mirror of
https://github.com/mirror/wget.git
synced 2026-08-22 19:03:27 +08:00
Added new tests for SSL
* tests/Test-https-badcerts.px : New file * tests/Test-https-clientcert.px : New file * tests/Test-https-crl.px : New file * tests/Test-https-weboftrust.px : New file * tests/certs/interca.conf : New file * tests/certs/rootca.conf : New file * tests/certs/test-ca-key.pem : New file Added all new SSL / HTTPS tests to make check Added Test for SSL Web of Trust, accept only if CA chain of trust is intact. Added a test script for client certificate Added Test for crlfile option of wget Added test to make sure that wget doesn't accept expired or invalid certs Some clean up : Removed cause of warnings from perl & other cosmetic changes
This commit is contained in:
64
tests/certs/interca.conf
Normal file
64
tests/certs/interca.conf
Normal file
@@ -0,0 +1,64 @@
|
||||
[ ca ]
|
||||
default_ca = myca
|
||||
|
||||
[ crl_ext ]
|
||||
issuerAltName=issuer:copy
|
||||
authorityKeyIdentifier=keyid:always
|
||||
|
||||
[ myca ]
|
||||
dir = ./certs/
|
||||
new_certs_dir = $dir
|
||||
unique_subject = no
|
||||
certificate = $dir/interca.crt
|
||||
database = $dir/certindex
|
||||
private_key = $dir/interca.key
|
||||
serial = $dir/certserial
|
||||
default_days = 730
|
||||
default_md = sha1
|
||||
policy = myca_policy
|
||||
x509_extensions = myca_extensions
|
||||
crlnumber = $dir/crlnumber
|
||||
default_crl_days = 730
|
||||
|
||||
[ myca_policy ]
|
||||
commonName = supplied
|
||||
stateOrProvinceName = supplied
|
||||
countryName = optional
|
||||
emailAddress = optional
|
||||
organizationName = supplied
|
||||
organizationalUnitName = optional
|
||||
|
||||
[ myca_extensions ]
|
||||
basicConstraints = critical,CA:TRUE
|
||||
keyUsage = critical,any
|
||||
subjectKeyIdentifier = hash
|
||||
authorityKeyIdentifier = keyid:always,issuer
|
||||
keyUsage = digitalSignature,keyEncipherment
|
||||
extendedKeyUsage = serverAuth
|
||||
crlDistributionPoints = @crl_section
|
||||
subjectAltName = @alt_names
|
||||
authorityInfoAccess = @ocsp_section
|
||||
|
||||
[ v3_ca ]
|
||||
basicConstraints = critical,CA:TRUE,pathlen:0
|
||||
keyUsage = critical,any
|
||||
subjectKeyIdentifier = hash
|
||||
authorityKeyIdentifier = keyid:always,issuer
|
||||
keyUsage = digitalSignature,keyEncipherment
|
||||
extendedKeyUsage = serverAuth
|
||||
crlDistributionPoints = @crl_section
|
||||
subjectAltName = @alt_names
|
||||
authorityInfoAccess = @ocsp_section
|
||||
|
||||
[alt_names]
|
||||
DNS.0 = wgettesterr
|
||||
|
||||
[crl_section]
|
||||
URI.0 = http://intertest.wgettest.org/Bogus.crl
|
||||
URI.1 = http://intertest.wgettest.org/Bogus.crl
|
||||
|
||||
[ocsp_section]
|
||||
caIssuers;URI.0 = http://intertest.wgettest.com/Bogus.crt
|
||||
caIssuers;URI.1 = http://intertest.wgettest.com/Bogus.crt
|
||||
OCSP;URI.0 = http://intertest.wgettest.com/ocsp/
|
||||
OCSP;URI.1 = http://intertest.wgettest.com/ocsp/
|
||||
Reference in New Issue
Block a user