Index: components/test/data/cast_certificate/certificates/policies_ica_none_leaf_none.pem |
diff --git a/components/test/data/cast_certificate/certificates/policies_ica_none_leaf_none.pem b/components/test/data/cast_certificate/certificates/policies_ica_none_leaf_none.pem |
new file mode 100644 |
index 0000000000000000000000000000000000000000..460c625fe867825c8f49d1344564362deb0e24a3 |
--- /dev/null |
+++ b/components/test/data/cast_certificate/certificates/policies_ica_none_leaf_none.pem |
@@ -0,0 +1,274 @@ |
+[Created by: generate_policies_tests.py] |
+ |
+Cast certificate chain with the following policies: |
+ |
+ Root: policies={} |
+ Intermediate: policies={} |
+ Leaf: policies={} |
+ |
+Certificate: |
+ Data: |
+ Version: 3 (0x2) |
+ Serial Number: 5 (0x5) |
+ Signature Algorithm: sha256WithRSAEncryption |
+ Issuer: CN=Intermediate |
+ Validity |
+ Not Before: Jan 1 12:00:00 2015 GMT |
+ Not After : Jan 1 12:00:00 2018 GMT |
+ Subject: CN=Leaf |
+ Subject Public Key Info: |
+ Public Key Algorithm: rsaEncryption |
+ Public-Key: (2048 bit) |
+ Modulus: |
+ 00:c4:9e:5a:c3:98:a5:13:8c:c7:94:55:72:71:10: |
+ c2:f3:eb:d9:7b:ce:34:57:74:d7:c1:53:2e:75:f0: |
+ f4:15:04:80:f9:d9:60:ef:6e:be:89:9a:8f:7c:3b: |
+ ee:a6:4c:b9:ff:87:8f:af:9b:61:ad:02:5e:f9:f7: |
+ ad:fd:65:96:79:01:64:ff:c8:88:bd:c8:96:8a:46: |
+ e0:62:bd:1a:20:1d:83:74:61:51:96:b0:29:f0:26: |
+ b7:86:31:08:de:4e:16:9a:fd:f6:f3:08:10:c9:93: |
+ bc:7d:4a:3f:76:9a:b1:5b:0f:8c:66:35:e2:5e:e0: |
+ b9:51:ff:46:65:d2:bf:b3:45:97:eb:07:2f:74:de: |
+ b8:f0:20:7e:2c:6e:ab:ea:09:92:28:11:70:4c:09: |
+ 02:f4:c7:8b:fe:17:d5:b1:d6:3c:04:0e:85:8a:dc: |
+ 3a:2a:4d:0d:62:8f:d4:d4:0c:96:e7:18:48:8c:46: |
+ b0:a4:bb:8d:d7:7f:5b:45:d0:2a:c7:a9:83:c1:86: |
+ 12:9b:97:75:65:91:04:bb:52:4e:56:7a:3c:2e:9c: |
+ 72:ac:c4:eb:8a:c2:eb:28:58:94:da:df:45:bc:f6: |
+ e1:91:ba:db:d9:3e:76:e8:87:84:eb:8c:c4:16:dd: |
+ b7:e8:c3:b2:24:fa:e1:b1:8f:ec:74:20:70:e5:13: |
+ e2:1d |
+ Exponent: 65537 (0x10001) |
+ X509v3 extensions: |
+ X509v3 Subject Key Identifier: |
+ 28:F3:70:47:2A:49:D0:97:E3:41:14:C7:6F:42:98:8B:E3:7C:7C:0B |
+ X509v3 Authority Key Identifier: |
+ keyid:61:89:8E:9B:4C:E5:ED:3A:40:96:77:89:D3:BD:C0:66:CC:A5:39:9D |
+ |
+ Authority Information Access: |
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer |
+ |
+ X509v3 CRL Distribution Points: |
+ |
+ Full Name: |
+ URI:http://url-for-crl/Intermediate.crl |
+ |
+ X509v3 Key Usage: critical |
+ Digital Signature, Key Encipherment |
+ X509v3 Extended Key Usage: |
+ TLS Web Client Authentication |
+ Signature Algorithm: sha256WithRSAEncryption |
+ af:9a:86:7d:cd:27:1e:e2:31:c5:8a:3b:3a:d5:80:e0:8a:86: |
+ e6:1b:3c:28:75:f0:8a:a9:ac:99:eb:3e:78:bb:00:d0:2f:e6: |
+ 8f:ce:11:dc:c9:0e:f5:87:b4:2f:6e:fd:26:cd:45:30:3a:4d: |
+ 8d:b9:88:28:ab:c8:a2:9e:c4:30:60:05:e4:b8:73:62:a2:2c: |
+ b5:9f:35:c5:f4:20:ab:83:29:b5:a0:e5:75:8b:fb:b5:0e:83: |
+ 5f:81:84:79:a6:32:b0:4d:9d:91:47:19:11:e3:ac:f7:95:3a: |
+ 81:cf:27:f2:88:5c:28:92:ce:1c:64:34:f4:0d:44:db:c4:40: |
+ dd:4b:e7:b5:f8:7e:01:ac:1e:69:60:7b:a8:d5:e6:8b:c1:7a: |
+ 1d:6e:e5:ce:bf:9b:c7:64:68:97:df:09:5a:c4:e0:d4:60:01: |
+ 76:ab:31:4f:f5:2d:b0:dd:c6:a2:44:75:d2:4d:22:4d:ae:bb: |
+ 5e:a3:61:e3:10:6d:0f:be:74:60:90:07:21:a7:d6:24:f1:a5: |
+ 77:35:6c:33:fb:b2:3d:ea:40:b3:9b:cd:82:a0:d8:89:bd:7d: |
+ 58:30:04:50:de:03:08:b1:02:24:91:35:77:34:b7:18:03:91: |
+ d4:e7:74:1b:fb:a1:77:4c:8f:56:78:fe:77:18:39:57:c2:45: |
+ 25:a6:e3:76 |
+-----BEGIN CERTIFICATE----- |
+MIIDgTCCAmmgAwIBAgIBBTANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl |
+cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTgwMTAxMTIwMDAwWjAPMQ0wCwYD |
+VQQDDARMZWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ5aw5il |
+E4zHlFVycRDC8+vZe840V3TXwVMudfD0FQSA+dlg726+iZqPfDvupky5/4ePr5th |
+rQJe+fet/WWWeQFk/8iIvciWikbgYr0aIB2DdGFRlrAp8Ca3hjEI3k4Wmv328wgQ |
+yZO8fUo/dpqxWw+MZjXiXuC5Uf9GZdK/s0WX6wcvdN648CB+LG6r6gmSKBFwTAkC |
+9MeL/hfVsdY8BA6Fitw6Kk0NYo/U1AyW5xhIjEawpLuN139bRdAqx6mDwYYSm5d1 |
+ZZEEu1JOVno8LpxyrMTrisLrKFiU2t9FvPbhkbrb2T526IeE64zEFt236MOyJPrh |
+sY/sdCBw5RPiHQIDAQABo4HfMIHcMB0GA1UdDgQWBBQo83BHKknQl+NBFMdvQpiL |
+43x8CzAfBgNVHSMEGDAWgBRhiY6bTOXtOkCWd4nTvcBmzKU5nTA/BggrBgEFBQcB |
+AQQzMDEwLwYIKwYBBQUHMAKGI2h0dHA6Ly91cmwtZm9yLWFpYS9JbnRlcm1lZGlh |
+dGUuY2VyMDQGA1UdHwQtMCswKaAnoCWGI2h0dHA6Ly91cmwtZm9yLWNybC9JbnRl |
+cm1lZGlhdGUuY3JsMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcD |
+AjANBgkqhkiG9w0BAQsFAAOCAQEAr5qGfc0nHuIxxYo7OtWA4IqG5hs8KHXwiqms |
+mes+eLsA0C/mj84R3MkO9Ye0L279Js1FMDpNjbmIKKvIop7EMGAF5LhzYqIstZ81 |
+xfQgq4MptaDldYv7tQ6DX4GEeaYysE2dkUcZEeOs95U6gc8n8ohcKJLOHGQ09A1E |
+28RA3Uvntfh+AaweaWB7qNXmi8F6HW7lzr+bx2Rol98JWsTg1GABdqsxT/UtsN3G |
+okR10k0iTa67XqNh4xBtD750YJAHIafWJPGldzVsM/uyPepAs5vNgqDYib19WDAE |
+UN4DCLECJJE1dzS3GAOR1Od0G/uhd0yPVnj+dxg5V8JFJabjdg== |
+-----END CERTIFICATE----- |
+ |
+Certificate: |
+ Data: |
+ Version: 3 (0x2) |
+ Serial Number: 10 (0xa) |
+ Signature Algorithm: sha256WithRSAEncryption |
+ Issuer: CN=Root |
+ Validity |
+ Not Before: Jan 1 12:00:00 2015 GMT |
+ Not After : Jan 1 12:00:00 2018 GMT |
+ Subject: CN=Intermediate |
+ Subject Public Key Info: |
+ Public Key Algorithm: rsaEncryption |
+ Public-Key: (2048 bit) |
+ Modulus: |
+ 00:c4:2d:30:96:25:ad:86:fe:6f:7c:ed:b1:d8:67: |
+ c1:3e:58:5d:95:22:9f:2f:a1:88:f4:e1:f1:63:7f: |
+ 77:b4:60:95:23:57:33:ad:c4:8e:85:71:71:36:1b: |
+ 02:78:bb:69:7a:5e:ae:af:e4:97:97:66:2d:3a:f7: |
+ df:b9:d8:5a:34:a5:68:35:e3:5d:e4:e9:18:77:93: |
+ c6:54:e8:6c:a0:34:20:a5:99:d0:4f:fb:44:b9:29: |
+ 52:00:34:38:9b:17:e1:88:5c:41:d0:19:8b:4b:77: |
+ 4a:cc:ab:a7:32:79:b4:77:25:6b:38:05:05:70:0e: |
+ 9e:fd:94:17:de:d7:02:09:82:00:65:8f:b6:f9:d7: |
+ a0:57:ac:e6:4c:a7:2e:f3:b8:c9:b4:d1:6d:d1:9f: |
+ 81:d4:99:93:01:63:52:72:5d:30:75:3c:8c:1d:73: |
+ 1c:75:7d:18:1b:a8:b3:f0:83:a4:0e:b9:15:39:03: |
+ 81:18:b0:4e:bf:c2:fe:1d:17:f2:1c:4a:de:a5:87: |
+ 63:30:f8:5b:93:ed:83:1b:3f:f7:72:54:49:33:31: |
+ 33:66:2f:0e:3f:b7:e4:97:ae:63:69:9c:a0:1c:e5: |
+ 90:42:5e:07:62:4b:a5:c4:12:fb:97:b4:a7:da:01: |
+ 90:1e:8b:78:ee:66:40:af:dc:23:d4:7f:f5:99:f2: |
+ 47:41 |
+ Exponent: 65537 (0x10001) |
+ X509v3 extensions: |
+ X509v3 Subject Key Identifier: |
+ 61:89:8E:9B:4C:E5:ED:3A:40:96:77:89:D3:BD:C0:66:CC:A5:39:9D |
+ X509v3 Authority Key Identifier: |
+ keyid:27:66:45:31:75:8A:E0:FB:D2:5F:C1:FB:72:52:0E:B1:1B:29:3A:A5 |
+ |
+ Authority Information Access: |
+ CA Issuers - URI:http://url-for-aia/Root.cer |
+ |
+ X509v3 CRL Distribution Points: |
+ |
+ Full Name: |
+ URI:http://url-for-crl/Root.crl |
+ |
+ X509v3 Key Usage: critical |
+ Certificate Sign, CRL Sign |
+ X509v3 Basic Constraints: critical |
+ CA:TRUE |
+ Signature Algorithm: sha256WithRSAEncryption |
+ ce:dd:90:3d:0a:fe:c3:42:e6:3d:32:57:e5:84:04:6d:80:72: |
+ 6c:92:75:cb:ae:2a:0d:a4:c8:41:2f:c7:c6:bc:02:8f:33:3d: |
+ c5:e2:97:51:ef:8d:e5:84:aa:8a:97:fb:c3:10:a1:73:ae:68: |
+ 76:a5:80:42:ab:df:4c:8a:8a:15:5b:bf:b9:ca:6b:3a:66:ec: |
+ 22:9e:c8:0a:27:9d:c8:5b:07:71:ba:06:74:47:63:dc:08:06: |
+ 9b:d6:eb:6a:11:a2:12:48:68:33:a4:0f:35:aa:a3:78:44:0e: |
+ d6:af:96:5d:e6:26:66:df:09:be:ce:ee:38:2a:4d:b7:36:32: |
+ d2:1c:73:b3:54:6a:a6:dd:0d:76:16:08:eb:a0:8d:30:ce:8d: |
+ bc:b7:8b:be:c7:27:79:95:0b:80:88:57:97:b2:e8:53:46:86: |
+ ad:62:bc:2c:04:59:e9:6b:3b:31:f8:78:93:3d:55:10:3f:da: |
+ 47:bd:a3:89:58:f7:62:ad:8f:00:29:6c:03:ab:7b:c0:6f:bd: |
+ 11:25:2c:35:b7:51:c4:13:ee:be:76:ae:e3:50:d6:1e:e5:a3: |
+ 85:88:ea:fa:4f:49:68:61:c4:27:28:d0:f0:92:eb:ce:bd:59: |
+ af:d5:a4:c8:06:4f:2c:16:8f:eb:cc:a2:91:26:72:f1:81:1f: |
+ 82:92:0b:4c |
+-----BEGIN CERTIFICATE----- |
+MIIDbTCCAlWgAwIBAgIBCjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
+MB4XDTE1MDEwMTEyMDAwMFoXDTE4MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50 |
+ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC0wliWt |
+hv5vfO2x2GfBPlhdlSKfL6GI9OHxY393tGCVI1czrcSOhXFxNhsCeLtpel6ur+SX |
+l2YtOvffudhaNKVoNeNd5OkYd5PGVOhsoDQgpZnQT/tEuSlSADQ4mxfhiFxB0BmL |
+S3dKzKunMnm0dyVrOAUFcA6e/ZQX3tcCCYIAZY+2+degV6zmTKcu87jJtNFt0Z+B |
+1JmTAWNScl0wdTyMHXMcdX0YG6iz8IOkDrkVOQOBGLBOv8L+HRfyHErepYdjMPhb |
+k+2DGz/3clRJMzEzZi8OP7fkl65jaZygHOWQQl4HYkulxBL7l7Sn2gGQHot47mZA |
+r9wj1H/1mfJHQQIDAQABo4HLMIHIMB0GA1UdDgQWBBRhiY6bTOXtOkCWd4nTvcBm |
+zKU5nTAfBgNVHSMEGDAWgBQnZkUxdYrg+9JfwftyUg6xGyk6pTA3BggrBgEFBQcB |
+AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs |
+BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD |
+VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB |
+AM7dkD0K/sNC5j0yV+WEBG2AcmySdcuuKg2kyEEvx8a8Ao8zPcXil1HvjeWEqoqX |
++8MQoXOuaHalgEKr30yKihVbv7nKazpm7CKeyAonnchbB3G6BnRHY9wIBpvW62oR |
+ohJIaDOkDzWqo3hEDtavll3mJmbfCb7O7jgqTbc2MtIcc7NUaqbdDXYWCOugjTDO |
+jby3i77HJ3mVC4CIV5ey6FNGhq1ivCwEWelrOzH4eJM9VRA/2ke9o4lY92KtjwAp |
+bAOre8BvvRElLDW3UcQT7r52ruNQ1h7lo4WI6vpPSWhhxCco0PCS6869Wa/VpMgG |
+TywWj+vMopEmcvGBH4KSC0w= |
+-----END CERTIFICATE----- |
+ |
+Certificate: |
+ Data: |
+ Version: 3 (0x2) |
+ Serial Number: 9 (0x9) |
+ Signature Algorithm: sha256WithRSAEncryption |
+ Issuer: CN=Root |
+ Validity |
+ Not Before: Jan 1 12:00:00 2015 GMT |
+ Not After : Jan 1 12:00:00 2018 GMT |
+ Subject: CN=Root |
+ Subject Public Key Info: |
+ Public Key Algorithm: rsaEncryption |
+ Public-Key: (2048 bit) |
+ Modulus: |
+ 00:f4:50:3d:b5:7c:ca:fd:0b:8f:4c:94:7e:6a:6e: |
+ d7:fc:6e:b0:40:8b:e2:48:78:b6:99:7e:b6:ab:fd: |
+ 2a:0f:c8:64:6d:2a:70:79:d8:b9:0e:33:61:21:c4: |
+ 89:3f:79:28:db:7c:d7:8a:13:f3:2e:f1:85:be:ab: |
+ 21:31:d2:c3:7e:0a:d6:bd:56:e2:2a:b2:29:6c:52: |
+ 00:17:45:c8:47:15:1e:30:ff:be:4b:c9:87:5d:86: |
+ a5:d0:f5:20:e6:79:a2:94:29:ec:5d:19:b0:e5:32: |
+ 81:5a:34:8b:a7:06:20:33:f8:03:3e:0f:8e:e1:87: |
+ 19:1c:0a:ab:94:f0:17:0b:67:62:9f:47:02:70:22: |
+ 2c:d8:cb:55:51:19:b4:7f:62:f6:3a:18:e4:42:fd: |
+ 5c:f7:f5:26:49:6e:6c:1f:90:f5:52:9a:85:fb:e0: |
+ 05:22:24:6a:21:27:a7:03:c4:64:ba:5d:ae:20:ce: |
+ 77:4d:25:50:4f:a4:d3:7a:11:e0:f7:51:1c:b1:8f: |
+ d2:19:73:70:4d:d0:55:4f:ef:14:0f:1e:7a:ce:5d: |
+ 87:45:85:6b:ab:bd:d4:fc:0b:2e:c8:2b:7d:02:19: |
+ 89:39:37:b0:93:ab:b4:e4:db:6b:c2:d3:99:db:87: |
+ db:ef:c5:c0:04:26:63:7a:dc:46:07:5d:09:ba:bd: |
+ f0:a1 |
+ Exponent: 65537 (0x10001) |
+ X509v3 extensions: |
+ X509v3 Subject Key Identifier: |
+ 27:66:45:31:75:8A:E0:FB:D2:5F:C1:FB:72:52:0E:B1:1B:29:3A:A5 |
+ X509v3 Authority Key Identifier: |
+ keyid:27:66:45:31:75:8A:E0:FB:D2:5F:C1:FB:72:52:0E:B1:1B:29:3A:A5 |
+ |
+ Authority Information Access: |
+ CA Issuers - URI:http://url-for-aia/Root.cer |
+ |
+ X509v3 CRL Distribution Points: |
+ |
+ Full Name: |
+ URI:http://url-for-crl/Root.crl |
+ |
+ X509v3 Key Usage: critical |
+ Certificate Sign, CRL Sign |
+ X509v3 Basic Constraints: critical |
+ CA:TRUE |
+ Signature Algorithm: sha256WithRSAEncryption |
+ 94:72:28:25:43:3a:f3:7e:0c:ad:21:54:ac:c2:08:3b:6d:0a: |
+ 42:5c:4d:d5:73:3d:54:e3:c6:9d:52:3a:0e:f3:fc:e8:ea:bd: |
+ 20:9b:8b:cb:35:9a:4c:42:b4:7e:cf:09:4a:18:00:e1:97:be: |
+ e7:7b:a9:34:f2:23:fc:87:a5:06:ca:8c:2c:67:3a:19:fc:a2: |
+ 69:ca:c9:3c:f5:aa:1b:7e:42:8a:dc:e4:3c:ce:37:f5:3b:f1: |
+ 2c:92:f2:e8:91:6e:9c:13:f8:f2:14:a8:4f:a4:bd:76:f8:12: |
+ 45:fb:30:45:d7:ce:4d:dd:5b:46:f1:89:9d:c5:29:d8:0f:77: |
+ 6b:71:07:ff:ab:2d:95:7f:ba:21:a1:8a:db:d7:af:1c:29:d2: |
+ 28:41:e1:e4:4e:4f:12:2c:ef:98:84:7c:f2:55:19:5b:46:34: |
+ f8:1f:1d:3b:16:e4:27:8f:32:16:f8:4e:f4:14:22:bc:b6:c2: |
+ 1b:83:c1:e2:6a:23:64:51:65:af:7f:9d:21:a1:89:2e:8e:23: |
+ 8e:e6:20:3a:42:37:8e:f2:55:22:22:88:cd:04:da:a9:fd:5d: |
+ fe:b3:36:6d:77:30:76:e4:a1:97:42:0e:7f:a5:b9:ac:26:88: |
+ b9:3f:76:27:7b:fd:a7:95:f9:2b:17:58:89:fa:21:28:a0:17: |
+ 37:9f:50:11 |
+-----BEGIN CERTIFICATE----- |
+MIIDZTCCAk2gAwIBAgIBCTANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
+MB4XDTE1MDEwMTEyMDAwMFoXDTE4MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v |
+dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPRQPbV8yv0Lj0yUfmpu |
+1/xusECL4kh4tpl+tqv9Kg/IZG0qcHnYuQ4zYSHEiT95KNt814oT8y7xhb6rITHS |
+w34K1r1W4iqyKWxSABdFyEcVHjD/vkvJh12GpdD1IOZ5opQp7F0ZsOUygVo0i6cG |
+IDP4Az4PjuGHGRwKq5TwFwtnYp9HAnAiLNjLVVEZtH9i9joY5EL9XPf1JklubB+Q |
+9VKahfvgBSIkaiEnpwPEZLpdriDOd00lUE+k03oR4PdRHLGP0hlzcE3QVU/vFA8e |
+es5dh0WFa6u91PwLLsgrfQIZiTk3sJOrtOTba8LTmduH2+/FwAQmY3rcRgddCbq9 |
+8KECAwEAAaOByzCByDAdBgNVHQ4EFgQUJ2ZFMXWK4PvSX8H7clIOsRspOqUwHwYD |
+VR0jBBgwFoAUJ2ZFMXWK4PvSX8H7clIOsRspOqUwNwYIKwYBBQUHAQEEKzApMCcG |
+CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw |
+IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE |
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCUciglQzrz |
+fgytIVSswgg7bQpCXE3Vcz1U48adUjoO8/zo6r0gm4vLNZpMQrR+zwlKGADhl77n |
+e6k08iP8h6UGyowsZzoZ/KJpysk89aobfkKK3OQ8zjf1O/EskvLokW6cE/jyFKhP |
+pL12+BJF+zBF185N3VtG8YmdxSnYD3drcQf/qy2Vf7ohoYrb168cKdIoQeHkTk8S |
+LO+YhHzyVRlbRjT4Hx07FuQnjzIW+E70FCK8tsIbg8HiaiNkUWWvf50hoYkujiOO |
+5iA6QjeO8lUiIojNBNqp/V3+szZtdzB25KGXQg5/pbmsJoi5P3Yne/2nlfkrF1iJ |
++iEooBc3n1AR |
+-----END CERTIFICATE----- |