Age | Commit message (Collapse) | Author |
|
OpenBSD-Regress-ID: 079c18a9ab9663f4af419327c759fc1e2bc78fd8
|
|
regression test for 'wildcard CA' serial/key ID revocations
|
|
this test was broken in at least two ways, such that it
wasn't checking that a KRL was not excluding valid keys
|
|
fix KRL generation when multiple CAs are in use
We would generate an invalid KRL when revoking certs by serial
number for multiple CA keys due to a section being written out
twice.
Also extend the regress test to catch this case by having it
produce a multi-CA KRL.
Reported by peter AT pean.org
|
|
[regress/krl.sh]
regress test for broken consecutive revoked serial number ranges
|
|
[regress/krl.sh]
add some reminders for additional tests that I'd like to implement
|
|
Move the jot helper function to portable-specific part of test-exec.sh.
|
|
|
|
|
|
|
|
|
|
[regress/Makefile regress/cert-userkey.sh regress/krl.sh]
Tests for Key Revocation Lists (KRLs)
|