# Copyright (c) 2012 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.

# These certificate trees are for testing only in sealed containers
# so it is okay that we have them checked into a GIT repository.
# Nobody will ever use this information on the open air.

# These are the paths used by install_client_auth_data in site_wifitest.
server_ca_cert_1_install_path = "/tmp/hostapd_ca_cert"
server_cert_1_install_path = "/tmp/hostapd_server_cert"
server_key_1_install_path = "/tmp/hostapd_private_key"
server_expired_cert_install_path = "/tmp/hostapd_expired_server_cert"
server_expired_key_install_path = "/tmp/hostapd_expired_server_key"
client_ca_cert_1_install_path = "/tmp/ca-cert.pem"
client_cert_1_install_path = "/tmp/pkg-client-cert.pem"
client_key_1_install_path = "/tmp/pkg-client-key.pem"
client_ca_cert_2_install_path = "/tmp/ca-cert-other.pem"
client_cert_2_install_path = "/tmp/pkg-client-cert-other.pem"
client_key_2_install_path = "/tmp/pkg-client-key-other.pem"
# These are the key/cert identifiers used when we need the TPM.
ca_cert_1_tpm_key_id = "8711"
cert_1_tpm_key_id = "8712"
key_1_tpm_key_id = "8713"
ca_cert_2_tpm_key_id = "8714"
cert_2_tpm_key_id = "8715"
key_2_tpm_key_id = "8716"

cert_1_nss_cert_id = "nss-ca-cert"
nss_cert_db_path = "/home/chronos/user/.pki/nssdb"
nss_cert_db_user = "chronos"

auth_pin = "1234"
# These are the subject alternative names in server_cert_3.
server_cert_3_altsubject_match = [{
    "Type": "DNS",
    "Value": "www.example.com",
}, {
    "Type": "DNS",
    "Value": "mail.example.com",
}, {
    "Type": "EMAIL",
    "Value": "example@domain.com",
}]

ca_cert_1 = """-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
"""
server_cert_1 = """-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
"""
server_private_key_1 = """-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
"""
client_cert_1 = """-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
"""
client_private_key_1 = """-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
"""

# The following certs are generated with the same CA as above
# but are expired.
server_expired_cert = """-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
"""
server_expired_key = """-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
"""

# The following certs are generated with a different CA (both
# the private key and the Common Name of the CA are different)
ca_cert_2 = """-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
"""
server_cert_2 = """-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
"""
server_private_key_2 = """-----BEGIN RSA PRIVATE KEY-----
MIICWwIBAAKBgQDGTK8KIl0SgzmR24Z+BSl3I/hXasAEBp8lTsL8y2rfWJ62eNsA
/Nq2R1UiTijIiVQ9bKyqWnYU6rr+Y2moKrI/44A566B1AOhSHF8X6M490bPzBrbv
9mGgm+cN9oHp9ClilHZAauBQt5t7iZAoAYr037p+3NdiH5m81oR6zQc+DwIDAQAB
AoGAVuNK3znnZjExjIOQDq/cV2PfcQ5JTHpKSWKVdYb8MRj3kiSqcWhZvPzMhNeS
bywdSTzQ+2Pf0ZJ4lPaiWRk8OJPfWrF4QdjUc33Lx5kshS602173o+tfawaDOgUi
s6PRLA5i8fxnNdim44YRi275mq8weAp5K/nAN5IXXU+GpiECQQD4x1F+GtpXxz9+
ufaWmyVzTgUiWDM0XHnr9ahnLMTUvMRCdwzcMlkeo5nbNqQzcclidSALugktmrzn
Jubtmgo9AkEAzA5BCNQh8X9jr4RYukDNmPf46ZXOPWh6L0yAjQtAYT6eZUMO57X4
dGABhDnoN7+UCT4IB+mehtZfKUAgzyqKOwJAdiKoRxrXTlGWjEYgm7oG2a9V7s41
WosDdpJMKtpuiZsuE2XXHIVoHo2P1TIoXSmOeQuncQohq59MTvQBOxkn/QJANAM6
Hob78/O1tCp291rHTUN/5gJyZIK6Ck5kwg7pJSBx/Xu/U961auyB1nNwNq2VjVmL
cIDjEJmZ/gjDlCrSuwJAaZ8gqOSwOhoeLX4ki7I1eFc/Q/jnb6CFQjZ+Nb38sYDv
/O79yd2xBUAsL4sNkbukmMFEuK85bhNieUWe7O0B+g==
-----END RSA PRIVATE KEY-----
"""
client_cert_2 = """-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
"""
client_private_key_2 = """-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
"""
dh1024_pem_key_1 = """-----BEGIN DH PARAMETERS-----
MIGHAoGBAL/YrUzFuA5cPGzhXVqTvDugmPi9CpbWZx2+TCTKxZSjNiVJxcICSnql
uZtkR3sOAiWn384E4ZQTBrYPUguOuFfbMTRooADhezaG9SXtrE9oeVy9avIO7xQK
emZydO0bAsRV+eL0XkjGhSyhKoOvSIXaCbJUn7duEsfkICPRLWCrAgEC
-----END DH PARAMETERS-----
"""
# This cert is used for authenticating via ONC.
client_cert_1_pkcs12 = """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"""
ca_cert_3 = """-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
"""
# The following certificate has been issued by ca_cert_3.
server_cert_3 = """-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
"""
server_private_key_3 = """-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
"""