diff options
Diffstat (limited to 'crypto/test/data/tls/README.txt')
| -rw-r--r-- | crypto/test/data/tls/README.txt | 189 |
1 files changed, 181 insertions, 8 deletions
diff --git a/crypto/test/data/tls/README.txt b/crypto/test/data/tls/README.txt index 2f456ed68..538325645 100644 --- a/crypto/test/data/tls/README.txt +++ b/crypto/test/data/tls/README.txt @@ -1,8 +1,181 @@ -The key and certificate .pem files here were generated using GnuTLS certtool and the accompanying template files: - - certtool --generate-privkey > x509-ca-key.pem - certtool --generate-privkey > x509-client-key.pem - certtool --generate-privkey > x509-server-key.pem - certtool --generate-self-signed --load-privkey x509-ca-key.pem --template ca.tmpl --outfile x509-ca.pem - certtool --generate-certificate --load-privkey x509-client-key.pem --load-ca-certificate x509-ca.pem --load-ca-privkey x509-ca-key.pem --template client.tmpl --outfile x509-client.pem - certtool --generate-certificate --load-privkey x509-server-key.pem --load-ca-certificate x509-ca.pem --load-ca-privkey x509-ca-key.pem --template server.tmpl --outfile x509-server.pem +# The key and certificate .pem files here were generated using GnuTLS certtool and the accompanying +# template files. (Note that the ed25519 files needed GnuTLS 3.6+, 3.6.12+ for ed448) + +# CA (signing) credentials: + + certtool --generate-privkey --outfile x509-ca-key-dsa.pem \ + --pkcs8 --password '' --dsa --bits 2048 + certtool --generate-self-signed --template ca.tmpl --outfile x509-ca-dsa.pem \ + --load-privkey x509-ca-key-dsa.pem --hash sha256 + + certtool --generate-privkey --outfile x509-ca-key-ecdsa.pem \ + --pkcs8 --password '' --ecdsa --curve secp256r1 + certtool --generate-self-signed --template ca.tmpl --outfile x509-ca-ecdsa.pem \ + --load-privkey x509-ca-key-ecdsa.pem --hash sha256 + + certtool --generate-privkey --outfile x509-ca-key-ed25519.pem \ + --pkcs8 --password '' --key-type=ed25519 + certtool --generate-self-signed --template ca.tmpl --outfile x509-ca-ed25519.pem \ + --load-privkey x509-ca-key-ed25519.pem + + certtool --generate-privkey --outfile x509-ca-key-ed448.pem \ + --pkcs8 --password '' --key-type=ed448 + certtool --generate-self-signed --template ca.tmpl --outfile x509-ca-ed448.pem \ + --load-privkey x509-ca-key-ed448.pem + + certtool --generate-privkey --outfile x509-ca-key-rsa.pem \ + --pkcs8 --password '' --rsa --bits 2048 + certtool --generate-self-signed --template ca.tmpl --outfile x509-ca-rsa.pem \ + --load-privkey x509-ca-key-rsa.pem --hash sha256 + + certtool --generate-privkey --outfile x509-ca-key-rsa_pss_256.pem \ + --pkcs8 --password '' --key-type='rsa-pss' --bits=2048 --hash=sha256 --salt-size=32 + certtool --generate-self-signed --template ca.tmpl --outfile x509-ca-rsa_pss_256.pem \ + --load-privkey x509-ca-key-rsa_pss_256.pem + + certtool --generate-privkey --outfile x509-ca-key-rsa_pss_384.pem \ + --pkcs8 --password '' --key-type='rsa-pss' --bits=2048 --hash=sha384 --salt-size=48 + certtool --generate-self-signed --template ca.tmpl --outfile x509-ca-rsa_pss_384.pem \ + --load-privkey x509-ca-key-rsa_pss_384.pem + + certtool --generate-privkey --outfile x509-ca-key-rsa_pss_512.pem \ + --pkcs8 --password '' --key-type='rsa-pss' --bits=2048 --hash=sha512 --salt-size=64 + certtool --generate-self-signed --template ca.tmpl --outfile x509-ca-rsa_pss_512.pem \ + --load-privkey x509-ca-key-rsa_pss_512.pem + +# Client agreement credentials: + + certtool --generate-privkey --outfile x509-client-key-ecdh.pem \ + --pkcs8 --password '' --ecc --curve secp256r1 + certtool --generate-certificate --template client_agree.tmpl --outfile x509-client-ecdh.pem \ + --load-privkey x509-client-key-ecdh.pem --hash sha256 \ + --load-ca-privkey x509-ca-key-ecdsa.pem --load-ca-certificate x509-ca-ecdsa.pem + +# Client signing credentials: + + certtool --generate-privkey --outfile x509-client-key-dsa.pem \ + --pkcs8 --password '' --dsa --bits 2048 + certtool --generate-certificate --template client_sign.tmpl --outfile x509-client-dsa.pem \ + --load-privkey x509-client-key-dsa.pem --hash sha256 \ + --load-ca-privkey x509-ca-key-dsa.pem --load-ca-certificate x509-ca-dsa.pem + + certtool --generate-privkey --outfile x509-client-key-ecdsa.pem \ + --pkcs8 --password '' --ecdsa --curve secp256r1 + certtool --generate-certificate --template client_sign.tmpl --outfile x509-client-ecdsa.pem \ + --load-privkey x509-client-key-ecdsa.pem --hash sha256 \ + --load-ca-privkey x509-ca-key-ecdsa.pem --load-ca-certificate x509-ca-ecdsa.pem + + certtool --generate-privkey --outfile x509-client-key-ed25519.pem \ + --pkcs8 --password '' --key-type=ed25519 + certtool --generate-certificate --template client_sign.tmpl --outfile x509-client-ed25519.pem \ + --load-privkey x509-client-key-ed25519.pem \ + --load-ca-privkey x509-ca-key-ed25519.pem --load-ca-certificate x509-ca-ed25519.pem + + certtool --generate-privkey --outfile x509-client-key-ed448.pem \ + --pkcs8 --password '' --key-type=ed448 + certtool --generate-certificate --template client_sign.tmpl --outfile x509-client-ed448.pem \ + --load-privkey x509-client-key-ed448.pem \ + --load-ca-privkey x509-ca-key-ed448.pem --load-ca-certificate x509-ca-ed448.pem + + certtool --generate-privkey --outfile x509-client-key-rsa.pem \ + --pkcs8 --password '' --rsa --bits 2048 + certtool --generate-certificate --template client_sign.tmpl --outfile x509-client-rsa.pem \ + --load-privkey x509-client-key-rsa.pem --hash sha256 \ + --load-ca-privkey x509-ca-key-rsa.pem --load-ca-certificate x509-ca-rsa.pem + + certtool --generate-privkey --outfile x509-client-key-rsa_pss_256.pem \ + --pkcs8 --password '' --key-type='rsa-pss' --bits=2048 --hash=sha256 --salt-size=32 + certtool --generate-certificate --template client_sign.tmpl \ + --outfile x509-client-rsa_pss_256.pem \ + --load-privkey x509-client-key-rsa_pss_256.pem \ + --load-ca-privkey x509-ca-key-rsa_pss_256.pem \ + --load-ca-certificate x509-ca-rsa_pss_256.pem + + certtool --generate-privkey --outfile x509-client-key-rsa_pss_384.pem \ + --pkcs8 --password '' --key-type='rsa-pss' --bits=2048 --hash=sha384 --salt-size=48 + certtool --generate-certificate --template client_sign.tmpl \ + --outfile x509-client-rsa_pss_384.pem \ + --load-privkey x509-client-key-rsa_pss_384.pem \ + --load-ca-privkey x509-ca-key-rsa_pss_384.pem \ + --load-ca-certificate x509-ca-rsa_pss_384.pem + + certtool --generate-privkey --outfile x509-client-key-rsa_pss_512.pem \ + --pkcs8 --password '' --key-type='rsa-pss' --bits=2048 --hash=sha512 --salt-size=64 + certtool --generate-certificate --template client_sign.tmpl \ + --outfile x509-client-rsa_pss_512.pem \ + --load-privkey x509-client-key-rsa_pss_512.pem \ + --load-ca-privkey x509-ca-key-rsa_pss_512.pem \ + --load-ca-certificate x509-ca-rsa_pss_512.pem + +# Server agreement credentials: + + certtool --generate-privkey --outfile x509-server-key-ecdh.pem \ + --pkcs8 --password '' --ecc --curve secp256r1 + certtool --generate-certificate --template server_agree.tmpl --outfile x509-server-ecdh.pem \ + --load-privkey x509-server-key-ecdh.pem --hash sha256 \ + --load-ca-privkey x509-ca-key-ecdsa.pem --load-ca-certificate x509-ca-ecdsa.pem + +# Server encryption credentials: + + certtool --generate-privkey --outfile x509-server-key-rsa-enc.pem \ + --pkcs8 --password '' --rsa --bits 2048 + certtool --generate-certificate --outfile x509-server-rsa-enc.pem \ + --load-privkey x509-server-key-rsa-enc.pem --template server_enc.tmpl \ + --load-ca-privkey x509-ca-key-rsa.pem --load-ca-certificate x509-ca-rsa.pem \ + --hash sha256 + +# Server signing credentials: + + certtool --generate-privkey --outfile x509-server-key-dsa.pem \ + --pkcs8 --password '' --dsa --bits 2048 + certtool --generate-certificate --template server_sign.tmpl --outfile x509-server-dsa.pem \ + --load-privkey x509-server-key-dsa.pem --hash sha256 \ + --load-ca-privkey x509-ca-key-dsa.pem --load-ca-certificate x509-ca-dsa.pem + + certtool --generate-privkey --outfile x509-server-key-ecdsa.pem \ + --pkcs8 --password '' --ecdsa --curve secp256r1 + certtool --generate-certificate --template server_sign.tmpl --outfile x509-server-ecdsa.pem \ + --load-privkey x509-server-key-ecdsa.pem --hash sha256 \ + --load-ca-privkey x509-ca-key-ecdsa.pem --load-ca-certificate x509-ca-ecdsa.pem + + certtool --generate-privkey --outfile x509-server-key-ed25519.pem \ + --pkcs8 --password '' --key-type=ed25519 + certtool --generate-certificate --template server_sign.tmpl --outfile x509-server-ed25519.pem \ + --load-privkey x509-server-key-ed25519.pem \ + --load-ca-privkey x509-ca-key-ed25519.pem --load-ca-certificate x509-ca-ed25519.pem + + certtool --generate-privkey --outfile x509-server-key-ed448.pem \ + --pkcs8 --password '' --key-type=ed448 + certtool --generate-certificate --template server_sign.tmpl --outfile x509-server-ed448.pem \ + --load-privkey x509-server-key-ed448.pem \ + --load-ca-privkey x509-ca-key-ed448.pem --load-ca-certificate x509-ca-ed448.pem + + certtool --generate-privkey --outfile x509-server-key-rsa-sign.pem \ + --pkcs8 --password '' --rsa --bits 2048 + certtool --generate-certificate --template server_sign.tmpl --outfile x509-server-rsa-sign.pem \ + --load-privkey x509-server-key-rsa-sign.pem --hash sha256 \ + --load-ca-privkey x509-ca-key-rsa.pem --load-ca-certificate x509-ca-rsa.pem + + certtool --generate-privkey --outfile x509-server-key-rsa_pss_256.pem \ + --pkcs8 --password '' --key-type='rsa-pss' --bits=2048 --hash=sha256 --salt-size=32 + certtool --generate-certificate --template server_sign.tmpl \ + --outfile x509-server-rsa_pss_256.pem \ + --load-privkey x509-server-key-rsa_pss_256.pem \ + --load-ca-privkey x509-ca-key-rsa_pss_256.pem \ + --load-ca-certificate x509-ca-rsa_pss_256.pem + + certtool --generate-privkey --outfile x509-server-key-rsa_pss_384.pem \ + --pkcs8 --password '' --key-type='rsa-pss' --bits=2048 --hash=sha384 --salt-size=48 + certtool --generate-certificate --template server_sign.tmpl \ + --outfile x509-server-rsa_pss_384.pem \ + --load-privkey x509-server-key-rsa_pss_384.pem \ + --load-ca-privkey x509-ca-key-rsa_pss_384.pem \ + --load-ca-certificate x509-ca-rsa_pss_384.pem + + certtool --generate-privkey --outfile x509-server-key-rsa_pss_512.pem \ + --pkcs8 --password '' --key-type='rsa-pss' --bits=2048 --hash=sha512 --salt-size=64 + certtool --generate-certificate --template server_sign.tmpl \ + --outfile x509-server-rsa_pss_512.pem \ + --load-privkey x509-server-key-rsa_pss_512.pem \ + --load-ca-privkey x509-ca-key-rsa_pss_512.pem \ + --load-ca-certificate x509-ca-rsa_pss_512.pem |