gitroo-admin/node
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
node/test/fixtures/keys
History
Exact
Shigeki Ohtsu 3beb880716 crypto: add cert check to CNNIC Whitelist 
When client connect to the server with certification issued by either
CNNIC Root CA or CNNIC EV Root CA, check hash of server
certification in the list of CNNICHashWhitelist.inc. If it's not,
CERT_REVOKED error returns.

See for details in
https://blog.mozilla.org/security/2015/04/02/distrusting-new-cnnic-certificates/

PR-URL: https://github.com/nodejs/io.js/pull/1895
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
2015-06-16 23:26:29 +09:00
..
0-dns-cert.pem
0-dns-key.pem
agent1-cert.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
agent1-csr.pem
agent1-key.pem
agent1.cnf
agent2-cert.pem
agent2-csr.pem
agent2-key.pem
agent2.cnf
agent3-cert.pem
agent3-csr.pem
agent3-key.pem
agent3.cnf
agent4-cert.pem
agent4-csr.pem
agent4-key.pem
agent4.cnf
agent5-cert.pem
agent5-csr.pem
agent5-key.pem
agent5.cnf
agent6-cert.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
agent6-csr.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
agent6-key.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
agent6.cnf tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
agent7-cert.pem crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
agent7-csr.pem crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
agent7-key.pem crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
agent7.cnf crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
ca1-cert.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca1-cert.srl tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca1-key.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca1.cnf tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca2-cert.pem
ca2-cert.srl
ca2-crl.pem
ca2-database.txt
ca2-key.pem
ca2-serial
ca2.cnf
ca3-cert.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca3-cert.srl tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca3-csr.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca3-key.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca3.cnf tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
dh512.pem
dh1024.pem
dh2048.pem
ec-cert.pem
ec-csr.pem
ec-key.pem
ec.cnf
fake-cnnic-root-cert.pem crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
fake-cnnic-root-cert.srl crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
fake-cnnic-root-key.pem crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
fake-cnnic-root.cnf crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
Makefile crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
rsa_private_1024.pem
rsa_private_2048.pem
rsa_private_4096.pem
rsa_public_1024.pem
rsa_public_2048.pem
rsa_public_4096.pem