amass/qt6windows7
1
0
Fork 0
mirror of https://github.com/crystalidea/qt6windows7.git synced 2024-11-27 14:38:28 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity
7018d9e6c8
qt6windows7/tests/auto/network/ssl/qsslcertificate/verify-certs
History
kleuter 85d238dfda qt 6.5.1 original
2023-10-29 23:33:08 +01:00
..
cacert.pem qt 6.5.1 original 2023-10-29 23:33:08 +01:00
README qt 6.5.1 original 2023-10-29 23:33:08 +01:00
test-addons-mozilla-org-cert.pem qt 6.5.1 original 2023-10-29 23:33:08 +01:00
test-intermediate-ca-cert.pem qt 6.5.1 original 2023-10-29 23:33:08 +01:00
test-intermediate-is-ca-cert.pem qt 6.5.1 original 2023-10-29 23:33:08 +01:00
test-intermediate-not-ca-cert.pem qt 6.5.1 original 2023-10-29 23:33:08 +01:00
test-ocsp-good-cert.pem qt 6.5.1 original 2023-10-29 23:33:08 +01:00

README 

openssl verify -CAfile cacert.pem -untrusted test-intermediate-ca-cert.pem test-intermediate-is-ca-cert.pem
openssl verify -CAfile cacert.pem -untrusted test-ocsp-good-cert.pem test-intermediate-not-ca-cert.pem

1. cacert.pem is, obviously, a root CA certificate.
2. test-intermediate-ca-cert.pem is a certificate, signed by the root CA, an intermediate CA.
3. test-intermediate-is-ca-cert.pem is a certificate, signed by test-intermediate-ca-cert.pem.
4. test-ocsp-good-cert.pem is signed by root CA, it has CA:FALSE but keyUsage allowing to sign
   CSRs - this is how OpenSSL would report us 'invalid CA certificate' instead of 'No issuer found'.
5. test-intermediate-not-ca-cert.pem is signed by test-ocsp-good-cert.pem.