lib/hx509/test_ca.in

59 	  --ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
67 	anchor:FILE:$srcdir/data/ca.crt > /dev/null || exit 1
72 	--signer=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key || exit 1
78 	anchor:FILE:$srcdir/data/ca.crt > /dev/null || exit 1
83 	--signer=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
90 	anchor:FILE:$srcdir/data/ca.crt > /dev/null && exit 1
96 	--signer=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
103 	anchor:FILE:$srcdir/data/ca.crt > /dev/null && exit 1
107 	  --ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
115 	  --ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
124 	  --ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
133 	  --ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
142 	  --ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
154 	anchor:FILE:$srcdir/data/ca.crt > /dev/null || exit 1
160 	anchor:FILE:$srcdir/data/ca.crt > /dev/null && exit 1
166 	anchor:FILE:$srcdir/data/ca.crt > /dev/null && exit 1
170 	  --ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
180 	anchor:FILE:$srcdir/data/ca.crt > /dev/null || exit 1
186 	anchor:FILE:$srcdir/data/ca.crt > /dev/null && exit 1
190 	  --ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
199 	  --ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
207 	  --ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
216 	  --ca-private-key=FILE:$srcdir/data/key.der \
220 echo "issue ca cert"
222 	  --ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
223 	  --issue-ca \
224 	  --subject="cn=ca-cert" \
226 	  --certificate="FILE:cert-ca.der" || exit 1
228 echo "issue self-signed ca cert"
231 	  --issue-ca \
232 	  --ca-private-key=FILE:$srcdir/data/key.der \
233 	  --subject="cn=ca-root" \
234 	  --certificate="FILE:cert-ca.der" || exit 1
238 	  --ca-certificate=FILE:$srcdir/data/test.crt,$srcdir/data/test.key \
248     anchor:FILE:$srcdir/data/ca.crt > /dev/null || exit 1
250 echo "issue ca cert (generate rsa key)"
253 	  --issue-ca \
258 	  --certificate="FILE:cert-ca.pem" || exit 1
260 echo "issue sub-ca cert (generate rsa key)"
262 	  --ca-certificate=FILE:cert-ca.pem \
263 	  --issue-ca \
267 	  --certificate="FILE:cert-sub-ca.pem" || exit 1
271 	  --ca-certificate=FILE:cert-ca.pem \
276 echo "issue sub-ca ee cert (generate rsa key)"
278 	  --ca-certificate=FILE:cert-sub-ca.pem \
286 	anchor:FILE:cert-ca.pem > /dev/null || exit 1
291 	chain:FILE:cert-sub-ca.pem \
292 	anchor:FILE:cert-ca.pem || exit 1
303 	--anchors=FILE:cert-ca.pem \
307 echo "extend ca cert"
310 	  --issue-ca \
313 	  --ca-private-key=FILE:cert-ca.pem \
315 	  --certificate="FILE:cert-ca.pem" || exit 1
317 echo "verify certificate generated by previous ca"
320 	anchor:FILE:cert-ca.pem > /dev/null || exit 1
322 echo "extend ca cert (template)"
325 	  --issue-ca \
327 	  --template-certificate="FILE:cert-ca.pem" \
330 	  --ca-private-key=FILE:cert-ca.pem \
331 	  --certificate="FILE:cert-ca.pem" || exit 1
333 echo "verify certificate generated by previous ca"
336 	anchor:FILE:cert-ca.pem > /dev/null || exit 1
338 echo "extend sub-ca cert (template)"
340 	  --ca-certificate=FILE:cert-ca.pem \
341 	  --issue-ca \
343 	  --template-certificate="FILE:cert-sub-ca.pem" \
350 	chain:FILE:cert-sub-ca.pem \
351 	anchor:FILE:cert-ca.pem > /dev/null || exit 1
355 echo "extend ca cert (too low path-length constraint)"
358 	  --issue-ca \
360 	  --template-certificate="FILE:cert-ca.pem" \
363 	  --ca-private-key=FILE:cert-ca.pem \
364 	  --certificate="FILE:cert-ca.pem" || exit 1
369 	chain:FILE:cert-sub-ca.pem \
370 	anchor:FILE:cert-ca.pem > /dev/null && exit 1
372 echo "extend ca cert (exact path-length constraint)"
375 	  --issue-ca \
377 	  --template-certificate="FILE:cert-ca.pem" \
380 	  --ca-private-key=FILE:cert-ca.pem \
381 	  --certificate="FILE:cert-ca.pem" || exit 1
386 	chain:FILE:cert-sub-ca.pem \
387 	anchor:FILE:cert-ca.pem > /dev/null || exit 1
391 	  --ca-certificate=FILE:cert-ca.pem \
393 	  --template-certificate="FILE:cert-sub-ca.pem" \
401 	anchor:FILE:cert-ca.pem > /dev/null && exit 1
405 	  --ca-certificate=FILE:cert-ca.pem \
413 	  --ca-certificate=FILE:cert-ca.pem \
422 	anchor:FILE:cert-ca.pem > /dev/null || exit 1