test/certs/setup.sh

238 # NC CA1 only permits the host www.good.org and *.good.com email address
242 NC="permitted;DNS:www.good.org, permitted;DNS:good.com,"
243 NC="$NC permitted;email:good@good.org, permitted;email:good.com,"
244 NC="$NC permitted;IP:127.0.0.1/255.255.255.255, permitted;IP:192.168.0.0/255.255.0.0"
246 NC=$NC ./mkcert.sh genca "Test NC CA 1" ncca1-key ncca1-cert root-key root-cert
248 # NC CA2 allows anything apart from hosts www.bad.org and *.bad.com
251 NC="excluded;DNS:www.bad.org, excluded;DNS:bad.com,"
252 NC="$NC excluded;email:bad@bad.org, excluded;email:bad.com, "
253 NC="$NC excluded;IP:10.0.0.0/255.0.0.0"
255 NC=$NC ./mkcert.sh genca "Test NC CA 2" ncca2-key ncca2-cert root-key root-cert
263 NC="permitted;DNS:www.good.net, permitted;DNS:ok.good.com, "
264 NC="$NC excluded;DNS:bad.ok.good.com"
265 NC=$NC ./mkcert.sh genca "Test NC sub CA" ncca3-key ncca3-cert \
270 ./mkcert.sh req alt1-key "O = Good NC Test Certificate 1" \
279 ./mkcert.sh req goodcn1-key "O = Good NC Test Certificate 1" \
287 ./mkcert.sh req goodcn2-key "O = Good NC Test Certificate 1" \
293 ./mkcert.sh req badcn1-key "O = Good NC Test Certificate 1" \
300 ./mkcert.sh req alt2-key "O = Good NC Test Certificate 2" | \
307 ./mkcert.sh req badalt1-key "O = Bad NC Test Certificate 1" | \
314 ./mkcert.sh req badalt2-key 'O = Bad NC Test Certificate 2' | \
321 ./mkcert.sh req badalt3-key "O = Bad NC Test Certificate 3" | \
328 ./mkcert.sh req badalt4-key 'O = Bad NC Test Certificate 4' \
335 ./mkcert.sh req badalt5-key "O = Bad NC Test Certificate 5" | \
342 ./mkcert.sh req badalt6-key "O = Bad NC Test Certificate 6" \
349 REQMASK=MASK:0x800 ./mkcert.sh req badalt7-key "O = Bad NC Test Certificate 7" \
357 ./mkcert.sh req alt3-key "O = Good NC Test Certificate 3" \
366 ./mkcert.sh req badalt8-key "O = Bad NC Test Certificate 8" \
375 ./mkcert.sh req badalt9-key "O = Bad NC Test Certificate 9" \
384 ./mkcert.sh req badalt10-key "O = Bad NC Test Certificate 10" \
393 NC="excluded;otherName:SRVName;UTF8STRING:foo@example.org" ./mkcert.sh genca \
394     "Test NC CA othername" nccaothername-key nccaothername-cert \
397 ./mkcert.sh req alt-email-key "O = NC email in othername Test Certificate" | \