test/certs/setup.sh

234 # NC CA1 only permits the host www.good.org and *.good.com email address
238 NC="permitted;DNS:www.good.org, permitted;DNS:good.com,"
239 NC="$NC permitted;email:good@good.org, permitted;email:good.com,"
240 NC="$NC permitted;IP:127.0.0.1/255.255.255.255, permitted;IP:192.168.0.0/255.255.0.0"
242 NC=$NC ./mkcert.sh genca "Test NC CA 1" ncca1-key ncca1-cert root-key root-cert
244 # NC CA2 allows anything apart from hosts www.bad.org and *.bad.com
247 NC="excluded;DNS:www.bad.org, excluded;DNS:bad.com,"
248 NC="$NC excluded;email:bad@bad.org, excluded;email:bad.com, "
249 NC="$NC excluded;IP:10.0.0.0/255.0.0.0"
251 NC=$NC ./mkcert.sh genca "Test NC CA 2" ncca2-key ncca2-cert root-key root-cert
259 NC="permitted;DNS:www.good.net, permitted;DNS:ok.good.com, "
260 NC="$NC excluded;DNS:bad.ok.good.com"
261 NC=$NC ./mkcert.sh genca "Test NC sub CA" ncca3-key ncca3-cert \
266 ./mkcert.sh req alt1-key "O = Good NC Test Certificate 1" \
275 ./mkcert.sh req goodcn1-key "O = Good NC Test Certificate 1" \
283 ./mkcert.sh req badcn1-key "O = Good NC Test Certificate 1" \
290 ./mkcert.sh req alt2-key "O = Good NC Test Certificate 2" | \
297 ./mkcert.sh req badalt1-key "O = Bad NC Test Certificate 1" | \
304 ./mkcert.sh req badalt2-key 'O = Bad NC Test Certificate 2' | \
311 ./mkcert.sh req badalt3-key "O = Bad NC Test Certificate 3" | \
318 ./mkcert.sh req badalt4-key 'O = Bad NC Test Certificate 4' \
325 ./mkcert.sh req badalt5-key "O = Bad NC Test Certificate 5" | \
332 ./mkcert.sh req badalt6-key "O = Bad NC Test Certificate 6" \
339 REQMASK=MASK:0x800 ./mkcert.sh req badalt7-key "O = Bad NC Test Certificate 7" \
347 ./mkcert.sh req alt3-key "O = Good NC Test Certificate 3" \
356 ./mkcert.sh req badalt8-key "O = Bad NC Test Certificate 8" \
365 ./mkcert.sh req badalt9-key "O = Bad NC Test Certificate 9" \
374 ./mkcert.sh req badalt10-key "O = Bad NC Test Certificate 10" \