Lines Matching refs:certificate
51 echo "create certificate request"
57 echo "issue certificate"
58 ${hxtool} issue-certificate \
59 --ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
62 --certificate="FILE:cert-ee.pem" || exit 1
64 echo "verify certificate"
74 echo "verify certificate (with CRL)"
86 echo "verify certificate (included in CRL)"
99 echo "verify certificate (included in CRL, and lifetime 1 month)"
105 echo "issue certificate (10years 1 month)"
106 ${hxtool} issue-certificate \
107 --ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
111 --certificate="FILE:cert-ee.pem" || exit 1
113 echo "issue certificate (with https ekus)"
114 ${hxtool} issue-certificate \
115 --ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
120 --certificate="FILE:cert-ee.pem" || exit 1
122 echo "issue certificate (pkinit KDC)"
123 ${hxtool} issue-certificate \
124 --ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
129 --certificate="FILE:cert-ee.pem" || exit 1
131 echo "issue certificate (pkinit client)"
132 ${hxtool} issue-certificate \
133 --ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
138 --certificate="FILE:cert-ee.pem" || exit 1
140 echo "issue certificate (hostnames)"
141 ${hxtool} issue-certificate \
142 --ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
148 --certificate="FILE:cert-ee.pem" || exit 1
150 echo "verify certificate hostname (ok)"
156 echo "verify certificate hostname (fail)"
162 echo "verify certificate hostname (fail)"
168 echo "issue certificate (hostname in CN)"
169 ${hxtool} issue-certificate \
170 --ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
174 --certificate="FILE:cert-ee.pem" || exit 1
176 echo "verify certificate hostname (ok)"
182 echo "verify certificate hostname (fail)"
188 echo "issue certificate (email)"
189 ${hxtool} issue-certificate \
190 --ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
195 --certificate="FILE:cert-ee.pem" || exit 1
197 echo "issue certificate (email, null subject DN)"
198 ${hxtool} issue-certificate \
199 --ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
203 --certificate="FILE:cert-null.pem" || exit 1
205 echo "issue certificate (jabber)"
206 ${hxtool} issue-certificate \
207 --ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
211 --certificate="FILE:cert-ee.pem" || exit 1
214 ${hxtool} issue-certificate \
218 --certificate="FILE:cert-ee.pem" || exit 1
221 ${hxtool} issue-certificate \
222 --ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
226 --certificate="FILE:cert-ca.der" || exit 1
229 ${hxtool} issue-certificate \
234 --certificate="FILE:cert-ca.der" || exit 1
236 echo "issue proxy certificate"
237 ${hxtool} issue-certificate \
238 --ca-certificate=FILE:$srcdir/data/test.crt,$srcdir/data/test.key \
241 --certificate="FILE:cert-proxy.der" || exit 1
245 --allow-proxy-certificate \
251 ${hxtool} issue-certificate \
258 --certificate="FILE:cert-ca.pem" || exit 1
261 ${hxtool} issue-certificate \
262 --ca-certificate=FILE:cert-ca.pem \
267 --certificate="FILE:cert-sub-ca.pem" || exit 1
270 ${hxtool} issue-certificate \
271 --ca-certificate=FILE:cert-ca.pem \
274 --certificate="FILE:cert-ee.pem" || exit 1
277 ${hxtool} issue-certificate \
278 --ca-certificate=FILE:cert-sub-ca.pem \
281 --certificate="FILE:cert-sub-ee.pem" || exit 1
283 echo "verify certificate (ee)"
288 echo "verify certificate (sub-ee)"
296 --certificate=FILE:cert-ee.pem \
308 ${hxtool} issue-certificate \
315 --certificate="FILE:cert-ca.pem" || exit 1
317 echo "verify certificate generated by previous ca"
323 ${hxtool} issue-certificate \
327 --template-certificate="FILE:cert-ca.pem" \
331 --certificate="FILE:cert-ca.pem" || exit 1
333 echo "verify certificate generated by previous ca"
339 ${hxtool} issue-certificate \
340 --ca-certificate=FILE:cert-ca.pem \
343 --template-certificate="FILE:cert-sub-ca.pem" \
345 --certificate="FILE:cert-sub-ca2.pem" || exit 1
347 echo "verify certificate (sub-ee) with extended chain"
356 ${hxtool} issue-certificate \
360 --template-certificate="FILE:cert-ca.pem" \
364 --certificate="FILE:cert-ca.pem" || exit 1
366 echo "verify failure of certificate (sub-ee) with path-length constraint"
373 ${hxtool} issue-certificate \
377 --template-certificate="FILE:cert-ca.pem" \
381 --certificate="FILE:cert-ca.pem" || exit 1
383 echo "verify certificate (sub-ee) with exact path-length constraint"
390 ${hxtool} issue-certificate \
391 --ca-certificate=FILE:cert-ca.pem \
393 --template-certificate="FILE:cert-sub-ca.pem" \
395 --certificate="FILE:cert-sub-ca2.pem" || exit 1
397 echo "verify failure certificate (sub-ee) with missing isCA"
404 ${hxtool} issue-certificate \
405 --ca-certificate=FILE:cert-ca.pem \
409 --certificate="FILE:cert-ee.pem" || exit 1
412 ${hxtool} issue-certificate \
413 --ca-certificate=FILE:cert-ca.pem \
417 --certificate="FILE:cert-ee.pem" || exit 1
419 echo "verify certificate null subject"