node/test/fixtures/keys
Kumar Rishav dee8039c9b
tls: fix order of setting cipher before setting cert and key
Set the cipher list and cipher suite before anything else
because @SECLEVEL=<n> changes the security level and
that affects subsequent operations.

Fixes: https://github.com/nodejs/node/issues/36655
Fixes: https://github.com/nodejs/node/issues/49549
Refs: https://github.com/orgs/nodejs/discussions/49634
Refs: https://github.com/orgs/nodejs/discussions/46545
Refs: https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_security_level.html
PR-URL: https://github.com/nodejs/node/pull/50186
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Paolo Insogna <paolo@cowtech.it>
2023-11-23 10:15:46 +01:00
..
fake-startcom-root-issued-certs test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
selfsigned-no-keycertsign test: improve https_renew_cert.sh script 2022-03-17 12:59:46 +00:00
.gitattributes test: move ed25519 keypair to fixtures/keys/ 2019-06-10 09:55:56 -07:00
agent1-cert.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent1-csr.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent1-key.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent1.cnf test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent1.pfx test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent2-cert.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent2-csr.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent2-key.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent2.cnf test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent3-cert.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent3-csr.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent3-key.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent3.cnf test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent4-cert.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent4-csr.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent4-key.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent4.cnf test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent5-cert.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent5-csr.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent5-key.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent5.cnf test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent6-cert.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent6-csr.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent6-key.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent6.cnf test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent6.pfx test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent7-cert.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent7-csr.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent7-key.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent7.cnf
agent8-cert.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent8-csr.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent8-key.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent8.cnf
agent9-cert.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent9-csr.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent9-key.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent9.cnf
agent10-cert.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent10-csr.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent10-key.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent10.cnf test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent10.pfx test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
agent11-cert.pem tls: fix order of setting cipher before setting cert and key 2023-11-23 10:15:46 +01:00
agent11-key.pem tls: fix order of setting cipher before setting cert and key 2023-11-23 10:15:46 +01:00
ca1-cert.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ca1-cert.srl test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ca1-key.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ca1.cnf test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ca2-cert.pem
ca2-cert.srl test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ca2-crl.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ca2-database.txt test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ca2-database.txt.attr
ca2-database.txt.attr.old
ca2-database.txt.old test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ca2-key.pem
ca2-serial
ca2.cnf test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ca3-cert.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ca3-cert.srl test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ca3-csr.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ca3-key.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ca3.cnf test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ca4-cert.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ca4-cert.srl test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ca4-csr.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ca4-key.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ca4.cnf test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ca5-cert.pem
ca5-cert.srl
ca5-csr.pem
ca5-key.pem
ca5.cnf
ca6-cert.pem
ca6-cert.srl test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ca6-csr.pem
ca6-key.pem
ca6.cnf
cert-without-key.pfx crypto: return clear errors when loading invalid PFX data 2023-09-29 10:56:33 +00:00
dh512.pem
dh1024.pem
dh2048.pem
dherror.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
dns-cert1.cnf
dsa1025.pem
dsa_params.pem test: move dsa keypairs to fixtures/keys/ 2019-06-10 09:56:38 -07:00
dsa_private.pem test: move dsa keypairs to fixtures/keys/ 2019-06-10 09:56:38 -07:00
dsa_private_1025.pem
dsa_private_encrypted.pem test: move dsa keypairs to fixtures/keys/ 2019-06-10 09:56:38 -07:00
dsa_private_encrypted_1025.pem
dsa_private_pkcs8.pem test: move dsa keypairs to fixtures/keys/ 2019-06-10 09:56:38 -07:00
dsa_public.pem test: move dsa keypairs to fixtures/keys/ 2019-06-10 09:56:38 -07:00
dsa_public_1025.pem
ec-cert.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ec-csr.pem
ec-key.pem
ec.cnf test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ec.pfx test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ec10-cert.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ec10-csr.pem
ec10-key.pem
ec10.pfx test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
ec_p256_private.pem crypto: add keyObject.export() 'jwk' format option 2021-02-02 23:16:51 +01:00
ec_p256_public.pem crypto: add keyObject.export() 'jwk' format option 2021-02-02 23:16:51 +01:00
ec_p384_private.pem crypto: add keyObject.export() 'jwk' format option 2021-02-02 23:16:51 +01:00
ec_p384_public.pem crypto: add keyObject.export() 'jwk' format option 2021-02-02 23:16:51 +01:00
ec_p521_private.pem crypto: add keyObject.export() 'jwk' format option 2021-02-02 23:16:51 +01:00
ec_p521_public.pem crypto: add keyObject.export() 'jwk' format option 2021-02-02 23:16:51 +01:00
ec_secp256k1_private.pem crypto: add keyObject.export() 'jwk' format option 2021-02-02 23:16:51 +01:00
ec_secp256k1_public.pem crypto: add keyObject.export() 'jwk' format option 2021-02-02 23:16:51 +01:00
ed448_private.pem test: move ed448 keypairs to fixtures/keys/ 2019-06-10 09:56:41 -07:00
ed448_public.pem test: move ed448 keypairs to fixtures/keys/ 2019-06-10 09:56:41 -07:00
ed25519_private.pem test: move ed25519 keypair to fixtures/keys/ 2019-06-10 09:55:56 -07:00
ed25519_public.pem test: move ed25519 keypair to fixtures/keys/ 2019-06-10 09:55:56 -07:00
fake-cnnic-root-cert.pem
fake-cnnic-root-cert.srl test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
fake-cnnic-root-key.pem
fake-cnnic-root.cnf
fake-startcom-root-cert.pem
fake-startcom-root-database.txt test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
fake-startcom-root-database.txt.attr
fake-startcom-root-database.txt.attr.old
fake-startcom-root-database.txt.old test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
fake-startcom-root-key.pem
fake-startcom-root-serial test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
fake-startcom-root-serial.old test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
fake-startcom-root.cnf
I_AM_THE_WALRUS_sha256_signature_signedby_rsa_private_b.sha256 test: move rsa keypairs to fixtures/keys/ 2019-06-10 09:56:33 -07:00
incorrect_san_correct_subject-cert.pem test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
incorrect_san_correct_subject-key.pem crypto,tls: implement safe x509 GeneralName format 2022-01-10 22:38:05 +00:00
irrelevant_san_correct_subject-cert.pem tls: drop support for URI alternative names 2022-01-10 22:38:05 +00:00
irrelevant_san_correct_subject-key.pem tls: drop support for URI alternative names 2022-01-10 22:38:05 +00:00
Makefile test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
rsa_ca.crt test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
rsa_cert.cnf test: reset validity dates of expired certs 2019-06-28 16:14:36 -07:00
rsa_cert.crt test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
rsa_cert.pfx test: upgrade all 1024 bit RSA keys to 2048 bits 2022-09-27 20:19:35 +02:00
rsa_cert_foafssl_b.cnf test: add comments to the foaf+ssl fixtures 2019-06-10 09:57:41 -07:00
rsa_cert_foafssl_b.crt test: reset validity dates of expired certs 2019-06-28 16:14:36 -07:00
rsa_cert_foafssl_b.exponent test: move foafssl certs to fixtures/keys/ 2019-06-10 09:57:23 -07:00
rsa_cert_foafssl_b.modulus test: move foafssl certs to fixtures/keys/ 2019-06-10 09:57:23 -07:00
rsa_private.pem test: move rsa keypairs to fixtures/keys/ 2019-06-10 09:56:33 -07:00
rsa_private_2048.pem
rsa_private_4096.pem
rsa_private_b.pem test: move rsa keypairs to fixtures/keys/ 2019-06-10 09:56:33 -07:00
rsa_private_encrypted.pem test: move rsa keypairs to fixtures/keys/ 2019-06-10 09:56:33 -07:00
rsa_private_pkcs8.pem test: move rsa keypairs to fixtures/keys/ 2019-06-10 09:56:33 -07:00
rsa_private_pkcs8_bad.pem test: move rsa keypairs to fixtures/keys/ 2019-06-10 09:56:33 -07:00
rsa_pss_private_2048.pem crypto: add support for RSA-PSS keys 2019-04-08 09:22:32 +02:00
rsa_pss_private_2048_sha1_sha1_20.pem crypto: add RSA-PSS params to asymmetricKeyDetails 2021-08-29 20:23:18 +02:00
rsa_pss_private_2048_sha256_sha256_16.pem crypto: add support for RSA-PSS keys 2019-04-08 09:22:32 +02:00
rsa_pss_private_2048_sha512_sha256_20.pem crypto: add support for RSA-PSS keys 2019-04-08 09:22:32 +02:00
rsa_pss_public_2048.pem crypto: add support for RSA-PSS keys 2019-04-08 09:22:32 +02:00
rsa_pss_public_2048_sha1_sha1_20.pem crypto: add RSA-PSS params to asymmetricKeyDetails 2021-08-29 20:23:18 +02:00
rsa_pss_public_2048_sha256_sha256_16.pem crypto: add support for RSA-PSS keys 2019-04-08 09:22:32 +02:00
rsa_pss_public_2048_sha512_sha256_20.pem crypto: add support for RSA-PSS keys 2019-04-08 09:22:32 +02:00
rsa_public.pem test: move rsa keypairs to fixtures/keys/ 2019-06-10 09:56:33 -07:00
rsa_public_2048.pem
rsa_public_4096.pem
rsa_public_b.pem test: move rsa keypairs to fixtures/keys/ 2019-06-10 09:56:33 -07:00
rsa_public_sha1_signature_signedby_rsa_private.sha1 test: move rsa keypairs to fixtures/keys/ 2019-06-10 09:56:33 -07:00
rsa_public_sha1_signature_signedby_rsa_private_pkcs8.sha1 test: move rsa keypairs to fixtures/keys/ 2019-06-10 09:56:33 -07:00
rsa_spkac.spkac test: move spkac certs to fixtures/keys/ 2019-06-10 09:56:49 -07:00
rsa_spkac_invalid.spkac test: move spkac certs to fixtures/keys/ 2019-06-10 09:56:49 -07:00
x448_private.pem test: move x448 keypairs to fixtures/keys/ 2019-06-10 09:56:45 -07:00
x448_public.pem test: move x448 keypairs to fixtures/keys/ 2019-06-10 09:56:45 -07:00
x25519_private.pem test: move x25519 keypair to fixtures/keys/ 2019-06-10 09:56:29 -07:00
x25519_public.pem test: move x25519 keypair to fixtures/keys/ 2019-06-10 09:56:29 -07:00