Skip to content

Commit da4fc1c

Browse files
padelsbachpadelsbach
committed
Add cert/CRL capabilities: skid, akid, dist point, netscape
1 parent 46192d8 commit da4fc1c

12 files changed

Lines changed: 1179 additions & 5 deletions

‎compile_commands.json‎

Lines changed: 288 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,288 @@
1+
[
2+
{
3+
"arguments": [
4+
"/usr/bin/gcc",
5+
"-Wall",
6+
"-c",
7+
"-fPIC",
8+
"-DWOLFSSL_PR7430_PATCH_APPLIED",
9+
"-DWOLFSSL_PR9631_PATCH_APPLIED",
10+
"-DWOLFSSL_PR9705_PATCH_APPLIED",
11+
"-DWOLFSSL_PR9713_PATCH_APPLIED",
12+
"-DWOLFSSL_PR9728_PATCH_APPLIED",
13+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include",
14+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include/linux",
15+
"-I/usr/local/include",
16+
"-o",
17+
"./native/com_wolfssl_WolfSSL.o",
18+
"./native/com_wolfssl_WolfSSL.c"
19+
],
20+
"directory": "/git/wolfssljni",
21+
"file": "/git/wolfssljni/native/com_wolfssl_WolfSSL.c",
22+
"output": "/git/wolfssljni/native/com_wolfssl_WolfSSL.o"
23+
},
24+
{
25+
"arguments": [
26+
"/usr/bin/gcc",
27+
"-Wall",
28+
"-c",
29+
"-fPIC",
30+
"-DWOLFSSL_PR7430_PATCH_APPLIED",
31+
"-DWOLFSSL_PR9631_PATCH_APPLIED",
32+
"-DWOLFSSL_PR9705_PATCH_APPLIED",
33+
"-DWOLFSSL_PR9713_PATCH_APPLIED",
34+
"-DWOLFSSL_PR9728_PATCH_APPLIED",
35+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include",
36+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include/linux",
37+
"-I/usr/local/include",
38+
"-o",
39+
"./native/com_wolfssl_WolfSSLSession.o",
40+
"./native/com_wolfssl_WolfSSLSession.c"
41+
],
42+
"directory": "/git/wolfssljni",
43+
"file": "/git/wolfssljni/native/com_wolfssl_WolfSSLSession.c",
44+
"output": "/git/wolfssljni/native/com_wolfssl_WolfSSLSession.o"
45+
},
46+
{
47+
"arguments": [
48+
"/usr/bin/gcc",
49+
"-Wall",
50+
"-c",
51+
"-fPIC",
52+
"-DWOLFSSL_PR7430_PATCH_APPLIED",
53+
"-DWOLFSSL_PR9631_PATCH_APPLIED",
54+
"-DWOLFSSL_PR9705_PATCH_APPLIED",
55+
"-DWOLFSSL_PR9713_PATCH_APPLIED",
56+
"-DWOLFSSL_PR9728_PATCH_APPLIED",
57+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include",
58+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include/linux",
59+
"-I/usr/local/include",
60+
"-o",
61+
"./native/com_wolfssl_WolfSSLContext.o",
62+
"./native/com_wolfssl_WolfSSLContext.c"
63+
],
64+
"directory": "/git/wolfssljni",
65+
"file": "/git/wolfssljni/native/com_wolfssl_WolfSSLContext.c",
66+
"output": "/git/wolfssljni/native/com_wolfssl_WolfSSLContext.o"
67+
},
68+
{
69+
"arguments": [
70+
"/usr/bin/gcc",
71+
"-Wall",
72+
"-c",
73+
"-fPIC",
74+
"-DWOLFSSL_PR7430_PATCH_APPLIED",
75+
"-DWOLFSSL_PR9631_PATCH_APPLIED",
76+
"-DWOLFSSL_PR9705_PATCH_APPLIED",
77+
"-DWOLFSSL_PR9713_PATCH_APPLIED",
78+
"-DWOLFSSL_PR9728_PATCH_APPLIED",
79+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include",
80+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include/linux",
81+
"-I/usr/local/include",
82+
"-o",
83+
"./native/com_wolfssl_WolfCryptRSA.o",
84+
"./native/com_wolfssl_WolfCryptRSA.c"
85+
],
86+
"directory": "/git/wolfssljni",
87+
"file": "/git/wolfssljni/native/com_wolfssl_WolfCryptRSA.c",
88+
"output": "/git/wolfssljni/native/com_wolfssl_WolfCryptRSA.o"
89+
},
90+
{
91+
"arguments": [
92+
"/usr/bin/gcc",
93+
"-Wall",
94+
"-c",
95+
"-fPIC",
96+
"-DWOLFSSL_PR7430_PATCH_APPLIED",
97+
"-DWOLFSSL_PR9631_PATCH_APPLIED",
98+
"-DWOLFSSL_PR9705_PATCH_APPLIED",
99+
"-DWOLFSSL_PR9713_PATCH_APPLIED",
100+
"-DWOLFSSL_PR9728_PATCH_APPLIED",
101+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include",
102+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include/linux",
103+
"-I/usr/local/include",
104+
"-o",
105+
"./native/com_wolfssl_WolfCryptECC.o",
106+
"./native/com_wolfssl_WolfCryptECC.c"
107+
],
108+
"directory": "/git/wolfssljni",
109+
"file": "/git/wolfssljni/native/com_wolfssl_WolfCryptECC.c",
110+
"output": "/git/wolfssljni/native/com_wolfssl_WolfCryptECC.o"
111+
},
112+
{
113+
"arguments": [
114+
"/usr/bin/gcc",
115+
"-Wall",
116+
"-c",
117+
"-fPIC",
118+
"-DWOLFSSL_PR7430_PATCH_APPLIED",
119+
"-DWOLFSSL_PR9631_PATCH_APPLIED",
120+
"-DWOLFSSL_PR9705_PATCH_APPLIED",
121+
"-DWOLFSSL_PR9713_PATCH_APPLIED",
122+
"-DWOLFSSL_PR9728_PATCH_APPLIED",
123+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include",
124+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include/linux",
125+
"-I/usr/local/include",
126+
"-o",
127+
"./native/com_wolfssl_WolfCryptEccKey.o",
128+
"./native/com_wolfssl_WolfCryptEccKey.c"
129+
],
130+
"directory": "/git/wolfssljni",
131+
"file": "/git/wolfssljni/native/com_wolfssl_WolfCryptEccKey.c",
132+
"output": "/git/wolfssljni/native/com_wolfssl_WolfCryptEccKey.o"
133+
},
134+
{
135+
"arguments": [
136+
"/usr/bin/gcc",
137+
"-Wall",
138+
"-c",
139+
"-fPIC",
140+
"-DWOLFSSL_PR7430_PATCH_APPLIED",
141+
"-DWOLFSSL_PR9631_PATCH_APPLIED",
142+
"-DWOLFSSL_PR9705_PATCH_APPLIED",
143+
"-DWOLFSSL_PR9713_PATCH_APPLIED",
144+
"-DWOLFSSL_PR9728_PATCH_APPLIED",
145+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include",
146+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include/linux",
147+
"-I/usr/local/include",
148+
"-o",
149+
"./native/com_wolfssl_WolfSSLCertManager.o",
150+
"./native/com_wolfssl_WolfSSLCertManager.c"
151+
],
152+
"directory": "/git/wolfssljni",
153+
"file": "/git/wolfssljni/native/com_wolfssl_WolfSSLCertManager.c",
154+
"output": "/git/wolfssljni/native/com_wolfssl_WolfSSLCertManager.o"
155+
},
156+
{
157+
"arguments": [
158+
"/usr/bin/gcc",
159+
"-Wall",
160+
"-c",
161+
"-fPIC",
162+
"-DWOLFSSL_PR7430_PATCH_APPLIED",
163+
"-DWOLFSSL_PR9631_PATCH_APPLIED",
164+
"-DWOLFSSL_PR9705_PATCH_APPLIED",
165+
"-DWOLFSSL_PR9713_PATCH_APPLIED",
166+
"-DWOLFSSL_PR9728_PATCH_APPLIED",
167+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include",
168+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include/linux",
169+
"-I/usr/local/include",
170+
"-o",
171+
"./native/com_wolfssl_WolfSSLCertRequest.o",
172+
"./native/com_wolfssl_WolfSSLCertRequest.c"
173+
],
174+
"directory": "/git/wolfssljni",
175+
"file": "/git/wolfssljni/native/com_wolfssl_WolfSSLCertRequest.c",
176+
"output": "/git/wolfssljni/native/com_wolfssl_WolfSSLCertRequest.o"
177+
},
178+
{
179+
"arguments": [
180+
"/usr/bin/gcc",
181+
"-Wall",
182+
"-c",
183+
"-fPIC",
184+
"-DWOLFSSL_PR7430_PATCH_APPLIED",
185+
"-DWOLFSSL_PR9631_PATCH_APPLIED",
186+
"-DWOLFSSL_PR9705_PATCH_APPLIED",
187+
"-DWOLFSSL_PR9713_PATCH_APPLIED",
188+
"-DWOLFSSL_PR9728_PATCH_APPLIED",
189+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include",
190+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include/linux",
191+
"-I/usr/local/include",
192+
"-o",
193+
"./native/com_wolfssl_WolfSSLCertificate.o",
194+
"./native/com_wolfssl_WolfSSLCertificate.c"
195+
],
196+
"directory": "/git/wolfssljni",
197+
"file": "/git/wolfssljni/native/com_wolfssl_WolfSSLCertificate.c",
198+
"output": "/git/wolfssljni/native/com_wolfssl_WolfSSLCertificate.o"
199+
},
200+
{
201+
"arguments": [
202+
"/usr/bin/gcc",
203+
"-Wall",
204+
"-c",
205+
"-fPIC",
206+
"-DWOLFSSL_PR7430_PATCH_APPLIED",
207+
"-DWOLFSSL_PR9631_PATCH_APPLIED",
208+
"-DWOLFSSL_PR9705_PATCH_APPLIED",
209+
"-DWOLFSSL_PR9713_PATCH_APPLIED",
210+
"-DWOLFSSL_PR9728_PATCH_APPLIED",
211+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include",
212+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include/linux",
213+
"-I/usr/local/include",
214+
"-o",
215+
"./native/com_wolfssl_WolfSSLCRL.o",
216+
"./native/com_wolfssl_WolfSSLCRL.c"
217+
],
218+
"directory": "/git/wolfssljni",
219+
"file": "/git/wolfssljni/native/com_wolfssl_WolfSSLCRL.c",
220+
"output": "/git/wolfssljni/native/com_wolfssl_WolfSSLCRL.o"
221+
},
222+
{
223+
"arguments": [
224+
"/usr/bin/gcc",
225+
"-Wall",
226+
"-c",
227+
"-fPIC",
228+
"-DWOLFSSL_PR7430_PATCH_APPLIED",
229+
"-DWOLFSSL_PR9631_PATCH_APPLIED",
230+
"-DWOLFSSL_PR9705_PATCH_APPLIED",
231+
"-DWOLFSSL_PR9713_PATCH_APPLIED",
232+
"-DWOLFSSL_PR9728_PATCH_APPLIED",
233+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include",
234+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include/linux",
235+
"-I/usr/local/include",
236+
"-o",
237+
"./native/com_wolfssl_WolfSSLX509Name.o",
238+
"./native/com_wolfssl_WolfSSLX509Name.c"
239+
],
240+
"directory": "/git/wolfssljni",
241+
"file": "/git/wolfssljni/native/com_wolfssl_WolfSSLX509Name.c",
242+
"output": "/git/wolfssljni/native/com_wolfssl_WolfSSLX509Name.o"
243+
},
244+
{
245+
"arguments": [
246+
"/usr/bin/gcc",
247+
"-Wall",
248+
"-c",
249+
"-fPIC",
250+
"-DWOLFSSL_PR7430_PATCH_APPLIED",
251+
"-DWOLFSSL_PR9631_PATCH_APPLIED",
252+
"-DWOLFSSL_PR9705_PATCH_APPLIED",
253+
"-DWOLFSSL_PR9713_PATCH_APPLIED",
254+
"-DWOLFSSL_PR9728_PATCH_APPLIED",
255+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include",
256+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include/linux",
257+
"-I/usr/local/include",
258+
"-o",
259+
"./native/com_wolfssl_WolfSSLX509StoreCtx.o",
260+
"./native/com_wolfssl_WolfSSLX509StoreCtx.c"
261+
],
262+
"directory": "/git/wolfssljni",
263+
"file": "/git/wolfssljni/native/com_wolfssl_WolfSSLX509StoreCtx.c",
264+
"output": "/git/wolfssljni/native/com_wolfssl_WolfSSLX509StoreCtx.o"
265+
},
266+
{
267+
"arguments": [
268+
"/usr/bin/gcc",
269+
"-Wall",
270+
"-c",
271+
"-fPIC",
272+
"-DWOLFSSL_PR7430_PATCH_APPLIED",
273+
"-DWOLFSSL_PR9631_PATCH_APPLIED",
274+
"-DWOLFSSL_PR9705_PATCH_APPLIED",
275+
"-DWOLFSSL_PR9713_PATCH_APPLIED",
276+
"-DWOLFSSL_PR9728_PATCH_APPLIED",
277+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include",
278+
"-I/usr/lib/jvm/java-21-openjdk-arm64/include/linux",
279+
"-I/usr/local/include",
280+
"-o",
281+
"./native/com_wolfssl_WolfSSLNameConstraints.o",
282+
"./native/com_wolfssl_WolfSSLNameConstraints.c"
283+
],
284+
"directory": "/git/wolfssljni",
285+
"file": "/git/wolfssljni/native/com_wolfssl_WolfSSLNameConstraints.c",
286+
"output": "/git/wolfssljni/native/com_wolfssl_WolfSSLNameConstraints.o"
287+
}
288+
]

‎examples/certs/test/crl-dp-cert.pem‎

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
-----BEGIN CERTIFICATE-----
2+
MIIDbTCCAlWgAwIBAgIUZqjaWzuAIDjJjqQW/x9Lyn5H2McwDQYJKoZIhvcNAQEL
3+
BQAwOjEUMBIGA1UEAwwLVGVzdCBDUkwgRFAxFTATBgNVBAoMDHdvbGZTU0wgVGVz
4+
dDELMAkGA1UEBhMCVVMwHhcNMjYwMjA5MTgxMTQzWhcNMjcwMjA5MTgxMTQzWjA6
5+
MRQwEgYDVQQDDAtUZXN0IENSTCBEUDEVMBMGA1UECgwMd29sZlNTTCBUZXN0MQsw
6+
CQYDVQQGEwJVUzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALP/1lo5
7+
T10/LJAck3ImKvrinzS1oubA/YP/w2NTJLzlZQtbvNPW4WhY2LcuUWOSv/VmMSpq
8+
J/mEqEn8P9CfIgtRo0z39+HJJ3aE3ClioH6fTpj284nHZnJdYQFy/9+T4DTLcuiJ
9+
VILqRotqH06JRU4mhR2hqiw7YHI76BlPJAB9pVwGbit6BKWbF5vJRy440AYNCWjs
10+
t/NEhrKnCJugaPqvyhH9ByWI8/wPeyFNXUpuEiZVg+rSYwPr0w4kVBRUVWnDxEam
11+
WKEEPSM1CdY2LJGDT6Qjm6WyVQbWppu1mz6Dg+nvw+h125PyW4Cyim6HAFj3IJcI
12+
6YcDC2lGep7PNmECAwEAAaNrMGkwCQYDVR0TBAIwADALBgNVHQ8EBAMCB4AwMAYD
13+
VR0fBCkwJzAloCOgIYYfaHR0cDovL2NybC5leGFtcGxlLmNvbS90ZXN0LmNybDAd
14+
BgNVHQ4EFgQUXEABbBfseiUjqacQWYMRluxQV+kwDQYJKoZIhvcNAQELBQADggEB
15+
AF21pa2SQXeqmDtYLvhwNWpwpt814nRfejAzlLBLpJB8nf1NE89a53U7ELbZMPNj
16+
tQC/ADNoNGFQmSaPNytXtHNslPM17kSWN+6/JFhKGcWHXgPPM4E5VOZ94H1BK4fh
17+
PMCfMMh+826Y+RK/nsi4NnlmeJy5/QdRgbDfGY4ZZECssHSIbKPP7pgxH/YzDUd/
18+
HIzf5vXeiUG7PXXJhzA38k1HRhuyxOYnsrLMYw/FsDOl/knhH9dF8f+XFVHuFfQv
19+
GH9cm+btX0gM1EaBi1huQcYYNRp2BSa2qSjIeDRg5Bs4i5BENh7wVtZDheGD0SpE
20+
3jhznnX5L4CwmLzlfQkARuU=
21+
-----END CERTIFICATE-----

‎examples/certs/update-certs.sh‎

Lines changed: 31 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -98,6 +98,37 @@ if [ $? -ne 0 ]; then
9898
fi
9999
printf "Generated ca-keyPkcs8.der\n"
100100

101+
# Generate CRL Distribution Points test cert
102+
printf "Generating test/crl-dp-cert.pem\n"
103+
mkdir -p test
104+
TMP_DIR="$(mktemp -d)"
105+
cat > "${TMP_DIR}/openssl.cnf" <<EOF
106+
[ req ]
107+
distinguished_name = dn
108+
x509_extensions = v3_req
109+
prompt = no
110+
111+
[ dn ]
112+
CN = Test CRL DP
113+
O = wolfSSL Test
114+
C = US
115+
116+
[ v3_req ]
117+
basicConstraints = CA:FALSE
118+
keyUsage = digitalSignature
119+
crlDistributionPoints = URI:http://crl.example.com/test.crl
120+
EOF
121+
122+
openssl req -new -newkey rsa:2048 -nodes -x509 -days 365 \
123+
-keyout "${TMP_DIR}/crl-dp-key.pem" -out test/crl-dp-cert.pem \
124+
-config "${TMP_DIR}/openssl.cnf" >/dev/null 2>&1
125+
if [ $? -ne 0 ]; then
126+
printf "Failed to generate test/crl-dp-cert.pem\n"
127+
rm -rf "${TMP_DIR}"
128+
exit 1
129+
fi
130+
rm -rf "${TMP_DIR}"
131+
101132
# Remove text info from intermediate certs, causes issues on Android (WRONG TAG)
102133
printf "Removing text info from intermediate certs\n"
103134
sed -i.bak -n '/-----BEGIN CERTIFICATE-----/,$p' ca-cert.pem
@@ -131,4 +162,3 @@ else
131162
fi
132163

133164
printf "\nFinished successfully\n"
134-

0 commit comments

Comments
 (0)