1*b40995a4Selric# Id 2ca1c9b0cSelric# id verify cert hxtool-verify-arguments... 3ca1c9b0cSelric# p(ass) f(ail) 4ca1c9b0cSelric# Those id's that end with i are invariants of the orignal test 5ca1c9b0cSelric# 6ca1c9b0cSelric# 4.1 Signature Verification 7ca1c9b0cSelric# 8ca1c9b0cSelric4.1.1 p ValidCertificatePathTest1EE.crt GoodCACert.crt GoodCACRL.crl 9ca1c9b0cSelric4.1.2 f InvalidCASignatureTest2EE.crt BadSignedCACert.crt BadSignedCACRL.crl 10ca1c9b0cSelric4.1.3 f InvalidEESignatureTest3EE.crt GoodCACert.crt GoodCACRL.crl 11ca1c9b0cSelric#4.1.4 p ValidDSASignaturesTest4EE.crt DSACACert.crt DSACACRL.crl 12ca1c9b0cSelric#4.1.5 p ValidDSAParameterInheritanceTest5EE.crl DSAParametersInheritedCACert.crt DSAParametersInheritedCACRL.crl DSACACert.crt DSACACRL.crl 13ca1c9b0cSelric#4.1.6 f InvalidDSASignaturesTest6EE.crt DSACACert.crt DSACACRL.crl 14ca1c9b0cSelric# 15ca1c9b0cSelric# 4.2 Validity Periods 16ca1c9b0cSelric# 17ca1c9b0cSelric4.2.1 f InvalidCAnotBeforeDateTest1EE.crt BadnotBeforeDateCACert.crt BadnotBeforeDateCACRL.crl 18ca1c9b0cSelric4.2.2 f InvalidEEnotBeforeDateTest2EE.crt GoodCACert.crt GoodCACRL.crl 19ca1c9b0cSelric4.2.3 p Validpre2000UTCnotBeforeDateTest3EE.crt GoodCACert.crt GoodCACRL.crl 20ca1c9b0cSelric4.2.4 p ValidGeneralizedTimenotBeforeDateTest4EE.crt GoodCACert.crt GoodCACRL.crl 21ca1c9b0cSelric4.2.5 f InvalidCAnotAfterDateTest5EE.crt BadnotAfterDateCACert.crt BadnotAfterDateCACRL.crl 22ca1c9b0cSelric4.2.6 f InvalidEEnotAfterDateTest6EE.crt GoodCACert.crt GoodCACRL.crl 23ca1c9b0cSelric4.2.7 f Invalidpre2000UTCEEnotAfterDateTest7EE.crt GoodCACert.crt GoodCACRL.crl 24ca1c9b0cSelric#4.2.8 p ValidGeneralizedTimenotAfterDateTest8EE.crt GoodCACert.crt GoodCACRL.crl 25ca1c9b0cSelric# 26ca1c9b0cSelric# 4.4 CRtests 27ca1c9b0cSelric# 28ca1c9b0cSelric4.4.1 f InvalidMissingCRLTest1EE.crt NoCRLCACert.crt 29ca1c9b0cSelric4.4.1i p InvalidMissingCRLTest1EE.crt --missing-revoke NoCRLCACert.crt 30ca1c9b0cSelric4.4.2 f InvalidRevokedEETest3EE.crt GoodCACert.crt InvalidRevokedCATest2EE.crt GoodCACRL.crl RevokedsubCACRL.crl 31ca1c9b0cSelric4.4.2i p InvalidRevokedEETest3EE.crt --missing-revoke GoodCACert.crt InvalidRevokedCATest2EE.crt 32ca1c9b0cSelric4.4.3 f InvalidRevokedEETest3EE.crt GoodCACert.crt GoodCACRL.crl 33ca1c9b0cSelric4.4.3i p InvalidRevokedEETest3EE.crt --missing-revoke GoodCACert.crt 34ca1c9b0cSelric4.4.4 f InvalidBadCRLSignatureTest4EE.crt BadCRLSignatureCACert.crt BadCRLSignatureCACRL.crl 35ca1c9b0cSelric4.4.4i p InvalidBadCRLSignatureTest4EE.crt --missing-revoke BadCRLSignatureCACert.crt 36ca1c9b0cSelric4.4.5 f InvalidBadCRLIssuerNameTest5EE.crt BadCRLIssuerNameCACert.crt BadCRLIssuerNameCACRL.crl 37ca1c9b0cSelric4.4.5i p InvalidBadCRLIssuerNameTest5EE.crt --missing-revoke BadCRLIssuerNameCACert.crt 38ca1c9b0cSelric4.4.6 f InvalidWrongCRLTest6EE.crt WrongCRLCACert.crt WrongCRLCACRL.crl 39ca1c9b0cSelric4.4.7 p ValidTwoCRLsTest7EE.crt TwoCRLsCACert.crt TwoCRLsCAGoodCRL.crl TwoCRLsCABadCRL.crl 40ca1c9b0cSelric4.4.8 f InvalidUnknownCRLEntryExtensionTest8EE.crt UnknownCRLEntryExtensionCACert.crt UnknownCRLEntryExtensionCACRL.crl 41ca1c9b0cSelric4.4.9 f InvalidUnknownCRLExtensionTest9EE.crt UnknownCRLExtensionCACert.crt UnknownCRLExtensionCACRL.crl 42ca1c9b0cSelric4.4.10 f InvalidUnknownCRLExtensionTest10EE.crt UnknownCRLExtensionCACert.crt UnknownCRLExtensionCACRL.crl 43ca1c9b0cSelric4.4.11 f InvalidOldCRLnextUpdateTest11EE.crt OldCRLnextUpdateCACert.crt OldCRLnextUpdateCACRL.crl 44ca1c9b0cSelric4.4.12 f Invalidpre2000CRLnextUpdateTest12EE.crt pre2000CRLnextUpdateCACert.crt pre2000CRLnextUpdateCACRL.crl 45ca1c9b0cSelric#4.4.13-xxx s ValidGeneralizedTimeCRLnextUpdateTest13EE.crt GeneralizedTimeCRLnextUpdateCACert.crt GeneralizedTimeCRLnextUpdateCACRL.crl 46ca1c9b0cSelric4.4.14 p ValidNegativeSerialNumberTest14EE.crt NegativeSerialNumberCACert.crt NegativeSerialNumberCACRL.crl 47ca1c9b0cSelric4.4.15 f InvalidNegativeSerialNumberTest15EE.crt NegativeSerialNumberCACert.crt NegativeSerialNumberCACRL.crl 48ca1c9b0cSelric4.4.16 p ValidLongSerialNumberTest16EE.crt LongSerialNumberCACert.crt LongSerialNumberCACRL.crl 49ca1c9b0cSelric4.4.17 p ValidLongSerialNumberTest17EE.crt LongSerialNumberCACert.crt LongSerialNumberCACRL.crl 50ca1c9b0cSelric4.4.18 f InvalidLongSerialNumberTest18EE.crt LongSerialNumberCACert.crt LongSerialNumberCACRL.crl 51ca1c9b0cSelric# 52ca1c9b0cSelric# 53ca1c9b0cSelric# 4.8 Ceificate Policies 54ca1c9b0cSelricincomplete4.8.2 p AllCertificatesNoPoliciesTest2EE.crt NoPoliciesCACert.crt NoPoliciesCACRL.crl 55ca1c9b0cSelricincomplete4.8.10 p AllCertificatesSamePoliciesTest10EE.crt PoliciesP12CACert.crt PoliciesP12CACRL.crl 56ca1c9b0cSelricincomplete4.8.13 p AllCertificatesSamePoliciesTest13EE.crt PoliciesP123CACert.crt PoliciesP123CACRL.crl 57ca1c9b0cSelricincomplete4.8.11 p AllCertificatesanyPolicyTest11EE.crt anyPolicyCACert.crt anyPolicyCACRL.crl 58ca1c9b0cSelricunknown p AnyPolicyTest14EE.crt anyPolicyCACert.crt anyPolicyCACRL.crl 59ca1c9b0cSelricunknown f BadSignedCACert.crt 60ca1c9b0cSelricunknown f BadnotAfterDateCACert.crt 61ca1c9b0cSelricunknown f BadnotBeforeDateCACert.crt 62ca1c9b0cSelric# 63ca1c9b0cSelric# 4.13 Name Constraints 64ca1c9b0cSelric# 65ca1c9b0cSelric4.13.1 p ValidDNnameConstraintsTest1EE.crt nameConstraintsDN1CACert.crt nameConstraintsDN1CACRL.crl 66ca1c9b0cSelric4.13.2 f InvalidDNnameConstraintsTest2EE.crt nameConstraintsDN1CACert.crt nameConstraintsDN1CACRL.crl 67ca1c9b0cSelric4.13.3 f InvalidDNnameConstraintsTest3EE.crt nameConstraintsDN1CACert.crt nameConstraintsDN1CACRL.crl 68ca1c9b0cSelric4.13.4 p ValidDNnameConstraintsTest4EE.crt nameConstraintsDN1CACert.crt nameConstraintsDN1CACRL.crl 69ca1c9b0cSelric4.13.5 p ValidDNnameConstraintsTest5EE.crt nameConstraintsDN2CACert.crt nameConstraintsDN2CACRL.crl 70ca1c9b0cSelric4.13.6 p ValidDNnameConstraintsTest6EE.crt nameConstraintsDN3CACert.crt nameConstraintsDN3CACRL.crl 71ca1c9b0cSelric4.13.7 f InvalidDNnameConstraintsTest7EE.crt nameConstraintsDN3CACert.crt nameConstraintsDN3CACRL.crl 72ca1c9b0cSelric4.13.8 f InvalidDNnameConstraintsTest8EE.crt nameConstraintsDN4CACert.crt nameConstraintsDN4CACRL.crl 73ca1c9b0cSelric4.13.9 f InvalidDNnameConstraintsTest9EE.crt nameConstraintsDN4CACert.crt nameConstraintsDN4CACRL.crl 74ca1c9b0cSelric4.13.10 f InvalidDNnameConstraintsTest10EE.crt nameConstraintsDN5CACert.crt nameConstraintsDN5CACRL.crl 75ca1c9b0cSelric4.13.11 p ValidDNnameConstraintsTest11EE.crt nameConstraintsDN5CACert.crt nameConstraintsDN5CACRL.crl 76ca1c9b0cSelric4.13.12 f InvalidDNnameConstraintsTest12EE.crt nameConstraintsDN1subCA1Cert.crt nameConstraintsDN1subCA1CRL.crl nameConstraintsDN1CACert.crt nameConstraintsDN1CACRL.crl 77ca1c9b0cSelric4.13.13 f InvalidDNnameConstraintsTest13EE.crt nameConstraintsDN1subCA1Cert.crt nameConstraintsDN1subCA1CRL.crl nameConstraintsDN1CACert.crt nameConstraintsDN1CACRL.crl 78ca1c9b0cSelric4.13.14 p ValidDNnameConstraintsTest14EE.crt nameConstraintsDN1subCA2Cert.crt nameConstraintsDN1subCA2CRL.crl nameConstraintsDN1CACert.crt nameConstraintsDN1CACRL.crl 79ca1c9b0cSelric4.13.15 f InvalidDNnameConstraintsTest15EE.crt nameConstraintsDN3subCA1Cert.crt nameConstraintsDN3subCA1CRL.crl nameConstraintsDN3CACert.crt nameConstraintsDN3CACRL.crl 80ca1c9b0cSelric4.13.16 f InvalidDNnameConstraintsTest16EE.crt nameConstraintsDN3subCA1Cert.crt nameConstraintsDN3subCA1CRL.crl nameConstraintsDN3CACert.crt nameConstraintsDN3CACRL.crl 81ca1c9b0cSelric4.13.17 f InvalidDNnameConstraintsTest17EE.crt nameConstraintsDN3subCA2Cert.crt nameConstraintsDN3subCA2CRL.crl nameConstraintsDN3CACert.crt nameConstraintsDN3CACRL.crl 82ca1c9b0cSelric4.13.18 p ValidDNnameConstraintsTest18EE.crt nameConstraintsDN3subCA2Cert.crt nameConstraintsDN3subCA2CRL.crl nameConstraintsDN3CACert.crt nameConstraintsDN3CACRL.crl 83ca1c9b0cSelric# 84ca1c9b0cSelric# no crl for self issued cert 85ca1c9b0cSelric# 86ca1c9b0cSelric#4.13.19 p ValidDNnameConstraintsTest19EE.crt nameConstraintsDN1SelfIssuedCACert.crt nameConstraintsDN1CACert.crt nameConstraintsDN1CACRL.crl 87ca1c9b0cSelric# ?? 88ca1c9b0cSelric4.13.20 f InvalidDNnameConstraintsTest20EE.crt nameConstraintsDN1CACert.crt nameConstraintsDN1CACRL.crl 89ca1c9b0cSelric#4.13.21 p ValidRFC822nameConstraintsTest21EE.crt nameConstraintsRFC822CA1Cert.crt nameConstraintsRFC822CA1CRL.crl 90ca1c9b0cSelric#page 74 91ca1c9b0cSelricend 92