DGNum/hostapd
6
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions
hostapd/tests/hwsim/auth_serv/ocsp-responder.pem

84 lines
4.3 KiB
Text
Raw Normal View History

tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Certificate:
Data:
Version: 3 (0x2)
tests: Move from 1024 bit private keys to 2048 bit keys Crypto libraries are starting to refuse to accept the old shorter keys, so move all test certificates and DH to use 2048 bit (or longer) keys. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-02 19:58:40 +02:00
Serial Number:
tests: Update server and user certificates (2023) At least some of the previous versions have expired, so need to re-sign these to avoid EAP test case failures. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <j@w1.fi>
2023-04-18 10:04:43 +02:00
d8:d3:e3:a6:cb:e3:cd:86
tests: Move from 1024 bit private keys to 2048 bit keys Crypto libraries are starting to refuse to accept the old shorter keys, so move all test certificates and DH to use 2048 bit (or longer) keys. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-02 19:58:40 +02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=FI, L=Tuusula, O=w1.fi, CN=Root CA
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Validity
tests: Update server and user certificates (2023) At least some of the previous versions have expired, so need to re-sign these to avoid EAP test case failures. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <j@w1.fi>
2023-04-18 10:04:43 +02:00
Not Before: Apr 18 08:02:42 2023 GMT
Not After : Apr 17 08:02:42 2024 GMT
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Subject: C=FI, O=w1.fi, CN=ocsp.w1.fi
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
tests: Update server and user certificates (2023) At least some of the previous versions have expired, so need to re-sign these to avoid EAP test case failures. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <j@w1.fi>
2023-04-18 10:04:43 +02:00
Public-Key: (2048 bit)
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Modulus:
tests: Move from 1024 bit private keys to 2048 bit keys Crypto libraries are starting to refuse to accept the old shorter keys, so move all test certificates and DH to use 2048 bit (or longer) keys. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-02 19:58:40 +02:00
00:a7:22:85:5d:bb:3b:1c:02:9a:01:73:aa:88:63:
6e:a1:43:33:b5:fd:02:fe:1f:c8:23:04:8b:8c:51:
52:5b:e0:cc:62:60:2a:aa:ba:88:4f:41:39:6b:fb:
34:c0:a2:7a:77:2e:e1:56:9e:ef:ca:ae:67:d5:f9:
8b:5f:ab:ae:87:e1:b0:14:23:03:ad:69:4b:df:2b:
91:70:75:cd:bf:65:40:12:d0:eb:2f:89:f0:41:15:
1b:ed:4c:0d:3a:92:96:91:f8:cd:54:38:15:eb:6b:
45:9f:52:85:7e:4e:15:ab:4e:4b:eb:22:c2:5d:be:
ff:36:6f:42:27:d8:4b:c6:e1:be:f8:08:cf:ac:fd:
51:30:a2:e8:80:13:00:05:b6:05:55:42:0b:fa:1e:
40:84:50:09:8c:25:35:54:25:45:39:9f:4e:7c:0a:
d9:c4:4a:0c:16:4e:3e:68:7f:1b:ad:c9:53:08:5c:
b8:04:d4:d6:93:62:fd:af:f9:b4:1d:f4:96:3e:9b:
9d:14:6d:1c:6c:23:ae:3d:c7:b4:cf:31:90:20:6a:
80:99:62:7e:5c:e9:d5:d5:bd:59:4d:a3:d9:dc:e9:
fb:e8:7b:65:87:d5:f9:49:9e:be:0e:f3:a9:21:de:
94:e8:54:fc:80:cf:da:e3:8f:9a:c6:4c:76:18:0e:
fe:ab
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
X509v3 Key Usage:
Digital Signature, Non Repudiation, Key Encipherment
X509v3 Extended Key Usage:
OCSP Signing
tests: Update server and user certificates (2023) At least some of the previous versions have expired, so need to re-sign these to avoid EAP test case failures. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <j@w1.fi>
2023-04-18 10:04:43 +02:00
X509v3 Subject Key Identifier:
2D:D5:2E:6F:1C:49:B1:7C:C9:A1:0C:66:32:35:AB:A8:96:F8:21:A2
X509v3 Authority Key Identifier:
A4:FD:B9:39:1B:81:B3:AA:EB:88:1D:D4:81:A9:B5:11:70:CC:A7:E1
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Signature Algorithm: sha256WithRSAEncryption
tests: Update server and user certificates (2023) At least some of the previous versions have expired, so need to re-sign these to avoid EAP test case failures. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <j@w1.fi>
2023-04-18 10:04:43 +02:00
Signature Value:
2d:31:e5:de:71:74:09:ad:c2:7e:58:a1:c9:71:69:4c:8e:19:
4b:31:e6:09:c2:e9:6a:67:ec:89:94:a8:b2:84:6f:6c:d0:69:
fd:64:12:42:6d:a0:be:1a:7c:e4:71:53:c9:11:3a:02:b2:a7:
ad:78:ee:ea:7e:85:da:ff:91:dd:9c:20:ad:68:7b:81:d7:c4:
b4:d5:b1:fa:8e:c1:d8:e4:db:77:01:19:28:16:df:13:83:ce:
94:fe:6d:90:75:2b:9d:ed:29:00:16:0e:a3:6b:68:ba:7e:d2:
49:97:dd:af:0f:63:8f:d2:c7:f1:1e:49:e7:06:84:81:30:4e:
15:b5:40:dc:50:64:b6:05:3e:3d:0f:66:24:30:2f:06:b2:a2:
46:c7:fc:21:d7:d6:a2:12:1c:10:44:8c:56:b3:26:56:0e:0d:
b7:e8:c4:8f:6c:8d:d1:79:b9:2e:04:71:ed:aa:36:f6:e3:4a:
f9:47:c5:72:fb:92:f5:15:bf:8d:c3:7f:51:75:9b:21:cc:7c:
5f:2a:ef:d4:db:e5:50:cc:34:7c:26:78:0b:ac:ae:ef:77:6c:
3f:ce:f8:46:1c:1f:7a:04:51:9b:55:2f:fb:b0:cc:20:85:f1:
34:22:2c:a5:1f:1a:83:eb:a7:58:6f:f6:6b:da:2b:14:6a:91:
b4:f6:a7:25
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
-----BEGIN CERTIFICATE-----
tests: Update server and user certificates (2023) At least some of the previous versions have expired, so need to re-sign these to avoid EAP test case failures. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <j@w1.fi>
2023-04-18 10:04:43 +02:00
MIIDZTCCAk2gAwIBAgIJANjT46bL482GMA0GCSqGSIb3DQEBCwUAMEExCzAJBgNV
tests: Move from 1024 bit private keys to 2048 bit keys Crypto libraries are starting to refuse to accept the old shorter keys, so move all test certificates and DH to use 2048 bit (or longer) keys. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-02 19:58:40 +02:00
BAYTAkZJMRAwDgYDVQQHDAdUdXVzdWxhMQ4wDAYDVQQKDAV3MS5maTEQMA4GA1UE
tests: Update server and user certificates (2023) At least some of the previous versions have expired, so need to re-sign these to avoid EAP test case failures. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <j@w1.fi>
2023-04-18 10:04:43 +02:00
AwwHUm9vdCBDQTAeFw0yMzA0MTgwODAyNDJaFw0yNDA0MTcwODAyNDJaMDIxCzAJ
tests: Move from 1024 bit private keys to 2048 bit keys Crypto libraries are starting to refuse to accept the old shorter keys, so move all test certificates and DH to use 2048 bit (or longer) keys. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-02 19:58:40 +02:00
BgNVBAYTAkZJMQ4wDAYDVQQKDAV3MS5maTETMBEGA1UEAwwKb2NzcC53MS5maTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKcihV27OxwCmgFzqohjbqFD
M7X9Av4fyCMEi4xRUlvgzGJgKqq6iE9BOWv7NMCiencu4Vae78quZ9X5i1+rrofh
sBQjA61pS98rkXB1zb9lQBLQ6y+J8EEVG+1MDTqSlpH4zVQ4FetrRZ9ShX5OFatO
S+siwl2+/zZvQifYS8bhvvgIz6z9UTCi6IATAAW2BVVCC/oeQIRQCYwlNVQlRTmf
TnwK2cRKDBZOPmh/G63JUwhcuATU1pNi/a/5tB30lj6bnRRtHGwjrj3HtM8xkCBq
gJliflzp1dW9WU2j2dzp++h7ZYfV+Umevg7zqSHelOhU/IDP2uOPmsZMdhgO/qsC
tests: Update server and user certificates (2023) At least some of the previous versions have expired, so need to re-sign these to avoid EAP test case failures. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <j@w1.fi>
2023-04-18 10:04:43 +02:00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tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
-----END CERTIFICATE-----
Reference in a new issue Copy permalink