Skip to content

Commit 3857c52

Browse files
SparkiDevSparkiDev
committed
Adding or make functional OpenSSL compat APIs
X509_check_purpose SSL_CTX_set0_tmp_dh_pey SSL_get1_peer_certificate EVP_AES_*_wrap, EVP_AES_*_wrap_pad EVP_PKEY_get_raw_private_key, EVP_PKEY_get_raw_public_key OCSP_crl_reason_str X509_get_default_cert_dir, X509_get_default_cert_dir_env X509_get_default_cert_file_dir SSL_add_dir_cert_subjects_to_stack, SSL_add_file_cert_subjects_to_stack EVP_md_null SSL_CTX_get_ciphers SSL_CTX_set_client_hello_cb, SSL_client_hello_get0_ext i2a_ASN1_STRING SSL_CTX_load_verify_file, SSL_CTX_load_verify_dir
1 parent ee45da0 commit 3857c52

69 files changed

Lines changed: 6206 additions & 74 deletions

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎.github/configs/os-check-linux.json‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,18 @@
66
"configure": ["--enable-usersettings"], "prepare": [["sed", "-i", "s/if 0/if 1/", "user_settings.h"]]},
77
{"name": "all-no-client-auth", "minutes": 9.0,
88
"configure": ["--enable-all", "CPPFLAGS=-DWOLFSSL_NO_CLIENT_AUTH"]},
9+
{"name": "opensslall-no-aes-128", "minutes": 9.0,
10+
"comment": "AES-128 compiled out. Tests that pick a 128 bit key or an AES-128 cipher suite have to say so; --enable-all cannot be used here because it turns on HAVE_CMAC_KDF, which settings.h rejects alongside NO_AES_128.",
11+
"configure": ["--enable-opensslall", "--enable-crl", "--enable-ocsp", "--enable-certgen", "--enable-certreq", "--enable-certext", "--enable-keygen", "--enable-aeskeywrap=padding", "CPPFLAGS=-DNO_AES_128"]},
12+
{"name": "opensslall-single-ec-curve", "minutes": 9.0,
13+
"comment": "Only P-256 built. Tests naming P-384 or P-521 have to say so; --enable-all cannot be used here because it defines HAVE_ECC384 and HAVE_ECC521 regardless of ECC_USER_CURVES, which would silently un-restrict the build.",
14+
"configure": ["--enable-opensslall", "--enable-crl", "--enable-ocsp", "--enable-certgen", "--enable-certreq", "--enable-certext", "--enable-keygen", "--enable-aeskeywrap=padding", "CPPFLAGS=-DECC_USER_CURVES -DHAVE_ECC256"]},
15+
{"name": "all-ignore-netscape-cert-type", "minutes": 9.0,
16+
"comment": "Builds with the netscape certificate type compiled out. The type is optional, so the code that reads it has to be guarded everywhere; this configuration is what catches a guard that was missed.",
17+
"configure": ["--enable-all", "CPPFLAGS=-DIGNORE_NETSCAPE_CERT_TYPE"]},
18+
{"name": "all-aeskeywrap-padding", "minutes": 9.0,
19+
"comment": "--enable-all brings the compatibility layer and RFC 3394 key wrap, but not RFC 5649 padding; this builds and runs the EVP_aes_*_wrap_pad tests.",
20+
"configure": ["--enable-all", "--enable-aeskeywrap=padding"]},
921
{"name": "all-public-mp", "minutes": 8.0,
1022
"comment": "--enable-all plus WOLFSSL_PUBLIC_MP. The shared-secret-at-infinity regression assertion needs direct mp access to plant an out-of-range scalar, because the import path itself now rejects one; without this the assertion is compiled out of every mainstream build.",
1123
"configure": ["--enable-all", "CPPFLAGS=-DWOLFSSL_PUBLIC_MP"]},
@@ -298,6 +310,12 @@
298310
"configure": ["CPPFLAGS=-DNO_WOLFSSL_SERVER -DWOLFSSL_NO_CLIENT_AUTH"]},
299311
{"name": "no-wolfssl-client", "minutes": 1.0,
300312
"configure": ["CPPFLAGS=-DNO_WOLFSSL_CLIENT"]},
313+
{"name": "static-no-wolfssl-client",
314+
"comment": "A static build with the client compiled out. --disable-shared is what defines WOLFSSL_TEST_STATIC_BUILD, and no other entry in this list is a static build, so the tests behind that macro are never compiled anywhere else. Those tests reach for client-only methods unless guarded, which is how the TLSX key share tests came to not compile here at all.",
315+
"configure": ["--disable-shared", "--enable-static", "--disable-asm", "--disable-sp-asm", "--enable-tlsv12", "--enable-tls13", "CPPFLAGS=-DNO_WOLFSSL_CLIENT"]},
316+
{"name": "static-no-wolfssl-server",
317+
"comment": "The mirror of static-no-wolfssl-client: the same static build with the server compiled out instead, so a WOLFSSL_TEST_STATIC_BUILD test that reaches for a server-only method is caught the same way.",
318+
"configure": ["--disable-shared", "--enable-static", "--disable-asm", "--disable-sp-asm", "--enable-tlsv12", "--enable-tls13", "CPPFLAGS=-DNO_WOLFSSL_SERVER"]},
301319
{"name": "testwolfcrypt-ca", "minutes": 1.0,
302320
"comment": "user_settings.h builds running only testwolfcrypt: pure crypto, no platform-specific features, so Linux-only coverage is sufficient. Not converted: user_settings_baremetal.h.",
303321
"user_settings": "examples/configs/user_settings_ca.h",

‎certs/any-eku-cert.pem‎

Lines changed: 91 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,91 @@
1+
Certificate:
2+
Data:
3+
Version: 3 (0x2)
4+
Serial Number: 8 (0x8)
5+
Signature Algorithm: sha256WithRSAEncryption
6+
Issuer: C=US, ST=Montana, L=Bozeman, O=Sawtooth, OU=Consulting, CN=www.wolfssl.com, emailAddress=facts@wolfssl.com
7+
Validity
8+
Not Before: Sep 2 00:07:02 2026 GMT
9+
Not After : May 29 00:07:02 2029 GMT
10+
Subject: C=US, ST=Montana, L=Bozeman, O=wolfSSL, OU=AnyEKU, CN=www.wolfssl.com, emailAddress=facts@wolfssl.com
11+
Subject Public Key Info:
12+
Public Key Algorithm: rsaEncryption
13+
Public-Key: (2048 bit)
14+
Modulus:
15+
00:c0:95:08:e1:57:41:f2:71:6d:b7:d2:45:41:27:
16+
01:65:c6:45:ae:f2:bc:24:30:b8:95:ce:2f:4e:d6:
17+
f6:1c:88:bc:7c:9f:fb:a8:67:7f:fe:5c:9c:51:75:
18+
f7:8a:ca:07:e7:35:2f:8f:e1:bd:7b:c0:2f:7c:ab:
19+
64:a8:17:fc:ca:5d:7b:ba:e0:21:e5:72:2e:6f:2e:
20+
86:d8:95:73:da:ac:1b:53:b9:5f:3f:d7:19:0d:25:
21+
4f:e1:63:63:51:8b:0b:64:3f:ad:43:b8:a5:1c:5c:
22+
34:b3:ae:00:a0:63:c5:f6:7f:0b:59:68:78:73:a6:
23+
8c:18:a9:02:6d:af:c3:19:01:2e:b8:10:e3:c6:cc:
24+
40:b4:69:a3:46:33:69:87:6e:c4:bb:17:a6:f3:e8:
25+
dd:ad:73:bc:7b:2f:21:b5:fd:66:51:0c:bd:54:b3:
26+
e1:6d:5f:1c:bc:23:73:d1:09:03:89:14:d2:10:b9:
27+
64:c3:2a:d0:a1:96:4a:bc:e1:d4:1a:5b:c7:a0:c0:
28+
c1:63:78:0f:44:37:30:32:96:80:32:23:95:a1:77:
29+
ba:13:d2:97:73:e2:5d:25:c9:6a:0d:c3:39:60:a4:
30+
b4:b0:69:42:42:09:e9:d8:08:bc:33:20:b3:58:22:
31+
a7:aa:eb:c4:e1:e6:61:83:c5:d2:96:df:d9:d0:4f:
32+
ad:d7
33+
Exponent: 65537 (0x10001)
34+
X509v3 extensions:
35+
X509v3 Subject Key Identifier:
36+
B3:11:32:C9:92:98:84:E2:C9:F8:D0:3B:6E:03:42:CA:1F:0E:8E:3C
37+
X509v3 Authority Key Identifier:
38+
keyid:27:8E:67:11:74:C3:26:1D:3F:ED:33:63:B3:A4:D8:1D:30:E5:E8:D5
39+
DirName:/C=US/ST=Montana/L=Bozeman/O=Sawtooth/OU=Consulting/CN=www.wolfssl.com/emailAddress=facts@wolfssl.com
40+
serial:67:19:D2:A8:7F:E3:2D:FA:75:7A:4F:E7:B2:02:D9:AD:C4:77:5E:F8
41+
X509v3 Basic Constraints:
42+
CA:FALSE
43+
X509v3 Key Usage:
44+
Digital Signature, Key Encipherment
45+
X509v3 Extended Key Usage:
46+
Any Extended Key Usage
47+
Signature Algorithm: sha256WithRSAEncryption
48+
Signature Value:
49+
b6:67:56:e6:f3:73:c3:b4:bf:85:9a:c2:e8:2e:ed:b7:a8:19:
50+
09:5f:c5:71:b1:03:be:fc:b9:c8:66:77:6e:f7:52:67:d8:39:
51+
3a:7c:58:7e:51:59:63:55:a0:89:64:83:bd:e4:f4:74:35:e3:
52+
99:2c:7b:45:09:2e:88:a0:6c:0a:c5:e3:ba:91:47:22:f8:3c:
53+
e1:55:6a:16:77:2c:37:05:82:b1:71:43:40:85:f3:f9:8d:f7:
54+
6e:d5:e1:59:f3:2c:cd:18:10:7e:aa:a6:f5:97:ca:ed:a0:cd:
55+
53:f6:96:52:b9:43:6f:b4:a2:d5:b2:bf:3b:86:68:9e:56:0f:
56+
b4:87:29:4d:a1:14:61:94:72:64:37:ac:2d:f7:5c:ad:14:ba:
57+
a2:ff:b1:e6:fd:ae:48:26:c9:a5:38:e7:2a:f2:2e:41:05:10:
58+
f4:aa:1a:62:b5:6a:34:de:f7:68:74:78:bb:16:22:89:77:d0:
59+
82:f0:07:bc:ce:4e:4e:8f:9b:df:04:b6:82:ae:4b:0e:b9:c9:
60+
57:32:d8:31:8e:8f:8a:13:a1:eb:dd:fa:21:6c:24:5a:27:16:
61+
07:d7:1d:07:74:4b:9c:9f:96:ae:54:8d:eb:93:10:a8:ef:3f:
62+
ea:2b:fe:89:6b:27:5b:d1:23:a7:ec:43:a5:eb:a4:40:e1:97:
63+
24:51:f0:83
64+
-----BEGIN CERTIFICATE-----
65+
MIIEyDCCA7CgAwIBAgIBCDANBgkqhkiG9w0BAQsFADCBlTELMAkGA1UEBhMCVVMx
66+
EDAOBgNVBAgMB01vbnRhbmExEDAOBgNVBAcMB0JvemVtYW4xETAPBgNVBAoMCFNh
67+
d3Rvb3RoMRMwEQYDVQQLDApDb25zdWx0aW5nMRgwFgYDVQQDDA93d3cud29sZnNz
68+
bC5jb20xIDAeBgkqhkiG9w0BCQEWEWZhY3RzQHdvbGZzc2wuY29tMB4XDTI2MDkw
69+
MjAwMDcwMloXDTI5MDUyOTAwMDcwMlowgZAxCzAJBgNVBAYTAlVTMRAwDgYDVQQI
70+
DAdNb250YW5hMRAwDgYDVQQHDAdCb3plbWFuMRAwDgYDVQQKDAd3b2xmU1NMMQ8w
71+
DQYDVQQLDAZBbnlFS1UxGDAWBgNVBAMMD3d3dy53b2xmc3NsLmNvbTEgMB4GCSqG
72+
SIb3DQEJARYRZmFjdHNAd29sZnNzbC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB
73+
DwAwggEKAoIBAQDAlQjhV0HycW230kVBJwFlxkWu8rwkMLiVzi9O1vYciLx8n/uo
74+
Z3/+XJxRdfeKygfnNS+P4b17wC98q2SoF/zKXXu64CHlci5vLobYlXParBtTuV8/
75+
1xkNJU/hY2NRiwtkP61DuKUcXDSzrgCgY8X2fwtZaHhzpowYqQJtr8MZAS64EOPG
76+
zEC0aaNGM2mHbsS7F6bz6N2tc7x7LyG1/WZRDL1Us+FtXxy8I3PRCQOJFNIQuWTD
77+
KtChlkq84dQaW8egwMFjeA9ENzAyloAyI5Whd7oT0pdz4l0lyWoNwzlgpLSwaUJC
78+
CenYCLwzILNYIqeq68Th5mGDxdKW39nQT63XAgMBAAGjggEkMIIBIDAdBgNVHQ4E
79+
FgQUsxEyyZKYhOLJ+NA7bgNCyh8OjjwwgdUGA1UdIwSBzTCByoAUJ45nEXTDJh0/
80+
7TNjs6TYHTDl6NWhgZukgZgwgZUxCzAJBgNVBAYTAlVTMRAwDgYDVQQIDAdNb250
81+
YW5hMRAwDgYDVQQHDAdCb3plbWFuMREwDwYDVQQKDAhTYXd0b290aDETMBEGA1UE
82+
CwwKQ29uc3VsdGluZzEYMBYGA1UEAwwPd3d3LndvbGZzc2wuY29tMSAwHgYJKoZI
83+
hvcNAQkBFhFmYWN0c0B3b2xmc3NsLmNvbYIUZxnSqH/jLfp1ek/nsgLZrcR3Xvgw
84+
CQYDVR0TBAIwADALBgNVHQ8EBAMCBaAwDwYDVR0lBAgwBgYEVR0lADANBgkqhkiG
85+
9w0BAQsFAAOCAQEAtmdW5vNzw7S/hZrC6C7tt6gZCV/FcbEDvvy5yGZ3bvdSZ9g5
86+
OnxYflFZY1WgiWSDveT0dDXjmSx7RQkuiKBsCsXjupFHIvg84VVqFncsNwWCsXFD
87+
QIXz+Y33btXhWfMszRgQfqqm9ZfK7aDNU/aWUrlDb7Si1bK/O4ZonlYPtIcpTaEU
88+
YZRyZDesLfdcrRS6ov+x5v2uSCbJpTjnKvIuQQUQ9KoaYrVqNN73aHR4uxYiiXfQ
89+
gvAHvM5OTo+b3wS2gq5LDrnJVzLYMY6PihOh6936IWwkWicWB9cdB3RLnJ+WrlSN
90+
65MQqO8/6iv+iWsnW9Ejp+xDpeukQOGXJFHwgw==
91+
-----END CERTIFICATE-----

‎certs/check_cert_chains.sh‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,11 @@ pairs="rsapss/ecc-leaf-rsapss.pem rsapss/ca-rsapss.pem classic
2121
mldsa/ecc-leaf-mldsa44.pem mldsa/mldsa44-cert.pem mldsa
2222
server-cert-sha1.pem ca-cert.pem sha1
2323
client-cert-sha1.pem ca-cert.pem sha1
24-
server-cert-sha1-root.pem ca-cert.pem classic"
24+
server-cert-sha1-root.pem ca-cert.pem classic
25+
any-eku-cert.pem ca-cert.pem classic
26+
ns-cert-type-cert.pem ca-cert.pem classic
27+
ns-ca-only-cert.pem ca-cert.pem classic
28+
code-sign-cert.pem ca-cert.pem classic"
2529

2630
failed=0
2731

‎certs/code-sign-cert.pem‎

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
-----BEGIN CERTIFICATE-----
2+
MIIE0TCCA7mgAwIBAgIBCzANBgkqhkiG9w0BAQsFADCBlTELMAkGA1UEBhMCVVMx
3+
EDAOBgNVBAgMB01vbnRhbmExEDAOBgNVBAcMB0JvemVtYW4xETAPBgNVBAoMCFNh
4+
d3Rvb3RoMRMwEQYDVQQLDApDb25zdWx0aW5nMRgwFgYDVQQDDA93d3cud29sZnNz
5+
bC5jb20xIDAeBgkqhkiG9w0BCQEWEWZhY3RzQHdvbGZzc2wuY29tMB4XDTI2MDkw
6+
MjA4MDExNVoXDTI5MDUyOTA4MDExNVowgZIxCzAJBgNVBAYTAlVTMRAwDgYDVQQI
7+
DAdNb250YW5hMRAwDgYDVQQHDAdCb3plbWFuMRAwDgYDVQQKDAd3b2xmU1NMMREw
8+
DwYDVQQLDAhDb2RlU2lnbjEYMBYGA1UEAwwPd3d3LndvbGZzc2wuY29tMSAwHgYJ
9+
KoZIhvcNAQkBFhFmYWN0c0B3b2xmc3NsLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
10+
ggEPADCCAQoCggEBAMCVCOFXQfJxbbfSRUEnAWXGRa7yvCQwuJXOL07W9hyIvHyf
11+
+6hnf/5cnFF194rKB+c1L4/hvXvAL3yrZKgX/Mpde7rgIeVyLm8uhtiVc9qsG1O5
12+
Xz/XGQ0lT+FjY1GLC2Q/rUO4pRxcNLOuAKBjxfZ/C1loeHOmjBipAm2vwxkBLrgQ
13+
48bMQLRpo0YzaYduxLsXpvPo3a1zvHsvIbX9ZlEMvVSz4W1fHLwjc9EJA4kU0hC5
14+
ZMMq0KGWSrzh1Bpbx6DAwWN4D0Q3MDKWgDIjlaF3uhPSl3PiXSXJag3DOWCktLBp
15+
QkIJ6dgIvDMgs1gip6rrxOHmYYPF0pbf2dBPrdcCAwEAAaOCASswggEnMB0GA1Ud
16+
DgQWBBSzETLJkpiE4sn40DtuA0LKHw6OPDCB1QYDVR0jBIHNMIHKgBQnjmcRdMMm
17+
HT/tM2OzpNgdMOXo1aGBm6SBmDCBlTELMAkGA1UEBhMCVVMxEDAOBgNVBAgMB01v
18+
bnRhbmExEDAOBgNVBAcMB0JvemVtYW4xETAPBgNVBAoMCFNhd3Rvb3RoMRMwEQYD
19+
VQQLDApDb25zdWx0aW5nMRgwFgYDVQQDDA93d3cud29sZnNzbC5jb20xIDAeBgkq
20+
hkiG9w0BCQEWEWZhY3RzQHdvbGZzc2wuY29tghRnGdKof+Mt+nV6T+eyAtmtxHde
21+
+DAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcD
22+
AzANBgkqhkiG9w0BAQsFAAOCAQEAWNcuUFFKcIucIE1+YrPItb7fLvktk4tVSgpz
23+
BK5tI2zp/etq4YMqv04hAGUZ26VXriiJwgAxRo/d/bMAnOJpsWD4r/QjcAiCqvAS
24+
d2tk0eqfHbLOI/hQPowDddUKzM+MeEV0G+GgV4hTMBAEICYdCk9DjlSefHdtnaHD
25+
Qh5I2Fa/ERK9L8cQGDZ0xfH5Uxn8TmAtH+4BX0NbDjkRkb/4HrpNeVgSbA+9OTOk
26+
Oiq3EonyAVqWrIWeZBfM2hX8ynUJbrpK1/C7T+wCV9MGlHRudY9al6ujBqfhgock
27+
VkAEsL8m8vUdtURYSWi0f+72OgqjNjtXZl1GIBoAhdfkJdvy6w==
28+
-----END CERTIFICATE-----

‎certs/include.am‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -92,6 +92,12 @@ EXTRA_DIST += \
9292
certs/fpki-cert.der \
9393
certs/fpki-certpol-cert.der \
9494
certs/rid-cert.der \
95+
certs/any-eku-cert.pem \
96+
certs/ns-cert-type-cert.pem \
97+
certs/ns-ca-only-cert.pem \
98+
certs/code-sign-cert.pem \
99+
certs/v1-root-cert.pem \
100+
certs/v1-self-issued-cert.pem \
95101
certs/dh-priv-2048.der \
96102
certs/dh-priv-2048.pem \
97103
certs/dh-pub-2048.der \

‎certs/ns-ca-only-cert.pem‎

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
-----BEGIN CERTIFICATE-----
2+
MIIEtDCCA5ygAwIBAgIBCjANBgkqhkiG9w0BAQsFADCBlTELMAkGA1UEBhMCVVMx
3+
EDAOBgNVBAgMB01vbnRhbmExEDAOBgNVBAcMB0JvemVtYW4xETAPBgNVBAoMCFNh
4+
d3Rvb3RoMRMwEQYDVQQLDApDb25zdWx0aW5nMRgwFgYDVQQDDA93d3cud29sZnNz
5+
bC5jb20xIDAeBgkqhkiG9w0BCQEWEWZhY3RzQHdvbGZzc2wuY29tMB4XDTI2MDkw
6+
MjA3NDE1OFoXDTI5MDUyOTA3NDE1OFowgZIxCzAJBgNVBAYTAlVTMRAwDgYDVQQI
7+
DAdNb250YW5hMRAwDgYDVQQHDAdCb3plbWFuMRAwDgYDVQQKDAd3b2xmU1NMMREw
8+
DwYDVQQLDAhOc0NhT25seTEYMBYGA1UEAwwPd3d3LndvbGZzc2wuY29tMSAwHgYJ
9+
KoZIhvcNAQkBFhFmYWN0c0B3b2xmc3NsLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
10+
ggEPADCCAQoCggEBAMCVCOFXQfJxbbfSRUEnAWXGRa7yvCQwuJXOL07W9hyIvHyf
11+
+6hnf/5cnFF194rKB+c1L4/hvXvAL3yrZKgX/Mpde7rgIeVyLm8uhtiVc9qsG1O5
12+
Xz/XGQ0lT+FjY1GLC2Q/rUO4pRxcNLOuAKBjxfZ/C1loeHOmjBipAm2vwxkBLrgQ
13+
48bMQLRpo0YzaYduxLsXpvPo3a1zvHsvIbX9ZlEMvVSz4W1fHLwjc9EJA4kU0hC5
14+
ZMMq0KGWSrzh1Bpbx6DAwWN4D0Q3MDKWgDIjlaF3uhPSl3PiXSXJag3DOWCktLBp
15+
QkIJ6dgIvDMgs1gip6rrxOHmYYPF0pbf2dBPrdcCAwEAAaOCAQ4wggEKMB0GA1Ud
16+
DgQWBBSzETLJkpiE4sn40DtuA0LKHw6OPDCB1QYDVR0jBIHNMIHKgBQnjmcRdMMm
17+
HT/tM2OzpNgdMOXo1aGBm6SBmDCBlTELMAkGA1UEBhMCVVMxEDAOBgNVBAgMB01v
18+
bnRhbmExEDAOBgNVBAcMB0JvemVtYW4xETAPBgNVBAoMCFNhd3Rvb3RoMRMwEQYD
19+
VQQLDApDb25zdWx0aW5nMRgwFgYDVQQDDA93d3cud29sZnNzbC5jb20xIDAeBgkq
20+
hkiG9w0BCQEWEWZhY3RzQHdvbGZzc2wuY29tghRnGdKof+Mt+nV6T+eyAtmtxHde
21+
+DARBglghkgBhvhCAQEEBAMCAgQwDQYJKoZIhvcNAQELBQADggEBAF1cEysIplz3
22+
RNxaFTGxOQrvX9WidcBbWzBECrpIjOhT0+x/kZNUdC4cT4cjiQdu0GSwb6dNv5nS
23+
8nvBypvfw7q5v7VMRBuz7379A0gF4OXaOjAxn0rgi8GADDqzyGS/KTb01ZAZO66T
24+
WJ3OnWT3JoypLbX/3URLY5d9mLX6y/zoLsScm1k1FiYDxjeEUf5ucbdqw2FkNqQA
25+
t0rpeVqrAHIMZ08DXJy6+fAg7h2wvKDEVvIfDGTSdGnLyKEkk46B8agYoLnFwqkw
26+
a/CzizH5vJQGJrwV9TiC7igmGkEJoIoCMYSwJLjie8Jiua/HRWnwPnosGlBGbWnq
27+
FziSMN5OVJE=
28+
-----END CERTIFICATE-----

‎certs/ns-cert-type-cert.pem‎

Lines changed: 94 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,94 @@
1+
Certificate:
2+
Data:
3+
Version: 3 (0x2)
4+
Serial Number: 9 (0x9)
5+
Signature Algorithm: sha256WithRSAEncryption
6+
Issuer: C=US, ST=Montana, L=Bozeman, O=Sawtooth, OU=Consulting, CN=www.wolfssl.com, emailAddress=facts@wolfssl.com
7+
Validity
8+
Not Before: Sep 2 00:51:23 2026 GMT
9+
Not After : May 29 00:51:23 2029 GMT
10+
Subject: C=US, ST=Montana, L=Bozeman, O=wolfSSL, OU=NsCertType, CN=www.wolfssl.com, emailAddress=facts@wolfssl.com
11+
Subject Public Key Info:
12+
Public Key Algorithm: rsaEncryption
13+
Public-Key: (2048 bit)
14+
Modulus:
15+
00:c0:95:08:e1:57:41:f2:71:6d:b7:d2:45:41:27:
16+
01:65:c6:45:ae:f2:bc:24:30:b8:95:ce:2f:4e:d6:
17+
f6:1c:88:bc:7c:9f:fb:a8:67:7f:fe:5c:9c:51:75:
18+
f7:8a:ca:07:e7:35:2f:8f:e1:bd:7b:c0:2f:7c:ab:
19+
64:a8:17:fc:ca:5d:7b:ba:e0:21:e5:72:2e:6f:2e:
20+
86:d8:95:73:da:ac:1b:53:b9:5f:3f:d7:19:0d:25:
21+
4f:e1:63:63:51:8b:0b:64:3f:ad:43:b8:a5:1c:5c:
22+
34:b3:ae:00:a0:63:c5:f6:7f:0b:59:68:78:73:a6:
23+
8c:18:a9:02:6d:af:c3:19:01:2e:b8:10:e3:c6:cc:
24+
40:b4:69:a3:46:33:69:87:6e:c4:bb:17:a6:f3:e8:
25+
dd:ad:73:bc:7b:2f:21:b5:fd:66:51:0c:bd:54:b3:
26+
e1:6d:5f:1c:bc:23:73:d1:09:03:89:14:d2:10:b9:
27+
64:c3:2a:d0:a1:96:4a:bc:e1:d4:1a:5b:c7:a0:c0:
28+
c1:63:78:0f:44:37:30:32:96:80:32:23:95:a1:77:
29+
ba:13:d2:97:73:e2:5d:25:c9:6a:0d:c3:39:60:a4:
30+
b4:b0:69:42:42:09:e9:d8:08:bc:33:20:b3:58:22:
31+
a7:aa:eb:c4:e1:e6:61:83:c5:d2:96:df:d9:d0:4f:
32+
ad:d7
33+
Exponent: 65537 (0x10001)
34+
X509v3 extensions:
35+
X509v3 Subject Key Identifier:
36+
B3:11:32:C9:92:98:84:E2:C9:F8:D0:3B:6E:03:42:CA:1F:0E:8E:3C
37+
X509v3 Authority Key Identifier:
38+
keyid:27:8E:67:11:74:C3:26:1D:3F:ED:33:63:B3:A4:D8:1D:30:E5:E8:D5
39+
DirName:/C=US/ST=Montana/L=Bozeman/O=Sawtooth/OU=Consulting/CN=www.wolfssl.com/emailAddress=facts@wolfssl.com
40+
serial:67:19:D2:A8:7F:E3:2D:FA:75:7A:4F:E7:B2:02:D9:AD:C4:77:5E:F8
41+
X509v3 Basic Constraints:
42+
CA:FALSE
43+
X509v3 Key Usage:
44+
Digital Signature, Key Encipherment
45+
X509v3 Extended Key Usage:
46+
TLS Web Server Authentication, TLS Web Client Authentication
47+
Netscape Cert Type:
48+
SSL Client
49+
Signature Algorithm: sha256WithRSAEncryption
50+
Signature Value:
51+
45:f2:69:de:54:df:5c:69:6c:a1:2b:e2:78:07:a2:1a:11:3f:
52+
04:e8:c8:0c:4e:fe:0d:e5:72:a7:92:b1:6b:b2:48:f4:59:19:
53+
c3:b6:3b:b6:52:c8:b9:76:83:85:0b:f5:b5:fd:20:ff:77:e6:
54+
f9:b1:77:d7:eb:58:6f:cd:16:f4:11:b5:9c:61:16:7e:1f:92:
55+
68:98:9c:16:35:cd:98:ae:40:f4:84:96:45:40:8b:3c:31:4d:
56+
3d:38:1f:57:3b:13:15:40:a7:e6:ad:ca:18:4b:91:18:e5:9d:
57+
92:95:3d:1d:c4:a0:2d:74:37:ae:9e:72:d5:e5:cd:0f:24:c3:
58+
80:11:ed:39:61:6b:d4:14:9a:a6:c0:ee:21:32:2a:99:c5:e8:
59+
e8:c6:95:f4:4d:12:59:12:67:aa:59:e2:c4:66:7b:e2:e2:ab:
60+
4c:b9:d9:63:d7:f8:32:70:d2:15:76:88:cd:c3:9a:00:45:5d:
61+
32:f1:6d:c1:fb:05:13:c2:d1:70:55:60:b5:14:27:d8:eb:c6:
62+
20:fb:81:28:08:4d:8b:bd:95:17:52:98:e6:62:79:8e:30:1f:
63+
d9:ef:93:c9:a4:6c:5a:f4:34:4b:2b:cc:29:91:90:96:2e:75:
64+
1a:44:49:c9:98:a1:6d:3f:ae:7e:e3:57:06:dc:d0:23:78:cd:
65+
f3:1c:65:54
66+
-----BEGIN CERTIFICATE-----
67+
MIIE7TCCA9WgAwIBAgIBCTANBgkqhkiG9w0BAQsFADCBlTELMAkGA1UEBhMCVVMx
68+
EDAOBgNVBAgMB01vbnRhbmExEDAOBgNVBAcMB0JvemVtYW4xETAPBgNVBAoMCFNh
69+
d3Rvb3RoMRMwEQYDVQQLDApDb25zdWx0aW5nMRgwFgYDVQQDDA93d3cud29sZnNz
70+
bC5jb20xIDAeBgkqhkiG9w0BCQEWEWZhY3RzQHdvbGZzc2wuY29tMB4XDTI2MDkw
71+
MjAwNTEyM1oXDTI5MDUyOTAwNTEyM1owgZQxCzAJBgNVBAYTAlVTMRAwDgYDVQQI
72+
DAdNb250YW5hMRAwDgYDVQQHDAdCb3plbWFuMRAwDgYDVQQKDAd3b2xmU1NMMRMw
73+
EQYDVQQLDApOc0NlcnRUeXBlMRgwFgYDVQQDDA93d3cud29sZnNzbC5jb20xIDAe
74+
BgkqhkiG9w0BCQEWEWZhY3RzQHdvbGZzc2wuY29tMIIBIjANBgkqhkiG9w0BAQEF
75+
AAOCAQ8AMIIBCgKCAQEAwJUI4VdB8nFtt9JFQScBZcZFrvK8JDC4lc4vTtb2HIi8
76+
fJ/7qGd//lycUXX3isoH5zUvj+G9e8AvfKtkqBf8yl17uuAh5XIuby6G2JVz2qwb
77+
U7lfP9cZDSVP4WNjUYsLZD+tQ7ilHFw0s64AoGPF9n8LWWh4c6aMGKkCba/DGQEu
78+
uBDjxsxAtGmjRjNph27Euxem8+jdrXO8ey8htf1mUQy9VLPhbV8cvCNz0QkDiRTS
79+
ELlkwyrQoZZKvOHUGlvHoMDBY3gPRDcwMpaAMiOVoXe6E9KXc+JdJclqDcM5YKS0
80+
sGlCQgnp2Ai8MyCzWCKnquvE4eZhg8XSlt/Z0E+t1wIDAQABo4IBRTCCAUEwHQYD
81+
VR0OBBYEFLMRMsmSmITiyfjQO24DQsofDo48MIHVBgNVHSMEgc0wgcqAFCeOZxF0
82+
wyYdP+0zY7Ok2B0w5ejVoYGbpIGYMIGVMQswCQYDVQQGEwJVUzEQMA4GA1UECAwH
83+
TW9udGFuYTEQMA4GA1UEBwwHQm96ZW1hbjERMA8GA1UECgwIU2F3dG9vdGgxEzAR
84+
BgNVBAsMCkNvbnN1bHRpbmcxGDAWBgNVBAMMD3d3dy53b2xmc3NsLmNvbTEgMB4G
85+
CSqGSIb3DQEJARYRZmFjdHNAd29sZnNzbC5jb22CFGcZ0qh/4y36dXpP57IC2a3E
86+
d174MAkGA1UdEwQCMAAwCwYDVR0PBAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
87+
BggrBgEFBQcDAjARBglghkgBhvhCAQEEBAMCB4AwDQYJKoZIhvcNAQELBQADggEB
88+
AEXyad5U31xpbKEr4ngHohoRPwToyAxO/g3lcqeSsWuySPRZGcO2O7ZSyLl2g4UL
89+
9bX9IP935vmxd9frWG/NFvQRtZxhFn4fkmiYnBY1zZiuQPSElkVAizwxTT04H1c7
90+
ExVAp+atyhhLkRjlnZKVPR3EoC10N66ectXlzQ8kw4AR7Tlha9QUmqbA7iEyKpnF
91+
6OjGlfRNElkSZ6pZ4sRme+Liq0y52WPX+DJw0hV2iM3DmgBFXTLxbcH7BRPC0XBV
92+
YLUUJ9jrxiD7gSgITYu9lRdSmOZieY4wH9nvk8mkbFr0NEsrzCmRkJYudRpEScmY
93+
oW0/rn7jVwbc0CN4zfMcZVQ=
94+
-----END CERTIFICATE-----

0 commit comments

Comments
 (0)