1*e0c4386eSCy Schubert# Copyright 2016-2022 The OpenSSL Project Authors. All Rights Reserved. 2*e0c4386eSCy Schubert# 3*e0c4386eSCy Schubert# Licensed under the Apache License 2.0 (the "License"). You may not use 4*e0c4386eSCy Schubert# this file except in compliance with the License. You can obtain a copy 5*e0c4386eSCy Schubert# in the file LICENSE in the source distribution or at 6*e0c4386eSCy Schubert# https://www.openssl.org/source/license.html 7*e0c4386eSCy Schubert# 8*e0c4386eSCy Schubert# Blank and comment lines ignored. 9*e0c4386eSCy Schubert# 10*e0c4386eSCy Schubert# The first line in each block takes the form: 11*e0c4386eSCy Schubert# 12*e0c4386eSCy Schubert# <TLSA-count> <cert-count> <nonamechecks> <desired-verify-result> <desired-match-depth> 13*e0c4386eSCy Schubert# 14*e0c4386eSCy Schubert# It is followed by <TLSA-count> lines of the form: 15*e0c4386eSCy Schubert# 16*e0c4386eSCy Schubert# <usage> <selector> <mtype> <hex-data> 17*e0c4386eSCy Schubert# 18*e0c4386eSCy Schubert# and finally, by <cert-count> certificates. 19*e0c4386eSCy Schubert 20*e0c4386eSCy Schubert# 1 21*e0c4386eSCy Schubert# Ensure TLSA with direct root works when peer chain provides a 22*e0c4386eSCy Schubert# cross-cert. 23*e0c4386eSCy Schubert1 4 0 0 2 24*e0c4386eSCy Schubert2 0 0 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 25*e0c4386eSCy Schubertsubject=CN = server.example 26*e0c4386eSCy Schubertissuer=CN = CA 27*e0c4386eSCy SchubertnotBefore=Jan 15 08:19:49 2016 GMT 28*e0c4386eSCy SchubertnotAfter=Jan 16 08:19:49 2116 GMT 29*e0c4386eSCy Schubert-----BEGIN CERTIFICATE----- 30*e0c4386eSCy SchubertMIIDIDCCAgigAwIBAgIBAjANBgkqhkiG9w0BAQsFADANMQswCQYDVQQDDAJDQTAg 31*e0c4386eSCy SchubertFw0xNjAxMTUwODE5NDlaGA8yMTE2MDExNjA4MTk0OVowGTEXMBUGA1UEAwwOc2Vy 32*e0c4386eSCy SchubertdmVyLmV4YW1wbGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo/4lY 33*e0c4386eSCy SchubertYYWu3tssD9Vz++K3qBt6dWAr1H08c3a1rt6TL38kkG3JHPSKOM2fooAWVsu0LLuT 34*e0c4386eSCy Schubert5Rcf/w3GQ/4xNPgo2HXpo7uIgu+jcuJTYgVFTeAxl++qnRDSWA2eBp4yuxsIVl1l 35*e0c4386eSCy SchubertDz9mjsI2oBH/wFk1/Ukc3RxCMwZ4rgQ4I+XndWfTlK1aqUAfrFkQ9QzBZK1KxMY1 36*e0c4386eSCy SchubertU7OWaoIbFYvRmavknm+UqtKW5Vf7jJFkijwkFsbSGb6CYBM7YrDtPh2zyvlr3zG5 37*e0c4386eSCy Schubertep5LR2inKcc/SuIiJ7TvkGPX79ByST5brbkb1Ctvhmjd1XMSuEPJ3EEPoqNGT4tn 38*e0c4386eSCy SchubertiIQPYf55NB9KiR+3AgMBAAGjfTB7MB0GA1UdDgQWBBTnm+IqrYpsOst2UeWOB5gi 39*e0c4386eSCy Schubertl+FzojAfBgNVHSMEGDAWgBS0ETPx1+Je91OeICIQT4YGvx/JXjAJBgNVHRMEAjAA 40*e0c4386eSCy SchubertMBMGA1UdJQQMMAoGCCsGAQUFBwMBMBkGA1UdEQQSMBCCDnNlcnZlci5leGFtcGxl 41*e0c4386eSCy SchubertMA0GCSqGSIb3DQEBCwUAA4IBAQBBtDxPYULl5b7VFC7/U0NgV8vTJk4zpPnUMMQ4 42*e0c4386eSCy SchubertQF2AWDFAek8oLKrz18KQ8M/DEhDxgkaoeXEMLT6BJUEVNYuFEYHEDGarl0nMDRXL 43*e0c4386eSCy SchubertxOgAExfz3Tf/pjsLaha5aWH7NyCSKWC+lYkIOJ/Kb/m/6QsDJoXsEC8AhrPfqJhz 44*e0c4386eSCy SchubertUzsCoxIlaDWqawH4+S8bdeX0tvs2VtJk/WOJHxMqXra6kgI4fAgyvr2kIZHinQ3y 45*e0c4386eSCy SchubertcgX40uAC38bwpE95kJ7FhSfQlE1Rt7sOspUj098Dd0RNDn2uKyOTxEqIELHfw4AX 46*e0c4386eSCy SchubertO3XAzt8qDyho8nEd/xiQ6qgsQnvXa+hSRJw42g3/czVskxRx 47*e0c4386eSCy Schubert-----END CERTIFICATE----- 48*e0c4386eSCy Schubertsubject=CN = CA 49*e0c4386eSCy Schubertissuer=CN = Root CA 50*e0c4386eSCy SchubertnotBefore=Jan 15 08:19:49 2016 GMT 51*e0c4386eSCy SchubertnotAfter=Jan 16 08:19:49 2116 GMT 52*e0c4386eSCy Schubert-----BEGIN CERTIFICATE----- 53*e0c4386eSCy SchubertMIIC7DCCAdSgAwIBAgIBAjANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdSb290 54*e0c4386eSCy SchubertIENBMCAXDTE2MDExNTA4MTk0OVoYDzIxMTYwMTE2MDgxOTQ5WjANMQswCQYDVQQD 55*e0c4386eSCy SchubertDAJDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJadpD0ASxxfxsvd 56*e0c4386eSCy Schubertj9IxsogVzMSGLFziaYuE9KejU9+R479RifvwfBANO62sNWJ19X//9G5UjwWmkiOz 57*e0c4386eSCy Schubertn1k50DkYsBBA3mJzik6wjt/c58lBIlSEgAgpvDU8ht8w3t20JP9+YqXAeugqFj/W 58*e0c4386eSCy Schubertl9rFQtsvaWSRywjXVlp5fxuEQelNnXcJEKhsKTNExsBUZebo4/J1BWpklWzA9P0l 59*e0c4386eSCy SchubertYW5INvDAAwcF1nzlEf0Y6Eot03IMNyg2MTE4hehxjdgCSci8GYnFirE/ojXqqpAc 60*e0c4386eSCy SchubertZGh7r2dqWgZUD1Dh+bT2vjrUzj8eTH3GdzI+oljt29102JIUaqj3yzRYkah8FLF9 61*e0c4386eSCy SchubertCLNNsUcCAwEAAaNQME4wHQYDVR0OBBYEFLQRM/HX4l73U54gIhBPhga/H8leMB8G 62*e0c4386eSCy SchubertA1UdIwQYMBaAFI71Ja8em2uEPXyAmslTnE1y96NSMAwGA1UdEwQFMAMBAf8wDQYJ 63*e0c4386eSCy SchubertKoZIhvcNAQELBQADggEBADnZ9uXGAdwfNC3xuERIlBwgLROeBRGgcfHWdXZB/tWk 64*e0c4386eSCy SchubertIM9ox88wYKWynanPbra4n0zhepooKt+naeY2HLR8UgwT6sTi0Yfld9mjytA8/DP6 65*e0c4386eSCy SchubertAcqtIDDf60vNI00sgxjgZqofVayA9KShzIPzjBec4zI1sg5YzoSNyH28VXFstEpi 66*e0c4386eSCy Schubert8CVtmRYQHhc2gDI9MGge4sHRYwaIFkegzpwcEUnp6tTVe9ZvHawgsXF/rCGfH4M6 67*e0c4386eSCy SchubertuNO0D+9Md1bdW7382yOtWbkyibsugqnfBYCUH6hAhDlfYzpba2Smb0roc6Crq7HR 68*e0c4386eSCy Schubert5HpEYY6qEir9wFMkD5MZsWrNRGRuzd5am82J+aaHz/4= 69*e0c4386eSCy Schubert-----END CERTIFICATE----- 70*e0c4386eSCy Schubertsubject=CN = Root CA 71*e0c4386eSCy Schubertissuer=CN = Cross Root 72*e0c4386eSCy SchubertnotBefore=Aug 30 18:36:38 2021 GMT 73*e0c4386eSCy SchubertnotAfter=Aug 31 18:36:38 2121 GMT 74*e0c4386eSCy Schubert-----BEGIN CERTIFICATE----- 75*e0c4386eSCy SchubertMIIC9zCCAd+gAwIBAgIBAjANBgkqhkiG9w0BAQsFADAVMRMwEQYDVQQDDApDcm9z 76*e0c4386eSCy SchubertcyBSb290MCAXDTIxMDgzMDE4MzYzOFoYDzIxMjEwODMxMTgzNjM4WjASMRAwDgYD 77*e0c4386eSCy SchubertVQQDDAdSb290IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eYA 78*e0c4386eSCy Schubert9Qa8oEY4eQ8/HnEZE20C3yubdmv8rLAh7daRCEI7pWM17FJboKJKxdYAlAOXWj25 79*e0c4386eSCy SchubertZyjSfeMhXKTtxjyNjoTRnVTDPdl0opZ2Z3H5xhpQd7P9eO5b4OOMiSPCmiLsPtQ3 80*e0c4386eSCy SchubertngfNwCtVERc6NEIcaQ06GLDtFZRexv2eh8Yc55QaksBfBcFzQ+UD3gmRySTO2I6L 81*e0c4386eSCy Schubertfi7gMUjRhipqVSZ66As2Tpex4KTJ2lxpSwOACFaDox+yKrjBTP7FsU3UwAGq7b7O 82*e0c4386eSCy SchubertJb3uaa32B81uK6GJVPVo65gJ7clgZsszYkoDsGjWDqtfwTVVfv1G7rrr3Laio+2F 83*e0c4386eSCy Schubertf3fftWgiQ35mJCOvxQIDAQABo1MwUTAdBgNVHQ4EFgQUjvUlrx6ba4Q9fICayVOc 84*e0c4386eSCy SchubertTXL3o1IwHwYDVR0jBBgwFoAUL16/ihJvr2w9I5k63jjZ13SPW20wDwYDVR0TAQH/ 85*e0c4386eSCy SchubertBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAHi+qdZF/jJrR/F3L60JVLOOUhTpi 86*e0c4386eSCy SchubertLxFFBksZPVaiVf+6R8pSMy0WtDEkzGT430ji6V4i8O/70HXIG9n9pCye8sLsOl6D 87*e0c4386eSCy SchubertexXj/MkwwSd3J0Y58zd8ZwMrK9m/jyFrk9TlWokfIFL/eC8VFsu7qmSSRLIjMuxc 88*e0c4386eSCy SchubertYPPisgR5+WPcus7Jf8auqcYw8eW0GPc1ugJobwucs5e/TinksMfwQrzEydmOPoWI 89*e0c4386eSCy SchubertPfur7MjPr5IQXROtQv+CihMigPIHvi73YzSe5zdPCw8JcuZ5vBi2pwquvzvGLtMM 90*e0c4386eSCy SchubertBtln/SwonyQMks5WV4dOk6NOB73mCMywCir4ybp9ElJMaUGEF9nLO+h8Fg== 91*e0c4386eSCy Schubert-----END CERTIFICATE----- 92*e0c4386eSCy Schubertsubject=CN = Cross Root 93*e0c4386eSCy Schubertissuer=CN = Cross Root 94*e0c4386eSCy SchubertnotBefore=Aug 30 18:33:26 2021 GMT 95*e0c4386eSCy SchubertnotAfter=Aug 31 18:33:26 2121 GMT 96*e0c4386eSCy Schubert-----BEGIN CERTIFICATE----- 97*e0c4386eSCy SchubertMIIC+jCCAeKgAwIBAgIBATANBgkqhkiG9w0BAQsFADAVMRMwEQYDVQQDDApDcm9z 98*e0c4386eSCy SchubertcyBSb290MCAXDTIxMDgzMDE4MzMyNloYDzIxMjEwODMxMTgzMzI2WjAVMRMwEQYD 99*e0c4386eSCy SchubertVQQDDApDcm9zcyBSb290MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA 100*e0c4386eSCy SchubertkpH8JGF0yRS+CCAkUBV44unl/SNTSPexgbtmJPHo8HLTLbXCU5QS2KWERUJ2YLC8 101*e0c4386eSCy SchubertFRIQNuSipUjT8zz6xFYqU+S5eSeroVhARixxE4fEMeLCOdPAds1D/trZw2qWLZOT 102*e0c4386eSCy SchubertDUlXUGV1besCbrF2PL3efJxzy6OM6+tTE8K49y3dJVNfGB7cZxkjDGDz08XnBNJo 103*e0c4386eSCy Schubert2FNN/BC8WTHZU/lUgtCjgSXXY+uPpF0XYg7UBlVhOfDLV+f9fC4EmNyf4bzYZnFr 104*e0c4386eSCy SchubertmOtdaYF3JsAz60p9Xw3kahvO0LPCp4ktXbVhwwlVv+SmTkHi3CulU2hHZ8HT2EOw 105*e0c4386eSCy SchubertYiaePt8qSphK3U/U2AbPFwIDAQABo1MwUTAdBgNVHQ4EFgQUL16/ihJvr2w9I5k6 106*e0c4386eSCy Schubert3jjZ13SPW20wHwYDVR0jBBgwFoAUL16/ihJvr2w9I5k63jjZ13SPW20wDwYDVR0T 107*e0c4386eSCy SchubertAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAUiqf8oQaPX3aW6I+dcRhsq5g 108*e0c4386eSCy SchubertbpYF0X5jePk6UqWu86YcmpoRtGLH7e5aHGJYqrVrkOoo0q4eTL3Pm1/sB3omPRMb 109*e0c4386eSCy Schubertey/i7Z70wwd5yI8iz/WBmQDahYxq5wSDsUSdZDL0kSyoU2jCwXUPtuC6F1kMZBFI 110*e0c4386eSCy SchubertuUeaFcF8oKVGuOHvZgj/FMBpT7tyjdPpDG4uo6AT04AKGhf5xO5UY2N+uqmEsXHK 111*e0c4386eSCy SchubertHsKAEMrVhdeU5mbrfifvSkMYcYgJOX1KFP+t4U+ogqCHy1/Nfhq+WG1XN5GwhtuO 112*e0c4386eSCy Schubertze25NqI6ZvA2og4AoeIzvJ/+Nfl5PNtClm0IjbGvR77oOBMs71lO4GjUYj9eiw== 113*e0c4386eSCy Schubert-----END CERTIFICATE----- 114