1a8e1175bSopenharmony_ci[req]
2a8e1175bSopenharmony_cix509_extensions = v3_ca
3a8e1175bSopenharmony_cidistinguished_name = req_dn
4a8e1175bSopenharmony_ci
5a8e1175bSopenharmony_ci[req_dn]
6a8e1175bSopenharmony_cicountryName = NL
7a8e1175bSopenharmony_ciorganizationalUnitName = PolarSSL
8a8e1175bSopenharmony_cicommonName = PolarSSL Test CA
9a8e1175bSopenharmony_ci
10a8e1175bSopenharmony_ci[v3_ca]
11a8e1175bSopenharmony_cisubjectKeyIdentifier=hash
12a8e1175bSopenharmony_ciauthorityKeyIdentifier=keyid:always,issuer:always
13a8e1175bSopenharmony_cibasicConstraints = CA:true
14a8e1175bSopenharmony_ci
15a8e1175bSopenharmony_ci[no_subj_auth_id]
16a8e1175bSopenharmony_cisubjectKeyIdentifier=none
17a8e1175bSopenharmony_ciauthorityKeyIdentifier=none
18a8e1175bSopenharmony_cibasicConstraints = CA:true
19a8e1175bSopenharmony_ci
20a8e1175bSopenharmony_ci[othername_san]
21a8e1175bSopenharmony_cisubjectAltName=otherName:1.3.6.1.5.5.7.8.4;SEQ:hw_module_name
22a8e1175bSopenharmony_ci
23a8e1175bSopenharmony_ci[nonprintable_othername_san]
24a8e1175bSopenharmony_cisubjectAltName=otherName:1.3.6.1.5.5.7.8.4;SEQ:nonprintable_hw_module_name
25a8e1175bSopenharmony_ci
26a8e1175bSopenharmony_ci[unsupported_othername_san]
27a8e1175bSopenharmony_cisubjectAltName=otherName:1.2.3.4;UTF8:some other identifier
28a8e1175bSopenharmony_ci
29a8e1175bSopenharmony_ci[dns_alt_names]
30a8e1175bSopenharmony_cisubjectAltName=DNS:example.com, DNS:example.net, DNS:*.example.org
31a8e1175bSopenharmony_ci
32a8e1175bSopenharmony_ci[rfc822name_names]
33a8e1175bSopenharmony_cisubjectAltName=email:my@other.address,email:second@other.address
34a8e1175bSopenharmony_ci
35a8e1175bSopenharmony_ci[alt_names]
36a8e1175bSopenharmony_ciDNS.1=example.com
37a8e1175bSopenharmony_ciotherName.1=1.3.6.1.5.5.7.8.4;SEQ:hw_module_name
38a8e1175bSopenharmony_ciDNS.2=example.net
39a8e1175bSopenharmony_ciDNS.3=*.example.org
40a8e1175bSopenharmony_ci
41a8e1175bSopenharmony_ci[multiple_san]
42a8e1175bSopenharmony_cisubjectAltName=@alt_names
43a8e1175bSopenharmony_ci
44a8e1175bSopenharmony_ci[ext_multi_nocn]
45a8e1175bSopenharmony_cibasicConstraints = CA:false
46a8e1175bSopenharmony_cikeyUsage = digitalSignature, nonRepudiation, keyEncipherment
47a8e1175bSopenharmony_cisubjectAltName = DNS:www.shotokan-braunschweig.de,DNS:www.massimo-abate.eu,IP:192.168.1.1,IP:192.168.69.144
48a8e1175bSopenharmony_ci
49a8e1175bSopenharmony_ci[hw_module_name]
50a8e1175bSopenharmony_cihwtype = OID:1.3.6.1.4.1.17.3
51a8e1175bSopenharmony_cihwserial = OCT:123456
52a8e1175bSopenharmony_ci
53a8e1175bSopenharmony_ci[nonprintable_hw_module_name]
54a8e1175bSopenharmony_cihwtype = OID:1.3.6.1.4.1.17.3
55a8e1175bSopenharmony_cihwserial = FORMAT:HEX, OCT:3132338081008180333231
56a8e1175bSopenharmony_ci
57a8e1175bSopenharmony_ci[v3_any_policy_ca]
58a8e1175bSopenharmony_cibasicConstraints = CA:true
59a8e1175bSopenharmony_cicertificatePolicies = 2.5.29.32.0
60a8e1175bSopenharmony_ci
61a8e1175bSopenharmony_ci[v3_any_policy_qualifier_ca]
62a8e1175bSopenharmony_cibasicConstraints = CA:true
63a8e1175bSopenharmony_cicertificatePolicies = @policy_info
64a8e1175bSopenharmony_ci
65a8e1175bSopenharmony_ci[v3_multi_policy_ca]
66a8e1175bSopenharmony_cibasicConstraints = CA:true
67a8e1175bSopenharmony_cicertificatePolicies = 1.2.3.4,2.5.29.32.0
68a8e1175bSopenharmony_ci
69a8e1175bSopenharmony_ci[v3_unsupported_policy_ca]
70a8e1175bSopenharmony_cibasicConstraints = CA:true
71a8e1175bSopenharmony_cicertificatePolicies = 1.2.3.4
72a8e1175bSopenharmony_ci
73a8e1175bSopenharmony_ci[policy_info]
74a8e1175bSopenharmony_cipolicyIdentifier = 2.5.29.32.0
75a8e1175bSopenharmony_ciCPS.1 ="CPS uri string"
76a8e1175bSopenharmony_ci
77a8e1175bSopenharmony_ci[fan_cert]
78a8e1175bSopenharmony_ciextendedKeyUsage = 1.3.6.1.4.1.45605.1
79a8e1175bSopenharmony_ci
80a8e1175bSopenharmony_ci[noext_ca]
81a8e1175bSopenharmony_cibasicConstraints = CA:true
82a8e1175bSopenharmony_ci
83a8e1175bSopenharmony_ci[test_ca]
84a8e1175bSopenharmony_cidatabase = /dev/null
85a8e1175bSopenharmony_ci
86a8e1175bSopenharmony_ci[crl_ext_idp]
87a8e1175bSopenharmony_ciissuingDistributionPoint=critical, @idpdata
88a8e1175bSopenharmony_ci
89a8e1175bSopenharmony_ci[crl_ext_idp_nc]
90a8e1175bSopenharmony_ciissuingDistributionPoint=@idpdata
91a8e1175bSopenharmony_ci
92a8e1175bSopenharmony_ci[idpdata]
93a8e1175bSopenharmony_cifullname=URI:http://pki.example.com/
94a8e1175bSopenharmony_ci
95a8e1175bSopenharmony_ci# these IPs are the ascii values for 'abcd' and 'abcd.example.com'
96a8e1175bSopenharmony_ci[tricky_ip_san]
97a8e1175bSopenharmony_cisubjectAltName=IP:97.98.99.100,IP:6162:6364:2e65:7861:6d70:6c65:2e63:6f6d
98a8e1175bSopenharmony_ci
99a8e1175bSopenharmony_ci[csr_ext_v3_keyUsage]
100a8e1175bSopenharmony_cikeyUsage = digitalSignature, keyEncipherment
101a8e1175bSopenharmony_ci
102a8e1175bSopenharmony_ci[csr_ext_v3_subjectAltName]
103a8e1175bSopenharmony_cisubjectAltName=DNS:example.com, DNS:example.net, DNS:*.example.org
104a8e1175bSopenharmony_ci
105a8e1175bSopenharmony_ci[csr_ext_v3_nsCertType]
106a8e1175bSopenharmony_cinsCertType=server
107a8e1175bSopenharmony_ci
108a8e1175bSopenharmony_ci[csr_ext_v3_all]
109a8e1175bSopenharmony_cikeyUsage = cRLSign
110a8e1175bSopenharmony_cisubjectAltName=otherName:1.3.6.1.5.5.7.8.4;SEQ:nonprintable_hw_module_name
111a8e1175bSopenharmony_cinsCertType=client
112a8e1175bSopenharmony_ci
113a8e1175bSopenharmony_ci[directory_name_san]
114a8e1175bSopenharmony_cisubjectAltName=dirName:dirname_sect
115a8e1175bSopenharmony_ci
116a8e1175bSopenharmony_ci[two_directorynames]
117a8e1175bSopenharmony_cisubjectAltName=dirName:dirname_sect, dirName:dirname_to_malform
118a8e1175bSopenharmony_ci
119a8e1175bSopenharmony_ci[dirname_sect]
120a8e1175bSopenharmony_ciC=UK
121a8e1175bSopenharmony_ciO=Mbed TLS
122a8e1175bSopenharmony_ciCN=Mbed TLS directoryName SAN
123a8e1175bSopenharmony_ci
124a8e1175bSopenharmony_ci[dirname_to_malform]
125a8e1175bSopenharmony_ciO=MALFORM_ME
126