DGNum/hostapd
6
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions
hostapd/tests/hwsim/auth_serv/ocsp-responder.pem

77 lines
4 KiB
Text
Raw Normal View History

tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Certificate:
Data:
Version: 3 (0x2)
tests: Move from 1024 bit private keys to 2048 bit keys Crypto libraries are starting to refuse to accept the old shorter keys, so move all test certificates and DH to use 2048 bit (or longer) keys. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-02 19:58:40 +02:00
Serial Number:
tests: Update server and user certificates (2022) The previous versions are going to be expiring soon, so need to re-sign these to avoid EAP test case failures. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <j@w1.fi>
2022-04-16 12:22:16 +02:00
d8:d3:e3:a6:cb:e3:cd:7c
tests: Move from 1024 bit private keys to 2048 bit keys Crypto libraries are starting to refuse to accept the old shorter keys, so move all test certificates and DH to use 2048 bit (or longer) keys. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-02 19:58:40 +02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=FI, L=Tuusula, O=w1.fi, CN=Root CA
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Validity
tests: Update server and user certificates (2022) The previous versions are going to be expiring soon, so need to re-sign these to avoid EAP test case failures. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <j@w1.fi>
2022-04-16 12:22:16 +02:00
Not Before: Apr 16 10:19:38 2022 GMT
Not After : Apr 16 10:19:38 2023 GMT
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Subject: C=FI, O=w1.fi, CN=ocsp.w1.fi
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
tests: Move from 1024 bit private keys to 2048 bit keys Crypto libraries are starting to refuse to accept the old shorter keys, so move all test certificates and DH to use 2048 bit (or longer) keys. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-02 19:58:40 +02:00
RSA Public-Key: (2048 bit)
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Modulus:
tests: Move from 1024 bit private keys to 2048 bit keys Crypto libraries are starting to refuse to accept the old shorter keys, so move all test certificates and DH to use 2048 bit (or longer) keys. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-02 19:58:40 +02:00
00:a7:22:85:5d:bb:3b:1c:02:9a:01:73:aa:88:63:
6e:a1:43:33:b5:fd:02:fe:1f:c8:23:04:8b:8c:51:
52:5b:e0:cc:62:60:2a:aa:ba:88:4f:41:39:6b:fb:
34:c0:a2:7a:77:2e:e1:56:9e:ef:ca:ae:67:d5:f9:
8b:5f:ab:ae:87:e1:b0:14:23:03:ad:69:4b:df:2b:
91:70:75:cd:bf:65:40:12:d0:eb:2f:89:f0:41:15:
1b:ed:4c:0d:3a:92:96:91:f8:cd:54:38:15:eb:6b:
45:9f:52:85:7e:4e:15:ab:4e:4b:eb:22:c2:5d:be:
ff:36:6f:42:27:d8:4b:c6:e1:be:f8:08:cf:ac:fd:
51:30:a2:e8:80:13:00:05:b6:05:55:42:0b:fa:1e:
40:84:50:09:8c:25:35:54:25:45:39:9f:4e:7c:0a:
d9:c4:4a:0c:16:4e:3e:68:7f:1b:ad:c9:53:08:5c:
b8:04:d4:d6:93:62:fd:af:f9:b4:1d:f4:96:3e:9b:
9d:14:6d:1c:6c:23:ae:3d:c7:b4:cf:31:90:20:6a:
80:99:62:7e:5c:e9:d5:d5:bd:59:4d:a3:d9:dc:e9:
fb:e8:7b:65:87:d5:f9:49:9e:be:0e:f3:a9:21:de:
94:e8:54:fc:80:cf:da:e3:8f:9a:c6:4c:76:18:0e:
fe:ab
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
X509v3 Key Usage:
Digital Signature, Non Repudiation, Key Encipherment
X509v3 Extended Key Usage:
OCSP Signing
Signature Algorithm: sha256WithRSAEncryption
tests: Update server and user certificates (2022) The previous versions are going to be expiring soon, so need to re-sign these to avoid EAP test case failures. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <j@w1.fi>
2022-04-16 12:22:16 +02:00
4d:72:4a:e9:61:33:7a:13:31:42:cc:42:3c:da:02:1e:95:2f:
05:e4:94:22:55:5a:67:55:fa:e6:ec:e5:01:8f:bc:d3:80:0d:
b0:b5:7c:2e:87:f1:49:92:22:04:ba:8b:cd:94:9a:18:10:34:
0e:b0:3b:e4:f1:81:6e:85:73:8c:90:09:62:1f:55:42:64:1d:
7e:b5:55:ef:11:26:5a:62:24:bd:be:14:f3:4e:69:ee:5b:8e:
5b:e0:49:cd:91:8e:62:e7:a2:25:a3:36:c8:69:b1:a4:00:3b:
e2:55:f1:03:52:44:c5:d5:0b:24:4b:3e:5c:22:b9:ad:02:8f:
1d:a0:be:da:6c:c7:08:bd:63:11:d4:5b:20:2e:8a:7d:cc:43:
1e:81:0a:bf:2f:40:f5:99:61:46:5a:50:49:bb:17:a9:ed:73:
4c:20:3c:3f:b9:4f:1f:94:2a:cd:a1:e3:84:ca:d0:d0:a5:b7:
81:ba:f2:af:e4:54:28:88:48:67:86:38:4a:6b:7c:a7:a0:5e:
c2:39:3b:3e:a6:c4:eb:b8:07:d3:65:d1:d0:65:17:8e:60:80:
df:df:3e:25:0c:07:bd:1d:a4:c1:df:c8:29:07:ba:e8:fd:d4:
57:cc:16:0a:b2:b8:ee:93:68:41:47:fe:55:53:a1:a0:bd:a4:
14:a6:a6:2d
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
-----BEGIN CERTIFICATE-----
tests: Update server and user certificates (2022) The previous versions are going to be expiring soon, so need to re-sign these to avoid EAP test case failures. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <j@w1.fi>
2022-04-16 12:22:16 +02:00
MIIDJTCCAg2gAwIBAgIJANjT46bL4818MA0GCSqGSIb3DQEBCwUAMEExCzAJBgNV
tests: Move from 1024 bit private keys to 2048 bit keys Crypto libraries are starting to refuse to accept the old shorter keys, so move all test certificates and DH to use 2048 bit (or longer) keys. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-02 19:58:40 +02:00
BAYTAkZJMRAwDgYDVQQHDAdUdXVzdWxhMQ4wDAYDVQQKDAV3MS5maTEQMA4GA1UE
tests: Update server and user certificates (2022) The previous versions are going to be expiring soon, so need to re-sign these to avoid EAP test case failures. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <j@w1.fi>
2022-04-16 12:22:16 +02:00
AwwHUm9vdCBDQTAeFw0yMjA0MTYxMDE5MzhaFw0yMzA0MTYxMDE5MzhaMDIxCzAJ
tests: Move from 1024 bit private keys to 2048 bit keys Crypto libraries are starting to refuse to accept the old shorter keys, so move all test certificates and DH to use 2048 bit (or longer) keys. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-02 19:58:40 +02:00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: Update server and user certificates (2022) The previous versions are going to be expiring soon, so need to re-sign these to avoid EAP test case failures. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <j@w1.fi>
2022-04-16 12:22:16 +02:00
BQUHAwkwDQYJKoZIhvcNAQELBQADggEBAE1ySulhM3oTMULMQjzaAh6VLwXklCJV
WmdV+ubs5QGPvNOADbC1fC6H8UmSIgS6i82UmhgQNA6wO+TxgW6Fc4yQCWIfVUJk
HX61Ve8RJlpiJL2+FPNOae5bjlvgSc2RjmLnoiWjNshpsaQAO+JV8QNSRMXVCyRL
Plwiua0Cjx2gvtpsxwi9YxHUWyAuin3MQx6BCr8vQPWZYUZaUEm7F6ntc0wgPD+5
Tx+UKs2h44TK0NClt4G68q/kVCiISGeGOEprfKegXsI5Oz6mxOu4B9Nl0dBlF45g
gN/fPiUMB70dpMHfyCkHuuj91FfMFgqyuO6TaEFH/lVToaC9pBSmpi0=
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
-----END CERTIFICATE-----
Reference in a new issue Copy permalink