summaryrefslogtreecommitdiffstats
path: root/test/certs/setup.sh
AgeCommit message (Expand)Author
2023-03-28Generate some certificates with the certificatePolicies extensionMatt Caswell
2023-02-07Add testcase for nc_match_single type confusionTomas Mraz
2022-08-18X509: add tests for purpose code signing in verify applicationLutz Jaenicke
2022-07-12test/certs/setup.sh: add missing comment on CA cert variant without basic con...Dr. David von Oheimb
2022-06-22Add test cases for verification of time stamping certificatesLutz Jaenicke
2022-06-03Enable setting SSL_CERT_FLAG_TLS_STRICT with ssl configTomas Mraz
2021-12-14Add a new Name Constraints test certMatt Caswell
2021-09-03Test for DANE cross cert fixViktor Dukhovni
2021-05-05test/certs/setup.sh: Fix two glitchesDr. David von Oheimb
2021-05-05test/certs/setup.sh: structural cleanupDr. David von Oheimb
2021-01-28check_sig_alg_match(): weaken sig nid comparison to allow RSA{,PSS} key verif...Dr. David von Oheimb
2021-01-20make various test CA certs RFC 5280 compliant w.r.t. X509 extensionsDr. David von Oheimb
2020-12-04test/certs/setup.sh: Fix two glitchesDr. David von Oheimb
2020-12-03x509_vfy.c: Restore rejection of expired trusted (root) certificateDr. David von Oheimb
2020-11-18Add some additional test certificates/keysMatt Caswell
2020-09-26Implement treatment of id-pkix-ocsp-no-check extension for OCSP_basic_verify()Dr. David von Oheimb
2020-09-26Generate a certificate with critical id-pkix-ocsp-nocheck extensionTomas Mraz
2020-09-21Correct certificate and key names for explicit ec param testTomas Mraz
2020-09-17Disallow certs with explicit curve in verification chainTomas Mraz
2020-07-28Fix a test_verify failureMatt Caswell
2020-07-28Deprecate -nodes in favor of -noenc in pkcs12 and req appDr. David von Oheimb
2020-07-01Fix issue 1418 by moving check of KU_KEY_CERT_SIGN and weakening check_issued()Dr. David von Oheimb
2020-04-06Add test cases for the non CA certificate with pathlen:0Tomas Mraz
2020-02-11Generate new Ed488 certificatesKurt Roeckx
2020-02-05Create a new embeddedSCTs1 that's signed using SHA256Kurt Roeckx
2019-08-09Add Restricted PSS certificate and keyMatt Caswell
2018-11-12Add some test brainpool certificatesMatt Caswell
2018-05-23Limit scope of CN name constraintsViktor Dukhovni
2017-04-25Add certificates with PSS signaturesDr. Stephen Henson
2016-07-11Extend mkcert.sh to support nameConstraints generation and more complexDr. Stephen Henson
2016-06-22Fix generation of expired CA certificate.Dr. Stephen Henson
2016-06-20Make it possible to generate proxy certs with test/certs/mkcert.shRichard Levitte
2016-04-03Move peer chain security checks into x509_vfy.cViktor Dukhovni
2016-03-29Require intermediate CAs to have basicConstraints CA:true.Viktor Dukhovni
2016-01-31Add tests for non-ca trusted roots and intermediatesViktor Dukhovni
2016-01-31Compat self-signed trust with reject-only aux dataViktor Dukhovni
2016-01-31Check chain extensions also for trusted certificatesViktor Dukhovni
2016-01-20Scripts to generate verify test certsViktor Dukhovni