xref: /netbsd-src/crypto/external/bsd/heimdal/dist/lib/hx509/data/nist-data (revision b40995a48bd40728880cac5a8845521b57dccf8c)
1*b40995a4Selric# Id
2ca1c9b0cSelric# id verify cert hxtool-verify-arguments...
3ca1c9b0cSelric# p(ass) f(ail)
4ca1c9b0cSelric# Those id's that end with i are invariants of the orignal test
5ca1c9b0cSelric#
6ca1c9b0cSelric# 4.1 Signature Verification
7ca1c9b0cSelric#
8ca1c9b0cSelric4.1.1   p ValidCertificatePathTest1EE.crt GoodCACert.crt GoodCACRL.crl
9ca1c9b0cSelric4.1.2   f InvalidCASignatureTest2EE.crt BadSignedCACert.crt BadSignedCACRL.crl
10ca1c9b0cSelric4.1.3   f InvalidEESignatureTest3EE.crt GoodCACert.crt GoodCACRL.crl
11ca1c9b0cSelric#4.1.4	p ValidDSASignaturesTest4EE.crt DSACACert.crt DSACACRL.crl
12ca1c9b0cSelric#4.1.5	p ValidDSAParameterInheritanceTest5EE.crl DSAParametersInheritedCACert.crt DSAParametersInheritedCACRL.crl DSACACert.crt DSACACRL.crl
13ca1c9b0cSelric#4.1.6	f InvalidDSASignaturesTest6EE.crt DSACACert.crt DSACACRL.crl
14ca1c9b0cSelric#
15ca1c9b0cSelric# 4.2 Validity Periods
16ca1c9b0cSelric#
17ca1c9b0cSelric4.2.1   f InvalidCAnotBeforeDateTest1EE.crt BadnotBeforeDateCACert.crt BadnotBeforeDateCACRL.crl
18ca1c9b0cSelric4.2.2   f InvalidEEnotBeforeDateTest2EE.crt GoodCACert.crt GoodCACRL.crl
19ca1c9b0cSelric4.2.3   p Validpre2000UTCnotBeforeDateTest3EE.crt GoodCACert.crt GoodCACRL.crl
20ca1c9b0cSelric4.2.4   p ValidGeneralizedTimenotBeforeDateTest4EE.crt GoodCACert.crt GoodCACRL.crl
21ca1c9b0cSelric4.2.5   f InvalidCAnotAfterDateTest5EE.crt BadnotAfterDateCACert.crt BadnotAfterDateCACRL.crl
22ca1c9b0cSelric4.2.6   f InvalidEEnotAfterDateTest6EE.crt GoodCACert.crt GoodCACRL.crl
23ca1c9b0cSelric4.2.7   f Invalidpre2000UTCEEnotAfterDateTest7EE.crt GoodCACert.crt GoodCACRL.crl
24ca1c9b0cSelric#4.2.8   p ValidGeneralizedTimenotAfterDateTest8EE.crt GoodCACert.crt GoodCACRL.crl
25ca1c9b0cSelric#
26ca1c9b0cSelric# 4.4 CRtests
27ca1c9b0cSelric#
28ca1c9b0cSelric4.4.1   f InvalidMissingCRLTest1EE.crt NoCRLCACert.crt
29ca1c9b0cSelric4.4.1i  p InvalidMissingCRLTest1EE.crt --missing-revoke NoCRLCACert.crt
30ca1c9b0cSelric4.4.2   f InvalidRevokedEETest3EE.crt GoodCACert.crt InvalidRevokedCATest2EE.crt GoodCACRL.crl RevokedsubCACRL.crl
31ca1c9b0cSelric4.4.2i  p InvalidRevokedEETest3EE.crt --missing-revoke GoodCACert.crt InvalidRevokedCATest2EE.crt
32ca1c9b0cSelric4.4.3   f InvalidRevokedEETest3EE.crt GoodCACert.crt GoodCACRL.crl
33ca1c9b0cSelric4.4.3i  p InvalidRevokedEETest3EE.crt --missing-revoke GoodCACert.crt
34ca1c9b0cSelric4.4.4   f InvalidBadCRLSignatureTest4EE.crt BadCRLSignatureCACert.crt BadCRLSignatureCACRL.crl
35ca1c9b0cSelric4.4.4i  p InvalidBadCRLSignatureTest4EE.crt --missing-revoke BadCRLSignatureCACert.crt
36ca1c9b0cSelric4.4.5   f InvalidBadCRLIssuerNameTest5EE.crt BadCRLIssuerNameCACert.crt BadCRLIssuerNameCACRL.crl
37ca1c9b0cSelric4.4.5i  p InvalidBadCRLIssuerNameTest5EE.crt --missing-revoke BadCRLIssuerNameCACert.crt
38ca1c9b0cSelric4.4.6   f InvalidWrongCRLTest6EE.crt WrongCRLCACert.crt WrongCRLCACRL.crl
39ca1c9b0cSelric4.4.7   p ValidTwoCRLsTest7EE.crt TwoCRLsCACert.crt TwoCRLsCAGoodCRL.crl TwoCRLsCABadCRL.crl
40ca1c9b0cSelric4.4.8   f InvalidUnknownCRLEntryExtensionTest8EE.crt UnknownCRLEntryExtensionCACert.crt UnknownCRLEntryExtensionCACRL.crl
41ca1c9b0cSelric4.4.9   f InvalidUnknownCRLExtensionTest9EE.crt UnknownCRLExtensionCACert.crt UnknownCRLExtensionCACRL.crl
42ca1c9b0cSelric4.4.10  f InvalidUnknownCRLExtensionTest10EE.crt UnknownCRLExtensionCACert.crt UnknownCRLExtensionCACRL.crl
43ca1c9b0cSelric4.4.11  f InvalidOldCRLnextUpdateTest11EE.crt OldCRLnextUpdateCACert.crt OldCRLnextUpdateCACRL.crl
44ca1c9b0cSelric4.4.12  f Invalidpre2000CRLnextUpdateTest12EE.crt pre2000CRLnextUpdateCACert.crt pre2000CRLnextUpdateCACRL.crl
45ca1c9b0cSelric#4.4.13-xxx s ValidGeneralizedTimeCRLnextUpdateTest13EE.crt GeneralizedTimeCRLnextUpdateCACert.crt GeneralizedTimeCRLnextUpdateCACRL.crl
46ca1c9b0cSelric4.4.14  p ValidNegativeSerialNumberTest14EE.crt NegativeSerialNumberCACert.crt NegativeSerialNumberCACRL.crl
47ca1c9b0cSelric4.4.15  f InvalidNegativeSerialNumberTest15EE.crt NegativeSerialNumberCACert.crt NegativeSerialNumberCACRL.crl
48ca1c9b0cSelric4.4.16  p ValidLongSerialNumberTest16EE.crt LongSerialNumberCACert.crt LongSerialNumberCACRL.crl
49ca1c9b0cSelric4.4.17  p ValidLongSerialNumberTest17EE.crt LongSerialNumberCACert.crt LongSerialNumberCACRL.crl
50ca1c9b0cSelric4.4.18  f InvalidLongSerialNumberTest18EE.crt LongSerialNumberCACert.crt LongSerialNumberCACRL.crl
51ca1c9b0cSelric#
52ca1c9b0cSelric#
53ca1c9b0cSelric# 4.8 Ceificate Policies
54ca1c9b0cSelricincomplete4.8.2 p AllCertificatesNoPoliciesTest2EE.crt NoPoliciesCACert.crt NoPoliciesCACRL.crl
55ca1c9b0cSelricincomplete4.8.10 p AllCertificatesSamePoliciesTest10EE.crt PoliciesP12CACert.crt PoliciesP12CACRL.crl
56ca1c9b0cSelricincomplete4.8.13 p AllCertificatesSamePoliciesTest13EE.crt PoliciesP123CACert.crt PoliciesP123CACRL.crl
57ca1c9b0cSelricincomplete4.8.11 p AllCertificatesanyPolicyTest11EE.crt anyPolicyCACert.crt anyPolicyCACRL.crl
58ca1c9b0cSelricunknown p AnyPolicyTest14EE.crt anyPolicyCACert.crt anyPolicyCACRL.crl
59ca1c9b0cSelricunknown f BadSignedCACert.crt
60ca1c9b0cSelricunknown f BadnotAfterDateCACert.crt
61ca1c9b0cSelricunknown f BadnotBeforeDateCACert.crt
62ca1c9b0cSelric#
63ca1c9b0cSelric# 4.13 Name Constraints
64ca1c9b0cSelric#
65ca1c9b0cSelric4.13.1   p ValidDNnameConstraintsTest1EE.crt nameConstraintsDN1CACert.crt nameConstraintsDN1CACRL.crl
66ca1c9b0cSelric4.13.2   f InvalidDNnameConstraintsTest2EE.crt nameConstraintsDN1CACert.crt nameConstraintsDN1CACRL.crl
67ca1c9b0cSelric4.13.3   f InvalidDNnameConstraintsTest3EE.crt nameConstraintsDN1CACert.crt nameConstraintsDN1CACRL.crl
68ca1c9b0cSelric4.13.4   p ValidDNnameConstraintsTest4EE.crt nameConstraintsDN1CACert.crt nameConstraintsDN1CACRL.crl
69ca1c9b0cSelric4.13.5   p ValidDNnameConstraintsTest5EE.crt nameConstraintsDN2CACert.crt nameConstraintsDN2CACRL.crl
70ca1c9b0cSelric4.13.6   p ValidDNnameConstraintsTest6EE.crt nameConstraintsDN3CACert.crt nameConstraintsDN3CACRL.crl
71ca1c9b0cSelric4.13.7   f InvalidDNnameConstraintsTest7EE.crt nameConstraintsDN3CACert.crt nameConstraintsDN3CACRL.crl
72ca1c9b0cSelric4.13.8   f InvalidDNnameConstraintsTest8EE.crt nameConstraintsDN4CACert.crt nameConstraintsDN4CACRL.crl
73ca1c9b0cSelric4.13.9   f InvalidDNnameConstraintsTest9EE.crt nameConstraintsDN4CACert.crt nameConstraintsDN4CACRL.crl
74ca1c9b0cSelric4.13.10   f InvalidDNnameConstraintsTest10EE.crt nameConstraintsDN5CACert.crt nameConstraintsDN5CACRL.crl
75ca1c9b0cSelric4.13.11   p ValidDNnameConstraintsTest11EE.crt nameConstraintsDN5CACert.crt nameConstraintsDN5CACRL.crl
76ca1c9b0cSelric4.13.12   f InvalidDNnameConstraintsTest12EE.crt nameConstraintsDN1subCA1Cert.crt nameConstraintsDN1subCA1CRL.crl nameConstraintsDN1CACert.crt nameConstraintsDN1CACRL.crl
77ca1c9b0cSelric4.13.13   f InvalidDNnameConstraintsTest13EE.crt nameConstraintsDN1subCA1Cert.crt nameConstraintsDN1subCA1CRL.crl nameConstraintsDN1CACert.crt nameConstraintsDN1CACRL.crl
78ca1c9b0cSelric4.13.14   p ValidDNnameConstraintsTest14EE.crt nameConstraintsDN1subCA2Cert.crt nameConstraintsDN1subCA2CRL.crl nameConstraintsDN1CACert.crt nameConstraintsDN1CACRL.crl
79ca1c9b0cSelric4.13.15   f InvalidDNnameConstraintsTest15EE.crt nameConstraintsDN3subCA1Cert.crt nameConstraintsDN3subCA1CRL.crl nameConstraintsDN3CACert.crt nameConstraintsDN3CACRL.crl
80ca1c9b0cSelric4.13.16   f InvalidDNnameConstraintsTest16EE.crt nameConstraintsDN3subCA1Cert.crt nameConstraintsDN3subCA1CRL.crl nameConstraintsDN3CACert.crt nameConstraintsDN3CACRL.crl
81ca1c9b0cSelric4.13.17   f InvalidDNnameConstraintsTest17EE.crt nameConstraintsDN3subCA2Cert.crt nameConstraintsDN3subCA2CRL.crl nameConstraintsDN3CACert.crt nameConstraintsDN3CACRL.crl
82ca1c9b0cSelric4.13.18   p ValidDNnameConstraintsTest18EE.crt nameConstraintsDN3subCA2Cert.crt nameConstraintsDN3subCA2CRL.crl nameConstraintsDN3CACert.crt nameConstraintsDN3CACRL.crl
83ca1c9b0cSelric#
84ca1c9b0cSelric# no crl for self issued cert
85ca1c9b0cSelric#
86ca1c9b0cSelric#4.13.19   p ValidDNnameConstraintsTest19EE.crt nameConstraintsDN1SelfIssuedCACert.crt nameConstraintsDN1CACert.crt nameConstraintsDN1CACRL.crl
87ca1c9b0cSelric# ??
88ca1c9b0cSelric4.13.20   f InvalidDNnameConstraintsTest20EE.crt nameConstraintsDN1CACert.crt nameConstraintsDN1CACRL.crl
89ca1c9b0cSelric#4.13.21   p ValidRFC822nameConstraintsTest21EE.crt nameConstraintsRFC822CA1Cert.crt nameConstraintsRFC822CA1CRL.crl
90ca1c9b0cSelric#page 74
91ca1c9b0cSelricend
92