tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

crldp.cfg (1419B)


      1 # This Source Code Form is subject to the terms of the Mozilla Public
      2 # License, v. 2.0. If a copy of the MPL was not distributed with this
      3 # file, You can obtain one at http://mozilla.org/MPL/2.0/.
      4 
      5 scenario CRLDP
      6 
      7 entity Root
      8  type Root
      9 
     10 entity CA0
     11  type Intermediate
     12  issuer Root
     13 
     14 entity CA1
     15  type Intermediate
     16  crldp CA0
     17  issuer CA0
     18  serial 10
     19    aia CA0:Root
     20 
     21 entity EE11
     22  type EE
     23  crldp CA0
     24  issuer CA1
     25 
     26 entity CA2
     27  type Intermediate
     28  crldp CA0
     29  issuer CA0
     30  serial 20
     31    aia CA0:Root
     32 
     33 entity EE21
     34  type EE
     35  issuer CA2
     36 
     37 entity EE1
     38  type EE
     39  crldp CA0
     40  issuer CA0
     41  serial 30
     42    aia CA0:Root
     43 
     44 entity EE2
     45  type EE
     46  crldp CA0
     47  issuer CA0
     48  serial 40
     49    aia CA0:Root
     50 
     51 crl Root
     52 crl CA0
     53 crl CA1
     54 crl CA2
     55 
     56 revoke CA0
     57  serial 20
     58 
     59 revoke CA0
     60  serial 40
     61 
     62 copycrl CA0
     63 
     64 db All
     65 
     66 import Root::CTu,CTu,CTu
     67 
     68 # intermediate CA - OK, EE - OK
     69 verify EE11:CA1
     70  cert CA1:CA0
     71  trust Root:
     72  fetch
     73  rev_type chain
     74  rev_flags requireFreshInfo
     75  rev_mtype crl
     76  result pass
     77 
     78 # intermediate CA - revoked, EE - OK
     79 verify EE21:CA2
     80  cert CA2:CA0
     81  trust Root:
     82  fetch
     83  rev_type chain
     84  rev_flags requireFreshInfo
     85  rev_mtype crl
     86  result fail
     87 
     88 # direct EE - OK 
     89 verify EE1:CA0
     90  trust Root:
     91  fetch
     92  rev_type leaf
     93  rev_flags requireFreshInfo
     94  rev_mtype crl
     95  result pass
     96 
     97 # direct EE - revoked
     98 verify EE2:CA0
     99  trust Root:
    100  fetch
    101  rev_type leaf
    102  rev_flags requireFreshInfo
    103  rev_mtype crl
    104  result fail