DGNum/hostapd
6
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions
hostapd/tests/hwsim/auth_serv/ocsp-responder.pem

84 lines
4.3 KiB
Text
Raw Normal View History

tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Certificate:
Data:
Version: 3 (0x2)
tests: Move from 1024 bit private keys to 2048 bit keys Crypto libraries are starting to refuse to accept the old shorter keys, so move all test certificates and DH to use 2048 bit (or longer) keys. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-02 19:58:40 +02:00
Serial Number:
tests: Update server and user certificates (2024) At least some of the previous versions have expired, so need to re-sign these to avoid EAP test case failures. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <j@w1.fi>
2024-04-17 20:25:56 +02:00
d8:d3:e3:a6:cb:e3:cd:90
tests: Move from 1024 bit private keys to 2048 bit keys Crypto libraries are starting to refuse to accept the old shorter keys, so move all test certificates and DH to use 2048 bit (or longer) keys. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-02 19:58:40 +02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=FI, L=Tuusula, O=w1.fi, CN=Root CA
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Validity
tests: Update server and user certificates (2024) At least some of the previous versions have expired, so need to re-sign these to avoid EAP test case failures. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <j@w1.fi>
2024-04-17 20:25:56 +02:00
Not Before: Apr 17 18:25:37 2024 GMT
Not After : Apr 17 18:25:37 2025 GMT
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Subject: C=FI, O=w1.fi, CN=ocsp.w1.fi
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
tests: Update server and user certificates (2023) At least some of the previous versions have expired, so need to re-sign these to avoid EAP test case failures. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <j@w1.fi>
2023-04-18 10:04:43 +02:00
Public-Key: (2048 bit)
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Modulus:
tests: Move from 1024 bit private keys to 2048 bit keys Crypto libraries are starting to refuse to accept the old shorter keys, so move all test certificates and DH to use 2048 bit (or longer) keys. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-02 19:58:40 +02:00
00:a7:22:85:5d:bb:3b:1c:02:9a:01:73:aa:88:63:
6e:a1:43:33:b5:fd:02:fe:1f:c8:23:04:8b:8c:51:
52:5b:e0:cc:62:60:2a:aa:ba:88:4f:41:39:6b:fb:
34:c0:a2:7a:77:2e:e1:56:9e:ef:ca:ae:67:d5:f9:
8b:5f:ab:ae:87:e1:b0:14:23:03:ad:69:4b:df:2b:
91:70:75:cd:bf:65:40:12:d0:eb:2f:89:f0:41:15:
1b:ed:4c:0d:3a:92:96:91:f8:cd:54:38:15:eb:6b:
45:9f:52:85:7e:4e:15:ab:4e:4b:eb:22:c2:5d:be:
ff:36:6f:42:27:d8:4b:c6:e1:be:f8:08:cf:ac:fd:
51:30:a2:e8:80:13:00:05:b6:05:55:42:0b:fa:1e:
40:84:50:09:8c:25:35:54:25:45:39:9f:4e:7c:0a:
d9:c4:4a:0c:16:4e:3e:68:7f:1b:ad:c9:53:08:5c:
b8:04:d4:d6:93:62:fd:af:f9:b4:1d:f4:96:3e:9b:
9d:14:6d:1c:6c:23:ae:3d:c7:b4:cf:31:90:20:6a:
80:99:62:7e:5c:e9:d5:d5:bd:59:4d:a3:d9:dc:e9:
fb:e8:7b:65:87:d5:f9:49:9e:be:0e:f3:a9:21:de:
94:e8:54:fc:80:cf:da:e3:8f:9a:c6:4c:76:18:0e:
fe:ab
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
X509v3 Key Usage:
Digital Signature, Non Repudiation, Key Encipherment
X509v3 Extended Key Usage:
OCSP Signing
tests: Update server and user certificates (2023) At least some of the previous versions have expired, so need to re-sign these to avoid EAP test case failures. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <j@w1.fi>
2023-04-18 10:04:43 +02:00
X509v3 Subject Key Identifier:
2D:D5:2E:6F:1C:49:B1:7C:C9:A1:0C:66:32:35:AB:A8:96:F8:21:A2
X509v3 Authority Key Identifier:
A4:FD:B9:39:1B:81:B3:AA:EB:88:1D:D4:81:A9:B5:11:70:CC:A7:E1
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
Signature Algorithm: sha256WithRSAEncryption
tests: Update server and user certificates (2023) At least some of the previous versions have expired, so need to re-sign these to avoid EAP test case failures. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <j@w1.fi>
2023-04-18 10:04:43 +02:00
Signature Value:
tests: Update server and user certificates (2024) At least some of the previous versions have expired, so need to re-sign these to avoid EAP test case failures. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <j@w1.fi>
2024-04-17 20:25:56 +02:00
6c:9d:4b:89:89:80:3d:99:88:15:bd:fc:45:91:b3:72:4a:0d:
78:93:c8:71:29:19:56:3f:0a:33:c1:8c:10:4c:55:61:5a:f4:
b7:8f:2c:cb:ea:5f:e8:1e:a5:e0:36:30:c6:f4:c8:6a:63:32:
ac:bd:b8:c8:f6:2c:10:f3:45:f8:11:f7:35:12:d6:a3:5c:87:
34:29:66:ad:19:5f:cc:c1:b9:ad:ef:e4:02:93:4b:31:d3:3a:
1c:37:09:33:0f:ec:0f:7d:25:63:44:07:0f:53:1b:4a:83:0b:
42:4a:59:3b:2b:19:e9:50:2f:9e:51:03:f4:4e:77:d4:33:a7:
e8:67:da:97:e4:d3:8a:0f:72:b8:56:06:be:e4:59:a4:79:a6:
62:37:da:b1:4b:f8:0d:ee:64:2a:02:e9:67:bd:a2:13:b2:57:
44:1c:6d:80:75:29:cb:7f:38:d0:cb:13:65:78:b6:5f:7c:f5:
04:9f:f8:5a:69:36:a8:ca:20:b2:07:3c:b2:e3:ec:b2:db:41:
4f:bf:c8:21:23:c3:39:17:16:27:e5:89:cc:ae:b4:b2:85:a6:
0b:e7:16:e2:3b:5e:27:c8:7c:52:16:5c:9c:40:88:1c:e6:d3:
1e:8e:e9:d5:1d:d1:c2:f3:87:6b:d7:82:8a:a0:22:9a:45:dc:
15:4f:47:8e
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
-----BEGIN CERTIFICATE-----
tests: Update server and user certificates (2024) At least some of the previous versions have expired, so need to re-sign these to avoid EAP test case failures. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <j@w1.fi>
2024-04-17 20:25:56 +02:00
MIIDZTCCAk2gAwIBAgIJANjT46bL482QMA0GCSqGSIb3DQEBCwUAMEExCzAJBgNV
tests: Move from 1024 bit private keys to 2048 bit keys Crypto libraries are starting to refuse to accept the old shorter keys, so move all test certificates and DH to use 2048 bit (or longer) keys. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-02 19:58:40 +02:00
BAYTAkZJMRAwDgYDVQQHDAdUdXVzdWxhMQ4wDAYDVQQKDAV3MS5maTEQMA4GA1UE
tests: Update server and user certificates (2024) At least some of the previous versions have expired, so need to re-sign these to avoid EAP test case failures. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <j@w1.fi>
2024-04-17 20:25:56 +02:00
AwwHUm9vdCBDQTAeFw0yNDA0MTcxODI1MzdaFw0yNTA0MTcxODI1MzdaMDIxCzAJ
tests: Move from 1024 bit private keys to 2048 bit keys Crypto libraries are starting to refuse to accept the old shorter keys, so move all test certificates and DH to use 2048 bit (or longer) keys. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-02 19:58:40 +02:00
BgNVBAYTAkZJMQ4wDAYDVQQKDAV3MS5maTETMBEGA1UEAwwKb2NzcC53MS5maTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKcihV27OxwCmgFzqohjbqFD
M7X9Av4fyCMEi4xRUlvgzGJgKqq6iE9BOWv7NMCiencu4Vae78quZ9X5i1+rrofh
sBQjA61pS98rkXB1zb9lQBLQ6y+J8EEVG+1MDTqSlpH4zVQ4FetrRZ9ShX5OFatO
S+siwl2+/zZvQifYS8bhvvgIz6z9UTCi6IATAAW2BVVCC/oeQIRQCYwlNVQlRTmf
TnwK2cRKDBZOPmh/G63JUwhcuATU1pNi/a/5tB30lj6bnRRtHGwjrj3HtM8xkCBq
gJliflzp1dW9WU2j2dzp++h7ZYfV+Umevg7zqSHelOhU/IDP2uOPmsZMdhgO/qsC
tests: Update server and user certificates (2023) At least some of the previous versions have expired, so need to re-sign these to avoid EAP test case failures. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <j@w1.fi>
2023-04-18 10:04:43 +02:00
AwEAAaNvMG0wCQYDVR0TBAIwADALBgNVHQ8EBAMCBeAwEwYDVR0lBAwwCgYIKwYB
BQUHAwkwHQYDVR0OBBYEFC3VLm8cSbF8yaEMZjI1q6iW+CGiMB8GA1UdIwQYMBaA
tests: Update server and user certificates (2024) At least some of the previous versions have expired, so need to re-sign these to avoid EAP test case failures. This contains updates from running tests/hwsim/auth_server/update.sh. Signed-off-by: Jouni Malinen <j@w1.fi>
2024-04-17 20:25:56 +02:00
FKT9uTkbgbOq64gd1IGptRFwzKfhMA0GCSqGSIb3DQEBCwUAA4IBAQBsnUuJiYA9
mYgVvfxFkbNySg14k8hxKRlWPwozwYwQTFVhWvS3jyzL6l/oHqXgNjDG9MhqYzKs
vbjI9iwQ80X4Efc1EtajXIc0KWatGV/Mwbmt7+QCk0sx0zocNwkzD+wPfSVjRAcP
UxtKgwtCSlk7KxnpUC+eUQP0TnfUM6foZ9qX5NOKD3K4Vga+5FmkeaZiN9qxS/gN
7mQqAulnvaITsldEHG2AdSnLfzjQyxNleLZffPUEn/haaTaoyiCyBzyy4+yy20FP
v8ghI8M5FxYn5YnMrrSyhaYL5xbiO14nyHxSFlycQIgc5tMejunVHdHC84dr14KK
oCKaRdwVT0eO
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
-----END CERTIFICATE-----
Reference in a new issue Copy permalink