• Home
Name Date Size #Lines LOC

..--

ReadmeD12-May-20241.8 KiB4838

cert11.crtD12-May-20241.1 KiB1918

cert12.crtD12-May-20241.1 KiB2019

cert13.crtD12-May-20241.1 KiB2019

cert14.crtD12-May-20241.1 KiB2019

cert21.crtD12-May-20241.1 KiB1918

cert22.crtD12-May-20241.1 KiB2019

cert23.crtD12-May-20241.1 KiB2019

cert31.crtD12-May-20241.1 KiB1918

cert32.crtD12-May-20241.1 KiB2019

cert33.crtD12-May-20241.1 KiB2019

cert34.crtD12-May-20241.1 KiB2019

cert41.crtD12-May-20241.1 KiB1918

cert42.crtD12-May-20241.1 KiB2019

cert43.crtD12-May-20241.1 KiB2019

cert44.crtD12-May-20241.1 KiB2019

cert45.crtD12-May-20241.1 KiB2019

cert51.crtD12-May-20241.1 KiB1918

cert52.crtD12-May-20241.1 KiB2019

cert53.crtD12-May-20241.1 KiB2019

cert54.crtD12-May-20241.1 KiB2019

cert61.crtD12-May-20241.1 KiB1918

cert62.crtD12-May-20241.1 KiB2019

cert63.crtD12-May-20241.1 KiB2019

cert71.crtD12-May-20241.1 KiB1918

cert72.crtD12-May-20241.1 KiB2019

cert73.crtD12-May-20241.1 KiB2019

cert74.crtD12-May-20241.1 KiB2019

cert81.crtD12-May-2024631 1211

cert82.crtD12-May-2024635 1211

cert83.crtD12-May-2024623 1211

cert91.crtD12-May-2024635 1211

cert92.crtD12-May-2024627 1211

Readme

1This directory contains the certificates for the tests targeting the enforcement of the policy indicated by the *pathLenConstraint* field. All leaf elements were generated with *is_ca* unset and all roots with the *selfsign=1* option.
2
31. zero pathlen constraint on an intermediate CA (invalid)
4```
5cert11.crt -> cert12.crt (max_pathlen=0) -> cert13.crt -> cert14.crt
6```
7
82. zero pathlen constraint on the root CA (invalid)
9```
10cert21.crt (max_pathlen=0) -> cert22.crt -> cert23.crt
11```
12
133. nonzero pathlen constraint on the root CA (invalid)
14```
15cert31.crt (max_pathlen=1) -> cert32.crt -> cert33.crt -> cert34.crt
16```
17
184. nonzero pathlen constraint on an intermediate CA (invalid)
19```
20cert41.crt -> cert42.crt (max_pathlen=1) -> cert43.crt -> cert44.crt -> cert45.crt
21```
22
235. nonzero pathlen constraint on an intermediate CA with maximum number of elements in the chain (valid)
24```
25cert51.crt -> cert52.crt (max_pathlen=1) -> cert53.crt -> cert54.crt
26```
27
286. nonzero pathlen constraint on the root CA with maximum number of elements in the chain (valid)
29```
30cert61.crt (max_pathlen=1) -> cert62.crt -> cert63.crt
31```
32
337. pathlen constraint on the root CA with maximum number of elements and a self signed certificate in the chain (valid)
34(This situation happens for example when a root of some hierarchy gets integrated into another hierarchy. In this case the certificates issued before the integration will have an intermadiate self signed certificate in their chain)
35```
36cert71.crt (max_pathlen=1) -> cert72.crt -> cert73.crt (self signed) -> cert74.crt -> cert74.crt
37```
38
398. zero pathlen constraint on first intermediate CA (valid)
40```
41cert81.crt -> cert82.crt (max_pathlen=0) -> cert83.crt
42```
43
449. zero pathlen constraint on trusted root (valid)
45```
46cert91.crt (max_pathlen=0) -> cert92.crt
47```
48