Lines Matching +full:- +full:- +full:valid +full:- +full:-
2 # Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.
13 if ( -f "../apps/openssl" ) {
16 elsif ( -f "..\\out32dll\\openssl.exe" ) {
19 elsif ( -f "..\\out32\\openssl.exe" ) {
29 die "Can't find PKITS test data" if !-d $pkitsdir;
46 [ "4.1.1", "Valid Signatures Test1", 0 ],
49 [ "4.1.4", "Valid DSA Signatures Test4", 0 ],
50 [ "4.1.5", "Valid DSA Parameter Inheritance Test5", 0 ],
55 [ "4.2.3", "Valid pre2000 UTC notBefore Date Test3", 0 ],
56 [ "4.2.4", "Valid GeneralizedTime notBefore Date Test4", 0 ],
60 [ "4.2.8", "Valid GeneralizedTime notAfter Date Test8", 0 ],
64 [ "4.3.3", "Valid Name Chaining Whitespace Test3", 0 ],
65 [ "4.3.4", "Valid Name Chaining Whitespace Test4", 0 ],
66 [ "4.3.5", "Valid Name Chaining Capitalization Test5", 0 ],
67 [ "4.3.6", "Valid Name Chaining UIDs Test6", 0 ],
68 [ "4.3.7", "Valid RFC3280 Mandatory Attribute Types Test7", 0 ],
69 [ "4.3.8", "Valid RFC3280 Optional Attribute Types Test8", 0 ],
70 [ "4.3.9", "Valid UTF8String Encoded Names Test9", 0 ],
71 [ "4.3.10", "Valid Rollover from PrintableString to UTF8String Test10", 0 ],
72 [ "4.3.11", "Valid UTF8String Case Insensitive Match Test11", 0 ],
80 [ "4.4.7", "Valid Two CRLs Test7", 0 ],
91 [ "4.4.13", "Valid GeneralizedTime CRL nextUpdate Test13", 0 ],
92 [ "4.4.14", "Valid Negative Serial Number Test14", 0 ],
94 [ "4.4.16", "Valid Long Serial Number Test16", 0 ],
95 [ "4.4.17", "Valid Long Serial Number Test17", 0 ],
97 [ "4.4.19", "Valid Separate Certificate and CRL Keys Test19", 0 ],
102 [ "4.5", "Verifying Paths with Self-Issued Certificates" ],
103 [ "4.5.1", "Valid Basic Self-Issued Old With New Test1", 0 ],
104 [ "4.5.2", "Invalid Basic Self-Issued Old With New Test2", 23 ],
105 [ "4.5.3", "Valid Basic Self-Issued New With Old Test3", 0 ],
106 [ "4.5.4", "Valid Basic Self-Issued New With Old Test4", 0 ],
107 [ "4.5.5", "Invalid Basic Self-Issued New With Old Test5", 23 ],
108 [ "4.5.6", "Valid Basic Self-Issued CRL Signing Key Test6", 0 ],
109 [ "4.5.7", "Invalid Basic Self-Issued CRL Signing Key Test7", 23 ],
110 [ "4.5.8", "Invalid Basic Self-Issued CRL Signing Key Test8", 20 ],
115 [ "4.6.4", "Valid basicConstraints Not Critical Test4", 0 ],
118 [ "4.6.7", "Valid pathLenConstraint Test7", 0 ],
119 [ "4.6.8", "Valid pathLenConstraint Test8", 0 ],
124 [ "4.6.13", "Valid pathLenConstraint Test13", 0 ],
125 [ "4.6.14", "Valid pathLenConstraint Test14", 0 ],
126 [ "4.6.15", "Valid Self-Issued pathLenConstraint Test15", 0 ],
127 [ "4.6.16", "Invalid Self-Issued pathLenConstraint Test16", 25 ],
128 [ "4.6.17", "Valid Self-Issued pathLenConstraint Test17", 0 ],
132 [ "4.7.3", "Valid keyUsage Not Critical Test3", 0 ],
143 "-policy anyPolicy -explicit_policy",
149 "-policy $nist1 -explicit_policy",
155 "-policy $nist2 -explicit_policy",
161 "-policy $nist1 -policy $nist2 -explicit_policy",
167 "-policy anyPolicy",
173 "-policy anyPolicy -explicit_policy",
179 "-policy anyPolicy",
185 "-policy anyPolicy -explicit_policy",
191 "-policy $nist1 -policy $nist2 -explicit_policy",
198 "-policy anyPolicy",
204 "-policy anyPolicy",
210 "-policy anyPolicy",
216 "-policy $nist1",
222 "-policy $nist2",
228 "-policy anyPolicy",
234 "-policy anyPolicy",
240 "-policy anyPolicy",
246 "-policy $nist1",
252 "-policy $nist2",
258 "-policy anyPolicy",
264 "-policy anyPolicy",
270 "-policy $nist1",
276 "-policy anyPolicy",
282 "-policy $nist1",
288 "-policy $nist2",
294 "-policy $nist3",
299 "-policy $nist1", "True",
305 "-policy $nist2", "True",
312 "-policy anyPolicy",
318 "-policy anyPolicy",
324 "-policy anyPolicy",
330 "-policy $nist1",
336 "-policy $nist2",
342 "-policy anyPolicy",
348 "-policy anyPolicy -explicit_policy",
354 "Valid RequireExplicitPolicy Test1",
355 "-policy anyPolicy",
360 "Valid RequireExplicitPolicy Test2",
361 "-policy anyPolicy",
367 "-policy anyPolicy",
372 "Valid RequireExplicitPolicy Test4",
373 "-policy anyPolicy",
379 "-policy anyPolicy",
384 "Valid Self-Issued requireExplicitPolicy Test6",
385 "-policy anyPolicy",
390 "Invalid Self-Issued requireExplicitPolicy Test7",
391 "-policy anyPolicy",
396 "Invalid Self-Issued requireExplicitPolicy Test8",
397 "-policy anyPolicy",
403 "Valid Policy Mapping Test1",
404 "-policy $nist1",
409 "Valid Policy Mapping Test1",
410 "-policy $nist2",
415 "Valid Policy Mapping Test1",
416 "-policy anyPolicy -inhibit_map",
422 "-policy anyPolicy",
428 "-policy anyPolicy -inhibit_map",
433 "Valid Policy Mapping Test3",
434 "-policy $nist1",
439 "Valid Policy Mapping Test3",
440 "-policy $nist2",
446 "-policy anyPolicy",
451 "Valid Policy Mapping Test5",
452 "-policy $nist1",
457 "Valid Policy Mapping Test5",
458 "-policy $nist6",
463 "Valid Policy Mapping Test6",
464 "-policy $nist1",
469 "Valid Policy Mapping Test6",
470 "-policy $nist6",
477 "Valid Policy Mapping Test9",
478 "-policy anyPolicy",
484 "-policy anyPolicy",
489 "Valid Policy Mapping Test11",
490 "-policy anyPolicy",
497 "Valid Policy Mapping Test12",
498 "-policy $nist1",
505 "Valid Policy Mapping Test12",
506 "-policy $nist2",
511 "Valid Policy Mapping Test13",
512 "-policy anyPolicy",
519 "Valid Policy Mapping Test14",
520 "-policy anyPolicy",
527 "-policy anyPolicy",
532 "Valid inhibitPolicyMapping Test2",
533 "-policy anyPolicy",
539 "-policy anyPolicy",
544 "Valid inhibitPolicyMapping Test4",
545 "-policy anyPolicy",
551 "-policy anyPolicy",
557 "-policy anyPolicy",
562 "Valid Self-Issued inhibitPolicyMapping Test7",
563 "-policy anyPolicy",
568 "Invalid Self-Issued inhibitPolicyMapping Test8",
569 "-policy anyPolicy",
574 "Invalid Self-Issued inhibitPolicyMapping Test9",
575 "-policy anyPolicy",
580 "Invalid Self-Issued inhibitPolicyMapping Test10",
581 "-policy anyPolicy",
586 "Invalid Self-Issued inhibitPolicyMapping Test11",
587 "-policy anyPolicy",
594 "-policy anyPolicy",
599 "Valid inhibitAnyPolicy Test2",
600 "-policy anyPolicy",
606 "-policy anyPolicy",
612 "-policy anyPolicy -inhibit_any",
618 "-policy anyPolicy",
624 "-policy anyPolicy",
630 "-policy anyPolicy",
633 [ "4.12.7", "Valid Self-Issued inhibitAnyPolicy Test7", 0 ],
634 [ "4.12.8", "Invalid Self-Issued inhibitAnyPolicy Test8", 43 ],
635 [ "4.12.9", "Valid Self-Issued inhibitAnyPolicy Test9", 0 ],
636 [ "4.12.10", "Invalid Self-Issued inhibitAnyPolicy Test10", 43 ],
638 [ "4.13.1", "Valid DN nameConstraints Test1", 0 ],
641 [ "4.13.4", "Valid DN nameConstraints Test4", 0 ],
642 [ "4.13.5", "Valid DN nameConstraints Test5", 0 ],
643 [ "4.13.6", "Valid DN nameConstraints Test6", 0 ],
648 [ "4.13.11", "Valid DN nameConstraints Test11", 0 ],
651 [ "4.13.14", "Valid DN nameConstraints Test14", 0 ],
655 [ "4.13.18", "Valid DN nameConstraints Test18", 0 ],
656 [ "4.13.19", "Valid Self-Issued DN nameConstraints Test19", 0 ],
657 [ "4.13.20", "Invalid Self-Issued DN nameConstraints Test20", 47 ],
658 [ "4.13.21", "Valid RFC822 nameConstraints Test21", 0 ],
660 [ "4.13.23", "Valid RFC822 nameConstraints Test23", 0 ],
662 [ "4.13.25", "Valid RFC822 nameConstraints Test25", 0 ],
664 [ "4.13.27", "Valid DN and RFC822 nameConstraints Test27", 0 ],
667 [ "4.13.30", "Valid DNS nameConstraints Test30", 0 ],
669 [ "4.13.32", "Valid DNS nameConstraints Test32", 0 ],
671 [ "4.13.34", "Valid URI nameConstraints Test34", 0 ],
673 [ "4.13.36", "Valid URI nameConstraints Test36", 0 ],
677 [ "4.14.1", "Valid distributionPoint Test1", 0 ],
680 [ "4.14.4", "Valid distributionPoint Test4", 0 ],
681 [ "4.14.5", "Valid distributionPoint Test5", 0 ],
683 [ "4.14.7", "Valid distributionPoint Test7", 0 ],
686 [ "4.14.10", "Valid No issuingDistributionPoint Test10", 0 ],
689 [ "4.14.13", "Valid onlyContainsCACerts CRL Test13", 0 ],
694 [ "4.14.18", "Valid onlySomeReasons Test18", 0 ],
695 [ "4.14.19", "Valid onlySomeReasons Test19", 0 ],
698 [ "4.14.22", "Valid IDP with indirectCRL Test22", 0 ],
700 [ "4.14.24", "Valid IDP with indirectCRL Test24", 0 ],
701 [ "4.14.25", "Valid IDP with indirectCRL Test25", 0 ],
704 [ "4.14.28", "Valid cRLIssuer Test28", 0 ],
705 [ "4.14.29", "Valid cRLIssuer Test29", 0 ],
707 # Although this test is valid it has a circular dependency. As a result
711 [ "4.14.30", "Valid cRLIssuer Test30", 54 ],
714 [ "4.14.33", "Valid cRLIssuer Test33", 0 ],
717 [ "4.15", "Delta-CRLs" ],
719 [ "4.15.2", "Valid delta-CRL Test2", 0 ],
720 [ "4.15.3", "Invalid delta-CRL Test3", 23 ],
721 [ "4.15.4", "Invalid delta-CRL Test4", 23 ],
722 [ "4.15.5", "Valid delta-CRL Test5", 0 ],
723 [ "4.15.6", "Invalid delta-CRL Test6", 23 ],
724 [ "4.15.7", "Valid delta-CRL Test7", 0 ],
725 [ "4.15.8", "Valid delta-CRL Test8", 0 ],
726 [ "4.15.9", "Invalid delta-CRL Test9", 23 ],
727 [ "4.15.10", "Invalid delta-CRL Test10", 12 ],
729 [ "4.16.1", "Valid Unknown Not Critical Certificate Extension Test1", 0 ],
741 my $ossl_cmd = "$ossl_path cms -verify -verify_retcode ";
742 $ossl_cmd .= "-CAfile pkitsta.pem -crl_check_all -x509_strict ";
745 system "$ossl_path x509 -inform DER -in $pkitsta -checkend 0";
749 $ossl_cmd .= "-attime 1291940972 ";
752 $ossl_cmd .= "-policy_check -extended_crl -use_deltas -out /dev/null 2>&1 ";
754 system "$ossl_path x509 -inform DER -in $pkitsta -out pkitsta.pem";
770 $filename =~ tr/ -//d;
772 if ( !-f "$pkitsdir/$filename" ) {
780 $cmd .= "-in $pkitsdir/$filename -policy anyPolicy";
807 $filename =~ tr/ -//d;
809 if ( !-f "$pkitsdir/$filename" ) {
819 my $pol = -1;
822 $cmd .= "-in $pkitsdir/$filename $exargs -policy_print";