node/test/fixtures/keys
Shigeki Ohtsu 3beb880716 crypto: add cert check to CNNIC Whitelist
When client connect to the server with certification issued by either
CNNIC Root CA or CNNIC EV Root CA, check hash of server
certification in the list of CNNICHashWhitelist.inc. If it's not,
CERT_REVOKED error returns.

See for details in
https://blog.mozilla.org/security/2015/04/02/distrusting-new-cnnic-certificates/

PR-URL: https://github.com/nodejs/io.js/pull/1895
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
2015-06-16 23:26:29 +09:00
..
0-dns-cert.pem crypto: separate altname extensions with ", " 2014-12-11 00:07:58 +07:00
0-dns-key.pem crypto: escape DNS altname 2014-11-08 02:24:07 +03:00
agent1-cert.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
agent1-csr.pem tls: support OCSP on client and server 2014-04-18 02:21:16 +04:00
agent1-key.pem tls: support OCSP on client and server 2014-04-18 02:21:16 +04:00
agent1.cnf tls: support OCSP on client and server 2014-04-18 02:21:16 +04:00
agent2-cert.pem tls: add ECDH ciphers support 2013-10-30 08:34:47 +01:00
agent2-csr.pem tls: add ECDH ciphers support 2013-10-30 08:34:47 +01:00
agent2-key.pem tls: add ECDH ciphers support 2013-10-30 08:34:47 +01:00
agent2.cnf New keys, agent1-cert.pem was expired 2011-02-09 18:30:47 -08:00
agent3-cert.pem tls: add ECDH ciphers support 2013-10-30 08:34:47 +01:00
agent3-csr.pem tls: add ECDH ciphers support 2013-10-30 08:34:47 +01:00
agent3-key.pem tls: add ECDH ciphers support 2013-10-30 08:34:47 +01:00
agent3.cnf New keys, agent1-cert.pem was expired 2011-02-09 18:30:47 -08:00
agent4-cert.pem tls: add ECDH ciphers support 2013-10-30 08:34:47 +01:00
agent4-csr.pem tls: add ECDH ciphers support 2013-10-30 08:34:47 +01:00
agent4-key.pem tls: add ECDH ciphers support 2013-10-30 08:34:47 +01:00
agent4.cnf New keys, agent1-cert.pem was expired 2011-02-09 18:30:47 -08:00
agent5-cert.pem tls: fix encoding in certificate-related functions 2014-09-15 17:42:20 +04:00
agent5-csr.pem tls: fix encoding in certificate-related functions 2014-09-15 17:42:20 +04:00
agent5-key.pem tls: fix encoding in certificate-related functions 2014-09-15 17:42:20 +04:00
agent5.cnf tls: fix encoding in certificate-related functions 2014-09-15 17:42:20 +04:00
agent6-cert.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
agent6-csr.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
agent6-key.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
agent6.cnf tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
agent7-cert.pem crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
agent7-csr.pem crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
agent7-key.pem crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
agent7.cnf crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
ca1-cert.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca1-cert.srl tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca1-key.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca1.cnf tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca2-cert.pem tls: add ECDH ciphers support 2013-10-30 08:34:47 +01:00
ca2-cert.srl tls: fix encoding in certificate-related functions 2014-09-15 17:42:20 +04:00
ca2-crl.pem tls: add ECDH ciphers support 2013-10-30 08:34:47 +01:00
ca2-database.txt tls: add ECDH ciphers support 2013-10-30 08:34:47 +01:00
ca2-key.pem tls: add ECDH ciphers support 2013-10-30 08:34:47 +01:00
ca2-serial TLS: CRL support 2011-02-10 00:49:15 -08:00
ca2.cnf TLS: CRL support 2011-02-10 00:49:15 -08:00
ca3-cert.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca3-cert.srl tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca3-csr.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca3-key.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca3.cnf tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
dh512.pem tls, crypto: add DHE support 2014-08-29 00:36:48 +04:00
dh1024.pem tls, crypto: add DHE support 2014-08-29 00:36:48 +04:00
dh2048.pem tls, crypto: add DHE support 2014-08-29 00:36:48 +04:00
ec-cert.pem crypto: clear error in GetPeerCertificate 2014-01-26 03:48:36 +04:00
ec-csr.pem crypto: clear error in GetPeerCertificate 2014-01-26 03:48:36 +04:00
ec-key.pem crypto: clear error in GetPeerCertificate 2014-01-26 03:48:36 +04:00
ec.cnf crypto: clear error in GetPeerCertificate 2014-01-26 03:48:36 +04:00
fake-cnnic-root-cert.pem crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
fake-cnnic-root-cert.srl crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
fake-cnnic-root-key.pem crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
fake-cnnic-root.cnf crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
Makefile crypto: add cert check to CNNIC Whitelist 2015-06-16 23:26:29 +09:00
rsa_private_1024.pem benchmark: add rsa/aes-gcm performance test 2015-04-04 12:37:26 +09:00
rsa_private_2048.pem benchmark: add rsa/aes-gcm performance test 2015-04-04 12:37:26 +09:00
rsa_private_4096.pem benchmark: add rsa/aes-gcm performance test 2015-04-04 12:37:26 +09:00
rsa_public_1024.pem benchmark: add rsa/aes-gcm performance test 2015-04-04 12:37:26 +09:00
rsa_public_2048.pem benchmark: add rsa/aes-gcm performance test 2015-04-04 12:37:26 +09:00
rsa_public_4096.pem benchmark: add rsa/aes-gcm performance test 2015-04-04 12:37:26 +09:00