gitroo-admin/node
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
node/test/fixtures/keys
History
Exact
Shigeki Ohtsu c6f6b029a1
 crypto: add cert check issued by StartCom/WoSign 
When tls client connects to the server with certification issued by
either StartCom or WoSign listed in StartComAndWoSignData.inc, check
notBefore of the server certificate and CERT_REVOKED error returns if
it is after 00:00:00 on October 21, 2016.

See for details in
https://blog.mozilla.org/security/2016/10/24/distrusting-new-wosign-and-startcom-certificates/,
https://security.googleblog.com/2016/10/distrusting-wosign-and-startcom.html
and
https://support.apple.com/en-us/HT204132

Fixes: https://github.com/nodejs/node/issues/9434
PR-URL: https://github.com/nodejs/node/pull/9469
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Fedor Indutny <fedor.indutny@gmail.com>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
2017-03-08 17:29:37 -08:00
..
fake-startcom-root-issued-certs crypto: add cert check issued by StartCom/WoSign 2017-03-08 17:29:37 -08:00
0-dns-cert.pem crypto: separate altname extensions with ", " 2014-12-11 00:07:58 +07:00
0-dns-key.pem crypto: escape DNS altname 2014-11-08 02:24:07 +03:00
agent1-cert.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
agent1-csr.pem tls: support OCSP on client and server 2014-04-18 02:21:16 +04:00
agent1-key.pem tls: support OCSP on client and server 2014-04-18 02:21:16 +04:00
agent1-pfx.pem test: enable to work pkcs12 test in FIPS mode 2016-03-02 14:01:11 -08:00
agent1.cnf tls: support OCSP on client and server 2014-04-18 02:21:16 +04:00
agent2-cert.pem tls: add ECDH ciphers support 2013-10-30 08:34:47 +01:00
agent2-csr.pem tls: add ECDH ciphers support 2013-10-30 08:34:47 +01:00
agent2-key.pem tls: add ECDH ciphers support 2013-10-30 08:34:47 +01:00
agent2.cnf
agent3-cert.pem test: stronger crypto in test fixtures 2015-12-23 08:38:33 -08:00
agent3-csr.pem tls: add ECDH ciphers support 2013-10-30 08:34:47 +01:00
agent3-key.pem tls: add ECDH ciphers support 2013-10-30 08:34:47 +01:00
agent3.cnf
agent4-cert.pem test: stronger crypto in test fixtures 2015-12-23 08:38:33 -08:00
agent4-csr.pem tls: add ECDH ciphers support 2013-10-30 08:34:47 +01:00
agent4-key.pem tls: add ECDH ciphers support 2013-10-30 08:34:47 +01:00
agent4.cnf
agent5-cert.pem test: stronger crypto in test fixtures 2015-12-23 08:38:33 -08:00
agent5-csr.pem tls: fix encoding in certificate-related functions 2014-09-15 17:42:20 +04:00
agent5-key.pem tls: fix encoding in certificate-related functions 2014-09-15 17:42:20 +04:00
agent5.cnf tls: fix encoding in certificate-related functions 2014-09-15 17:42:20 +04:00
agent6-cert.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
agent6-csr.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
agent6-key.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
agent6.cnf tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
agent7-cert.pem crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
agent7-csr.pem crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
agent7-key.pem crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
agent7.cnf crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
agent8-cert.pem crypto: add cert check issued by StartCom/WoSign 2017-03-08 17:29:37 -08:00
agent8-csr.pem crypto: add cert check issued by StartCom/WoSign 2017-03-08 17:29:37 -08:00
agent8-key.pem crypto: add cert check issued by StartCom/WoSign 2017-03-08 17:29:37 -08:00
agent8.cnf crypto: add cert check issued by StartCom/WoSign 2017-03-08 17:29:37 -08:00
agent9-cert.pem crypto: add cert check issued by StartCom/WoSign 2017-03-08 17:29:37 -08:00
agent9-csr.pem crypto: add cert check issued by StartCom/WoSign 2017-03-08 17:29:37 -08:00
agent9-key.pem crypto: add cert check issued by StartCom/WoSign 2017-03-08 17:29:37 -08:00
agent9.cnf crypto: add cert check issued by StartCom/WoSign 2017-03-08 17:29:37 -08:00
ca1-cert.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca1-cert.srl tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca1-key.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca1.cnf tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca2-cert.pem test: stronger crypto in test fixtures 2015-12-23 08:38:33 -08:00
ca2-cert.srl test: stronger crypto in test fixtures 2015-12-23 08:38:33 -08:00
ca2-crl.pem test: stronger crypto in test fixtures 2015-12-23 08:38:33 -08:00
ca2-database.txt test: stronger crypto in test fixtures 2015-12-23 08:38:33 -08:00
ca2-key.pem test: stronger crypto in test fixtures 2015-12-23 08:38:33 -08:00
ca2-serial
ca2.cnf test: stronger crypto in test fixtures 2015-12-23 08:38:33 -08:00
ca3-cert.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca3-cert.srl tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca3-csr.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca3-key.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca3.cnf tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
dh512.pem tls, crypto: add DHE support 2014-08-29 00:36:48 +04:00
dh1024.pem tls, crypto: add DHE support 2014-08-29 00:36:48 +04:00
dh2048.pem tls, crypto: add DHE support 2014-08-29 00:36:48 +04:00
dsa1025.pem test: add test for invalid DSA key size 2015-12-23 08:38:33 -08:00
dsa_private_1025.pem test: add test for invalid DSA key size 2015-12-23 08:38:33 -08:00
dsa_public_1025.pem test: add test for invalid DSA key size 2015-12-23 08:38:33 -08:00
ec-cert.pem crypto: clear error in GetPeerCertificate 2014-01-26 03:48:36 +04:00
ec-csr.pem crypto: clear error in GetPeerCertificate 2014-01-26 03:48:36 +04:00
ec-key.pem crypto: clear error in GetPeerCertificate 2014-01-26 03:48:36 +04:00
ec.cnf crypto: clear error in GetPeerCertificate 2014-01-26 03:48:36 +04:00
fake-cnnic-root-cert.pem crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
fake-cnnic-root-cert.srl crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
fake-cnnic-root-key.pem crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
fake-cnnic-root.cnf crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
fake-startcom-root-cert.pem crypto: add cert check issued by StartCom/WoSign 2017-03-08 17:29:37 -08:00
fake-startcom-root-csr.pem crypto: add cert check issued by StartCom/WoSign 2017-03-08 17:29:37 -08:00
fake-startcom-root-database.txt crypto: add cert check issued by StartCom/WoSign 2017-03-08 17:29:37 -08:00
fake-startcom-root-database.txt.attr crypto: add cert check issued by StartCom/WoSign 2017-03-08 17:29:37 -08:00
fake-startcom-root-database.txt.attr.old crypto: add cert check issued by StartCom/WoSign 2017-03-08 17:29:37 -08:00
fake-startcom-root-database.txt.old crypto: add cert check issued by StartCom/WoSign 2017-03-08 17:29:37 -08:00
fake-startcom-root-key.pem crypto: add cert check issued by StartCom/WoSign 2017-03-08 17:29:37 -08:00
fake-startcom-root-serial crypto: add cert check issued by StartCom/WoSign 2017-03-08 17:29:37 -08:00
fake-startcom-root-serial.old crypto: add cert check issued by StartCom/WoSign 2017-03-08 17:29:37 -08:00
fake-startcom-root.cnf crypto: add cert check issued by StartCom/WoSign 2017-03-08 17:29:37 -08:00
Makefile crypto: add cert check issued by StartCom/WoSign 2017-03-08 17:29:37 -08:00
rsa_private_1024.pem benchmark: add rsa/aes-gcm performance test 2015-04-04 12:37:26 +09:00
rsa_private_2048.pem benchmark: add rsa/aes-gcm performance test 2015-04-04 12:37:26 +09:00
rsa_private_4096.pem benchmark: add rsa/aes-gcm performance test 2015-04-04 12:37:26 +09:00
rsa_public_1024.pem benchmark: add rsa/aes-gcm performance test 2015-04-04 12:37:26 +09:00
rsa_public_2048.pem benchmark: add rsa/aes-gcm performance test 2015-04-04 12:37:26 +09:00
rsa_public_4096.pem benchmark: add rsa/aes-gcm performance test 2015-04-04 12:37:26 +09:00