAsGA1UdFAQEAgIgADANBgkqhkiG9w0BAQsFAAOCAQEA
8-
VQ6Am+DuDpBbUs2yEIe0MDwgVZacmOwEB6wZM/c62qW+tGitjUnj1UD6wNQZwYpP
9-
OGNYOdbiIskilSC97WJgXW4dJVrRHiV8nAzzi/8tZO96oUbLx1hmfx1/hCxqtm50
10-
bbYUuS25qoiVFKYkx1tocY+ESLfam09T8ZP3m5m38h5YTe+s6dmHdonEM+JlNEdT
11-
itvZtSfUU29xCQIXVSWFJHsRGjqdvCpndtY1Kmb8aYdB60zpk2JgOGljg2uF7Iq0
12-
lquWWfhDl77r0qdlRYHTQ+0FetU4gCZ+ZVGH07+FD/p+GxPh4P0D3i2gFq2Z/0en
13-
396xKNy+NiBbFw/CUFbLDw==
5+
cm1lZGlhdGUgQ0ExHzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20XDTIz
6+
MDkyNzEyMTAwOVoXDTI2MDYyMzEyMTAwOVqgMDAuMB8GA1UdIwQYMBaAFO9p4PfV
7+
HeaZ7Nxt0PfiuVxkcYM1MAsGA1UdFAQEAgIgADANBgkqhkiG9w0BAQsFAAOCAQEA
8+
S39FIBb1dxg1cLXT/tg/G5AO96rcOYWz31KoZee1ATTDmgG/Wfl5eZyzqIrj6yNB
9+
r0itqwEK4rcJRz5CGRPCa81M3VRcQncj908boEuVsaiWzobWYz1TYTFUvnlQpRO3
10+
Z124+mBucZ+VxiClZqcCfR/0I8tJFMYDltwWtap8VYeIV6qhqKw7EWTPhwG+me18
11+
jyhclPaq6sHiUBanecQODzrlXsLGgC64E9h0zbFc7xQXrnLWRurfuLA4vY2xoyyj
12+
xwTcdSLDL4rlqA2dVEx/FrbA1SBjgUrJy4XJthsFIu4M2fiY81cWKQmEC/2q7qPK
13+
NrGG8b24EkPvFXepUtleJQ==
1414
-----END X509 CRL-----

‎certs/crl/ca-int2-ecc.pem‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -3,8 +3,8 @@ MIIBYTCCAQYCAQEwCgYIKoZIzj0EAwIwgaQxCzAJBgNVBAYTAlVTMRMwEQYDVQQI
33
DApXYXNoaW5ndG9uMRAwDgYDVQQHDAdTZWF0dGxlMRAwDgYDVQQKDAd3b2xmU1NM
44
MRQwEgYDVQQLDAtEZXZlbG9wbWVudDElMCMGA1UEAwwcd29sZlNTTCBJbnRlcm1l
55
ZGlhdGUyIENBIEVDQzEfMB0GCSqGSIb3DQEJARYQaW5mb0B3b2xmc3NsLmNvbRcN
6-
MjAwNjE2MTkxNzU4WhcNMjMwMzEzMTkxNzU4WqAwMC4wHwYDVR0jBBgwFoAUG/S9
7-
kCh0ZOMzXotkp/yvuvK5VeUwCwYDVR0UBAQCAiAFMAoGCCqGSM49BAMCA0kAMEYC
8-
IQDBYNHurBS8JV1DkJLVaVXD5lrvjdCA13poIGJxVvx0NwIhALJQRBbMvQCLZ4ci
9-
sE1dD+cpe4NdK/x2iH4QJ8XJX8uc
6+
MjMwOTI3MTIxMDA5WhcNMjYwNjIzMTIxMDA5WqAwMC4wHwYDVR0jBBgwFoAUn657
7+
enCABFUrxrcMW3nkEkFlMSkwCwYDVR0UBAQCAiAFMAoGCCqGSM49BAMCA0kAMEYC
8+
IQCIZv1TFoij0ezl8/TaA4wq4cNRnYZaKf+W4ROnAfghZwIhALog+BqrxkhP0C3C
9+
LEWWD4Q7rOIZdNfK8ABwrg+vWneJ
1010
-----END X509 CRL-----

‎certs/crl/ca-int2.pem‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -3,12 +3,12 @@ MIICHTCCAQUCAQEwDQYJKoZIhvcNAQELBQAwgaAxCzAJBgNVBAYTAlVTMRMwEQYD
33
VQQIDApXYXNoaW5ndG9uMRAwDgYDVQQHDAdTZWF0dGxlMRAwDgYDVQQKDAd3b2xm
44
U1NMMRQwEgYDVQQLDAtEZXZlbG9wbWVudDEhMB8GA1UEAwwYd29sZlNTTCBJbnRl
55
cm1lZGlhdGUyIENBMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdvbGZzc2wuY29tFw0y
6-
MDA2MTYxOTE3NThaFw0yMzAzMTMxOTE3NThaoDAwLjAfBgNVHSMEGDAWgBR6ix1O
7-
o0DIzlhfjfz/Rix1QdkDXjALBgNVHRQEBAICIAEwDQYJKoZIhvcNAQELBQADggEB
8-
AJeG0+IjjS5Rf2gAJu/ldHzCwMJccTKt17mHjyQhQnzOQN8Df+zAUDWIVF99d0vO
9-
cQFx5SYWpFYkT6kSRYHdYmZp8s6Yl0oQJ+isQ1wsFnkF2z+I/g1f/uDX9LWnKxnj
10-
UE2UttU6fKGQl2F8SDnloDsQjjGnxssyGVeNCTBGjkCHHH9QSpZv5xjTN7INYCso
11-
3GkWnXwGkghwleXGtgMwW2IMsNVMIFJlHQQzk9P6gqTtvhkCNp6rjAHieU8GqBkh
12-
1zCMDTgk2LjFaRF/OnbOk1/j+LZZxox9KUIhUF4d33+PhoUd9YegvJJfdVXAKnVc
13-
HwoO9FjX3jBcnfvs6qPBKLc=
6+
MzA5MjcxMjEwMDlaFw0yNjA2MjMxMjEwMDlaoDAwLjAfBgNVHSMEGDAWgBQNyWAg
7+
Q1iB4Joh72YW3G4hJd8rRTALBgNVHRQEBAICIAEwDQYJKoZIhvcNAQELBQADggEB
8+
AFZgStFKb9hSbaI7ysWXXDNBNPvb97aHd8A3T4HgYVf6MqlnyI2gJbe5VUYtoJTF
9+
VTIrfM7tJQf68pGCpCbo6N8ai9xAvfU+AeWk2SHgBFRj2LRprx7tDwt0/Y6YlZ2a
10+
PHhTqyOLEhrW0Qh6NLOJ3e0zS/GQ7Oy8muPUcBbeq+XkLK2JH6gKVrzjn7QptNDr
11+
7zEdntQArofx1+twNrn800pdltNjV0etC1Ags5ocg10Xp1dD9NPFdLsY5cASHitP
12+
xpek4sZiBvEB0YKOs+eY8tYtFAPRzEfz5JeZNwUL3jhLH8/4d0mioVSH1+k0xkBz
13+
MRdmZc1yQaIQe6U0tgzw9SM=
1414
-----END X509 CRL-----

‎certs/crl/client-int-ecc.pem‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,10 @@
11
-----BEGIN X509 CRL-----
2-
MIIBXDCCAQICAQEwCgYIKoZIzj0EAwIwgaAxCzAJBgNVBAYTAlVTMRMwEQYDVQQI
2+
MIIBWzCCAQICAQEwCgYIKoZIzj0EAwIwgaAxCzAJBgNVBAYTAlVTMRMwEQYDVQQI
33
DApXYXNoaW5ndG9uMRAwDgYDVQQHDAdTZWF0dGxlMRAwDgYDVQQKDAd3b2xmU1NM
44
MRQwEgYDVQQLDAtEZXZlbG9wbWVudDEhMB8GA1UEAwwYd29sZlNTTCBDbGllbnQg
5-
Q2hhaW4gRUNDMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdvbGZzc2wuY29tFw0yMDA2
6-
MTYxOTE3NThaFw0yMzAzMTMxOTE3NThaoDAwLjAfBgNVHSMEGDAWgBTr1EtZa5Vh
7-
P1FXtgRNiUGIRFyr8jALBgNVHRQEBAICIAcwCgYIKoZIzj0EAwIDSAAwRQIhAJiz
8-
His7baFwO9NAwNTMMpNJbYd1XClf1q9lOdO9S/sqAiBfh8Qy7Lri1brEaafDCxe3
9-
3PgVHR+m9QkJssAuOEIK2A==
5+
Q2hhaW4gRUNDMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdvbGZzc2wuY29tFw0yMzA5
6+
MjcxMjEwMTBaFw0yNjA2MjMxMjEwMTBaoDAwLjAfBgNVHSMEGDAWgBTr1EtZa5Vh
7+
P1FXtgRNiUGIRFyr8jALBgNVHRQEBAICIAcwCgYIKoZIzj0EAwIDRwAwRAIgN4x2
8+
Lb57tlFYEhVyiNJ+7vmlTSn5IgDY2aMbw5bSi+wCIA7KlbvpkAzSA+lKwUD8wmfW
9+
r4AwiWgQOz5RfhRx1rXC
1010
-----END X509 CRL-----

‎certs/crl/client-int.pem‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -2,13 +2,13 @@
22
MIICGTCCAQECAQEwDQYJKoZIhvcNAQELBQAwgZwxCzAJBgNVBAYTAlVTMRMwEQYD
33
VQQIDApXYXNoaW5ndG9uMRAwDgYDVQQHDAdTZWF0dGxlMRAwDgYDVQQKDAd3b2xm
44
U1NMMRQwEgYDVQQLDAtEZXZlbG9wbWVudDEdMBsGA1UEAwwUd29sZlNTTCBDbGll
5-
bnQgQ2hhaW4xHzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20XDTIwMDYx
6-
NjE5MTc1OFoXDTIzMDMxMzE5MTc1OFqgMDAuMB8GA1UdIwQYMBaAFDPYRWbXaIcY
7-
flQNcCeRxybXhWXAMAsGA1UdFAQEAgIgAzANBgkqhkiG9w0BAQsFAAOCAQEARom6
8-
mppTxCF+GWAEHFbn9EJee2uCCrQ9dd4JLA1Hc4XYGHOoN54jPKZEvTTYB5XKImCg
9-
NvbOb98l88Gpr0fUDTuAdBQZrM7Vs3IBPoOJdjMNuwQzxvQ+WdY2Jft/4CaR4/mq
10-
oMJrmhlz1PmWNTqqfFS/GQv/NYDdCXhP4bNuWRMZoSYROyby+bqr2SgNbZ+0GA3/
11-
jeSCXmdngwEB7z5SoqqRscVOS7Sw1S3e6X/QNQ6rNNR6MWKH95Ra8ke9A12r+3zu
12-
ZqbIYtbaF49tvOJsvzKQeC8J2oTzpEbRvNudJ4mXLpNEw5I/RL1sum0bJIn0wL+/
13-
7q1EaGe14zTsPsx06g==
5+
bnQgQ2hhaW4xHzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20XDTIzMDky
6+
NzEyMTAwOVoXDTI2MDYyMzEyMTAwOVqgMDAuMB8GA1UdIwQYMBaAFDPYRWbXaIcY
7+
flQNcCeRxybXhWXAMAsGA1UdFAQEAgIgAzANBgkqhkiG9w0BAQsFAAOCAQEAquOQ
8+
8p0OUhEcAy2RKuXz9mJ+/NpBf4O3f4DmIlNjKC+Vm6dkV/wYFI63/trUZ7zOsL2A
9+
GCDuFtXqcmWJcl6A3Fi2sUqSrwaz+J7n0fRARlvAHNIiSZX02pPYt+zzBxUUdvmp
10+
VcFyAPs5VTbCGXQEgqPsH2bpeVtDvEqEhS4fv6GtOQ59nOiDMJqHl6iUKAD/Jw4x
11+
M/eemrpnGS4K2JG/IBmQN8bZ/3pX+4bAymNqaj+Wz0PQxkOvr7Kv+U9M/Jr8QXPz
12+
zPAZQfPU5caUA+DhGwPK9NNJu07seuUTi7D0qRP28p0k4rOR7AtRmi47KhP1Rxm1
13+
7aYL9GnvRcuHob7NtQ==
1414
-----END X509 CRL-----

‎certs/crl/extra-crls/ca-int-cert-revoked.pem‎

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
-----BEGIN X509 CRL-----
2+
MIICBTCB7gIBATANBgkqhkiG9w0BAQsFADCBlDELMAkGA1UEBhMCVVMxEDAOBgNV
3+
BAgMB01vbnRhbmExEDAOBgNVBAcMB0JvemVtYW4xETAPBgNVBAoMCFNhd3Rvb3Ro
4+
MRMwEQYDVQQLDApDb25zdWx0aW5nMRgwFgYDVQQDDA93d3cud29sZnNzbC5jb20x
5+
HzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20XDTIzMDkyNzEyMTcyNVoX
6+
DTI2MDYyMzEyMTcyNVowFTATAgIQABcNMjMwOTI3MTIxNzE2WqAOMAwwCgYDVR0U
7+
BAMCAQQwDQYJKoZIhvcNAQELBQADggEBAHcmTpTTjLjvxhp88HaQntip35iPTdYb
8+
RI39Y/DvbDwlyjczvJhhjXmTvDcRLqTkzvdTPFMSVMm+oAYIUdi9RqBwxAZCx1Wf
9+
4l+WmU8qtz9l1PF3fKU5fsJzlWByPXjyUN6SAa4Uy5k5p4W2HBdXJvKFIY6Q08Cg
10+
ZHQgwOvHgu3Wh1qCbApNtzPcFv2HLWINg/e/mDAP7dJALNSld4HQ86oT9fB70sWI
11+
w9ogw18ARxX1M+piZ9oH02bO7K5KMnIeSalen0eXgA/O62+pBF1BvQ7fzmqEUyrp
12+
OkSYet+pv5bij8IK302z4Ukx/cU8dIDYTNfG+/12YVVFrKL1CnQ20mE=
13+
-----END X509 CRL-----

‎certs/crl/gencrls.sh‎

Lines changed: 22 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -107,17 +107,25 @@ check_result $?
107107
# remove revoked so next time through the normal CA won't have server revoked
108108
cp blank.index.txt demoCA/index.txt
109109

110+
echo "Step 12"
111+
# revoke an intermediate cert
112+
openssl ca -config ../renewcerts/wolfssl.cnf -revoke ../intermediate/ca-int-cert.pem -keyfile ../ca-key.pem -cert ../ca-cert.pem
113+
openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 1000 -out extra-crls/ca-int-cert-revoked.pem -keyfile ../ca-key.pem -cert ../ca-cert.pem
114+
115+
# remove revoked so next time through the normal CA won't have server revoked
116+
cp blank.index.txt demoCA/index.txt
117+
110118
# caEccCrl
111-
echo "Step 10"
119+
echo "Step 13"
112120
openssl ca -config ../renewcerts/wolfssl.cnf -revoke ../server-revoked-cert.pem -keyfile ../ca-ecc-key.pem -cert ../ca-ecc-cert.pem
113121
check_result $?
114122

115-
echo "Step 11"
123+
echo "Step 14"
116124
openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 1000 -out caEccCrl.pem -keyfile ../ca-ecc-key.pem -cert ../ca-ecc-cert.pem
117125
check_result $?
118126

119127
# metadata
120-
echo "Step 13"
128+
echo "Step 15"
121129
openssl crl -in caEccCrl.pem -text > tmp
122130
check_result $?
123131
mv tmp caEccCrl.pem
@@ -128,69 +136,69 @@ mv tmp caEccCrl.pem
128136
# server-revoked-cert.pem is already revoked in Step 10
129137
#openssl ca -config ../renewcerts/wolfssl.cnf -revoke ../server-revoked-cert.pem -keyfile ../ca-ecc384-key.pem -cert ../ca-ecc384-cert.pem
130138

131-
echo "Step 14"
139+
echo "Step 16"
132140
openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 1000 -out caEcc384Crl.pem -keyfile ../ca-ecc384-key.pem -cert ../ca-ecc384-cert.pem
133141
check_result $?
134142

135143
# metadata
136-
echo "Step 15"
144+
echo "Step 17"
137145
openssl crl -in caEcc384Crl.pem -text > tmp
138146
check_result $?
139147
mv tmp caEcc384Crl.pem
140148
# install (only needed if working outside wolfssl)
141149
#cp caEcc384Crl.pem ~/wolfssl/certs/crl/caEcc384Crl.pem
142150

143151
# cliCrl
144-
echo "Step 16"
152+
echo "Step 18"
145153
openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 1000 -out cliCrl.pem -keyfile ../client-key.pem -cert ../client-cert.pem
146154
check_result $?
147155

148156
# metadata
149-
echo "Step 17"
157+
echo "Step 19"
150158
openssl crl -in cliCrl.pem -text > tmp
151159
check_result $?
152160
mv tmp cliCrl.pem
153161
# install (only needed if working outside wolfssl)
154162
#cp cliCrl.pem ~/wolfssl/certs/crl/cliCrl.pem
155163

156164
# eccCliCRL
157-
echo "Step 18"
165+
echo "Step 20"
158166
openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 1000 -out eccCliCRL.pem -keyfile ../ecc-client-key.pem -cert ../client-ecc-cert.pem
159167
check_result $?
160168

161169
# metadata
162-
echo "Step 19"
170+
echo "Step 21"
163171
openssl crl -in eccCliCRL.pem -text > tmp
164172
check_result $?
165173
mv tmp eccCliCRL.pem
166174
# install (only needed if working outside wolfssl)
167175
#cp eccCliCRL.pem ~/wolfssl/certs/crl/eccCliCRL.pem
168176

169177
# eccSrvCRL
170-
echo "Step 20"
178+
echo "Step 22"
171179
openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 1000 -out eccSrvCRL.pem -keyfile ../ecc-key.pem -cert ../server-ecc.pem
172180
check_result $?
173181

174182
# metadata
175-
echo "Step 21"
183+
echo "Step 23"
176184
openssl crl -in eccSrvCRL.pem -text > tmp
177185
check_result $?
178186
mv tmp eccSrvCRL.pem
179187
# install (only needed if working outside wolfssl)
180188
#cp eccSrvCRL.pem ~/wolfssl/certs/crl/eccSrvCRL.pem
181189

182190
# caEccCrl
183-
echo "Step 22"
191+
echo "Step 24"
184192
openssl ca -config ./wolfssl.cnf -gencrl -crldays 1000 -out caEccCrl.pem -keyfile ../ca-ecc-key.pem -cert ../ca-ecc-cert.pem
185193
check_result $?
186194

187195
# ca-ecc384-cert
188-
echo "Step 23"
196+
echo "Step 25"
189197
openssl ca -config ./wolfssl.cnf -gencrl -crldays 1000 -out caEcc384Crl.pem -keyfile ../ca-ecc384-key.pem -cert ../ca-ecc384-cert.pem
190198
check_result $?
191199

192200
# create crl and crl2 der files for unit test
193-
echo "Step 24"
201+
echo "Step 26"
194202
openssl crl -in crl.pem -inform PEM -out crl.der -outform DER
195203
openssl crl -in crl2.pem -inform PEM -out crl2.der -outform DER
196204

‎certs/crl/include.am‎

Lines changed: 24 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -3,30 +3,32 @@
33
#
44

55
EXTRA_DIST += \
6-
certs/crl/hash_pem/0fdb2da4.r0 \
7-
certs/crl/hash_der/0fdb2da4.r0 \
8-
certs/crl/crl.pem \
9-
certs/crl/cliCrl.pem \
10-
certs/crl/eccSrvCRL.pem \
11-
certs/crl/eccCliCRL.pem \
12-
certs/crl/crl2.pem \
13-
certs/crl/caEccCrl.der \
14-
certs/crl/caEccCrl.pem \
15-
certs/crl/caEcc384Crl.pem \
16-
certs/crl/wolfssl.cnf \
17-
certs/crl/crl.der \
18-
certs/crl/crl2.der
6+
certs/crl/hash_pem/0fdb2da4.r0 \
7+
certs/crl/hash_der/0fdb2da4.r0 \
8+
certs/crl/crl.pem \
9+
certs/crl/cliCrl.pem \
10+
certs/crl/eccSrvCRL.pem \
11+
certs/crl/eccCliCRL.pem \
12+
certs/crl/crl2.pem \
13+
certs/crl/caEccCrl.der \
14+
certs/crl/caEccCrl.pem \
15+
certs/crl/caEcc384Crl.pem \
16+
certs/crl/wolfssl.cnf \
17+
certs/crl/crl.der \
18+
certs/crl/crl2.der
1919

2020
EXTRA_DIST += \
21-
certs/crl/crl.revoked
21+
certs/crl/crl.revoked \
22+
certs/crl/extra-crls/ca-int-cert-revoked.pem \
23+
certs/crl/extra-crls/general-server-crl.pem
2224

2325
# Intermediate cert CRL's
2426
EXTRA_DIST += \
25-
certs/crl/ca-int.pem \
26-
certs/crl/ca-int2.pem \
27-
certs/crl/client-int.pem \
28-
certs/crl/server-int.pem \
29-
certs/crl/ca-int-ecc.pem \
30-
certs/crl/ca-int2-ecc.pem \
31-
certs/crl/client-int-ecc.pem \
32-
certs/crl/server-int-ecc.pem
27+
certs/crl/ca-int.pem \
28+
certs/crl/ca-int2.pem \
29+
certs/crl/client-int.pem \
30+
certs/crl/server-int.pem \
31+
certs/crl/ca-int-ecc.pem \
32+
certs/crl/ca-int2-ecc.pem \
33+
certs/crl/client-int-ecc.pem \
34+
certs/crl/server-int-ecc.pem

0 commit comments

Comments
 (0)